last executing test programs: 16.014532433s ago: executing program 1 (id=1154): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x90) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) listen(r3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x4f, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) socket$netlink(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000100)={{}, {0xe}, 0x0, 0x7}) 15.209969159s ago: executing program 1 (id=1157): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@var]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000380)=0x80000001) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 14.34028124s ago: executing program 1 (id=1159): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x32) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, 0x0) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000017c0)) close_range(r0, 0xffffffffffffffff, 0x0) 13.012578278s ago: executing program 1 (id=1162): r0 = socket(0xa, 0x6, 0x0) connect$can_j1939(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, {0x1}}, 0x18) 12.457903753s ago: executing program 1 (id=1165): r0 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0004b263ea8ccc91ad27982bb190b711615eae80a191ee06cb2052ef9dcc5216c23abaf275fb830ee311ab88b67798f5a638905f32bce175557217f8e9e2b159017e6debab3bc24d8c43b3e08094123d8b01800000e79395ab301178f51b8640bd10d6836d1ad9ada375a0923ee3c1c8104dce169090fa5e10991f27862608b09844a88cdc9cb54f5ce63201b3a0facc48535d1744101e00cc29ef25616725326deea45161999363a9000000000000", @ANYRES32=r0, @ANYRESOCT=r0, @ANYRESHEX, @ANYRES64=r0], 0x1, 0x232, &(0x7f0000000980)="$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") 11.070205716s ago: executing program 1 (id=1171): move_pages(0x0, 0x20000000000001ab, &(0x7f0000000000), 0x0, &(0x7f0000000000)=[0x0], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0055ba5d820000000000f7ffdeff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 5.87653691s ago: executing program 4 (id=1194): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r0, 0x0) ftruncate(r0, 0xc17a) prlimit64(0x0, 0x3, &(0x7f0000000040), 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x1de) close(r1) execve(&(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000080)=[&(0x7f00000002c0)='g\\B\xc6+\xd5\xb9\x93L\\\x87\x84K\xb9!\x0eX =z\\\x14\xec*\xed\xa6u\xc4\x14=\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9=?i\x86Lpw\xba\xe1\v\x1a9G\a\xf9\x18\xe4\xf6f\xd6\fpfP\xcf\xee<\\C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1dC\xba2\xa6u\x14\x0ee\xef\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xae\xa0\"(\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95h\xd7PN\xf1\xe7\xe2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5bP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\xa1w,\xc7\x15oA\xc5m\xbb\x15\xd1\x1e\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4moccU\xb5\\\xf5\x05\xec\xa7\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xacd\x9d=d\xae\xbf\xd7K\x9do)p\x00!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x19f\xd3\t\xf8\x96\'\x8c{\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xf3\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\xca\xc2-\xfc\xe8\xc3qAt\b\x94\xee\x9e4\x85\xd0\xfe+\xc0\x17\xbfE\x15\xfdZ\xce\x954v\x8a\x05\xde\xaal\xf4\x82\xe2?\xabS\xe4\xe2\xe1\xd83\x17\xfe\xf8~\x04\xb6\x11\xc4K3\x82\x127\xf7\xc7\x06\x177\x8bWF\xb21\xce\xc7\x19|\x9f\xe87\x80\xbc\xac\xb6;\xcc\xafr\xbd\x90\xde9\x0e\xda\x05\x86\xf0i\xf4{\xbf\x82#\xfd9\xdc\xa7\x01\x00\x12\xea1K\xc9\xe1\xfdv#0U\xd2\t\x14\x10\xe6\xfc\xba\xa1\xac=\xfd\xd7\xa8\xc8\x18\x00\x00\x00\xc4w', &(0x7f0000002a00)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K9\"\xf1@\a\xea\xbb\xfe\x9cY\xfc\x80\x99\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7\xf7\xff]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\x0e0\xfe\xc7\xf9\xde\xd6\xe6\x14O\xc8\xff7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\x1f\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\xeb\x1a\x18\xf1h\x04\xa8\xe8\x92\xe6\xbc\xe1O\xcf', &(0x7f0000001e80)='gcB\xc6+[;\x88\xfe\x97B*[\a\x03\x96l\x1e\b\xd9\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX c\x03\x00\x00\x00\x00\x00\x00\x00\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\xd9\x10#\xf5b|i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfE\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\x00\x00Jh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8f_\xda8l\xc8\xa2\xb0\xd1t\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c1\xf1\xe7m\xfd\x00\x00\x00\x00\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&\x9c\xbd\xbb\x90\x17$\x9e\\\xee\xc6\x88?)\r@e*\"_^xb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\xfd\x98\x06\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\xb0\x11i\xcc\xb9BG\x1ac\xbc\xd9&\xb6\xd9\x04\x03\xc6\xebf\x84\xe5\xfe[\xe7\xe6\xb3\xe9\xca\xe7\xc1\xa7\x9aO\xc1\t\x1c\xeb\xfbl\xa4\x80KQG\x80\xcd\xdd\t\x91\xdb}\xb1\xde\xf9\xbe=\x8b\xde\xf2G\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf7\xa9\x99t\x87 \x9f\x03}\x8d\x1b\x14\x1eU.r\xe1\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000d00)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!3\xf2\x84\xa9H\x92\x1e4\"u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6 \x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJ9\x13V\x1e\b\x16\xf6/\xc3{h\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\x1f\x02)sP%Z\xad\x83\xda\xbe2r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xafd\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91_]\xb26\xbf\x9cA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10`xb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0\xd8k\xb7vo?1H\x86\x032\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\xf2\a\x00\x00\x00\x00\x00\x00\x00\x00\x13\x9eX$\xe1\x00\x00\x00\x00\x00\x00\x003\xe0\xe3\x0e\xaa\x8e\x9a\x1f\x12\fRw\x11B\x17xOO\xb44L`\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf\xab', &(0x7f00000012c0)='gcB\xc6+\xbf\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xdf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0vl\v\x03\b\xadT\a\x14\xd7\xd7\xb5\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m\xb3\fv\xc5\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x16\xf0\xf9s\x9af$\xb3x\x8d\xf1\xe7\xe2\xad\xdd\xdf\xb7\xe8Ac*t\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x10(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xba\xd1\x91]]\xb26\xbfA\x96\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x16\xf0\xcc\a\x10dxb\xc2\x13m[xS\rO\x880\xf1P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5^\xf5\x05\xec\xa3\x98\f1\t\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xcex\xdb\xf6zG!3\xb9\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x01\xfd\xb8\x99\x9c\x19\xb4\xac%~\x12\x7ft\xa9A\x1brx\x87\xa16\x93\xd5fap\x83k\xf6O\v\xae\x9c\xf3\xb0\xb9\t\x8d\xb9p\xcb\xe3csR\xe2\xfbL\x9f\xb3\xa4^\xc1\xf7m0\xa8\x1b\xd0\xfdY\\d\x03(\x89\xe7\xe1G\xcd\xce\xf5o@\xfdi\xd1w~\xc8\x95\x94\xea\xd4\xe8\xcaP\x89\x9b\x12\xa7\xdb\x95c=\x16\xd5\x06\xf9O\xa6+\xcf\n\xd5\xad\x15^\xa0\xe8\x9a\x9e>O\xbf\xd3Fd\xfe\xe7\xc7X\xeaf\x9cn0\xdd\x7f\x85^\xdf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`DK\x17\xe9s2\xe0\xe2[IZS5\xa9\x00\x00\x00\x00\x00\xd5\x84\xc4\x91d\\L\xa0|o\xa9\"f\x9ah\xbda~H\xdf\xaf\xa1c\x83+\x00\xb5t\xc28\xb9\x15\xb1\r[g\xab\x1f\xe74N\xa1\xbe\'x\xf7\xfe\xd3=\xfa\nP\xf8\x89M\xd2\xefk.\xaa.\xc3\xddmr\xa3f\t\xfcC\xd7\xc8\xde\xbb\xa6\xf0\x06\xca\xbb\xf4\x0f\xfd\xc1\xca\xd9\x1d\xf0\x12\x94\x02\xdc\xe5`\xfc\x92_\xfe\x82\xcf\xc4\xa1\x8f\x95\xf9e\xbd$\x93V\xf0\xd6\xd9iu\x1d\x00\x00\x00\x00\xed\x9f\n\'\x00\x00\x00\x00\x00\x00\x00\x00x(\xbd\xfd.\xb1I<\xc31H\xe37\xecM:\xc0N\xdd\x81\xb0g\xf7;I)\xff\xc0\x8d|\x14D\xb2L2\xa4\xacBg=\xb8\xe9\xd0zh\x1d\x1d\xa0\xc8\xacJ\xf2\xe8W\xd9\xa9+6V!\x94\xbd\xec\xac\xad\x8cY\x05\xc4e\xdfc\x9a\xa4u\xad\x01\xf8:\xc0\xea\xae\xd4\xf66A\xf9\x15\xb5]\xf9\x18)v%?g6j\xdd\xd4\xe8\x98\xa3\xbaoi\x802\xd1\xfaZ\xf3!\x983\xb1\xfbH\x9a\x94\xf0\xf0l\xdd[\x99\x9f\x8ftPO`z\x94\xdd\x04_-u\x1aP>W3\xbc\xc9\x9fw<\x97C\xa8\x90\xf0\xe7\xfeUN\xeb\xf7\xf06\xc2\xd8l\x14\xd9>\xa27[R\x02K\x82\x01\x10\x16\x93\'\xafL\x81\x8c\xef\"\x1a\xa8\x15*u\xbb\xbc7u}\x877\xa5s[\x13\xa6\x99Iv~\xf4`+\xdf\xe2\xd1\xfe\x03\b\xcf\x81\xd6\xc5\xcb\xb6\x7f\x8a\xbf#\xc4\xdbq\xd0J\x862iG\xfc\x7fIl\xb9!\x0e\x14\xdcLor\xeb\x16D\x83\xf2f\xfb\at\xd8F\x12\xbe-\n\x04k\x01k\xd7?\x03~h\x9a\b\xae\x1b\xd1\xb2\xbd\xe8\x1c\x8d\xcd\xcbUh\xf6\xfd\xd3\x9c\x06\xd7\x99\t\x0e\xdc\x11\x15\r\x8a\x86X\xdfq\xb2\xc2\x12(\xab\xd2\xca\xd0\x05\xe3u\xfbM\xe0\xf9\xd8\x98\x8b91\x9cJH\xd3\x9c\xd2\xa9\x80M\x96\"\x01\b\xfc\x9a\n\v\x19}?\f\xb6\xd4w\x12r\xba\x90!\xd40\xdaA\x82b\x92\x9f_\xe9\xf5\xba\xf3k\xe4\x9f\xa4\xfd\x15\xa5::\x86\xa7>\xabU\xa5\xe9{Yh\xec\xe9\x14\x12\x19\xb0\x93s\xb6\xe3\x15\xdd\xd4\xf9~$)\xf5\x95\xabU\xec\xc3\xa0!Ac\xe80xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x0, 0x0, &(0x7f00000005c0), &(0x7f0000048000), 0x2) chdir(&(0x7f0000000140)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000003980)='./file0\x00', &(0x7f00000039c0), 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/wireless\x00') preadv(r5, &(0x7f0000001540)=[{&(0x7f0000000000)=""/100, 0x64}, {&(0x7f0000001600)=""/171, 0xab}, {0x0}], 0x3, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) ftruncate(r0, 0x0) 3.848518375s ago: executing program 0 (id=1195): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8}, 0x10) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = gettid() lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f00000002c0)=@v2={0x2000000, [{0x1, 0x8001}, {0xdce, 0x5}]}, 0x14, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000080)=0x2, 0x4) sendmsg$802154_dgram(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x24, @long}, 0x14, &(0x7f0000000140)={0x0}}, 0x0) migrate_pages(r0, 0x3, &(0x7f0000000100)=0x2, &(0x7f0000000140)=0xa4c1) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) 3.540439851s ago: executing program 0 (id=1197): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddb357f7adf97affffffff7d1800"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) dup3(r0, r1, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8, "faffff07082300"}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) 3.439798609s ago: executing program 3 (id=1198): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, 0x0) 3.408100552s ago: executing program 0 (id=1199): iopl(0x3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088a847", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x6, 0x1f, 0xfffffffe, 0x3, 0x20, 0x1, 0x6}, &(0x7f0000000000)=0x9c) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r3, 0x7, 0x80}, &(0x7f0000000100)=0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a0100001905814a"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x100000}, 0x20) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) 3.18407466s ago: executing program 3 (id=1201): r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/376]}, 0x1f0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x40002, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000180)={0x2a, 0x22, 0x7, 0xe, 0x0, 0x6, 0x0, 0x136, 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001e00)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000001e40)={r3, 0x3, 0x6}, 0x10) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x0) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r4, 0x40101286, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000006000000000000000000", @ANYRES32=r3], 0x20}}, 0x0) 2.9413207s ago: executing program 2 (id=1202): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x17) 2.837517778s ago: executing program 2 (id=1203): prctl$PR_SET_SECUREBITS(0x1c, 0x25) prctl$PR_GET_SECUREBITS(0x1b) 2.675494351s ago: executing program 2 (id=1204): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() symlinkat(0x0, 0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000000c0)={"e2ffffff", 0x0, 0x5, 0x2, 0x0, 0x0, "f759ca14860e00", "02200700", "0300", "e859ad01", ["8bada940edff000a00", "c2fed6bf4ecfc02010000010", '\x00', "0000000000000000000100"]}) 2.674602971s ago: executing program 3 (id=1205): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1008800, &(0x7f0000000100)=ANY=[], 0x1, 0x1f1, &(0x7f0000000600)="$eJzs201u00AYxvFn4jSJoUD5XCCkILGADUmaikqsWs7BKmrTqqoLCLNJhIS5AJyBc3AZDgALdqwIsmM3rT8aM61TSv+/jSfz5J1MmiYzsmwBuLQ29VBGRo3wwYPWyufbplRdo+qJAajcJD7+nthwraoA/CucX+meeAcQnM98ACzKjxfSN0nff77fkpPd1Yd5kOS1Zjb/KN2vx7lpyU3vL75Ij5N6cyVbX58ep/nV3PGfPEpef1nXdF03tKKbumUCmSjfPqy/Z7UHAgDgsjHqzMs7klOQhou3o+yuYGZJO1+zq/pMQzt73rA/J18rzJtR3tl67W2f8CoA8tRKff+LOdH3r1eY16N8NX7UspskgEr4o3FTnjd864/CRT5qjPcH3l81XKuqMg1T2cj5jUaqZ/JB0mHPpu3IEx3rcY/+ndt+23LOydma8f7ATM/SKP0cd+44tbAsL3pp8U43stGSpNN9KCawKl/+lP++TtfYUKknt3M+C+tGc0H//Mcb5/qzBGABuu8O3nT90fjp3sFgd7g7fNXv9Z6vP1tbXe93o5199+T9PYCLa7bo68jVQAAAAAAAAAAAAAAA4CK5o7vhIX3bLgAAAID/kG+k4CzuGaoX3EYWX1kMAAAAAAAAAAAAAAAAAADOzp8AAAD///TJAEg=") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = open(&(0x7f00000000c0)='./bus\x00', 0xca942, 0x0) ftruncate(r0, 0x8002007ffb) 1.59147083s ago: executing program 3 (id=1206): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x6e, 0x0, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)='^-!+\'/]@+\x00') openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000280)={0x81, 0x0, 0x0, 0x0, 0x0, "cd2c683c06000081a0f200b7fc380eb6f86d22"}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000100)={0x1f, 0x6, @none, 0x902}, 0xe) shutdown(r4, 0x1) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000040)) r5 = memfd_create(&(0x7f0000000580)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x90R\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f#\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x1) fcntl$getownex(r5, 0x11, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000003c0), 0x8, 0xcd, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_pktinfo(r6, 0x0, 0xd, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.59019024s ago: executing program 2 (id=1207): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8}, 0x10) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = gettid() lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f00000002c0)=@v2={0x2000000, [{0x1, 0x8001}, {0xdce, 0x5}]}, 0x14, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000080)=0x2, 0x4) sendmsg$802154_dgram(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x24, @long}, 0x14, &(0x7f0000000140)={0x0}}, 0x0) migrate_pages(r0, 0x3, &(0x7f0000000100)=0x2, &(0x7f0000000140)=0xa4c1) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) 1.305319963s ago: executing program 4 (id=1208): r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="0a02000019002551075c0165ff0ffc02802000030004000500e1000cee020f001a000000", 0x33a) 1.190639232s ago: executing program 2 (id=1209): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddb357f7adf97affffffff7d1800"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) dup3(r0, r1, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8, "faffff07082300"}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) 1.130958337s ago: executing program 4 (id=1210): socket$l2tp6(0xa, 0x2, 0x73) socket$rds(0x15, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r0 = eventfd(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000008857ee8600000095"], 0x0}, 0x90) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x0, r0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 895.382206ms ago: executing program 2 (id=1212): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000004c0)={0xe0, 0x12, 0x703, 0x0, 0x0, "", [@generic="14f84d51ceb5a183b703171f970ba26e5547ac47e6ab4513d71e75f33cd78b2096d50cb0551255565025750bf1f75e0c564a89a9dbdbacf0c43dd4fd1f242331587b7b3aaffbb0772a880f47ac0c19f18be3973688344a3a2dafec3e8b20be708f84080230909295cb03909ecac3c388b054a8fb798f1f51f2df9c32f4c8e629d2fa3b9590ea9a9f8ae268717e0fa3249737f1c183eaef88b2a3aaedf7455d9d84773fa836ae71f81f5feb7251a1225be8efdab50d96fa9a514272e8d57b6a2baca040b30000000000", @nested={0x4}]}, 0xe0}], 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0x24, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000e40)=ANY=[@ANYBLOB="04030b00e5ae57c43ec78b8e0100"], 0xe) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) accept(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r6 = gettid() fcntl$setownex(r5, 0xf, &(0x7f0000000080)={0x2, r6}) ptrace$peek(0xffffffffffffffff, r6, &(0x7f00000000c0)) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="e7feeeb53d72", 0x6, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r9, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r8, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x2d, 0x0) 823.997122ms ago: executing program 4 (id=1213): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x17) 690.942223ms ago: executing program 4 (id=1214): ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000080)={'veth0_to_batadv\x00', {0x2, 0x0, @private}}) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r2, @ANYBLOB="7240146c00000000340012800c0001006d6163766c616e0024000280080001001000000010000900000000000000aaaaaabb0000080003"], 0x54}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 575.306262ms ago: executing program 0 (id=1215): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup3(r0, r1, 0x0) connect$inet6(r2, 0x0, 0x0) 570.714783ms ago: executing program 3 (id=1216): r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/247, 0xf7}], 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={{{}, {}, @device_b}, @addba_req}}]}, 0x44}}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'geneve1\x00', {0x2, 0x0, @remote}}) syz_emit_ethernet(0x1282, &(0x7f0000001900)={@local, @dev, @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "c91e2d", 0x124c, 0x2f, 0x1, @loopback, @local, {[@dstopts={0x21, 0xa, '\x00', [@hao={0xc9, 0x10, @mcast1}, @enc_lim={0x4, 0x1, 0xd}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x9}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xc}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x3, 0x4, 0x1, 0x7f, [0x1, 0x8]}}, @ra={0x5, 0x2, 0x6}]}, @routing={0xc, 0x6, 0x69ac596cc2e9c5c2, 0x5, 0x0, [@dev={0xfe, 0x80, '\x00', 0x39}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @hopopts={0x88, 0x200, '\x00', [@generic={0x6, 0x1000, "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"}]}, @hopopts={0x6c, 0x3, '\x00', [@ra={0x5, 0x2, 0x9}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast2}}, @enc_lim={0x4, 0x1, 0x8}]}, @hopopts={0x2b}, @srh={0x5c, 0x6, 0x4, 0x3, 0x2, 0x8, 0x6, [@rand_addr=' \x01\x00', @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @hopopts={0x3a, 0x9, '\x00', [@padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x5444}, @generic={0xbc, 0x3f, "2fd6f355cfe1d4624982069b2b611c3f30e95bab5c5643fc8df59ee00c177e87e001ded9f380d4ddd6be3b02cf334a3201270983f16a37ac90901ce42eb48f"}, @enc_lim={0x4, 0x1, 0x7}]}, @fragment={0x0, 0x0, 0x80, 0x1, 0x0, 0x7, 0x65}], "0153ded16ec706701a42e31d8eac06079b83b7b2a7bb8ae9cb2061ca1e13027f924db7dad1b7356e752f97ee49ff0dab9a95e8b21c61b3d59f6b58a82ef9b10834b934d0ee147aedff1750faa493386e6442c74c46a1c7be448cdd46013442b58a52bf4b466836123b7a46a3b13dad881de279d09d4bf47869a37e76b7e2102e5bc2d8f98aef88f91a56bd8266c94f86389e0ab76de41d6b045bd8ac13aaa234e42bea7488014b7b4c095d4ee2c06bb727e53b49faa3293fd085552f9a3ead305ca149b03769d87f4af74ecba28dbf6c062760d9cdaed8aa887669c9"}}}}}, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0xdd) 543.704815ms ago: executing program 4 (id=1217): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@newtaction={0xe68, 0x30, 0x0, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x0, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r1, 0x7ff, 0x0) getdents64(r1, 0x0, 0x10) 420.559165ms ago: executing program 0 (id=1218): r0 = io_uring_setup(0x669, &(0x7f0000007940)) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1967a4edccbeec1ae3ad1f2bb5fa2f81"}) close_range(r0, 0xffffffffffffffff, 0x0) 257.806648ms ago: executing program 0 (id=1219): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x28000ca, &(0x7f00000004c0)={[{@uni_xlateno}, {@shortname_win95}, {@shortname_win95}, {@fat=@discard}, {@numtail}, {@rodir}, {@utf8}, {@fat=@flush}, {@shortname_winnt}, {@utf8}, {@fat=@nfs}, {@shortname_win95}, {@fat=@dmask={'dmask', 0x3d, 0x7f}}, {@numtail}, {@utf8no}, {@uni_xlate}, {@uni_xlateno}, {@shortname_mixed}]}, 0x97, 0x2a9, &(0x7f0000002300)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) pwrite64(r1, &(0x7f0000000280)='+', 0x1, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r0, &(0x7f00000000c0)=0xfffc, 0x6, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) 0s ago: executing program 3 (id=1220): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1008800, &(0x7f0000000100)=ANY=[], 0x1, 0x1f1, &(0x7f0000000600)="$eJzs201u00AYxvFn4jSJoUD5XCCkILGADUmaikqsWs7BKmrTqqoLCLNJhIS5AJyBc3AZDgALdqwIsmM3rT8aM61TSv+/jSfz5J1MmiYzsmwBuLQ29VBGRo3wwYPWyufbplRdo+qJAajcJD7+nthwraoA/CucX+meeAcQnM98ACzKjxfSN0nff77fkpPd1Yd5kOS1Zjb/KN2vx7lpyU3vL75Ij5N6cyVbX58ep/nV3PGfPEpef1nXdF03tKKbumUCmSjfPqy/Z7UHAgDgsjHqzMs7klOQhou3o+yuYGZJO1+zq/pMQzt73rA/J18rzJtR3tl67W2f8CoA8tRKff+LOdH3r1eY16N8NX7UspskgEr4o3FTnjd864/CRT5qjPcH3l81XKuqMg1T2cj5jUaqZ/JB0mHPpu3IEx3rcY/+ndt+23LOydma8f7ATM/SKP0cd+44tbAsL3pp8U43stGSpNN9KCawKl/+lP++TtfYUKknt3M+C+tGc0H//Mcb5/qzBGABuu8O3nT90fjp3sFgd7g7fNXv9Z6vP1tbXe93o5199+T9PYCLa7bo68jVQAAAAAAAAAAAAAAA4CK5o7vhIX3bLgAAAID/kG+k4CzuGaoX3EYWX1kMAAAAAAAAAAAAAAAAAADOzp8AAAD///TJAEg=") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = open(&(0x7f00000000c0)='./bus\x00', 0xca942, 0x0) ftruncate(r0, 0x8002007ffb) kernel console output (not intermixed with test programs): ig 0 descriptor?? [ 146.011813][ T3557] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 146.023907][ T5484] loop3: detected capacity change from 0 to 128 [ 146.111537][ T5484] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 146.513712][ T5499] loop2: detected capacity change from 0 to 64 [ 146.645121][ T3629] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 146.886763][ T3557] gspca_sonixj: reg_r err -71 [ 146.896489][ T3557] sonixj: probe of 2-1:0.0 failed with error -71 [ 147.045748][ T3629] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.171314][ T3557] usb 2-1: USB disconnect, device number 4 [ 147.269855][ T3629] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 147.365195][ T3629] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 147.380019][ T3629] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.403859][ T3629] usb 5-1: config 0 descriptor?? [ 147.434708][ T5509] loop3: detected capacity change from 0 to 16 [ 147.491915][ T5509] erofs: (device loop3): mounted with root inode @ nid 36. [ 147.831645][ T5517] erofs: (device loop3): z_erofs_get_extent_decompressedlen: unknown type 3 @ lcn 9 of nid 36 [ 147.846480][ T5517] attempt to access beyond end of device [ 147.846480][ T5517] loop3: rw=0, want=40, limit=16 [ 147.860016][ T5517] attempt to access beyond end of device [ 147.860016][ T5517] loop3: rw=0, want=40, limit=16 [ 147.873058][ T5517] attempt to access beyond end of device [ 147.873058][ T5517] loop3: rw=0, want=40, limit=16 [ 147.961063][ T5517] attempt to access beyond end of device [ 147.961063][ T5517] loop3: rw=0, want=40, limit=16 [ 147.976033][ T5517] attempt to access beyond end of device [ 147.976033][ T5517] loop3: rw=0, want=328, limit=16 [ 147.986855][ T5517] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 148.320054][ T3629] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x2 [ 148.365758][ T3629] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 148.412418][ T3629] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 148.429785][ T3629] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 148.440170][ T3629] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 148.448292][ T3629] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 148.462926][ T3629] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x2 [ 148.474552][ T3629] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 148.494867][ T3629] plantronics 0003:047F:FFFF.0007: unbalanced collection at end of report description [ 148.497410][ T5525] loop0: detected capacity change from 0 to 128 [ 148.511649][ T3629] plantronics 0003:047F:FFFF.0007: parse failed [ 148.520425][ T3629] plantronics: probe of 0003:047F:FFFF.0007 failed with error -22 [ 148.533777][ T3629] usb 5-1: USB disconnect, device number 3 [ 148.551767][ T5525] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 148.841624][ T5534] 9pnet: p9_errstr2errno: server reported unknown error œæç×¾ [ 148.956020][ T5536] mkiss: ax0: crc mode is auto. [ 149.536460][ T5536] loop3: detected capacity change from 0 to 1 [ 149.683604][ T5536] attempt to access beyond end of device [ 149.683604][ T5536] loop3: rw=2048, want=8, limit=1 [ 149.785732][ T5536] SQUASHFS error: Failed to read block 0x0: -5 [ 149.793463][ T5536] unable to read squashfs_super_block [ 149.838364][ T5551] loop0: detected capacity change from 0 to 2048 [ 149.922075][ T5551] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.994107][ T5546] loop2: detected capacity change from 0 to 8192 [ 150.032721][ T5551] UDF-fs: error (device loop0): udf_read_inode: (ino 1345) failed !bh [ 150.056521][ T5546] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 150.077699][ T5536] loop3: detected capacity change from 0 to 24 [ 150.087916][ T5551] capability: warning: `syz.0.556' uses 32-bit capabilities (legacy support in use) [ 150.107432][ T5546] REISERFS (device loop2): using ordered data mode [ 150.113968][ T5546] reiserfs: using flush barriers [ 150.311249][ T5546] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 150.355221][ T5546] REISERFS (device loop2): checking transaction log (loop2) [ 150.448597][ T5546] REISERFS (device loop2): Using r5 hash to sort names [ 150.535315][ T5562] sctp: [Deprecated]: syz.3.560 (pid 5562) Use of int in max_burst socket option. [ 150.535315][ T5562] Use struct sctp_assoc_value instead [ 150.594113][ T5546] reiserfs: enabling write barrier flush mode [ 150.625383][ T5562] loop3: detected capacity change from 0 to 2048 [ 150.833585][ T5567] loop4: detected capacity change from 0 to 1024 [ 151.269817][ T5562] loop3: p3 < > p4 < > [ 151.278342][ T1235] hfsplus: b-tree write err: -5, ino 4 [ 151.292163][ T5562] loop3: partition table partially beyond EOD, truncated [ 151.309125][ T5562] loop3: p3 start 4284289 is beyond EOD, truncated [ 151.317359][ T5546] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 151.336092][ T5003] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 151.523245][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 151.575657][ T5575] loop3: detected capacity change from 0 to 64 [ 151.775188][ T5003] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.792569][ T5003] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.841072][ T5003] usb 1-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 151.881755][ T5003] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.918013][ T5583] netlink: 16 bytes leftover after parsing attributes in process `syz.2.565'. [ 151.925978][ T5003] usb 1-1: config 0 descriptor?? [ 153.475357][ T3557] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 153.565189][ T3557] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 153.733400][ T5003] sony 0003:1345:3008.0008: hiddev0,hidraw0: USB HID v80.00 Device [HID 1345:3008] on usb-dummy_hcd.0-1/input0 [ 153.756594][ T3557] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 153.795968][ T5003] sony 0003:1345:3008.0008: failed to claim input [ 153.825338][ T3557] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 153.911678][ T5608] loop1: detected capacity change from 0 to 4096 [ 153.925199][ T3557] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 154.005372][ T5003] usb 1-1: USB disconnect, device number 4 [ 154.009833][ T5608] ntfs: volume version 3.1. [ 154.027577][ T3557] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 154.065245][ T3557] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 154.098428][ T5608] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp866. You might want to try to use the mount option nls=utf8. [ 154.125282][ T5608] ntfs: (device loop1): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 154.155216][ T3557] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 154.225156][ T3557] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 154.305141][ T3557] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 154.602936][ T5620] netlink: 16 bytes leftover after parsing attributes in process `syz.3.579'. [ 154.750108][ T5621] loop1: detected capacity change from 0 to 1024 [ 157.134788][ T9] hfsplus: b-tree write err: -5, ino 4 [ 157.477192][ T5643] loop4: detected capacity change from 0 to 8192 [ 157.506649][ T5655] loop1: detected capacity change from 0 to 4096 [ 157.582143][ T5643] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 157.631561][ T5662] sctp: [Deprecated]: syz.3.594 (pid 5662) Use of int in max_burst socket option. [ 157.631561][ T5662] Use struct sctp_assoc_value instead [ 157.645063][ T5643] REISERFS (device loop4): using ordered data mode [ 157.687641][ T5663] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 157.698416][ T5643] reiserfs: using flush barriers [ 157.750238][ T5643] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 157.812505][ T5662] loop3: detected capacity change from 0 to 2048 [ 157.845066][ T5643] REISERFS (device loop4): checking transaction log (loop4) [ 157.868232][ T5667] loop2: detected capacity change from 0 to 1024 [ 157.901673][ T5643] REISERFS (device loop4): Using r5 hash to sort names [ 157.972812][ T5643] reiserfs: enabling write barrier flush mode [ 158.002130][ T5662] loop3: p3 < > p4 < > [ 158.035049][ T5662] loop3: partition table partially beyond EOD, truncated [ 158.042726][ T9] hfsplus: b-tree write err: -5, ino 4 [ 158.049126][ T5662] loop3: p3 start 4284289 is beyond EOD, truncated [ 158.064142][ T5643] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 158.067247][ T2963] loop3: p3 < > p4 < > [ 158.100641][ T2963] loop3: partition table partially beyond EOD, truncated [ 158.113574][ T2963] loop3: p3 start 4284289 is beyond EOD, truncated [ 158.540090][ T5671] syz.1.592 (5671) used greatest stack depth: 18544 bytes left [ 158.918245][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 159.012190][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 159.115816][ T5683] syz.1.601[5683] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.115921][ T5683] syz.1.601[5683] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.532982][ T5698] loop4: detected capacity change from 0 to 1024 [ 159.786252][ T154] hfsplus: b-tree write err: -5, ino 4 [ 159.854820][ T5710] sctp: [Deprecated]: syz.4.610 (pid 5710) Use of int in max_burst socket option. [ 159.854820][ T5710] Use struct sctp_assoc_value instead [ 159.978994][ T5706] loop1: detected capacity change from 0 to 4096 [ 160.022060][ T5708] loop3: detected capacity change from 0 to 4096 [ 160.050460][ T5710] loop4: detected capacity change from 0 to 2048 [ 160.245191][ T5710] loop4: p3 < > p4 < > [ 160.245219][ T5708] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 160.249395][ T5710] loop4: partition table partially beyond EOD, [ 160.382302][ T5717] loop2: detected capacity change from 0 to 1024 [ 160.443359][ T5710] truncated [ 160.633873][ T5719] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 160.842468][ T5710] loop4: p3 start 4284289 is beyond EOD, truncated [ 161.007039][ T4036] hfsplus: b-tree write err: -5, ino 4 [ 161.200880][ T2963] loop4: p3 < > p4 < > [ 161.206868][ T2963] loop4: partition table partially beyond EOD, truncated [ 161.239019][ T2963] loop4: p3 start 4284289 is beyond EOD, truncated [ 161.960500][ T5741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.621'. [ 161.982036][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 162.098175][ T5751] syz.2.625[5751] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.098268][ T5751] syz.2.625[5751] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.214715][ T5750] loop1: detected capacity change from 0 to 4096 [ 162.345643][ T5766] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 162.377648][ T26] audit: type=1800 audit(1721076929.869:125): pid=5750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.623" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 162.463368][ T26] audit: type=1800 audit(1721076929.889:126): pid=5750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.623" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 162.528227][ T26] audit: type=1800 audit(1721076929.899:127): pid=5750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.623" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 162.563263][ T5765] loop0: detected capacity change from 0 to 4096 [ 162.587216][ T5774] loop4: detected capacity change from 0 to 4096 [ 162.650266][ T5779] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 162.661947][ T5765] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 162.738147][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 162.830335][ T5781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.636'. [ 162.888078][ T5765] ntfs: volume version 3.1. [ 163.642848][ T5794] syz.2.641[5794] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.642945][ T5794] syz.2.641[5794] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.814490][ T5799] loop4: detected capacity change from 0 to 16 [ 163.867638][ T5801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.633'. [ 163.900783][ T5799] erofs: (device loop4): mounted with root inode @ nid 36. [ 164.145078][ T1067] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 164.217865][ T5813] erofs: (device loop4): z_erofs_get_extent_decompressedlen: unknown type 3 @ lcn 9 of nid 36 [ 164.232239][ T5813] attempt to access beyond end of device [ 164.232239][ T5813] loop4: rw=0, want=40, limit=16 [ 164.246938][ T5813] attempt to access beyond end of device [ 164.246938][ T5813] loop4: rw=0, want=40, limit=16 [ 164.259886][ T5813] attempt to access beyond end of device [ 164.259886][ T5813] loop4: rw=0, want=40, limit=16 [ 164.343017][ T5813] attempt to access beyond end of device [ 164.343017][ T5813] loop4: rw=0, want=40, limit=16 [ 164.357713][ T5813] attempt to access beyond end of device [ 164.357713][ T5813] loop4: rw=0, want=328, limit=16 [ 164.368518][ T5813] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 164.715392][ T5810] loop1: detected capacity change from 0 to 4096 [ 164.825350][ T1067] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 164.839396][ T1067] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.874980][ T5816] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 164.887863][ T1067] usb 3-1: Product: syz [ 164.895278][ T1067] usb 3-1: Manufacturer: syz [ 164.903353][ T26] audit: type=1800 audit(1721076932.389:128): pid=5810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.645" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 164.934786][ T1067] usb 3-1: SerialNumber: syz [ 164.957159][ T5818] loop3: detected capacity change from 0 to 2048 [ 164.960183][ T1067] usb 3-1: config 0 descriptor?? [ 164.971854][ T26] audit: type=1800 audit(1721076932.419:129): pid=5810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.645" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 165.011777][ T26] audit: type=1800 audit(1721076932.419:130): pid=5810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.645" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 165.016388][ T5818] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=18576, location=18576 [ 165.044413][ T1067] ch341 3-1:0.0: ch341-uart converter detected [ 165.094047][ T5818] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.206545][ T5824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.650'. [ 165.303507][ T5828] loop3: detected capacity change from 0 to 16 [ 165.326084][ T5828] erofs: (device loop3): mounted with root inode @ nid 36. [ 165.429718][ T5830] loop4: detected capacity change from 0 to 256 [ 165.455120][ T3556] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 165.542915][ T5832] tmpfs: Unknown parameter 'usrquota' [ 165.550117][ T5830] FAT-fs (loop4): Unrecognized mount option "utfP=0" or missing value [ 166.630293][ T5844] loop4: detected capacity change from 0 to 1024 [ 166.676554][ T5844] hfsplus: Filesystem is marked locked, mounting read-only. [ 166.703626][ T5844] hfsplus: filesystem is marked locked, leaving read-only. [ 166.725436][ T3556] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 166.734007][ T5848] loop0: detected capacity change from 0 to 1764 [ 166.735944][ T3556] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 166.756522][ T3556] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 166.767919][ T3556] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.780622][ T3556] usb 2-1: config 0 descriptor?? [ 166.827149][ T3556] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 166.955912][ T5806] udc-core: couldn't find an available UDC or it's busy [ 166.963230][ T5806] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 166.995107][ T1067] ch341-uart ttyUSB0: failed to read break control: -71 [ 167.010420][ T1067] ch341-uart: probe of ttyUSB0 failed with error -71 [ 167.042307][ T1067] usb 3-1: USB disconnect, device number 5 [ 167.064517][ T1067] ch341 3-1:0.0: device disconnected [ 167.085262][ T3629] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 167.152065][ T5855] loop0: detected capacity change from 0 to 4096 [ 167.229547][ T5855] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 167.231607][ T5856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.657'. [ 167.273171][ T5822] udc-core: couldn't find an available UDC or it's busy [ 167.280862][ T5822] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 167.327108][ T5822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.649'. [ 167.335101][ T3629] usb 5-1: Using ep0 maxpacket: 16 [ 167.349936][ T5822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.649'. [ 167.449966][ T5858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.662'. [ 167.459285][ T3629] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 167.471458][ T3629] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 167.482449][ T3629] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 167.496337][ T3629] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.524152][ T3629] usb 5-1: config 0 descriptor?? [ 167.633615][ T5863] loop2: detected capacity change from 0 to 128 [ 167.672372][ T5863] EXT4-fs warning (device loop2): ext4_fill_super:3981: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 167.693996][ T5863] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 167.776891][ T5851] loop4: detected capacity change from 0 to 128 [ 167.823767][ T5871] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 167.823767][ T5871] The task syz.3.665 (5871) triggered the difference, watch for misbehavior. [ 167.857839][ T5851] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 167.954023][ T3554] usb 2-1: USB disconnect, device number 5 [ 167.985036][ T5851] FAT-fs (loop4): bogus number of directory entries (203) [ 167.997973][ T5871] loop3: detected capacity change from 0 to 256 [ 168.020070][ T5851] FAT-fs (loop4): Can't find a valid FAT filesystem [ 168.053688][ T5878] loop0: detected capacity change from 0 to 1024 [ 168.255756][ T5871] FAT-fs (loop3): Unrecognized mount option "utfP=0" or missing value [ 168.325467][ T5878] hfsplus: Filesystem is marked locked, mounting read-only. [ 168.677598][ T5878] hfsplus: filesystem is marked locked, leaving read-only. [ 168.937341][ T5851] udc-core: couldn't find an available UDC or it's busy [ 168.947117][ T5887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.673'. [ 168.963103][ T5851] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 169.016996][ T3629] hid (null): invalid report_count 2022770541 [ 169.023137][ T3629] hid (null): unknown global tag 0xc [ 169.032476][ T3629] hid (null): unknown global tag 0xd [ 169.040214][ T3629] hid-generic 0003:0158:0100.0009: unknown main item tag 0x0 [ 169.066007][ T3629] hid-generic 0003:0158:0100.0009: unknown main item tag 0x0 [ 169.078486][ T3629] hid-generic 0003:0158:0100.0009: unexpected long global item [ 169.103088][ T3629] hid-generic: probe of 0003:0158:0100.0009 failed with error -22 [ 169.152471][ T21] libceph: connect (1)[c::]:6789 error -101 [ 169.169551][ T21] libceph: mon0 (1)[c::]:6789 connect error [ 169.245053][ T1067] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 169.338435][ T5907] loop1: detected capacity change from 0 to 1764 [ 169.437069][ T21] libceph: connect (1)[c::]:6789 error -101 [ 169.443102][ T21] libceph: mon0 (1)[c::]:6789 connect error [ 169.577296][ T5908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.676'. [ 169.658748][ T5915] loop1: detected capacity change from 0 to 1024 [ 169.723089][ T5913] udc-core: couldn't find an available UDC or it's busy [ 169.731003][ T5913] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 169.738796][ T5915] hfsplus: Filesystem is marked locked, mounting read-only. [ 169.753682][ T5915] hfsplus: filesystem is marked locked, leaving read-only. [ 169.885226][ T1067] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 169.889851][ T5894] ceph: No mds server is up or the cluster is laggy [ 169.897761][ T1067] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.911285][ T1067] usb 3-1: Product: syz [ 169.955944][ T1067] usb 3-1: Manufacturer: syz [ 169.956225][ T21] libceph: connect (1)[c::]:6789 error -101 [ 169.960572][ T1067] usb 3-1: SerialNumber: syz [ 169.972928][ T21] libceph: mon0 (1)[c::]:6789 connect error [ 170.007858][ T5922] loop1: detected capacity change from 0 to 128 [ 170.011656][ T1067] usb 3-1: config 0 descriptor?? [ 170.072549][ T5922] EXT4-fs warning (device loop1): ext4_fill_super:3981: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 170.078858][ T1067] ch341 3-1:0.0: ch341-uart converter detected [ 170.102140][ T5922] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 170.299747][ T5928] loop3: detected capacity change from 0 to 256 [ 170.408383][ T5928] FAT-fs (loop3): Unrecognized mount option "utfP=0" or missing value [ 171.061502][ T5892] tmpfs: Unknown parameter 'usrquota' [ 171.194723][ T21] usb 5-1: USB disconnect, device number 4 [ 171.369103][ T5943] loop4: detected capacity change from 0 to 1764 [ 171.424559][ T5948] loop3: detected capacity change from 0 to 1024 [ 171.442111][ T5951] loop0: detected capacity change from 0 to 136 [ 171.607245][ T5948] hfsplus: Filesystem is marked locked, mounting read-only. [ 171.802607][ T5892] udc-core: couldn't find an available UDC or it's busy [ 171.864729][ T5892] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 172.083250][ T5948] hfsplus: filesystem is marked locked, leaving read-only. [ 172.205171][ T1067] ch341-uart ttyUSB0: failed to read break control: -71 [ 172.212716][ T1067] ch341-uart: probe of ttyUSB0 failed with error -71 [ 172.222130][ T1067] usb 3-1: USB disconnect, device number 6 [ 172.240914][ T1067] ch341 3-1:0.0: device disconnected [ 172.864981][ T5003] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 172.895231][ T3554] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 172.933239][ T5975] loop4: detected capacity change from 0 to 256 [ 173.016238][ T5975] FAT-fs (loop4): Unrecognized mount option "utfP=0" or missing value [ 173.125194][ T5003] usb 4-1: Using ep0 maxpacket: 8 [ 173.166889][ T3554] usb 1-1: Using ep0 maxpacket: 16 [ 173.267804][ T21] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 173.285179][ T3554] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 173.291342][ T5981] loop1: detected capacity change from 0 to 8192 [ 173.324139][ T5981] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 173.340911][ T5981] REISERFS (device loop1): using ordered data mode [ 173.362455][ T5981] reiserfs: using flush barriers [ 173.374786][ T5981] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 173.394391][ T5987] loop4: detected capacity change from 0 to 1024 [ 173.398651][ T5981] REISERFS (device loop1): checking transaction log (loop1) [ 173.462396][ T5987] hfsplus: Filesystem is marked locked, mounting read-only. [ 173.476457][ T5003] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 173.477008][ T3554] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 173.485784][ T5003] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.502866][ T5003] usb 4-1: Product: syz [ 173.508369][ T5003] usb 4-1: Manufacturer: syz [ 173.513410][ T5003] usb 4-1: SerialNumber: syz [ 173.514285][ T3554] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.535186][ T5987] hfsplus: filesystem is marked locked, leaving read-only. [ 173.537046][ T5981] REISERFS (device loop1): Using tea hash to sort names [ 173.549764][ T3554] usb 1-1: Product: syz [ 173.553729][ T5003] usb 4-1: config 0 descriptor?? [ 173.553973][ T3554] usb 1-1: Manufacturer: syz [ 173.564285][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 173.571704][ T5981] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 173.589315][ T3554] usb 1-1: SerialNumber: syz [ 173.594692][ T5981] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 173.596206][ T3554] usb 1-1: config 0 descriptor?? [ 173.713855][ T5003] msi2500 4-1:0.0: Registered as swradio16 [ 173.731594][ T5003] msi2500 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 173.837002][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 173.854181][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 173.864242][ T21] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 173.873393][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.882396][ T3554] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 173.897146][ T1235] usb 1-1: Failed to submit usb control message: -71 [ 173.900528][ T21] usb 3-1: config 0 descriptor?? [ 173.960449][ T1235] usb 1-1: unable to send the bmi data to the device: -71 [ 173.968174][ T1235] usb 1-1: unable to get target info from device [ 173.974640][ T1235] usb 1-1: could not get target info (-71) [ 173.983059][ T1235] usb 1-1: could not probe fw (-71) [ 173.990552][ T3554] usb 1-1: USB disconnect, device number 5 [ 174.273085][ T5977] loop2: detected capacity change from 0 to 128 [ 174.347014][ T5977] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 174.367314][ T5977] FAT-fs (loop2): bogus number of directory entries (203) [ 174.374528][ T5977] FAT-fs (loop2): Can't find a valid FAT filesystem [ 175.117871][ T6003] loop4: detected capacity change from 0 to 8192 [ 175.167061][ T6003] loop4: p1 p2 p3 [ 175.170837][ T6003] loop4: partition table partially beyond EOD, truncated [ 175.179065][ T6003] loop4: p2 start 16781326 is beyond EOD, truncated [ 177.048759][ T6028] loop2: detected capacity change from 0 to 256 [ 177.144065][ T3557] usb 4-1: USB disconnect, device number 2 [ 177.156779][ T6028] FAT-fs (loop2): Unrecognized mount option "utfP=0" or missing value [ 177.187936][ T6017] loop3: detected capacity change from 0 to 4096 [ 177.195288][ T21] usbhid 3-1:0.0: can't add hid device: -71 [ 177.201692][ T21] usbhid: probe of 3-1:0.0 failed with error -71 [ 177.235124][ T21] usb 3-1: USB disconnect, device number 7 [ 177.289013][ T6017] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 177.350007][ T3501] udevd[3501]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 177.364048][ T3639] udevd[3639]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 177.385088][ T5003] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 177.765098][ T3563] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 178.015047][ T3563] usb 2-1: Using ep0 maxpacket: 16 [ 178.135546][ T3563] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 178.525243][ T3563] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 178.592299][ T3563] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.647250][ T3563] usb 2-1: Product: syz [ 178.659520][ T6054] loop3: detected capacity change from 0 to 2048 [ 178.667484][ T3563] usb 2-1: Manufacturer: syz [ 178.674595][ T3563] usb 2-1: SerialNumber: syz [ 178.685221][ T5003] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 178.687547][ T3563] usb 2-1: config 0 descriptor?? [ 178.700837][ T5003] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 178.719526][ T5003] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 178.728808][ T5003] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.745312][ T5003] usb 1-1: config 0 descriptor?? [ 178.752879][ T6054] EXT4-fs error (device loop3): ext4_fill_super:4840: inode #2: comm syz.3.726: casefold flag without casefold feature [ 178.766941][ T3563] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 178.792341][ T6054] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 178.807406][ T5003] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 178.833471][ T6054] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 178.841449][ T6054] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 178.979600][ T5003] usb 2-1: USB disconnect, device number 6 [ 178.986832][ T1235] usb 2-1: Failed to submit usb control message: -71 [ 178.995468][ T1235] usb 2-1: unable to send the bmi data to the device: -71 [ 179.002957][ T1235] usb 2-1: unable to get target info from device [ 179.009636][ T1235] usb 2-1: could not get target info (-71) [ 179.015654][ T1235] usb 2-1: could not probe fw (-71) [ 179.095079][ T3557] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 179.319860][ T6027] udc-core: couldn't find an available UDC or it's busy [ 179.326924][ T6027] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 179.335158][ T3557] usb 5-1: Using ep0 maxpacket: 16 [ 179.418183][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.715'. [ 179.433245][ T6027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.715'. [ 179.456225][ T3557] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 179.472101][ T3557] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 179.489303][ T3557] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 179.499694][ T3557] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.525593][ T3557] usb 5-1: config 0 descriptor?? [ 179.603338][ T6065] loop3: detected capacity change from 0 to 8192 [ 179.696112][ T6065] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 179.722875][ T6065] REISERFS (device loop3): using ordered data mode [ 179.755300][ T6065] reiserfs: using flush barriers [ 179.761533][ T6065] REISERFS warning (device loop3): sh-462 check_advise_trans_params: bad transaction max size (240). FSCK? [ 179.792556][ T6052] loop4: detected capacity change from 0 to 128 [ 179.810529][ T6076] loop1: detected capacity change from 0 to 64 [ 179.849905][ T6065] REISERFS warning (device loop3): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 179.930638][ T6052] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 179.946889][ T6052] FAT-fs (loop4): bogus number of directory entries (203) [ 179.954423][ T6052] FAT-fs (loop4): Can't find a valid FAT filesystem [ 180.064205][ T3563] usb 1-1: USB disconnect, device number 6 [ 180.834382][ T6052] udc-core: couldn't find an available UDC or it's busy [ 181.068398][ T6052] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 181.169712][ T3557] hid (null): invalid report_count 2022770541 [ 181.176048][ T3557] hid (null): unknown global tag 0xc [ 181.183130][ T3557] hid (null): unknown global tag 0xd [ 181.190818][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.201792][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.209387][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.217860][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.231792][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.245042][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.252474][ T6095] loop1: detected capacity change from 0 to 4096 [ 181.252481][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.252511][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.279216][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.289476][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.311200][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.336761][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.338871][ T6095] Cannot load nls iso9859d [ 181.353526][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.361291][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.369518][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.390049][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.398611][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.406749][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.414338][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.422232][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.430290][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.438179][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.446015][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.453564][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.461524][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.474962][ T3563] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 181.490328][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.515186][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.528918][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.546800][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.562369][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.582637][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.591076][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.599814][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.609339][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.618056][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.635871][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.654109][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.662877][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.671341][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.681994][ T6108] loop3: detected capacity change from 0 to 64 [ 181.688535][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.696750][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.704660][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.712942][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.720723][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.728850][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.733677][ T6090] udc-core: couldn't find an available UDC or it's busy [ 181.736640][ T3563] usb 1-1: Using ep0 maxpacket: 8 [ 181.746759][ T6090] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 181.750814][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.764107][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.789061][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.800514][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.809106][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.818028][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.826504][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.834020][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.844734][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.859071][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.869412][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.900877][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.924073][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.938734][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.949482][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.962636][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.980432][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 181.989662][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.002615][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.012133][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.026427][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.034015][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.048272][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.058564][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.063870][ T6110] loop3: detected capacity change from 0 to 8192 [ 182.070202][ T3563] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 182.084065][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.098380][ T3563] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.102929][ T6095] loop1: detected capacity change from 0 to 32768 [ 182.110039][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.121267][ T3563] usb 1-1: Product: syz [ 182.125860][ T3563] usb 1-1: Manufacturer: syz [ 182.135224][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.142657][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.150646][ T3563] usb 1-1: SerialNumber: syz [ 182.150772][ T6110] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 182.157786][ T3563] usb 1-1: config 0 descriptor?? [ 182.169950][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.177885][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.185755][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.193855][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.194712][ T6095] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.739 (6095) [ 182.202577][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.226798][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.234503][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.237746][ T6110] REISERFS (device loop3): using ordered data mode [ 182.242673][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.256479][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.263904][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.265349][ T6110] reiserfs: using flush barriers [ 182.272057][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.284130][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.291899][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.299534][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.307040][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.319513][ T3563] msi2500 1-1:0.0: Registered as swradio16 [ 182.322805][ T6110] REISERFS warning (device loop3): sh-462 check_advise_trans_params: bad transaction max size (240). FSCK? [ 182.325451][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.325482][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.345229][ T6110] REISERFS warning (device loop3): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 182.351833][ T3563] msi2500 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 182.388039][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.403071][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.410628][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.418473][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.434980][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.442414][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.456232][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.463708][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.480043][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.495268][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.502931][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.510613][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.519127][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.526629][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.534040][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.541610][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.549074][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.556566][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.563965][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.571402][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.578846][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.586296][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.593693][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.602296][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.609818][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.617279][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.625041][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.632525][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.640436][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.648006][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.655465][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.662882][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.670309][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.677806][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.685292][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.692721][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.700175][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.707751][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.715257][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.723068][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.730655][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.738105][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.745726][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.753114][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.760575][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.768004][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.775486][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.782878][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.790341][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.797773][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.805335][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.812732][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.820186][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.827907][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.835360][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.842753][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.850180][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.857612][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.865062][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.872456][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.879940][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.887396][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.894786][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.902227][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.909638][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.917177][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.924567][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.932386][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.939835][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.947296][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.954689][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.962171][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.969637][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.977094][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.984593][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.992039][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 182.999568][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 183.007468][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 183.014935][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 183.022334][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 183.029901][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 183.037668][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 183.045214][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 183.052630][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 183.060108][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 183.067563][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 183.075008][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 183.082416][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 183.089881][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 183.097357][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 183.105226][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 183.112655][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 183.120151][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 183.127634][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 183.135504][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 183.142929][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 183.150356][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 183.158123][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x4 [ 183.165586][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x2 [ 183.172991][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 183.180462][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 183.187907][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 183.195370][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 183.202771][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 183.210236][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 183.217779][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 183.225234][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 183.232639][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 183.242586][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 183.250178][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 183.257613][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 183.265088][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 183.272495][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 183.280376][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 183.287819][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 183.295279][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 183.302674][ T3557] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 183.310134][ T3557] hid-generic 0003:0158:0100.000A: invalid report_count 2022770541 [ 183.318063][ T3557] hid-generic 0003:0158:0100.000A: item 0 4 1 9 parsing failed [ 183.326040][ T3557] hid-generic: probe of 0003:0158:0100.000A failed with error -22 [ 183.394654][ T21] usb 5-1: USB disconnect, device number 5 [ 183.424600][ T6095] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 183.466401][ T6095] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 183.494496][ T6095] BTRFS info (device loop1): use zstd compression, level 3 [ 183.512967][ T6095] BTRFS info (device loop1): using free space tree [ 183.527418][ T6095] BTRFS info (device loop1): has skinny extents [ 183.608079][ T3557] usb 1-1: USB disconnect, device number 7 [ 183.654949][ T3563] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 184.818255][ T6156] loop4: detected capacity change from 0 to 2048 [ 185.010955][ T6156] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 185.048796][ T6156] EXT4-fs (loop4): Online resizing not supported with bigalloc [ 185.068012][ T6162] device macvlan2 entered promiscuous mode [ 185.095382][ T6162] device bridge0 entered promiscuous mode [ 185.168816][ T6162] team0: Port device macvlan2 added [ 185.205163][ T3563] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 185.221800][ T3563] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 185.236620][ T6095] BTRFS error (device loop1): open_ctree failed [ 185.249835][ T3563] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 185.276203][ T3563] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.300445][ T3563] usb 3-1: config 0 descriptor?? [ 185.372483][ T3563] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 185.494419][ T6179] loop3: detected capacity change from 0 to 8192 [ 185.566495][ T6179] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 185.601365][ T6179] REISERFS (device loop3): using ordered data mode [ 185.623534][ T6179] reiserfs: using flush barriers [ 185.647465][ T6183] loop4: detected capacity change from 0 to 8192 [ 185.662612][ T6179] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 185.696436][ T6179] REISERFS (device loop3): checking transaction log (loop3) [ 185.773141][ T6183] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 185.814738][ T6183] REISERFS (device loop4): using ordered data mode [ 185.821868][ T6183] reiserfs: using flush barriers [ 185.843019][ T6179] REISERFS (device loop3): Using tea hash to sort names [ 185.850509][ T6183] REISERFS warning (device loop4): sh-462 check_advise_trans_params: bad transaction max size (240). FSCK? [ 185.889345][ T6179] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 185.919029][ T6183] REISERFS warning (device loop4): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 185.940512][ T6190] kvm: emulating exchange as write [ 185.965717][ T6179] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 186.503787][ T6116] udc-core: couldn't find an available UDC or it's busy [ 186.548171][ T6116] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 186.663786][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.747'. [ 186.673537][ T6116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.747'. [ 186.874272][ T6205] loop0: detected capacity change from 0 to 2048 [ 187.023327][ T6203] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 187.072959][ T6205] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 187.148185][ T6205] EXT4-fs (loop0): Online resizing not supported with bigalloc [ 187.224276][ T6216] loop4: detected capacity change from 0 to 4096 [ 187.245513][ T6218] loop3: detected capacity change from 0 to 136 [ 187.347350][ T6167] usb 3-1: USB disconnect, device number 8 [ 187.359602][ T6216] Cannot load nls iso9859d [ 187.833721][ T6240] loop1: detected capacity change from 0 to 256 [ 188.023508][ T6240] attempt to access beyond end of device [ 188.023508][ T6240] loop1: rw=2049, want=268, limit=256 [ 188.145013][ T6167] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 188.162893][ T3248] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 188.225117][ T6248] loop1: detected capacity change from 0 to 2048 [ 188.296524][ T6216] loop4: detected capacity change from 0 to 32768 [ 188.319486][ T6248] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 188.338059][ T6177] libceph: connect (1)[c::]:6789 error -101 [ 188.346708][ T6177] libceph: mon0 (1)[c::]:6789 connect error [ 188.351282][ T6248] EXT4-fs (loop1): Online resizing not supported with bigalloc [ 188.367527][ T6177] libceph: connect (1)[c::]:6789 error -101 [ 188.370709][ T6216] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.775 (6216) [ 188.374705][ T6177] libceph: mon0 (1)[c::]:6789 connect error [ 188.435153][ T6167] usb 3-1: Using ep0 maxpacket: 16 [ 188.453599][ T6216] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 188.483260][ T6216] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 188.529361][ T6216] BTRFS info (device loop4): use zstd compression, level 3 [ 188.549614][ T6260] netlink: 'syz.1.788': attribute type 22 has an invalid length. [ 188.561026][ T6216] BTRFS info (device loop4): using free space tree [ 188.581234][ T6216] BTRFS info (device loop4): has skinny extents [ 188.595378][ T6167] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 188.653373][ T6177] libceph: connect (1)[c::]:6789 error -101 [ 188.665668][ T6177] libceph: mon0 (1)[c::]:6789 connect error [ 188.695201][ T3248] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 188.704708][ T3248] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.714196][ T3248] usb 1-1: Product: syz [ 188.719603][ T3248] usb 1-1: Manufacturer: syz [ 188.726353][ T3248] usb 1-1: SerialNumber: syz [ 188.733013][ T3248] usb 1-1: config 0 descriptor?? [ 188.741050][ T6216] BTRFS info (device loop4): enabling ssd optimizations [ 188.762533][ T6216] BTRFS info (device loop4): checking UUID tree [ 188.776205][ T3248] ch341 1-1:0.0: ch341-uart converter detected [ 188.795265][ T6167] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 188.821742][ T6167] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.849920][ T6167] usb 3-1: Product: syz [ 188.854357][ T6167] usb 3-1: Manufacturer: syz [ 188.875166][ T6167] usb 3-1: SerialNumber: syz [ 188.910893][ T6167] usb 3-1: config 0 descriptor?? [ 188.989905][ T6167] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 189.060764][ T6177] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 189.152985][ T6253] ceph: No mds server is up or the cluster is laggy [ 189.260040][ T6287] tmpfs: Unknown parameter 'usrquota' [ 189.266984][ T4036] usb 3-1: Failed to submit usb control message: -71 [ 189.313071][ T7] libceph: connect (1)[c::]:6789 error -101 [ 189.319321][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 189.338049][ T4036] usb 3-1: unable to send the bmi data to the device: -71 [ 189.358970][ T4874] usb 3-1: USB disconnect, device number 9 [ 189.380119][ T4036] usb 3-1: unable to get target info from device [ 189.387903][ T4036] usb 3-1: could not get target info (-71) [ 189.400051][ T4036] usb 3-1: could not probe fw (-71) [ 189.475304][ T6177] usb 2-1: config 0 has no interfaces? [ 189.480994][ T6177] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 189.491027][ T6177] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.516568][ T6177] usb 2-1: config 0 descriptor?? [ 189.785917][ T6291] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 189.817482][ T4874] usb 2-1: USB disconnect, device number 7 [ 189.971741][ T6304] loop4: detected capacity change from 0 to 256 [ 190.036237][ T6243] udc-core: couldn't find an available UDC or it's busy [ 190.062642][ T6243] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 190.095150][ T3248] ch341-uart ttyUSB0: failed to read break control: -71 [ 190.103152][ T3248] ch341-uart: probe of ttyUSB0 failed with error -71 [ 190.113386][ T6304] attempt to access beyond end of device [ 190.113386][ T6304] loop4: rw=2049, want=268, limit=256 [ 190.127028][ T3248] usb 1-1: USB disconnect, device number 8 [ 190.145411][ T3248] ch341 1-1:0.0: device disconnected [ 190.429210][ T6314] netlink: 72 bytes leftover after parsing attributes in process `syz.4.798'. [ 190.511847][ T6310] loop3: detected capacity change from 0 to 2048 [ 191.052083][ T6328] device macvlan2 entered promiscuous mode [ 191.065918][ T6328] device bridge0 entered promiscuous mode [ 191.099258][ T6328] team0: Port device macvlan2 added [ 191.335059][ T3248] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 191.439251][ T6337] loop1: detected capacity change from 0 to 8192 [ 191.503473][ T6337] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 191.513087][ T6337] REISERFS (device loop1): using ordered data mode [ 191.520130][ T6337] reiserfs: using flush barriers [ 191.526772][ T6337] REISERFS warning (device loop1): sh-462 check_advise_trans_params: bad transaction max size (240). FSCK? [ 191.539487][ T6337] REISERFS warning (device loop1): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 191.585004][ T3248] usb 3-1: Using ep0 maxpacket: 16 [ 191.705237][ T3248] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 191.721877][ T3248] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 191.750446][ T3248] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 191.769712][ T3248] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.790113][ T3248] usb 3-1: config 0 descriptor?? [ 191.868318][ T6343] chnl_net:caif_netlink_parms(): no params data found [ 192.001585][ T6352] loop0: detected capacity change from 0 to 2048 [ 192.041763][ T6332] loop2: detected capacity change from 0 to 128 [ 192.089245][ T6352] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 192.159917][ T6343] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.178083][ T6332] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 192.210165][ T6343] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.217640][ T6332] FAT-fs (loop2): bogus number of directory entries (203) [ 192.254963][ T6332] FAT-fs (loop2): Can't find a valid FAT filesystem [ 192.262101][ T6343] device bridge_slave_0 entered promiscuous mode [ 192.316164][ T6343] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.323362][ T6343] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.335220][ T6343] device bridge_slave_1 entered promiscuous mode [ 192.474088][ T6343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.506057][ T6362] device macvlan3 entered promiscuous mode [ 192.536348][ T6362] team0: Port device macvlan3 added [ 192.551838][ T6343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.636639][ T6332] udc-core: couldn't find an available UDC or it's busy [ 192.643706][ T6332] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 192.682950][ T6343] team0: Port device team_slave_0 added [ 192.697060][ T3248] hid (null): invalid report_count 2022770541 [ 192.703265][ T3248] hid (null): unknown global tag 0xc [ 192.717096][ T6343] team0: Port device team_slave_1 added [ 192.724806][ T3248] hid (null): unknown global tag 0xd [ 192.742339][ T3248] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 192.753581][ T3248] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 192.769784][ T3248] hid-generic 0003:0158:0100.000B: unexpected long global item [ 192.783120][ T3248] hid-generic: probe of 0003:0158:0100.000B failed with error -22 [ 192.825457][ T6343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.851691][ T6343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.914957][ T6343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.963119][ T6343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.984917][ T6343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.061936][ T6343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.296220][ T6343] device hsr_slave_0 entered promiscuous mode [ 193.310629][ T6343] device hsr_slave_1 entered promiscuous mode [ 193.317664][ T6380] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 193.351702][ T6343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.371945][ T6343] Cannot create hsr debugfs directory [ 193.458362][ T6355] chnl_net:caif_netlink_parms(): no params data found [ 193.476666][ T3557] Bluetooth: hci2: command 0x0409 tx timeout [ 193.482799][ T21] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 193.512949][ T6382] udc-core: couldn't find an available UDC or it's busy [ 193.520369][ T6382] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 193.691148][ T6392] device macvlan3 entered promiscuous mode [ 193.699545][ T6392] team0: Port device macvlan3 added [ 193.761476][ T6355] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.769039][ T6355] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.777823][ T6355] device bridge_slave_0 entered promiscuous mode [ 193.788349][ T6355] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.797607][ T6355] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.806503][ T6355] device bridge_slave_1 entered promiscuous mode [ 193.821677][ T6343] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.855372][ T21] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 193.885039][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.906108][ T6355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.923930][ T21] usb 1-1: config 0 descriptor?? [ 193.943484][ T6343] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.977066][ T21] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 193.987307][ T6355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.067036][ T6343] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.104092][ T6355] team0: Port device team_slave_0 added [ 194.117728][ T1377] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.118724][ T3557] Bluetooth: hci4: command 0x0409 tx timeout [ 194.124139][ T1377] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.163015][ T6355] team0: Port device team_slave_1 added [ 194.206114][ T6343] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.243788][ T6355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.252273][ T6355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.278891][ T6355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.296236][ T154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.342166][ T6355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.354214][ T6355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.391227][ T6355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.415200][ T21] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 194.434836][ T154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.499042][ T6355] device hsr_slave_0 entered promiscuous mode [ 194.516016][ T6355] device hsr_slave_1 entered promiscuous mode [ 194.525607][ T6355] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.533218][ T6355] Cannot create hsr debugfs directory [ 194.560519][ T154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.667789][ T7] usb 3-1: USB disconnect, device number 10 [ 194.711032][ T154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.792510][ T6406] netlink: 72 bytes leftover after parsing attributes in process `syz.2.836'. [ 194.855013][ T6373] udc-core: couldn't find an available UDC or it's busy [ 194.875590][ T6373] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 194.919148][ T6403] loop1: detected capacity change from 0 to 32768 [ 195.179232][ T6403] XFS (loop1): Mounting V5 Filesystem [ 195.321845][ T6403] XFS (loop1): Ending clean mount [ 195.415068][ T21] gspca_cpia1: usb_control_msg 02, error -71 [ 195.421590][ T21] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 195.487281][ T4964] XFS (loop1): Unmounting Filesystem [ 195.513302][ T21] usb 1-1: USB disconnect, device number 9 [ 195.555266][ T3629] Bluetooth: hci2: command 0x041b tx timeout [ 195.984332][ T6343] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 196.026473][ T6445] loop1: detected capacity change from 0 to 256 [ 196.053567][ T6343] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 196.103150][ T6343] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 196.131598][ T6446] loop0: detected capacity change from 0 to 2048 [ 196.180416][ T6343] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 196.196193][ T3557] Bluetooth: hci4: command 0x041b tx timeout [ 196.199713][ T6445] attempt to access beyond end of device [ 196.199713][ T6445] loop1: rw=2049, want=268, limit=256 [ 196.226913][ T6355] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 196.313734][ T6355] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 196.336627][ T6355] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 196.358994][ T6355] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 196.563965][ T6468] loop0: detected capacity change from 0 to 2048 [ 196.674460][ T6343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.689980][ T6468] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 196.738998][ T6355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.752154][ T6468] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038 (0x7fffffff) [ 196.862435][ T6343] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.878595][ T6465] fs-verity: sha256 using implementation "sha256-avx2" [ 196.890221][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.909154][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.934330][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.945603][ T6465] fs-verity: sha512 using implementation "sha512-avx2" [ 196.960443][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.974587][ T6355] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.032758][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.059754][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.072225][ T6482] loop2: detected capacity change from 0 to 16 [ 197.086997][ T3568] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.094079][ T3568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.107447][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.123716][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.134838][ T6482] erofs: (device loop2): mounted with root inode @ nid 36. [ 197.150505][ T3568] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.157621][ T3568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.185973][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.326293][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.334738][ T3568] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.341841][ T3568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.387264][ T6480] loop1: detected capacity change from 0 to 32768 [ 197.635379][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 198.205450][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.241394][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.266290][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.275207][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 198.286403][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.301513][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.308680][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.318016][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.326957][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.335951][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.344595][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.369317][ T6480] XFS (loop1): Mounting V5 Filesystem [ 198.391786][ T6355] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 198.410655][ T6355] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.445474][ T6176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 198.460437][ T6176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.475909][ T6176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 198.488225][ T6176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.497146][ T6176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.522148][ T6176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.547552][ T6176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.567305][ T6480] XFS (loop1): Ending clean mount [ 198.575559][ T6176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.584400][ T6176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.603622][ T6176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.620576][ T4964] XFS (loop1): Unmounting Filesystem [ 198.630648][ T6176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.639546][ T6176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.679680][ T6505] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 198.732564][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 198.746159][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 198.764021][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 198.772057][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.780952][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.789304][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.798168][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.813734][ T6343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.012721][ T6512] loop0: detected capacity change from 0 to 2048 [ 199.058139][ T154] device hsr_slave_0 left promiscuous mode [ 199.066033][ T154] device hsr_slave_1 left promiscuous mode [ 199.083234][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.126064][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.144181][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.152496][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.163622][ T154] device hsr_slave_0 left promiscuous mode [ 199.170731][ T6512] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 199.181611][ T154] device hsr_slave_1 left promiscuous mode [ 199.196323][ T6512] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038 (0x7fffffff) [ 199.228438][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.244073][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.285569][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.293009][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.343175][ T6528] loop1: detected capacity change from 0 to 2048 [ 199.350454][ T154] device bridge_slave_1 left promiscuous mode [ 199.365074][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.395908][ T154] device bridge_slave_0 left promiscuous mode [ 199.405122][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.415260][ T23] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 199.500260][ T154] device veth1_macvtap left promiscuous mode [ 199.552197][ T154] device veth0_macvtap left promiscuous mode [ 199.580618][ T154] device veth1_vlan left promiscuous mode [ 199.599322][ T154] device veth0_vlan left promiscuous mode [ 199.684975][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 199.721523][ T3557] Bluetooth: hci2: command 0x0419 tx timeout [ 199.755194][ T154] device veth1_macvtap left promiscuous mode [ 199.761603][ T154] device veth0_macvtap left promiscuous mode [ 199.785051][ T154] device veth1_vlan left promiscuous mode [ 199.791130][ T154] device veth0_vlan left promiscuous mode [ 199.805257][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.821919][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.840583][ T23] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 199.853683][ T23] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 199.872698][ T23] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 199.884408][ T23] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 200.055324][ T4874] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 200.065215][ T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 200.083604][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.092285][ T23] usb 3-1: Product: syz [ 200.101246][ T23] usb 3-1: Manufacturer: syz [ 200.106282][ T23] usb 3-1: SerialNumber: syz [ 200.251605][ T154] team0 (unregistering): Port device team_slave_1 removed [ 200.266829][ T154] team0 (unregistering): Port device team_slave_0 removed [ 200.279735][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.294831][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.355081][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 200.368672][ T154] bond0 (unregistering): Released all slaves [ 200.455003][ T4874] usb 2-1: config 0 has no interfaces? [ 200.460542][ T4874] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 200.476803][ T4874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.490465][ T154] team0 (unregistering): Port device team_slave_1 removed [ 200.499119][ T4874] usb 2-1: config 0 descriptor?? [ 200.512843][ T154] team0 (unregistering): Port device team_slave_0 removed [ 200.525340][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.550569][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.622029][ T154] bond0 (unregistering): Released all slaves [ 200.703721][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 200.717180][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 200.779474][ T6343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.817056][ T23] cdc_ncm 3-1:1.0: bind() failure [ 200.820981][ T6355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.865451][ T23] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 200.872288][ T23] cdc_ncm 3-1:1.1: bind() failure [ 200.900418][ T23] usb 3-1: USB disconnect, device number 11 [ 200.941109][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 200.951698][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 201.078651][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 201.099628][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 201.187818][ T6343] device veth0_vlan entered promiscuous mode [ 201.204082][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 201.212170][ T6177] usb 2-1: USB disconnect, device number 8 [ 201.237686][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 201.270238][ T6343] device veth1_vlan entered promiscuous mode [ 201.287545][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 201.299046][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 201.310917][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 201.357206][ T6555] loop0: detected capacity change from 0 to 8 [ 201.395100][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 201.404380][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 201.414576][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 201.440969][ T6343] device veth0_macvtap entered promiscuous mode [ 201.466781][ T6555] SQUASHFS error: lzo decompression failed, data probably corrupt [ 201.474755][ T6555] SQUASHFS error: Failed to read block 0x28d: -5 [ 201.482155][ T6555] SQUASHFS error: Unable to read metadata cache entry [28b] [ 201.489642][ T6555] SQUASHFS error: Unable to read inode 0x11f [ 201.528217][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 201.543490][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 201.561924][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 201.583797][ T6343] device veth1_macvtap entered promiscuous mode [ 201.646454][ T6355] device veth0_vlan entered promiscuous mode [ 201.681723][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 201.693164][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 201.716928][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 201.750362][ T6355] device veth1_vlan entered promiscuous mode [ 201.802897][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 201.818617][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 201.842552][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 201.877639][ T6343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.900959][ T6343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.930852][ T6343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.951380][ T6343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.965753][ T6548] loop2: detected capacity change from 0 to 32768 [ 201.977374][ T6343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.988519][ T6343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.018243][ T6343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.042960][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 202.061445][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 202.073968][ T6343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.133873][ T6343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.150814][ T6343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.157743][ T6548] XFS (loop2): Mounting V5 Filesystem [ 202.167687][ T6343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.177756][ T6343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.190332][ T6343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.202070][ T6343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.219927][ T6563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.862'. [ 202.229114][ T6563] netlink: 36 bytes leftover after parsing attributes in process `syz.0.862'. [ 202.239494][ T6563] tc_dump_action: action bad kind [ 202.261438][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 202.277277][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 202.376382][ T6343] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.392891][ T6548] XFS (loop2): Ending clean mount [ 202.439606][ T6343] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.460282][ T6343] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.480735][ T6343] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.499328][ T4956] XFS (loop2): Unmounting Filesystem [ 202.511306][ T6355] device veth0_macvtap entered promiscuous mode [ 202.552626][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 202.576042][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 202.588920][ T6355] device veth1_macvtap entered promiscuous mode [ 202.688126][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 202.711425][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 202.738088][ T6355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.761421][ T6355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.782897][ T6355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.805138][ T6355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.824907][ T6355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.836212][ T6355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.846568][ T6355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.857369][ T6355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.896979][ T6355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.930822][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 202.946017][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 202.971430][ T6355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.002807][ T6355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.019095][ T6589] loop0: detected capacity change from 0 to 1024 [ 203.035064][ T6355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.054899][ T6355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.064739][ T6355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.076755][ T6355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.087737][ T6355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.101067][ T6355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.133483][ T6355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.157856][ T6589] hfsplus: extend alloc file! (8192,8,110) [ 203.171516][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 203.195721][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 203.245965][ T6355] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.255039][ T6355] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.263776][ T6355] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.305508][ T6355] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.345754][ T4082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.354131][ T4082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.419943][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 203.467481][ T1235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.490647][ T6593] loop0: detected capacity change from 0 to 1024 [ 203.496161][ T1235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.596000][ T6176] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 203.649439][ T1235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.705793][ T6593] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,acl,dioread_lock,,errors=continue. Quota mode: none. [ 203.774528][ T1235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.820462][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 203.831184][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.851428][ T6600] loop1: detected capacity change from 0 to 2048 [ 203.890374][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.057110][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 204.400310][ T6600] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 204.581180][ T6610] fuse: Bad value for 'user_id' [ 204.751515][ T6600] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 204.819307][ T6620] loop0: detected capacity change from 0 to 2048 [ 204.863152][ T6600] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 204.868852][ T6623] loop3: detected capacity change from 0 to 1024 [ 204.905174][ T6621] loop4: detected capacity change from 0 to 2048 [ 204.908965][ T6600] EXT4-fs (loop1): This should not happen!! Data will be lost [ 204.908965][ T6600] [ 204.966692][ T6620] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 204.981561][ T6620] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038 (0x7fffffff) [ 205.005238][ T6600] EXT4-fs (loop1): Total free blocks count 0 [ 205.045050][ T6600] EXT4-fs (loop1): Free/Dirty block details [ 205.051773][ T6600] EXT4-fs (loop1): free_blocks=2415919104 [ 205.073818][ T6623] hfsplus: extend alloc file! (8192,8,110) [ 205.078546][ T6600] EXT4-fs (loop1): dirty_blocks=16 [ 205.095434][ T6621] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=abort,nodelalloc,,errors=continue. Quota mode: none. [ 205.104986][ T6600] EXT4-fs (loop1): Block reservation details [ 205.118817][ T6600] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 205.141286][ T6621] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038 (0x7fffffff) [ 205.158165][ T1235] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 205.171313][ T1235] EXT4-fs (loop1): This should not happen!! Data will be lost [ 205.171313][ T1235] [ 205.326747][ T6621] EXT4-fs (loop4): shut down requested (2) [ 205.780173][ T6656] loop2: detected capacity change from 0 to 256 [ 206.254965][ T5121] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 206.492984][ T6691] loop3: detected capacity change from 0 to 64 [ 206.625124][ T5121] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 206.642803][ T5121] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.660688][ T5121] usb 5-1: config 0 descriptor?? [ 206.706974][ T5121] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 206.743648][ T6700] loop1: detected capacity change from 0 to 256 [ 206.857892][ T6704] fuse: Unknown parameter './file0' [ 207.006094][ T6709] fuse: Bad value for 'user_id' [ 207.175156][ T5121] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 207.376083][ T6727] loop1: detected capacity change from 0 to 64 [ 207.458040][ T6729] fuse: Unknown parameter './file0' [ 207.587679][ T6660] udc-core: couldn't find an available UDC or it's busy [ 207.609631][ T6733] loop1: detected capacity change from 0 to 512 [ 207.616400][ T6660] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 207.732410][ T6733] EXT4-fs (loop1): 1 truncate cleaned up [ 207.745155][ T5121] gspca_cpia1: usb_control_msg 02, error -71 [ 207.751305][ T5121] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 207.761061][ T5121] usb 5-1: USB disconnect, device number 6 [ 207.775247][ T6733] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 208.104169][ T6748] loop2: detected capacity change from 0 to 256 [ 208.139944][ T6751] Cannot find add_set index 0 as target [ 208.270744][ T6760] loop3: detected capacity change from 0 to 64 [ 208.288508][ T6759] xt_HMARK: spi-set and port-set can't be combined [ 208.311171][ T6759] netlink: 1528 bytes leftover after parsing attributes in process `syz.0.934'. [ 208.441341][ T6763] netlink: 88 bytes leftover after parsing attributes in process `syz.0.936'. [ 208.482595][ T6763] netlink: 16 bytes leftover after parsing attributes in process `syz.0.936'. [ 209.559917][ T6773] loop2: detected capacity change from 0 to 256 [ 209.606791][ T6784] loop3: detected capacity change from 0 to 512 [ 209.675989][ T6773] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 209.801776][ T6784] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 209.818852][ T6784] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038 (0x7fffffff) [ 209.822092][ T6800] loop0: detected capacity change from 0 to 256 [ 210.009444][ T6806] loop1: detected capacity change from 0 to 64 [ 210.259500][ T6811] netlink: 88 bytes leftover after parsing attributes in process `syz.1.952'. [ 210.295487][ T6811] netlink: 16 bytes leftover after parsing attributes in process `syz.1.952'. [ 210.494224][ T6817] netlink: 80 bytes leftover after parsing attributes in process `syz.1.952'. [ 210.670888][ T5121] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 211.317014][ T5121] usb 4-1: config index 0 descriptor too short (expected 58733, got 36) [ 211.345313][ T5121] usb 4-1: config 39 has too many interfaces: 126, using maximum allowed: 32 [ 211.354366][ T5121] usb 4-1: config 39 has an invalid descriptor of length 0, skipping remainder of the config [ 211.365542][ T5121] usb 4-1: config 39 has 0 interfaces, different from the descriptor's value: 126 [ 211.445184][ T5121] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 211.445220][ T5121] usb 4-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 211.445243][ T5121] usb 4-1: Product: syz [ 211.751243][ T5121] usb 4-1: USB disconnect, device number 3 [ 211.944468][ T6834] dccp_v4_rcv: dropped packet with invalid checksum [ 212.050518][ T6835] loop2: detected capacity change from 0 to 256 [ 212.109939][ T6842] loop0: detected capacity change from 0 to 64 [ 212.121795][ T6835] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 212.142744][ T6798] loop4: detected capacity change from 0 to 40427 [ 212.197405][ T6798] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 212.232073][ T6798] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 212.275463][ T6798] F2FS-fs (loop4): invalid crc value [ 212.336297][ T6798] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 212.440341][ T6798] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 212.849559][ T6866] loop3: detected capacity change from 0 to 2048 [ 213.023363][ T6866] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 213.106998][ T6866] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 213.165408][ T6866] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 213.178254][ T6866] EXT4-fs (loop3): This should not happen!! Data will be lost [ 213.178254][ T6866] [ 213.188430][ T6866] EXT4-fs (loop3): Total free blocks count 0 [ 213.194676][ T6866] EXT4-fs (loop3): Free/Dirty block details [ 213.213025][ T6866] EXT4-fs (loop3): free_blocks=2415919104 [ 213.219566][ T6866] EXT4-fs (loop3): dirty_blocks=16 [ 213.225105][ T6866] EXT4-fs (loop3): Block reservation details [ 213.241748][ T6866] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 213.254268][ T6877] loop1: detected capacity change from 0 to 512 [ 213.286045][ T9] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 213.326806][ T6877] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e02c, mo2=0002] [ 213.335052][ T9] EXT4-fs (loop3): This should not happen!! Data will be lost [ 213.335052][ T9] [ 213.347082][ T6877] System zones: 1-12 [ 213.352170][ T6877] EXT4-fs error (device loop1): __ext4_iget:4861: inode #11: block 393240: comm syz.1.974: invalid block [ 213.379628][ T6877] EXT4-fs (loop1): Remounting filesystem read-only [ 213.431824][ T6877] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.974: couldn't read orphan inode 11 (err -117) [ 213.446487][ T6877] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,bsdgroups,noinit_itable,errors=remount-ro,max_batch_time=0x0000000000000001. Quota mode: none. [ 213.858404][ T6898] loop4: detected capacity change from 0 to 256 [ 214.025053][ T1281] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 214.089991][ T6903] xt_limit: Overflow, try lower: 6/2147483648 [ 214.243988][ T1175] attempt to access beyond end of device [ 214.243988][ T1175] loop4: rw=1, want=384, limit=256 [ 214.265172][ T1281] usb 2-1: Using ep0 maxpacket: 32 [ 214.396076][ T1281] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 96, changing to 10 [ 214.583261][ T1281] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42724, setting to 1024 [ 214.771626][ T6792] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 361: padding at end of block bitmap is not set [ 214.845386][ T1281] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 214.923117][ T1281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.957685][ T6792] EXT4-fs (loop1): Remounting filesystem read-only [ 215.005860][ T6877] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 215.009075][ T6911] sch_fq: defrate 0 ignored. [ 215.026157][ T1281] hub 2-1:4.0: USB hub found [ 215.132409][ T6914] xt_HMARK: spi-set and port-set can't be combined [ 215.143778][ T6914] netlink: 1528 bytes leftover after parsing attributes in process `syz.0.987'. [ 215.246015][ T6883] loop3: detected capacity change from 0 to 32768 [ 215.255300][ T1281] hub 2-1:4.0: 2 ports detected [ 215.360225][ T6883] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.975 (6883) [ 215.475160][ T1281] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 215.501672][ T1281] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 216.461179][ T6883] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 216.481982][ T1281] usb 2-1: USB disconnect, device number 9 [ 216.508541][ T6883] BTRFS info (device loop3): using free space tree [ 216.526784][ T6883] BTRFS info (device loop3): has skinny extents [ 216.886017][ T6935] loop2: detected capacity change from 0 to 40427 [ 217.009161][ T6935] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 217.017044][ T6935] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 217.067314][ T6935] F2FS-fs (loop2): Found nat_bits in checkpoint [ 217.101417][ T6935] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 217.116102][ T6883] BTRFS error (device loop3): open_ctree failed [ 217.137589][ T6935] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 217.144668][ T6935] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 217.580748][ T6975] fuse: Unknown parameter './file0' [ 217.586169][ T6955] loop4: detected capacity change from 0 to 32768 [ 217.781757][ T6955] XFS (loop4): Mounting V5 Filesystem [ 217.835087][ T1281] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 218.006080][ T6955] XFS (loop4): Ending clean mount [ 218.024242][ T6955] XFS (loop4): Quotacheck needed: Please wait. [ 218.035624][ T7000] xt_HMARK: spi-set and port-set can't be combined [ 218.059459][ T7000] netlink: 1528 bytes leftover after parsing attributes in process `syz.2.1000'. [ 218.163572][ T6955] XFS (loop4): Quotacheck: Done. [ 219.025227][ T1281] usb 2-1: config index 0 descriptor too short (expected 58733, got 36) [ 219.033722][ T1281] usb 2-1: config 39 has too many interfaces: 126, using maximum allowed: 32 [ 219.144354][ T7012] loop2: detected capacity change from 0 to 512 [ 219.151969][ T1281] usb 2-1: config 39 has an invalid descriptor of length 0, skipping remainder of the config [ 219.162536][ T1281] usb 2-1: config 39 has 0 interfaces, different from the descriptor's value: 126 [ 219.164832][ T6355] XFS (loop4): Unmounting Filesystem [ 219.279926][ T1281] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 219.299968][ T1281] usb 2-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 219.322031][ T1281] usb 2-1: Product: syz [ 219.361867][ T7012] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 219.379298][ T7012] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038 (0x7fffffff) [ 219.645898][ T6177] usb 2-1: USB disconnect, device number 10 [ 219.864118][ T7031] loop2: detected capacity change from 0 to 8 [ 220.026903][ T7031] SQUASHFS error: lzo decompression failed, data probably corrupt [ 220.040797][ T7031] SQUASHFS error: Failed to read block 0x28d: -5 [ 220.047646][ T7031] SQUASHFS error: Unable to read metadata cache entry [28b] [ 220.055337][ T7031] SQUASHFS error: Unable to read inode 0x11f [ 220.174263][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1020'. [ 220.207017][ T7040] xt_HMARK: spi-set and port-set can't be combined [ 220.224785][ T7040] netlink: 1528 bytes leftover after parsing attributes in process `syz.4.1022'. [ 220.277228][ T7028] loop3: detected capacity change from 0 to 32768 [ 220.595871][ T26] audit: type=1804 audit(1721076988.079:131): pid=7028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1018" name="/newroot/33/file0/bus" dev="loop3" ino=7 res=1 errno=0 [ 220.596602][ T7055] loop1: detected capacity change from 0 to 512 [ 220.646351][ T1281] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 220.911545][ T7055] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 220.978023][ T7055] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038 (0x7fffffff) [ 221.055145][ T1281] usb 1-1: config 0 has no interfaces? [ 221.255145][ T1281] usb 1-1: New USB device found, idVendor=1a86, idProduct=0122, bcdDevice=35.36 [ 221.286107][ T1281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.294133][ T1281] usb 1-1: Product: syz [ 221.326711][ T1281] usb 1-1: Manufacturer: syz [ 221.331845][ T1281] usb 1-1: SerialNumber: syz [ 221.339366][ T1281] usb 1-1: config 0 descriptor?? [ 221.396025][ T7075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1036'. [ 221.504959][ T6177] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 221.685838][ T6962] usb 1-1: USB disconnect, device number 10 [ 221.765721][ T6966] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 221.885021][ T6177] usb 4-1: config index 0 descriptor too short (expected 58733, got 36) [ 221.893425][ T6177] usb 4-1: config 39 has too many interfaces: 126, using maximum allowed: 32 [ 221.914968][ T6177] usb 4-1: config 39 has an invalid descriptor of length 0, skipping remainder of the config [ 221.925524][ T6177] usb 4-1: config 39 has 0 interfaces, different from the descriptor's value: 126 [ 222.025027][ T6177] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 222.034116][ T6177] usb 4-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 222.054939][ T6177] usb 4-1: Product: syz [ 222.135237][ T6966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.159965][ T6966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.171231][ T6966] usb 2-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 222.181003][ T6966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.193981][ T6966] usb 2-1: config 0 descriptor?? [ 222.338262][ T6177] usb 4-1: USB disconnect, device number 4 [ 222.679399][ T6966] cypress 0003:04B4:ED81.000C: hidraw0: USB HID v0.00 Device [HID 04b4:ed81] on usb-dummy_hcd.1-1/input0 [ 222.878776][ T6966] usb 2-1: USB disconnect, device number 11 [ 222.931805][ T7090] loop0: detected capacity change from 0 to 32768 [ 223.051477][ T26] audit: type=1804 audit(1721076990.539:132): pid=7090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1042" name="/newroot/176/file0/bus" dev="loop0" ino=7 res=1 errno=0 [ 223.118865][ T7103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1048'. [ 223.325006][ T7105] loop3: detected capacity change from 0 to 512 [ 223.409246][ T7105] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 223.447314][ T7105] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (28729!=33349) [ 223.487759][ T7105] EXT4-fs (loop3): orphan cleanup on readonly fs [ 223.511002][ T7105] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.1050: bad orphan inode 15 [ 223.543074][ T7105] ext4_test_bit(bit=14, block=20) = 0 [ 223.565275][ T7105] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,inode_readahead_blks=0x0000000000000080,noload,noblock_validity,init_itable,noblock_validity,,errors=continue. Quota mode: none. [ 223.700852][ T7124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1057'. [ 223.725592][ T7105] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1050'. [ 223.764103][ T7124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1057'. [ 224.342984][ T7146] sp0: Synchronizing with TNC [ 224.517187][ T7154] loop4: detected capacity change from 0 to 512 [ 224.549402][ T7146] nvme_fabrics: missing parameter 'transport=%s' [ 224.561210][ T7146] nvme_fabrics: missing parameter 'nqn=%s' [ 224.593295][ T7142] [U] è` [ 224.692649][ T7154] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 224.714207][ T7154] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038 (0x7fffffff) [ 224.811934][ T7167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1071'. [ 224.819125][ T7173] loop0: detected capacity change from 0 to 512 [ 224.880474][ T7175] loop3: detected capacity change from 0 to 1024 [ 224.887368][ T7176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1071'. [ 224.913019][ T7173] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 224.942225][ T7173] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (28729!=33349) [ 224.960949][ T7175] hfsplus: failed to load catalog file [ 224.999184][ T7173] EXT4-fs (loop0): orphan cleanup on readonly fs [ 225.010561][ T7173] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.1073: bad orphan inode 15 [ 225.024826][ T7179] loop4: detected capacity change from 0 to 1764 [ 225.036447][ T7173] ext4_test_bit(bit=14, block=20) = 0 [ 225.042000][ T7173] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,inode_readahead_blks=0x0000000000000080,noload,noblock_validity,init_itable,noblock_validity,,errors=continue. Quota mode: none. [ 225.195580][ T7173] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1073'. [ 225.634034][ T7195] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1081'. [ 225.834928][ T7188] loop3: detected capacity change from 0 to 4096 [ 226.417610][ T7209] loop1: detected capacity change from 0 to 512 [ 226.996166][ T7216] loop4: detected capacity change from 0 to 1024 [ 227.029077][ T7209] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 227.073566][ T7216] hfsplus: failed to load catalog file [ 227.108874][ T7209] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038 (0x7fffffff) [ 227.443127][ T1064] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 227.462871][ T1064] Bluetooth: hci0: Injecting HCI hardware error event [ 227.546467][ T146] Bluetooth: hci0: hardware error 0x00 [ 227.591220][ T7231] netlink: 'syz.3.1094': attribute type 4 has an invalid length. [ 227.599037][ T7231] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1094'. [ 227.957366][ T3529] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 227.972623][ T3529] Bluetooth: hci4: Injecting HCI hardware error event [ 228.012079][ T3524] Bluetooth: hci4: hardware error 0x00 [ 228.171655][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1097'. [ 228.318351][ T7238] loop3: detected capacity change from 0 to 256 [ 228.396572][ T7238] exfat: Bad value for 'uid' [ 230.372553][ T7265] loop4: detected capacity change from 0 to 1764 [ 231.057892][ T7274] netlink: 'syz.4.1108': attribute type 4 has an invalid length. [ 231.065682][ T7274] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1108'. [ 231.644180][ T7249] loop0: detected capacity change from 0 to 32768 [ 231.658453][ T7277] EXT4-fs warning (device sda1): ext4_group_extend:1831: need to use ext2online to resize further [ 231.776919][ T7249] XFS (loop0): invalid logbufsize: 8388608 [not 16k,32k,64k,128k or 256k] [ 231.945564][ T7279] tipc: Started in network mode [ 231.950473][ T7279] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 231.996849][ T7279] tipc: Enabled bearer , priority 0 [ 232.050279][ T7269] loop2: detected capacity change from 0 to 32768 [ 232.244694][ T7285] loop3: detected capacity change from 0 to 1024 [ 232.929901][ T7285] hfsplus: failed to load catalog file [ 233.118487][ T1064] tipc: Node number set to 11578026 [ 233.252628][ T7294] loop1: detected capacity change from 0 to 4096 [ 234.699581][ T7314] loop4: detected capacity change from 0 to 256 [ 234.769230][ T7312] loop0: detected capacity change from 0 to 4096 [ 234.795559][ T7314] exfat: Bad value for 'uid' [ 234.826064][ T7312] ntfs3: Unknown parameter 'nohhdden' [ 235.110916][ T7321] loop1: detected capacity change from 0 to 256 [ 235.213902][ T7324] loop2: detected capacity change from 0 to 512 [ 235.272708][ T7324] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 235.292209][ T7321] FAT-fs (loop1): Directory bread(block 64) failed [ 235.308457][ T7324] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 235.319384][ T7321] FAT-fs (loop1): Directory bread(block 65) failed [ 235.360235][ T7321] FAT-fs (loop1): Directory bread(block 66) failed [ 235.369236][ T7324] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 not in group (block 0)! [ 235.380395][ T7321] FAT-fs (loop1): Directory bread(block 67) failed [ 235.401903][ T7324] EXT4-fs (loop2): group descriptors corrupted! [ 235.425465][ T7321] FAT-fs (loop1): Directory bread(block 68) failed [ 235.442263][ T7321] FAT-fs (loop1): Directory bread(block 69) failed [ 235.464998][ T7321] FAT-fs (loop1): Directory bread(block 70) failed [ 235.471649][ T7321] FAT-fs (loop1): Directory bread(block 71) failed [ 236.476264][ T7321] FAT-fs (loop1): Directory bread(block 72) failed [ 236.486272][ T7321] FAT-fs (loop1): Directory bread(block 73) failed [ 236.523760][ T7331] loop3: detected capacity change from 0 to 32768 [ 236.565694][ T7331] XFS: attr2 mount option is deprecated. [ 236.594334][ T7336] loop2: detected capacity change from 0 to 256 [ 236.602805][ T7333] loop0: detected capacity change from 0 to 512 [ 236.651843][ T7331] XFS (loop3): cannot change alignment: superblock does not support data alignment [ 236.684000][ T7336] FAT-fs (loop2): Directory bread(block 64) failed [ 236.700320][ T7336] FAT-fs (loop2): Directory bread(block 65) failed [ 236.707907][ T7344] loop1: detected capacity change from 0 to 17 [ 236.714296][ T7336] FAT-fs (loop2): Directory bread(block 66) failed [ 236.721958][ T7336] FAT-fs (loop2): Directory bread(block 67) failed [ 236.729057][ T7336] FAT-fs (loop2): Directory bread(block 68) failed [ 236.740399][ T7336] FAT-fs (loop2): Directory bread(block 69) failed [ 236.745769][ T7344] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 236.747676][ T7336] FAT-fs (loop2): Directory bread(block 70) failed [ 236.754525][ T7344] BFS-fs: bfs_fill_super(): Impossible last inode number 229432 > 513 on loop1 [ 236.761420][ T7336] FAT-fs (loop2): Directory bread(block 71) failed [ 236.777814][ T7336] FAT-fs (loop2): Directory bread(block 72) failed [ 236.784482][ T7336] FAT-fs (loop2): Directory bread(block 73) failed [ 236.803480][ T7333] EXT4-fs (loop0): Test dummy encryption mode enabled [ 236.819507][ T7333] EXT4-fs (loop0): Test dummy encryption mode enabled [ 236.856311][ T7333] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:163: inode #12: comm syz.0.1129: inline data xattr refers to an external xattr inode [ 236.884368][ T7333] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1129: couldn't read orphan inode 12 (err -117) [ 236.908488][ T7333] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000004,init_itable=0x0000000000000000,nolazytime,grpid,prjquota,usrjquota=,lazytime,errors=continue,test_dummy_encryption,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 237.198258][ T7351] loop2: detected capacity change from 0 to 256 [ 237.346400][ T7357] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 237.355860][ T7351] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 237.378558][ T7351] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 238.166407][ T7368] EXT4-fs warning (device sda1): ext4_group_extend:1831: need to use ext2online to resize further [ 238.180140][ T7370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1140'. [ 238.355906][ T7377] loop3: detected capacity change from 0 to 8 [ 238.410536][ T7378] syz.2.1146 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 238.444957][ T6962] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 238.500636][ T7377] SQUASHFS error: xz decompression failed, data probably corrupt [ 238.542088][ T7377] SQUASHFS error: Failed to read block 0x108: -5 [ 238.589237][ T7377] SQUASHFS error: Unable to read metadata cache entry [106] [ 238.639464][ T7377] SQUASHFS error: Unable to read inode 0x11f [ 238.682631][ T7391] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 238.845439][ T6962] usb 1-1: config 0 has no interfaces? [ 238.851186][ T6962] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 238.934977][ T6962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.965206][ T6966] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 238.988405][ T6962] usb 1-1: config 0 descriptor?? [ 239.405279][ T6966] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.416274][ T6966] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 239.439318][ T6966] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 239.512330][ T6966] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 239.521541][ T6966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.551122][ T7389] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 239.626007][ T6966] hub 3-1:1.0: bad descriptor, ignoring hub [ 239.631954][ T6966] hub: probe of 3-1:1.0 failed with error -5 [ 239.652148][ T7404] loop3: detected capacity change from 0 to 256 [ 239.671408][ T6966] cdc_wdm 3-1:1.0: skipping garbage [ 239.684978][ T6966] cdc_wdm 3-1:1.0: skipping garbage [ 239.701558][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1157'. [ 239.726700][ T6966] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 239.732638][ T6966] cdc_wdm 3-1:1.0: Unknown control protocol [ 239.757896][ T7404] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 240.680730][ T1281] usb 3-1: USB disconnect, device number 12 [ 240.713268][ T7417] loop4: detected capacity change from 0 to 256 [ 240.756166][ T7417] exfat: Bad value for 'uid' [ 242.391083][ T6176] usb 1-1: USB disconnect, device number 11 [ 242.398402][ T7431] loop1: detected capacity change from 0 to 8 [ 242.463767][ T7431] SQUASHFS error: xz decompression failed, data probably corrupt [ 242.485219][ T7431] SQUASHFS error: Failed to read block 0x108: -5 [ 242.498506][ T7435] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 242.514982][ T7431] SQUASHFS error: Unable to read metadata cache entry [106] [ 242.526054][ T7431] SQUASHFS error: Unable to read inode 0x11f [ 244.792567][ T7451] loop2: detected capacity change from 0 to 32768 [ 244.866145][ T7451] XFS: attr2 mount option is deprecated. [ 245.013184][ T7461] mmap: syz.0.1173 (7461) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 245.081918][ T7451] XFS (loop2): cannot change alignment: superblock does not support data alignment [ 245.724035][ T6177] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 246.417170][ T7479] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 246.435132][ T6177] usb 1-1: config 0 has no interfaces? [ 246.440781][ T6177] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 246.491539][ T6177] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.533212][ T6177] usb 1-1: config 0 descriptor?? [ 247.008545][ T6962] kernel read not supported for file /admmidi2 (pid: 6962 comm: kworker/1:15) [ 247.234312][ T7508] loop3: detected capacity change from 0 to 256 [ 247.406254][ T1064] Bluetooth: hci3: command 0x0406 tx timeout [ 247.407134][ T6177] Bluetooth: hci1: command 0x0406 tx timeout [ 247.815342][ T26] audit: type=1804 audit(1721077015.299:133): pid=7508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1188" name="/newroot/67/file0/bus" dev="loop3" ino=1048705 res=1 errno=0 [ 247.902953][ T26] audit: type=1804 audit(1721077015.349:134): pid=7508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1188" name="/newroot/67/file0/bus" dev="loop3" ino=1048705 res=1 errno=0 [ 247.933412][ T26] audit: type=1804 audit(1721077015.349:135): pid=7508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1188" name="/newroot/67/file0/bus" dev="loop3" ino=1048705 res=1 errno=0 [ 248.808584][ T7523] loop2: detected capacity change from 0 to 256 [ 249.097710][ T7523] FAT-fs (loop2): Directory bread(block 1285) failed [ 249.106234][ T7528] loop4: detected capacity change from 0 to 16 [ 249.119009][ T7523] FAT-fs (loop2): Directory bread(block 1285) failed [ 249.149541][ T7523] FAT-fs (loop2): Directory bread(block 1285) failed [ 250.885079][ T7528] erofs: (device loop4): mounted with root inode @ nid 36. [ 250.903289][ T6965] usb 1-1: USB disconnect, device number 12 [ 250.937081][ T7523] FAT-fs (loop2): Directory bread(block 1285) failed [ 250.982269][ T7531] FAT-fs (loop2): Directory bread(block 1285) failed [ 251.260461][ T7531] FAT-fs (loop2): FAT read failed (blocknr 1281) [ 251.298111][ T7533] FAT-fs (loop2): Directory bread(block 1285) failed [ 251.337791][ T7533] FAT-fs (loop2): Directory bread(block 1285) failed [ 251.344669][ T7533] FAT-fs (loop2): Directory bread(block 1285) failed [ 251.673131][ T7552] device bond_slave_0 entered promiscuous mode [ 251.680167][ T7552] device bond_slave_1 entered promiscuous mode [ 251.732423][ T7552] device bond_slave_0 left promiscuous mode [ 251.751564][ T7552] device bond_slave_1 left promiscuous mode [ 251.856787][ T7552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.898007][ T6965] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 251.907329][ T7552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.923891][ T7552] bond0 (unregistering): Released all slaves [ 252.172528][ T7561] loop3: detected capacity change from 0 to 64 [ 252.455185][ T6965] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.224694][ T6965] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 253.234585][ T6965] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 253.244913][ T6965] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 253.253974][ T6965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.295251][ T7545] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 253.326079][ T6965] hub 1-1:1.0: bad descriptor, ignoring hub [ 253.332082][ T6965] hub: probe of 1-1:1.0 failed with error -5 [ 253.360771][ T6965] cdc_wdm 1-1:1.0: skipping garbage [ 253.563595][ T6965] cdc_wdm 1-1:1.0: skipping garbage [ 253.572752][ T6965] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 253.578996][ T6965] cdc_wdm 1-1:1.0: Unknown control protocol [ 253.604127][ T7573] netlink: 494 bytes leftover after parsing attributes in process `syz.4.1208'. [ 253.626041][ T6965] usb 1-1: USB disconnect, device number 13 [ 254.339846][ T7595] loop4: detected capacity change from 0 to 128 [ 254.406818][ T5587] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.457571][ T7595] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 254.468632][ T7595] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 254.525332][ T7596] mkiss: ax0: crc mode is auto. [ 254.537000][ T5587] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.593980][ T7604] loop0: detected capacity change from 0 to 256 [ 254.712751][ T5587] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.755186][ T26] audit: type=1804 audit(1721077022.249:136): pid=7604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1219" name="/newroot/208/file0/bus" dev="loop0" ino=1048706 res=1 errno=0 [ 254.818035][ T7595] Assertion failure in dx_insert_block() at fs/ext4/namei.c:1384: 'count < dx_get_limit(entries)' [ 254.837218][ T26] audit: type=1804 audit(1721077022.329:137): pid=7606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1219" name="/newroot/208/file0/bus" dev="loop0" ino=1048706 res=1 errno=0 [ 254.886988][ T7608] loop3: detected capacity change from 0 to 64 [ 254.894478][ T26] audit: type=1804 audit(1721077022.329:138): pid=7604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1219" name="/newroot/208/file0/bus" dev="loop0" ino=1048706 res=1 errno=0 [ 254.919655][ T5587] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.939148][ T7595] ------------[ cut here ]------------ [ 254.953562][ T7595] kernel BUG at fs/ext4/namei.c:1384! [ 254.968834][ T7595] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 254.974925][ T7595] CPU: 0 PID: 7595 Comm: syz.4.1217 Not tainted 5.15.162-syzkaller #0 [ 254.983095][ T7595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 254.993147][ T7595] RIP: 0010:do_split+0x244a/0x2480 [ 254.998272][ T7595] Code: bc 79 5b ff 48 c7 c7 00 83 9c 8a 48 c7 c6 7e e0 17 8c 48 c7 c2 38 75 9c 8a b9 68 05 00 00 49 c7 c0 60 83 9c 8a e8 06 71 f8 07 <0f> 0b e8 8f 79 5b ff 48 c7 c7 00 83 9c 8a 48 c7 c6 7e e0 17 8c 48 [ 255.017988][ T7595] RSP: 0018:ffffc90004207220 EFLAGS: 00010246 [ 255.024049][ T7595] RAX: 000000000000005f RBX: 0000000000000000 RCX: dfab47a02a277b00 [ 255.032020][ T7595] RDX: ffffc9000c0bf000 RSI: 000000000001c6a7 RDI: 000000000001c6a8 [ 255.040076][ T7595] RBP: ffffc90004207410 R08: ffffffff816683dc R09: ffffed10173667a8 [ 255.048058][ T7595] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88807ba6e020 [ 255.056026][ T7595] R13: 0000000000000000 R14: 1ffff1100f74dc04 R15: ffff88807ba6e020 [ 255.064077][ T7595] FS: 00007f584ddb56c0(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 255.073004][ T7595] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 255.079599][ T7595] CR2: 000000002008d000 CR3: 00000000655a1000 CR4: 00000000003506f0 [ 255.087567][ T7595] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 255.095532][ T7595] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 255.103495][ T7595] Call Trace: [ 255.106763][ T7595] [ 255.109686][ T7595] ? __die_body+0x5e/0xa0 [ 255.114039][ T7595] ? die+0x83/0xb0 [ 255.117750][ T7595] ? do_trap+0x11e/0x350 [ 255.121981][ T7595] ? do_split+0x244a/0x2480 [ 255.126472][ T7595] ? do_split+0x244a/0x2480 [ 255.130979][ T7595] ? do_error_trap+0x13d/0x1e0 [ 255.135734][ T7595] ? do_split+0x244a/0x2480 [ 255.140233][ T7595] ? do_int3+0x30/0x30 [ 255.144296][ T7595] ? rcu_is_watching+0x11/0xa0 [ 255.149069][ T7595] ? handle_invalid_op+0x2c/0x40 [ 255.154003][ T7595] ? do_split+0x244a/0x2480 [ 255.158501][ T7595] ? exc_invalid_op+0x2f/0x40 [ 255.163176][ T7595] ? asm_exc_invalid_op+0x16/0x20 [ 255.168197][ T7595] ? __wake_up_klogd+0xcc/0x100 [ 255.173043][ T7595] ? do_split+0x244a/0x2480 [ 255.177554][ T7595] ? ext4_handle_dirty_dx_node+0x580/0x580 [ 255.183367][ T7595] ? ext4_has_metadata_csum+0x1c0/0x1c0 [ 255.188913][ T7595] make_indexed_dir+0xdb0/0x13b0 [ 255.194016][ T7595] ? add_dirent_to_buf+0x7d0/0x7d0 [ 255.199172][ T7595] ? add_dirent_to_buf+0x54e/0x7d0 [ 255.204418][ T7595] ? ext4_dx_add_entry+0x1620/0x1620 [ 255.209756][ T7595] ? __ext4_read_dirblock+0x6b2/0x880 [ 255.215234][ T7595] ext4_add_entry+0xde2/0x12b0 [ 255.220004][ T7595] ? ext4_inc_count+0x190/0x190 [ 255.224862][ T7595] ? ext4_journal_check_start+0x17b/0x240 [ 255.230578][ T7595] ? __ext4_journal_start_sb+0x1cb/0x370 [ 255.236217][ T7595] ext4_rename2+0x2835/0x42e0 [ 255.240903][ T7595] ? ext4_mknod+0x560/0x560 [ 255.245429][ T7595] ? read_lock_is_recursive+0x10/0x10 [ 255.250801][ T7595] ? rwsem_write_trylock+0x166/0x210 [ 255.256094][ T7595] ? clear_nonspinnable+0x60/0x60 [ 255.261119][ T7595] ? generic_permission+0x21c/0x4f0 [ 255.266315][ T7595] ? do_raw_spin_unlock+0x137/0x8b0 [ 255.271520][ T7595] ? memcpy+0x3c/0x60 [ 255.275497][ T7595] vfs_rename+0xd32/0x10f0 [ 255.279929][ T7595] ? __ia32_sys_link+0x90/0x90 [ 255.284686][ T7595] ? security_path_rename+0x207/0x2a0 [ 255.290054][ T7595] do_renameat2+0xe0f/0x1700 [ 255.294653][ T7595] ? fsnotify_move+0x4f0/0x4f0 [ 255.299411][ T7595] ? __virt_addr_valid+0x39e/0x450 [ 255.304515][ T7595] ? 0xffffffff81000000 [ 255.308683][ T7595] ? __check_object_size+0x300/0x410 [ 255.313967][ T7595] ? getname_flags+0x1ec/0x4e0 [ 255.318723][ T7595] ? lockdep_hardirqs_on+0x94/0x130 [ 255.323917][ T7595] __x64_sys_rename+0x82/0x90 [ 255.328582][ T7595] do_syscall_64+0x3b/0xb0 [ 255.332989][ T7595] ? clear_bhb_loop+0x15/0x70 [ 255.337660][ T7595] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 255.343544][ T7595] RIP: 0033:0x7f584f334bd9 [ 255.347953][ T7595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.367549][ T7595] RSP: 002b:00007f584ddb5048 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 255.375956][ T7595] RAX: ffffffffffffffda RBX: 00007f584f4c2f60 RCX: 00007f584f334bd9 [ 255.383917][ T7595] RDX: 0000000000000000 RSI: 0000000020000f40 RDI: 0000000020000600 [ 255.391974][ T7595] RBP: 00007f584f3a3e60 R08: 0000000000000000 R09: 0000000000000000 [ 255.400022][ T7595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.407982][ T7595] R13: 000000000000000b R14: 00007f584f4c2f60 R15: 00007fff0d977478 [ 255.415948][ T7595] [ 255.418953][ T7595] Modules linked in: [ 255.434973][ T7595] ---[ end trace 3a7fa6f3cfbeffcf ]--- [ 255.463231][ T7595] RIP: 0010:do_split+0x244a/0x2480 [ 255.506271][ T7595] Code: bc 79 5b ff 48 c7 c7 00 83 9c 8a 48 c7 c6 7e e0 17 8c 48 c7 c2 38 75 9c 8a b9 68 05 00 00 49 c7 c0 60 83 9c 8a e8 06 71 f8 07 <0f> 0b e8 8f 79 5b ff 48 c7 c7 00 83 9c 8a 48 c7 c6 7e e0 17 8c 48 [ 255.529892][ T7595] RSP: 0018:ffffc90004207220 EFLAGS: 00010246 [ 255.537770][ T7595] RAX: 000000000000005f RBX: 0000000000000000 RCX: dfab47a02a277b00 [ 255.556818][ T1377] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.563121][ T1377] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.578243][ T7595] RDX: ffffc9000c0bf000 RSI: 000000000001c6a7 RDI: 000000000001c6a8 [ 255.589119][ T7595] RBP: ffffc90004207410 R08: ffffffff816683dc R09: ffffed10173667a8 [ 255.597252][ T7595] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88807ba6e020 [ 255.606509][ T7595] R13: 0000000000000000 R14: 1ffff1100f74dc04 R15: ffff88807ba6e020 [ 255.614993][ T7595] FS: 00007f584ddb56c0(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 255.623970][ T7595] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 255.635353][ T7595] CR2: 000055dd4382ca18 CR3: 00000000655a1000 CR4: 00000000003506f0 [ 255.643353][ T7595] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 255.665738][ T7595] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 255.673912][ T7595] Kernel panic - not syncing: Fatal exception [ 255.683196][ T7595] Kernel Offset: disabled [ 255.687534][ T7595] Rebooting in 86400 seconds..