last executing test programs: 16m2.858512044s ago: executing program 32 (id=264): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) socket$netlink(0x10, 0x3, 0xa) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') syz_open_procfs(0x0, &(0x7f00000004c0)='loginuid\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e26, @private=0xa010102}, {0x2, 0x4e21, @local}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4a, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 15m17.467645697s ago: executing program 33 (id=304): syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x6f67}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000300)=""/141, &(0x7f00000003c0)=0x8d) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 14m46.135658881s ago: executing program 2 (id=356): socket$nl_route(0x10, 0x3, 0x0) unshare(0x2020480) unshare(0x200) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000004c0)=0x3) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xff, @private2, 0x2}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 14m44.505191296s ago: executing program 2 (id=360): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@orlov}, {@data_err_ignore}, {@grpquota}, {@abort}, {@resgid}, {@bh}, {@nouid32}]}, 0x1, 0x56d, &(0x7f0000000880)="$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") sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chdir(&(0x7f0000000040)='./file0\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x13b) landlock_restrict_self(r2, 0x0) r3 = fanotify_init(0x200, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r3, 0x101, 0x4000106b, r4, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000300)={'#! ', '', [], 0xa, "f3"}, 0x5) 14m30.994538933s ago: executing program 2 (id=377): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280), 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) write$binfmt_misc(r0, &(0x7f00000001c0)="d1", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107b42, 0x32) ftruncate(r2, 0x6000000) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x800) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x7, 0xfffffffffdffffff}) 14m27.521030285s ago: executing program 2 (id=382): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000180)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@grpquota}]}, 0xd, 0x5e1, &(0x7f0000001200)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020) 14m21.217639382s ago: executing program 2 (id=388): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket(0x2b, 0x80000, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 14m17.591523874s ago: executing program 2 (id=392): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)={0x6, {{0x2, 0x4e25, @multicast2}}, 0x1}, 0x90) 14m15.035703872s ago: executing program 34 (id=392): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)={0x6, {{0x2, 0x4e25, @multicast2}}, 0x1}, 0x90) 12m48.591628736s ago: executing program 6 (id=533): socket$nl_route(0x10, 0x3, 0x0) unshare(0x2020480) unshare(0x200) pipe2(&(0x7f0000000100), 0x800) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 12m41.672645819s ago: executing program 6 (id=541): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x42000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x82) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0502460c"], 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000440)={"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"}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) 12m39.467681497s ago: executing program 6 (id=546): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xff, 0x8, 0x7fffffff}]}) r1 = socket$packet(0x11, 0x3, 0x300) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x1020008, &(0x7f0000000980)=ANY=[@ANYRES64=0x0], 0x3e, 0x729, &(0x7f00000009c0)="$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") socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f00000000c0)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x69, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 12m35.543615066s ago: executing program 6 (id=553): openat$tun(0xffffffffffffff9c, 0x0, 0x781000, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000200)='./file1\x00', 0x1000010, &(0x7f0000000240)=ANY=[], 0x1, 0x1a1, &(0x7f0000000440)="$eJzs0L9rE2Ecx/H393me/KhYNSoOFWzAYrxQTXJVB6fgFCEHDo4GDWlsiokaz8GWFrpIQaodXB3c6qiCTiIKzsXNQc+lm/SG4iAOcnKXq+Df0Oc13Oe+n+Oe5+Hp+UM/B/zZWepQJ6E5wGcEA0xKUu1XavTt7WjmR5rro+BSOq+l+SLNCX9h8Va73+/eK14sUvivAH4m3b/Kf8UxRSjUkS87S5223PCI6gzUrEehSfkxusXQecKEGefodTRRaY3LiqGUmnCwcn9wt+IvLJ6ZH7TnunPd2647c6F6rlo971Zuzve71TeI80gUz1nG8ch5jDnLZFo83DT7mBbE6alASzkk22J9U58+OR2inG0ihA+lkNw30yuqq5wify0+fIMjQhHtMdVkTGFINmogV9RreQb8yijyK1qf7dzpz65GWn5nN+qynZfaFplSDbdcYya+Gg7zkdWAqYBGwEbA1ncm5V28y+69mpX4+TKdjnMCsjwQA7UsfBLjPT0EuAUYT5ZTybkK8D79Jw2+7r5YlmVZlmVZlmVZe8DfAAAA//+DP2H9") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, 0x0, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 12m33.218804111s ago: executing program 6 (id=554): r0 = eventfd2(0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x41, 0x8000038, r5, 0x0) fanotify_mark(0xffffffffffffffff, 0x80, 0x20, r5, 0x0) io_setup(0x4, &(0x7f0000000400)=0x0) io_submit(r6, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 12m31.468382013s ago: executing program 6 (id=557): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e0000"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r1, 0x0, 0x0}, 0x10) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r6, 0x0, 0xfdef) close(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x3, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0) 12m14.771715335s ago: executing program 35 (id=557): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e0000"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r1, 0x0, 0x0}, 0x10) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r6, 0x0, 0xfdef) close(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x3, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0) 12m12.155149417s ago: executing program 3 (id=579): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xff, 0x8, 0x7fffffff}]}) r1 = socket$packet(0x11, 0x3, 0x300) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x1020008, &(0x7f0000000980)=ANY=[@ANYRES64=0x0], 0x3e, 0x729, &(0x7f00000009c0)="$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") socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f00000000c0)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x69, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 12m5.602894529s ago: executing program 3 (id=585): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8c57, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xf5, 0x2e6, &(0x7f0000000540)="$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") syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x22010}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30000100", @ANYRES16=r2, @ANYBLOB="00012dbd7000ffdbdf250400000008000500040000000c00018008000600776c6300080005000f000000"], 0x30}, 0x1, 0x0, 0x0, 0x24040000}, 0x4080) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000340)={'wg0\x00'}) r3 = socket$inet6(0xa, 0x3, 0xfa) setsockopt$inet6_int(r3, 0x29, 0x3e, &(0x7f0000000380)=0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1acd060, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f00000003c0)=ANY=[], 0xb8) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20002) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r7, 0x40045402, &(0x7f0000000140)=0x1) 11m56.786113913s ago: executing program 3 (id=594): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000f0200006706000020000000620a00ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a08a503ea6d54f7f3125a8200578ac0836d6454745e70a27444003c5b20451b624db6f5320e9befc1e00b8b32917c4d30d16b7edb732bc3ac330b16c442aff70d27659bc58e296b16750c5577c848754b4894b07f15bab1c640a5c0c4fd62f9db829b301ef67fd2b2736f3af0c54af2412313b17c4c8081c4ed0572261960e227d34cfbfdb247bc2351c9d8363a8cb18b7330604da78b0aba47545f9a25a80dd7d28a5ae41824f611dd2de6dd581c52698f9542a444a8a3969946faded5275c00"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = fcntl$dupfd(r0, 0x0, r0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', r1}, 0x18) 11m51.265735204s ago: executing program 3 (id=599): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x8000, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000400)='./file0\x00', 0x2a10c80, &(0x7f0000000500)=ANY=[], 0x1, 0x1b4, &(0x7f0000000780)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000ac0)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) io_uring_setup(0x6e1e, &(0x7f0000000100)={0x0, 0x23d4, 0x10, 0xfffffffc, 0x87}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @host}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000240)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) 11m48.775378519s ago: executing program 3 (id=601): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x20000014) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2001}, 0x0) request_key(0xfffffffffffffffc, 0x0, 0x0, 0x0) 11m39.959540652s ago: executing program 3 (id=612): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r3, &(0x7f0000000040)="0600", 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x380000}, 0x8) sendfile(r3, r3, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") 11m23.911918057s ago: executing program 36 (id=612): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r3, &(0x7f0000000040)="0600", 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x380000}, 0x8) sendfile(r3, r3, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") 10m7.875052164s ago: executing program 5 (id=691): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c9100a000600ebcff96b29fee2bc"], 0xf) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04"], 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) socket$nl_generic(0x10, 0x3, 0x10) 10m2.557422574s ago: executing program 5 (id=695): open(0x0, 0x4827e, 0xdc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000040)={0xd, 0x9}) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRES16], 0x2, 0xc36, &(0x7f0000002540)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIRRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2SEmV9Pjb13Z19b/a9eeMZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr56+qz7PwA8Vq75/38AAAAAAAAAAAAAADjoUhTxZKSYvbKaxqr3HfXL7b7bd0aHhreudiRVNQ9V5cuf+pmz585/6YXBC9283J7+gPp77bPx2si1S42XZ27Nzk3Oz09ONEan2+MzE5M73sNu6292sjoAjVuv3564cWO+cfb5cxs+vjPwfv8TxwcuDj576plu2dGh4eGR9SL13vK1+25Ix3YzPA5HEacixXPf+2lqRUQRuz8W9Qc79psdqTpxsurE6NBw1ZGpdmt6ofzwavdAFBGNnkrN7jHaeiyi1vdA+7C9ZsRi2fyywSfL7o3MtuZa16cmG1dbcwvthfbM9NXUaW3Zn0YUcSFFLEXESv+9u+uLImqR4jvHVtP1iDjUPQ5frCYGb9+OYh/7uANlOxt9EUvFIzBmB1h/FPFqpPjZOydiPF9nqmvNFyJeLfMHEW+V+VJEKk+M8xHvbXEe8WiqRRF/WY7/xdU0UV0PuteVy19rfGX6xkxP2e515SPeH+65Ujyk+8ORTflgHPBrUz2KaFVX/NV0/7/ZAQAAAAAAAAAAAAAAAGCvHYkiPhMpXvmPP6nmFUc1L/3YxcE/HPjV3jnjT3/Ifsqyz0fEYrGzObmH88TAq+lqSg95LvHjrB5F/Gme//eth90YAAAAAAAAAAAAAAAAAACAx1oRP4kUL757Ii1F75ri7embjWut61OdVWG7a/9210xfW1tba6RONnOO5VzMuZRzOedKzihy/ZzNnGM5F3Mu5VzOuZIzDuX6OZs5x3Iu5lzKuZxzJWfUcv2czZxjORfLrK93dDlvX8kZB2TtXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAj5MiivhFpPj2N1ZTpIhoRoxFJ5f7H3brAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBSfyri+5Gi8UfNu9tqEZGqfztOlL+cj+bhMj8ZzcEyX4rmpZytKmvNbz2E9rM7famIH0eK/vrbdwc8j39f593d0yDe+ub6u8/WOnmo++HA+/1PHD92cXD4N57e7nXaqgEnL7enb99pjA4ND4/0bK7lb/9kz7aB/L3F3nSdiJh/483XW1NTk3P3/6I8BXZR/RF6kWqPS08f1ovFvTgh9+5F1A5EMx5O33kMlPf/9yLF7777n90bfuf+X49f6by7e4ePn//Z+v3/xc072uH9v7a5Xr7/l/f0re7/T/ZsezH/bqSvFlFfuDXbdzyiPv/Gm6fat1o3J29OTp8/ffrLg4NfPne673BE/UZ7arLn1Z4cLgAAAAAAAAAAAAAAAIAHJxXx+5Gi9ePV1IiIO9V8rYGLg8+eeuZQHKrmW22Yt/3ayLVLjZdnbs3OTc7PT040Rqfb4zMTkzv9uno13Wt0aHhfOvOhjuxz+4/UX56ZfWOuffOPF7b8/Gj90vX5hbnW+NYfx5EoIpq9W05WDR4dGq4aPdVuTVdVr245mf6j60tF/FekGD/fSJ/P2/L8/80z/DfM/1/cvKN9mv//iZ5t5XemVMTPI8Xv/NXT8fmqnUfjnmOWy/1dpDh54XO5XBwuy3Xb0HmuQGdmYFn2/yLFP/1iY9nufMgn18ue2fGBfUSU438sUnz/L74bv5m3bXz+w9bjf3TzjvZp/J/q2XZ0w/MKdt118vifihQvPfl2/Fbe9kHP/+g+e+NELnz3+Rz7NP6f6tk2kL/3t/em6wAAAAAAAAAAAI+0vlTE30eKHw7X0gt5207+/t/E5h3t09//+nTPtom9Wa/oQ1/s+qACAAAAwAHRl4r4SaS4ufD23TnUG+d/98z//L31+Z9DadOn1Z/z/Vr13IC9/PO/XgP5e8d2320AAAAAAAAAAAAAAAAAAAA4UFIq4oW8nvpYNZ9/Ytv11JcjxSv/81wul46X5brrwA9Uv9avzEyfujQ1NTPeWmhdn5psjMy2xifLuk9FitW//VyuW1Trq3fXm++s8b6+FvtcpBj+h27Zzlrs3bXJn1ove6Ys+4lI8d//uLFsdx3rT62XPVuW/ZtI8fV/2brs8fWy58qy340UP/p6o1v2aFm2+3zUT6+XfX58ptiHUQEAAAAAAAAAAAAAAAAAAOBx05eK+PNI8b+3lu7O5c/r//f1vK289c2e9f43uVOt8z9Qrf+/3ev7Wf+/eq7A4nbfCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH08pingzUsxeWU3L/eX7jvrl9vTtO6NDw1tXO5Kqmoeq8uVP/czZc+e/9MLghW5+cP299pl4beTapcbLM7dm5ybn5ycnGqPT7fGZickd72G39Tc7WR2Axq3Xb0/cuDHfOPv8uQ0f3xl4v/+J4wMXB5899Uy37OjQ8PBIT5la331/+z3SNtsPRxF/HSme+95P0w/7I4rY/bH4kHNnvx2pOnGy6sTo0HDVkal2a3qh/PBq90AUEY2eSs3uMXoAY7ErzYjFsvllg0+W3RuZbc21rk9NNq625hbaC+2Z6aup09qyP40o4kKKWIqIlf57d9cXRbweKb5zbDX9a3/Eoe5x+OKVka+ePrt9O4p97OMOlO1s9EUsFY/AmB1g/VHEP0eKn71zIv6tP6IWnZ/4QsSrZf4g4q3ojHcqT4zzEe9tcR7xaKpFEf9fjv/F1fROf3k96F5XLn+t8ZXpGzM9ZbvXlUf+/vAgHfBrUz2K+FF1xV9N/+6/awAAAAAAAAAAAAAAAIADpIhfjxQvvnsiVfOD784pbk/fbFxrXZ/qTOvrzv3rzpleW1tba6RONnOO5VzMuZRzOedKzihy/ZzNMutra2P5/WLOpZzLOVdyxqFcP2cz51jOxZxLOZdzruSMWq6fs5lzLOdizqWcyzlXcsYBmbsHAAAAAAAAAAAAAAAAAAB8vBTVPym+/Y3VtNbfWV96LDq5bD3Qj71fBgAA//8dq/O8") 10m2.307051749s ago: executing program 5 (id=696): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x50, 0x37, 0xfc, 0x8000}, {0x28, 0x1, 0xf7, 0x7fff}, {0x6, 0x6, 0x0, 0x1057c}]}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/meminfo\x00', 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendfile(r2, r1, 0x0, 0xd0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000000e0c0)=""/102400, 0x19000) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000740)=ANY=[@ANYBLOB="18010000210001000000000000000000fc020000000000000000000000000000ff0200000000000000000000000000014e210000000000000a00000000000000", @ANYRES32=0x0], 0x118}}, 0x44) 10m1.383281452s ago: executing program 5 (id=699): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) getgroups(0x0, 0x0) socket(0x10, 0x3, 0x0) setregid(0x0, 0x0) socket$inet(0x2, 0x2, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) ptrace$ARCH_SET_GS(0x1e, 0x0, 0x0, 0x1001) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) shutdown(0xffffffffffffffff, 0x1) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x25a5, 0x0) 9m53.01206036s ago: executing program 5 (id=708): mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xf43618ee34396415, 0x11, 0xffffffffffffffff, 0x956f2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_int(r2, 0x0, 0xd, 0x0, 0x0) 9m52.719066517s ago: executing program 5 (id=709): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x201400e, &(0x7f0000000100), 0xfb, 0x46a, &(0x7f0000000dc0)="$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") r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000080)=r1) listen(r0, 0xa) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001d00070f000200000000000007000000", @ANYRES16=r6], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 9m36.081870206s ago: executing program 37 (id=709): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x201400e, &(0x7f0000000100), 0xfb, 0x46a, &(0x7f0000000dc0)="$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") r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000080)=r1) listen(r0, 0xa) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001d00070f000200000000000007000000", @ANYRES16=r6], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 5m20.182617867s ago: executing program 7 (id=1077): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002140)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0xa, 0x8000}}, 0x50) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) 5m18.506278614s ago: executing program 7 (id=1079): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpgrp(0xffffffffffffffff) prlimit64(r0, 0x0, 0x0, &(0x7f0000000380)) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee2, 0x89831, 0xffffffffffffffff, 0x32ab8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8800) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x3a, 0x4, 0x2e8, 0xffffffff, 0x11f0, 0x110, 0x0, 0x90, 0xffffffff, 0x12e8, 0x12e8, 0x12e8, 0x110, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [], 0x5}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x98, 0x8001, 0xff, 0x8, 0x8, 0x1, 0x7, 0x9]}}}, {{@ip={@rand_addr=0x64010101, @private, 0x0, 0x0, 'vlan0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x2]}, {0x0, [0x0, 0x0, 0x0, 0x4]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="170000000700"], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) 5m5.35695088s ago: executing program 7 (id=1095): open(0x0, 0x4827e, 0xdc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f0000000040)={0xd, 0x9}) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRES16], 0x2, 0xc36, &(0x7f0000002540)="$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") r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xf7, 0x7fff7ffc}]}) r5 = socket(0x28, 0x5, 0x0) socket(0x28, 0x805, 0x0) connect$vsock_stream(r5, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x40000002, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 4m59.705360979s ago: executing program 7 (id=1104): r0 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') unshare(0x8040480) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x1000, @empty}, 0x1c) pread64(r1, &(0x7f0000000940)=""/239, 0xef, 0xcfcf) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3818744, &(0x7f0000000340)={[{@nomblk_io_submit}, {@init_itable}, {@inlinecrypt}, {@data_journal}, {@nodiscard}, {@noblock_validity}, {@delalloc}, {@init_itable}, {@noblock_validity}], [{@appraise}, {@dont_appraise}]}, 0xf9, 0x479, &(0x7f0000000480)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(r0, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) 4m56.538926423s ago: executing program 7 (id=1107): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x8000, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000400)='./file0\x00', 0x2a10c80, &(0x7f0000000500)=ANY=[], 0x1, 0x1b4, &(0x7f0000000780)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000ac0)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000240)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) 4m53.804001893s ago: executing program 7 (id=1112): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8c57, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xf5, 0x2e6, &(0x7f0000000540)="$eJzs3ctrE18UwPGTV5O0v/6ShYiIwqWCKNKhCbhz0SItiAGlbQQrCFM71ZBpUjKhEBGbheDWtYsuXIoggjs3Im678S/wteumOwsWR6Yzk6bJGNNqX/b7WTSnOffMvZm56eO2uVm59GSuOGtp321XdFjqshaStIQlIq66nH+/9On0xLv/3M+VGhuZzGSVCovIrQcvBt5W+268/v9NXJbTt1dWs1+XT02K/Ji8V7BUwVIl21a6mi6XqyGneKZgFTWlrpuGbhmqULKMStXL69OmoWbN8vx8Temlmf7e+YphWUov1VTRqKlqWVUrNaXf1QslpWma6u8ViEi6EYXbcqFOhfnna7Ytq86Fj9fFtu2A1nU/iHm38T8bLA6SluvfsW3b5Ijs5siwF9bsaNfXH/8e9/n/+SnX/2iauDl1dSSXGx1XKiEy93ghv5B3b938xz4piCmGLI1fmFoXsRsk5Hwcu5IbHVIb0nJ2btGrX1zIu98cRma9+oyknJ9TmurFr8+49WprfUx6m+uzkpJjwfVZv17CTfU9cu5MU70mKflwR8piyow4tZv1DzNKXb6Wa+k/udEOAAAAAAAAAIDDSFMNm+v3oc0/9WpafOM/Phr5pHOv087NN9bXhyQl68Hr80OB6/tRORndv8cNAAAAAMBRYtXuF3XTNCq7E0SeJTt0ERMRJxB5NOAMpuMBj3sj7q73HhFpT0U6d7ElSF50+3s57g1MdvNE/aXAf7FGUTdf+amkBDUOb2sCDPYEnvnEnj5A6aaxJHY2seNdT63WILTu33MisI0d+v1xbN2Mba/34W09HX4ZJFpP1OAX97hmhy8a3xpLfAAAAAAOkaZfnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwD7Z0eZh/r79W1PivUV8+5Zsre8Tz77/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6gnwEAAP//JZK+GA==") syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x22010}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30000100", @ANYRES16=r2, @ANYBLOB="00012dbd7000ffdbdf250400000008000500040000000c00018008000600776c6300080005000f000000"], 0x30}, 0x1, 0x0, 0x0, 0x24040000}, 0x4080) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000340)={'wg0\x00'}) r3 = socket$inet6(0xa, 0x3, 0xfa) setsockopt$inet6_int(r3, 0x29, 0x3e, &(0x7f0000000380)=0x3, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f00000003c0)=ANY=[], 0xb8) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20002) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r7, 0x40045402, &(0x7f0000000140)=0x1) 4m38.352292102s ago: executing program 38 (id=1112): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8c57, &(0x7f0000000340)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c646f733178666c6f7070792c636865636b3d72656c617865642c73686f72746e616d653d77696e6e742c726f6469722c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c6e6f6e756d7461696c3d302c757365667265652c757466383d312c00b3c6df3745b1b2f7ea92d20d3f3ffa31ec18e46c7acb9a9107d3ce985f76b3a3dc9d46f6169759de80d2f3cf06d8371513b924dffc1f6593f8aebd687934be114c6763c847faf7c4d3fae3941cabc5ab2e9e5b3d2c39a940e89c46b2a11ff48439b8c9df29ab8fa870da2aea26caf8c72d4e9b093cf5f95b64d5864755b8be6e0fcb0e3d58e260b9ba7f96d7f8d7a853964b0aba61dc573dfb949cc8e577059a6abd2708ab31a9c71522fca70047fcc10e67fe50d6af857dee630aaa3c192f7a1a8f33"], 0xf5, 0x2e6, &(0x7f0000000540)="$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") syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x22010}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30000100", @ANYRES16=r2, @ANYBLOB="00012dbd7000ffdbdf250400000008000500040000000c00018008000600776c6300080005000f000000"], 0x30}, 0x1, 0x0, 0x0, 0x24040000}, 0x4080) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000340)={'wg0\x00'}) r3 = socket$inet6(0xa, 0x3, 0xfa) setsockopt$inet6_int(r3, 0x29, 0x3e, &(0x7f0000000380)=0x3, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f00000003c0)=ANY=[], 0xb8) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20002) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r7, 0x40045402, &(0x7f0000000140)=0x1) 16.352885608s ago: executing program 9 (id=1483): r0 = syz_open_procfs(0x0, 0x0) unshare(0x8040480) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x1000, @empty}, 0x1c) pread64(r1, &(0x7f0000000940)=""/239, 0xef, 0xcfcf) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3818744, &(0x7f0000000340)={[{@nomblk_io_submit}, {@init_itable}, {@inlinecrypt}, {@data_journal}, {@nodiscard}, {@noblock_validity}, {@delalloc}, {@init_itable}, {@noblock_validity}], [{@appraise}, {@dont_appraise}]}, 0xf9, 0x479, &(0x7f0000000480)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(r0, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) 14.326357796s ago: executing program 9 (id=1490): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x2}, 0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x42, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x100000001, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[@ANYRES64=r2], 0x5b) sendfile(r0, r2, &(0x7f0000000000), 0x9) 13.435705208s ago: executing program 4 (id=1491): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) fcntl$lock(r3, 0x6, &(0x7f00000001c0)={0x2, 0x1, 0xab4e, 0xfffffffffffffffd}) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') read(r4, &(0x7f0000001180)=""/4096, 0x1000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0x4c, 0x1a, 0x180, 0x73, 0x328, 0x258, 0x258, 0x328, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x23, 0x3, 0x2, 0x3, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x2e, 0x8, 0xfb, 0x87, 0x3, @remote, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xff, 0x0, 0xffffff00], [0x8982e4c132e3b466, 0xffffffff, 0xffffff00, 0xff000000], [0xffffff00, 0x0, 0xff000000, 0xffffff00], 0x3420, 0x108}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x418) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000300)='./file1\x00', 0x800884, &(0x7f0000000000)=ANY=[], 0x4, 0x2b4, &(0x7f00000013c0)="$eJzs3U9r034cB/BP/2zrdth2/vE7BLx4GurZg0UmiIXBpAf1YmEKsonQXbpd7FPwIj4GH5IHH4PstFukJq6b6TbEJpn29YKRz/Lekk9CmqTwTfvy/7f7e+8OX6dfPkWnk0Q7OhGnEZvRjFZkGo1oxM86luO8cevCr7GST9sBANxUu7uD7mXZuNpWmIvinddw2F2KiLWVQtL/XFFTAAAAAAAAAAAAzFlx/H+MC+P/82lz1vj/yjsGAP7UVeP/+TcMh93BWn7/dpHx/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB9TtN0I73ip+7+AID5O03XXf8BYMF4/w8Ai+fc9T/imut/q742AYA5evrs+ZNur7e9mySdiJPxqD/qZ9Msf/S4t30n+WEzIprZ3JPRqN86y+9meTJd6iRfirU8vzczX47bt7J8kj3c6f2Sr8ReNbsAAAAAAAAAAAAAAAAAAAAAareVnNmczp0+37+1tfPx65tZeVblnw/QjMLz/e34r13ZZgAAAAAAAAAAAAAAAAAAAMBf7fDoeH9wcPBqWH7x4PDouBERJa2inRet8lYxOChvyZOiE6UsebLT59/zh6yI+Pb+9//9/ouIa/+4sb8ahWi12oO2/CLdyF6JN6Wf9fxoueyMsVzh2QkAAAAAAAAAAAAAAAAAABbL9OnfujsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPpMv/+/vKLubQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWw/cAAAD//zM5g9A=") openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x26a200, 0x59) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) pipe(&(0x7f0000000380)) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000080)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) unshare(0x24060400) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x40000000000, 0x3, 0x0, 0x0, 0xfffffffffffffffd, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x7, 0x80000001, 0x3cf2a278, 0x0, 0x0, 0x0, 0x4}) 13.2320952s ago: executing program 1 (id=1492): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.009878562s ago: executing program 4 (id=1493): r0 = eventfd2(0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x41, 0x8000038, r5, 0x0) io_setup(0x4, &(0x7f0000000400)=0x0) io_pgetevents(r6, 0x1, 0x1, &(0x7f0000000040)=[{}], 0x0, 0x0) io_submit(r6, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 11.945597505s ago: executing program 9 (id=1494): r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000726) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mknodat$null(r1, &(0x7f0000000000)='./file1\x00', 0x2000, 0x103) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f00000000c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000000)=[&(0x7f0000000080)={0x0, 0x0, 0x10, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2, r2}]) 10.333918219s ago: executing program 9 (id=1497): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xe, &(0x7f0000000440)={[{@init_itable_val={'init_itable', 0x3d, 0x200}}, {@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x4}}, {@noblock_validity}]}, 0x3, 0x46e, &(0x7f0000000ec0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) 10.176983308s ago: executing program 4 (id=1498): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007b00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004600)=""/102400, 0x19000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f00000003c0), 0x0, 0x1}, 0x20) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="01", 0x1}, {0x0}], 0x2}}], 0x2, 0x4090) 9.46138587s ago: executing program 8 (id=1501): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) ioprio_set$pid(0x2, 0x0, 0x0) 9.193755705s ago: executing program 8 (id=1502): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000040), &(0x7f00000002c0)}, 0x20) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = fsmount(r0, 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000) getpgrp(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) open$dir(&(0x7f0000000000)='./file4\x00', 0x2601, 0x0) fchdir(r3) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r4, &(0x7f0000002240)=""/131, 0x83, 0xe5d7) 9.140068088s ago: executing program 9 (id=1503): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x94}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 8.956974289s ago: executing program 1 (id=1504): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x2}, 0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x42, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x100000001, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[@ANYRES64=r2], 0x5b) sendfile(r0, r2, &(0x7f0000000000), 0x9) 8.9486385s ago: executing program 0 (id=1505): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x4, 0x746, 0x800077, 0x8, 0x6, 0x6, 0x20000001000, 0xf64, 0xffeffffd}) syz_mount_image$exfat(0x0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2941842, 0x0, 0x0, 0x0, &(0x7f0000000300)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) 8.60808556s ago: executing program 0 (id=1506): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) io_pgetevents(r6, 0x1, 0x1, &(0x7f0000000040)=[{}], 0x0, 0x0) io_submit(r6, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 7.283942976s ago: executing program 8 (id=1509): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000c80)=0xfffffffc, 0x4) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, &(0x7f0000000240), 0xb375) read$FUSE(r1, &(0x7f0000002540)={0x2020}, 0xfdef) 7.188632952s ago: executing program 0 (id=1510): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000080)=0xffff, 0x4) 6.850129642s ago: executing program 8 (id=1511): creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x301400, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) unshare(0x22020600) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x10}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, &(0x7f0000000240)) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x156) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000240)={{0x4, 0x0, 0x1ea1, 0x0, 'syz0\x00'}, 0x2, 0x5, 0x9, r1, 0x3, 0x0, 'syz1\x00', &(0x7f0000000080)=['-\x00', '', 's\x05\x1f\xfaf'], 0x7}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getdents(r4, &(0x7f0000000580)=""/207, 0xffffffffffffffce) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) 6.724095599s ago: executing program 0 (id=1512): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x40048c67) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, r2, 0x7}) 6.028949999s ago: executing program 4 (id=1513): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x40) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}, {@metacopy_on}]}) syz_mount_image$fuse(&(0x7f00000001c0), 0x0, 0x322020, 0x0, 0x1, 0x0, 0x0) 4.914725935s ago: executing program 8 (id=1514): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="2030d400"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000480)={0x40, 0xf, 0x1, '1'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.532170396s ago: executing program 0 (id=1515): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.264249642s ago: executing program 1 (id=1516): r0 = socket$inet(0x2, 0x802, 0x1) connect$inet(r0, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f00000000c0)=0x800008, 0x4) write(r0, &(0x7f0000000000)="08001800000020a3", 0x8) read(r0, &(0x7f00000003c0)=""/14, 0xe) 3.234265342s ago: executing program 1 (id=1517): open(0x0, 0x4827e, 0xdc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f0000000040)={0xd, 0x9}) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRES16], 0x2, 0xc36, &(0x7f0000002540)="$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") r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xf7, 0x7fff7ffc}]}) r5 = socket(0x28, 0x5, 0x0) socket(0x28, 0x805, 0x0) connect$vsock_stream(r5, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x40000002, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 3.028058904s ago: executing program 9 (id=1518): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r3, &(0x7f00000021c0), 0x5b, 0x40, 0x0) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 940.796756ms ago: executing program 39 (id=1518): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r3, &(0x7f00000021c0), 0x5b, 0x40, 0x0) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 915.785847ms ago: executing program 1 (id=1520): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x2}, 0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x42, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x100000001, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[@ANYRES64=r2], 0x5b) sendfile(r0, r2, &(0x7f0000000000), 0x9) 915.599377ms ago: executing program 4 (id=1521): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x40000044, 0x4, 0x800077, 0x5, 0x3000000000000, 0x6, 0x20000001000, 0xfffffffffffffff7}) 212.026868ms ago: executing program 4 (id=1522): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x16, 0x1, 0x1, 0x0, {0xa}, [@nested={0x5, 0xca, 0x0, 0x1, [@nested={0x4, 0x5}]}]}, 0x1c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f00000003c0)={[{@abort}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x36}}, {@user_xattr}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") socketpair(0x2c, 0x3, 0x5, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000001480)=@get={0x1, &(0x7f00000013c0)=""/175, 0x8}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8880, 0x91) r4 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r4, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb}, 0xc) bind$netlink(r4, &(0x7f0000000480)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) chdir(&(0x7f0000000040)='./file0\x00') setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f00000014c0)=0x80000001, 0x4) getdents64(r3, 0x0, 0xfffffffffffffff4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611b7800000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x54}, 0x70) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001340)={&(0x7f0000000100)="1d9c3e7025", &(0x7f00000001c0)=""/53, &(0x7f0000001200)="1415196f0333dfd3b9687d47", &(0x7f0000001240)="32786ffa943fe3d0f4e998aa4108cb73f3fffd0a9e0ec3699e5e978732099e950dc31c8e898c6907e93470ce55cd16f0b8cc0db5879bc81e1a6c2032fc2b18bfa19c935b95090d0eeb157cef1043a6a3d6bd90290cd9b894c09231c48a371684240f68e6e6bcf96d9074ffd21911921bf14d2a4e5c091dcb53cd0dca70fff9fdd70c0ae4842638e4131ddd8e51bf931e7ef7c3e3f926c498f4e42daf2d6d8a32735d69c59bb73d84e9d3f0dbe0f5077564e298451e575530fa31c492da7b40b57e175cdd6071df4b3589270c162291e5e4d3a482b49a008678b552af08444d3809e5ec42a7", 0x2, 0xffffffffffffffff, 0x4}, 0x38) 0s ago: executing program 8 (id=1523): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007b00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004600)=""/102400, 0x19000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f00000003c0), &(0x7f00000004c0)=@udp=r0, 0x1}, 0x20) sendmmsg$inet6(r0, 0x0, 0x0, 0x4090) kernel console output (not intermixed with test programs): T)' registered. [ 772.177722][ T4338] usb 1-1: USB disconnect, device number 11 [ 772.197333][ T8712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.218173][ T8715] loop7: detected capacity change from 0 to 128 [ 772.221974][ T8712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.252575][ T8712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.294401][ T8712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.343319][ T8362] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 772.424216][ T8719] loop4: detected capacity change from 0 to 2048 [ 772.442268][ T8711] fido_id[8711]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 772.483744][ T8713] xt_CT: You must specify a L4 protocol and not use inversions on it [ 772.553159][ T8719] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 772.592825][ T126] DVB: Unable to find symbol r820t_attach() [ 772.968591][ T8724] snd_dummy snd_dummy.0: control 0:7841:0:syz0:0 is already present [ 773.534215][ T8723] loop7: detected capacity change from 0 to 2048 [ 773.600689][ T8362] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 773.644229][ T126] usb 5-1: USB disconnect, device number 7 [ 773.721557][ T4722] usb 10-1: USB disconnect, device number 5 [ 773.738988][ T8723] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 775.057147][ T6017] EXT4-fs (loop7): unmounting filesystem. [ 776.072670][ T8751] loop4: detected capacity change from 0 to 512 [ 776.212597][ T8751] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 776.267211][ T8751] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 777.839389][ T126] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 778.002189][ T7688] EXT4-fs (loop4): unmounting filesystem. [ 778.039499][ T126] usb 1-1: Using ep0 maxpacket: 16 [ 778.046744][ T126] usb 1-1: config 0 has an invalid descriptor of length 27, skipping remainder of the config [ 778.087649][ T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 778.129382][ T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 778.169389][ T126] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 778.189498][ T4338] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 778.199473][ T126] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 778.266461][ T126] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 778.299235][ T126] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 778.347951][ T126] usb 1-1: Manufacturer: syz [ 778.367967][ T126] usb 1-1: config 0 descriptor?? [ 778.389493][ T4338] usb 8-1: Using ep0 maxpacket: 8 [ 778.403505][ T4338] usb 8-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.435236][ T4338] usb 8-1: config 0 interface 0 has no altsetting 0 [ 778.459574][ T4338] usb 8-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 778.479651][ T4338] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.511143][ T4338] usb 8-1: config 0 descriptor?? [ 778.779561][ T4722] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 778.899537][ T126] rc_core: IR keymap rc-hauppauge not found [ 778.905639][ T126] Registered IR keymap rc-empty [ 780.312352][ T4338] smartjoyplus 0003:6666:8804.0007: hidraw0: USB HID v0.00 Device [HID 6666:8804] on usb-dummy_hcd.7-1/input0 [ 780.344151][ T4722] usb 5-1: config index 0 descriptor too short (expected 63524, got 36) [ 780.361552][ T126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 780.368870][ T4722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 23, changing to 4 [ 780.480096][ T4338] smartjoyplus 0003:6666:8804.0007: Force feedback for SmartJoy PLUS PS2/USB adapter [ 780.507339][ T4722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 52925, setting to 1023 [ 780.529447][ T126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 780.547247][ T4338] usb 8-1: USB disconnect, device number 7 [ 780.559092][ T4722] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 780.573367][ T126] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 780.625807][ T126] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input19 [ 780.641274][ T4722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.657005][ T4722] usb 5-1: Product: syz [ 780.661739][ T4722] usb 5-1: Manufacturer: syz [ 780.666587][ T4722] usb 5-1: SerialNumber: syz [ 780.677984][ T8784] loop9: detected capacity change from 0 to 128 [ 780.708365][ T4722] usb 5-1: config 0 descriptor?? [ 780.713749][ T126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 780.766359][ T4722] usb 5-1: 0:0 : invalid sync pipe. bmAttributes 01, bLength 9, bSynchAddress 25 [ 780.775973][ T126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 780.819523][ T126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 780.849446][ T126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 780.913743][ T126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 781.148536][ T8772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 781.149772][ T126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 781.179727][ T126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 781.729644][ T8772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 781.752521][ T126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 781.809383][ T126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 781.849347][ T126] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 781.915905][ T126] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 781.941840][ T8787] fido_id[8787]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 781.975879][ T126] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 782.068598][ T126] usb 1-1: USB disconnect, device number 12 [ 782.364241][ T4722] usb 5-1: USB disconnect, device number 8 [ 784.222238][ T8361] udevd[8361]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 785.045547][ T8816] loop8: detected capacity change from 0 to 128 [ 785.113653][ T8816] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 785.975269][ T27] audit: type=1800 audit(1770053418.003:25): pid=8820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.941" name="file1" dev="loop8" ino=94 res=0 errno=0 [ 786.324835][ T8821] xt_CT: You must specify a L4 protocol and not use inversions on it [ 786.354627][ T8826] loop7: detected capacity change from 0 to 1024 [ 786.810555][ T126] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 787.919306][ T126] usb 9-1: Using ep0 maxpacket: 16 [ 787.928182][ T126] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.329499][ T4722] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 788.347702][ T126] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 788.368089][ T126] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 788.396539][ T126] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.189362][ T4722] usb 10-1: Using ep0 maxpacket: 16 [ 789.418377][ T4722] usb 10-1: config 0 has an invalid descriptor of length 27, skipping remainder of the config [ 789.473389][ T126] usb 9-1: config 0 descriptor?? [ 789.488742][ T4722] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 789.532773][ T4722] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 789.549277][ T4722] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 789.559600][ T4722] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 789.671174][ T4722] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 789.699347][ T4722] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 789.708105][ T4722] usb 10-1: Manufacturer: syz [ 789.737947][ T4722] usb 10-1: config 0 descriptor?? [ 789.788638][ T126] usbhid 9-1:0.0: can't add hid device: -71 [ 789.802958][ T126] usbhid: probe of 9-1:0.0 failed with error -71 [ 791.069501][ T126] usb 9-1: USB disconnect, device number 8 [ 793.219420][ T4722] rc_core: IR keymap rc-hauppauge not found [ 793.228223][ T4722] Registered IR keymap rc-empty [ 793.267072][ T4722] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 793.477670][ T4722] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 793.519022][ T4722] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 793.553784][ T4722] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input20 [ 793.712595][ T4722] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 793.759308][ T4722] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 793.789688][ T4722] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 793.919397][ T4722] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 793.950851][ T4722] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 793.998494][ T4722] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 794.075517][ T4722] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 794.159421][ T4722] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 794.189880][ T4722] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 794.219789][ T4722] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 794.261667][ T4722] mceusb 10-1:0.0: Registered with mce emulator interface version 1 [ 794.290676][ T8866] loop8: detected capacity change from 0 to 1024 [ 794.297190][ T4722] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 794.356321][ T4722] usb 10-1: USB disconnect, device number 6 [ 798.108443][ T8895] loop9: detected capacity change from 0 to 4096 [ 798.149004][ T8895] EXT4-fs (loop9): Test dummy encryption mode enabled [ 798.198690][ T8895] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c019, mo2=0002] [ 798.249614][ T8895] System zones: 0-5 [ 798.261042][ T8895] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 798.491222][ T8155] EXT4-fs (loop9): unmounting filesystem. [ 801.349501][ T4326] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 801.549253][ T4326] usb 10-1: Using ep0 maxpacket: 16 [ 801.556460][ T4326] usb 10-1: config 0 has an invalid descriptor of length 27, skipping remainder of the config [ 801.597852][ T4326] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 801.646572][ T4326] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 801.715070][ T4326] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 801.762952][ T4326] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 801.821823][ T4326] usb 10-1: string descriptor 0 read error: -71 [ 801.828212][ T4326] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 801.926485][ T4326] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 801.976464][ T4326] usb 10-1: config 0 descriptor?? [ 802.009632][ T4326] usb 10-1: can't set config #0, error -71 [ 802.016810][ T8922] loop9: detected capacity change from 0 to 128 [ 802.037908][ T4326] usb 10-1: USB disconnect, device number 7 [ 802.449404][ T14] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 802.649262][ T14] usb 9-1: Using ep0 maxpacket: 32 [ 802.656306][ T14] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 802.712640][ T14] usb 9-1: config 0 has no interface number 0 [ 802.743615][ T14] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 802.809587][ T14] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.835486][ T14] usb 9-1: Product: syz [ 803.021020][ T14] usb 9-1: Manufacturer: syz [ 803.025683][ T14] usb 9-1: SerialNumber: syz [ 803.060048][ T14] usb 9-1: config 0 descriptor?? [ 803.073874][ T14] smsc95xx v2.0.0 [ 803.883838][ T14] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 803.894885][ T14] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 805.390987][ T8954] xt_CT: You must specify a L4 protocol and not use inversions on it [ 806.991135][ T14] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 807.071139][ T14] smsc95xx: probe of 9-1:0.67 failed with error -71 [ 807.127441][ T14] usb 9-1: USB disconnect, device number 9 [ 808.809933][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.825386][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.711374][ T8985] loop8: detected capacity change from 0 to 8 [ 810.809338][ T4347] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 811.009328][ T4347] usb 5-1: Using ep0 maxpacket: 16 [ 811.016186][ T4347] usb 5-1: config 0 has an invalid descriptor of length 27, skipping remainder of the config [ 811.070924][ T4347] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 811.145576][ T4347] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 811.200232][ T4347] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 811.260892][ T4347] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 811.369008][ T4347] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 811.419723][ T4347] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 811.459417][ T4347] usb 5-1: Manufacturer: syz [ 811.491568][ T4347] usb 5-1: config 0 descriptor?? [ 811.771496][ T4274] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 811.929335][ T4347] rc_core: IR keymap rc-hauppauge not found [ 811.935416][ T4347] Registered IR keymap rc-empty [ 811.955603][ T4347] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 811.971244][ T4274] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 811.994723][ T4274] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 812.010831][ T4347] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 812.036128][ T4274] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 812.073662][ T4274] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 812.085687][ T4347] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 813.036825][ T4274] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 813.065977][ T4274] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 813.080920][ T4347] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input21 [ 813.085593][ T4274] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 813.212309][ T9013] SQUASHFS error: lzo decompression failed, data probably corrupt [ 813.229695][ T9013] SQUASHFS error: Failed to read block 0x144: -5 [ 813.248562][ T4274] usb 8-1: Product: syz [ 813.255290][ T4274] usb 8-1: Manufacturer: syz [ 814.389859][ T4274] cdc_wdm 8-1:1.0: skipping garbage [ 814.410628][ T9013] SQUASHFS error: Unable to read metadata cache entry [142] [ 814.418147][ T4274] cdc_wdm 8-1:1.0: skipping garbage [ 814.423686][ T4347] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 814.483948][ T4274] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 814.502226][ T4347] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 814.555126][ T9013] SQUASHFS error: Unable to read directory block [142:26] [ 814.563389][ T4274] cdc_wdm 8-1:1.0: Unknown control protocol [ 814.646364][ T4274] usb 8-1: USB disconnect, device number 8 [ 814.671599][ T4347] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 814.729934][ T4347] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 814.791489][ T4347] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 814.869512][ T4347] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 814.883046][ T9022] loop7: detected capacity change from 0 to 128 [ 814.919440][ T4347] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 814.959843][ T4347] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 814.999352][ T4347] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 815.034428][ T4347] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 815.100460][ T4347] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 815.229899][ T4347] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 815.267044][ T4347] usb 5-1: USB disconnect, device number 9 [ 817.317383][ T9041] loop8: detected capacity change from 0 to 512 [ 817.326062][ T9041] FAT-fs (loop8): Unrecognized mount option "" or missing value [ 818.827916][ T8362] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 820.381605][ T9050] loop8: detected capacity change from 0 to 8192 [ 821.498128][ T9050] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 821.654048][ T9050] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 821.713793][ T9050] FAT-fs (loop8): Filesystem has been set read-only [ 821.755674][ T9050] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 821.827771][ T9050] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 821.936747][ T9065] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 822.110632][ T9065] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 823.675883][ T9073] loop4: detected capacity change from 0 to 512 [ 823.750170][ T9073] EXT4-fs: Ignoring removed nomblk_io_submit option [ 823.795737][ T9073] EXT4-fs: inline encryption not supported [ 823.812463][ T9073] ext4: Unknown parameter 'appraise' [ 823.859470][ T7168] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 824.232316][ T9080] loop4: detected capacity change from 0 to 8 [ 824.369295][ T4326] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 824.571329][ T4326] usb 9-1: config index 0 descriptor too short (expected 63524, got 36) [ 824.593908][ T4326] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 23, changing to 4 [ 824.659314][ T4326] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 52925, setting to 1023 [ 824.749956][ T4326] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 824.779282][ T4326] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.807961][ T4326] usb 9-1: Product: syz [ 824.818095][ T4326] usb 9-1: Manufacturer: syz [ 824.858797][ T4326] usb 9-1: SerialNumber: syz [ 824.895624][ T4326] usb 9-1: config 0 descriptor?? [ 824.935941][ T4326] usb 9-1: 0:0 : invalid sync pipe. bmAttributes 01, bLength 9, bSynchAddress 25 [ 825.123518][ T9078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.174277][ T9078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.286834][ T9090] SQUASHFS error: lzo decompression failed, data probably corrupt [ 825.299359][ T126] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 825.320119][ T9090] SQUASHFS error: Failed to read block 0x144: -5 [ 825.343096][ T9090] SQUASHFS error: Unable to read metadata cache entry [142] [ 825.377110][ T9090] SQUASHFS error: Unable to read directory block [142:26] [ 825.487403][ T4326] usb 9-1: USB disconnect, device number 10 [ 825.495507][ T126] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 825.509342][ T4347] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 825.544737][ T126] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 825.617970][ T126] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 825.620602][ T9087] SQUASHFS error: Unable to read metadata cache entry [142] [ 825.635946][ T9087] SQUASHFS error: Unable to read directory block [142:26] [ 825.681485][ T126] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 825.699843][ T4347] usb 10-1: Using ep0 maxpacket: 32 [ 825.707099][ T4347] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 826.607741][ T4279] Bluetooth: hci2: command 0x0406 tx timeout [ 826.620972][ T126] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 826.627361][ T4347] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 826.642763][ T126] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 826.669251][ T126] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 826.777428][ T126] usb 1-1: Product: syz [ 826.795015][ T4347] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 826.819382][ T126] usb 1-1: Manufacturer: syz [ 826.834112][ T4347] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 826.907475][ T126] cdc_wdm 1-1:1.0: skipping garbage [ 826.919525][ T4347] usb 10-1: config 0 interface 0 has no altsetting 0 [ 826.933986][ T126] cdc_wdm 1-1:1.0: skipping garbage [ 826.986400][ T126] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 826.989580][ T4347] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 827.003598][ T126] cdc_wdm 1-1:1.0: Unknown control protocol [ 827.082860][ T4347] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 827.122312][ T4347] usb 10-1: Product: syz [ 827.124637][ T126] usb 1-1: USB disconnect, device number 13 [ 827.143110][ T4347] usb 10-1: Manufacturer: syz [ 828.606689][ T4347] usb 10-1: SerialNumber: syz [ 828.682261][ T4347] usb 10-1: config 0 descriptor?? [ 828.770482][ T4347] usb 10-1: can't set config #0, error -71 [ 828.789392][ T4347] usb 10-1: USB disconnect, device number 8 [ 834.902544][ T4274] kernel write not supported for file bpf-prog (pid: 4274 comm: kworker/1:3) [ 834.938328][ T9140] loop8: detected capacity change from 0 to 8 [ 835.220156][ T9143] SQUASHFS error: lzo decompression failed, data probably corrupt [ 835.228149][ T9143] SQUASHFS error: Failed to read block 0x144: -5 [ 835.234585][ T9143] SQUASHFS error: Unable to read metadata cache entry [142] [ 835.241971][ T9143] SQUASHFS error: Unable to read directory block [142:26] [ 835.249316][ T9140] SQUASHFS error: Unable to read metadata cache entry [142] [ 835.256628][ T9140] SQUASHFS error: Unable to read directory block [142:26] [ 835.264417][ T9142] SQUASHFS error: Unable to read metadata cache entry [142] [ 835.271911][ T9142] SQUASHFS error: Unable to read directory block [142:26] [ 836.913261][ T9149] loop7: detected capacity change from 0 to 2048 [ 838.644330][ T9149] EXT4-fs: failed to create workqueue [ 838.708948][ T9149] EXT4-fs (loop7): mount failed [ 840.307212][ T9176] loop8: detected capacity change from 0 to 128 [ 840.398662][ T9176] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 842.699348][ T27] audit: type=1800 audit(1770053483.672:26): pid=9186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1024" name="file1" dev="loop8" ino=94 res=0 errno=0 [ 843.750736][ T9199] loop8: detected capacity change from 0 to 8 [ 844.086244][ T9203] SQUASHFS error: lzo decompression failed, data probably corrupt [ 844.115375][ T9203] SQUASHFS error: Failed to read block 0x144: -5 [ 844.122283][ T9203] SQUASHFS error: Unable to read metadata cache entry [142] [ 844.130752][ T9203] SQUASHFS error: Unable to read directory block [142:26] [ 844.142979][ T9199] SQUASHFS error: Unable to read metadata cache entry [142] [ 844.150472][ T9199] SQUASHFS error: Unable to read directory block [142:26] [ 844.158653][ T9200] SQUASHFS error: Unable to read metadata cache entry [142] [ 844.166832][ T9200] SQUASHFS error: Unable to read directory block [142:26] [ 845.561638][ T8228] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 845.863456][ T8228] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 845.899230][ T8228] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 846.109276][ T8228] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 846.164380][ T8228] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 846.454605][ T8228] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 846.481921][ T9220] loop8: detected capacity change from 0 to 2048 [ 846.524216][ T8228] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 846.875256][ T8228] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 847.073736][ T8228] usb 1-1: Product: syz [ 847.113562][ T9225] loop7: detected capacity change from 0 to 1024 [ 847.154325][ T8228] usb 1-1: Manufacturer: syz [ 847.160554][ T9220] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 847.389573][ T8228] usb 1-1: can't set config #1, error -71 [ 847.400754][ T8228] usb 1-1: USB disconnect, device number 14 [ 848.034532][ T7168] EXT4-fs (loop8): unmounting filesystem. [ 849.409936][ T9248] loop6: detected capacity change from 0 to 7 [ 849.417264][ T9248] Dev loop6: unable to read RDB block 7 [ 849.498764][ T9248] loop6: unable to read partition table [ 849.728642][ T9248] loop6: partition table beyond EOD, truncated [ 849.748833][ T9248] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 850.352088][ T9263] loop9: detected capacity change from 0 to 128 [ 852.050164][ T32] loop: Write error at byte offset 50, length 3584. [ 852.148939][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 1 [ 852.158525][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 1 [ 856.032923][ T9295] loop9: detected capacity change from 0 to 1024 [ 862.216021][ T9329] loop6: detected capacity change from 0 to 7 [ 862.259815][ T9329] Dev loop6: unable to read RDB block 7 [ 862.265477][ T9329] loop6: unable to read partition table [ 862.297997][ T9329] loop6: partition table beyond EOD, truncated [ 862.330232][ T9329] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 864.784424][ T9346] loop8: detected capacity change from 0 to 2048 [ 864.810802][ T9346] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 866.086783][ T9353] loop8: detected capacity change from 0 to 128 [ 866.220103][ T9312] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 866.508928][ T27] audit: type=1326 audit(1770053516.543:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.7.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d8d9aeb9 code=0x7fc00000 [ 866.598309][ T27] audit: type=1326 audit(1770053516.553:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.7.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f57d8d9aeb9 code=0x7fc00000 [ 866.699506][ T27] audit: type=1326 audit(1770053516.693:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.7.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d8d9aeb9 code=0x7fc00000 [ 866.803110][ T27] audit: type=1326 audit(1770053516.693:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.7.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d8d9aeb9 code=0x7fc00000 [ 866.917465][ T27] audit: type=1326 audit(1770053516.693:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.7.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d8d9aeb9 code=0x7fc00000 [ 867.132960][ T27] audit: type=1326 audit(1770053516.693:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.7.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d8d9aeb9 code=0x7fc00000 [ 867.170316][ T27] audit: type=1326 audit(1770053516.693:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.7.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d8d9aeb9 code=0x7fc00000 [ 867.220496][ T27] audit: type=1326 audit(1770053516.693:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.7.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d8d9aeb9 code=0x7fc00000 [ 867.310722][ T27] audit: type=1326 audit(1770053516.693:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.7.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d8d9aeb9 code=0x7fc00000 [ 867.429490][ T27] audit: type=1326 audit(1770053516.693:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.7.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d8d9aeb9 code=0x7fc00000 [ 868.461950][ T9386] loop9: detected capacity change from 0 to 8 [ 868.808393][ T9390] SQUASHFS error: lzo decompression failed, data probably corrupt [ 868.816818][ T9390] SQUASHFS error: Failed to read block 0x144: -5 [ 868.823357][ T9390] SQUASHFS error: Unable to read metadata cache entry [142] [ 868.831047][ T9390] SQUASHFS error: Unable to read directory block [142:26] [ 869.040097][ T9389] SQUASHFS error: Unable to read metadata cache entry [142] [ 869.047569][ T9389] SQUASHFS error: Unable to read directory block [142:26] [ 870.391198][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.401736][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.939439][ T6764] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 872.154995][ T6764] usb 5-1: config index 0 descriptor too short (expected 63524, got 36) [ 872.179614][ T6764] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 23, changing to 4 [ 872.250621][ T6764] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 52925, setting to 1023 [ 872.393104][ T6764] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 872.448824][ T6764] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.498854][ T6764] usb 5-1: Product: syz [ 872.519574][ T6764] usb 5-1: Manufacturer: syz [ 872.546141][ T6764] usb 5-1: SerialNumber: syz [ 872.601883][ T6764] usb 5-1: config 0 descriptor?? [ 872.652624][ T6764] usb 5-1: 0:0 : invalid sync pipe. bmAttributes 01, bLength 9, bSynchAddress 25 [ 872.881775][ T9402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.086153][ T9402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.289969][ T6764] usb 5-1: USB disconnect, device number 10 [ 873.610492][ T9417] udevd[9417]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 874.043231][ T9424] loop7: detected capacity change from 0 to 2048 [ 874.292952][ T9424] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 874.384601][ T9426] loop6: detected capacity change from 0 to 7 [ 874.446355][ T9312] Dev loop6: unable to read RDB block 7 [ 874.469818][ T9312] loop6: unable to read partition table [ 875.896412][ T9] loop: Write error at byte offset 50, length 3584. [ 875.927504][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 1 [ 875.937190][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 1 [ 875.965494][ T9312] loop6: partition table beyond EOD, truncated [ 876.062083][ T9432] loop9: detected capacity change from 0 to 2048 [ 876.073830][ T9426] Dev loop6: unable to read RDB block 7 [ 876.082832][ T9426] loop6: unable to read partition table [ 876.103310][ T9426] loop6: partition table beyond EOD, truncated [ 876.113237][ T9426] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 876.187102][ T9432] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 876.293392][ T27] kauditd_printk_skb: 58 callbacks suppressed [ 876.293408][ T27] audit: type=1800 audit(1770053526.333:95): pid=9432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1063" name="bus" dev="loop9" ino=1436 res=0 errno=0 [ 877.114827][ T9449] loop9: detected capacity change from 0 to 8 [ 877.281056][ T9449] SQUASHFS error: zlib decompression failed, data probably corrupt [ 877.313915][ T9447] loop7: detected capacity change from 0 to 4096 [ 877.329617][ T9449] SQUASHFS error: Failed to read block 0x9b: -5 [ 877.346185][ T9449] SQUASHFS error: Unable to read metadata cache entry [99] [ 877.395782][ T9447] EXT4-fs: Ignoring removed bh option [ 877.419373][ T9449] SQUASHFS error: Unable to read inode 0x127 [ 877.500900][ T9447] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 877.734606][ T9447] EXT4-fs error (device loop7): ext4_get_first_dir_block:3603: inode #12: block 80: comm syz.7.1071: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 877.846754][ T9447] EXT4-fs (loop7): Remounting filesystem read-only [ 877.885775][ T9447] EXT4-fs error (device loop7): ext4_get_first_dir_block:3605: inode #12: comm syz.7.1071: directory missing '..' [ 877.957465][ T9447] EXT4-fs (loop7): Remounting filesystem read-only [ 878.501639][ T6017] EXT4-fs (loop7): unmounting filesystem. [ 878.901121][ T9463] loop7: detected capacity change from 0 to 1024 [ 882.868351][ T27] audit: type=1326 audit(1770053532.903:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.4.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ebd9aeb9 code=0x7ffc0000 [ 882.944741][ T9490] loop4: detected capacity change from 0 to 512 [ 883.307707][ T27] audit: type=1326 audit(1770053532.943:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.4.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ebd9aeb9 code=0x7ffc0000 [ 883.359700][ T27] audit: type=1326 audit(1770053532.943:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.4.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe3ebd9aeb9 code=0x7ffc0000 [ 883.383278][ T27] audit: type=1326 audit(1770053532.943:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.4.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ebd9aeb9 code=0x7ffc0000 [ 883.414251][ T27] audit: type=1326 audit(1770053532.943:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.4.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ebd9aeb9 code=0x7ffc0000 [ 883.433473][ T9490] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 883.502029][ T27] audit: type=1326 audit(1770053532.973:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.4.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fe3ebd9aeb9 code=0x7ffc0000 [ 883.532414][ T27] audit: type=1326 audit(1770053532.973:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.4.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ebd9aeb9 code=0x7ffc0000 [ 883.618630][ T27] audit: type=1326 audit(1770053532.973:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.4.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ebd9aeb9 code=0x7ffc0000 [ 883.737204][ T27] audit: type=1326 audit(1770053532.973:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.4.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe3ebd9aeb9 code=0x7ffc0000 [ 883.788452][ T7688] EXT4-fs (loop4): unmounting filesystem. [ 883.866741][ T27] audit: type=1326 audit(1770053532.973:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.4.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe3ebd9ac22 code=0x7ffc0000 [ 891.270057][ T9540] loop9: detected capacity change from 0 to 8 [ 891.385292][ T9540] SQUASHFS error: zlib decompression failed, data probably corrupt [ 891.449756][ T9540] SQUASHFS error: Failed to read block 0x9b: -5 [ 891.456097][ T9540] SQUASHFS error: Unable to read metadata cache entry [99] [ 891.530700][ T9540] SQUASHFS error: Unable to read inode 0x127 [ 892.579382][ T4338] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 894.039367][ T4338] usb 5-1: device descriptor read/64, error -71 [ 894.319402][ T4338] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 894.886001][ T4338] usb 5-1: device descriptor read/64, error -71 [ 895.079484][ T4338] usb usb5-port1: attempt power cycle [ 895.397708][ T9562] loop4: detected capacity change from 0 to 1024 [ 895.563629][ T9562] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 895.587775][ T9562] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 895.632398][ T9564] loop7: detected capacity change from 0 to 2048 [ 895.695291][ T9562] EXT4-fs error (device loop4): ext4_get_journal_inode:5756: inode #5: comm syz.4.1094: unexpected bad inode w/o EXT4_IGET_BAD [ 895.772159][ T9562] EXT4-fs (loop4): no journal found [ 895.798519][ T9562] EXT4-fs (loop4): can't get journal size [ 895.831012][ T9564] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 895.875165][ T9562] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 895.994662][ T9572] loop9: detected capacity change from 0 to 256 [ 897.429215][ T7688] EXT4-fs (loop4): unmounting filesystem. [ 899.704814][ T9591] loop9: detected capacity change from 0 to 128 [ 899.880212][ T9591] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 899.971190][ T9591] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 900.581642][ T8155] EXT4-fs (loop9): unmounting filesystem. [ 900.707576][ T9599] loop8: detected capacity change from 0 to 8 [ 901.349431][ T9603] SQUASHFS error: lzo decompression failed, data probably corrupt [ 901.357549][ T9603] SQUASHFS error: Failed to read block 0x144: -5 [ 901.364083][ T9603] SQUASHFS error: Unable to read metadata cache entry [142] [ 901.371544][ T9603] SQUASHFS error: Unable to read directory block [142:26] [ 901.548042][ T9602] SQUASHFS error: Unable to read metadata cache entry [142] [ 901.555482][ T9602] SQUASHFS error: Unable to read directory block [142:26] [ 902.863546][ T9616] loop7: detected capacity change from 0 to 512 [ 902.932344][ T9616] EXT4-fs: Ignoring removed nomblk_io_submit option [ 902.939043][ T9616] EXT4-fs: inline encryption not supported [ 903.055119][ T9616] ext4: Unknown parameter 'appraise' [ 904.240780][ T9628] loop7: detected capacity change from 0 to 8 [ 904.338163][ T9628] SQUASHFS error: zlib decompression failed, data probably corrupt [ 904.377162][ T9628] SQUASHFS error: Failed to read block 0x9b: -5 [ 904.438061][ T9628] SQUASHFS error: Unable to read metadata cache entry [99] [ 904.503942][ T9628] SQUASHFS error: Unable to read inode 0x127 [ 906.849260][ T4382] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 907.059252][ T4382] usb 1-1: Using ep0 maxpacket: 8 [ 907.081635][ T4382] usb 1-1: unable to get BOS descriptor or descriptor too short [ 907.120623][ T4382] usb 1-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 907.159431][ T4382] usb 1-1: config 12 interface 0 altsetting 7 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 907.211392][ T4382] usb 1-1: config 12 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 907.285684][ T4382] usb 1-1: config 12 interface 0 has no altsetting 0 [ 907.310134][ T4382] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 907.339208][ T4382] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 907.357632][ T4382] usb 1-1: Product: syz [ 907.367797][ T4382] usb 1-1: SerialNumber: syz [ 907.624071][ T4382] usb 1-1: USB disconnect, device number 15 [ 907.943651][ T9656] netlink: 'syz.8.1113': attribute type 1 has an invalid length. [ 908.313200][ T9663] loop4: detected capacity change from 0 to 8 [ 908.592372][ T9667] SQUASHFS error: lzo decompression failed, data probably corrupt [ 908.643419][ T9667] SQUASHFS error: Failed to read block 0x144: -5 [ 908.650064][ T9667] SQUASHFS error: Unable to read metadata cache entry [142] [ 908.657512][ T9667] SQUASHFS error: Unable to read directory block [142:26] [ 908.730552][ T9666] SQUASHFS error: Unable to read metadata cache entry [142] [ 908.738047][ T9666] SQUASHFS error: Unable to read directory block [142:26] [ 910.254557][ T9664] loop8: detected capacity change from 0 to 2048 [ 910.408170][ T9675] loop4: detected capacity change from 0 to 512 [ 910.496461][ T9664] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 910.505920][ T9675] EXT4-fs (loop4): Test dummy encryption mode enabled [ 910.535507][ T9675] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 910.628136][ T9675] EXT4-fs (loop4): 1 truncate cleaned up [ 910.640207][ T9675] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 912.002091][ T9680] loop7: detected capacity change from 0 to 128 [ 912.246435][ T7688] EXT4-fs (loop4): unmounting filesystem. [ 915.492484][ T9722] usb usb8: usbfs: process 9722 (syz.9.1119) did not claim interface 0 before use [ 917.366314][ T9737] loop8: detected capacity change from 0 to 256 [ 926.255996][ T9770] tipc: Started in network mode [ 926.262320][ T9770] tipc: Node identity 7f000001, cluster identity 4711 [ 926.270075][ T9770] tipc: Enabling of bearer rejected, failed to enable media [ 926.280163][ T4281] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 926.290970][ T4281] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 926.303168][ T4281] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 926.311488][ T4281] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 926.319595][ T4281] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 926.327404][ T4281] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 929.639084][ T4279] Bluetooth: hci5: command 0x0409 tx timeout [ 930.012528][ T4355] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.221736][ T9786] loop6: detected capacity change from 0 to 7 [ 930.249411][ T9786] Dev loop6: unable to read RDB block 7 [ 930.255081][ T9786] loop6: unable to read partition table [ 930.268834][ T4355] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.700812][ T4279] Bluetooth: hci5: command 0x041b tx timeout [ 931.709966][ T9786] loop6: partition table beyond EOD, truncated [ 931.732342][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.739042][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.759336][ T9786] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 932.181089][ T4355] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.377741][ T4355] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.348996][ T9767] chnl_net:caif_netlink_parms(): no params data found [ 933.382431][ T4803] loop: Write error at byte offset 50, length 3584. [ 933.399355][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 1 [ 933.409020][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 1 [ 933.812512][ T4279] Bluetooth: hci5: command 0x040f tx timeout [ 933.859542][ T9803] loop4: detected capacity change from 0 to 1024 [ 934.877297][ T9767] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.885365][ T9767] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.924293][ T9767] device bridge_slave_0 entered promiscuous mode [ 935.435946][ T9803] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 935.529548][ T9803] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 935.579662][ T9767] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.586934][ T9767] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.592003][ T9812] loop8: detected capacity change from 0 to 512 [ 935.607452][ T9767] device bridge_slave_1 entered promiscuous mode [ 935.741875][ T9767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 935.800347][ T9767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 935.832212][ T9767] team0: Port device team_slave_0 added [ 935.839884][ T4279] Bluetooth: hci5: command 0x0419 tx timeout [ 935.896070][ T9812] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 935.938245][ T9767] team0: Port device team_slave_1 added [ 935.959641][ T9812] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 935.991020][ T9767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 936.018452][ T9767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 936.199407][ T9767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 936.246877][ T7168] EXT4-fs (loop8): unmounting filesystem. [ 937.783601][ T9767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 937.820500][ T9767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 937.889253][ T9767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 938.238240][ T7688] EXT4-fs (loop4): unmounting filesystem. [ 938.414041][ T9767] device hsr_slave_0 entered promiscuous mode [ 938.460816][ T9767] device hsr_slave_1 entered promiscuous mode [ 939.559391][ T9767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 939.567051][ T9767] Cannot create hsr debugfs directory [ 940.020269][ T9835] snd_dummy snd_dummy.0: control 0:7841:0:syz0:0 is already present [ 947.340258][ T9865] loop9: detected capacity change from 0 to 512 [ 947.444402][ T9865] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 947.472392][ T9865] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 950.419379][ T8155] EXT4-fs (loop9): unmounting filesystem. [ 950.675712][ T9898] loop9: detected capacity change from 0 to 2048 [ 950.754303][ T9898] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 952.479283][ T9913] loop8: detected capacity change from 0 to 256 [ 957.487981][ T4355] device hsr_slave_0 left promiscuous mode [ 957.593102][ T4355] device hsr_slave_1 left promiscuous mode [ 957.721592][ T4355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 957.753140][ T4355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 957.813040][ T4355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 957.825952][ T4355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 957.866006][ T4355] device bridge_slave_1 left promiscuous mode [ 957.888389][ T4355] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.916315][ T4355] device bridge_slave_0 left promiscuous mode [ 957.922645][ T4355] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.135637][ T4355] device veth1_macvtap left promiscuous mode [ 958.146702][ T4355] device veth0_macvtap left promiscuous mode [ 958.171117][ T4355] device veth1_vlan left promiscuous mode [ 958.179821][ T4355] device veth0_vlan left promiscuous mode [ 958.315498][ T9946] loop8: detected capacity change from 0 to 128 [ 958.414977][ T951] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 960.344633][ T951] usb 10-1: Using ep0 maxpacket: 32 [ 960.352579][ T951] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 960.484044][ T951] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 960.495759][ T951] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 960.508426][ T951] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 960.544156][ T951] usb 10-1: config 0 interface 0 has no altsetting 0 [ 960.565719][ T951] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 960.603907][ T951] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 960.618943][ T951] usb 10-1: Product: syz [ 960.623287][ T951] usb 10-1: Manufacturer: syz [ 960.644869][ T951] usb 10-1: SerialNumber: syz [ 960.675088][ T9957] loop8: detected capacity change from 0 to 2048 [ 960.684074][ T951] usb 10-1: config 0 descriptor?? [ 960.694881][ T951] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 960.708070][ T951] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 960.774847][ T9957] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 960.942936][ T7168] EXT4-fs (loop8): unmounting filesystem. [ 961.877334][ T8515] usb 10-1: USB disconnect, device number 9 [ 961.910807][ T8515] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 965.234987][ T9983] loop9: detected capacity change from 0 to 2048 [ 965.247902][ T9983] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 965.295608][ T4355] team0 (unregistering): Port device team_slave_1 removed [ 965.361522][ T9889] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 965.522833][ T4355] team0 (unregistering): Port device team_slave_0 removed [ 965.563427][ T9889] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 965.575611][ T9889] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 965.598146][ T9889] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 965.617030][ T9889] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 965.641371][ T9889] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 965.667302][ T9889] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 965.686451][ T9889] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 965.704176][ T9889] usb 9-1: Product: syz [ 965.712740][ T9889] usb 9-1: Manufacturer: syz [ 965.733209][ T9889] cdc_wdm 9-1:1.0: skipping garbage [ 965.745218][ T9889] cdc_wdm 9-1:1.0: skipping garbage [ 965.765493][ T9889] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 965.778097][ T9889] cdc_wdm 9-1:1.0: Unknown control protocol [ 965.902399][ T4355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 966.190449][ T9986] loop9: detected capacity change from 0 to 128 [ 966.230309][ T9988] loop4: detected capacity change from 0 to 256 [ 966.378125][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 966.378143][ T27] audit: type=1800 audit(1770053643.417:120): pid=9988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1173" name="file1" dev="loop4" ino=1048629 res=0 errno=0 [ 966.454892][ T4355] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 966.628465][ T8515] usb 9-1: USB disconnect, device number 11 [ 967.475493][ T9996] loop9: detected capacity change from 0 to 2048 [ 968.551239][ T9996] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 968.684446][ T8155] EXT4-fs (loop9): unmounting filesystem. [ 970.159483][ T4347] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 970.361045][ T4347] usb 5-1: config index 0 descriptor too short (expected 63524, got 36) [ 970.372960][ T4347] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 23, changing to 4 [ 970.399927][ T4347] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 52925, setting to 1023 [ 970.451412][ T4347] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 970.472006][ T4347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.489164][ T4347] usb 5-1: Product: syz [ 970.499223][ T4347] usb 5-1: Manufacturer: syz [ 970.503977][ T4347] usb 5-1: SerialNumber: syz [ 970.533869][ T4347] usb 5-1: config 0 descriptor?? [ 970.573786][ T4347] usb 5-1: 0:0 : invalid sync pipe. bmAttributes 01, bLength 9, bSynchAddress 25 [ 971.178236][T10005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 971.287832][T10005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 971.375184][ T4347] usb 5-1: USB disconnect, device number 14 [ 971.403886][ T4355] bond0 (unregistering): Released all slaves [ 971.602057][ T9889] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 971.681759][T10020] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 971.858479][ T9889] usb 10-1: Using ep0 maxpacket: 8 [ 971.918319][ T9889] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 972.245494][ T9889] usb 10-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 972.427414][ T9889] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.478213][ T9875] udevd[9875]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 972.513523][ T9889] usb 10-1: Product: syz [ 972.519149][ T9767] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 972.540369][ T9889] usb 10-1: Manufacturer: syz [ 972.568951][ T9767] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 972.577298][ T9889] usb 10-1: SerialNumber: syz [ 972.599614][ T9767] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 972.614627][ T9889] usb 10-1: config 0 descriptor?? [ 972.630079][ T9767] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 972.657407][ T9889] ati_remote 10-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 972.699315][T10026] loop4: detected capacity change from 0 to 128 [ 972.884255][T10032] loop8: detected capacity change from 0 to 2048 [ 972.919841][T10006] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 972.930544][T10032] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 972.944706][T10036] xt_bpf: check failed: parse error [ 972.969804][ T9889] usb 10-1: USB disconnect, device number 10 [ 974.147085][ T4347] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 974.177462][ T9767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 974.368924][ T4347] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 974.423226][ T9767] 8021q: adding VLAN 0 to HW filter on device team0 [ 974.440551][ T4347] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 974.473303][T10047] loop9: detected capacity change from 0 to 256 [ 974.488902][T10047] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 974.516218][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 974.525385][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 974.533644][ T4347] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 974.581538][ T4347] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 974.599753][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 974.614250][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 974.626976][ T4347] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 974.640097][ T4551] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.647311][ T4551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 974.659239][ T4347] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 974.668769][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 974.676253][ T4347] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 974.687804][ T4347] usb 1-1: Product: syz [ 974.692469][ T4347] usb 1-1: Manufacturer: syz [ 974.706812][ T4347] cdc_wdm 1-1:1.0: skipping garbage [ 974.715398][ T4347] cdc_wdm 1-1:1.0: skipping garbage [ 974.716535][ T1104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 974.737480][ T4347] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 974.749693][ T4347] cdc_wdm 1-1:1.0: Unknown control protocol [ 974.790511][ T1104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 974.811477][T10049] loop4: detected capacity change from 0 to 2048 [ 974.850278][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.857518][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 974.884120][ T1104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 974.904577][ T1104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 974.956369][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 974.982549][T10049] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 975.042393][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 975.140299][ T7688] EXT4-fs (loop4): unmounting filesystem. [ 975.229825][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 975.267405][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 975.327971][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 975.383782][ T9767] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 975.425192][ T9767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 976.919944][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 976.957983][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 976.976900][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 977.011236][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 977.031515][ T4326] usb 1-1: USB disconnect, device number 16 [ 977.066579][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 979.193906][ T9767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 979.242473][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 979.276724][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 979.352016][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 979.371278][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 979.473204][ T9767] device veth0_vlan entered promiscuous mode [ 979.520166][ T9767] device veth1_vlan entered promiscuous mode [ 979.558033][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 979.605073][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 980.452920][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 980.654419][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 980.694815][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 980.724986][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 982.187305][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 982.398584][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 982.743007][ T9767] device veth0_macvtap entered promiscuous mode [ 982.796096][ T9767] device veth1_macvtap entered promiscuous mode [ 983.263341][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 985.787775][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 985.801551][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 985.810265][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 985.818503][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 985.826299][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 985.833799][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 987.900619][ T48] Bluetooth: hci4: command 0x0409 tx timeout [ 987.918496][ T27] audit: type=1326 audit(1770053673.964:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10122 comm="syz.4.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ebd9aeb9 code=0x7ffc0000 [ 988.916887][ T27] audit: type=1326 audit(1770053673.964:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10122 comm="syz.4.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ebd9aeb9 code=0x7ffc0000 [ 988.976815][ T27] audit: type=1326 audit(1770053673.964:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10122 comm="syz.4.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fe3ebd9aeb9 code=0x7ffc0000 [ 989.042253][ T27] audit: type=1326 audit(1770053673.964:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10122 comm="syz.4.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ebd9aeb9 code=0x7ffc0000 [ 989.090531][ T27] audit: type=1326 audit(1770053673.964:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10122 comm="syz.4.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ebd9aeb9 code=0x7ffc0000 [ 989.140448][ T27] audit: type=1326 audit(1770053673.964:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10122 comm="syz.4.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fe3ebd9aeb9 code=0x7ffc0000 [ 989.188867][ T27] audit: type=1326 audit(1770053673.964:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10122 comm="syz.4.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ebd9aeb9 code=0x7ffc0000 [ 989.277545][ T27] audit: type=1326 audit(1770053673.964:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10122 comm="syz.4.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ebd9aeb9 code=0x7ffc0000 [ 989.405983][ T27] audit: type=1326 audit(1770053673.964:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10122 comm="syz.4.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fe3ebd9aeb9 code=0x7ffc0000 [ 989.464051][T10132] loop4: detected capacity change from 0 to 128 [ 989.525772][ T27] audit: type=1326 audit(1770053673.964:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10122 comm="syz.4.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ebd9aeb9 code=0x7ffc0000 [ 989.931521][T10142] loop4: detected capacity change from 0 to 512 [ 989.966691][T10142] EXT4-fs (loop4): orphan cleanup on readonly fs [ 989.980599][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 990.084404][T10142] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.1211: bad orphan inode 13 [ 990.233812][T10142] ext4_test_bit(bit=12, block=18) = 1 [ 990.265548][T10142] is_bad_inode(inode)=0 [ 990.268652][T10108] chnl_net:caif_netlink_parms(): no params data found [ 990.269777][T10142] NEXT_ORPHAN(inode)=2130706432 [ 990.269790][T10142] max_ino=32 [ 990.269799][T10142] i_nlink=1 [ 990.270292][T10142] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 990.590209][T10150] loop8: detected capacity change from 0 to 2048 [ 991.400558][ T4382] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 991.435029][T10150] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 991.700589][ T4382] usb 10-1: Using ep0 maxpacket: 16 [ 991.708041][ T4382] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 991.780098][ T4382] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 991.840727][ T4382] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 991.850109][ T4382] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.869609][ T4382] usb 10-1: config 0 descriptor?? [ 991.959893][ T7688] EXT4-fs (loop4): unmounting filesystem. [ 992.061379][ T4279] Bluetooth: hci4: command 0x040f tx timeout [ 992.201267][ T4274] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 992.573763][ T4274] usb 9-1: config index 0 descriptor too short (expected 63524, got 36) [ 992.594068][ T4382] usbhid 10-1:0.0: can't add hid device: -71 [ 992.600260][ T4382] usbhid: probe of 10-1:0.0 failed with error -71 [ 992.616590][ T4274] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 23, changing to 4 [ 992.633870][ T4382] usb 10-1: USB disconnect, device number 11 [ 992.649646][ T4274] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 52925, setting to 1023 [ 992.685737][T10164] loop4: detected capacity change from 0 to 8 [ 992.702945][ T4274] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 992.761064][ T4274] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.792260][ T4274] usb 9-1: Product: syz [ 992.804926][T10164] SQUASHFS error: zlib decompression failed, data probably corrupt [ 992.813526][ T4274] usb 9-1: Manufacturer: syz [ 992.818187][ T4274] usb 9-1: SerialNumber: syz [ 992.876750][ T4274] usb 9-1: config 0 descriptor?? [ 992.888648][T10164] SQUASHFS error: Failed to read block 0x9b: -5 [ 992.902698][ T4274] usb 9-1: 0:0 : invalid sync pipe. bmAttributes 01, bLength 9, bSynchAddress 25 [ 992.935329][T10164] SQUASHFS error: Unable to read metadata cache entry [99] [ 992.981304][T10108] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.988617][T10164] SQUASHFS error: Unable to read inode 0x127 [ 992.996338][T10108] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.020568][T10108] device bridge_slave_0 entered promiscuous mode [ 993.103044][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.109526][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.573300][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 994.630696][ T4274] usb 9-1: USB disconnect, device number 12 [ 994.752127][T10108] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.760956][T10108] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.801491][T10108] device bridge_slave_1 entered promiscuous mode [ 994.966271][T10167] x_tables: ip_tables: osf match: only valid for protocol 6 [ 995.258112][T10176] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1217'. [ 995.280584][T10176] device bridge_slave_1 left promiscuous mode [ 995.316489][T10176] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.316568][T10181] loop8: detected capacity change from 0 to 2048 [ 995.442330][T10181] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 995.462737][T10176] device bridge_slave_0 left promiscuous mode [ 995.510409][T10176] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.182130][T10108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 996.396033][T10108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 996.629120][T10108] team0: Port device team_slave_0 added [ 996.818867][T10199] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 997.263322][T10108] team0: Port device team_slave_1 added [ 997.350166][T10199] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 997.370672][ T4468] device hsr_slave_0 left promiscuous mode [ 997.577422][ T4468] device hsr_slave_1 left promiscuous mode [ 997.589131][ T4468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 997.679891][ T4468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 997.757045][ T4468] device bridge_slave_1 left promiscuous mode [ 997.800787][ T4468] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.874093][ T4468] device bridge_slave_0 left promiscuous mode [ 997.910703][ T4468] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.985390][ T4468] device veth1_macvtap left promiscuous mode [ 998.050580][ T4468] device veth0_macvtap left promiscuous mode [ 998.056725][ T4468] device veth1_vlan left promiscuous mode [ 998.114669][ T4468] device veth0_vlan left promiscuous mode [ 999.351125][ T7168] EXT4-fs (loop8): unmounting filesystem. [ 1000.628114][T10216] loop8: detected capacity change from 0 to 512 [ 1000.669123][T10216] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1000.691457][T10216] EXT4-fs error (device loop8): ext4_orphan_get:1425: comm syz.8.1223: bad orphan inode 13 [ 1000.714759][T10216] ext4_test_bit(bit=12, block=18) = 1 [ 1000.720333][T10216] is_bad_inode(inode)=0 [ 1000.759409][T10216] NEXT_ORPHAN(inode)=2130706432 [ 1000.764446][T10216] max_ino=32 [ 1000.767685][T10216] i_nlink=1 [ 1000.771313][T10216] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1001.021321][ T7168] EXT4-fs (loop8): unmounting filesystem. [ 1002.592517][T10226] loop9: detected capacity change from 0 to 8 [ 1002.617875][T10226] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1002.646534][T10226] SQUASHFS error: Failed to read block 0x9b: -5 [ 1002.694655][T10226] SQUASHFS error: Unable to read metadata cache entry [99] [ 1002.730491][T10226] SQUASHFS error: Unable to read inode 0x127 [ 1004.830514][ T4347] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1005.040680][ T4347] usb 1-1: Using ep0 maxpacket: 16 [ 1005.074458][ T4347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1005.106642][ T4347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1005.145147][ T4347] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1005.170476][ T4347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.209088][ T4347] usb 1-1: config 0 descriptor?? [ 1005.288884][ T4468] team0 (unregistering): Port device team_slave_1 removed [ 1005.500209][ T4468] team0 (unregistering): Port device team_slave_0 removed [ 1005.606821][ T4468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1005.662404][ T4347] savu 0003:1E7D:2D5A.0008: unknown main item tag 0x0 [ 1005.691131][ T4347] savu 0003:1E7D:2D5A.0008: unknown main item tag 0x0 [ 1005.701544][ T4347] savu 0003:1E7D:2D5A.0008: unknown main item tag 0x0 [ 1005.711212][ T4347] savu 0003:1E7D:2D5A.0008: unknown main item tag 0x0 [ 1005.718152][ T4347] savu 0003:1E7D:2D5A.0008: unknown main item tag 0x0 [ 1005.727377][ T4347] savu 0003:1E7D:2D5A.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 1005.731019][ T4274] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1005.803559][ T4468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1005.865002][ T6764] usb 1-1: USB disconnect, device number 17 [ 1005.939625][T10233] fido_id[10233]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1006.010623][ T4274] usb 10-1: Using ep0 maxpacket: 32 [ 1006.022694][ T4274] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 1006.061041][ T4274] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1006.090895][ T4274] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1006.124487][ T4274] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1006.172598][ T4274] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1006.205437][ T4274] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1006.221257][ T4274] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1006.229871][ T4274] usb 10-1: Product: syz [ 1006.264065][ T4274] usb 10-1: Manufacturer: syz [ 1006.269202][ T4274] usb 10-1: SerialNumber: syz [ 1006.304050][ T4274] usb 10-1: config 0 descriptor?? [ 1006.331878][ T4274] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1006.373312][ T4274] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1006.719307][T10235] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1006.750893][T10235] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1006.862676][ T4468] bond0 (unregistering): Released all slaves [ 1006.978836][T10108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1006.989600][T10108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1007.024157][T10108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1007.212755][T10108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1007.219976][T10108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1007.289787][T10108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1007.397966][T10108] device hsr_slave_0 entered promiscuous mode [ 1007.444191][T10108] device hsr_slave_1 entered promiscuous mode [ 1007.455741][T10108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1007.467559][T10108] Cannot create hsr debugfs directory [ 1007.670422][T10239] loop8: detected capacity change from 0 to 8192 [ 1007.709525][T10239] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1007.863241][T10239] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 1046) [ 1007.920530][T10239] FAT-fs (loop8): Filesystem has been set read-only [ 1008.123673][ T7168] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 1046) [ 1009.213486][ T4364] usb 10-1: USB disconnect, device number 12 [ 1009.223722][ T4364] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 1009.659399][T10108] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1009.876764][T10108] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1009.918386][T10267] loop4: detected capacity change from 0 to 256 [ 1009.938460][T10108] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1009.977744][T10267] exfat: Unknown parameter '0x00000000000000030x0000000000000000' [ 1010.003704][T10108] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1011.554690][T10108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1011.645778][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1011.671279][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1011.732286][T10108] 8021q: adding VLAN 0 to HW filter on device team0 [ 1011.783833][ T9738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1011.811371][ T9738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1011.847990][ T9738] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.855266][ T9738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1011.924087][ T9738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1011.967392][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1012.041342][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1012.114730][ T4551] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.122090][ T4551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1012.170692][ T8515] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 1012.178660][ T9738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1012.217277][ T9738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1012.277831][ T9738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1012.329026][ T9738] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1012.361865][T10287] usb usb8: usbfs: process 10287 (syz.4.1229) did not claim interface 0 before use [ 1012.373701][ T9738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1012.403294][ T8515] usb 1-1: config index 0 descriptor too short (expected 63524, got 36) [ 1012.403307][ T9738] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1012.414016][ T9738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1012.437979][ T8515] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 23, changing to 4 [ 1012.481365][ T9738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1012.496739][ T8515] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 52925, setting to 1023 [ 1012.513013][ T9738] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1012.561818][T10108] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1012.585539][ T8515] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1012.614174][T10108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1012.621214][ T8515] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.631055][ T8515] usb 1-1: Product: syz [ 1012.635298][ T8515] usb 1-1: Manufacturer: syz [ 1012.640040][ T8515] usb 1-1: SerialNumber: syz [ 1012.656964][ T9738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1012.672284][ T9738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1012.713193][ T8515] usb 1-1: config 0 descriptor?? [ 1012.756736][ T8515] usb 1-1: 0:0 : invalid sync pipe. bmAttributes 01, bLength 9, bSynchAddress 25 [ 1012.991080][ T8515] usb 1-1: USB disconnect, device number 18 [ 1013.771992][ T8843] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1014.707513][ T8843] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1014.721312][T10108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1014.793324][ T6764] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1015.132201][ T6764] usb 1-1: Using ep0 maxpacket: 16 [ 1015.208556][ T6764] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1015.421027][ T6764] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1015.913616][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1015.925261][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1015.933836][ T6764] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1015.943253][ T6764] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.961406][ T6764] usb 1-1: config 0 descriptor?? [ 1016.006888][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1016.041874][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1016.079671][T10315] loop8: detected capacity change from 0 to 128 [ 1016.099371][T10108] device veth0_vlan entered promiscuous mode [ 1016.127814][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1016.135436][T10315] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1016.160758][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1016.206168][T10108] device veth1_vlan entered promiscuous mode [ 1016.291981][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1016.321603][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1016.351615][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1016.361326][T10315] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1016.373848][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1016.433892][T10108] device veth0_macvtap entered promiscuous mode [ 1016.485634][T10108] device veth1_macvtap entered promiscuous mode [ 1016.578074][T10108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1016.582664][ T6764] usbhid 1-1:0.0: can't add hid device: -71 [ 1016.616779][ T6764] usbhid: probe of 1-1:0.0 failed with error -71 [ 1016.639953][T10108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.661390][ T6764] usb 1-1: USB disconnect, device number 19 [ 1016.679844][T10108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1016.717469][T10108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.768907][T10108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1016.800409][T10108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.824878][T10108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1016.874627][T10108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.908508][T10108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1016.930619][T10108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.961281][T10108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1016.992438][T10108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.033510][T10108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1017.058241][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1017.087696][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1017.100738][ T4274] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1017.131427][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1017.171308][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1017.204664][T10108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1017.235555][T10108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.264618][T10108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1017.310459][ T4274] usb 5-1: Using ep0 maxpacket: 16 [ 1017.316848][T10108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.329222][ T4274] usb 5-1: config 0 has an invalid descriptor of length 43, skipping remainder of the config [ 1017.370514][T10108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1017.381618][ T4274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1017.410534][T10108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.430470][ T4274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1017.441994][T10108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1017.470517][ T4274] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1017.500405][T10108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.511396][ T4274] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1017.530867][T10108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1017.551798][ T4274] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1017.580861][T10108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.591180][ T4274] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1017.599233][ T4274] usb 5-1: Manufacturer: syz [ 1017.610423][T10108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1017.660212][ T4274] usb 5-1: config 0 descriptor?? [ 1017.674260][T10108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.718572][T10108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1017.749707][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1017.772139][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1017.796128][T10108] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.808127][T10319] loop8: detected capacity change from 0 to 40427 [ 1017.814785][T10108] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.882499][T10108] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.917282][T10319] F2FS-fs (loop8): invalid crc value [ 1017.937117][T10108] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.022373][T10319] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1018.250599][ T4274] rc_core: IR keymap rc-hauppauge not found [ 1018.257178][ T4274] Registered IR keymap rc-empty [ 1018.271621][ T7540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1018.293234][ T4274] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1018.301907][ T7540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.376489][ T8283] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1018.384234][ T4274] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1018.394699][T10319] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1018.418747][ T8283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1018.431461][ T4274] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1018.455109][ T8283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.476636][ T4274] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input22 [ 1018.511425][ T7540] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1018.528120][ T4274] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1019.358411][ T4274] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1019.470714][ T4274] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1019.520632][ T4274] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1019.607121][ T7168] syz-executor: attempt to access beyond end of device [ 1019.607121][ T7168] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1019.630658][ T4274] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1019.701407][ T4274] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1019.730661][ T4274] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1021.139748][ T4274] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1021.230636][ T4274] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1021.336824][ T4274] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1021.391984][ T4274] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1021.412507][ T4274] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1022.551380][ T4274] usb 5-1: USB disconnect, device number 15 [ 1023.889180][T10377] loop9: detected capacity change from 0 to 256 [ 1024.145123][T10377] syz.9.1252: attempt to access beyond end of device [ 1024.145123][T10377] loop9: rw=2049, sector=256, nr_sectors = 256 limit=256 [ 1024.861148][ T4364] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1025.090556][ T4364] usb 10-1: Using ep0 maxpacket: 16 [ 1025.098826][ T4364] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1025.175166][ T4364] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1025.232043][ T4364] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1025.976459][T10396] loop4: detected capacity change from 0 to 40427 [ 1027.483112][ T4364] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.492757][ T4364] usb 10-1: config 0 descriptor?? [ 1028.497768][T10396] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 1028.515267][T10396] F2FS-fs (loop4): invalid crc value [ 1028.520798][T10396] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-12) [ 1029.348714][ T4364] usbhid 10-1:0.0: can't add hid device: -71 [ 1029.360945][ T4364] usbhid: probe of 10-1:0.0 failed with error -71 [ 1029.445418][ T4364] usb 10-1: USB disconnect, device number 13 [ 1029.563492][T10403] loop9: detected capacity change from 0 to 256 [ 1029.903627][T10403] syz.9.1256: attempt to access beyond end of device [ 1029.903627][T10403] loop9: rw=2049, sector=256, nr_sectors = 168 limit=256 [ 1030.045929][ T4364] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1030.250586][ T4364] usb 9-1: Using ep0 maxpacket: 16 [ 1030.260136][ T4364] usb 9-1: config 0 has an invalid descriptor of length 43, skipping remainder of the config [ 1030.320952][ T4364] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1030.537697][ T4364] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1030.548075][ T4364] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1030.557997][ T4364] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1030.785110][T10421] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1258'. [ 1030.796170][T10421] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1258'. [ 1032.484783][ T4364] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1032.553986][ T4364] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1032.574204][ T4364] usb 9-1: Manufacturer: syz [ 1032.599712][ T4364] usb 9-1: config 0 descriptor?? [ 1032.744719][ T4364] usb 9-1: can't set config #0, error -71 [ 1032.807510][ T4364] usb 9-1: USB disconnect, device number 13 [ 1034.134057][T10433] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1037.055649][T10447] loop4: detected capacity change from 0 to 2048 [ 1037.090117][T10447] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1039.143990][T10463] loop8: detected capacity change from 0 to 512 [ 1039.156198][T10463] FAT-fs (loop8): Unrecognized mount option "" or missing value [ 1040.001964][ T4364] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1040.025149][T10027] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1040.200735][ T4364] usb 5-1: Using ep0 maxpacket: 16 [ 1040.214005][ T4364] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1040.296976][ T4364] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1040.358213][ T4364] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1040.406871][ T4364] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.451281][ T4364] usb 5-1: config 0 descriptor?? [ 1040.600466][ T4326] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1041.772065][T10477] loop9: detected capacity change from 0 to 512 [ 1041.800564][ T4326] usb 9-1: Using ep0 maxpacket: 16 [ 1041.802528][ T4364] usbhid 5-1:0.0: can't add hid device: -71 [ 1041.817183][ T4326] usb 9-1: config 0 has an invalid descriptor of length 43, skipping remainder of the config [ 1041.832228][ T4364] usbhid: probe of 5-1:0.0 failed with error -71 [ 1041.879239][ T4364] usb 5-1: USB disconnect, device number 16 [ 1041.885422][T10477] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1041.899933][ T4326] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1041.933956][T10477] EXT4-fs: inline encryption not supported [ 1041.947785][T10477] ext4: Unknown parameter 'appraise' [ 1041.957618][ T4326] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1042.002409][ T4326] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1042.058880][ T4326] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1042.189372][ T4326] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1042.255682][ T4326] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1042.293327][ T4326] usb 9-1: Manufacturer: syz [ 1042.481402][ T4326] usb 9-1: config 0 descriptor?? [ 1044.523572][ T4326] rc_core: IR keymap rc-hauppauge not found [ 1044.529571][ T4326] Registered IR keymap rc-empty [ 1044.586654][ T4326] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1044.640495][ T4326] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1044.674302][ T4326] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1044.761890][ T4326] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input23 [ 1044.868562][ T4326] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1044.930505][ T4326] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1045.011580][ T4326] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1045.091602][ T4326] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1045.170573][ T4326] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1045.203095][ T4326] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1046.750731][ T4326] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1046.790603][ T4326] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1046.861034][ T4326] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1046.900791][ T4326] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1046.957045][ T4326] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1046.985529][ T4326] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1047.045055][ T4326] usb 9-1: USB disconnect, device number 14 [ 1049.368994][T10521] loop8: detected capacity change from 0 to 256 [ 1054.542939][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.549338][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.646615][T10539] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1054.771759][T10539] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1072.389266][T10619] hub 8-0:1.0: USB hub found [ 1072.396944][T10619] hub 8-0:1.0: 1 port detected [ 1075.083636][T10638] loop1: detected capacity change from 0 to 512 [ 1075.130611][T10638] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1076.796153][T10638] EXT4-fs (loop1): 1 orphan inode deleted [ 1076.846494][T10638] EXT4-fs (loop1): 1 truncate cleaned up [ 1076.910456][T10638] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1078.625881][T10108] EXT4-fs (loop1): unmounting filesystem. [ 1078.801087][T10653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1312'. [ 1083.636239][T10690] loop8: detected capacity change from 0 to 512 [ 1083.695588][T10690] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 1083.749544][T10690] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1087.855792][T10717] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1328'. [ 1087.951657][T10717] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.960511][T10717] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.153776][T10723] loop1: detected capacity change from 0 to 256 [ 1092.166442][T10740] loop4: detected capacity change from 0 to 128 [ 1094.342829][T10758] loop8: detected capacity change from 0 to 128 [ 1094.507467][T10758] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 1095.164517][ T27] kauditd_printk_skb: 20 callbacks suppressed [ 1095.164537][ T27] audit: type=1800 audit(1770053826.201:151): pid=10758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1337" name="file1" dev="loop8" ino=94 res=0 errno=0 [ 1100.436066][T10783] loop9: detected capacity change from 0 to 40427 [ 1100.460573][ T8515] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 1100.583057][T10783] F2FS-fs (loop9): invalid crc value [ 1100.606779][T10783] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1100.650412][ T8515] usb 5-1: device descriptor read/64, error -71 [ 1100.836606][T10783] F2FS-fs (loop9): Start checkpoint disabled! [ 1100.920492][ T8515] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 1100.931038][T10783] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 1100.950414][ T951] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1101.080405][ T8515] usb 5-1: device descriptor read/64, error -71 [ 1101.120539][ T951] usb 9-1: device descriptor read/64, error -71 [ 1101.211027][ T8515] usb usb5-port1: attempt power cycle [ 1101.285792][T10818] loop1: detected capacity change from 0 to 16 [ 1101.301169][T10818] erofs: (device loop1): mounted with root inode @ nid 36. [ 1101.355861][ T4279] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[2088] [ 1101.374676][T10818] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[2088] [ 1101.390426][ T951] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1101.451561][ T27] audit: type=1800 audit(1770053832.511:152): pid=10818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1349" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 1101.531869][ T46] kworker/u4:3: attempt to access beyond end of device [ 1101.531869][ T46] loop9: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1101.550638][ T951] usb 9-1: device descriptor read/64, error -71 [ 1101.612014][ T46] kworker/u4:3: attempt to access beyond end of device [ 1101.612014][ T46] loop9: rw=2049, sector=41000, nr_sectors = 8 limit=40427 [ 1101.627083][ T8515] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 1101.671467][ T951] usb usb9-port1: attempt power cycle [ 1101.690476][ T8515] usb 5-1: device descriptor read/8, error -71 [ 1101.970630][ T8515] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 1102.018708][ T8515] usb 5-1: device descriptor read/8, error -71 [ 1102.100433][ T951] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1102.150843][ T8515] usb usb5-port1: unable to enumerate USB device [ 1102.161252][ T951] usb 9-1: device descriptor read/8, error -71 [ 1103.790722][ T951] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1103.879775][ T951] usb 9-1: device descriptor read/8, error -71 [ 1104.010829][ T951] usb usb9-port1: unable to enumerate USB device [ 1104.413985][T10822] loop1: detected capacity change from 0 to 40427 [ 1104.429225][T10822] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1104.447912][T10822] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1104.499712][T10822] F2FS-fs (loop1): invalid crc value [ 1104.583185][T10822] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1105.581029][T10865] loop1: detected capacity change from 0 to 256 [ 1107.355508][T10873] loop6: detected capacity change from 0 to 7 [ 1108.961007][T10873] Dev loop6: unable to read RDB block 7 [ 1108.998709][T10873] loop6: unable to read partition table [ 1109.004974][T10873] loop6: partition table beyond EOD, truncated [ 1109.011429][T10873] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 1109.149205][ T951] usb 9-1: new full-speed USB device number 19 using dummy_hcd [ 1110.123032][ T46] loop: Write error at byte offset 50, length 3584. [ 1110.140010][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 1 [ 1110.149672][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 1 [ 1110.306076][T10608] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1113.210515][ T4722] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 1113.380699][ T4722] usb 5-1: device descriptor read/64, error -71 [ 1113.595726][T10900] loop8: detected capacity change from 0 to 1024 [ 1113.660605][ T4722] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 1113.670112][T10900] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1113.741030][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 1113.819838][T10900] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1113.840431][ T4722] usb 5-1: device descriptor read/64, error -71 [ 1113.961033][ T4722] usb usb5-port1: attempt power cycle [ 1114.083174][ T7168] EXT4-fs (loop8): unmounting filesystem. [ 1114.370637][ T4722] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 1114.415372][ T4722] usb 5-1: device descriptor read/8, error -71 [ 1114.697620][ T4722] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 1114.906947][ T4347] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1114.907458][ T4722] usb 5-1: device descriptor read/8, error -71 [ 1115.801411][ T4722] usb usb5-port1: unable to enumerate USB device [ 1115.987282][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.992642][ T4347] usb 1-1: device descriptor read/64, error -71 [ 1115.996041][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.480545][ T4347] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1116.680571][ T4347] usb 1-1: device descriptor read/64, error -71 [ 1116.800816][ T4347] usb usb1-port1: attempt power cycle [ 1117.901019][ T4347] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1117.941277][T10942] Illegal XDP return value 4294967294 on prog (id 73) dev N/A, expect packet loss! [ 1117.962343][ T4347] usb 1-1: device descriptor read/8, error -71 [ 1120.680489][ T4347] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1120.723546][ T4347] usb 1-1: device descriptor read/8, error -71 [ 1121.801462][ T4347] usb usb1-port1: unable to enumerate USB device [ 1122.004698][T10962] loop9: detected capacity change from 0 to 256 [ 1126.905252][T10985] loop6: detected capacity change from 0 to 7 [ 1127.069355][T10608] Dev loop6: unable to read RDB block 7 [ 1127.413482][T10608] loop6: unable to read partition table [ 1128.289408][T10608] loop6: partition table beyond EOD, truncated [ 1128.419142][ T4553] loop: Write error at byte offset 50, length 3584. [ 1128.586202][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 1 [ 1128.596096][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 1 [ 1128.666959][T10985] Dev loop6: unable to read RDB block 7 [ 1128.672775][T10985] loop6: unable to read partition table [ 1129.083519][T10985] loop6: partition table beyond EOD, truncated [ 1129.168941][T10985] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 1130.585378][ T6764] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 1130.778143][ T6764] usb 9-1: device descriptor read/64, error -71 [ 1131.807672][ T6764] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 1131.967454][ T6764] usb 9-1: device descriptor read/64, error -71 [ 1132.105409][ T6764] usb usb9-port1: attempt power cycle [ 1133.251635][T11032] loop4: detected capacity change from 0 to 512 [ 1133.357648][T11032] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1133.396732][T11032] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 1133.416162][T11032] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1395: Corrupt directory, running e2fsck is recommended [ 1133.447763][T11032] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 1133.461656][T11032] EXT4-fs error (device loop4): ext4_iget_extra_inode:4756: inode #15: comm syz.4.1395: corrupted in-inode xattr [ 1133.490728][T11024] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1133.509317][T11024] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1133.544920][T11032] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1395: couldn't read orphan inode 15 (err -117) [ 1133.573816][T11024] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1133.583383][T11032] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1133.603632][T11024] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1133.613771][T11024] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1133.681590][T11032] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1133.727629][T11024] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1133.758670][T11024] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1133.765497][T11032] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 1133.802430][T11024] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1133.809621][T11032] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1395: Corrupt directory, running e2fsck is recommended [ 1133.841449][T11032] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 3: comm syz.4.1395: path /116/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 1133.885602][T11024] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 1135.057358][ T48] Bluetooth: hci0: command 0x0c1a tx timeout [ 1135.095941][T11024] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1135.102005][T11024] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1135.112269][T11032] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 22: comm syz.4.1395: path /116/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=65535, size=1024 fake=0 [ 1135.143801][T11024] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1135.153879][T11032] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 8: comm syz.4.1395: path /116/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 1135.203022][T11024] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1135.209625][T11024] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1135.239216][T11024] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1135.370397][ T7688] EXT4-fs (loop4): unmounting filesystem. [ 1135.535652][ T4274] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1135.617104][T11053] loop4: detected capacity change from 0 to 512 [ 1135.655542][ T48] Bluetooth: hci3: command 0x0c1a tx timeout [ 1135.728237][T11053] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1135.738395][ T4274] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1135.765796][ T4274] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1135.775624][T11053] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1135.786227][ T4274] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1135.791771][ T4274] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 1135.815504][ T48] Bluetooth: hci1: command 0x0c1a tx timeout [ 1135.831262][ T4274] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.841043][ T4274] usb 1-1: Product: syz [ 1135.845266][ T4274] usb 1-1: Manufacturer: syz [ 1135.858385][ T4274] usb 1-1: SerialNumber: syz [ 1136.843560][ T4274] usb 1-1: config 0 descriptor?? [ 1137.546450][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 1137.553360][ T48] Bluetooth: hci2: command 0x0c1a tx timeout [ 1137.564557][ T4279] Bluetooth: hci4: command 0x0c1a tx timeout [ 1137.650526][ T4274] usb 1-1: can't set config #0, error -71 [ 1137.704734][ T4274] usb 1-1: USB disconnect, device number 24 [ 1137.734527][T11061] Bluetooth: hci3: command 0x0406 tx timeout [ 1137.837355][ T7688] EXT4-fs (loop4): unmounting filesystem. [ 1137.894678][T11061] Bluetooth: hci1: command 0x0406 tx timeout [ 1140.442480][T11061] Bluetooth: hci2: command 0x0406 tx timeout [ 1140.452432][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 1144.652775][T11115] loop4: detected capacity change from 0 to 256 [ 1145.350107][T11107] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 1145.599507][T11107] usb 10-1: device descriptor read/64, error -71 [ 1145.980849][T11107] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 1146.161561][T11107] usb 10-1: device descriptor read/64, error -71 [ 1146.290939][T11107] usb usb10-port1: attempt power cycle [ 1146.720405][T11107] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 1146.814814][T11107] usb 10-1: device descriptor read/8, error -71 [ 1147.159836][T11107] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 1147.238874][T11107] usb 10-1: device descriptor read/8, error -71 [ 1147.499919][T11107] usb usb10-port1: unable to enumerate USB device [ 1148.949083][T11107] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1149.105946][T11139] loop4: detected capacity change from 0 to 4096 [ 1149.139050][T11107] usb 1-1: Using ep0 maxpacket: 16 [ 1149.152554][T11107] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1149.193738][T11139] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1149.264901][T11107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1149.351286][T11107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1149.452832][T11107] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1150.388475][T11107] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1150.484372][T11107] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1150.491517][T11139] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #15: comm syz.4.1416: corrupted inode contents [ 1150.536847][T11107] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1150.595467][T11107] usb 1-1: Manufacturer: syz [ 1150.668659][T11107] usb 1-1: config 0 descriptor?? [ 1150.696905][T11107] usb 1-1: can't set config #0, error -71 [ 1150.762743][T11107] usb 1-1: USB disconnect, device number 25 [ 1150.869835][T11139] EXT4-fs error (device loop4): ext4_dirty_inode:6137: inode #15: comm syz.4.1416: mark_inode_dirty error [ 1151.082059][T11139] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #15: comm syz.4.1416: corrupted inode contents [ 1151.258490][T11139] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #15: comm syz.4.1416: mark_inode_dirty error [ 1152.077467][T11139] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #15: comm syz.4.1416: corrupted inode contents [ 1152.116026][T11139] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #15: comm syz.4.1416: mark_inode_dirty error [ 1152.138079][T11139] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #15: comm syz.4.1416: corrupted inode contents [ 1152.330084][T11139] EXT4-fs error (device loop4): ext4_truncate:4318: inode #15: comm syz.4.1416: mark_inode_dirty error [ 1152.412812][T11139] EXT4-fs error (device loop4) in ext4_setattr:5676: Corrupt filesystem [ 1152.462510][ T27] audit: type=1804 audit(1770053883.532:153): pid=11146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1416" name="/newroot/121/file1/file1" dev="loop4" ino=15 res=1 errno=0 [ 1152.790573][ T7688] EXT4-fs (loop4): unmounting filesystem. [ 1155.556333][T11176] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 1155.736835][T11176] usb 2-1: device descriptor read/64, error -71 [ 1155.999705][T11206] loop9: detected capacity change from 0 to 512 [ 1156.011999][T11206] FAT-fs (loop9): Unrecognized mount option "" or missing value [ 1156.786381][T11176] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 1156.994960][T11176] usb 2-1: device descriptor read/64, error -71 [ 1157.125125][T11176] usb usb2-port1: attempt power cycle [ 1157.169450][T11214] loop9: detected capacity change from 0 to 512 [ 1157.211440][T11214] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1157.282594][T11214] EXT4-fs: inline encryption not supported [ 1157.309367][T11214] ext4: Unknown parameter 'appraise' [ 1157.534926][T11176] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 1157.585386][T11176] usb 2-1: device descriptor read/8, error -71 [ 1157.864608][T11176] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 1157.905209][T11176] usb 2-1: device descriptor read/8, error -71 [ 1158.059619][T11176] usb usb2-port1: unable to enumerate USB device [ 1159.306188][ T4722] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1159.553292][ T4722] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1159.583739][ T4722] usb 10-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 1159.593751][T11176] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1159.603287][ T4722] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.658273][ T4722] usb 10-1: config 0 descriptor?? [ 1159.939884][T11176] usb 2-1: device descriptor read/64, error -71 [ 1160.105465][ T4722] zeroplus 0003:0C12:0005.0009: unknown main item tag 0x0 [ 1160.159306][ T4722] zeroplus 0003:0C12:0005.0009: hidraw0: USB HID v0.02 Device [HID 0c12:0005] on usb-dummy_hcd.9-1/input0 [ 1160.223468][T11176] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1160.293395][ T4722] zeroplus 0003:0C12:0005.0009: no inputs found [ 1160.377804][ T4722] usb 10-1: USB disconnect, device number 18 [ 1160.393621][T11176] usb 2-1: device descriptor read/64, error -71 [ 1160.513865][T11176] usb usb2-port1: attempt power cycle [ 1160.532998][T11248] fido_id[11248]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1162.120931][T11262] loop4: detected capacity change from 0 to 512 [ 1162.128595][T11262] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 1162.925440][T11019] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1162.957992][T11264] loop1: detected capacity change from 0 to 2048 [ 1163.034641][T11264] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1164.120802][T11298] loop4: detected capacity change from 0 to 512 [ 1164.153897][T11298] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1164.184756][T11298] EXT4-fs: inline encryption not supported [ 1164.191002][T11298] ext4: Unknown parameter 'appraise' [ 1164.321778][ T6367] usb 10-1: new full-speed USB device number 19 using dummy_hcd [ 1164.501863][ T6367] usb 10-1: device descriptor read/64, error -71 [ 1164.791570][ T6367] usb 10-1: new full-speed USB device number 20 using dummy_hcd [ 1166.363608][ T6367] usb 10-1: device descriptor read/64, error -71 [ 1166.492497][ T6367] usb usb10-port1: attempt power cycle [ 1166.920619][ T6367] usb 10-1: new full-speed USB device number 21 using dummy_hcd [ 1166.979307][ T6367] usb 10-1: device descriptor read/8, error -71 [ 1167.316850][T10108] EXT4-fs (loop1): unmounting filesystem. [ 1167.628012][T11325] loop1: detected capacity change from 0 to 512 [ 1167.687005][T11325] EXT4-fs: Ignoring removed oldalloc option [ 1167.789170][T11325] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1168.584003][ T6367] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1168.631955][ T6367] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1168.644736][ T6367] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1168.655944][ T6367] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1168.755540][ T6367] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1168.768416][ T6367] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1168.801612][ T6367] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1169.731220][ T6367] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1169.758135][ T6367] usb 10-1: Product: syz [ 1169.782106][ T6367] usb 10-1: Manufacturer: syz [ 1169.810142][ T6367] cdc_wdm 10-1:1.0: skipping garbage [ 1169.815489][ T6367] cdc_wdm 10-1:1.0: skipping garbage [ 1169.852457][ T6367] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1169.858626][ T6367] cdc_wdm 10-1:1.0: Unknown control protocol [ 1169.868833][T10108] EXT4-fs (loop1): unmounting filesystem. [ 1171.799596][ T4326] usb 10-1: USB disconnect, device number 22 [ 1172.001685][T11353] loop9: detected capacity change from 0 to 2048 [ 1172.077386][T11353] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1172.140727][T11355] loop1: detected capacity change from 0 to 512 [ 1172.199059][ T27] audit: type=1800 audit(1770053903.282:154): pid=11353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1456" name="bus" dev="loop9" ino=1436 res=0 errno=0 [ 1172.204646][T11355] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1172.518415][T11358] snd_dummy snd_dummy.0: control 0:7841:0:syz0:0 is already present [ 1172.827927][T11355] EXT4-fs: inline encryption not supported [ 1173.117535][T11355] ext4: Unknown parameter 'appraise' [ 1173.189654][T11018] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1173.572005][ T4326] usb 10-1: new full-speed USB device number 23 using dummy_hcd [ 1173.810321][ T4326] usb 10-1: config index 0 descriptor too short (expected 63524, got 36) [ 1173.831461][ T4326] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1173.866307][ T4326] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1173.899670][ T4326] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1173.932474][ T4326] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.964707][ T4326] usb 10-1: Product: syz [ 1173.972659][ T4326] usb 10-1: Manufacturer: syz [ 1173.982068][ T4326] usb 10-1: SerialNumber: syz [ 1174.010622][ T4326] usb 10-1: config 0 descriptor?? [ 1174.240697][ T4326] usb 10-1: USB disconnect, device number 23 [ 1176.669889][T11396] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1177.399157][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.405584][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.417074][T11409] loop9: detected capacity change from 0 to 512 [ 1177.619123][T11409] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1177.886898][T11409] EXT4-fs: inline encryption not supported [ 1178.417768][T11409] ext4: Unknown parameter 'appraise' [ 1182.221127][T11449] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1467'. [ 1182.252768][T11118] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1182.444323][T11118] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1182.474108][T11118] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1182.532730][T11118] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1182.541815][T11118] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1182.780313][T11456] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1183.562567][T11118] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1183.630573][T11118] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1183.682271][ T9889] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 1183.700278][T11118] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1183.761191][T11118] usb 5-1: Product: syz [ 1183.780570][T11118] usb 5-1: Manufacturer: syz [ 1183.812742][T11118] cdc_wdm 5-1:1.0: skipping garbage [ 1183.818038][T11118] cdc_wdm 5-1:1.0: skipping garbage [ 1183.883947][ T9889] usb 2-1: config index 0 descriptor too short (expected 63524, got 36) [ 1183.903628][ T9889] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1183.910846][T11118] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1183.939242][T11118] cdc_wdm 5-1:1.0: Unknown control protocol [ 1183.972413][ T9889] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1184.013158][ T9889] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1184.052691][T11445] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 1184.062039][ T9889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.100824][T11445] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 1184.100929][ T9889] usb 2-1: Product: syz [ 1184.140733][ T9889] usb 2-1: Manufacturer: syz [ 1184.150004][ T9889] usb 2-1: SerialNumber: syz [ 1184.167560][ T9889] usb 2-1: config 0 descriptor?? [ 1184.407514][ T9889] usb 2-1: USB disconnect, device number 13 [ 1184.435411][T11473] loop9: detected capacity change from 0 to 512 [ 1184.496453][T11473] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1184.557785][T11473] EXT4-fs: inline encryption not supported [ 1184.608939][T11473] ext4: Unknown parameter 'appraise' [ 1185.935130][ T9889] usb 5-1: USB disconnect, device number 25 [ 1186.376093][T11501] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1187.468567][T11510] loop4: detected capacity change from 0 to 512 [ 1187.481372][T11510] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 1188.281004][T11019] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1190.431398][T11531] loop9: detected capacity change from 0 to 512 [ 1190.549007][T11531] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1190.819035][T11531] EXT4-fs (loop9): 1 truncate cleaned up [ 1190.826279][T11531] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1191.345203][ T8155] EXT4-fs error (device loop9): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1193.647010][T11540] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 297: padding at end of block bitmap is not set [ 1196.780646][ T4468] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.148051][ T4468] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.354733][T11441] EXT4-fs (loop9): unmounting filesystem. [ 1197.394766][ T4468] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.919761][T11610] overlayfs: missing 'workdir' [ 1198.860217][T11615] loop1: detected capacity change from 0 to 2048 [ 1198.882200][T11615] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1199.662171][T11619] loop4: detected capacity change from 0 to 512 [ 1199.692987][ T4468] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.916805][T11619] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1199.974532][T11619] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1200.329715][ T7688] EXT4-fs (loop4): unmounting filesystem. [ 1200.602684][T11631] loop4: detected capacity change from 0 to 512 [ 1200.751885][T11631] ------------[ cut here ]------------ [ 1200.758162][T11631] EA inode 11 i_nlink=2 [ 1200.774250][T11631] WARNING: CPU: 1 PID: 11631 at fs/ext4/xattr.c:1005 ext4_xattr_inode_update_ref+0x4bd/0x510 [ 1200.789552][T11631] Modules linked in: [ 1200.793481][T11631] CPU: 1 PID: 11631 Comm: syz.4.1522 Not tainted syzkaller #0 [ 1200.801724][T11631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1200.812263][T11631] RIP: 0010:ext4_xattr_inode_update_ref+0x4bd/0x510 [ 1200.819055][T11631] Code: 7c 24 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 a4 ce 9b ff 49 8b 37 48 c7 c7 c0 a0 a0 8a 89 da e8 f3 55 16 ff <0f> 0b 4c 8b 64 24 08 4c 8b 7c 24 10 e9 a9 fe ff ff e8 bd c5 f4 07 [ 1200.838867][T11631] RSP: 0018:ffffc9000e85f2e0 EFLAGS: 00010246 [ 1200.845040][T11631] RAX: d64f330862e92100 RBX: 0000000000000002 RCX: 0000000000080000 [ 1200.853033][T11631] RDX: ffffc9000eb0a000 RSI: 0000000000013572 RDI: 0000000000013573 [ 1200.861078][T11631] RBP: ffffc9000e85f3d0 R08: ffff8880b8e279db R09: 1ffff110171c4f3b [ 1200.869110][T11631] R10: dffffc0000000000 R11: ffffed10171c4f3c R12: ffff888053e320c8 [ 1200.877155][T11631] R13: 1ffff1100a7c6458 R14: dffffc0000000000 R15: ffff888053e32108 [ 1200.885206][T11631] FS: 00007fe3e9ff66c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1200.894261][T11631] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1200.901044][T11631] CR2: 00007fff124b5f7c CR3: 000000002e5a7000 CR4: 00000000003506e0 [ 1200.909098][T11631] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1200.917155][T11631] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1200.925202][T11631] Call Trace: [ 1200.928507][T11631] [ 1200.931495][T11631] ? ext4_xattr_block_csum+0x560/0x560 [ 1200.937043][T11631] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 1200.943211][T11631] ext4_xattr_inode_dec_ref_all+0xb03/0x1060 [ 1200.949317][T11631] ? errseq_check+0x3c/0x70 [ 1200.953955][T11631] ? ext4_xattr_delete_inode+0xca0/0xca0 [ 1200.959734][T11631] ? __ext4_journal_ensure_credits+0x450/0x450 [ 1200.965996][T11631] ext4_xattr_delete_inode+0xad1/0xca0 [ 1200.971509][T11631] ? up_write+0x1bb/0x420 [ 1200.975991][T11631] ? ext4_expand_extra_isize_ea+0x1dc0/0x1dc0 [ 1200.982137][T11631] ext4_evict_inode+0xc45/0x1110 [ 1200.987237][T11631] ? _raw_spin_unlock+0x24/0x40 [ 1200.992323][T11631] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1200.998367][T11631] ? do_raw_spin_unlock+0x11d/0x230 [ 1201.003834][T11631] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1201.009827][T11631] evict+0x4c9/0x8d0 [ 1201.013888][T11631] ? proc_nr_inodes+0x2f0/0x2f0 [ 1201.018777][T11631] ? do_raw_spin_unlock+0x11d/0x230 [ 1201.024045][T11631] ? _raw_spin_unlock+0x24/0x40 [ 1201.028918][T11631] ? iput+0x768/0x980 [ 1201.032934][T11631] ext4_orphan_cleanup+0xbeb/0x1420 [ 1201.038297][T11631] ? ext4_orphan_del+0xbf0/0xbf0 [ 1201.043302][T11631] ? errseq_check_and_advance+0x62/0x120 [ 1201.049042][T11631] ext4_fill_super+0x7829/0x7dc0 [ 1201.054064][T11631] ? bdev_name+0x2c1/0x3f0 [ 1201.058572][T11631] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1201.064905][T11631] ? set_blocksize+0x1d0/0x470 [ 1201.069779][T11631] ? sb_set_blocksize+0xa5/0xe0 [ 1201.074879][T11631] get_tree_bdev+0x3f1/0x610 [ 1201.079680][T11631] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1201.086031][T11631] vfs_get_tree+0x88/0x270 [ 1201.090572][T11631] do_new_mount+0x24a/0xa40 [ 1201.095187][T11631] __se_sys_mount+0x2e3/0x3d0 [ 1201.099967][T11631] ? __x64_sys_mount+0xc0/0xc0 [ 1201.104837][T11631] ? lockdep_hardirqs_on+0x94/0x140 [ 1201.110126][T11631] ? __x64_sys_mount+0x1c/0xc0 [ 1201.115127][T11631] do_syscall_64+0x4c/0xa0 [ 1201.119586][T11631] ? clear_bhb_loop+0x60/0xb0 [ 1201.124394][T11631] ? clear_bhb_loop+0x60/0xb0 [ 1201.129140][T11631] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1201.135111][T11631] RIP: 0033:0x7fe3ebd9c14a [ 1201.139642][T11631] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1201.159334][T11631] RSP: 002b:00007fe3e9ff5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1201.167821][T11631] RAX: ffffffffffffffda RBX: 00007fe3e9ff5ee0 RCX: 00007fe3ebd9c14a [ 1201.175882][T11631] RDX: 0000200000000180 RSI: 0000200000000240 RDI: 00007fe3e9ff5ea0 [ 1201.183925][T11631] RBP: 0000200000000180 R08: 00007fe3e9ff5ee0 R09: 0000000000800700 [ 1201.191928][T11631] R10: 0000000000800700 R11: 0000000000000246 R12: 0000200000000240 [ 1201.199967][T11631] R13: 00007fe3e9ff5ea0 R14: 000000000000046f R15: 000000000000002c [ 1201.208092][T11631] [ 1201.211124][T11631] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1201.218538][T11631] CPU: 1 PID: 11631 Comm: syz.4.1522 Not tainted syzkaller #0 [ 1201.226025][T11631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1201.236106][T11631] Call Trace: [ 1201.239397][T11631] [ 1201.242374][T11631] dump_stack_lvl+0x188/0x24e [ 1201.247078][T11631] ? memcpy+0x3c/0x60 [ 1201.251151][T11631] ? show_regs_print_info+0x12/0x12 [ 1201.256462][T11631] ? load_image+0x400/0x400 [ 1201.261098][T11631] panic+0x2e5/0x730 [ 1201.265026][T11631] ? bpf_jit_dump+0xd0/0xd0 [ 1201.269576][T11631] __warn+0x2f8/0x4f0 [ 1201.273589][T11631] ? ext4_xattr_inode_update_ref+0x4bd/0x510 [ 1201.279625][T11631] ? ext4_xattr_inode_update_ref+0x4bd/0x510 [ 1201.285723][T11631] report_bug+0x2ba/0x4f0 [ 1201.290109][T11631] ? ext4_xattr_inode_update_ref+0x4bd/0x510 [ 1201.296212][T11631] handle_bug+0x3a/0x70 [ 1201.300392][T11631] exc_invalid_op+0x16/0x40 [ 1201.304919][T11631] asm_exc_invalid_op+0x16/0x20 [ 1201.309792][T11631] RIP: 0010:ext4_xattr_inode_update_ref+0x4bd/0x510 [ 1201.316405][T11631] Code: 7c 24 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 a4 ce 9b ff 49 8b 37 48 c7 c7 c0 a0 a0 8a 89 da e8 f3 55 16 ff <0f> 0b 4c 8b 64 24 08 4c 8b 7c 24 10 e9 a9 fe ff ff e8 bd c5 f4 07 [ 1201.336059][T11631] RSP: 0018:ffffc9000e85f2e0 EFLAGS: 00010246 [ 1201.342144][T11631] RAX: d64f330862e92100 RBX: 0000000000000002 RCX: 0000000000080000 [ 1201.350134][T11631] RDX: ffffc9000eb0a000 RSI: 0000000000013572 RDI: 0000000000013573 [ 1201.358135][T11631] RBP: ffffc9000e85f3d0 R08: ffff8880b8e279db R09: 1ffff110171c4f3b [ 1201.366122][T11631] R10: dffffc0000000000 R11: ffffed10171c4f3c R12: ffff888053e320c8 [ 1201.374116][T11631] R13: 1ffff1100a7c6458 R14: dffffc0000000000 R15: ffff888053e32108 [ 1201.382123][T11631] ? ext4_xattr_block_csum+0x560/0x560 [ 1201.387626][T11631] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 1201.393729][T11631] ext4_xattr_inode_dec_ref_all+0xb03/0x1060 [ 1201.399758][T11631] ? errseq_check+0x3c/0x70 [ 1201.404285][T11631] ? ext4_xattr_delete_inode+0xca0/0xca0 [ 1201.409942][T11631] ? __ext4_journal_ensure_credits+0x450/0x450 [ 1201.416160][T11631] ext4_xattr_delete_inode+0xad1/0xca0 [ 1201.421659][T11631] ? up_write+0x1bb/0x420 [ 1201.426021][T11631] ? ext4_expand_extra_isize_ea+0x1dc0/0x1dc0 [ 1201.432324][T11631] ext4_evict_inode+0xc45/0x1110 [ 1201.437295][T11631] ? _raw_spin_unlock+0x24/0x40 [ 1201.442194][T11631] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1201.448122][T11631] ? do_raw_spin_unlock+0x11d/0x230 [ 1201.453343][T11631] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1201.459326][T11631] evict+0x4c9/0x8d0 [ 1201.463260][T11631] ? proc_nr_inodes+0x2f0/0x2f0 [ 1201.468154][T11631] ? do_raw_spin_unlock+0x11d/0x230 [ 1201.473492][T11631] ? _raw_spin_unlock+0x24/0x40 [ 1201.478378][T11631] ? iput+0x768/0x980 [ 1201.482384][T11631] ext4_orphan_cleanup+0xbeb/0x1420 [ 1201.487615][T11631] ? ext4_orphan_del+0xbf0/0xbf0 [ 1201.492593][T11631] ? errseq_check_and_advance+0x62/0x120 [ 1201.498296][T11631] ext4_fill_super+0x7829/0x7dc0 [ 1201.503264][T11631] ? bdev_name+0x2c1/0x3f0 [ 1201.507791][T11631] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1201.514106][T11631] ? set_blocksize+0x1d0/0x470 [ 1201.518924][T11631] ? sb_set_blocksize+0xa5/0xe0 [ 1201.523798][T11631] get_tree_bdev+0x3f1/0x610 [ 1201.528425][T11631] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1201.534794][T11631] vfs_get_tree+0x88/0x270 [ 1201.539316][T11631] do_new_mount+0x24a/0xa40 [ 1201.543841][T11631] __se_sys_mount+0x2e3/0x3d0 [ 1201.548536][T11631] ? __x64_sys_mount+0xc0/0xc0 [ 1201.553565][T11631] ? lockdep_hardirqs_on+0x94/0x140 [ 1201.558803][T11631] ? __x64_sys_mount+0x1c/0xc0 [ 1201.563608][T11631] do_syscall_64+0x4c/0xa0 [ 1201.568088][T11631] ? clear_bhb_loop+0x60/0xb0 [ 1201.572843][T11631] ? clear_bhb_loop+0x60/0xb0 [ 1201.577580][T11631] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1201.583497][T11631] RIP: 0033:0x7fe3ebd9c14a [ 1201.587927][T11631] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1201.607702][T11631] RSP: 002b:00007fe3e9ff5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1201.616141][T11631] RAX: ffffffffffffffda RBX: 00007fe3e9ff5ee0 RCX: 00007fe3ebd9c14a [ 1201.624182][T11631] RDX: 0000200000000180 RSI: 0000200000000240 RDI: 00007fe3e9ff5ea0 [ 1201.632262][T11631] RBP: 0000200000000180 R08: 00007fe3e9ff5ee0 R09: 0000000000800700 [ 1201.640249][T11631] R10: 0000000000800700 R11: 0000000000000246 R12: 0000200000000240 [ 1201.648239][T11631] R13: 00007fe3e9ff5ea0 R14: 000000000000046f R15: 000000000000002c [ 1201.656238][T11631] [ 1201.659882][T11631] Kernel Offset: disabled [ 1201.664310][T11631] Rebooting in 86400 seconds..