last executing test programs: 15.548257231s ago: executing program 5 (id=835): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000380)={0x0, 0x0}) setpgid(0x0, r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) 14.150348102s ago: executing program 5 (id=837): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x100014e, &(0x7f0000000140)={[{@barrier_val={'barrier', 0x3d, 0x41}}, {@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@nobarrier}, {@noload}]}, 0x1, 0x444, &(0x7f0000000780)="$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") syz_open_dev$sg(0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010000000004"], 0x57) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 12.854966039s ago: executing program 0 (id=846): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbc0cfb91c82f4a9164dda5e67a46d8e841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d72166cb0d3a0ec4bfae563112f4b391aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d090014b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd8f200000017587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e959212181d4bf32ed89c96d421c8171698c49403558fd13c649f90b0911d57eeb298b590581eb00ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbb1d44925ce66ea1a94e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751beed5f79de29a67a579150bfb31232d296b9d2977ed027ca90af7088d6466f1501d9"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 12.627009339s ago: executing program 5 (id=848): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) 12.510826845s ago: executing program 0 (id=851): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010000000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 10.452230381s ago: executing program 3 (id=852): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) 10.380432529s ago: executing program 1 (id=853): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'veth0_to_bridge\x00'}}, 0x1e) close(r2) 10.20259701s ago: executing program 5 (id=855): syz_emit_ethernet(0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd607428dd00383a00fe80000000000000000000d2d173bf00000000bbff0200000000000000000000000000010104907800001a10727ecf0a95032f002001000000000000000000000000000001f7ff0000000000"], 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000003c0)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) ioctl$SNDCTL_TMR_SELECT(r0, 0x40045408) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f00000007c0)={'\x00', 0x9, 0x5bff, 0x2, 0x7, 0x4}) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002d80)={r6, &(0x7f0000001c80), 0x0}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) migrate_pages(0x0, 0x4, &(0x7f0000000040)=0x200000007f, &(0x7f0000000300)=0xa) syz_open_procfs$pagemap(0x0, 0x0) 10.130234633s ago: executing program 3 (id=856): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x41f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0xffffffff, 0x2, 0x0, 0x40, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x0, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xb3, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe8, 0x18, 0x0, &(0x7f0000000240)={0x7ffffffff000, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 10.010140864s ago: executing program 0 (id=857): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000bd284d3ceeed", @ANYRES32, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe3, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) 9.97429879s ago: executing program 2 (id=858): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f00000015c0), 0x4) 9.846828228s ago: executing program 1 (id=859): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000004e81000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010000100000000000000000053000000", @ANYRES32=r4, @ANYBLOB="efdd0e4af11f02000a0001"], 0x2c}}, 0x0) 9.69010666s ago: executing program 0 (id=860): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) creat(0x0, 0xc2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 9.665434497s ago: executing program 2 (id=861): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x90) 9.362695622s ago: executing program 2 (id=863): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 9.078788524s ago: executing program 2 (id=865): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x102, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) fadvise64(0xffffffffffffffff, 0x82e0, 0xff39, 0x3) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, 0x0) r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x8000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getpeername(r2, 0x0, 0x0) close(r2) 9.024841765s ago: executing program 1 (id=866): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}, 0x4040001) recvmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/109, 0x6d}], 0x1}, 0x2002) 3.888864112s ago: executing program 4 (id=867): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000900000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000030a03000000000000000000030000000900030073797a30000000000900010073797a300000000014000480080002400000000008000140000000001c0008800c00024000000000000000000c0001"], 0xa4}}, 0x0) 3.603987447s ago: executing program 2 (id=868): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x1de) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) execve(0x0, &(0x7f0000000100)=[0x0, &(0x7f00000007c0)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00', &(0x7f0000000c40)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00', &(0x7f00000010c0)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00', &(0x7f0000001540)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00'], &(0x7f00000001c0)=[&(0x7f0000001e80)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00']) fsopen(0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setxattr$incfs_id(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240), &(0x7f0000000200)={'0000000000000000000000000000000', 0x32}, 0x20, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000002340)) process_vm_writev(0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/217, 0xd9}], 0x1, &(0x7f0000000880)=[{&(0x7f0000000700)=""/186, 0xba}], 0x1, 0x0) 3.522865709s ago: executing program 4 (id=869): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) 3.429677427s ago: executing program 0 (id=870): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req={0x4, 0x1, 0x3}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={0x0, &(0x7f0000000540)=""/246, 0x0, 0xf6, 0x1}, 0x20) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x10001) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d80), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYRES32=r1], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191}, 0x90) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r4}, 0x40) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[], 0x0) 3.362581603s ago: executing program 4 (id=871): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r1, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}, 0xe}], 0x1, 0x0, 0x0) 3.274814951s ago: executing program 3 (id=872): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000bd284d3ceeed", @ANYRES32, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe3, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) 3.041003594s ago: executing program 4 (id=873): r0 = syz_io_uring_setup(0x6c13, &(0x7f0000000140)={0x0, 0x359e, 0x10}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xff4d}, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000fc0)='./file1\x00'}) io_uring_enter(r0, 0x7d79, 0x0, 0x0, 0x0, 0x0) 2.938136074s ago: executing program 0 (id=874): openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0420eb00000000000100090000007fe708000000bdc8a0930136388520a54a95a0"]) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081", 0x2, r0) r1 = getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d0000006700000005"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x5, r1, 0x1, 0x0) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe58, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x18, "000080f100df000000a7d9de16c708db7200"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x840000000002, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x0, 0x0, 0x0, 0x7fffffff}]}) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040eaf003120"], 0x7) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r4 = syz_io_uring_setup(0x24b9, &(0x7f0000000300)={0x0, 0x0, 0x400}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x10a4, 0x0, 0x0, 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2.806964861s ago: executing program 3 (id=875): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x90) 2.801049519s ago: executing program 1 (id=876): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRESOCT=r0], 0x105) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000000c0)={{0x1}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000004c0), 0x140) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0xa37e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0xa3, 0x4, 0x3, 0x900, r3, 0x2006, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x0, 0x8000000006}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 2.799789749s ago: executing program 5 (id=877): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 2.569165648s ago: executing program 4 (id=878): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000004e81000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010000100000000000000000053000000", @ANYRES32=r4, @ANYBLOB="efdd0e4af11f02000a0001"], 0x2c}}, 0x0) 2.474704766s ago: executing program 5 (id=879): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000003c0)={0x28607, 0x0, 0x2, 0x7ffffffe}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r2, @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080003"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x8, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000100)='GPL\x00', 0x7}, 0x90) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) unshare(0x40040000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="7ffbe1ffffff0000000005"], 0x14}, 0x1, 0xf00000000000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) getgid() r8 = socket$inet6(0xa, 0x80001, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) setsockopt$inet6_IPV6_RTHDR(r8, 0x29, 0x39, 0x0, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) gettid() close_range(r9, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r10}, 0x10) 2.474258169s ago: executing program 3 (id=880): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000380)={0x0, 0x0}) setpgid(0x0, r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) 2.092978647s ago: executing program 1 (id=881): open(&(0x7f0000000180)='./bus\x00', 0x4a37e, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) keyctl$join(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000180)='page_pool_release\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000180)='page_pool_release\x00', r2}, 0x10) fcntl$getown(0xffffffffffffffff, 0x9) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000040000aa0000000000000000850000004100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0xa4}, 0x48) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r5, &(0x7f0000000080)={0x2020}, 0x2020) 1.170478857s ago: executing program 3 (id=882): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x5, 0x807, &(0x7f0000001780)="$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") open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) 100.619406ms ago: executing program 4 (id=883): open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 64.321955ms ago: executing program 2 (id=884): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x89}, 0x0) ptrace$setsig(0x4203, r0, 0x10, &(0x7f0000000240)={0x27, 0x1000, 0x3ff}) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x1fffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x8000f28, 0x0) splice(r4, 0x0, r2, 0x0, 0x7f, 0xe) 0s ago: executing program 1 (id=885): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@loopback, @in=@broadcast}, {0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffffffffffb}}, {{@in6=@private2, 0x4d6}, 0x0, @in6=@dev, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x4}}, 0xe8) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@mcast2={0xff, 0x5}, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[], 0x134}}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) quotactl$Q_SETQUOTA(0x0, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/3601], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) timerfd_create(0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) close_range(r4, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): omic:0KB active_anon:27344kB inactive_anon:0kB active_file:5984kB inactive_file:151864kB unevictable:1536kB writepending:1020kB present:3129332kB managed:2554984kB mlocked:0kB bounce:0kB free_pcp:680kB local_pcp:64kB free_cma:0kB [ 105.322152][ T5296] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 105.361700][ T5296] usb 4-1: device descriptor read/8, error -71 [ 105.388383][ T5572] lowmem_reserve[]: 0 0 0 0 0 [ 105.393753][ T5572] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 105.423464][ T5572] lowmem_reserve[]: 0 0 0 0 0 [ 105.441055][ T5572] Node 1 Normal free:3948928kB boost:0kB min:55660kB low:69572kB high:83484kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 105.492466][ T5572] lowmem_reserve[]: 0 0 0 0 0 [ 105.523736][ T5572] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 105.572107][ T5572] Node 0 DMA32: 41*4kB (UME) 28*8kB (UME) 70*16kB (UME) 128*32kB (UME) 70*64kB (UME) 21*128kB (UME) 14*256kB (ME) 5*512kB (UME) 1*1024kB (E) 2*2048kB (ME) 330*4096kB (M) = 1375716kB [ 105.635731][ T5296] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 105.656808][ T5572] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 105.684406][ T5572] Node 1 Normal: 4*4kB (UM) 4*8kB (UM) 9*16kB (UM) 12*32kB (UM) 3*64kB (U) 3*128kB (U) 1*256kB (M) 4*512kB (UM) 1*1024kB (U) 2*2048kB (U) 962*4096kB (M) = 3948928kB [ 105.711302][ T5296] usb 4-1: device descriptor read/8, error -71 [ 105.739263][ T5572] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 105.765568][ T5572] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 105.797875][ T5572] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 105.829005][ T5572] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 105.841741][ T5296] usb usb4-port1: unable to enumerate USB device [ 105.864667][ T5572] 40927 total pagecache pages [ 105.878392][ T5572] 0 pages in swap cache [ 105.890653][ T5572] Free swap = 124448kB [ 105.925343][ T5572] Total swap = 124996kB [ 105.949386][ T5572] 2097051 pages RAM [ 105.979566][ T5572] 0 pages HighMem/MovableOnly [ 106.007125][ T5572] 426967 pages reserved [ 106.024685][ T5653] Invalid ELF header magic: != ELF [ 106.072810][ T5572] 0 pages cma reserved [ 106.331784][ T5658] netlink: 'syz.2.108': attribute type 1 has an invalid length. [ 106.961452][ T933] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 107.410956][ T933] usb 1-1: Using ep0 maxpacket: 8 [ 107.463104][ T933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 107.525359][ T933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 107.614504][ T933] usb 1-1: New USB device found, idVendor=0582, idProduct=007a, bcdDevice=c7.3d [ 108.068247][ T5680] capability: warning: `syz.2.114' uses deprecated v2 capabilities in a way that may be insecure [ 108.080530][ T933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.152731][ T933] usb 1-1: Product: syz [ 108.156955][ T933] usb 1-1: Manufacturer: syz [ 108.211458][ T933] usb 1-1: SerialNumber: syz [ 108.231897][ T933] usb 1-1: config 0 descriptor?? [ 108.498656][ T5660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.581104][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 108.589485][ T5660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.647460][ T5693] Invalid ELF header magic: != ELF [ 108.682590][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 108.772810][ T933] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 108.839821][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 108.855442][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.912714][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.950272][ T8] usb 5-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 108.979846][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.029974][ T5704] binder: 5703:5704 ioctl c0306201 20000000 returned -14 [ 109.043903][ T8] usb 5-1: config 0 descriptor?? [ 109.050130][ T933] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 109.102862][ T933] usb 1-1: USB disconnect, device number 6 [ 109.218292][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 109.302178][ T5404] udevd[5404]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.431210][ T9] usb 6-1: device descriptor read/64, error -71 [ 109.537143][ T8] apple 0003:05AC:026C.0001: item fetching failed at offset 3/7 [ 109.562163][ T8] apple 0003:05AC:026C.0001: parse failed [ 109.576704][ T8] apple 0003:05AC:026C.0001: probe with driver apple failed with error -22 [ 109.741069][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 109.833369][ T8] usb 5-1: USB disconnect, device number 2 [ 109.941250][ T9] usb 6-1: device descriptor read/64, error -71 [ 110.087994][ T5723] netlink: 60 bytes leftover after parsing attributes in process `syz.3.131'. [ 110.852062][ T9] usb usb6-port1: attempt power cycle [ 111.111506][ T5734] overlayfs: failed to resolve './file1': -2 [ 111.724188][ T5734] Invalid ELF header magic: != ELF [ 112.071431][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 112.242000][ T933] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 112.437679][ T9] usb 6-1: device descriptor read/8, error -71 [ 112.536640][ T933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 112.621137][ T933] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 112.631702][ T5749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 112.706939][ T933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.765123][ T933] usb 1-1: config 0 descriptor?? [ 113.014431][ T933] ath6kl: Failed to submit usb control message: -71 [ 113.041039][ T933] ath6kl: unable to send the bmi data to the device: -71 [ 113.086637][ T933] ath6kl: Unable to send get target info: -71 [ 113.128671][ T933] ath6kl: Failed to init ath6kl core: -71 [ 113.172686][ T933] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 113.262846][ T933] usb 1-1: USB disconnect, device number 7 [ 114.639361][ T5785] netlink: 4 bytes leftover after parsing attributes in process `syz.5.152'. [ 114.709541][ T5785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.738415][ T5787] overlayfs: failed to resolve './file1': -2 [ 114.744628][ T5785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.783327][ T5787] Invalid ELF header magic: != ELF [ 114.881761][ T5785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.893805][ T5785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.012837][ T5795] sched: RT throttling activated [ 117.536644][ T5799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.159'. [ 118.291614][ T933] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 118.496676][ T933] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 118.499019][ T5836] overlayfs: failed to resolve './file1': -2 [ 118.517213][ T933] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 118.528516][ T933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.558051][ T933] usb 6-1: config 0 descriptor?? [ 118.564308][ T5836] Invalid ELF header magic: != ELF [ 118.798465][ T933] ath6kl: Failed to submit usb control message: -71 [ 118.821659][ T933] ath6kl: unable to send the bmi data to the device: -71 [ 118.829422][ T933] ath6kl: Unable to send get target info: -71 [ 118.880409][ T933] ath6kl: Failed to init ath6kl core: -71 [ 118.904002][ T933] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 119.040074][ T933] usb 6-1: USB disconnect, device number 6 [ 119.121237][ T5234] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 119.229186][ T5849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.177'. [ 119.324129][ T5234] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.354032][ T5234] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.430451][ T5234] usb 2-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 119.473805][ T5234] usb 2-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 119.553695][ T5234] usb 2-1: config 1 interface 1 has no altsetting 0 [ 119.602507][ T5234] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 119.621565][ T5234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.903319][ T5234] usb 2-1: Product: syz [ 119.912788][ T5234] usb 2-1: Manufacturer: syz [ 119.917417][ T5234] usb 2-1: SerialNumber: syz [ 119.935228][ T5234] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 120.524801][ T5295] usb 2-1: USB disconnect, device number 5 [ 120.821345][ T5872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.185'. [ 122.409860][ T5895] loop1: detected capacity change from 0 to 512 [ 122.426144][ T5895] ======================================================= [ 122.426144][ T5895] WARNING: The mand mount option has been deprecated and [ 122.426144][ T5895] and is ignored by this kernel. Remove the mand [ 122.426144][ T5895] option from the mount to silence this warning. [ 122.426144][ T5895] ======================================================= [ 122.478591][ T5895] EXT4-fs: Ignoring removed bh option [ 122.531209][ T5895] EXT4-fs (loop1): bad s_min_extra_isize: 65535 [ 123.431049][ T5234] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 123.654640][ T5234] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 123.681081][ T5234] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 123.710793][ T5234] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.752127][ T5234] usb 6-1: config 0 descriptor?? [ 123.992047][ T5234] ath6kl: Failed to submit usb control message: -71 [ 124.029405][ T5234] ath6kl: unable to send the bmi data to the device: -71 [ 124.089809][ T5234] ath6kl: Unable to send get target info: -71 [ 124.124244][ T5234] ath6kl: Failed to init ath6kl core: -71 [ 124.130612][ T5234] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 124.242269][ T5234] usb 6-1: USB disconnect, device number 7 [ 124.552866][ T5292] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 124.760367][ T5292] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.799023][ T5292] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.125535][ T5932] syzkaller0: entered promiscuous mode [ 125.131130][ T5932] syzkaller0: entered allmulticast mode [ 126.061064][ T5292] usb 3-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 126.111133][ T5292] usb 3-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 126.198798][ T5292] usb 3-1: config 1 interface 1 has no altsetting 0 [ 126.262461][ T5292] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 126.299967][ T5292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.348411][ T5292] usb 3-1: Product: syz [ 126.361856][ T5292] usb 3-1: Manufacturer: syz [ 126.389528][ T5292] usb 3-1: SerialNumber: syz [ 126.425564][ T5292] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 126.745855][ T5292] usb 3-1: USB disconnect, device number 4 [ 128.410390][ T5961] loop0: detected capacity change from 0 to 2048 [ 128.441694][ T5964] usb usb8: usbfs: process 5964 (syz.5.217) did not claim interface 0 before use [ 128.573413][ T5961] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.788819][ T5970] loop4: detected capacity change from 0 to 4096 [ 129.594529][ T5989] Bluetooth: MGMT ver 1.23 [ 129.670341][ T5989] loop1: detected capacity change from 0 to 8 [ 129.896387][ T5241] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.982329][ T5296] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 130.193527][ T5296] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.222783][ T5296] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.270732][ T5296] usb 3-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 130.283084][ T5296] usb 3-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 130.296870][ T5296] usb 3-1: config 1 interface 1 has no altsetting 0 [ 130.317734][ T5296] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 130.338221][ T5296] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.358064][ T5296] usb 3-1: Product: syz [ 130.377781][ T5296] usb 3-1: Manufacturer: syz [ 130.407407][ T5296] usb 3-1: SerialNumber: syz [ 130.448956][ T5296] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 130.558827][ T6006] netlink: 4 bytes leftover after parsing attributes in process `syz.5.231'. [ 130.658008][ T5296] usb 3-1: USB disconnect, device number 5 [ 130.771418][ T5292] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 130.981036][ T5292] usb 5-1: Using ep0 maxpacket: 8 [ 130.989525][ T5292] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 130.996149][ T5991] loop3: detected capacity change from 0 to 40427 [ 131.013506][ T5292] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 131.067510][ T5292] usb 5-1: New USB device found, idVendor=0582, idProduct=007a, bcdDevice=c7.3d [ 131.099954][ T5292] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.117635][ T5991] F2FS-fs (loop3): invalid crc value [ 131.135340][ T5292] usb 5-1: Product: syz [ 131.154678][ T5292] usb 5-1: Manufacturer: syz [ 131.164233][ T5292] usb 5-1: SerialNumber: syz [ 131.166620][ T5991] F2FS-fs (loop3): Found nat_bits in checkpoint [ 131.181956][ T5292] usb 5-1: config 0 descriptor?? [ 131.450333][ T6004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.475557][ T5991] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 131.493233][ T6004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.579988][ T5292] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 131.935173][ T5292] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 131.977969][ T5292] usb 5-1: USB disconnect, device number 3 [ 132.112189][ T5404] udevd[5404]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.317730][ T5246] syz-executor: attempt to access beyond end of device [ 132.317730][ T5246] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 132.368212][ T5246] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 132.385866][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.401311][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.208401][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 135.794133][ T5296] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 136.011119][ T5296] usb 1-1: Using ep0 maxpacket: 8 [ 136.021616][ T5296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 136.056745][ T5296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 136.084087][ T5296] usb 1-1: New USB device found, idVendor=0582, idProduct=007a, bcdDevice=c7.3d [ 136.105017][ T5296] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.135553][ T5296] usb 1-1: Product: syz [ 136.144499][ T5296] usb 1-1: Manufacturer: syz [ 136.156040][ T5296] usb 1-1: SerialNumber: syz [ 136.177899][ T5296] usb 1-1: config 0 descriptor?? [ 136.436440][ T6070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.494232][ T6070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.601415][ T5296] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 136.805643][ T5296] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 136.881336][ T5296] usb 1-1: USB disconnect, device number 8 [ 136.949635][ T5404] udevd[5404]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 137.619057][ T6098] loop0: detected capacity change from 0 to 4096 [ 137.701051][ T6106] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.747941][ T6083] loop5: detected capacity change from 0 to 40427 [ 137.807801][ T6083] F2FS-fs (loop5): invalid crc value [ 137.888387][ T6083] F2FS-fs (loop5): Found nat_bits in checkpoint [ 137.957844][ T6098] syz.0.270 (6098) used greatest stack depth: 17808 bytes left [ 138.178621][ T6083] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 139.532390][ T5232] syz-executor: attempt to access beyond end of device [ 139.532390][ T5232] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 139.587995][ T5232] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 140.071561][ T5295] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 140.283481][ T5295] usb 5-1: Using ep0 maxpacket: 8 [ 140.314562][ T5295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 140.359788][ T5295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 140.384274][ T5295] usb 5-1: New USB device found, idVendor=0582, idProduct=007a, bcdDevice=c7.3d [ 140.411921][ T5295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.436101][ T5295] usb 5-1: Product: syz [ 140.440300][ T5295] usb 5-1: Manufacturer: syz [ 140.466271][ T5295] usb 5-1: SerialNumber: syz [ 140.503765][ T5295] usb 5-1: config 0 descriptor?? [ 141.461573][ T6133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.519236][ T6133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.692948][ T29] audit: type=1326 audit(1725732971.766:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6162 comm="syz.1.292" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7e0497cef9 code=0x0 [ 141.697452][ T5295] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 141.796333][ T29] audit: type=1326 audit(1725732971.836:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6162 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0497cef9 code=0x7ffc0000 [ 141.907621][ T29] audit: type=1326 audit(1725732971.836:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6162 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0497cef9 code=0x7ffc0000 [ 141.969142][ T5295] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 142.001045][ T29] audit: type=1326 audit(1725732971.836:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6162 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f7e0497cef9 code=0x7ffc0000 [ 142.062729][ T5295] usb 5-1: USB disconnect, device number 4 [ 142.121376][ T29] audit: type=1326 audit(1725732971.836:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6162 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0497cef9 code=0x7ffc0000 [ 142.166526][ T5511] udevd[5511]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.224691][ T29] audit: type=1326 audit(1725732971.836:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6162 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e0497cef9 code=0x7ffc0000 [ 142.270803][ T29] audit: type=1326 audit(1725732971.836:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6162 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0497cef9 code=0x7ffc0000 [ 142.370995][ T29] audit: type=1326 audit(1725732971.836:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6162 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e0497cef9 code=0x7ffc0000 [ 142.515225][ T29] audit: type=1326 audit(1725732971.836:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6162 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0497cef9 code=0x7ffc0000 [ 142.741793][ T29] audit: type=1326 audit(1725732971.836:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6162 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7e0497cef9 code=0x7ffc0000 [ 143.690761][ T6186] loop2: detected capacity change from 0 to 4096 [ 143.922125][ T6197] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 143.922588][ T6200] netlink: 24 bytes leftover after parsing attributes in process `syz.1.307'. [ 144.010322][ T6186] ntfs3: loop2: ino=5, "/" directory corrupted [ 144.042444][ T6200] netlink: 28 bytes leftover after parsing attributes in process `syz.1.307'. [ 144.192393][ T6203] loop3: detected capacity change from 0 to 4096 [ 144.310781][ T6210] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.761506][ T6203] loop3: detected capacity change from 4096 to 0 [ 144.805221][ T6220] syz.3.306: attempt to access beyond end of device [ 144.805221][ T6220] loop3: rw=2049, sector=408, nr_sectors = 24 limit=0 [ 144.875181][ T6220] NILFS (loop3): I/O error writing log (start-blocknr=51, block-count=3) in segment 3 [ 144.991035][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 145.006594][ T6203] syz.3.306: attempt to access beyond end of device [ 145.006594][ T6203] loop3: rw=2049, sector=512, nr_sectors = 24 limit=0 [ 145.044210][ T6198] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.304'. [ 145.073991][ T6203] NILFS (loop3): I/O error writing log (start-blocknr=64, block-count=3) in segment 4 [ 145.092920][ T6210] segctord: attempt to access beyond end of device [ 145.092920][ T6210] loop3: rw=2049, sector=512, nr_sectors = 128 limit=0 [ 145.211443][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 145.921458][ T6210] NILFS (loop3): I/O error writing log (start-blocknr=64, block-count=16) in segment 4 [ 145.961719][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 146.051050][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 146.102973][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=007a, bcdDevice=c7.3d [ 146.165316][ T5246] syz-executor: attempt to access beyond end of device [ 146.165316][ T5246] loop3: rw=0, sector=264, nr_sectors = 8 limit=0 [ 146.187880][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.218900][ T5246] NILFS (loop3): I/O error reading meta-data file (ino=3, block-offset=130) [ 146.220498][ T9] usb 2-1: Product: syz [ 146.254961][ T5246] syz-executor: attempt to access beyond end of device [ 146.254961][ T5246] loop3: rw=0, sector=264, nr_sectors = 8 limit=0 [ 146.284471][ T9] usb 2-1: Manufacturer: syz [ 146.289104][ T9] usb 2-1: SerialNumber: syz [ 146.314218][ T5246] NILFS (loop3): I/O error reading meta-data file (ino=3, block-offset=130) [ 146.342883][ T5246] NILFS error (device loop3): nilfs_readdir: bad page in #12 [ 146.387180][ T5246] syz-executor: attempt to access beyond end of device [ 146.387180][ T5246] loop3: rw=395265, sector=4088, nr_sectors = 8 limit=0 [ 146.392442][ T9] usb 2-1: config 0 descriptor?? [ 147.523273][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 147.523296][ T29] audit: type=1326 audit(1725732977.616:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.5.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a7cf7cef9 code=0x7ffc0000 [ 147.587759][ T5246] Buffer I/O error on dev loop3, logical block 511, lost sync page write [ 147.627310][ T5246] NILFS (loop3): unable to write superblock: err=-5 [ 147.723654][ T5246] syz-executor: attempt to access beyond end of device [ 147.723654][ T5246] loop3: rw=395265, sector=0, nr_sectors = 8 limit=0 [ 147.740973][ T29] audit: type=1326 audit(1725732977.616:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.5.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3a7cf7cef9 code=0x7ffc0000 [ 147.837190][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 147.870434][ T5246] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 147.911200][ T29] audit: type=1326 audit(1725732977.616:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.5.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a7cf7cef9 code=0x7ffc0000 [ 147.946292][ T5246] NILFS (loop3): unable to write superblock: err=-5 [ 147.972394][ T5246] Remounting filesystem read-only [ 148.013462][ T29] audit: type=1326 audit(1725732977.616:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.5.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a7cf7cef9 code=0x7ffc0000 [ 148.088065][ T5246] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 148.111239][ T29] audit: type=1326 audit(1725732977.676:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.5.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3a7cf7cef9 code=0x7ffc0000 [ 148.144666][ T5246] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 148.159234][ T9] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 148.171198][ T6247] netlink: 24 bytes leftover after parsing attributes in process `syz.1.323'. [ 148.173659][ T5246] NILFS (loop3): discard dirty block: blocknr=14, size=4096 [ 148.233347][ T29] audit: type=1326 audit(1725732977.676:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.5.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a7cf7cef9 code=0x7ffc0000 [ 148.237838][ T6247] netlink: 28 bytes leftover after parsing attributes in process `syz.1.323'. [ 148.272602][ T5246] NILFS (loop3): discard dirty page: offset=0, ino=15 [ 148.287886][ T6244] loop4: detected capacity change from 0 to 4096 [ 148.301292][ T5246] NILFS (loop3): discard dirty block: blocknr=18, size=4096 [ 148.302645][ T9] usb 2-1: USB disconnect, device number 6 [ 148.341076][ T5246] NILFS (loop3): discard dirty page: offset=4096, ino=15 [ 148.391384][ T5246] NILFS (loop3): discard dirty block: blocknr=0, size=4096 [ 148.401685][ T29] audit: type=1326 audit(1725732977.676:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.5.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a7cf7cef9 code=0x7ffc0000 [ 148.429555][ T5246] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 148.442295][ T6250] mmap: syz.2.321 (6250) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 148.454579][ T5246] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 148.484628][ T5246] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 148.501020][ T29] audit: type=1326 audit(1725732977.706:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.5.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a7cf7cef9 code=0x7ffc0000 [ 148.531191][ T5246] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 148.561820][ T5362] udevd[5362]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 148.565467][ T6255] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 148.588605][ T5246] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 148.620127][ T5246] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 148.629586][ T29] audit: type=1326 audit(1725732977.706:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.5.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a7cf7cef9 code=0x7ffc0000 [ 148.684282][ T5246] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 148.780349][ T5246] NILFS (loop3): discard dirty block: blocknr=27, size=4096 [ 148.811237][ T29] audit: type=1326 audit(1725732977.716:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.5.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3a7cf7cef9 code=0x7ffc0000 [ 148.840820][ T5246] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 148.915615][ T5246] NILFS (loop3): discard dirty block: blocknr=26, size=4096 [ 148.967096][ T5246] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 149.038764][ T5246] NILFS (loop3): discard dirty block: blocknr=28, size=4096 [ 149.079068][ T5246] NILFS (loop3): discard dirty page: offset=4096, ino=3 [ 149.114944][ T5246] NILFS (loop3): discard dirty block: blocknr=29, size=4096 [ 149.140969][ T5246] NILFS (loop3): discard dirty page: offset=8192, ino=3 [ 149.158374][ T5246] NILFS (loop3): discard dirty block: blocknr=30, size=4096 [ 149.178733][ T5246] NILFS (loop3): discard dirty page: offset=921600, ino=3 [ 149.219352][ T5246] NILFS (loop3): discard dirty block: blocknr=0, size=4096 [ 149.260964][ T5246] NILFS (loop3): discard dirty page: offset=925696, ino=3 [ 149.268243][ T5246] NILFS (loop3): discard dirty block: blocknr=36, size=4096 [ 149.278200][ T6244] loop4: detected capacity change from 4096 to 0 [ 149.303462][ T6266] syz.4.322: attempt to access beyond end of device [ 149.303462][ T6266] loop4: rw=2049, sector=512, nr_sectors = 16 limit=0 [ 149.382102][ T6266] NILFS (loop4): I/O error writing log (start-blocknr=64, block-count=2) in segment 4 [ 149.552375][ T6244] syz.4.322: attempt to access beyond end of device [ 149.552375][ T6244] loop4: rw=2049, sector=496, nr_sectors = 16 limit=0 [ 149.641968][ T6244] syz.4.322: attempt to access beyond end of device [ 149.641968][ T6244] loop4: rw=2049, sector=512, nr_sectors = 16 limit=0 [ 149.688388][ T6244] NILFS (loop4): I/O error writing log (start-blocknr=62, block-count=2) in segment 3 [ 149.754489][ T6244] NILFS (loop4): I/O error writing log (start-blocknr=64, block-count=2) in segment 4 [ 149.875230][ T5231] syz-executor: attempt to access beyond end of device [ 149.875230][ T5231] loop4: rw=0, sector=264, nr_sectors = 8 limit=0 [ 149.945222][ T5231] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=130) [ 149.986832][ T5231] syz-executor: attempt to access beyond end of device [ 149.986832][ T5231] loop4: rw=0, sector=264, nr_sectors = 8 limit=0 [ 150.052063][ T5231] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=130) [ 150.073993][ T5231] NILFS error (device loop4): nilfs_readdir: bad page in #12 [ 150.091010][ T5231] syz-executor: attempt to access beyond end of device [ 150.091010][ T5231] loop4: rw=395265, sector=4088, nr_sectors = 8 limit=0 [ 150.118322][ T5231] Buffer I/O error on dev loop4, logical block 511, lost sync page write [ 150.141034][ T8] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 150.178909][ T5231] NILFS (loop4): unable to write superblock: err=-5 [ 150.194332][ T6287] loop1: detected capacity change from 0 to 2048 [ 150.211411][ T5231] syz-executor: attempt to access beyond end of device [ 150.211411][ T5231] loop4: rw=395265, sector=0, nr_sectors = 8 limit=0 [ 150.261325][ T5231] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 150.292587][ T6287] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.306734][ T5231] NILFS (loop4): unable to write superblock: err=-5 [ 150.306802][ T5231] Remounting filesystem read-only [ 150.359167][ T5231] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 150.359299][ T6294] netlink: 24 bytes leftover after parsing attributes in process `syz.0.340'. [ 150.370767][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 150.400234][ T6294] netlink: 28 bytes leftover after parsing attributes in process `syz.0.340'. [ 150.426541][ T5231] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 150.436572][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 150.437916][ T5245] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.461882][ T5231] NILFS (loop4): discard dirty block: blocknr=14, size=4096 [ 150.480252][ T5231] NILFS (loop4): discard dirty page: offset=0, ino=15 [ 150.485105][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 150.506682][ T5231] NILFS (loop4): discard dirty block: blocknr=40, size=4096 [ 150.528635][ T5231] NILFS (loop4): discard dirty page: offset=4096, ino=15 [ 150.566099][ T5231] NILFS (loop4): discard dirty block: blocknr=0, size=4096 [ 150.572039][ T8] usb 6-1: New USB device found, idVendor=0582, idProduct=007a, bcdDevice=c7.3d [ 150.597350][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.601850][ T5231] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 150.629220][ T8] usb 6-1: Product: syz [ 150.646153][ T8] usb 6-1: Manufacturer: syz [ 150.661262][ T5231] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 150.669497][ T8] usb 6-1: SerialNumber: syz [ 150.684703][ T5231] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 150.698052][ T8] usb 6-1: config 0 descriptor?? [ 150.709056][ T5231] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 150.747555][ T5231] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 150.757087][ T5231] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 150.803290][ T5231] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 150.817340][ T5231] NILFS (loop4): discard dirty block: blocknr=27, size=4096 [ 150.875559][ T5231] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 150.918536][ T5231] NILFS (loop4): discard dirty block: blocknr=28, size=4096 [ 150.965191][ T6283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.978079][ T5231] NILFS (loop4): discard dirty page: offset=4096, ino=3 [ 151.020754][ T5231] NILFS (loop4): discard dirty block: blocknr=29, size=4096 [ 151.274715][ T5231] NILFS (loop4): discard dirty page: offset=921600, ino=3 [ 151.283930][ T5231] NILFS (loop4): discard dirty block: blocknr=0, size=4096 [ 151.285615][ T6283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.292039][ T5231] NILFS (loop4): discard dirty page: offset=925696, ino=3 [ 151.331194][ T5231] NILFS (loop4): discard dirty block: blocknr=36, size=4096 [ 151.425014][ T8] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 151.702842][ T6320] loop4: detected capacity change from 0 to 1024 [ 152.534299][ T8] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 152.968282][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 152.968302][ T29] audit: type=1107 audit(1725732983.056:114): pid=6321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='…' [ 152.993957][ T8] usb 6-1: USB disconnect, device number 8 [ 153.067083][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.351'. [ 153.329004][ T5404] udevd[5404]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.628636][ T6343] netlink: 24 bytes leftover after parsing attributes in process `syz.0.356'. [ 153.733546][ T6343] netlink: 28 bytes leftover after parsing attributes in process `syz.0.356'. [ 154.869199][ T6360] loop4: detected capacity change from 0 to 512 [ 154.879981][ T6355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.361'. [ 155.162117][ T6360] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 155.171220][ T6360] System zones: 1-12 [ 155.175538][ T6360] EXT4-fs (loop4): orphan cleanup on readonly fs [ 155.229168][ T6360] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.362: invalid indirect mapped block 1819239214 (level 1) [ 155.375178][ T6360] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.362: bg 0: block 5: invalid block bitmap [ 155.419156][ T6360] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 155.459191][ T6360] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.362: attempt to clear invalid blocks 33619980 len 1 [ 155.471344][ T6365] loop0: detected capacity change from 0 to 1024 [ 155.504184][ T6360] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.362: invalid indirect mapped block 1819239214 (level 0) [ 155.527797][ T6360] EXT4-fs (loop4): 1 truncate cleaned up [ 155.536308][ T6360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 155.801409][ T6360] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.362: Directory hole found for htree index block 0 [ 156.136874][ T6347] loop5: detected capacity change from 0 to 40427 [ 156.315902][ T6347] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 156.371439][ T6347] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 156.509201][ T6347] F2FS-fs (loop5): Found nat_bits in checkpoint [ 156.523829][ T29] audit: type=1326 audit(1725732986.616:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6371 comm="syz.3.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345817cef9 code=0x7ffc0000 [ 156.571851][ T5345] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 156.717096][ T29] audit: type=1326 audit(1725732986.656:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6371 comm="syz.3.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f345817cef9 code=0x7ffc0000 [ 156.782727][ T29] audit: type=1326 audit(1725732986.656:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6371 comm="syz.3.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345817cef9 code=0x7ffc0000 [ 156.805476][ T5231] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.852816][ T5345] usb 3-1: Using ep0 maxpacket: 8 [ 156.892333][ T5345] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 156.937715][ T5345] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 156.992948][ T5345] usb 3-1: New USB device found, idVendor=0582, idProduct=007a, bcdDevice=c7.3d [ 157.032814][ T5345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.051020][ T5345] usb 3-1: Product: syz [ 157.064152][ T5345] usb 3-1: Manufacturer: syz [ 157.121079][ T5345] usb 3-1: SerialNumber: syz [ 157.137933][ T6384] netlink: 20 bytes leftover after parsing attributes in process `syz.0.369'. [ 157.172169][ T5345] usb 3-1: config 0 descriptor?? [ 157.196090][ T6384] openvswitch: netlink: Flow key attr not present in new flow. [ 157.443501][ T6367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.546786][ T6367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.648583][ T5345] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 157.852137][ T5345] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 157.905577][ T5345] usb 3-1: USB disconnect, device number 6 [ 158.084665][ T5344] udevd[5344]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.954139][ T6403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.377'. [ 160.286756][ T6412] loop0: detected capacity change from 0 to 128 [ 160.322531][ T6414] loop2: detected capacity change from 0 to 1024 [ 160.580690][ T6412] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 160.710833][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033da0800: rx timeout, send abort [ 160.721501][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033da0c00: rx timeout, send abort [ 160.731025][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888033da0800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 160.746428][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888033da0c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 160.773356][ T6412] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.617103][ T6412] EXT4-fs (loop0): shut down requested (0) [ 162.225905][ T5241] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 162.259160][ T29] audit: type=1326 audit(1725732992.346:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6430 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f657cef9 code=0x7ffc0000 [ 162.371096][ T29] audit: type=1326 audit(1725732992.346:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6430 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f657cef9 code=0x7ffc0000 [ 162.407843][ T29] audit: type=1326 audit(1725732992.376:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6430 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80f657cef9 code=0x7ffc0000 [ 162.442765][ T29] audit: type=1326 audit(1725732992.396:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6430 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f657cef9 code=0x7ffc0000 [ 162.597413][ T29] audit: type=1326 audit(1725732992.396:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6430 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80f657cef9 code=0x7ffc0000 [ 162.734403][ T29] audit: type=1326 audit(1725732992.396:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6430 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f657cef9 code=0x7ffc0000 [ 162.814321][ T29] audit: type=1326 audit(1725732992.406:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6430 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80f657cef9 code=0x7ffc0000 [ 162.943633][ T29] audit: type=1326 audit(1725732992.436:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6430 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f657cef9 code=0x7ffc0000 [ 162.987010][ T29] audit: type=1326 audit(1725732992.436:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6430 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f657cef9 code=0x7ffc0000 [ 163.076676][ T29] audit: type=1326 audit(1725732992.446:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6430 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f80f657cef9 code=0x7ffc0000 [ 163.099897][ T5296] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 163.311091][ T5296] usb 3-1: Using ep0 maxpacket: 8 [ 163.328881][ T5296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 163.368936][ T5296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 163.428108][ T6459] loop3: detected capacity change from 0 to 1024 [ 163.703350][ T5296] usb 3-1: New USB device found, idVendor=0582, idProduct=007a, bcdDevice=c7.3d [ 164.663708][ T5296] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.701685][ T5296] usb 3-1: Product: syz [ 164.705918][ T5296] usb 3-1: Manufacturer: syz [ 164.710529][ T5296] usb 3-1: SerialNumber: syz [ 164.757711][ T5296] usb 3-1: config 0 descriptor?? [ 165.755414][ T6450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.834907][ T6483] loop4: detected capacity change from 0 to 1024 [ 165.911229][ T6450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.949984][ T6483] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.002006][ T6483] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.108502][ T5296] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 166.312981][ T5231] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.571635][ T6498] netlink: 2 bytes leftover after parsing attributes in process `syz.3.411'. [ 167.640087][ T5296] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 167.652594][ T5296] usb 3-1: USB disconnect, device number 7 [ 167.786995][ T6504] loop5: detected capacity change from 0 to 1024 [ 167.825026][ T5404] udevd[5404]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 167.855914][ T6504] EXT4-fs: Ignoring removed orlov option [ 167.878118][ T6504] EXT4-fs: Ignoring removed nomblk_io_submit option [ 168.014868][ T6504] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.296282][ T6519] loop1: detected capacity change from 0 to 1024 [ 168.828305][ T6518] loop2: detected capacity change from 0 to 1024 [ 169.595467][ T6518] EXT4-fs: Ignoring removed orlov option [ 169.615605][ T6518] EXT4-fs: Ignoring removed nomblk_io_submit option [ 169.712367][ T6518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.728973][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 169.728989][ T29] audit: type=1326 audit(1725732999.796:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.5.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a7cf7cef9 code=0x7ffc0000 [ 170.176505][ T29] audit: type=1326 audit(1725732999.866:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.5.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f3a7cf7cef9 code=0x7ffc0000 [ 170.414978][ T29] audit: type=1326 audit(1725732999.866:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.5.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a7cf7cef9 code=0x7ffc0000 [ 170.528856][ T29] audit: type=1326 audit(1725732999.866:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.5.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a7cf7cef9 code=0x7ffc0000 [ 170.606821][ T29] audit: type=1326 audit(1725733000.486:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.2.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa865d7cef9 code=0x7ffc0000 [ 170.721014][ T6530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.417'. [ 170.824886][ T29] audit: type=1326 audit(1725733000.486:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.2.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa865d7cef9 code=0x7ffc0000 [ 170.847894][ T29] audit: type=1326 audit(1725733000.486:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.2.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fa865d7cef9 code=0x7ffc0000 [ 170.870256][ T29] audit: type=1326 audit(1725733000.486:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.2.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa865d7cef9 code=0x7ffc0000 [ 170.935665][ T29] audit: type=1326 audit(1725733000.496:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.2.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa865d7cef9 code=0x7ffc0000 [ 170.955934][ T5243] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.079921][ T5232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.067109][ T6551] fuse: Bad value for 'fd' [ 172.524754][ T6561] loop0: detected capacity change from 0 to 1024 [ 176.325874][ T6583] netlink: 'syz.4.435': attribute type 13 has an invalid length. [ 176.682427][ T6592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.437'. [ 178.035270][ T6614] loop2: detected capacity change from 0 to 1024 [ 180.055408][ T6641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.452'. [ 181.003106][ T6661] loop5: detected capacity change from 0 to 1024 [ 185.410089][ T6708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.470'. [ 185.903467][ T6712] loop3: detected capacity change from 0 to 1024 [ 187.429981][ T6704] binder: 6703:6704 ioctl c0306201 20000000 returned -14 [ 187.887258][ T6734] netlink: 'syz.3.480': attribute type 13 has an invalid length. [ 189.447444][ T6746] loop1: detected capacity change from 0 to 4096 [ 189.544224][ T6754] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 190.258920][ T6766] loop0: detected capacity change from 0 to 512 [ 190.325467][ T6766] EXT4-fs (loop0): blocks per group (64) and clusters per group (20800) inconsistent [ 190.467030][ T6769] loop4: detected capacity change from 0 to 1024 [ 191.779159][ T6775] loop1: detected capacity change from 0 to 512 [ 191.811280][ T5297] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 191.852304][ T6775] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.871141][ T6775] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 192.023379][ T5297] usb 1-1: config index 0 descriptor too short (expected 59486, got 27) [ 192.057961][ T5297] usb 1-1: config 188 has too many interfaces: 92, using maximum allowed: 32 [ 192.119584][ T5297] usb 1-1: config 188 has an invalid descriptor of length 159, skipping remainder of the config [ 192.173117][ T5297] usb 1-1: config 188 has 0 interfaces, different from the descriptor's value: 92 [ 192.220095][ T5245] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.221090][ T5297] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 192.272863][ T5297] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.433769][ T2633] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 192.513706][ T5297] usb 1-1: string descriptor 0 read error: -71 [ 192.549121][ T5297] usb 1-1: USB disconnect, device number 9 [ 192.647063][ T2633] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 192.689344][ T2633] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.763589][ T2633] usb 6-1: Product: syz [ 192.767808][ T2633] usb 6-1: Manufacturer: syz [ 192.821375][ T2633] usb 6-1: SerialNumber: syz [ 192.842430][ T2633] r8152-cfgselector 6-1: Unknown version 0x0000 [ 192.859087][ T2633] r8152-cfgselector 6-1: config 0 descriptor?? [ 192.969071][ T6799] loop2: detected capacity change from 0 to 512 [ 192.995823][ T6799] EXT4-fs (loop2): blocks per group (64) and clusters per group (20800) inconsistent [ 193.141060][ T5297] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 193.195049][ T2633] r8152-cfgselector 6-1: Needed 1 retries to read version [ 193.212106][ T2633] r8152-cfgselector 6-1: Unknown version 0x0000 [ 193.228849][ T2633] r8152-cfgselector 6-1: bad CDC descriptors [ 193.391017][ T5297] usb 2-1: Using ep0 maxpacket: 16 [ 193.408900][ T2633] r8152-cfgselector 6-1: USB disconnect, device number 9 [ 193.440165][ T5297] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 193.473469][ T5297] usb 2-1: can't read configurations, error -61 [ 193.518314][ T6803] loop2: detected capacity change from 0 to 4096 [ 193.585771][ T6786] binder: 6785:6786 ioctl c0306201 20000000 returned -14 [ 193.603817][ T6808] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 193.606500][ T6786] binder: BINDER_SET_CONTEXT_MGR already set [ 193.651115][ T5297] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 193.667480][ T6786] binder: 6785:6786 ioctl 4018620d 20000040 returned -16 [ 193.726196][ T6806] loop0: detected capacity change from 0 to 4096 [ 193.813461][ T6809] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 193.836513][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.846547][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.861031][ T5297] usb 2-1: Using ep0 maxpacket: 16 [ 193.890208][ T5297] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 193.911044][ T6803] loop2: detected capacity change from 4096 to 0 [ 193.922246][ T5297] usb 2-1: can't read configurations, error -61 [ 193.954208][ T5297] usb usb2-port1: attempt power cycle [ 194.033745][ T6806] loop0: detected capacity change from 4096 to 0 [ 194.114399][ T5243] syz-executor: attempt to access beyond end of device [ 194.114399][ T5243] loop2: rw=0, sector=264, nr_sectors = 8 limit=0 [ 194.184965][ T5243] NILFS (loop2): I/O error reading meta-data file (ino=3, block-offset=130) [ 194.218278][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.5.509'. [ 194.219851][ T5243] syz-executor: attempt to access beyond end of device [ 194.219851][ T5243] loop2: rw=0, sector=264, nr_sectors = 8 limit=0 [ 194.236707][ T5241] syz-executor: attempt to access beyond end of device [ 194.236707][ T5241] loop0: rw=0, sector=264, nr_sectors = 8 limit=0 [ 194.291580][ T5241] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130) [ 194.301259][ T5241] syz-executor: attempt to access beyond end of device [ 194.301259][ T5241] loop0: rw=0, sector=264, nr_sectors = 8 limit=0 [ 194.311235][ T5243] NILFS (loop2): I/O error reading meta-data file (ino=3, block-offset=130) [ 194.321221][ T5241] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130) [ 194.342572][ T5241] NILFS error (device loop0): nilfs_readdir: bad page in #12 [ 194.350786][ T5241] syz-executor: attempt to access beyond end of device [ 194.350786][ T5241] loop0: rw=395265, sector=4088, nr_sectors = 8 limit=0 [ 194.366617][ T5243] NILFS error (device loop2): nilfs_readdir: bad page in #12 [ 194.374755][ T5297] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 194.383532][ T5241] Buffer I/O error on dev loop0, logical block 511, lost sync page write [ 194.405798][ T5241] NILFS (loop0): unable to write superblock: err=-5 [ 194.426773][ T5243] syz-executor: attempt to access beyond end of device [ 194.426773][ T5243] loop2: rw=395265, sector=4088, nr_sectors = 8 limit=0 [ 194.429702][ T5241] syz-executor: attempt to access beyond end of device [ 194.429702][ T5241] loop0: rw=395265, sector=0, nr_sectors = 8 limit=0 [ 194.490305][ T5241] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 194.493531][ T5297] usb 2-1: Using ep0 maxpacket: 16 [ 194.510709][ T5241] NILFS (loop0): unable to write superblock: err=-5 [ 194.523956][ T5241] Remounting filesystem read-only [ 194.535150][ T5243] Buffer I/O error on dev loop2, logical block 511, lost sync page write [ 194.556383][ T5241] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 194.577746][ T5297] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 194.588951][ T5241] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 194.607569][ T5297] usb 2-1: can't read configurations, error -61 [ 194.614334][ T5243] NILFS (loop2): unable to write superblock: err=-5 [ 194.614973][ T5241] NILFS (loop0): discard dirty block: blocknr=14, size=4096 [ 194.649221][ T5243] syz-executor: attempt to access beyond end of device [ 194.649221][ T5243] loop2: rw=395265, sector=0, nr_sectors = 8 limit=0 [ 194.670648][ T5241] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 194.695887][ T5241] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 194.708680][ T5241] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 194.724327][ T5241] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 194.731548][ T5243] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 194.746094][ T5241] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 194.751820][ T5243] NILFS (loop2): unable to write superblock: err=-5 [ 194.780717][ T5241] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 194.815687][ T5241] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 194.825563][ T5241] NILFS (loop0): discard dirty block: blocknr=27, size=4096 [ 194.831293][ T5297] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 194.839066][ T5241] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 194.851457][ T5241] NILFS (loop0): discard dirty block: blocknr=28, size=4096 [ 194.859743][ T5243] Remounting filesystem read-only [ 194.859818][ T5241] NILFS (loop0): discard dirty page: offset=4096, ino=3 [ 194.885708][ T5241] NILFS (loop0): discard dirty block: blocknr=29, size=4096 [ 194.901105][ T5241] NILFS (loop0): discard dirty page: offset=921600, ino=3 [ 194.909018][ T5241] NILFS (loop0): discard dirty block: blocknr=0, size=4096 [ 194.941568][ T5241] NILFS (loop0): discard dirty page: offset=925696, ino=3 [ 194.948786][ T5241] NILFS (loop0): discard dirty block: blocknr=36, size=4096 [ 195.051607][ T5297] usb 2-1: Using ep0 maxpacket: 16 [ 195.058910][ T5243] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 195.059576][ T5297] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 195.091034][ T5243] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 195.097788][ T5243] NILFS (loop2): discard dirty block: blocknr=14, size=4096 [ 195.105284][ T5297] usb 2-1: can't read configurations, error -61 [ 195.131441][ T5297] usb usb2-port1: unable to enumerate USB device [ 195.146406][ T5243] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 195.161631][ T5243] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 195.181686][ T5243] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 195.206451][ T5243] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 195.417456][ T5243] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 195.425360][ T5243] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 195.445873][ T5243] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 195.538836][ T6826] trusted_key: encrypted_key: keyword 'id:cb2÷ÂÂDe' not recognized [ 195.604470][ T5243] NILFS (loop2): discard dirty block: blocknr=27, size=4096 [ 195.719410][ T5243] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 195.859052][ T5243] NILFS (loop2): discard dirty block: blocknr=28, size=4096 [ 196.090607][ T5243] NILFS (loop2): discard dirty page: offset=4096, ino=3 [ 196.141085][ T5243] NILFS (loop2): discard dirty block: blocknr=29, size=4096 [ 196.170600][ T5243] NILFS (loop2): discard dirty page: offset=921600, ino=3 [ 196.213897][ T5243] NILFS (loop2): discard dirty block: blocknr=0, size=4096 [ 196.277507][ T5243] NILFS (loop2): discard dirty page: offset=925696, ino=3 [ 196.352288][ T5243] NILFS (loop2): discard dirty block: blocknr=36, size=4096 [ 196.735360][ T6836] loop2: detected capacity change from 0 to 1024 [ 196.754021][ T6828] loop5: detected capacity change from 0 to 4096 [ 197.023802][ T5236] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 197.036025][ T5236] Bluetooth: hci4: Injecting HCI hardware error event [ 197.046474][ T5249] Bluetooth: hci4: hardware error 0x00 [ 198.144054][ T6850] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 198.476321][ T6848] loop1: detected capacity change from 0 to 4096 [ 198.587047][ T6859] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 198.601832][ T6828] loop5: detected capacity change from 4096 to 0 [ 198.625017][ T6855] syz.5.515: attempt to access beyond end of device [ 198.625017][ T6855] loop5: rw=2049, sector=408, nr_sectors = 24 limit=0 [ 198.658075][ T6855] NILFS (loop5): I/O error writing log (start-blocknr=51, block-count=3) in segment 3 [ 198.680749][ T6828] syz.5.515: attempt to access beyond end of device [ 198.680749][ T6828] loop5: rw=2049, sector=512, nr_sectors = 24 limit=0 [ 198.696408][ T6828] NILFS (loop5): I/O error writing log (start-blocknr=64, block-count=3) in segment 4 [ 199.932190][ T5232] syz-executor: attempt to access beyond end of device [ 199.932190][ T5232] loop5: rw=0, sector=264, nr_sectors = 8 limit=0 [ 200.002884][ T5232] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 200.057592][ T5232] syz-executor: attempt to access beyond end of device [ 200.057592][ T5232] loop5: rw=0, sector=264, nr_sectors = 8 limit=0 [ 200.061069][ T5249] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 200.175473][ T5232] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 200.260984][ T5232] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 200.268456][ T5232] syz-executor: attempt to access beyond end of device [ 200.268456][ T5232] loop5: rw=395265, sector=4088, nr_sectors = 8 limit=0 [ 200.361623][ T5232] Buffer I/O error on dev loop5, logical block 511, lost sync page write [ 200.370110][ T5232] NILFS (loop5): unable to write superblock: err=-5 [ 200.440985][ T5232] syz-executor: attempt to access beyond end of device [ 200.440985][ T5232] loop5: rw=395265, sector=0, nr_sectors = 8 limit=0 [ 200.501033][ T5232] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 200.541031][ T5232] NILFS (loop5): unable to write superblock: err=-5 [ 200.547799][ T5232] Remounting filesystem read-only [ 200.677126][ T5232] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 200.714934][ T5232] NILFS (loop5): discard dirty page: offset=0, ino=2 [ 200.741550][ T5232] NILFS (loop5): discard dirty block: blocknr=14, size=4096 [ 200.789735][ T5232] NILFS (loop5): discard dirty page: offset=0, ino=15 [ 200.819867][ T5232] NILFS (loop5): discard dirty block: blocknr=18, size=4096 [ 200.846704][ T5232] NILFS (loop5): discard dirty page: offset=4096, ino=15 [ 200.857617][ T6882] loop0: detected capacity change from 0 to 1024 [ 200.900940][ T5232] NILFS (loop5): discard dirty block: blocknr=0, size=4096 [ 201.179268][ T5232] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 201.186537][ T5249] Bluetooth: hci1: command 0x0406 tx timeout [ 201.193466][ T5249] Bluetooth: hci5: command 0x0406 tx timeout [ 201.199557][ T5249] Bluetooth: hci0: command 0x0406 tx timeout [ 201.206743][ T5249] Bluetooth: hci2: command 0x0406 tx timeout [ 201.221009][ T6863] Bluetooth: hci3: command 0x0406 tx timeout [ 201.453355][ T5232] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 201.474015][ T5232] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 201.562042][ T5232] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 201.736543][ T5237] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 201.750184][ T5237] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 201.759188][ T5237] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 201.768090][ T5237] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 201.781133][ T5232] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 201.791665][ T5237] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 201.799169][ T5237] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 201.884545][ T5232] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 201.926634][ T6888] netlink: 232 bytes leftover after parsing attributes in process `syz.4.534'. [ 201.952818][ T5232] NILFS (loop5): discard dirty page: offset=0, ino=5 [ 202.012014][ T5232] NILFS (loop5): discard dirty block: blocknr=27, size=4096 [ 202.081603][ T5232] NILFS (loop5): discard dirty page: offset=0, ino=3 [ 202.116674][ T5232] NILFS (loop5): discard dirty block: blocknr=28, size=4096 [ 202.162162][ T5232] NILFS (loop5): discard dirty page: offset=4096, ino=3 [ 202.169153][ T5232] NILFS (loop5): discard dirty block: blocknr=29, size=4096 [ 202.328025][ T5232] NILFS (loop5): discard dirty page: offset=921600, ino=3 [ 202.372026][ T5232] NILFS (loop5): discard dirty block: blocknr=0, size=4096 [ 202.379477][ T5232] NILFS (loop5): discard dirty page: offset=925696, ino=3 [ 202.438588][ T5232] NILFS (loop5): discard dirty block: blocknr=36, size=4096 [ 202.720473][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.838894][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.030244][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.232055][ T6906] loop0: detected capacity change from 0 to 4096 [ 203.272208][ T6909] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 203.281922][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.568453][ T6906] loop0: detected capacity change from 4096 to 0 [ 203.628018][ T6885] chnl_net:caif_netlink_parms(): no params data found [ 203.730720][ T5241] syz-executor: attempt to access beyond end of device [ 203.730720][ T5241] loop0: rw=0, sector=264, nr_sectors = 8 limit=0 [ 203.733304][ T6913] loop1: detected capacity change from 0 to 4096 [ 203.822055][ T5241] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130) [ 203.846081][ T5241] syz-executor: attempt to access beyond end of device [ 203.846081][ T5241] loop0: rw=0, sector=264, nr_sectors = 8 limit=0 [ 203.880898][ T6918] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 203.890287][ T5241] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130) [ 203.903589][ T5240] Bluetooth: hci6: command tx timeout [ 203.931694][ T5241] NILFS error (device loop0): nilfs_readdir: bad page in #12 [ 203.939346][ T5241] syz-executor: attempt to access beyond end of device [ 203.939346][ T5241] loop0: rw=395265, sector=4088, nr_sectors = 8 limit=0 [ 203.954326][ T5241] Buffer I/O error on dev loop0, logical block 511, lost sync page write [ 203.963912][ T5241] NILFS (loop0): unable to write superblock: err=-5 [ 203.972314][ T5241] syz-executor: attempt to access beyond end of device [ 203.972314][ T5241] loop0: rw=395265, sector=0, nr_sectors = 8 limit=0 [ 203.987232][ T5241] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 203.997543][ T5241] NILFS (loop0): unable to write superblock: err=-5 [ 204.004355][ T5241] Remounting filesystem read-only [ 204.091974][ T5241] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 204.154036][ T52] bridge_slave_1: left allmulticast mode [ 204.160075][ T52] bridge_slave_1: left promiscuous mode [ 204.163992][ T5241] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 204.172427][ T5241] NILFS (loop0): discard dirty block: blocknr=14, size=4096 [ 204.182701][ T5241] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 204.189497][ T5241] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 204.198849][ T5241] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 204.205859][ T5241] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 204.213288][ T5241] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 204.215337][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.220218][ T5241] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 204.222117][ T5241] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 204.258441][ T5241] NILFS (loop0): discard dirty block: blocknr=27, size=4096 [ 204.276203][ T5241] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 204.284165][ T5241] NILFS (loop0): discard dirty block: blocknr=28, size=4096 [ 204.300774][ T5241] NILFS (loop0): discard dirty page: offset=4096, ino=3 [ 204.310675][ T5241] NILFS (loop0): discard dirty block: blocknr=29, size=4096 [ 204.319731][ T52] bridge_slave_0: left allmulticast mode [ 204.326060][ T6913] loop1: detected capacity change from 4096 to 0 [ 204.333936][ T5241] NILFS (loop0): discard dirty page: offset=921600, ino=3 [ 204.352950][ T5241] NILFS (loop0): discard dirty block: blocknr=0, size=4096 [ 204.353271][ T52] bridge_slave_0: left promiscuous mode [ 204.364738][ T5241] NILFS (loop0): discard dirty page: offset=925696, ino=3 [ 204.402385][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.413988][ T5241] NILFS (loop0): discard dirty block: blocknr=36, size=4096 [ 204.532122][ T5245] syz-executor: attempt to access beyond end of device [ 204.532122][ T5245] loop1: rw=0, sector=264, nr_sectors = 8 limit=0 [ 204.561225][ T5245] NILFS (loop1): I/O error reading meta-data file (ino=3, block-offset=130) [ 204.587471][ T6926] loop2: detected capacity change from 0 to 4096 [ 204.597117][ T5245] syz-executor: attempt to access beyond end of device [ 204.597117][ T5245] loop1: rw=0, sector=264, nr_sectors = 8 limit=0 [ 204.650836][ T5245] NILFS (loop1): I/O error reading meta-data file (ino=3, block-offset=130) [ 204.679048][ T5245] NILFS error (device loop1): nilfs_readdir: bad page in #12 [ 204.686940][ T5245] Buffer I/O error on dev loop1, logical block 511, lost sync page write [ 204.698110][ T5245] NILFS (loop1): unable to write superblock: err=-5 [ 204.720826][ T6929] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 204.760962][ T5245] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 204.798798][ T5245] NILFS (loop1): unable to write superblock: err=-5 [ 204.856921][ T5245] Remounting filesystem read-only [ 204.929740][ T5245] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 204.957873][ T5245] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 204.990235][ T5245] NILFS (loop1): discard dirty block: blocknr=14, size=4096 [ 205.038494][ T5245] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 205.048797][ T6926] loop2: detected capacity change from 4096 to 0 [ 205.050735][ T6933] bio_check_eod: 2 callbacks suppressed [ 205.050752][ T6933] syz.2.545: attempt to access beyond end of device [ 205.050752][ T6933] loop2: rw=2049, sector=496, nr_sectors = 16 limit=0 [ 205.067982][ T5245] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 205.119839][ T5245] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 205.138541][ T5245] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 205.160081][ T6933] syz.2.545: attempt to access beyond end of device [ 205.160081][ T6933] loop2: rw=2049, sector=512, nr_sectors = 16 limit=0 [ 205.170966][ T5245] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 205.180346][ T5245] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 205.198375][ T5245] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 205.206366][ T6933] NILFS (loop2): I/O error writing log (start-blocknr=62, block-count=2) in segment 3 [ 205.235496][ T5245] NILFS (loop1): discard dirty block: blocknr=27, size=4096 [ 205.256348][ T6933] NILFS (loop2): I/O error writing log (start-blocknr=64, block-count=2) in segment 4 [ 205.270787][ T5245] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 205.299412][ T5245] NILFS (loop1): discard dirty block: blocknr=28, size=4096 [ 205.328978][ T5245] NILFS (loop1): discard dirty page: offset=4096, ino=3 [ 205.356544][ T5245] NILFS (loop1): discard dirty block: blocknr=29, size=4096 [ 205.392430][ T5245] NILFS (loop1): discard dirty page: offset=921600, ino=3 [ 205.419426][ T5245] NILFS (loop1): discard dirty block: blocknr=0, size=4096 [ 205.429144][ T5243] syz-executor: attempt to access beyond end of device [ 205.429144][ T5243] loop2: rw=0, sector=264, nr_sectors = 8 limit=0 [ 205.465421][ T5245] NILFS (loop1): discard dirty page: offset=925696, ino=3 [ 205.478066][ T5243] NILFS (loop2): I/O error reading meta-data file (ino=3, block-offset=130) [ 205.497771][ T5245] NILFS (loop1): discard dirty block: blocknr=36, size=4096 [ 205.512790][ T5243] syz-executor: attempt to access beyond end of device [ 205.512790][ T5243] loop2: rw=0, sector=264, nr_sectors = 8 limit=0 [ 205.571133][ T5243] NILFS (loop2): I/O error reading meta-data file (ino=3, block-offset=130) [ 205.609980][ T5243] NILFS error (device loop2): nilfs_readdir: bad page in #12 [ 205.640210][ T5243] syz-executor: attempt to access beyond end of device [ 205.640210][ T5243] loop2: rw=395265, sector=4088, nr_sectors = 8 limit=0 [ 205.695324][ T5243] Buffer I/O error on dev loop2, logical block 511, lost sync page write [ 205.730638][ T5243] NILFS (loop2): unable to write superblock: err=-5 [ 205.747271][ T5243] syz-executor: attempt to access beyond end of device [ 205.747271][ T5243] loop2: rw=395265, sector=0, nr_sectors = 8 limit=0 [ 205.785860][ T6936] loop1: detected capacity change from 0 to 1024 [ 206.010924][ T5243] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 206.019320][ T5243] NILFS (loop2): unable to write superblock: err=-5 [ 206.028834][ T5240] Bluetooth: hci6: command tx timeout [ 206.035338][ T5243] Remounting filesystem read-only [ 206.734459][ T5243] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 206.779245][ T5243] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 206.819715][ T5243] NILFS (loop2): discard dirty block: blocknr=14, size=4096 [ 206.848179][ T5243] NILFS (loop2): discard dirty page: offset=0, ino=15 [ 206.894075][ T5243] NILFS (loop2): discard dirty block: blocknr=40, size=4096 [ 206.938045][ T5243] NILFS (loop2): discard dirty page: offset=4096, ino=15 [ 206.971646][ T5243] NILFS (loop2): discard dirty block: blocknr=0, size=4096 [ 207.012707][ T5243] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 207.060189][ T5243] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 207.089039][ T5243] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 207.143759][ T5243] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 207.176471][ T5243] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 207.220937][ T5243] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 207.251937][ T5243] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 207.258662][ T5243] NILFS (loop2): discard dirty block: blocknr=27, size=4096 [ 207.303684][ T5243] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 207.310400][ T5243] NILFS (loop2): discard dirty block: blocknr=28, size=4096 [ 207.349872][ T5243] NILFS (loop2): discard dirty page: offset=4096, ino=3 [ 207.381413][ T5243] NILFS (loop2): discard dirty block: blocknr=29, size=4096 [ 207.419221][ T5243] NILFS (loop2): discard dirty page: offset=921600, ino=3 [ 207.433337][ T5243] NILFS (loop2): discard dirty block: blocknr=0, size=4096 [ 207.460914][ T5243] NILFS (loop2): discard dirty page: offset=925696, ino=3 [ 207.471250][ T5243] NILFS (loop2): discard dirty block: blocknr=36, size=4096 [ 207.481848][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.611669][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.656902][ T52] bond0 (unregistering): Released all slaves [ 208.066344][ T5240] Bluetooth: hci6: command tx timeout [ 208.154389][ T6885] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.186162][ T6885] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.222522][ T6885] bridge_slave_0: entered allmulticast mode [ 208.248860][ T6885] bridge_slave_0: entered promiscuous mode [ 208.250764][ T6955] loop5: detected capacity change from 0 to 4096 [ 208.300053][ T6885] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.321108][ T6885] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.328472][ T6885] bridge_slave_1: entered allmulticast mode [ 208.369748][ T6885] bridge_slave_1: entered promiscuous mode [ 208.392421][ T6946] binder: 6943:6946 ioctl c0306201 20000000 returned -14 [ 208.415529][ T6959] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 208.442436][ T6946] binder: BINDER_SET_CONTEXT_MGR already set [ 208.480988][ T6946] binder: 6943:6946 ioctl 4018620d 20000040 returned -16 [ 209.453261][ T6885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.512295][ T6885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.600026][ T6966] loop0: detected capacity change from 0 to 512 [ 209.876622][ T6969] loop5: detected capacity change from 0 to 4096 [ 209.999694][ T6973] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 210.144522][ T5240] Bluetooth: hci6: command tx timeout [ 210.948132][ T6969] loop5: detected capacity change from 4096 to 0 [ 210.990051][ T52] hsr_slave_0: left promiscuous mode [ 210.995679][ T6981] syz.5.557: attempt to access beyond end of device [ 210.995679][ T6981] loop5: rw=0, sector=424, nr_sectors = 8 limit=0 [ 211.027170][ T6974] loop2: detected capacity change from 0 to 4096 [ 211.065594][ T52] hsr_slave_1: left promiscuous mode [ 211.080084][ T6981] syz.5.557: attempt to access beyond end of device [ 211.080084][ T6981] loop5: rw=2049, sector=432, nr_sectors = 16 limit=0 [ 211.126805][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.152206][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.196311][ T6984] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 211.250682][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.256789][ T6981] NILFS (loop5): I/O error writing log (start-blocknr=54, block-count=2) in segment 3 [ 211.308374][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.414475][ T5232] syz-executor: attempt to access beyond end of device [ 211.414475][ T5232] loop5: rw=0, sector=264, nr_sectors = 8 limit=0 [ 211.467861][ T52] veth1_macvtap: left promiscuous mode [ 211.482410][ T5232] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 211.501742][ T52] veth0_macvtap: left promiscuous mode [ 211.532098][ T5232] syz-executor: attempt to access beyond end of device [ 211.532098][ T5232] loop5: rw=0, sector=264, nr_sectors = 8 limit=0 [ 211.604717][ T5232] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 211.656851][ T5232] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 211.688816][ T5232] syz-executor: attempt to access beyond end of device [ 211.688816][ T5232] loop5: rw=395265, sector=4088, nr_sectors = 8 limit=0 [ 211.740074][ T5232] Buffer I/O error on dev loop5, logical block 511, lost sync page write [ 211.784388][ T5232] NILFS (loop5): unable to write superblock: err=-5 [ 211.828422][ T5232] syz-executor: attempt to access beyond end of device [ 211.828422][ T5232] loop5: rw=395265, sector=0, nr_sectors = 8 limit=0 [ 211.886475][ T5232] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 211.927577][ T5232] NILFS (loop5): unable to write superblock: err=-5 [ 211.958700][ T5232] Remounting filesystem read-only [ 212.022507][ T6994] loop2: detected capacity change from 0 to 4096 [ 212.033332][ T5232] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 212.072110][ T5232] NILFS (loop5): discard dirty page: offset=0, ino=2 [ 212.117761][ T5232] NILFS (loop5): discard dirty block: blocknr=14, size=4096 [ 212.125608][ T7000] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 212.146864][ T5232] NILFS (loop5): discard dirty page: offset=0, ino=15 [ 212.162805][ T5232] NILFS (loop5): discard dirty block: blocknr=52, size=4096 [ 212.212288][ T5232] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 212.250391][ T5232] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 212.275115][ T5232] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 212.311463][ T5232] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 212.352351][ T5232] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 212.359413][ T5232] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 212.399758][ T5232] NILFS (loop5): discard dirty page: offset=0, ino=5 [ 212.427217][ T5232] NILFS (loop5): discard dirty block: blocknr=27, size=4096 [ 212.446621][ T5232] NILFS (loop5): discard dirty page: offset=0, ino=3 [ 212.458548][ T5232] NILFS (loop5): discard dirty block: blocknr=28, size=4096 [ 212.472381][ T5232] NILFS (loop5): discard dirty page: offset=4096, ino=3 [ 212.479556][ T5232] NILFS (loop5): discard dirty block: blocknr=29, size=4096 [ 212.497197][ T5232] NILFS (loop5): discard dirty page: offset=921600, ino=3 [ 212.516213][ T5232] NILFS (loop5): discard dirty block: blocknr=0, size=4096 [ 212.525317][ T5232] NILFS (loop5): discard dirty page: offset=925696, ino=3 [ 212.538652][ T5232] NILFS (loop5): discard dirty block: blocknr=36, size=4096 [ 213.321785][ T7009] loop5: detected capacity change from 0 to 1024 [ 213.523694][ T6990] loop0: detected capacity change from 0 to 32768 [ 213.564034][ T6990] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.561 (6990) [ 213.725091][ T6990] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 213.744525][ T6990] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 213.769440][ T6990] BTRFS info (device loop0): using free-space-tree [ 215.036314][ T5241] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 217.224906][ T52] team0 (unregistering): Port device team_slave_1 removed [ 217.297492][ T7047] loop5: detected capacity change from 0 to 4096 [ 217.363656][ T52] team0 (unregistering): Port device team_slave_0 removed [ 217.392967][ T7049] loop2: detected capacity change from 0 to 4096 [ 217.399528][ T7052] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 217.411544][ T5295] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 217.471663][ T7053] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 217.611404][ T7047] loop5: detected capacity change from 4096 to 0 [ 217.636645][ T5295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.653557][ T7047] syz.5.574: attempt to access beyond end of device [ 217.653557][ T7047] loop5: rw=2049, sector=408, nr_sectors = 24 limit=0 [ 217.668335][ T7049] syz.2.575 (7049) used greatest stack depth: 17720 bytes left [ 217.678728][ T5295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.701143][ T5295] usb 1-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 217.710449][ T7047] NILFS (loop5): I/O error writing log (start-blocknr=51, block-count=3) in segment 3 [ 217.722802][ T5295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.754307][ T5295] usb 1-1: config 0 descriptor?? [ 217.762697][ T7047] syz.5.574: attempt to access beyond end of device [ 217.762697][ T7047] loop5: rw=2049, sector=512, nr_sectors = 24 limit=0 [ 217.830755][ T7047] NILFS (loop5): I/O error writing log (start-blocknr=64, block-count=3) in segment 4 [ 217.963676][ T5232] syz-executor: attempt to access beyond end of device [ 217.963676][ T5232] loop5: rw=0, sector=264, nr_sectors = 8 limit=0 [ 218.002705][ T5232] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 218.021659][ T5232] syz-executor: attempt to access beyond end of device [ 218.021659][ T5232] loop5: rw=0, sector=264, nr_sectors = 8 limit=0 [ 218.054520][ T5232] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 218.090998][ T5232] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 218.098455][ T5232] syz-executor: attempt to access beyond end of device [ 218.098455][ T5232] loop5: rw=395265, sector=4088, nr_sectors = 8 limit=0 [ 218.138377][ T5232] Buffer I/O error on dev loop5, logical block 511, lost sync page write [ 218.150557][ T5232] NILFS (loop5): unable to write superblock: err=-5 [ 218.191876][ T5232] syz-executor: attempt to access beyond end of device [ 218.191876][ T5232] loop5: rw=395265, sector=0, nr_sectors = 8 limit=0 [ 218.241016][ T5232] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 218.249322][ T5232] NILFS (loop5): unable to write superblock: err=-5 [ 218.264614][ T5295] input: HID 28bd:0933 Mouse as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0933.0002/input/input5 [ 218.279038][ T5232] Remounting filesystem read-only [ 218.356244][ T5232] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 218.365374][ T5232] NILFS (loop5): discard dirty page: offset=0, ino=2 [ 218.388175][ T5232] NILFS (loop5): discard dirty block: blocknr=14, size=4096 [ 218.409138][ T5232] NILFS (loop5): discard dirty page: offset=0, ino=15 [ 218.416592][ T5232] NILFS (loop5): discard dirty block: blocknr=18, size=4096 [ 218.450938][ T5232] NILFS (loop5): discard dirty page: offset=4096, ino=15 [ 218.458137][ T5232] NILFS (loop5): discard dirty block: blocknr=0, size=4096 [ 218.462610][ T5295] uclogic 0003:28BD:0933.0002: input,hidraw0: USB HID v5.50 Mouse [HID 28bd:0933] on usb-dummy_hcd.0-1/input0 [ 218.471900][ T5232] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 218.502859][ T5232] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 218.511937][ T5295] usb 1-1: USB disconnect, device number 10 [ 218.528133][ T5232] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 218.558224][ T7051] loop1: detected capacity change from 0 to 40427 [ 218.563232][ T5232] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 218.565867][ T5296] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 218.583818][ T5232] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 218.593920][ T5232] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 218.627322][ T5232] NILFS (loop5): discard dirty page: offset=0, ino=5 [ 218.628264][ T7051] F2FS-fs (loop1): invalid crc value [ 218.652830][ T5232] NILFS (loop5): discard dirty block: blocknr=27, size=4096 [ 218.660710][ T5232] NILFS (loop5): discard dirty page: offset=0, ino=3 [ 218.668813][ T5232] NILFS (loop5): discard dirty block: blocknr=28, size=4096 [ 218.678370][ T5232] NILFS (loop5): discard dirty page: offset=4096, ino=3 [ 218.686216][ T5232] NILFS (loop5): discard dirty block: blocknr=29, size=4096 [ 218.694435][ T5232] NILFS (loop5): discard dirty page: offset=921600, ino=3 [ 218.706110][ T5232] NILFS (loop5): discard dirty block: blocknr=0, size=4096 [ 218.711811][ T7051] F2FS-fs (loop1): Found nat_bits in checkpoint [ 218.717194][ T5232] NILFS (loop5): discard dirty page: offset=925696, ino=3 [ 218.758555][ T5232] NILFS (loop5): discard dirty block: blocknr=36, size=4096 [ 218.766988][ T5296] usb 3-1: Using ep0 maxpacket: 16 [ 218.785063][ T5296] usb 3-1: config 0 has no interfaces? [ 218.803996][ T5296] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 218.841130][ T5296] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 218.868494][ T5296] usb 3-1: Product: syz [ 218.891151][ T5296] usb 3-1: Manufacturer: syz [ 218.922366][ T5296] r8152-cfgselector 3-1: Unknown version 0x0000 [ 218.928670][ T5296] r8152-cfgselector 3-1: config 0 descriptor?? [ 218.965181][ T7051] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 219.109685][ T5245] syz-executor: attempt to access beyond end of device [ 219.109685][ T5245] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 219.129473][ T5245] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 219.193740][ T6885] team0: Port device team_slave_0 added [ 219.218163][ T7059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.297266][ T7059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.352827][ T6885] team0: Port device team_slave_1 added [ 219.466681][ T7059] netlink: 28 bytes leftover after parsing attributes in process `syz.2.579'. [ 219.491071][ T7059] netlink: 28 bytes leftover after parsing attributes in process `syz.2.579'. [ 219.569945][ T7059] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 219.592178][ T5295] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 219.623126][ T7059] batadv0: entered promiscuous mode [ 220.449910][ T7078] loop0: detected capacity change from 0 to 1024 [ 220.461615][ T5295] usb 6-1: Using ep0 maxpacket: 8 [ 220.689414][ T5295] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.711021][ T5295] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 13 [ 220.719138][ T8] r8152-cfgselector 3-1: USB disconnect, device number 8 [ 221.491132][ T5295] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 221.494235][ T6885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.530959][ T6885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.567246][ T5295] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.590957][ T5295] usb 6-1: Product: syz [ 221.595183][ T5295] usb 6-1: Manufacturer: syz [ 221.610897][ T6885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.653496][ T5295] usb 6-1: SerialNumber: syz [ 221.669394][ T5295] usb 6-1: config 0 descriptor?? [ 221.704942][ T6885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.754163][ T6885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.891134][ T6885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.041702][ T7087] loop2: detected capacity change from 0 to 4096 [ 222.167965][ T7091] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 222.278645][ T7090] loop0: detected capacity change from 0 to 4096 [ 222.339238][ T6885] hsr_slave_0: entered promiscuous mode [ 222.368094][ T7094] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 222.391551][ T6885] hsr_slave_1: entered promiscuous mode [ 222.421111][ T6885] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.471397][ T6885] Cannot create hsr debugfs directory [ 222.628483][ T7090] loop0: detected capacity change from 4096 to 0 [ 222.673909][ T7094] segctord: attempt to access beyond end of device [ 222.673909][ T7094] loop0: rw=2049, sector=432, nr_sectors = 80 limit=0 [ 222.731844][ T7094] segctord: attempt to access beyond end of device [ 222.731844][ T7094] loop0: rw=2049, sector=512, nr_sectors = 40 limit=0 [ 222.759879][ T7094] NILFS (loop0): I/O error writing log (start-blocknr=54, block-count=10) in segment 3 [ 222.770697][ T7094] NILFS (loop0): I/O error writing log (start-blocknr=64, block-count=5) in segment 4 [ 222.875044][ T5241] syz-executor: attempt to access beyond end of device [ 222.875044][ T5241] loop0: rw=0, sector=264, nr_sectors = 8 limit=0 [ 222.953962][ T5241] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130) [ 223.006421][ T5241] syz-executor: attempt to access beyond end of device [ 223.006421][ T5241] loop0: rw=0, sector=264, nr_sectors = 8 limit=0 [ 223.061703][ T5241] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130) [ 223.075478][ T5292] usb 6-1: USB disconnect, device number 10 [ 223.091586][ T5241] NILFS error (device loop0): nilfs_readdir: bad page in #12 [ 223.119746][ T5241] syz-executor: attempt to access beyond end of device [ 223.119746][ T5241] loop0: rw=395265, sector=4088, nr_sectors = 8 limit=0 [ 223.173926][ T5241] Buffer I/O error on dev loop0, logical block 511, lost sync page write [ 223.210993][ T5241] NILFS (loop0): unable to write superblock: err=-5 [ 223.217697][ T5241] syz-executor: attempt to access beyond end of device [ 223.217697][ T5241] loop0: rw=395265, sector=0, nr_sectors = 8 limit=0 [ 223.309863][ T5241] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 223.361592][ T5241] NILFS (loop0): unable to write superblock: err=-5 [ 223.368294][ T5241] Remounting filesystem read-only [ 223.411226][ T5241] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 223.426956][ T5241] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 223.464875][ T5241] NILFS (loop0): discard dirty block: blocknr=14, size=4096 [ 223.486735][ T5241] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 223.512300][ T5241] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 223.519644][ T5241] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 223.591237][ T5241] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 223.598605][ T5241] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 223.643413][ T5241] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 223.676923][ T7124] netlink: 'syz.4.597': attribute type 1 has an invalid length. [ 223.926441][ T5241] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 224.273883][ T5241] NILFS (loop0): discard dirty block: blocknr=27, size=4096 [ 224.486621][ T5241] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 224.535841][ T5241] NILFS (loop0): discard dirty block: blocknr=26, size=4096 [ 224.592494][ T5241] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 224.599225][ T5241] NILFS (loop0): discard dirty block: blocknr=28, size=4096 [ 224.643971][ T5241] NILFS (loop0): discard dirty page: offset=4096, ino=3 [ 224.663626][ T5241] NILFS (loop0): discard dirty block: blocknr=29, size=4096 [ 224.678803][ T5241] NILFS (loop0): discard dirty page: offset=8192, ino=3 [ 224.721774][ T5241] NILFS (loop0): discard dirty block: blocknr=30, size=4096 [ 224.750298][ T5241] NILFS (loop0): discard dirty page: offset=921600, ino=3 [ 224.770911][ T5241] NILFS (loop0): discard dirty block: blocknr=0, size=4096 [ 224.811405][ T5241] NILFS (loop0): discard dirty page: offset=925696, ino=3 [ 224.818639][ T5241] NILFS (loop0): discard dirty block: blocknr=36, size=4096 [ 225.083022][ T7139] loop4: detected capacity change from 0 to 4096 [ 225.223332][ T7148] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 225.820308][ T6885] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 225.952349][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.5.604'. [ 229.363232][ T5296] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 229.937548][ T6885] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 230.072508][ T6885] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 230.148824][ T6885] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 232.155631][ T7184] netlink: 'syz.5.612': attribute type 1 has an invalid length. [ 233.487098][ T5240] Bluetooth: hci0: unexpected event for opcode 0x2039 [ 234.714207][ T6885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.801550][ T5297] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 234.853217][ T6885] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.862566][ T7215] loop4: detected capacity change from 0 to 4096 [ 234.924790][ T961] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.933292][ T961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.995993][ T7224] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 235.016107][ T5297] usb 3-1: Using ep0 maxpacket: 8 [ 235.029661][ T5297] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.060196][ T2966] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.067417][ T2966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.081711][ T5297] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 13 [ 235.156968][ T5297] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 235.179599][ T5297] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.206690][ T5297] usb 3-1: Product: syz [ 235.218909][ T5297] usb 3-1: Manufacturer: syz [ 235.252477][ T5297] usb 3-1: SerialNumber: syz [ 235.285246][ T5297] usb 3-1: config 0 descriptor?? [ 235.410477][ T7228] loop1: detected capacity change from 0 to 4096 [ 235.495537][ T7232] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 235.887517][ T7242] input: syz0 as /devices/virtual/input/input6 [ 236.183555][ T6885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.445380][ T6885] veth0_vlan: entered promiscuous mode [ 236.519594][ T6885] veth1_vlan: entered promiscuous mode [ 236.691326][ T8] usb 3-1: USB disconnect, device number 9 [ 236.748213][ T6885] veth0_macvtap: entered promiscuous mode [ 236.813334][ T6885] veth1_macvtap: entered promiscuous mode [ 236.958600][ T7225] loop0: detected capacity change from 0 to 40427 [ 236.982566][ T6885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.003691][ T7225] F2FS-fs (loop0): invalid crc value [ 237.061073][ T6885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.112677][ T7225] F2FS-fs (loop0): Found nat_bits in checkpoint [ 237.188054][ T6885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.235399][ T6885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.274498][ T6885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.314330][ T6885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.336040][ T6885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.364781][ T6885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.424859][ T6885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.456118][ T7225] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 237.501298][ T5240] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 237.510497][ T5240] Bluetooth: hci0: Injecting HCI hardware error event [ 237.518764][ T5240] Bluetooth: hci0: hardware error 0x00 [ 237.646853][ T6885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.772932][ T6885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.829660][ T6885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.865758][ T6885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.909057][ T6885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.957582][ T6885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.008641][ T6885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.064871][ T6885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.088822][ T6885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.105588][ T5241] syz-executor: attempt to access beyond end of device [ 238.105588][ T5241] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 238.136486][ T7298] netlink: 4 bytes leftover after parsing attributes in process `syz.5.638'. [ 238.171380][ T5241] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 238.215785][ T6885] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.260739][ T6885] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.301196][ T6885] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.343203][ T6885] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.358545][ T7306] binder: BINDER_SET_CONTEXT_MGR already set [ 238.371008][ T7306] binder: 7262:7306 ioctl 4018620d 20000040 returned -16 [ 238.477529][ T7304] loop4: detected capacity change from 0 to 4096 [ 238.617901][ T7310] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 238.854055][ T7313] netlink: 'syz.5.643': attribute type 4 has an invalid length. [ 238.944100][ T7313] netlink: 'syz.5.643': attribute type 4 has an invalid length. [ 239.012566][ T2955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.020478][ T2955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.205460][ T2943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.257166][ T2943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.597222][ T5240] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 239.785911][ T5240] Bluetooth: hci1: Malformed LE Event: 0x1b [ 240.422762][ T7362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.653'. [ 240.593078][ T7356] loop0: detected capacity change from 0 to 4096 [ 240.665129][ T7368] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 240.761206][ T5297] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 240.974194][ T5297] usb 6-1: config 0 has no interfaces? [ 240.986219][ T5297] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 241.938346][ T5297] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.949784][ T5297] usb 6-1: config 0 descriptor?? [ 242.271198][ T7387] netlink: 12 bytes leftover after parsing attributes in process `syz.5.655'. [ 242.271240][ T7387] netlink: 8 bytes leftover after parsing attributes in process `syz.5.655'. [ 242.279167][ T7387] vlan2: entered promiscuous mode [ 242.366707][ T7385] loop2: detected capacity change from 0 to 4096 [ 242.399221][ T7387] team0: entered promiscuous mode [ 242.399246][ T7387] team_slave_0: entered promiscuous mode [ 242.399700][ T7387] team_slave_1: entered promiscuous mode [ 242.403662][ T7387] vlan2: entered allmulticast mode [ 242.403680][ T7387] team0: entered allmulticast mode [ 242.403693][ T7387] team_slave_0: entered allmulticast mode [ 242.403707][ T7387] team_slave_1: entered allmulticast mode [ 242.453343][ T7391] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 242.524562][ T7387] team0: left allmulticast mode [ 242.524592][ T7387] team_slave_0: left allmulticast mode [ 242.524622][ T7387] team_slave_1: left allmulticast mode [ 242.524651][ T7387] team0: left promiscuous mode [ 242.524669][ T7387] team_slave_0: left promiscuous mode [ 242.524917][ T7387] team_slave_1: left promiscuous mode [ 242.761187][ T7385] loop2: detected capacity change from 4096 to 0 [ 242.782648][ T7392] syz.2.661: attempt to access beyond end of device [ 242.782648][ T7392] loop2: rw=2049, sector=408, nr_sectors = 24 limit=0 [ 242.782697][ T7392] NILFS (loop2): I/O error writing log (start-blocknr=51, block-count=3) in segment 3 [ 242.789884][ T7392] syz.2.661: attempt to access beyond end of device [ 242.789884][ T7392] loop2: rw=2049, sector=512, nr_sectors = 24 limit=0 [ 242.789918][ T7392] NILFS (loop2): I/O error writing log (start-blocknr=64, block-count=3) in segment 4 [ 242.792025][ T7391] segctord: attempt to access beyond end of device [ 242.792025][ T7391] loop2: rw=2049, sector=512, nr_sectors = 128 limit=0 [ 242.807922][ T7391] NILFS (loop2): I/O error writing log (start-blocknr=64, block-count=16) in segment 4 [ 242.860305][ T7343] loop4: detected capacity change from 0 to 40427 [ 242.874771][ T7343] F2FS-fs (loop4): invalid crc value [ 242.921438][ T5243] syz-executor: attempt to access beyond end of device [ 242.921438][ T5243] loop2: rw=0, sector=264, nr_sectors = 8 limit=0 [ 242.921630][ T5243] NILFS (loop2): I/O error reading meta-data file (ino=3, block-offset=130) [ 242.921791][ T5243] syz-executor: attempt to access beyond end of device [ 242.921791][ T5243] loop2: rw=0, sector=264, nr_sectors = 8 limit=0 [ 242.921894][ T5243] NILFS (loop2): I/O error reading meta-data file (ino=3, block-offset=130) [ 242.921926][ T5243] NILFS error (device loop2): nilfs_readdir: bad page in #12 [ 242.921983][ T5243] syz-executor: attempt to access beyond end of device [ 242.921983][ T5243] loop2: rw=395265, sector=4088, nr_sectors = 8 limit=0 [ 242.922017][ T5243] Buffer I/O error on dev loop2, logical block 511, lost sync page write [ 242.922043][ T5243] NILFS (loop2): unable to write superblock: err=-5 [ 242.922334][ T5243] syz-executor: attempt to access beyond end of device [ 242.922334][ T5243] loop2: rw=395265, sector=0, nr_sectors = 8 limit=0 [ 242.922366][ T5243] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 242.922390][ T5243] NILFS (loop2): unable to write superblock: err=-5 [ 242.922411][ T5243] Remounting filesystem read-only [ 242.943045][ T7343] F2FS-fs (loop4): Found nat_bits in checkpoint [ 242.979999][ T5243] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 242.980035][ T5243] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 242.980058][ T5243] NILFS (loop2): discard dirty block: blocknr=14, size=4096 [ 242.980219][ T5243] NILFS (loop2): discard dirty page: offset=0, ino=15 [ 242.980237][ T5243] NILFS (loop2): discard dirty block: blocknr=18, size=4096 [ 242.980258][ T5243] NILFS (loop2): discard dirty page: offset=4096, ino=15 [ 242.980274][ T5243] NILFS (loop2): discard dirty block: blocknr=0, size=4096 [ 242.980702][ T5243] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 242.980720][ T5243] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 242.980741][ T5243] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 242.980756][ T5243] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 242.980777][ T5243] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 242.980793][ T5243] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 242.991827][ T5243] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 242.991855][ T5243] NILFS (loop2): discard dirty block: blocknr=27, size=4096 [ 242.992171][ T5243] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 242.992195][ T5243] NILFS (loop2): discard dirty block: blocknr=26, size=4096 [ 242.992490][ T5243] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 242.992513][ T5243] NILFS (loop2): discard dirty block: blocknr=28, size=4096 [ 242.992542][ T5243] NILFS (loop2): discard dirty page: offset=4096, ino=3 [ 242.992563][ T5243] NILFS (loop2): discard dirty block: blocknr=29, size=4096 [ 242.992591][ T5243] NILFS (loop2): discard dirty page: offset=8192, ino=3 [ 242.992618][ T5243] NILFS (loop2): discard dirty block: blocknr=30, size=4096 [ 242.992645][ T5243] NILFS (loop2): discard dirty page: offset=921600, ino=3 [ 242.992667][ T5243] NILFS (loop2): discard dirty block: blocknr=0, size=4096 [ 242.992694][ T5243] NILFS (loop2): discard dirty page: offset=925696, ino=3 [ 242.992715][ T5243] NILFS (loop2): discard dirty block: blocknr=36, size=4096 [ 243.079557][ T7375] binder: BINDER_SET_CONTEXT_MGR already set [ 243.079577][ T7375] binder: 7374:7375 ioctl 4018620d 20000040 returned -16 [ 243.384162][ T7403] VFS: could not find a valid V7 on nullb0. [ 247.924547][ T7434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.670'. [ 248.118268][ T7430] Can't find ip_set type [ 248.313420][ T7422] Can't find ip_set type [ 248.919503][ T7441] loop2: detected capacity change from 0 to 4096 [ 249.010969][ T7449] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 249.273589][ T7446] loop1: detected capacity change from 0 to 4096 [ 249.344640][ T5297] usb 6-1: USB disconnect, device number 11 [ 249.879420][ T7456] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 249.955725][ T7458] netlink: 20 bytes leftover after parsing attributes in process `syz.3.678'. [ 250.675149][ T7467] loop2: detected capacity change from 0 to 4096 [ 250.855802][ T7474] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 250.985951][ T7453] binder: BINDER_SET_CONTEXT_MGR already set [ 250.996534][ T29] audit: type=1804 audit(1725733081.076:180): pid=7467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.680" name="/newroot/137/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 251.085812][ T7453] binder: 7451:7453 ioctl 4018620d 20000040 returned -16 [ 251.650406][ T7484] loop0: detected capacity change from 0 to 1024 [ 252.472406][ T7494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.687'. [ 255.160792][ T7527] loop2: detected capacity change from 0 to 4096 [ 255.265392][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.283597][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.328707][ T7531] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 255.416555][ T7533] loop5: detected capacity change from 0 to 1024 [ 256.760119][ T29] audit: type=1804 audit(1725733086.846:181): pid=7536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.702" name="/newroot/143/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 256.885224][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.704'. [ 257.306794][ T7528] binder: 7524:7528 ioctl c0306201 20000000 returned -14 [ 257.382914][ T7540] netlink: 'syz.5.705': attribute type 13 has an invalid length. [ 260.444342][ T7575] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 260.486531][ T7575] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 260.590687][ T7575] Invalid ELF header magic: != ELF [ 261.003910][ T7589] netlink: 'syz.2.721': attribute type 13 has an invalid length. [ 261.586485][ T7562] loop0: detected capacity change from 0 to 40427 [ 261.662157][ T7562] F2FS-fs (loop0): invalid crc value [ 261.696302][ T7562] F2FS-fs (loop0): Found nat_bits in checkpoint [ 262.104259][ T7605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.723'. [ 262.221685][ T7562] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 264.244316][ T7632] overlayfs: missing 'lowerdir' [ 264.294006][ T7632] Invalid ELF header magic: != ELF [ 265.246200][ T7651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.740'. [ 265.438465][ T7650] netlink: 'syz.1.737': attribute type 13 has an invalid length. [ 265.640744][ T7623] binder: 7622:7623 ioctl c0306201 20000000 returned -14 [ 268.406474][ T7684] overlayfs: missing 'lowerdir' [ 268.525764][ T7684] Invalid ELF header magic: != ELF [ 268.651350][ T5295] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 269.801540][ T7694] fuse: Bad value for 'fd' [ 269.827984][ T5295] usb 5-1: config 0 has an invalid descriptor of length 228, skipping remainder of the config [ 269.890738][ T5295] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 269.964057][ T5295] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 270.015038][ T5295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.072546][ T5295] usb 5-1: config 0 descriptor?? [ 270.409535][ T7705] autofs: Unknown parameter '0x0000000000000000' [ 270.971239][ T5295] usb 5-1: string descriptor 0 read error: -71 [ 271.383118][ T5295] ath6kl: Failed to submit usb control message: -71 [ 271.712033][ T5295] ath6kl: unable to send the bmi data to the device: -71 [ 271.899948][ T5295] ath6kl: Unable to send get target info: -71 [ 271.993276][ T5295] ath6kl: Failed to init ath6kl core: -71 [ 271.999667][ T5295] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 272.595444][ T5295] usb 5-1: USB disconnect, device number 5 [ 272.668909][ T7721] overlayfs: missing 'lowerdir' [ 273.519014][ T7721] Invalid ELF header magic: != ELF [ 274.007731][ T7739] fuse: Bad value for 'fd' [ 274.075570][ T7736] loop4: detected capacity change from 0 to 4096 [ 274.164290][ T7741] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 274.534126][ T7747] autofs: Unknown parameter '0x0000000000000000' [ 277.633378][ T5291] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 277.752199][ T7764] overlayfs: missing 'workdir' [ 277.806755][ T7764] Invalid ELF header magic: != ELF [ 277.913043][ T5291] usb 3-1: config 0 has an invalid descriptor of length 228, skipping remainder of the config [ 277.972445][ T5291] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 278.657703][ T5291] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 278.668969][ T5291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.701215][ T5291] usb 3-1: config 0 descriptor?? [ 278.944484][ T5291] usb 3-1: string descriptor 0 read error: -71 [ 278.983094][ T5291] ath6kl: Failed to submit usb control message: -71 [ 278.989755][ T5291] ath6kl: unable to send the bmi data to the device: -71 [ 279.033633][ T5291] ath6kl: Unable to send get target info: -71 [ 279.053081][ T5291] ath6kl: Failed to init ath6kl core: -71 [ 279.068652][ T5291] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 279.100188][ T5291] usb 3-1: USB disconnect, device number 10 [ 279.489067][ T7785] fuse: Bad value for 'fd' [ 279.615205][ T7788] autofs: Unknown parameter '0x0000000000000000' [ 280.716187][ T7769] binder: 7767:7769 ioctl c0306201 20000000 returned -14 [ 280.743817][ T7791] loop2: detected capacity change from 0 to 4096 [ 280.853239][ T7800] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 281.488537][ T7809] overlayfs: missing 'workdir' [ 281.549550][ T7811] Invalid ELF header magic: != ELF [ 284.327172][ T7836] autofs: Unknown parameter '0x0000000000000000' [ 286.142180][ T7848] overlayfs: missing 'workdir' [ 286.173294][ T7848] Invalid ELF header magic: != ELF [ 286.567570][ T29] audit: type=1326 audit(1725733116.646:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.4.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f657cef9 code=0x7ffc0000 [ 286.589787][ C0] vkms_vblank_simulate: vblank timer overrun [ 286.612196][ T7838] loop3: detected capacity change from 0 to 32768 [ 286.671094][ T7838] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.805 (7838) [ 286.713448][ T29] audit: type=1326 audit(1725733116.646:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.4.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f657cef9 code=0x7ffc0000 [ 286.735686][ C0] vkms_vblank_simulate: vblank timer overrun [ 286.812064][ T7838] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 286.871055][ T7838] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 286.878314][ T29] audit: type=1326 audit(1725733116.656:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.4.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80f657cef9 code=0x7ffc0000 [ 286.910971][ T7838] BTRFS info (device loop3): using free-space-tree [ 286.981199][ T7854] loop0: detected capacity change from 0 to 4096 [ 287.023311][ T29] audit: type=1326 audit(1725733116.656:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.4.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f657cef9 code=0x7ffc0000 [ 287.188776][ T29] audit: type=1326 audit(1725733116.656:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.4.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80f657cef9 code=0x7ffc0000 [ 287.219967][ T7872] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 287.320994][ T29] audit: type=1326 audit(1725733116.656:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.4.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f657cef9 code=0x7ffc0000 [ 287.346741][ T29] audit: type=1326 audit(1725733116.696:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.4.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80f657cef9 code=0x7ffc0000 [ 287.369003][ C0] vkms_vblank_simulate: vblank timer overrun [ 287.379449][ T29] audit: type=1326 audit(1725733116.706:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.4.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f657cef9 code=0x7ffc0000 [ 287.403855][ T29] audit: type=1326 audit(1725733116.716:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.4.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80f657cef9 code=0x7ffc0000 [ 287.433731][ T29] audit: type=1326 audit(1725733116.736:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.4.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f657cef9 code=0x7ffc0000 [ 287.455915][ C0] vkms_vblank_simulate: vblank timer overrun [ 287.564143][ T6885] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 287.972334][ T7886] autofs: Unknown parameter '0x0000000000000000' [ 288.074422][ T7844] binder: 7843:7844 ioctl c0306201 20000000 returned -14 [ 291.342230][ T7898] netlink: 'syz.5.824': attribute type 1 has an invalid length. [ 291.449987][ T7900] evm: overlay not supported [ 291.608840][ T7913] syz.0.828[7913] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 291.608979][ T7913] syz.0.828[7913] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 293.509171][ T7935] autofs: Unknown parameter '0x0000000000000000' [ 294.857572][ T7939] loop5: detected capacity change from 0 to 512 [ 294.946798][ T7939] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 295.069035][ T7939] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 295.301533][ T7939] EXT4-fs (loop5): 1 orphan inode deleted [ 295.307485][ T7939] EXT4-fs (loop5): 1 truncate cleaned up [ 295.384131][ T7949] netlink: 'syz.1.842': attribute type 1 has an invalid length. [ 295.384593][ T7939] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.515815][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 295.515841][ T29] audit: type=1326 audit(1725733125.576:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7947 comm="syz.0.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc559f7cef9 code=0x7ffc0000 [ 295.553755][ T29] audit: type=1326 audit(1725733125.576:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7947 comm="syz.0.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc559f7cef9 code=0x7ffc0000 [ 295.589968][ T7939] netlink: 'syz.5.837': attribute type 4 has an invalid length. [ 295.598126][ T29] audit: type=1326 audit(1725733125.576:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7947 comm="syz.0.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc559f7cef9 code=0x7ffc0000 [ 295.655357][ T7956] netlink: 'syz.5.837': attribute type 4 has an invalid length. [ 295.671546][ T29] audit: type=1326 audit(1725733125.576:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7947 comm="syz.0.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc559f7cef9 code=0x7ffc0000 [ 295.758314][ T29] audit: type=1326 audit(1725733125.576:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7947 comm="syz.0.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc559f7cef9 code=0x7ffc0000 [ 295.780586][ C0] vkms_vblank_simulate: vblank timer overrun [ 295.896781][ T5232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.941904][ T29] audit: type=1326 audit(1725733125.656:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7947 comm="syz.0.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fc559f7cef9 code=0x7ffc0000 [ 295.964493][ C0] vkms_vblank_simulate: vblank timer overrun [ 296.057718][ T29] audit: type=1326 audit(1725733125.656:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7947 comm="syz.0.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc559f7cef9 code=0x7ffc0000 [ 296.080089][ C0] vkms_vblank_simulate: vblank timer overrun [ 296.913706][ T29] audit: type=1326 audit(1725733125.656:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7947 comm="syz.0.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc559f7cef9 code=0x7ffc0000 [ 297.259933][ T7975] autofs: Unknown parameter 'fd0x0000000000000000' [ 298.102275][ T7972] netlink: 'syz.0.851': attribute type 4 has an invalid length. [ 298.275122][ T7972] netlink: 'syz.0.851': attribute type 4 has an invalid length. [ 298.872348][ T7986] binder: 7985:7986 ioctl c0306201 20000000 returned -14 [ 298.936667][ T7995] netlink: 'syz.1.859': attribute type 1 has an invalid length. [ 299.407426][ T8005] loop0: detected capacity change from 0 to 512 [ 304.492210][ T8005] EXT4-fs warning (device loop0): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop0. [ 305.344424][ T8026] syz.4.871[8026] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 305.344556][ T8026] syz.4.871[8026] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 305.936828][ T29] audit: type=1326 audit(1725733136.026:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.1.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0497cef9 code=0x7ffc0000 [ 306.154949][ T29] audit: type=1326 audit(1725733136.026:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.1.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0497cef9 code=0x7ffc0000 [ 306.177276][ C0] vkms_vblank_simulate: vblank timer overrun [ 306.540776][ T8054] autofs: Unknown parameter 'fd0x0000000000000000' [ 307.423446][ T8051] netlink: 'syz.4.878': attribute type 1 has an invalid length. [ 307.477319][ T29] audit: type=1326 audit(1725733136.116:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.1.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7e0497cef9 code=0x7ffc0000 [ 307.534199][ T29] audit: type=1326 audit(1725733136.116:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.1.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0497cef9 code=0x7ffc0000 [ 308.057303][ T29] audit: type=1326 audit(1725733136.116:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.1.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7e0497cef9 code=0x7ffc0000 [ 308.295430][ T8063] loop3: detected capacity change from 0 to 764 [ 308.312632][ T29] audit: type=1326 audit(1725733136.116:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.1.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0497cef9 code=0x7ffc0000 [ 308.456912][ T29] audit: type=1326 audit(1725733136.136:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.1.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0497cef9 code=0x7ffc0000 [ 308.565864][ T29] audit: type=1326 audit(1725733136.136:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.1.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7e0497cef9 code=0x7ffc0000 [ 308.602594][ T8063] rock: directory entry would overflow storage [ 308.609136][ T8063] rock: sig=0x4654, size=5, remaining=4 [ 308.811516][ T29] audit: type=1326 audit(1725733136.136:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.1.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0497cef9 code=0x7ffc0000 [ 413.700802][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 413.707822][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4684/1:b..l [ 413.716300][ C1] rcu: (detected by 1, t=10502 jiffies, g=27297, q=375 ncpus=2) [ 413.724198][ C1] task:udevd state:R running task stack:22240 pid:4684 tgid:4684 ppid:1 flags:0x00000002 [ 413.736987][ C1] Call Trace: [ 413.740261][ C1] [ 413.743189][ C1] __schedule+0x1800/0x4a60 [ 413.747728][ C1] ? __pfx___schedule+0x10/0x10 [ 413.752595][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.758226][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 413.764206][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.769852][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 413.775327][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 413.780434][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 413.786149][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.791796][ C1] irqentry_exit+0x5e/0x90 [ 413.796216][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 413.802195][ C1] RIP: 0010:lock_acquire+0x264/0x550 [ 413.807489][ C1] Code: 2b 00 74 08 4c 89 f7 e8 5a 05 8b 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 413.827112][ C1] RSP: 0018:ffffc9000344f9a0 EFLAGS: 00000206 [ 413.833178][ C1] RAX: 0000000000000001 RBX: 1ffff92000689f40 RCX: 5990d8043ac90b00 [ 413.841145][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0ae6e0 RDI: ffffffff8c608e80 [ 413.849107][ C1] RBP: ffffc9000344faf8 R08: ffffffff941e4847 R09: 1ffffffff283c908 [ 413.857072][ C1] R10: dffffc0000000000 R11: fffffbfff283c909 R12: 1ffff92000689f3c [ 413.865039][ C1] R13: dffffc0000000000 R14: ffffc9000344fa00 R15: 0000000000000246 [ 413.873028][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 413.878060][ C1] ? __pfx___might_resched+0x10/0x10 [ 413.883341][ C1] ? mntput_no_expire+0x246/0x850 [ 413.888445][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 413.893642][ C1] ? __pfx_mntput_no_expire+0x10/0x10 [ 413.899004][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.904640][ C1] ? _raw_spin_unlock+0x28/0x50 [ 413.909501][ C1] ? dput+0x37/0x2b0 [ 413.913400][ C1] dput+0x54/0x2b0 [ 413.917119][ C1] ? dput+0x37/0x2b0 [ 413.921014][ C1] terminate_walk+0x30d/0x430 [ 413.925692][ C1] ? walk_component+0x18d/0x410 [ 413.930545][ C1] path_lookupat+0x328/0x450 [ 413.935146][ C1] filename_lookup+0x256/0x610 [ 413.939914][ C1] ? __pfx_filename_lookup+0x10/0x10 [ 413.945223][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.950863][ C1] ? strncpy_from_user+0x1a4/0x2e0 [ 413.955998][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.961643][ C1] ? getname_flags+0x1e3/0x540 [ 413.966407][ C1] do_readlinkat+0xf0/0x3a0 [ 413.970910][ C1] ? __pfx_do_readlinkat+0x10/0x10 [ 413.976011][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 413.982339][ C1] ? do_syscall_64+0x100/0x230 [ 413.987102][ C1] __x64_sys_readlink+0x7f/0x90 [ 413.991957][ C1] do_syscall_64+0xf3/0x230 [ 413.996451][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 414.002088][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.007982][ C1] RIP: 0033:0x7eff0f917d47 [ 414.012401][ C1] RSP: 002b:00007ffee599b8f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000059 [ 414.020845][ C1] RAX: ffffffffffffffda RBX: 000055ac8108d1af RCX: 00007eff0f917d47 [ 414.029451][ C1] RDX: 0000000000000200 RSI: 00007ffee599b908 RDI: 00007ffee599bb08 [ 414.037505][ C1] RBP: 000055ac96e12910 R08: 0000000000000000 R09: 00007ffee599b278 [ 414.045470][ C1] R10: 0000000000000010 R11: 0000000000000202 R12: 00007ffee599b908 [ 414.053522][ C1] R13: 00007ffee599bb08 R14: 000055ac96e3a760 R15: 0000000000000000 [ 414.061503][ C1] [ 414.064510][ C1] rcu: rcu_preempt kthread starved for 10419 jiffies! g27297 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 414.075691][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 414.085646][ C1] rcu: RCU grace-period kthread stack dump: [ 414.091520][ C1] task:rcu_preempt state:R running task stack:26448 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 414.103250][ C1] Call Trace: [ 414.106523][ C1] [ 414.109449][ C1] __schedule+0x1800/0x4a60 [ 414.113993][ C1] ? __pfx___schedule+0x10/0x10 [ 414.118861][ C1] ? __pfx_lock_release+0x10/0x10 [ 414.123888][ C1] ? __asan_memset+0x23/0x50 [ 414.128479][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 414.134289][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 414.140620][ C1] ? schedule+0x90/0x320 [ 414.144867][ C1] schedule+0x14b/0x320 [ 414.149031][ C1] schedule_timeout+0x1be/0x310 [ 414.153881][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 414.159252][ C1] ? __pfx_process_timeout+0x10/0x10 [ 414.164545][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 414.170176][ C1] ? prepare_to_swait_event+0x32e/0x350 [ 414.175732][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 414.180692][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 414.185900][ C1] ? rcu_gp_init+0x1256/0x1630 [ 414.190668][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 414.195603][ C1] ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10 [ 414.201674][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 414.206956][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 414.212862][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 414.218509][ C1] ? finish_swait+0xd4/0x1e0 [ 414.223132][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 414.227731][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 414.232932][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 414.238838][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 414.244479][ C1] ? __kthread_parkme+0x169/0x1d0 [ 414.249516][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 414.254714][ C1] kthread+0x2f2/0x390 [ 414.258775][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 414.263973][ C1] ? __pfx_kthread+0x10/0x10 [ 414.268554][ C1] ret_from_fork+0x4d/0x80 [ 414.272971][ C1] ? __pfx_kthread+0x10/0x10 [ 414.277552][ C1] ret_from_fork_asm+0x1a/0x30 [ 414.282332][ C1] [ 414.285340][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 414.291648][ C1] Sending NMI from CPU 1 to CPUs 0: [ 414.296852][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x21/0x30