last executing test programs: 2m52.214157454s ago: executing program 1 (id=646): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xfffffffd, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) pipe(0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r3, 0x1) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) pwritev(r4, &(0x7f00000003c0)=[{&(0x7f0000000500)="604f6400eb842b6043beff1471a5823456e8ddf3814c65ac641917a765e0d3b1dd5bc64425b84010203cc2b774127b90549da5a92b02a5f90876c1ee9292be8c73726d9750dc3682832380f0bdcd50b1feb36ef98c1c19c61adbafa435f1297a3592d8136ccc59fba73fd75d1447ba9b7525f2b94f815b9c5119d019a657ca0e815ce5b5011563eb82d74aff9bb555472f4a01b415543c", 0x97}, {&(0x7f00000001c0)="bf", 0x1}, {&(0x7f0000000300)="63ad4a9e70e0142836682ce42fcb67115b92eccf0a744962f078a7affd51dff1d51f2f9602eac9e098ace812e2c76ac972eba799b959ba606c60057d5936c73244055c06cea5cc4004b3fd7aa88f10c1d148eea7fa09", 0x56}, {&(0x7f00000005c0)}], 0x4, 0xfffffffe, 0x4) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 2m47.313740135s ago: executing program 1 (id=653): r0 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='wchan\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000800)={{0x2, 0x4e23, @remote}, {0x1, @local}, 0x2c, {0x2, 0x4e22, @empty}, 'lo\x00'}) r2 = syz_open_procfs(r0, &(0x7f00000003c0)='net/udp6\x00') r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r3}], 0x1, 0x9) ioctl$BINDER_THREAD_EXIT(r3, 0xc0046209, 0x100000000000000) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r5, &(0x7f0000000200)={0x1f, 0x0, 0x0, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) shutdown(r5, 0x1) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x909}}, {{0xa, 0x4e24, 0x0, @loopback}}}, 0x108) preadv(r2, &(0x7f0000000b00)=[{&(0x7f0000000340)=""/128, 0x80}, {&(0x7f0000000400)=""/175, 0xaf}], 0x2, 0x5c, 0x4) r6 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r6, 0x29, 0x21, 0x0, &(0x7f0000000000)) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x170, &(0x7f00000004c0)="$eJzskr9OAkEQxr89jn8WRhIrGkgkioVynH8KGy2x9wEkiJF4ROEohFBgjKGwMJb2JvgYJr6AFsYHoKYg1ubM7s2te76C8yvu2/l2Zmdn4czv+GkA3/NhAwdQJLCIdyFgAyiI0JtZoT6QfoRKEfBGeYfk3JDm/f7gvO55zW5xr4hczADwpTxt+fvXFmbqqM/5sCEXxwCCIAiiXjnV9TcnAaCjc4C8DSyrIQKdIweRwRqASq99WfH7g41WO0t339p1th1nx62ctrymE36F0SIaUuo6APleWWM/CeCWchYQRxhXo31h1qYA3NNeeSVeaxm1kQq86No0ot8LOMIqMkga1dItqVNsqJFqEEhQULWN+4W9Mmpjs3HhnYwhIKKyCWx9RnWKpA5cHTw/mdcek5ZIa6QT0ilp4c9fxh7J7x1F5RGQwlW91+tW5SOFK+252nOXRuaDya6PVny4VwsMwzAMwzAMwzD/nZ8AAAD//85IdS4=") 2m44.63143087s ago: executing program 1 (id=655): openat$rtc(0xffffff9c, &(0x7f0000000100), 0x101200, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x8001, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c"}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x4, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x824, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0xffff, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x2, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x37, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x100001, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0x6e115ce9, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2m43.794764518s ago: executing program 1 (id=656): socket$inet6(0xa, 0x1, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="090000008100000003000000ffffffff16010000", @ANYRES32, @ANYBLOB="ffffffff00006385062d3e252cad88", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) pipe2$9p(0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) write$sndseq(0xffffffffffffffff, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_pressure(r6, &(0x7f0000000780)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000800)=[{r7, 0x1}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x171}}], 0x400000000000172, 0x4001c00) 2m42.69975905s ago: executing program 1 (id=659): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) inotify_init1(0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f00000000c0)=0x20007, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x2000000fc) setsockopt$inet_tcp_int(r3, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) sendto$inet(r3, 0x0, 0x0, 0x20000010, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004882) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x30925) 2m40.197181344s ago: executing program 1 (id=661): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x6) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffd) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000340)="0fc719c402f93eecae660f38800a66b80c010f00d0460f09b98c0900000f32b8ef010000000001c12e644c0fc72f", 0x2e}], 0x1, 0x41, 0x0, 0x0) munlockall() ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000280)={[0x9, 0x100003, 0x0, 0x2, 0x5d9, 0x4, 0xc9, 0x5, 0x82, 0x2, 0x401, 0x7, 0x76, 0xea, 0x8, 0x3], 0x10000, 0x285f40}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000240), 0x3, 0x461, &(0x7f0000000980)="$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") madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000080)=0x3, 0x4) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x10002, 0x0, &(0x7f0000515000/0x1000)=nil}) process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000000e00)=""/137, 0x89}], 0x1, &(0x7f0000001d80), 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000700)={0x44, &(0x7f00000008c0)=ANY=[@ANYBLOB="0005020000005c804d03d57b423d11204e78afe2a4b4bb8cdaf1d3424c0292b8e196090674b140d0a8fd8400987d3662f1cf0a540ab44b4875b3845390afe0be71e336acaa83e0d68f97b83b9f607fd7981c3ce4b0ab3e56ab907bd1061979fdd8570b8c60ce0a05d5dad783235214e0250e756a9f950c906d487784ee5d65344dd7516e34d3fb1a40f7cea8e704041f4969943e4401bad4f9bdad2655"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x42000000) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x4e22, @loopback}, {0x2, 0x4e23, @broadcast}, 0x22e, 0x0, 0x0, 0xfdffffffffffffff, 0x4, 0x0, 0x71cf0b8c, 0x0, 0x5}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001800dd8d00000000ffdbdf3502200004ff0000060000"], 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x38}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000300)=ANY=[@ANYBLOB="eb0c3000000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="00f41b83020000009c6e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 2m24.495271696s ago: executing program 32 (id=661): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x6) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffd) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000340)="0fc719c402f93eecae660f38800a66b80c010f00d0460f09b98c0900000f32b8ef010000000001c12e644c0fc72f", 0x2e}], 0x1, 0x41, 0x0, 0x0) munlockall() ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000280)={[0x9, 0x100003, 0x0, 0x2, 0x5d9, 0x4, 0xc9, 0x5, 0x82, 0x2, 0x401, 0x7, 0x76, 0xea, 0x8, 0x3], 0x10000, 0x285f40}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000240), 0x3, 0x461, &(0x7f0000000980)="$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") madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000080)=0x3, 0x4) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x10002, 0x0, &(0x7f0000515000/0x1000)=nil}) process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000000e00)=""/137, 0x89}], 0x1, &(0x7f0000001d80), 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000700)={0x44, &(0x7f00000008c0)=ANY=[@ANYBLOB="0005020000005c804d03d57b423d11204e78afe2a4b4bb8cdaf1d3424c0292b8e196090674b140d0a8fd8400987d3662f1cf0a540ab44b4875b3845390afe0be71e336acaa83e0d68f97b83b9f607fd7981c3ce4b0ab3e56ab907bd1061979fdd8570b8c60ce0a05d5dad783235214e0250e756a9f950c906d487784ee5d65344dd7516e34d3fb1a40f7cea8e704041f4969943e4401bad4f9bdad2655"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x42000000) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x4e22, @loopback}, {0x2, 0x4e23, @broadcast}, 0x22e, 0x0, 0x0, 0xfdffffffffffffff, 0x4, 0x0, 0x71cf0b8c, 0x0, 0x5}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001800dd8d00000000ffdbdf3502200004ff0000060000"], 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x38}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000300)=ANY=[@ANYBLOB="eb0c3000000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="00f41b83020000009c6e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 2m6.547034057s ago: executing program 2 (id=705): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000080)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x32}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inlinecrypt}, {@stripe={'stripe', 0x3d, 0x4000}}, {@nouser_xattr}, {@grpid}], [{@flag='lazytime'}]}, 0x3, 0x460, &(0x7f0000000780)="$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") r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x1, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0xc2}], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, 0x2a}, 0x94) write$binfmt_misc(r1, &(0x7f0000000040), 0xfe46) 2m5.262136001s ago: executing program 2 (id=707): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000048000), 0x0) exit(0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) 2m4.074784139s ago: executing program 2 (id=708): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000004c0)={@in6={{0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x0, 0x0, 0x0, 0x0, "abf1df964b38b7f9595ee641a4a0414b0121e0b9dccd97477da74a510c0f61951406a0e3f6a699d14967c3bb07085a6c0d3bf00d2e8c9c5fa92a8839ce262db0f8c84425bd81204809c9bf14178d6745"}, 0xd8) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000001100)=@req3={0x3f, 0x200, 0x80, 0x20000, 0x3}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x40000000}) 2m0.539446342s ago: executing program 2 (id=712): prlimit64(0x0, 0x3, &(0x7f0000000180)={0xffffffffffffffad, 0x107}, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xc, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x8c44, 0x2) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000200)={'\x00', 0x4, 0x331, 0x1ff, 0x7, 0xf, r0}) 1m57.723871975s ago: executing program 2 (id=714): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000004c0)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe801100090008000c00080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 1m56.047624771s ago: executing program 2 (id=715): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430", 0xf) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5282e4e0bf3eaf55a60da25", 0xbf}, {0x0}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000e40)="c4ae7c0462b7d5d0f701a4979574ff8a5d74bf45c9e878972a42062f9b70e92f76ed2c49e2e8a043016efca580e1e24cbf53ef2fdb0d3810e8359c20b3938b1cb8574e51adc3cac209dd1c", 0x4b}, {&(0x7f0000000fc0)}], 0x2, 0x0, 0x0, 0x84090}], 0x2, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m40.646857676s ago: executing program 33 (id=715): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430", 0xf) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5282e4e0bf3eaf55a60da25", 0xbf}, {0x0}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000e40)="c4ae7c0462b7d5d0f701a4979574ff8a5d74bf45c9e878972a42062f9b70e92f76ed2c49e2e8a043016efca580e1e24cbf53ef2fdb0d3810e8359c20b3938b1cb8574e51adc3cac209dd1c", 0x4b}, {&(0x7f0000000fc0)}], 0x2, 0x0, 0x0, 0x84090}], 0x2, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 27.230100985s ago: executing program 0 (id=838): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newtaction={0x8c, 0x30, 0xffff, 0x70bd25, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7f}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040081}, 0x4140) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000140)) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000001400030500008000ffdbdf25021820ff", @ANYRES32=r7, @ANYBLOB="080002007f0900000000000000766d72703000002200000000000000"], 0x34}, 0x1, 0x0, 0x0, 0xc090}, 0x20008840) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000640)={0xffffffff, {{0x2, 0x0, @multicast1}}, {{0x2, 0xfffc, @empty}}}, 0x108) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r10 = eventfd2(0x5, 0x0) ioctl$KVM_HYPERV_EVENTFD(r9, 0x4018aebd, &(0x7f0000000580)={0x3, r10}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="20002100110001000000000000000000100000000a0000002f44303023000000"], 0x20}], 0x1}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r11, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x0, 0x200, 0x70bd25, 0x25dfd3fb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x63}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x2000c804}, 0x4c001) 26.619834951s ago: executing program 3 (id=840): prctl$PR_GET_NO_NEW_PRIVS(0x27) prctl$PR_GET_NO_NEW_PRIVS(0x27) prlimit64(0x0, 0xe, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x244, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) socket$unix(0x1, 0x1, 0x0) mount$9p_unix(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans']) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x5, 0x40000006}, 0x3c) 24.262241376s ago: executing program 0 (id=844): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x26c, &(0x7f0000000840)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events.local\x00', 0x26e1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x143042, 0x0) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCXONC(0xffffffffffffffff, 0x5608, 0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 23.876005388s ago: executing program 4 (id=845): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) open(&(0x7f0000000000)='./bus\x00', 0x142b42, 0x84) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x2c}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) r4 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[@ANYBLOB='+pids'], 0x6) 23.751804526s ago: executing program 4 (id=846): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x1000000000000010, 0x80802, 0x0) sendmsg(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe801100090008000c00080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 22.879317176s ago: executing program 0 (id=848): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0x2, [[0x9ef8, 0x7, 0xffffffff, 0xffffffff, 0x0, 0x1, 0xffff8000, 0x4], [0x10000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffc], [0x6, 0x0, 0x1, 0x0, 0x1000, 0x0, 0x4]], '\x00', [{0x6}, {0x0, 0x500}, {0x4, 0x3}, {0x400, 0xffffffff, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x7ffe, 0xfffffffa}, {0xfffffffe}, {0x73}, {}, {0xffffffff, 0x4}], '\x00', 0x1001}) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000080)={'icmp\x00'}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) 21.712004583s ago: executing program 0 (id=849): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000004c0)={@in6={{0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x0, 0x0, 0x0, 0x0, "abf1df964b38b7f9595ee641a4a0414b0121e0b9dccd97477da74a510c0f61951406a0e3f6a699d14967c3bb07085a6c0d3bf00d2e8c9c5fa92a8839ce262db0f8c84425bd81204809c9bf14178d6745"}, 0xd8) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000001100)=@req3={0x3f, 0x200, 0x80, 0x20000, 0x3}, 0x1c) 20.862645871s ago: executing program 4 (id=851): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000004c0)={@in6={{0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x0, 0x0, 0x0, 0x0, "abf1df964b38b7f9595ee641a4a0414b0121e0b9dccd97477da74a510c0f61951406a0e3f6a699d14967c3bb07085a6c0d3bf00d2e8c9c5fa92a8839ce262db0f8c84425bd81204809c9bf14178d6745"}, 0xd8) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000001100)=@req3={0x3f, 0x200, 0x80, 0x20000, 0x3}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x40000000}) 16.860491741s ago: executing program 4 (id=855): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pread64(r0, &(0x7f0000000140)=""/15, 0xf, 0x4) 14.747800783s ago: executing program 0 (id=857): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x0, 0x2, 0x10001, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0xff) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x8) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x0, 0x2, 0x1, 0x9}) 13.459990047s ago: executing program 3 (id=859): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0x2, [[0x9ef8, 0x7, 0xffffffff, 0xffffffff, 0x0, 0x1, 0xffff8000, 0x4], [0x10000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffc], [0x6, 0x0, 0x1, 0x0, 0x1000, 0x0, 0x4]], '\x00', [{0x6}, {0x0, 0x500}, {0x4, 0x3}, {0x400, 0xffffffff, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x7ffe, 0xfffffffa}, {0xfffffffe}, {0x73}, {}, {0xffffffff, 0x4}], '\x00', 0x1001}) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000080)={'icmp\x00'}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) 12.350546231s ago: executing program 3 (id=860): syz_mount_image$squashfs(&(0x7f0000000940), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00bc7811e943bbb3bc31a70c81525069e4320000000000f11fac5b600346a3cf2dc67c5bf96eefd90802c528f84db5e3fc53e166dfc62a0d50ae813645e5d16182a2681f3849384200268bfa5c4991d8ef3c2679ce26a969c0d9046f3f64ca6999c39077bd2c8cd6cab448c9c880591bb4e20c350915203da8e126912d9df6847dee13e1c99fe1999a7b66331fd2447fc60d6e06e2ce393943ae07f22346d6901708f493c5ec1b0a7c9133d07664ff21318445692e7c4cbd1c3360a1c9c69c3757c988c1be650748e46bebd0763aa5cfb62ae68c6f908897d422d607cb65e839037ce4099b4621c4890a7c30e256743482503efa45da94b89b1d2e078021f4a898561f56659c12ed92ada36baa5f86f44d5546688f6b9e5fc57ad30d56a4ff9e0ab9432640474b0e128399bae181636a447f014b2fe78af8ff9c1bbe64f66b040b051a9ee8b4d6b376bbc7ba2aab1833b3d02869635e5732a7f6"], 0x9, 0x1a2, &(0x7f0000000000)="$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") openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x8000, 0x21d) 12.293390644s ago: executing program 6 (id=861): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000004c0)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x1000000000000010, 0x80802, 0x0) sendmsg(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe801100090008000c00080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 11.174071128s ago: executing program 6 (id=862): prctl$PR_GET_NO_NEW_PRIVS(0x27) prctl$PR_GET_NO_NEW_PRIVS(0x27) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) 9.090930788s ago: executing program 4 (id=865): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000004c0)={@in6={{0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x0, 0x0, 0x0, 0x0, "abf1df964b38b7f9595ee641a4a0414b0121e0b9dccd97477da74a510c0f61951406a0e3f6a699d14967c3bb07085a6c0d3bf00d2e8c9c5fa92a8839ce262db0f8c84425bd81204809c9bf14178d6745"}, 0xd8) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000001100)=@req3={0x3f, 0x200, 0x80, 0x20000, 0x3}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x40000000}) 7.273246032s ago: executing program 4 (id=868): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) setreuid(0xee01, 0xee01) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0x0, 0x0}, 0x10) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000200)='bridge0\x00') 7.119709651s ago: executing program 5 (id=869): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x60000, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000001600)={&(0x7f0000000240)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0x64010100}}, 0x80, 0x0, 0x0, &(0x7f0000001500)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x80000000}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x5cd1}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0xa8}, 0x40000) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r7, 0x111, 0x3, 0x0, &(0x7f0000000080)) 5.816210746s ago: executing program 5 (id=870): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newtaction={0x8c, 0x30, 0xffff, 0x70bd25, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7f}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040081}, 0x4140) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000140)) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000001400030500008000ffdbdf25021820ff", @ANYRES32=r7, @ANYBLOB="080002007f0900000000000000766d72703000002200000000000000"], 0x34}, 0x1, 0x0, 0x0, 0xc090}, 0x20008840) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000640)={0xffffffff, {{0x2, 0x0, @multicast1}}, {{0x2, 0xfffc, @empty}}}, 0x108) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r10 = eventfd2(0x5, 0x0) ioctl$KVM_HYPERV_EVENTFD(r9, 0x4018aebd, &(0x7f0000000580)={0x3, r10}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="20002100110001000000000000000000100000000a0000002f44303023000000"], 0x20}], 0x1}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r11, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x200, 0x70bd25, 0x25dfd3fb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x63}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c804}, 0x4c001) 5.310690515s ago: executing program 3 (id=871): prctl$PR_GET_NO_NEW_PRIVS(0x27) prctl$PR_GET_NO_NEW_PRIVS(0x27) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x244, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) mount$9p_unix(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans']) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x5, 0x40000006}, 0x3c) 5.270792178s ago: executing program 5 (id=872): sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x15, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="180800000900", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70600001fffffff8500000005000000bf0900000006000026090100000000009500000000000000bf9800000000000056080000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r1 = dup2(r0, r0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) 4.799511685s ago: executing program 6 (id=873): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@orlov}, {@data_err_ignore}, {@grpquota}, {@abort}, {@resgid}, {@bh}, {@nouid32}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdir(0x0, 0x0) r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x6000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x2}, @window={0x3, 0x8, 0x6}, @timestamp, @sack_perm, @window={0x3, 0x1, 0x5}], 0x5) sendto$inet(r3, &(0x7f00000007c0)='%', 0x1, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000380)='x', 0x1, 0x480c1, 0x0, 0x0) sendmmsg(r3, 0x0, 0x0, 0x10) socket$inet6(0x10, 0x2, 0x4) syz_read_part_table(0x5cc, &(0x7f0000000680)="$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") r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000700)={0x1a}) 4.52831017s ago: executing program 5 (id=874): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000020c0), 0x413, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r3, &(0x7f000000bb40)="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", 0x2000, &(0x7f0000000840)={&(0x7f0000000000)={0x50, 0x0, 0x203, {0x7, 0x29, 0x7ffc, 0x48000010, 0x1dcf, 0x3, 0x1b, 0x2, 0x0, 0x0, 0x2, 0x9b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 4.060764497s ago: executing program 5 (id=875): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pread64(r0, &(0x7f0000000140)=""/15, 0xf, 0x4) 3.511987108s ago: executing program 6 (id=876): r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x2, 0x4) 3.13653315s ago: executing program 3 (id=877): socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x0, 0x0, &(0x7f00000001c0)={0x8, 0x2, 0x8, 0x4, 0x80000001, 0x6, 0xeefb, 0x2f}, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f6, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x8031, 0xffffffffffffffff, 0xf6bf000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004340)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x1}, 0x1, [0x7, 0xfffffffffffffffc, 0x40000000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x100000000000, 0x1, 0x0, 0x0, 0x4000000, 0xfffffffffffff3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000000, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed9b, 0x0, 0x1, 0x7ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x8, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) 1.439047518s ago: executing program 6 (id=878): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000004c0)={@in6={{0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x0, 0x0, 0x0, 0x0, "abf1df964b38b7f9595ee641a4a0414b0121e0b9dccd97477da74a510c0f61951406a0e3f6a699d14967c3bb07085a6c0d3bf00d2e8c9c5fa92a8839ce262db0f8c84425bd81204809c9bf14178d6745"}, 0xd8) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000001100)=@req3={0x3f, 0x200, 0x80, 0x20000, 0x3}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x40000000}) 1.379710671s ago: executing program 5 (id=879): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) r1 = socket(0xa, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_clone3(&(0x7f00000004c0)={0x10001800, 0x0, 0x0, &(0x7f00000000c0), {0x3}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, r1, 0xffffd000) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r1, 0x0, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000500)={0x9, [[0x3, 0x101, 0x8, 0x5, 0x4c, 0x3, 0x4, 0x4], [0xa, 0x81, 0xffffffff, 0x2, 0x6, 0xffffff80, 0x5, 0x1], [0x1, 0x5, 0x8517, 0x7, 0x7, 0x10001, 0xb, 0xb]], '\x00', [{0x3, 0xc, 0x1, 0x1, 0x1}, {0x5776d45a, 0x40, 0x1, 0x1, 0x1}, {0x10001, 0x1000, 0x1, 0x1}, {0xfffffff7, 0x6, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {0xa, 0x7, 0x0, 0x1, 0x0, 0x1}, {0x5, 0x4, 0x1, 0x0, 0x1, 0x1}, {0x1, 0x3, 0x0, 0x1, 0x1}, {0x5, 0x5, 0x1, 0x0, 0x1, 0x1}, {0x7ff, 0x3, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x9, 0x0, 0x1, 0x1, 0x1}, {0xc, 0xfffffff8, 0x0, 0x0, 0x1, 0x1}], '\x00', 0x80000001}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000002d80)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRESOCT=r5, @ANYRESHEX, @ANYRES64=r5, @ANYRES8=0x0, @ANYRESDEC, @ANYBLOB="42d79d38ac60ed35a87fafb4c105f0ee95018a20c930a43aa84ad5ca7ac773dfe54855be74335886e6b246a4feff42b115a32e698a60ba396278741f30e8822e9da57f3f0e7a98e47b82ad8885a56217c9d5093bd80ccfee50324d2b371c2e1b5034f4b8ec522ec22a38cc3c851a29c20243a01eef9ea205826196270812975dc7226f528f186146d5b37636f85dfd0b61296f961c5def5226a1cc68f899aadb77f16fd0f7c17d3b0f7501766341daa8fe29c8cbceec54c3f11d6544a9ca45d34971664ea87a938219f7c1ad696ac6bb8f3b80a2d942bf796d38e1c76358226cae74e6d3fe04fbee91e5b0d6a90ee00b2685fbdb12b87a1035c000ec3f031164aaa2f1d5083959c3602dfe42b06bc3a5a1c731899e2e2c638b1bc634ca52962aa3c9ae1cb8a99ebfe031a1f194a45b830bbf133d4905055a88a0ff15b9fe9c3be8dc0786521545159c4a67a855ed672a4c98de18c1eafd72b4dba8f30527bcba54d0dbfd445862c44046b38b94dfd32efb9e9b881da12fb767f700abbee09d8ff9481f446f7c379edb615515e0bc368feb57465218d1110cd2e6e41ada3b43577f629b5170f6971669ac6644b4230dfed17175e954ce0bd3c87c8577666112bfc825f23d2e9b8c31274426c4060f825a35a4580504f03ca4e540d53c061300a3489db061e230ac612df3179f788bdbe8c6249decb686b025d648ae374d55334d71f19e5e25b16732beae71204b035ee870080225a839af6965dd7f3b878e5cbb09fac8306bb94ff7ecbdc89e19049d8f61ce033964b2204d8c4c9817350391132c9124b1eebb2f848d2aa933a64758272d0c9a707ad28a75895ef08141b03ca902ead08a79af20a6f1639069f8f51552bbdef0a42de9930a0e16102e5207bfb976515d0fbb7627156aad9bffab0191b33227b2a9a42ab69a164f8185fe63ebd3356a9655ccb0b58c8e7f6e69bf3d530d2d889d745e3fe5e748b6d89e61e23e5d32c62a623b8290360c95b90b91902315026844e2dbd0a00e93be6b2fd69e6c4a7ca4f6e81d663611575c76ce99031e61cdb833cdbed182d203fa5b0f39236753d936f495ad34c1c09ad8be117828fe32763abc6c4b7975594f23f21aea91d6a759d757aaa03cbcc961278ae9a64d49ebf6899ca1732b33bc30cd852bf73b714b0348a1023d60a0b2333c234126160fb898276d366969cc65458d17e937b7ab02ca1ee1a2a9d395eba287a0a1ed0455de7133746fb8a612acc1b7985abb8e20b91b69faa94dcca8733cb007a4d2ae8bca78898fa715c1d1afb669c255fe473c7a9039ad04bfea3f53e47ef8d672658e386c1383583fca236968367374907bf7a7de0886e2ccc003252efc416c7e35113afcce4f47036a3af72d0c4078ec2f1f1c5e22adb35e136f7c6fe8d34ceb0d2d58a1c2f70eb92e7209f73b76510add5b9ec36809a4c356e7eb7f693e1032462138c54e1f4963b808893c204f24728be7c7576877ea08d8aa9d9e76e8f92a6deb0b4bb2dc5c9bdce0a109376391fda6f19289a6ea7ed21f8d60b0476cfeb7d223376fa1345888ee8577fae1747097596381a9368692e8d19b8b13b7ad62ec959f1b0bcc438adc583dfbc822c2272f49bf5ed83a64df29089dfe698a56b15f581e82881fa35f5b6e1935bfd4c83da863c1b75c9d3b7d6344465eda609c699c566f69862aaa28d64a60c9b1d5003986af0f90223c9efc08607114cdf8a06c6aa6cdb285cfacb4cb5fcb123c3e2a93743eee878b5add0bbe2b80a4a5c90cec797de3524410cb51dd15ae85ccf16dd1b0d7e062c33818c3bf6fbb018866a5358f5deb882661dc68e3a93e2fa15808a0f271a454ffefb15accf3ef141ef62ce0b496a0ea2f9b4a53bba8e63d5b09a5bf9797b768b0429bfac2d2ee38fd8005fd951c08be4abd74a94f55f2905a0c56a6211e25fd6e6436e18d4aae204fb8f2ec98958bdabb66a3d20c5d2bebae05d198f3c23df9f26377e3c798229e22530c69757835b6e875dcd80b5cc4cdccefb54decd0a422ca2a21e1bffc204c72e216ee54b81c59decad3a5e62fa98cecf149d32148583a8768cc53fb6c3503505176ed3edc8e81c397ac57a21a0c32cc65535bfa8b60e91c8079fa8073d208c343e3fc42ff0866111b02f3cc8fdb360d681e0a34b6f7738cf1158b3c1d689204c5c7e0373e0f4d764690578ee2d92438fcdb36b18604c990ad43a928e7cf6c2be3c586d604aba1224e37b5c506eb1c215f6e1810d4b2ff0cdd4ea9672b2556262f5691ccc4ef592ba751552935dbe57473d210daf0bacc27536138ff374072fa991c88ed4357ea4c8dae999a95d3eb419edd6477805ce2423350abaab7fac96197fffc06dfce88accfbf13c0a7392cd585e40910660abe5cd2f3aef798bd751439ed6c20100814c3fe83aacf45741a2ee652ad47b839c590655dbc7782bbbd4399533569c1646407cbf2a8ac3967fe261378a537fe3b66bb2877d55f3f1976bd2216b2b4190ee909bfdfd5699aa992dc8b818c6003b665034d98653812edb596a9d1bb60a3207e9d361aebd59ce6196704fe4e8f47ce328a144398b7fff7a61cd86846dd7f388a993d610e09f4fa0bab557639c5c48b37fb0059f5e045aa90e62d4be896f326f610d82f2cbf15b0f14793010668ad27b291436b10c4e436644c19a9616dc678e12d04bb45e13d66e2ca023a0ff9919756dafde87a8d89a9f2e26d7f92fa186a8c7e8d870c5491f556d307569693bd477ecb47c981e5aee036acdb8279251825557bd17b4303ea2818816adf0f8a460d7679f9e010f47e65c3d320d3eb43d392f52b33376a19a26e69c3143247f7a6bb56c77eafba41ced78952327cee1e6cb423dc98008232240ce56572700383593bd8132aa09fd189e71b74f279d6457c5d9530d7f27f95e29fd9a7e07df204b9dda7e66a8916580ba0376bddf13d2b1dc892c9366be5b3c432c30b6f3463d13d68540b1238e282dcfcbd4f8e52b839cd2b9d52fef32684bb7cb7f905387f9e8e66b2e825636b4a27a8b4b70f73394477fa9df9229bf9f29d086f6028505ae7728f088e70ade42cb0a992c68f891013a533baa411b2ad8179a6ca5251869066ad187769cd37ee377ae81b862998225b831672251c9cf2b7c09454aa7feb5d6ae0e44ca8dc097a7a445c22b19ef3cc53e231590427937aa5c86aa762b0844a6ca0b6d5287cdfe122146bd001c2103826c62e672687916f617afaad0f373c8c54292b11f5cf46f81aef99211f52df90138c6dfed796d570e545a41501c7a0c18e7e42edfa8d946a02509fe273fb15e7b4681ee573d913364fbf0ac64be383293c668483ba400cca25cd3aefe62122e87ce0267114ebe7a17c2b6ed948d01bb3bcf0332feaeb632b3971711361cbc19923be0c04e80311390831410fb9b65e038013a984b13cbb53f9ea432547c86e2dd920fd2946f07fb7d827bb55e73dc84ed49fdd2fbafe0793f32b0a8cf89d391c838ca4284f98faf604e86c30af873000cf8236a8b6902c60d7ed24e16e53e05923e2c111506421ebb8e1272625ecadec5eeb380b56eda220044ebb4c14e1427f63d72c3463b0893372176a3fd75758a4f66d44faafef08771e41b1a78991b062a5797ea7e271134ae243081b8bfe616ad62003e7f8b7a6caef4b097835d4b3e49421746d2031f8ad0c70ba62f7a5420d8d6fbfe5632393540527495cf8c8d1a196f08a601bbbc23eee32b39f625725a641b7b93a9cb48ab92b6447e2ccc2a7603019856307dd6af80dd84b18f3dfbec5530166f36e72196945a869acedaaf3892148a572ba1d226e172cad4f957c2b406a4175083b7ed20293d5e50ae33af6011c003d2f2dae248b4e6fe30391311dd7aaea3e8d4db304451ead9d233f22c17578ca202fca518a1ffee05d8509beadc8cbb3eb5082fe494e9c6273edb5aefcc19291a5dd1d099a2399aa190d9e9b72a82c7c4e96019b9ec0ad5b33f1686f7ab3270de06a164be2bf37b2965c2774ef1b4289c62684ecec8e8f3e66b9b97ecbb54c0779070e8b324c9259f26b28ba1f1f844af79cea00131ac27840bb2408de68d3bcd6e56cf592f5cf00d45893355526cbc102803062b3dd2e8853d2f241e83832afb690d0722570fed07949a96c8336df720680f19b476c48adbabe1308c6722d71e6d9cd82a868294f6eb49071d32ff0a6cc60b3c7e8483c511c9471b865a82091b389f322204f2e01ae2edbffedb2f14f2f271b90d95dfdc08244ce53ca4196b7ef26905fed0c765fbc56d99e264188224ed26c85a484094105a54d77eb86e9c9dc314002b6217658b75b2a7efdd1606fc05fdb249c8e4ea33711aad7b7f535d1a49e2ffb91a3a9198be27999704a365db596fa42acb9ad5c9304af08ce13fd039b178ba6d8a470b7658ca6666b29a08413d0f4b1ab369b4da6074d6b3983f6b07f5a4c733486312db717137dacd5d617b685d5756cb13780a85dea4497faa04968e5f144ad952136a3dfd153abbf593596ae48773c14bb0848af1e5c50185753e027b2e94854dd030fb164561554e1ec574afc61d6ae8f72ab677c621369207a07e81b7506d67beff17eeb965ea660d9cb503e7edb4bb475e47af0835f1dcb77b336058689e73548d975248c181e42fcab5e98a9c832b5e00baa01cc28478a2e9509ef8ff4bcb0b7909a2179b756c85fd118b0130549f65b639b96208019d19d9fed0dffb0ebfd32a7c942c8af62e0735ef2523340af50463ccb053a0ee914578d7fe78562ab9a0ae19cc25dd19ac6e8531e16d4f47407e3a41b3aa227febb456131d98fd445e0b45b44a2bf1466ff454781f5eb34e1e1651e20878e31d4e2b681ccd1b735a464cdddcfd2d95fda836670edd1ded23cd488f05c5e9c09f7c7d23da5397ac3cf6ead73706a3e7cd4634ef0ca27c6030acc1dbe34b943bfe810b7d2c4408f56a6ae63ca3f9dd188de2b22fa384ace53345fcfc1e3c0d3ce9156166a9cc264eeda1b2ebf8de774b93e90d2f8a4d14df3d294f007ed7debff458f29d678e04111f18124959b1cd5fc18ee568e48d0d7d7300ecd4b01538621d8e87ce9c53bd062334ba5893e9a83d3726901c5ba7ee75daeab7f77761c0d09451acf9aee513f40b70f0d9d16692b7c970b6329f9058c0a6bed9faf2e14aee4ba63a31a9420ccf66bccbf3fcf9a3874886d7ca53d55751e23e918c5051c5ab54937a4e4767d878fddfb6d4797b9f7d86732984d7c0f7e71e300f7d18cd7a0ec5cde1f7dfb93aa8242f3391496c3cac6a97cdaa33256e5b15e1d14b4c0dca4c27285e3a93d3e5b4c35378435d2b166189500c63da73aac418e2656c1b48335cc28279407ec7cf863746b02ae92376c9227c6edc5b213ff78a9e263ddddea388d109170faaa8e1aa1d0d5a4a16b43923fe032e773d3d9b7efa0642d8c11fe2f3f1c93f53fa9bed6ae5320ff4b3798b12d81b1b3cc2743171c16a92f1f7ac1faa19fea1c38ca4108cf93f684f59b03342b4c42c52e33971a71f6981ab89ee2917306c5a16d1988f948ba237e3ad1a8cc04ad1934bccaa72516edc62f5ad5f01a5246250d6ab23d06601b5590e108cecbbd95bd969636aabd37e02438384cd1c8e1edbfbf17340271290beee29494eaa83bb345313d94d0881e8a2698554f39eac881eede0b7dc12a2b911378585780f00ac1b8cd649f28723d2e9a56a4bc60e23bfa4c81930f5f7051a55b0425948ee20f508f9781d9ca4f3538fc5c5e0d2f406459fa0392ff2dd7cee65756d4481b660df15f813b22", @ANYRESDEC=0x0, @ANYRES8=r5], 0x1, 0x5e7, &(0x7f0000000680)="$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") fstat(0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x8000005) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, 0x0) 573.282757ms ago: executing program 0 (id=880): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007112370000000000950000000000000089e2d90aa1795cc26efb1dacf01150510936875c66d6a7d6eb12d4cdbc5c0ce0d29df91940d8ca08008e7aa5b3c9a10909d6e18b263131bf965f55746df5189a2e23905ae4dc5340e0eb74eb523d5b77a763cccb768b4453c8b1b1dd0a71983b5c2cfe11f3d30228772b0b798ebaf5abde2ce3ec34f8c6f13ee1f181ac563ba7a7edc9be94452da6d7eb67ae3243cb393245efd0dd21de9553cbd1a8516282de458c44d1ddae97af584de743d44ed18d20dd3b2c42cf1e8b27788dfc562367d46197198cd19fda89a6feca6c738b1d4b2522"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="30003300c0080000080211000001080211000000505050505050"], 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28004800) 449.646124ms ago: executing program 6 (id=881): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000000)="060003176844babeb89e14f0882fe8c5", 0x0, 0x651c, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 3 (id=882): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000100000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) utime(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x56}, 0x28) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000140)="fc0000001a000708ab092504090007000aab0700a90100001d60369321000100fe800000000000000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00030026000000140000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a87", 0x148) kernel console output (not intermixed with test programs): ed bh option [ 74.776468][ T4331] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,orlov,data_err=ignore,grpquota,abort,resgid=0x0000000000000000,bh,nouid32,,errors=continue. Quota mode: writeback. [ 74.927839][ T4339] loop3: detected capacity change from 0 to 1764 [ 76.797058][ T4346] Error parsing options; rc = [-22] [ 77.922129][ T4349] loop3: detected capacity change from 0 to 512 [ 78.099501][ T4349] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,errors=continue,noblock_validity,,errors=continue. Quota mode: none. [ 78.197394][ T4349] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.13: Unimplemented hash flags: 0x0001 [ 78.316270][ T4356] loop0: detected capacity change from 0 to 1024 [ 78.327254][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.701374][ T7] usb 3-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 78.713073][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 78.801822][ T7] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 79.020796][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 79.029613][ T7] usb 3-1: SerialNumber: syz [ 79.100845][ T4349] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.13: Corrupt directory, running e2fsck is recommended [ 79.121039][ T4358] capability: warning: `syz.3.13' uses 32-bit capabilities (legacy support in use) [ 79.121045][ T4357] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.13: Unimplemented hash flags: 0x0001 [ 79.293085][ T4349] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.13: path /3/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 79.319647][ T4315] hfsplus: b-tree write err: -5, ino 4 [ 79.356500][ T7] usb 3-1: 0:2 : does not exist [ 79.371625][ T4357] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.13: Corrupt directory, running e2fsck is recommended [ 79.475137][ T7] usb 3-1: USB disconnect, device number 2 [ 79.814333][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 83.044749][ T4388] Error parsing options; rc = [-22] [ 84.618233][ T4448] loop0: detected capacity change from 0 to 1024 [ 85.141796][ T4448] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 85.148974][ T4448] hfsplus: xattr search failed [ 85.838084][ T4448] attempt to access beyond end of device [ 85.838084][ T4448] loop0: rw=0, want=917506, limit=1024 [ 85.900102][ T4448] Buffer I/O error on dev loop0, logical block 458752, async page read [ 85.980960][ T4448] hfsplus: unable to mark blocks free: error -5 [ 85.991661][ T4448] hfsplus: can't free extent [ 87.477203][ T1109] cfg80211: failed to load regulatory.db [ 87.483157][ T4471] binder: BINDER_SET_CONTEXT_MGR already set [ 87.524563][ T4471] binder: 4469:4471 ioctl 4018620d 200000000040 returned -16 [ 89.026276][ T4490] netlink: 37 bytes leftover after parsing attributes in process `syz.4.36'. [ 90.280107][ T4493] Error parsing options; rc = [-22] [ 90.946778][ T4500] loop0: detected capacity change from 0 to 1024 [ 92.512465][ T4441] hfsplus: b-tree write err: -5, ino 4 [ 92.645092][ T4509] loop2: detected capacity change from 0 to 1024 [ 93.494827][ T4512] loop1: detected capacity change from 0 to 1024 [ 93.808765][ T144] hfsplus: b-tree write err: -5, ino 4 [ 96.192572][ T4530] usb usb8: usbfs: process 4530 (syz.0.45) did not claim interface 0 before use [ 96.298119][ T4528] loop2: detected capacity change from 0 to 256 [ 97.384521][ T4528] exfat: Deprecated parameter 'utf8' [ 97.390008][ T4528] exfat: Deprecated parameter 'namecase' [ 97.448983][ T4528] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 97.785077][ T4535] loop4: detected capacity change from 0 to 1024 [ 98.192986][ T4539] loop3: detected capacity change from 0 to 1024 [ 98.975624][ T4540] Error parsing options; rc = [-22] [ 99.921499][ T4535] EXT4-fs (loop4): Ignoring removed orlov option [ 99.928065][ T4535] EXT4-fs (loop4): Ignoring removed bh option [ 100.032371][ T4535] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,orlov,data_err=ignore,grpquota,abort,resgid=0x0000000000000000,bh,nouid32,,errors=continue. Quota mode: writeback. [ 100.067644][ T4549] process 'syz.2.49' launched './file0' with NULL argv: empty string added [ 100.230772][ T4252] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.278144][ T4552] loop3: detected capacity change from 0 to 2048 [ 100.674490][ T4552] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.830917][ T4552] UDF-fs: error (device loop3): udf_read_inode: (ino 1410) failed !bh [ 101.718110][ T4563] loop2: detected capacity change from 0 to 1024 [ 102.051395][ T4252] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 102.085044][ T4252] usb 2-1: config 0 has no interface number 0 [ 102.100184][ T4252] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 102.113533][ T4252] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 102.147773][ T4252] usb 2-1: config 0 interface 255 has no altsetting 0 [ 102.250893][ T4252] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 102.818157][ T4441] hfsplus: b-tree write err: -5, ino 4 [ 104.108192][ T4252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.119480][ T4252] usb 2-1: config 0 descriptor?? [ 104.230871][ T4252] usb 2-1: can't set config #0, error -71 [ 104.241127][ T4252] usb 2-1: USB disconnect, device number 2 [ 104.322180][ T4584] capability: warning: `syz.4.61' uses deprecated v2 capabilities in a way that may be insecure [ 105.287167][ T4599] loop1: detected capacity change from 0 to 128 [ 105.309954][ T4603] loop4: detected capacity change from 0 to 512 [ 105.394904][ T4599] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 105.471334][ T4603] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.980161][ T4615] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 109.293611][ T4433] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 109.391598][ T4433] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 110.530913][ T4628] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 113.550946][ T4650] loop1: detected capacity change from 0 to 512 [ 115.008837][ T4650] EXT4-fs (loop1): Ignoring removed bh option [ 115.129275][ T4650] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 115.248943][ T4650] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.662366][ T26] audit: type=1800 audit(1770353324.090:2): pid=4661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.78" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 117.328709][ T4661] syz.1.78 (4661) used greatest stack depth: 20856 bytes left [ 117.935459][ T4675] Error parsing options; rc = [-22] [ 120.071554][ T4687] loop2: detected capacity change from 0 to 512 [ 121.550930][ T4687] EXT4-fs (loop2): Ignoring removed bh option [ 121.561836][ T4687] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 121.785817][ T4687] EXT4-fs (loop2): 1 truncate cleaned up [ 122.550765][ T4687] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 122.721220][ T4701] loop1: detected capacity change from 0 to 1764 [ 122.935780][ T4705] loop1: detected capacity change from 0 to 512 [ 122.998792][ T4704] loop2: detected capacity change from 0 to 256 [ 123.042632][ T4705] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,sysvgroups,minixdf,. Quota mode: writeback. [ 123.091736][ T4705] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.215232][ T26] audit: type=1800 audit(1770353330.640:3): pid=4705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.93" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 124.073926][ T4712] Error parsing options; rc = [-22] [ 125.063674][ T4715] loop2: detected capacity change from 0 to 128 [ 125.146948][ T4715] FAT-fs (loop2): bogus number of reserved sectors [ 125.160792][ T4715] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 125.190771][ T4715] FAT-fs (loop2): Can't find a valid FAT filesystem [ 126.940719][ C1] sched: RT throttling activated [ 128.244729][ T4730] Error parsing options; rc = [-22] [ 132.856731][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.864460][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.960819][ T4174] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 133.275106][ T4750] loop0: detected capacity change from 0 to 1764 [ 133.341100][ T4174] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.358133][ T4174] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 133.429044][ T4174] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 133.461247][ T4754] fuse: Bad value for 'user_id' [ 133.490885][ T4174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.528256][ T4174] usb 2-1: config 0 descriptor?? [ 133.927395][ T4761] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 134.401418][ T4174] usb 2-1: USB disconnect, device number 3 [ 134.625552][ T4199] Bluetooth: hci2: link tx timeout [ 134.637833][ T4199] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 134.786990][ T4199] Bluetooth: hci2: link tx timeout [ 134.797361][ T4199] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 134.807582][ T4199] Bluetooth: hci2: link tx timeout [ 134.816028][ T4199] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 134.840855][ T4199] Bluetooth: hci2: link tx timeout [ 134.846195][ T4199] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 135.253254][ T4555] udevd[4555]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.840880][ T4252] Bluetooth: hci2: command 0x0406 tx timeout [ 137.022785][ T4789] loop3: detected capacity change from 0 to 512 [ 137.941010][ T4789] EXT4-fs (loop3): failed to initialize system zone (-117) [ 137.948444][ T4789] EXT4-fs (loop3): mount failed [ 139.195542][ T4798] usb usb8: usbfs: process 4798 (syz.0.121) did not claim interface 0 before use [ 140.704803][ T4804] Error parsing options; rc = [-22] [ 142.044334][ T4811] loop3: detected capacity change from 0 to 256 [ 142.228762][ T4811] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 142.270709][ T4811] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 142.436417][ T4811] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 142.720952][ T4252] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 143.121008][ T4252] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.156379][ T4252] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.156435][ T4252] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 143.156480][ T4252] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 143.156506][ T4252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.173454][ T4252] usb 2-1: config 0 descriptor?? [ 145.175319][ T4252] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 145.219903][ T4252] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 145.223248][ T4822] loop2: detected capacity change from 0 to 1764 [ 145.413335][ T4836] fuse: Bad value for 'fd' [ 145.881631][ C1] plantronics 0003:047F:FFFF.0001: hid_field_extract() called with n (132) > 32! (syz.2.110) [ 145.943148][ T4842] loop0: detected capacity change from 0 to 512 [ 146.434781][ T4845] Error parsing options; rc = [-22] [ 147.342494][ T4842] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 147.381015][ T4842] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 147.421052][ T4250] usb 2-1: USB disconnect, device number 4 [ 147.540751][ T4842] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.135: inode has both inline data and extents flags [ 148.033955][ T4851] Error parsing options; rc = [-22] [ 148.957414][ T4842] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.135: couldn't read orphan inode 15 (err -117) [ 149.003840][ T4842] EXT4-fs (loop0): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nombcache,debug_want_extra_isize=0x0000000000000068,init_itable=0x00000000000000b5,resuid=0x0000000000000000,lazytime,,errors=continue. Quota mode: none. [ 149.696844][ T4856] loop0: detected capacity change from 0 to 512 [ 149.853322][ T4856] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 149.913129][ T4856] EXT4-fs (loop0): 1 truncate cleaned up [ 149.944187][ T4856] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 151.522399][ T4337] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 151.780866][ T4337] usb 1-1: Using ep0 maxpacket: 32 [ 151.980619][ T4337] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 151.989621][ T4337] usb 1-1: config 0 has no interface number 0 [ 151.996148][ T4337] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 152.973287][ T4337] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 153.011555][ T4337] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.019612][ T4337] usb 1-1: Product: syz [ 153.082736][ T4337] usb 1-1: config 0 descriptor?? [ 153.195867][ T4337] usb 1-1: can't set config #0, error -71 [ 153.374749][ T4337] usb 1-1: USB disconnect, device number 2 [ 153.646159][ T4878] fuse: Bad value for 'fd' [ 154.248825][ T4885] loop4: detected capacity change from 0 to 1764 [ 155.364319][ T4896] Error parsing options; rc = [-22] [ 158.594579][ T4919] loop4: detected capacity change from 0 to 512 [ 158.690387][ T4919] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 159.460554][ T4921] fuse: Bad value for 'fd' [ 159.531902][ T4919] EXT4-fs (loop4): 1 truncate cleaned up [ 159.537983][ T4919] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 159.741089][ T4929] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 159.970828][ T4243] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 160.026074][ T4931] loop2: detected capacity change from 0 to 1764 [ 160.249675][ T4243] usb 5-1: Using ep0 maxpacket: 32 [ 161.240972][ T4939] netlink: 37 bytes leftover after parsing attributes in process `syz.3.160'. [ 161.690848][ T4243] usb 5-1: unable to read config index 0 descriptor/all [ 161.697892][ T4243] usb 5-1: can't read configurations, error -71 [ 161.893076][ T4948] netlink: 28 bytes leftover after parsing attributes in process `syz.4.163'. [ 164.508634][ T4980] fuse: Bad value for 'fd' [ 164.819135][ T4987] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 166.781038][ T4996] Error parsing options; rc = [-22] [ 169.641039][ T5023] netlink: 37 bytes leftover after parsing attributes in process `syz.0.173'. [ 170.787310][ T5030] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 175.172974][ T5058] usb usb8: usbfs: process 5058 (syz.1.189) did not claim interface 0 before use [ 175.748649][ T5067] loop4: detected capacity change from 0 to 512 [ 176.560744][ T4337] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 176.578744][ T5067] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 176.625763][ T5067] EXT4-fs (loop4): 1 truncate cleaned up [ 176.640925][ T5067] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 176.769590][ T5079] loop0: detected capacity change from 0 to 256 [ 177.571531][ T5079] exfat: Deprecated parameter 'utf8' [ 177.576967][ T5079] exfat: Deprecated parameter 'namecase' [ 177.580913][ T4337] usb 4-1: Using ep0 maxpacket: 16 [ 177.598711][ T5079] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 177.750862][ T4337] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.790742][ T4337] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.830758][ T7] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 178.010852][ T4337] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 178.090700][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 178.735817][ T4337] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.799660][ T4337] usb 4-1: Product: syz [ 178.805973][ T4337] usb 4-1: Manufacturer: syz [ 178.810605][ T4337] usb 4-1: SerialNumber: syz [ 178.842608][ T4337] usb 4-1: can't set config #1, error -71 [ 178.851696][ T4337] usb 4-1: USB disconnect, device number 2 [ 178.880826][ T7] usb 5-1: device descriptor read/all, error -71 [ 180.082295][ T5111] fuse: Invalid rootmode [ 181.330742][ T4174] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 181.508363][ T5132] loop1: detected capacity change from 0 to 512 [ 181.590701][ T4174] usb 1-1: Using ep0 maxpacket: 16 [ 182.350889][ T4174] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.366635][ T4174] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.383039][ T5132] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 182.530871][ T4174] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 182.562814][ T4174] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.587069][ T5132] EXT4-fs (loop1): 1 truncate cleaned up [ 182.652826][ T4174] usb 1-1: Product: syz [ 182.687633][ T5132] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 182.700162][ T4174] usb 1-1: Manufacturer: syz [ 182.736941][ T4174] usb 1-1: SerialNumber: syz [ 182.991378][ T5146] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 183.016827][ T5148] fuse: Invalid rootmode [ 183.251104][ T4174] usb 1-1: 0:2 : does not exist [ 183.290782][ T4243] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 183.528246][ T4174] usb 1-1: USB disconnect, device number 3 [ 183.550728][ T4243] usb 2-1: Using ep0 maxpacket: 32 [ 183.730911][ T4243] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 183.739143][ T4243] usb 2-1: config 0 has no interface number 0 [ 184.748244][ T4243] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 184.875445][ T4243] usb 2-1: string descriptor 0 read error: -71 [ 184.891778][ T4243] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 184.904565][ T4243] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.924618][ T4243] usb 2-1: config 0 descriptor?? [ 184.940923][ T4243] usb 2-1: can't set config #0, error -71 [ 184.961029][ T4243] usb 2-1: USB disconnect, device number 5 [ 185.651125][ T5168] usb usb8: usbfs: process 5168 (syz.0.222) did not claim interface 0 before use [ 185.993790][ T5180] netlink: 20 bytes leftover after parsing attributes in process `syz.1.223'. [ 186.120841][ T4174] Bluetooth: hci0: command 0x0406 tx timeout [ 186.128370][ T4174] Bluetooth: hci1: command 0x0406 tx timeout [ 186.168309][ T4174] Bluetooth: hci4: command 0x0406 tx timeout [ 186.195250][ T4174] Bluetooth: hci3: command 0x0406 tx timeout [ 188.424328][ T5192] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 188.449971][ T5194] fuse: Invalid rootmode [ 189.471000][ T5201] Error parsing options; rc = [-22] [ 192.331099][ T5216] netlink: 37 bytes leftover after parsing attributes in process `syz.0.235'. [ 194.289150][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.295787][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.531862][ T5228] fuse: Bad value for 'rootmode' [ 195.951318][ T5232] Error parsing options; rc = [-22] [ 197.337662][ T5242] loop3: detected capacity change from 0 to 512 [ 197.452332][ T5242] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 198.441112][ T5253] netlink: 37 bytes leftover after parsing attributes in process `syz.4.247'. [ 199.084104][ T5242] EXT4-fs (loop3): 1 truncate cleaned up [ 199.089822][ T5242] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 200.885481][ T5273] fuse: Bad value for 'rootmode' [ 203.011039][ T5282] Error parsing options; rc = [-22] [ 203.353521][ T5284] loop1: detected capacity change from 0 to 1764 [ 203.914513][ T5291] Error parsing options; rc = [-22] [ 205.540834][ T1109] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 205.790787][ T1109] usb 2-1: Using ep0 maxpacket: 32 [ 206.000951][ T1109] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 206.009184][ T1109] usb 2-1: config 0 has no interface number 0 [ 206.090829][ T5301] usb usb8: usbfs: process 5301 (syz.4.248) did not claim interface 0 before use [ 206.791714][ T1109] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 207.060866][ T1109] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 207.069973][ T1109] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.334198][ T1109] usb 2-1: Product: syz [ 207.338419][ T1109] usb 2-1: Manufacturer: syz [ 207.380766][ T1109] usb 2-1: SerialNumber: syz [ 207.422628][ T1109] usb 2-1: config 0 descriptor?? [ 207.471250][ T5297] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 208.211087][ T5313] netlink: 37 bytes leftover after parsing attributes in process `syz.3.259'. [ 208.877113][ T5294] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 209.144848][ T5320] fuse: Bad value for 'rootmode' [ 209.500993][ T1109] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 210.134912][ T1109] asix: probe of 2-1:0.188 failed with error -61 [ 210.438096][ T5332] loop2: detected capacity change from 0 to 1764 [ 211.293119][ T21] usb 2-1: USB disconnect, device number 6 [ 211.920988][ T5338] Error parsing options; rc = [-22] [ 212.461367][ T5343] usb usb8: usbfs: process 5343 (syz.0.273) did not claim interface 0 before use [ 214.270903][ T5352] blktrace: Concurrent blktraces are not allowed on loop8 [ 214.589878][ T5357] netlink: 37 bytes leftover after parsing attributes in process `syz.2.277'. [ 215.253092][ T5363] fuse: Unknown parameter 'use00000000000000000000' [ 217.321022][ T5377] Error parsing options; rc = [-22] [ 219.771489][ T5388] Error parsing options; rc = [-22] [ 220.540277][ T5391] loop1: detected capacity change from 0 to 1764 [ 222.582790][ T5403] blktrace: Concurrent blktraces are not allowed on loop8 [ 223.348557][ T5418] fuse: Unknown parameter 'use00000000000000000000' [ 226.041370][ T5436] Error parsing options; rc = [-22] [ 227.225384][ T5442] netlink: 37 bytes leftover after parsing attributes in process `syz.4.293'. [ 227.834842][ T5444] loop4: detected capacity change from 0 to 256 [ 228.007783][ T5444] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 228.071350][ T5439] loop1: detected capacity change from 0 to 1764 [ 229.726061][ T5461] loop0: detected capacity change from 0 to 512 [ 230.411828][ T5461] EXT4-fs (loop0): failed to initialize system zone (-117) [ 230.419436][ T5461] EXT4-fs (loop0): mount failed [ 231.411456][ T5469] Error parsing options; rc = [-22] [ 233.981303][ T5485] Error parsing options; rc = [-22] [ 236.876731][ T5497] fuse: Unknown parameter 'use00000000000000000000' [ 237.995286][ T5507] loop0: detected capacity change from 0 to 512 [ 238.687821][ T5507] EXT4-fs (loop0): failed to initialize system zone (-117) [ 238.695432][ T5507] EXT4-fs (loop0): mount failed [ 240.971421][ T5527] Error parsing options; rc = [-22] [ 242.329928][ T5534] netlink: 37 bytes leftover after parsing attributes in process `syz.4.325'. [ 242.878086][ T5535] loop2: detected capacity change from 0 to 1024 [ 242.936070][ T5535] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 242.969439][ T5537] loop3: detected capacity change from 0 to 1764 [ 243.031106][ T5535] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 243.808096][ T5547] binder: 5541:5547 ioctl 4018620d 0 returned -22 [ 243.839017][ T5547] binder: 5541:5547 ioctl c0306201 0 returned -14 [ 247.550989][ T5562] Error parsing options; rc = [-22] [ 249.043119][ T5565] fuse: Unknown parameter 'user_i00000000000000000000' [ 249.259531][ T5574] nfs: Unknown parameter 'X' [ 249.860992][ T5568] Error parsing options; rc = [-22] [ 250.173718][ T5576] loop3: detected capacity change from 0 to 2048 [ 250.242578][ T5576] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 250.308930][ T5576] UDF-fs: error (device loop3): udf_read_inode: (ino 1408) failed !bh [ 250.337890][ T5576] UDF-fs: error (device loop3): udf_fill_super: Error in udf_iget, block=96, partition=0 [ 250.853666][ T5591] loop3: detected capacity change from 0 to 256 [ 252.522542][ T5591] exfat: Deprecated parameter 'utf8' [ 252.527990][ T5591] exfat: Deprecated parameter 'namecase' [ 252.577455][ T5591] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 252.816291][ T5599] loop4: detected capacity change from 0 to 512 [ 252.989115][ T5604] loop3: detected capacity change from 0 to 512 [ 253.004570][ T5599] EXT4-fs error (device loop4): ext4_fill_super:4866: inode #2: comm syz.4.335: inode has both inline data and extents flags [ 253.043334][ T5599] EXT4-fs (loop4): get root inode failed [ 253.049109][ T5599] EXT4-fs (loop4): mount failed [ 253.194582][ T5604] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 253.393912][ T5612] Error parsing options; rc = [-22] [ 253.983530][ T5604] EXT4-fs (loop3): 1 truncate cleaned up [ 254.030771][ T5604] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 255.000707][ T21] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 255.260842][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 255.410984][ T21] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 255.420441][ T21] usb 4-1: config 0 has no interface number 0 [ 255.604673][ T21] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 255.801471][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.813685][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.271301][ T5630] Error parsing options; rc = [-22] [ 257.900938][ T21] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 257.910049][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.002238][ T21] usb 4-1: config 0 descriptor?? [ 258.015905][ T5633] loop3: detected capacity change from 0 to 16 [ 258.030865][ T21] usb 4-1: can't set config #0, error -71 [ 258.078148][ T21] usb 4-1: USB disconnect, device number 3 [ 258.114530][ T5633] erofs: (device loop3): mounted with root inode @ nid 36. [ 258.461592][ T5636] netlink: 37 bytes leftover after parsing attributes in process `syz.1.353'. [ 259.013563][ T5638] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 259.065099][ T5633] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 259.073796][ T5638] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -44 in[46, 4050] out[1851] [ 259.139386][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 259.170136][ T5638] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 259.225090][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 259.291000][ T5633] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 259.346544][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 259.390737][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 259.410740][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 259.487304][ T5633] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 259.522233][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 259.585494][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 259.615098][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 259.624669][ T5643] device sit0 entered promiscuous mode [ 259.679868][ T5633] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36 [ 259.700034][ T5643] netlink: 'syz.0.349': attribute type 1 has an invalid length. [ 259.730151][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 259.730849][ T5643] netlink: 1 bytes leftover after parsing attributes in process `syz.0.349'. [ 259.739856][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 259.753088][ T5633] erofs: (device loop3): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36 [ 259.803322][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 259.846294][ T5633] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36 [ 259.871964][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 15 @ nid 36 [ 259.913752][ T5633] attempt to access beyond end of device [ 259.913752][ T5633] loop3: rw=524288, want=848, limit=16 [ 259.979303][ T5633] attempt to access beyond end of device [ 259.979303][ T5633] loop3: rw=524288, want=13478624104, limit=16 [ 260.021158][ T5633] attempt to access beyond end of device [ 260.021158][ T5633] loop3: rw=524288, want=13478624080, limit=16 [ 260.062275][ T5633] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 360447 of nid 36 [ 260.112083][ T5649] loop0: detected capacity change from 0 to 1024 [ 260.125008][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 260.142435][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 260.153952][ T5647] netlink: 20 bytes leftover after parsing attributes in process `syz.1.356'. [ 260.165094][ T5633] erofs: (device loop3): z_erofs_extent_lookback: unknown type 3 @ lcn 84 of nid 36 [ 260.178077][ T5649] EXT4-fs (loop0): Ignoring removed orlov option [ 260.190906][ T5649] EXT4-fs (loop0): Ignoring removed bh option [ 260.243258][ T5647] Zero length message leads to an empty skb [ 260.248448][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 85 @ nid 36 [ 261.705674][ T4203] Bluetooth: hci2: link tx timeout [ 261.710974][ T4203] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 261.713903][ T5633] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 348159 of nid 36 [ 261.718844][ T4203] Bluetooth: hci2: link tx timeout [ 261.736004][ T4203] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 261.779118][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 261.787080][ T5649] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,orlov,data_err=ignore,grpquota,abort,resgid=0x0000000000000000,bh,nouid32,,errors=continue. Quota mode: writeback. [ 261.793119][ T5633] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 344063 of nid 36 [ 261.900704][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 262.057308][ T5633] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 262.552478][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 262.790796][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 81 @ nid 36 [ 262.831345][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 263.021833][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 263.052770][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 263.062545][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 77 @ nid 36 [ 263.072677][ T5633] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 315391 of nid 36 [ 263.083224][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 263.102096][ T5633] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 263.154106][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 263.302262][ T5633] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 307199 of nid 36 [ 263.394848][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 263.811349][ T4235] Bluetooth: hci2: command 0x0406 tx timeout [ 264.124065][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 73 @ nid 36 [ 264.154407][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 264.209303][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 264.312762][ T5633] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 290815 of nid 36 [ 264.334938][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 264.350999][ T5633] erofs: (device loop3): z_erofs_extent_lookback: unknown type 3 @ lcn 64 of nid 36 [ 264.360443][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 65 @ nid 36 [ 264.571508][ T5673] Error parsing options; rc = [-22] [ 264.641041][ T5633] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 266239 of nid 36 [ 264.670684][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 64 @ nid 36 [ 264.680318][ T5633] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 262143 of nid 36 [ 264.746114][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 264.785963][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 264.834697][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 60 @ nid 36 [ 264.844323][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 264.853515][ T5633] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 264.862967][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 264.872237][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 264.906955][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 264.918539][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 55 @ nid 36 [ 264.927765][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 264.936964][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 264.948223][ T5633] erofs: (device loop3): z_erofs_extent_lookback: unknown type 3 @ lcn 50 of nid 36 [ 264.957716][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 265.000762][ T5633] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 208895 of nid 36 [ 265.052960][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 265.103158][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 49 @ nid 36 [ 265.150840][ T5633] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 200703 of nid 36 [ 265.220698][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 48 @ nid 36 [ 265.280865][ T5633] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 196607 of nid 36 [ 265.330716][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 265.370357][ T5633] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 265.450927][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 265.460914][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 265.471228][ T5633] erofs: (device loop3): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 265.480397][ T5633] attempt to access beyond end of device [ 265.480397][ T5633] loop3: rw=524288, want=56, limit=16 [ 265.550893][ T5633] attempt to access beyond end of device [ 265.550893][ T5633] loop3: rw=524288, want=40, limit=16 [ 265.597188][ T5633] attempt to access beyond end of device [ 265.597188][ T5633] loop3: rw=524288, want=96, limit=16 [ 265.636283][ T5633] attempt to access beyond end of device [ 265.636283][ T5633] loop3: rw=524288, want=32, limit=16 [ 266.053950][ T5695] fuse: Unknown parameter 'user_id00000000000000000000' [ 267.349894][ T5703] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 268.151803][ T26] audit: type=1326 audit(1770353474.740:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5701 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75986e6eb9 code=0x7ffc0000 [ 268.276621][ T26] audit: type=1326 audit(1770353474.750:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5701 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75986e6eb9 code=0x7ffc0000 [ 268.357104][ T26] audit: type=1326 audit(1770353474.760:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5701 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f75986e6eb9 code=0x7ffc0000 [ 268.501100][ T26] audit: type=1326 audit(1770353474.770:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5701 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75986e6eb9 code=0x7ffc0000 [ 268.586559][ T26] audit: type=1326 audit(1770353474.770:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5701 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75986e6eb9 code=0x7ffc0000 [ 268.713015][ T26] audit: type=1326 audit(1770353474.770:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5701 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f75986e6eb9 code=0x7ffc0000 [ 268.858912][ T26] audit: type=1326 audit(1770353474.790:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5701 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75986e6eb9 code=0x7ffc0000 [ 270.119665][ T5714] Error parsing options; rc = [-22] [ 270.755343][ T26] audit: type=1326 audit(1770353474.790:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5701 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75986e6eb9 code=0x7ffc0000 [ 270.836572][ T26] audit: type=1326 audit(1770353474.800:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5701 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f75986e6eb9 code=0x7ffc0000 [ 271.181233][ T26] audit: type=1326 audit(1770353474.800:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5701 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75986e6eb9 code=0x7ffc0000 [ 273.519648][ T5730] netlink: 20 bytes leftover after parsing attributes in process `syz.4.369'. [ 273.719807][ T5734] fuse: Unknown parameter 'user_id00000000000000000000' [ 275.321846][ T5750] loop0: detected capacity change from 0 to 512 [ 275.411005][ T5750] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 275.470761][ T5750] EXT4-fs (loop0): mount failed [ 276.380625][ T5763] Error parsing options; rc = [-22] [ 279.396703][ T5771] fuse: Bad value for 'fd' [ 279.718661][ T5775] loop2: detected capacity change from 0 to 256 [ 279.847413][ T5775] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 279.934458][ T5775] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 280.030000][ T5775] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 280.134438][ T5778] netlink: 20 bytes leftover after parsing attributes in process `syz.0.391'. [ 280.256157][ T5781] loop4: detected capacity change from 0 to 1024 [ 280.350078][ T5781] EXT4-fs (loop4): Ignoring removed orlov option [ 280.380987][ T5781] EXT4-fs (loop4): Ignoring removed bh option [ 280.474630][ T5781] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,orlov,data_err=ignore,grpquota,abort,resgid=0x0000000000000000,bh,nouid32,,errors=continue. Quota mode: writeback. [ 282.206687][ T5811] Error parsing options; rc = [-22] [ 282.906102][ T5790] loop3: detected capacity change from 0 to 256 [ 283.041343][ T5790] exfat: Deprecated parameter 'utf8' [ 283.046810][ T5790] exfat: Deprecated parameter 'namecase' [ 283.071583][ T5790] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 284.090717][ T5833] loop0: detected capacity change from 0 to 1024 [ 284.172938][ T5833] EXT4-fs (loop0): inline encryption not supported [ 284.191161][ T5833] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 284.282750][ T5833] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,delalloc,debug_want_extra_isize=0x000000000000005c,grpquota,noblock_validity,user_xattr,mb_optimize_scan=0x0000000000000001,errors=remount-ro,. Quota mode: writeback. [ 285.060431][ T5842] loop0: detected capacity change from 0 to 16 [ 285.228301][ T5842] erofs: (device loop0): mounted with root inode @ nid 36. [ 285.695720][ T5845] fuse: Bad value for 'fd' [ 286.708107][ T5842] attempt to access beyond end of device [ 286.708107][ T5842] loop0: rw=524288, want=1342177304, limit=16 [ 286.729030][ T5842] attempt to access beyond end of device [ 286.729030][ T5842] loop0: rw=0, want=1342177280, limit=16 [ 286.776064][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 286.776079][ T26] audit: type=1800 audit(1770353494.190:21): pid=5842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.406" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 286.822226][ T5842] attempt to access beyond end of device [ 286.822226][ T5842] loop0: rw=0, want=1342177280, limit=16 [ 286.857974][ T26] audit: type=1800 audit(1770353494.280:22): pid=5842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.406" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 286.875550][ T5842] attempt to access beyond end of device [ 286.875550][ T5842] loop0: rw=0, want=1342177280, limit=16 [ 286.907799][ T5842] attempt to access beyond end of device [ 286.907799][ T5842] loop0: rw=0, want=1342177280, limit=16 [ 286.970733][ T4174] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 287.183079][ T4174] usb 2-1: device descriptor read/64, error -71 [ 287.209744][ T5850] loop2: detected capacity change from 0 to 2048 [ 287.256406][ T5850] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 287.495790][ T1109] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 287.572903][ T4174] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 288.400750][ T1109] usb 1-1: Using ep0 maxpacket: 16 [ 289.946110][ T1109] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.946147][ T1109] usb 1-1: config 0 interface 0 has no altsetting 0 [ 289.946177][ T1109] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 289.946201][ T1109] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.972336][ T1109] usb 1-1: config 0 descriptor?? [ 290.253315][ T1109] usbhid 1-1:0.0: can't add hid device: -71 [ 290.259381][ T1109] usbhid: probe of 1-1:0.0 failed with error -71 [ 290.303141][ T1109] usb 1-1: USB disconnect, device number 4 [ 290.336359][ T5868] loop3: detected capacity change from 0 to 128 [ 290.448207][ T5868] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 290.518988][ T5868] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.671310][ T5868] EXT4-fs warning (device loop3): ext4_group_add:1676: Can't resize non-sparse filesystem further [ 292.734561][ T5889] loop1: detected capacity change from 0 to 1024 [ 292.757946][ T5887] loop0: detected capacity change from 0 to 4096 [ 292.984170][ T5889] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,min_batch_time=0x0000000000000001,usrjquota=,,errors=continue. Quota mode: none. [ 294.073365][ T5887] EXT4-fs (loop0): Test dummy encryption mode enabled [ 294.150027][ T5887] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 294.165812][ T5887] System zones: 0-5 [ 294.220815][ T5908] usb usb8: usbfs: process 5908 (syz.4.425) did not claim interface 0 before use [ 294.357395][ T5887] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,dioread_nolock,resuid=0x0000000000000000,test_dummy_encryption,errors=continue,data_err=ignore,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 294.863234][ T5887] fs-verity: sha512 using implementation "sha512-avx2" [ 295.906757][ T5924] Error parsing options; rc = [-22] [ 296.522555][ T5925] loop3: detected capacity change from 0 to 1024 [ 296.721798][ T5932] usb usb8: usbfs: process 5932 (syz.2.430) did not claim interface 0 before use [ 299.032119][ T5941] loop_set_status: loop3 () has still dirty pages (nrpages=96) [ 302.760766][ T4250] Bluetooth: hci2: command 0x0405 tx timeout [ 303.771750][ T5970] Error parsing options; rc = [-22] [ 306.790542][ T5983] Error parsing options; rc = [-22] [ 310.627103][ T6001] loop3: detected capacity change from 0 to 1024 [ 311.992179][ T6019] fuse: Unknown parameter '0x0000000000000004' [ 312.102951][ T6021] loop2: detected capacity change from 0 to 164 [ 312.210784][ T6021] isofs_fill_super: root inode is not a directory. Corrupted media? [ 313.142659][ T6032] Error parsing options; rc = [-22] [ 313.793062][ T6038] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 314.985257][ T6046] usb usb8: usbfs: process 6046 (syz.0.463) did not claim interface 0 before use [ 316.078579][ T6053] fuse: Unknown parameter '0x0000000000000004' [ 317.166057][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.176685][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.218325][ T6062] Error parsing options; rc = [-22] [ 321.944576][ T6090] device veth1_to_bond entered promiscuous mode [ 322.157015][ T6094] fuse: Unknown parameter '0x0000000000000004' [ 322.390222][ T6096] loop1: detected capacity change from 0 to 1764 [ 324.620931][ T4250] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 325.092036][ T4250] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.110098][ T4250] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.280728][ T4250] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 325.370231][ T6117] Error parsing options; rc = [-22] [ 325.940798][ T4250] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 325.950098][ T4250] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.974161][ T4250] usb 2-1: config 0 descriptor?? [ 327.860872][ T4250] usbhid 2-1:0.0: can't add hid device: -71 [ 327.870846][ T4250] usbhid: probe of 2-1:0.0 failed with error -71 [ 327.928345][ T4250] usb 2-1: USB disconnect, device number 9 [ 331.505056][ T6144] loop3: detected capacity change from 0 to 1764 [ 333.819671][ T6150] loop0: detected capacity change from 0 to 2048 [ 334.184180][ T4555] loop0: p2 p3 < > p4 < p5 > [ 334.207509][ T4555] loop0: partition table partially beyond EOD, truncated [ 334.217503][ T6156] blktrace: Concurrent blktraces are not allowed on loop8 [ 334.277646][ T4555] loop0: p2 start 53543428 is beyond EOD, truncated [ 334.337981][ T4555] loop0: p3 start 4284289 is beyond EOD, truncated [ 334.363294][ T4555] loop0: p5 start 53543428 is beyond EOD, truncated [ 334.642611][ T6164] usb usb8: usbfs: process 6164 (syz.2.491) did not claim interface 0 before use [ 335.396979][ T6158] Error parsing options; rc = [-22] [ 335.459859][ T6150] loop0: p2 p3 < > p4 < p5 > [ 335.485385][ T6150] loop0: partition table partially beyond EOD, truncated [ 335.514836][ T6150] loop0: p2 start 53543428 is beyond EOD, truncated [ 335.530682][ T6150] loop0: p3 start 4284289 is beyond EOD, truncated [ 335.559258][ T6150] loop0: p5 start 53543428 is beyond EOD, truncated [ 335.695394][ T3561] loop0: p2 p3 < > p4 < p5 > [ 335.700117][ T3561] loop0: partition table partially beyond EOD, truncated [ 336.523265][ T3561] loop0: p2 start 53543428 is beyond EOD, truncated [ 336.529935][ T3561] loop0: p3 start 4284289 is beyond EOD, truncated [ 336.682215][ T3561] loop0: p5 start 53543428 is beyond EOD, truncated [ 336.780519][ T6175] usb usb8: usbfs: process 6175 (syz.1.495) did not claim interface 0 before use [ 337.524684][ T4555] udevd[4555]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 341.530718][ T21] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 341.643468][ T4555] udevd[4555]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 341.766229][ T4555] udevd[4555]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 341.771276][ T4337] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 341.790744][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 341.863508][ T6198] loop3: detected capacity change from 0 to 2048 [ 341.960964][ T21] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.981417][ T21] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 341.987475][ T6198] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 342.066258][ T4337] usb 2-1: Using ep0 maxpacket: 16 [ 342.201020][ T21] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 342.230728][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.250741][ T21] usb 3-1: Product: syz [ 342.254989][ T21] usb 3-1: Manufacturer: syz [ 342.350892][ T4337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.808737][ T21] usb 3-1: SerialNumber: syz [ 342.815053][ T4337] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 342.870888][ T21] usb 3-1: can't set config #1, error -71 [ 342.885747][ T4337] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 342.910727][ T21] usb 3-1: USB disconnect, device number 3 [ 342.940678][ T4337] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.983697][ T4337] usb 2-1: config 0 descriptor?? [ 343.352685][ T6205] loop3: detected capacity change from 0 to 256 [ 343.406628][ T6205] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 343.477186][ T4337] microsoft 0003:045E:07DA.0002: unknown main item tag 0x2 [ 343.482873][ T6205] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 343.515305][ T4337] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 343.556583][ T6205] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 343.569145][ T4337] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 343.589050][ T4337] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 343.617678][ T4337] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 343.646726][ T4337] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 343.673095][ T4337] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 343.697489][ T4337] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 343.724782][ T4337] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 343.753919][ T4337] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 343.778963][ T4337] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 343.964325][ T4337] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 343.974509][ T4337] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 344.039256][ T6212] usb usb8: usbfs: process 6212 (syz.0.510) did not claim interface 0 before use [ 344.761038][ T4337] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 344.768334][ T4337] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 344.805306][ T4337] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 346.292598][ T4337] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 346.378876][ T4337] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 346.408779][ T6220] loop1: detected capacity change from 0 to 256 [ 346.480846][ T4337] microsoft 0003:045E:07DA.0002: no inputs found [ 346.519821][ T4337] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 346.649349][ T4337] usb 2-1: USB disconnect, device number 10 [ 348.299628][ T6224] fido_id[6224]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 348.407465][ T6234] loop1: detected capacity change from 0 to 512 [ 348.517806][ T6234] EXT4-fs (loop1): Test dummy encryption mode enabled [ 348.541468][ T6234] EXT4-fs (loop1): Test dummy encryption mode enabled [ 348.581448][ T6234] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 348.685523][ T6234] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,dioread_nolock,jqfmt=vfsv1,nojournal_checksum,minixdf,barrier=0x0000000000000a18,errors=remount-ro,lazytime,test_dummy_encryption,min_batch_time=0x0000000000000004,. Quota mode: none. [ 350.375332][ T6234] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 350.410733][ T4309] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 350.650746][ T4309] usb 4-1: Using ep0 maxpacket: 16 [ 352.400783][ T4309] usb 4-1: unable to read config index 0 descriptor/all [ 352.407841][ T4309] usb 4-1: can't read configurations, error -71 [ 352.585214][ T6258] loop3: detected capacity change from 0 to 1764 [ 352.947741][ T6262] loop0: detected capacity change from 0 to 2048 [ 353.073628][ T6262] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 354.191875][ T6278] loop4: detected capacity change from 0 to 256 [ 354.229986][ T6281] Error parsing options; rc = [-22] [ 354.381053][ T6278] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 356.391010][ T6294] netlink: 37 bytes leftover after parsing attributes in process `syz.3.532'. [ 356.762988][ T4309] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 356.776627][ T4309] Bluetooth: hci0: Injecting HCI hardware error event [ 356.807113][ T4199] Bluetooth: hci0: hardware error 0x00 [ 359.020656][ T4309] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 359.280722][ T4309] usb 1-1: Using ep0 maxpacket: 16 [ 359.424273][ T4309] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.460823][ T4309] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 359.780781][ T4309] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 359.789892][ T4309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.810468][ T4309] usb 1-1: Product: syz [ 359.828459][ T4309] usb 1-1: Manufacturer: syz [ 359.833193][ T4309] usb 1-1: SerialNumber: syz [ 361.610451][ T6325] loop2: detected capacity change from 0 to 128 [ 361.661068][ T4309] usb 1-1: 0:2 : does not exist [ 361.710882][ T4309] usb 1-1: USB disconnect, device number 5 [ 361.750156][ T6325] FAT-fs (loop2): bogus number of reserved sectors [ 361.783739][ T6325] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 361.825392][ T6325] FAT-fs (loop2): Can't find a valid FAT filesystem [ 362.041646][ T4555] udevd[4555]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 362.847856][ T6336] netlink: 20 bytes leftover after parsing attributes in process `syz.0.543'. [ 367.645390][ T6364] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 367.973351][ T6374] Error parsing options; rc = [-22] [ 369.248261][ T6375] netlink: 37 bytes leftover after parsing attributes in process `syz.2.545'. [ 369.754496][ T6382] usb usb8: usbfs: process 6382 (syz.4.553) did not claim interface 0 before use [ 372.375923][ T6395] loop4: detected capacity change from 0 to 512 [ 372.442229][ T6395] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 372.556132][ T6395] EXT4-fs (loop4): 1 truncate cleaned up [ 372.585428][ T6395] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 373.100638][ T4235] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 373.360725][ T4235] usb 5-1: Using ep0 maxpacket: 32 [ 373.484746][ T4235] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 373.494202][ T4235] usb 5-1: config 0 has no interface number 0 [ 373.500364][ T4235] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 373.670872][ T4235] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 373.680016][ T4235] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.720679][ T4235] usb 5-1: Product: syz [ 373.724912][ T4235] usb 5-1: Manufacturer: syz [ 373.730264][ T4235] usb 5-1: SerialNumber: syz [ 373.780721][ T4235] usb 5-1: config 0 descriptor?? [ 373.808673][ T6393] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 374.044431][ T6393] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 375.700918][ T4235] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 375.731972][ T4235] asix: probe of 5-1:0.188 failed with error -71 [ 375.780695][ T4235] usb 5-1: USB disconnect, device number 6 [ 376.037065][ T6426] netlink: 37 bytes leftover after parsing attributes in process `syz.2.563'. [ 377.798515][ T6431] usb usb8: usbfs: process 6431 (syz.4.565) did not claim interface 0 before use [ 378.602880][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.609485][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.637500][ T6433] loop4: detected capacity change from 0 to 512 [ 378.852480][ T6433] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,grpjquota=,lazytime,,errors=continue. Quota mode: writeback. [ 378.954533][ T6433] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.133783][ T6433] overlayfs: conflicting lowerdir path [ 379.180666][ T4236] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 380.940969][ T4236] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.970687][ T4236] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 380.991650][ T4236] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 381.002951][ T4236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.020367][ T4236] usb 2-1: config 0 descriptor?? [ 381.029122][ T6444] Error parsing options; rc = [-22] [ 381.073455][ T4236] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 382.673663][ T4236] usb 2-1: USB disconnect, device number 11 [ 382.980995][ T7] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 383.150456][ T6466] loop4: detected capacity change from 0 to 512 [ 383.235318][ T6466] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 383.252459][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 383.286970][ T6466] EXT4-fs (loop4): 1 truncate cleaned up [ 383.302231][ T6466] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 383.407094][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 383.422997][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 383.495930][ T6470] loop0: detected capacity change from 0 to 512 [ 383.563703][ T6470] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 383.585942][ T6470] EXT4-fs (loop0): orphan cleanup on readonly fs [ 383.596062][ T6470] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 383.606574][ T6470] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 383.616497][ T6470] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #13: comm syz.0.572: inode has both inline data and extents flags [ 383.631026][ T7] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 383.641696][ T6470] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.572: couldn't read orphan inode 13 (err -117) [ 383.654357][ T6470] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,acl,stripe=0x000000000000ffff,jqfmt=vfsv1,grpjquota=",errors=continue. Quota mode: writeback. [ 383.654369][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.682862][ T4250] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 383.737295][ T7] usb 4-1: Product: syz [ 383.756358][ T7] usb 4-1: Manufacturer: syz [ 383.761312][ T7] usb 4-1: SerialNumber: syz [ 383.937707][ T6483] loop2: detected capacity change from 0 to 512 [ 383.944758][ T4250] usb 5-1: Using ep0 maxpacket: 32 [ 384.060978][ T4250] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 384.070293][ T4250] usb 5-1: config 0 has no interface number 0 [ 384.090863][ T7] usb 4-1: 0:2 : does not exist [ 384.099459][ T6483] EXT4-fs (loop2): failed to initialize system zone (-117) [ 384.107441][ T6483] EXT4-fs (loop2): mount failed [ 384.129702][ T4250] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 384.170415][ T7] usb 4-1: USB disconnect, device number 6 [ 384.341023][ T4250] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 384.354759][ T4250] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.373790][ T4250] usb 5-1: Product: syz [ 384.390684][ T4250] usb 5-1: Manufacturer: syz [ 384.400310][ T4250] usb 5-1: SerialNumber: syz [ 384.415894][ T4250] usb 5-1: config 0 descriptor?? [ 384.461788][ T6464] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 384.469608][ T4555] udevd[4555]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 384.710799][ T6464] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 385.039660][ T6493] usb usb8: usbfs: process 6493 (syz.0.579) did not claim interface 0 before use [ 387.262978][ T4250] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 387.310723][ T4250] asix: probe of 5-1:0.188 failed with error -71 [ 387.352983][ T4250] usb 5-1: USB disconnect, device number 7 [ 387.768775][ T6504] Error parsing options; rc = [-22] [ 388.566559][ T6508] loop2: detected capacity change from 0 to 128 [ 388.841535][ T6510] netlink: 37 bytes leftover after parsing attributes in process `syz.3.582'. [ 389.763807][ T6508] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 389.811056][ T6508] ext4 filesystem being mounted at /120/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 389.843461][ T6516] loop1: detected capacity change from 0 to 128 [ 389.941620][ T6516] UDF-fs: bad mount option "1844674407370955161501777777777777777777777" or missing value [ 390.609819][ T6516] hfsplus: unable to find HFS+ superblock [ 393.356605][ T6538] loop4: detected capacity change from 0 to 512 [ 393.631034][ T6540] usb usb8: usbfs: process 6540 (syz.2.591) did not claim interface 0 before use [ 395.362834][ T6538] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 395.524026][ T6538] EXT4-fs (loop4): 1 truncate cleaned up [ 395.529756][ T6538] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 395.562708][ T6548] loop2: detected capacity change from 0 to 512 [ 395.654134][ T6548] EXT4-fs (loop2): failed to initialize system zone (-117) [ 395.661940][ T6548] EXT4-fs (loop2): mount failed [ 395.930658][ T4337] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 395.978511][ T6551] loop3: detected capacity change from 0 to 2048 [ 396.159874][ T6551] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 396.190638][ T4337] usb 5-1: Using ep0 maxpacket: 32 [ 396.340788][ T4337] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 396.359764][ T4337] usb 5-1: config 0 has no interface number 0 [ 396.385023][ T4337] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 396.601572][ T4337] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 396.624723][ T4337] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.697819][ T4337] usb 5-1: Product: syz [ 396.722539][ T4337] usb 5-1: Manufacturer: syz [ 396.750771][ T4337] usb 5-1: SerialNumber: syz [ 396.789314][ T4337] usb 5-1: config 0 descriptor?? [ 397.031079][ T4337] usb 5-1: can't set config #0, error -71 [ 397.073505][ T4337] usb 5-1: USB disconnect, device number 8 [ 397.659814][ T6564] usb usb8: usbfs: process 6564 (syz.4.596) did not claim interface 0 before use [ 398.392019][ T6566] loop1: detected capacity change from 0 to 8 [ 398.718486][ T6566] SQUASHFS error: zlib decompression failed, data probably corrupt [ 398.732614][ T6570] Error parsing options; rc = [-22] [ 398.810789][ T6566] SQUASHFS error: Failed to read block 0x4de: -5 [ 399.150064][ T6566] SQUASHFS error: Failed to read block 0x4e2: -5 [ 399.201382][ T6566] SQUASHFS error: Failed to read block 0x9ca: -5 [ 399.402643][ T6575] netlink: 37 bytes leftover after parsing attributes in process `syz.0.595'. [ 400.350900][ T6566] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 400.358608][ T6566] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 400.378659][ T6566] SQUASHFS error: Failed to read block 0x535f2: -5 [ 400.416717][ T26] audit: type=1800 audit(1770353607.840:23): pid=6566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.599" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 403.061386][ T6594] usb usb8: usbfs: process 6594 (syz.4.604) did not claim interface 0 before use [ 403.498021][ T6593] loop1: detected capacity change from 0 to 512 [ 403.817040][ T6593] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 405.359030][ T6593] EXT4-fs (loop1): 1 truncate cleaned up [ 405.371496][ T6593] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 405.730724][ T4337] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 407.026280][ T6616] netlink: 37 bytes leftover after parsing attributes in process `syz.3.611'. [ 407.767121][ T4337] usb 2-1: Using ep0 maxpacket: 32 [ 407.900810][ T4337] usb 2-1: device descriptor read/all, error -71 [ 410.014903][ T6623] Error parsing options; rc = [-22] [ 410.747540][ T6630] loop1: detected capacity change from 0 to 1024 [ 411.207442][ T6636] usb usb8: usbfs: process 6636 (syz.2.609) did not claim interface 0 before use [ 411.841664][ T6642] loop4: detected capacity change from 0 to 1024 [ 411.901235][ T6642] EXT4-fs (loop4): Ignoring removed orlov option [ 411.908123][ T6642] EXT4-fs (loop4): Ignoring removed bh option [ 412.042596][ T6642] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,orlov,data_err=ignore,grpquota,abort,resgid=0x0000000000000000,bh,nouid32,,errors=continue. Quota mode: writeback. [ 417.710713][ T4337] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 417.970786][ T4337] usb 1-1: Using ep0 maxpacket: 16 [ 419.649006][ T4337] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.691029][ T4337] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.740695][ T4337] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 419.750268][ T4337] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.839607][ T4337] usb 1-1: config 0 descriptor?? [ 419.860821][ T4337] usb 1-1: can't set config #0, error -71 [ 419.900840][ T4337] usb 1-1: USB disconnect, device number 6 [ 420.226164][ T6679] usb usb8: usbfs: process 6679 (syz.0.629) did not claim interface 0 before use [ 421.154983][ T6687] loop1: detected capacity change from 0 to 512 [ 421.933205][ T6687] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 423.750918][ T6687] EXT4-fs (loop1): 1 truncate cleaned up [ 423.756679][ T6687] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 425.510759][ T1109] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 425.618501][ T6705] loop0: detected capacity change from 0 to 1764 [ 425.830025][ T6709] loop1: detected capacity change from 0 to 2048 [ 426.024329][ T6709] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 428.630762][ T4337] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 431.020781][ T6725] netlink: 37 bytes leftover after parsing attributes in process `syz.4.637'. [ 431.161917][ T4441] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 431.260943][ T4441] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 431.311023][ T4337] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 431.321130][ T4441] EXT4-fs (loop1): This should not happen!! Data will be lost [ 431.321130][ T4441] [ 431.340724][ T4337] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 431.370727][ T4441] EXT4-fs (loop1): Total free blocks count 0 [ 431.377478][ T4441] EXT4-fs (loop1): Free/Dirty block details [ 431.384584][ T4337] usb 4-1: config 220 has no interface number 2 [ 431.410833][ T4337] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 431.455189][ T4337] usb 4-1: config 220 interface 0 has no altsetting 0 [ 431.462615][ T4441] EXT4-fs (loop1): free_blocks=2415919504 [ 431.468722][ T4441] EXT4-fs (loop1): dirty_blocks=2368 [ 431.490798][ T4337] usb 4-1: config 220 interface 76 has no altsetting 0 [ 431.497859][ T4337] usb 4-1: config 220 interface 1 has no altsetting 0 [ 431.500829][ T4441] EXT4-fs (loop1): Block reservation details [ 431.530788][ T4441] EXT4-fs (loop1): i_reserved_data_blocks=148 [ 431.590955][ T4337] usb 4-1: string descriptor 0 read error: -71 [ 431.599157][ T4337] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 431.616427][ T6736] loop3: detected capacity change from 0 to 256 [ 431.643408][ T4337] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.710981][ T4337] usb 4-1: can't set config #220, error -71 [ 431.754152][ T4337] usb 4-1: USB disconnect, device number 7 [ 431.812387][ T6709] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 312 with error 28 [ 431.836513][ T6709] EXT4-fs (loop1): This should not happen!! Data will be lost [ 431.836513][ T6709] [ 431.985335][ T6736] exFAT-fs (loop3): hint_cluster is invalid (17) [ 432.034474][ T6736] exFAT-fs (loop3): error, invalid dentry access beyond EOF (clu : 5, eidx : 129) [ 432.071519][ T6736] exFAT-fs (loop3): Filesystem has been set read-only [ 432.099449][ T6737] exFAT-fs (loop3): error, bogus directory size (clus : ondisk(2) != counted(1)) [ 434.455993][ T6757] loop0: detected capacity change from 0 to 512 [ 434.508784][ T6757] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 434.594418][ T6757] EXT4-fs (loop0): 1 truncate cleaned up [ 434.602634][ T6757] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 434.950930][ T6764] usb usb8: usbfs: process 6764 (syz.4.640) did not claim interface 0 before use [ 435.731148][ T4337] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 439.331631][ T6777] binder: 6776:6777 ioctl c0046209 100000000000000 returned -22 [ 439.443309][ T6778] loop1: detected capacity change from 0 to 8 [ 441.026038][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.033186][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.395364][ T6778] SQUASHFS error: Failed to read block 0x2000000000002d5: -5 [ 441.451111][ T6778] unable to read xattr id index table [ 441.716116][ T6786] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 443.237230][ T6804] loop3: detected capacity change from 0 to 256 [ 443.361713][ T4337] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 443.461759][ T6804] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 443.620964][ T4337] usb 3-1: Using ep0 maxpacket: 16 [ 443.772934][ T4337] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 443.824499][ T6804] input: syz0 as /devices/virtual/input/input6 [ 443.860298][ T4337] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 445.800654][ T6814] trusted_key: encrypted_key: insufficient parameters specified [ 446.401140][ T4337] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 446.410393][ T4337] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.640878][ T4337] usb 3-1: Product: syz [ 446.709600][ T6818] usb usb8: usbfs: process 6818 (syz.2.662) did not claim interface 0 before use [ 447.551427][ T4337] usb 3-1: can't set config #1, error -71 [ 447.569165][ T6822] loop2: detected capacity change from 0 to 256 [ 447.613295][ T6822] exfat: Deprecated parameter 'utf8' [ 447.618741][ T6822] exfat: Deprecated parameter 'namecase' [ 447.621335][ T4337] usb 3-1: USB disconnect, device number 4 [ 447.641828][ T6822] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 448.021702][ T6827] loop0: detected capacity change from 0 to 128 [ 448.153769][ T6828] loop2: detected capacity change from 0 to 512 [ 448.220633][ T6827] FAT-fs (loop0): bogus number of reserved sectors [ 448.250897][ T6827] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 448.277094][ T6827] FAT-fs (loop0): Can't find a valid FAT filesystem [ 449.050720][ T6828] EXT4-fs (loop2): failed to initialize system zone (-117) [ 449.086150][ T6828] EXT4-fs (loop2): mount failed [ 458.424678][ T6862] loop1: detected capacity change from 0 to 512 [ 458.545380][ T6862] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 458.667730][ T6862] EXT4-fs (loop1): 1 truncate cleaned up [ 458.722318][ T6862] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 459.083906][ T4174] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 459.330879][ T4174] usb 2-1: Using ep0 maxpacket: 32 [ 459.470868][ T4174] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 459.489530][ T4174] usb 2-1: config 0 has no interface number 0 [ 459.520238][ T4174] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 459.710997][ T4174] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 459.761346][ T4174] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.784295][ T4174] usb 2-1: Product: syz [ 459.788567][ T4174] usb 2-1: Manufacturer: syz [ 459.796316][ T4174] usb 2-1: SerialNumber: syz [ 459.826818][ T4174] usb 2-1: config 0 descriptor?? [ 459.877368][ T6862] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 459.886928][ T4337] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 460.111041][ T4337] usb 5-1: device descriptor read/64, error -71 [ 460.145328][ T6877] usb usb8: usbfs: process 6877 (syz.0.674) did not claim interface 0 before use [ 460.355132][ T6862] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 460.480800][ T4337] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 460.916576][ T6881] loop0: detected capacity change from 0 to 2048 [ 460.978068][ T6881] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 461.000641][ T4337] usb 5-1: device descriptor read/64, error -71 [ 461.131610][ T4337] usb usb5-port1: attempt power cycle [ 461.590795][ T4337] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 461.741858][ T4337] usb 5-1: device descriptor read/8, error -71 [ 462.129316][ T6888] loop0: detected capacity change from 0 to 1024 [ 462.156311][ T4337] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 462.202640][ T6888] EXT4-fs (loop0): Ignoring removed orlov option [ 462.219495][ T6888] EXT4-fs (loop0): Ignoring removed bh option [ 462.280972][ T4337] usb 5-1: device descriptor read/8, error -71 [ 462.324946][ T6888] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,orlov,data_err=ignore,grpquota,abort,resgid=0x0000000000000000,bh,nouid32,,errors=continue. Quota mode: writeback. [ 462.400833][ T4337] usb usb5-port1: unable to enumerate USB device [ 463.310762][ T4174] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 463.360749][ T4174] asix: probe of 2-1:0.188 failed with error -71 [ 463.449373][ T4174] usb 2-1: USB disconnect, device number 15 [ 464.241298][ T6906] loop4: detected capacity change from 0 to 512 [ 466.380112][ T6906] EXT4-fs (loop4): failed to initialize system zone (-117) [ 466.404218][ T13] Bluetooth: hci5: command 0x0409 tx timeout [ 466.422463][ T6906] EXT4-fs (loop4): mount failed [ 468.090346][ T6899] chnl_net:caif_netlink_parms(): no params data found [ 468.164368][ T6935] usb usb8: usbfs: process 6935 (syz.3.687) did not claim interface 0 before use [ 468.790583][ T1109] Bluetooth: hci5: command 0x041b tx timeout [ 469.217139][ T6899] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.224999][ T1109] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 469.277997][ T6899] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.324558][ T6899] device bridge_slave_0 entered promiscuous mode [ 469.360882][ T6899] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.374076][ T6899] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.398053][ T6899] device bridge_slave_1 entered promiscuous mode [ 469.440691][ T1109] usb 4-1: device descriptor read/64, error -71 [ 469.499172][ T6899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.545045][ T6899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.720680][ T1109] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 469.781425][ T6899] team0: Port device team_slave_0 added [ 469.813314][ T6899] team0: Port device team_slave_1 added [ 469.930634][ T1109] usb 4-1: device descriptor read/64, error -71 [ 470.034370][ T6899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.237615][ T6948] blktrace: Concurrent blktraces are not allowed on loop8 [ 470.315947][ T6899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.343695][ T1109] usb usb4-port1: attempt power cycle [ 470.400751][ T6899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.651230][ T6951] Error parsing options; rc = [-22] [ 471.978109][ T4174] Bluetooth: hci5: command 0x040f tx timeout [ 472.133291][ T6899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.210035][ T6899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.041508][ T13] Bluetooth: hci5: command 0x0419 tx timeout [ 474.109847][ T6899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.265035][ T6899] device hsr_slave_0 entered promiscuous mode [ 474.307919][ T6899] device hsr_slave_1 entered promiscuous mode [ 474.390815][ T6899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 474.420902][ T6899] Cannot create hsr debugfs directory [ 475.052509][ T6899] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 475.099004][ T6964] loop2: detected capacity change from 0 to 1024 [ 475.134942][ T6899] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 475.171012][ T6899] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 475.201771][ T6899] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 475.411452][ T144] hfsplus: b-tree write err: -5, ino 3 [ 475.591926][ T6899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.663116][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 475.761472][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 475.822468][ T6899] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.901410][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 475.922651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 477.606517][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.613696][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.739346][ T6982] usb usb8: usbfs: process 6982 (syz.4.696) did not claim interface 0 before use [ 478.512399][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 478.533551][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 478.562613][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 478.581484][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.588676][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.659061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 478.739353][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 478.761998][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 478.808815][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 478.860947][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 478.884938][ T6990] loop4: detected capacity change from 0 to 512 [ 478.911836][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 478.981240][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 479.011627][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 479.100959][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 479.215668][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 479.261580][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 479.284486][ T6997] netlink: 'syz.2.703': attribute type 3 has an invalid length. [ 479.310073][ T6990] EXT4-fs (loop4): failed to initialize system zone (-117) [ 479.330439][ T6899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 479.350679][ T13] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 479.362555][ T6990] EXT4-fs (loop4): mount failed [ 479.550792][ T13] usb 4-1: device descriptor read/64, error -71 [ 479.601504][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 479.641991][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 479.663828][ T6899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.941429][ T13] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 480.036706][ T7008] loop2: detected capacity change from 0 to 512 [ 480.151293][ T13] usb 4-1: device descriptor read/64, error -71 [ 480.182703][ T7008] EXT4-fs (loop2): inline encryption not supported [ 480.211020][ T7008] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 480.211020][ T7008] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 480.211020][ T7008] [ 480.270909][ T7008] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 480.284084][ T13] usb usb4-port1: attempt power cycle [ 480.320762][ T7008] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 480.528996][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 480.555390][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 480.700887][ T13] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 480.711419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 480.743276][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 480.795295][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 480.831015][ T13] usb 4-1: device descriptor read/8, error -71 [ 480.833721][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 480.889122][ T6899] device veth0_vlan entered promiscuous mode [ 480.943453][ T6899] device veth1_vlan entered promiscuous mode [ 481.119092][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 481.140746][ T13] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 481.190871][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 481.228363][ T6899] device veth0_macvtap entered promiscuous mode [ 481.290995][ T13] usb 4-1: device descriptor read/8, error -71 [ 481.320015][ T6899] device veth1_macvtap entered promiscuous mode [ 481.496334][ T13] usb usb4-port1: unable to enumerate USB device [ 481.500190][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.520561][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.940854][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.001895][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.016010][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.030903][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.052778][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.064475][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.356271][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.428915][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.473412][ T6899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.500474][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 482.509041][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 482.571410][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 482.609896][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 483.347340][ T7027] Error parsing options; rc = [-22] [ 483.923184][ T7020] netlink: 37 bytes leftover after parsing attributes in process `syz.0.706'. [ 483.963058][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.002385][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.020826][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.040875][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.052602][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.072910][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.091102][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.169587][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.212227][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.896464][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.949573][ T6899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.019431][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 486.048414][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 486.095976][ T6899] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.126159][ T6899] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.167377][ T6899] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.200570][ T6899] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.360014][ T4441] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.606533][ T4441] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.712502][ T4447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.748275][ T4447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.820138][ T4441] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.888793][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 486.956828][ T4441] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.033769][ T4447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.077330][ T4447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.178115][ T6518] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 488.682339][ T7044] blktrace: Concurrent blktraces are not allowed on loop8 [ 492.538800][ T7065] loop0: detected capacity change from 0 to 512 [ 492.900847][ T7065] EXT4-fs (loop0): failed to initialize system zone (-117) [ 492.908401][ T7065] EXT4-fs (loop0): mount failed [ 493.378476][ T7082] usb usb8: usbfs: process 7082 (syz.3.720) did not claim interface 0 before use [ 494.032711][ T4441] device hsr_slave_0 left promiscuous mode [ 494.757933][ T7098] Error parsing options; rc = [-22] [ 495.418031][ T4441] device hsr_slave_1 left promiscuous mode [ 495.438228][ T4441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.487393][ T4441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.133342][ T4441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.172221][ T4441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.245375][ T4441] device bridge_slave_1 left promiscuous mode [ 497.263032][ T4441] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.554833][ T4441] device bridge_slave_0 left promiscuous mode [ 497.592879][ T4441] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.631502][ T4441] device veth1_macvtap left promiscuous mode [ 498.648253][ T7114] loop3: detected capacity change from 0 to 512 [ 498.650184][ T4441] device veth0_macvtap left promiscuous mode [ 498.677031][ T4441] device veth1_vlan left promiscuous mode [ 498.707796][ T4441] device veth0_vlan left promiscuous mode [ 498.862379][ T1112] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 498.882509][ T7114] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.723: inode #1: comm syz.3.723: iget: illegal inode # [ 499.072450][ T1112] usb 5-1: device descriptor read/64, error -71 [ 499.079570][ T7114] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.723: error while reading EA inode 1 err=-117 [ 499.215467][ T7114] EXT4-fs (loop3): 1 orphan inode deleted [ 499.231591][ T7114] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x0000000000000010,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 499.340685][ T1112] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 499.531710][ T1112] usb 5-1: device descriptor read/64, error -71 [ 499.655523][ T1112] usb usb5-port1: attempt power cycle [ 500.740663][ T1112] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 500.891030][ T1112] usb 5-1: device descriptor read/8, error -71 [ 501.279157][ T4441] team0 (unregistering): Port device team_slave_1 removed [ 501.290689][ T1112] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 501.385338][ T4441] team0 (unregistering): Port device team_slave_0 removed [ 501.401184][ T1112] usb 5-1: device descriptor read/8, error -71 [ 501.483855][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.491009][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.520858][ T1112] usb usb5-port1: unable to enumerate USB device [ 501.596050][ T4441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.743928][ T4441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.007187][ T7137] usb usb8: usbfs: process 7137 (syz.4.731) did not claim interface 0 before use [ 505.753900][ T4441] bond0 (unregistering): Released all slaves [ 506.136635][ T7151] loop5: detected capacity change from 0 to 128 [ 506.267177][ T7152] fuse: Bad value for 'fd' [ 507.022237][ T7151] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 507.070860][ T7151] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 507.858058][ T7164] Error parsing options; rc = [-22] [ 508.544822][ T7151] fscrypt (loop5, inode 12): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS [ 508.599084][ T7166] loop0: detected capacity change from 0 to 2048 [ 509.060554][ T7166] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 509.161104][ T4250] Bluetooth: hci3: command 0x0409 tx timeout [ 509.416568][ T7178] usb usb8: usbfs: process 7178 (syz.5.739) did not claim interface 0 before use [ 510.382767][ T7156] chnl_net:caif_netlink_parms(): no params data found [ 511.248885][ T1109] Bluetooth: hci3: command 0x041b tx timeout [ 511.265713][ T7156] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.391017][ T7156] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.420691][ T7156] device bridge_slave_0 entered promiscuous mode [ 511.496004][ T7156] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.556911][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.601844][ T7195] usb usb8: usbfs: process 7195 (syz.0.742) did not claim interface 0 before use [ 511.685354][ T7156] device bridge_slave_1 entered promiscuous mode [ 511.896349][ T7156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.021692][ T4250] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 512.078686][ T7156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.532811][ T7156] team0: Port device team_slave_0 added [ 513.560631][ T4250] usb 4-1: device descriptor read/64, error -71 [ 513.587872][ T1109] Bluetooth: hci3: command 0x040f tx timeout [ 513.606621][ T7206] loop5: detected capacity change from 0 to 256 [ 513.687308][ T7156] team0: Port device team_slave_1 added [ 513.712411][ T7206] exfat: Deprecated parameter 'utf8' [ 513.718596][ T7206] exfat: Deprecated parameter 'namecase' [ 513.740767][ T7206] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 513.830611][ T4250] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 513.911775][ T7156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.940221][ T7156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.050723][ T4250] usb 4-1: device descriptor read/64, error -71 [ 514.055827][ T7156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.180723][ T7156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.187759][ T7156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.191446][ T4250] usb usb4-port1: attempt power cycle [ 514.340072][ T7156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.524917][ T7156] device hsr_slave_0 entered promiscuous mode [ 515.656564][ T7156] device hsr_slave_1 entered promiscuous mode [ 515.710823][ T7156] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 515.718461][ T7156] Cannot create hsr debugfs directory [ 515.721317][ T4174] Bluetooth: hci3: command 0x0419 tx timeout [ 515.987687][ T7229] usb usb8: usbfs: process 7229 (syz.3.749) did not claim interface 0 before use [ 517.231373][ T7236] Error parsing options; rc = [-22] [ 517.753704][ T7156] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 517.833974][ T7156] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 517.953626][ T7156] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 518.003284][ T7156] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 519.252478][ T7262] netlink: 20 bytes leftover after parsing attributes in process `syz.0.753'. [ 521.028407][ T7156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.208572][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 521.234783][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 521.293086][ T7156] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.339820][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 521.396028][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 521.412459][ T4435] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.419767][ T4435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.457942][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 521.485081][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 521.498284][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 521.547597][ T4435] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.554933][ T4435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.947707][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 522.066393][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 522.261730][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 522.451669][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 522.640405][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 522.719201][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 522.769431][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 522.812479][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 522.888300][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 522.959280][ T7156] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 523.011652][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 523.088681][ T7288] usb usb8: usbfs: process 7288 (syz.4.759) did not claim interface 0 before use [ 523.782203][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 523.849058][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 524.442365][ T7156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.449772][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 524.463249][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 525.699541][ T4441] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.776245][ T7309] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 525.836592][ T4441] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.930676][ T4309] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 525.967985][ T4441] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.140658][ T4309] usb 6-1: device descriptor read/64, error -71 [ 526.159732][ T7319] netlink: 'syz.0.763': attribute type 3 has an invalid length. [ 526.283003][ T7317] Error parsing options; rc = [-22] [ 526.356672][ T4441] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.393211][ T7323] loop0: detected capacity change from 0 to 1024 [ 526.410794][ T4309] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 526.526965][ T7323] hfsplus: request for non-existent node 16777216 in B*Tree [ 526.608037][ T7323] hfsplus: request for non-existent node 16777216 in B*Tree [ 526.617662][ T4309] usb 6-1: device descriptor read/64, error -71 [ 526.676003][ T7323] hfsplus: request for non-existent node 16777216 in B*Tree [ 526.740943][ T4309] usb usb6-port1: attempt power cycle [ 526.754191][ T7323] hfsplus: request for non-existent node 16777216 in B*Tree [ 526.788110][ T7323] hfsplus: request for non-existent node 16777216 in B*Tree [ 526.861125][ T7323] hfsplus: request for non-existent node 16777216 in B*Tree [ 526.886436][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 526.902572][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 526.934245][ T7323] hfsplus: request for non-existent node 16777216 in B*Tree [ 526.956842][ T7323] hfsplus: request for non-existent node 16777216 in B*Tree [ 527.019629][ T7323] hfsplus: request for non-existent node 16777216 in B*Tree [ 527.046615][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 527.077310][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 527.106112][ T7323] hfsplus: request for non-existent node 16777216 in B*Tree [ 527.119189][ T7156] device veth0_vlan entered promiscuous mode [ 527.138548][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 527.170682][ T4309] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 527.178887][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 527.219126][ T7323] hfsplus: request for non-existent node 16777216 in B*Tree [ 527.236468][ T7156] device veth1_vlan entered promiscuous mode [ 527.275975][ T7323] hfsplus: request for non-existent node 16777216 in B*Tree [ 527.283617][ T4309] usb 6-1: device descriptor read/8, error -71 [ 527.386674][ T7323] hfsplus: request for non-existent node 16777216 in B*Tree [ 527.447737][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 527.467194][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 527.493094][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 527.511454][ T7323] hfsplus: request for non-existent node 16777216 in B*Tree [ 527.534148][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 527.535953][ T7323] hfsplus: request for non-existent node 16777216 in B*Tree [ 527.550666][ T4309] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 527.574870][ T7156] device veth0_macvtap entered promiscuous mode [ 527.606861][ T7323] hfsplus: request for non-existent node 16777216 in B*Tree [ 527.623840][ T7156] device veth1_macvtap entered promiscuous mode [ 527.641119][ T4309] usb 6-1: device descriptor read/8, error -71 [ 527.682366][ T7323] hfsplus: request for non-existent node 16777216 in B*Tree [ 527.689890][ T7156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.741525][ T7323] hfsplus: request for non-existent node 16777216 in B*Tree [ 527.761687][ T4309] usb usb6-port1: unable to enumerate USB device [ 527.780115][ T7156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.780447][ T7323] hfsplus: request for non-existent node 16777216 in B*Tree [ 527.829960][ T7323] hfsplus: request for non-existent node 16777216 in B*Tree [ 527.848751][ T7156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.869627][ T7323] hfsplus: request for non-existent node 16777216 in B*Tree [ 527.910082][ T7156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.950690][ T7156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.960876][ T7323] hfsplus: request for non-existent node 16777216 in B*Tree [ 527.989230][ T7323] hfsplus: request for non-existent node 16777216 in B*Tree [ 527.990989][ T7156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.010080][ T7323] hfsplus: request for non-existent node 16777216 in B*Tree [ 528.044628][ T7323] hfsplus: request for non-existent node 16777216 in B*Tree [ 528.070727][ T7323] hfsplus: request for non-existent node 16777216 in B*Tree [ 528.070740][ T7156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.070762][ T7156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.094993][ T7323] hfsplus: request for non-existent node 16777216 in B*Tree [ 528.126712][ T7323] hfsplus: request for non-existent node 16777216 in B*Tree [ 528.180904][ T7323] hfsplus: request for non-existent node 16777216 in B*Tree [ 528.274881][ T7156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.286090][ T7156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.297907][ T7156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.308928][ T7156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.320201][ T7156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.330148][ T7156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.340981][ T7323] hfsplus: request for non-existent node 16777216 in B*Tree [ 528.349268][ T26] audit: type=1800 audit(1770353735.770:24): pid=7323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.764" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 529.661866][ T7156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.672081][ T7156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.682910][ T7156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.696494][ T7156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.707472][ T7156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.717844][ T7156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.735332][ T7156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.900661][ T7156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 529.940090][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 529.954109][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 530.068136][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 530.172709][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 531.019721][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 531.079459][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 531.146665][ T7156] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.190597][ T7156] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.450546][ T7358] usb usb8: usbfs: process 7358 (syz.4.769) did not claim interface 0 before use [ 531.868810][ T7156] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.947997][ T7156] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.441438][ T7364] fuse: Bad value for 'fd' [ 533.584789][ T7369] loop0: detected capacity change from 0 to 8 [ 533.650891][ T1248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.659613][ T1248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.810767][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 533.829170][ T4430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.887960][ T4430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.029539][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 535.807595][ T4441] device hsr_slave_0 left promiscuous mode [ 535.926923][ T4441] device hsr_slave_1 left promiscuous mode [ 535.957791][ T4441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.022516][ T4441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.058495][ T7389] Error parsing options; rc = [-22] [ 536.089381][ T4441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 536.111336][ T4441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.201713][ T4441] device bridge_slave_1 left promiscuous mode [ 536.218831][ T4441] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.270119][ T4441] device bridge_slave_0 left promiscuous mode [ 536.321209][ T4441] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.457705][ T4441] device veth1_macvtap left promiscuous mode [ 536.477520][ T4441] device veth0_macvtap left promiscuous mode [ 536.540752][ T4441] device veth1_vlan left promiscuous mode [ 536.569309][ T4441] device veth0_vlan left promiscuous mode [ 537.910642][ T4197] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 538.153550][ T4441] team0 (unregistering): Port device team_slave_1 removed [ 538.170760][ T4197] usb 6-1: Using ep0 maxpacket: 16 [ 538.225418][ T4441] team0 (unregistering): Port device team_slave_0 removed [ 538.300804][ T4197] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 538.329790][ T4441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 538.349352][ T4197] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 538.389459][ T4441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 538.600962][ T4197] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 538.631272][ T4197] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.688995][ T4197] usb 6-1: Product: syz [ 538.718264][ T4197] usb 6-1: Manufacturer: syz [ 538.740855][ T4197] usb 6-1: SerialNumber: syz [ 538.878532][ T4441] bond0 (unregistering): Released all slaves [ 539.111000][ T4197] usb 6-1: 0:2 : does not exist [ 539.350934][ T4197] usb 6-1: USB disconnect, device number 6 [ 539.698256][ T7425] usb usb8: usbfs: process 7425 (syz.4.780) did not claim interface 0 before use [ 540.788988][ T7430] netlink: 20 bytes leftover after parsing attributes in process `syz.4.781'. [ 540.853024][ T4555] udevd[4555]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 545.558676][ T7474] Error parsing options; rc = [-22] [ 546.468587][ T7483] netlink: 'syz.5.786': attribute type 3 has an invalid length. [ 549.935906][ T7506] netlink: 20 bytes leftover after parsing attributes in process `syz.4.795'. [ 552.519604][ T7524] usb usb8: usbfs: process 7524 (syz.6.791) did not claim interface 0 before use [ 555.217317][ T7540] loop0: detected capacity change from 0 to 512 [ 555.326709][ T7540] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 555.399393][ T7540] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 555.418010][ T7540] System zones: 1-12 [ 555.572995][ T7540] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 555.631465][ T7540] EXT4-fs (loop0): 1 truncate cleaned up [ 555.637254][ T7540] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 555.684023][ T7549] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 561.201999][ T7603] Error parsing options; rc = [-22] [ 563.175978][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.182500][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.184973][ T4199] Bluetooth: hci3: link tx timeout [ 563.194423][ T4199] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 563.280653][ T1112] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 563.339460][ T7617] loop6: detected capacity change from 0 to 256 [ 563.415618][ T7617] exfat: Deprecated parameter 'utf8' [ 563.442307][ T7617] exfat: Deprecated parameter 'namecase' [ 563.553556][ T7617] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 563.690878][ T1112] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.737264][ T1112] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 564.014803][ T1112] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 564.040808][ T1112] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.048900][ T1112] usb 5-1: Product: syz [ 564.097862][ T1112] usb 5-1: Manufacturer: syz [ 564.128990][ T1112] usb 5-1: SerialNumber: syz [ 564.178972][ T7624] loop6: detected capacity change from 0 to 16 [ 564.212276][ T1112] cdc_ncm 5-1:1.0: skipping garbage [ 564.217578][ T1112] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 564.263536][ T1112] cdc_ncm 5-1:1.0: bind() failure [ 564.297962][ T1112] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 564.301665][ T7624] erofs: (device loop6): mounted with root inode @ nid 36. [ 564.329759][ T1112] cdc_ncm 5-1:1.1: bind() failure [ 564.542173][ T7628] attempt to access beyond end of device [ 564.542173][ T7628] loop6: rw=0, want=40, limit=16 [ 564.560836][ T7630] sock: sock_timestamping_bind_phc: sock not bind to device [ 564.728385][ T1112] usb 5-1: USB disconnect, device number 17 [ 564.772951][ T7631] attempt to access beyond end of device [ 564.772951][ T7631] loop6: rw=524288, want=48, limit=16 [ 564.794917][ T7635] netlink: 20 bytes leftover after parsing attributes in process `syz.0.814'. [ 565.933541][ T1112] Bluetooth: hci3: command 0x0406 tx timeout [ 566.513099][ T7649] loop4: detected capacity change from 0 to 2048 [ 566.608970][ T7653] loop3: detected capacity change from 0 to 256 [ 566.645277][ T7649] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 566.947541][ T7653] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 567.030792][ T7653] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 567.079637][ T7653] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 567.427887][ T26] audit: type=1800 audit(1770353774.850:25): pid=7653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.817" name="file0" dev="loop3" ino=1048634 res=0 errno=0 [ 569.381818][ T7677] Error parsing options; rc = [-22] [ 569.438663][ T7683] netlink: 'syz.4.824': attribute type 3 has an invalid length. [ 570.712395][ T7701] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 573.487561][ T7725] xt_CT: You must specify a L4 protocol and not use inversions on it [ 575.141056][ T7731] loop5: detected capacity change from 0 to 2048 [ 575.312594][ T7731] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 577.716555][ T7758] Error parsing options; rc = [-22] [ 577.745448][ T7752] Error parsing options; rc = [-22] [ 577.827173][ T7761] fuse: Bad value for 'fd' [ 580.100791][ T7110] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 580.470851][ T7110] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 580.523452][ T7110] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 580.563552][ T7110] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.611667][ T7110] usb 5-1: config 0 descriptor?? [ 580.650979][ T7775] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 581.334970][ T7110] elan 0003:04F3:0755.0003: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 581.423407][ T7798] usb usb8: usbfs: process 7798 (syz.5.842) did not claim interface 0 before use [ 581.977781][ T7110] usb 5-1: USB disconnect, device number 18 [ 582.002396][ T7797] netlink: 20 bytes leftover after parsing attributes in process `syz.0.838'. [ 582.525870][ T7800] fido_id[7800]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 582.577409][ T7808] loop0: detected capacity change from 0 to 2048 [ 582.776965][ T7808] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 584.824535][ T7817] netlink: 37 bytes leftover after parsing attributes in process `syz.4.846'. [ 584.844339][ T7] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 585.571402][ T7] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 585.636235][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.001478][ T7] usb 6-1: config 0 descriptor?? [ 586.868880][ T7] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 587.090688][ T7] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 587.131878][ T7] [drm:udl_init] *ERROR* Selecting channel failed [ 587.212951][ T7] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2 [ 587.230550][ T7] [drm] Initialized udl on minor 2 [ 587.431740][ T7] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 587.472100][ T7855] usb usb8: usbfs: process 7855 (syz.5.853) did not claim interface 0 before use [ 587.533486][ T7] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 587.662717][ T7] usb 6-1: USB disconnect, device number 7 [ 587.738197][ T4250] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 588.166171][ T7849] Error parsing options; rc = [-22] [ 588.192140][ T4250] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 588.421652][ T4250] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 591.183096][ T7874] Error parsing options; rc = [-22] [ 591.276255][ T7869] loop5: detected capacity change from 0 to 256 [ 591.441148][ T7869] exfat: Deprecated parameter 'utf8' [ 591.446745][ T7869] exfat: Deprecated parameter 'namecase' [ 591.640149][ T7869] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 592.257166][ T7893] loop5: detected capacity change from 0 to 1024 [ 592.524667][ T7893] EXT4-fs (loop5): Ignoring removed orlov option [ 592.611219][ T7893] EXT4-fs (loop5): Ignoring removed bh option [ 592.941739][ T7893] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,orlov,data_err=ignore,grpquota,abort,resgid=0x0000000000000000,bh,nouid32,,errors=continue. Quota mode: writeback. [ 594.910944][ T7911] netlink: 37 bytes leftover after parsing attributes in process `syz.6.861'. [ 599.055256][ T7940] Error parsing options; rc = [-22] [ 599.622664][ T7954] loop3: detected capacity change from 0 to 8 [ 600.765574][ T7954] SQUASHFS error: lzo decompression failed, data probably corrupt [ 600.979062][ T7954] SQUASHFS error: Failed to read block 0x1c0: -5 [ 601.009569][ T7954] SQUASHFS error: Unable to read metadata cache entry [1be] [ 601.033096][ T7961] netlink: 20 bytes leftover after parsing attributes in process `syz.5.870'. [ 601.790974][ T7973] loop6: detected capacity change from 0 to 1024 [ 601.857861][ T7973] EXT4-fs (loop6): Ignoring removed orlov option [ 601.907813][ T7973] EXT4-fs (loop6): Ignoring removed bh option [ 602.021520][ T7973] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,orlov,data_err=ignore,grpquota,abort,resgid=0x0000000000000000,bh,nouid32,,errors=continue. Quota mode: writeback. [ 605.942993][ T8004] Error parsing options; rc = [-22] [ 606.390548][ T1112] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 606.710740][ T1112] usb 1-1: Using ep0 maxpacket: 8 [ 606.769695][ T8011] loop5: detected capacity change from 0 to 1024 [ 606.841095][ T1112] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 606.849436][ T1112] usb 1-1: config 179 has no interface number 0 [ 606.930531][ T1112] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 606.998229][ T1112] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 607.044316][ T1112] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 607.117369][ T1112] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 607.170045][ T1112] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 607.214143][ T1112] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.311745][ T8012] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 607.590158][ T7110] usb 1-1: USB disconnect, device number 8 [ 607.600560][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 607.608961][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 607.618304][ C0] ================================================================== [ 607.626409][ C0] BUG: KASAN: use-after-free in register_lock_class+0x7f8/0x890 [ 607.634172][ C0] Read of size 1 at addr ffff888078a09091 by task kworker/u4:7/4315 [ 607.642162][ C0] [ 607.644527][ C0] CPU: 0 PID: 4315 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 607.652087][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 607.662206][ C0] Workqueue: bat_events batadv_nc_worker [ 607.667909][ C0] Call Trace: [ 607.671217][ C0] [ 607.674110][ C0] dump_stack_lvl+0x188/0x250 [ 607.678813][ C0] ? show_regs_print_info+0x20/0x20 [ 607.684067][ C0] ? load_image+0x400/0x400 [ 607.688602][ C0] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 607.694086][ C0] print_address_description+0x60/0x2d0 [ 607.699659][ C0] ? register_lock_class+0x7f8/0x890 [ 607.704958][ C0] kasan_report+0xdf/0x130 [ 607.709393][ C0] ? register_lock_class+0x7f8/0x890 [ 607.714699][ C0] register_lock_class+0x7f8/0x890 [ 607.719826][ C0] ? is_dynamic_key+0x1f0/0x1f0 [ 607.724692][ C0] ? __down_trylock_console_sem+0x19f/0x1f0 [ 607.730590][ C0] ? vprintk_emit+0xa7/0x150 [ 607.735313][ C0] __lock_acquire+0x16f/0x7d10 [ 607.740250][ C0] ? mark_lock+0x94/0x320 [ 607.744602][ C0] ? __lock_acquire+0x13bc/0x7d10 [ 607.749660][ C0] ? mark_lock+0x94/0x320 [ 607.754152][ C0] ? __lock_acquire+0x13bc/0x7d10 [ 607.759193][ C0] ? verify_lock_unused+0x140/0x140 [ 607.764417][ C0] lock_acquire+0x19e/0x400 [ 607.768949][ C0] ? __wake_up+0xf4/0x180 [ 607.773293][ C0] ? read_lock_is_recursive+0x10/0x10 [ 607.778687][ C0] _raw_spin_lock_irqsave+0xb0/0x100 [ 607.783997][ C0] ? __wake_up+0xf4/0x180 [ 607.788341][ C0] ? _raw_spin_lock+0x40/0x40 [ 607.793057][ C0] __wake_up+0xf4/0x180 [ 607.797410][ C0] ? remove_wait_queue+0x120/0x120 [ 607.802550][ C0] ? _raw_spin_unlock+0x24/0x40 [ 607.807451][ C0] __usb_hcd_giveback_urb+0x396/0x520 [ 607.812842][ C0] dummy_timer+0x8a8/0x31e0 [ 607.817382][ C0] ? dummy_free_streams+0x530/0x530 [ 607.822857][ C0] ? dummy_free_streams+0x530/0x530 [ 607.828077][ C0] call_timer_fn+0x17b/0x540 [ 607.832706][ C0] ? dummy_free_streams+0x530/0x530 [ 607.837928][ C0] ? __run_timers+0x7f0/0x7f0 [ 607.842619][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 607.847854][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 607.853153][ C0] ? dummy_free_streams+0x530/0x530 [ 607.858359][ C0] __run_timers+0x53a/0x7f0 [ 607.862875][ C0] ? detach_timer+0x2b0/0x2b0 [ 607.867562][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 607.873560][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 607.878425][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 607.883723][ C0] run_timer_softirq+0x63/0xf0 [ 607.888515][ C0] handle_softirqs+0x339/0x830 [ 607.893291][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 607.898147][ C0] ? do_softirq+0x210/0x210 [ 607.902662][ C0] __irq_exit_rcu+0x13b/0x230 [ 607.907344][ C0] ? irq_exit_rcu+0x20/0x20 [ 607.911861][ C0] irq_exit_rcu+0x5/0x20 [ 607.916108][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 607.921759][ C0] [ 607.924716][ C0] [ 607.927658][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 607.933686][ C0] RIP: 0010:lock_acquire+0x208/0x400 [ 607.939080][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f1 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 607.958697][ C0] RSP: 0018:ffffc9000343faa0 EFLAGS: 00000206 [ 607.964780][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: b9f3ba7cfd525b00 [ 607.972935][ C0] RDX: 0000000000000000 RSI: ffffffff8a2b3a20 RDI: ffffffff8a79f780 [ 607.980915][ C0] RBP: ffffc9000343fbc0 R08: dffffc0000000000 R09: 1ffffffff203a218 [ 607.988901][ C0] R10: dffffc0000000000 R11: fffffbfff203a219 R12: ffffffff8c31eaa0 [ 607.996973][ C0] R13: 1ffff92000687f60 R14: 0000000000000246 R15: dffffc0000000000 [ 608.004976][ C0] ? rcu_lock_release+0x5/0x20 [ 608.009760][ C0] ? read_lock_is_recursive+0x10/0x10 [ 608.015146][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 608.020183][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 608.026207][ C0] rcu_lock_acquire+0x2a/0x30 [ 608.030904][ C0] ? rcu_lock_acquire+0x5/0x30 [ 608.035674][ C0] batadv_nc_worker+0xc9/0x5c0 [ 608.040462][ C0] process_one_work+0x85f/0x1010 [ 608.045505][ C0] ? worker_detach_from_pool+0x240/0x240 [ 608.051192][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 608.056498][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 608.061551][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 608.067120][ C0] ? wq_worker_running+0x97/0x170 [ 608.072164][ C0] worker_thread+0xaa6/0x1290 [ 608.076882][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 608.082368][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 608.088413][ C0] kthread+0x436/0x520 [ 608.092508][ C0] ? rcu_lock_release+0x20/0x20 [ 608.097373][ C0] ? kthread_blkcg+0xd0/0xd0 [ 608.102235][ C0] ret_from_fork+0x1f/0x30 [ 608.106719][ C0] [ 608.109765][ C0] [ 608.112095][ C0] Allocated by task 1112: [ 608.116538][ C0] __kasan_kmalloc+0xb5/0xf0 [ 608.121146][ C0] xpad_probe+0x3f6/0x1b20 [ 608.125566][ C0] usb_probe_interface+0x5c5/0xb20 [ 608.130712][ C0] really_probe+0x284/0xc80 [ 608.135232][ C0] __driver_probe_device+0x18c/0x330 [ 608.140524][ C0] driver_probe_device+0x4f/0x420 [ 608.145551][ C0] __device_attach_driver+0x2b0/0x500 [ 608.150930][ C0] bus_for_each_drv+0x184/0x210 [ 608.155852][ C0] __device_attach+0x2a8/0x480 [ 608.160626][ C0] bus_probe_device+0xbc/0x1e0 [ 608.165539][ C0] device_add+0xa00/0xfb0 [ 608.170210][ C0] usb_set_configuration+0x1991/0x1fd0 [ 608.175693][ C0] usb_generic_driver_probe+0x89/0x150 [ 608.181160][ C0] usb_probe_device+0x139/0x270 [ 608.186047][ C0] really_probe+0x284/0xc80 [ 608.190559][ C0] __driver_probe_device+0x18c/0x330 [ 608.195857][ C0] driver_probe_device+0x4f/0x420 [ 608.200894][ C0] __device_attach_driver+0x2b0/0x500 [ 608.206301][ C0] bus_for_each_drv+0x184/0x210 [ 608.211262][ C0] __device_attach+0x2a8/0x480 [ 608.216110][ C0] bus_probe_device+0xbc/0x1e0 [ 608.220910][ C0] device_add+0xa00/0xfb0 [ 608.225287][ C0] usb_new_device+0xd65/0x1660 [ 608.230064][ C0] hub_event+0x2e4a/0x55e0 [ 608.234490][ C0] process_one_work+0x85f/0x1010 [ 608.239526][ C0] worker_thread+0xaa6/0x1290 [ 608.244215][ C0] kthread+0x436/0x520 [ 608.248294][ C0] ret_from_fork+0x1f/0x30 [ 608.252722][ C0] [ 608.255071][ C0] Freed by task 7110: [ 608.259054][ C0] kasan_set_track+0x4b/0x70 [ 608.263667][ C0] kasan_set_free_info+0x1f/0x40 [ 608.268634][ C0] ____kasan_slab_free+0xd5/0x110 [ 608.273807][ C0] slab_free_freelist_hook+0xea/0x170 [ 608.279213][ C0] kfree+0xef/0x2a0 [ 608.283027][ C0] xpad_disconnect+0x34c/0x470 [ 608.287878][ C0] usb_unbind_interface+0x1ee/0x860 [ 608.293116][ C0] device_release_driver_internal+0x4b4/0x750 [ 608.299342][ C0] bus_remove_device+0x2e2/0x400 [ 608.304320][ C0] device_del+0x6af/0xaf0 [ 608.308670][ C0] usb_disable_device+0x3e2/0x890 [ 608.313714][ C0] usb_disconnect+0x348/0x8a0 [ 608.318396][ C0] hub_event+0x1ecb/0x55e0 [ 608.322894][ C0] process_one_work+0x85f/0x1010 [ 608.327848][ C0] worker_thread+0xaa6/0x1290 [ 608.332535][ C0] kthread+0x436/0x520 [ 608.336606][ C0] ret_from_fork+0x1f/0x30 [ 608.341032][ C0] [ 608.343366][ C0] Last potentially related work creation: [ 608.349186][ C0] kasan_save_stack+0x35/0x60 [ 608.353888][ C0] kasan_record_aux_stack+0xb8/0x100 [ 608.359276][ C0] kvfree_call_rcu+0x105/0x7d0 [ 608.364067][ C0] neigh_remove_one+0x4e8/0x5f0 [ 608.369066][ C0] ___neigh_create+0x468/0x2250 [ 608.373932][ C0] ip6_finish_output2+0x9f6/0x1510 [ 608.379049][ C0] ndisc_send_skb+0xc2a/0x1500 [ 608.384058][ C0] ndisc_send_ns+0x648/0x850 [ 608.388697][ C0] addrconf_dad_work+0xa63/0x1540 [ 608.393826][ C0] process_one_work+0x85f/0x1010 [ 608.398781][ C0] worker_thread+0xaa6/0x1290 [ 608.403464][ C0] kthread+0x436/0x520 [ 608.407532][ C0] ret_from_fork+0x1f/0x30 [ 608.411957][ C0] [ 608.414291][ C0] The buggy address belongs to the object at ffff888078a09000 [ 608.414291][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 608.428683][ C0] The buggy address is located 145 bytes inside of [ 608.428683][ C0] 1024-byte region [ffff888078a09000, ffff888078a09400) [ 608.442081][ C0] The buggy address belongs to the page: [ 608.447736][ C0] page:ffffea0001e28200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78a08 [ 608.457891][ C0] head:ffffea0001e28200 order:3 compound_mapcount:0 compound_pincount:0 [ 608.466249][ C0] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 608.474770][ C0] raw: 00fff00000010200 0000000000000000 0000000f00000001 ffff888016c41dc0 [ 608.483365][ C0] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 608.492212][ C0] page dumped because: kasan: bad access detected [ 608.498643][ C0] page_owner tracks the page as allocated [ 608.504364][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4188, ts 64901868054, free_ts 64797626169 [ 608.522961][ C0] get_page_from_freelist+0x1bbd/0x1ca0 [ 608.528527][ C0] __alloc_pages+0x1ee/0x480 [ 608.533123][ C0] new_slab+0xc0/0x4b0 [ 608.537205][ C0] ___slab_alloc+0x80a/0xdd0 [ 608.541800][ C0] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 608.547641][ C0] __alloc_skb+0x22c/0x750 [ 608.552272][ C0] inet6_rt_notify+0xdd/0x290 [ 608.556962][ C0] fib6_add+0x1d4d/0x3d40 [ 608.561300][ C0] ip6_route_add+0x86/0x130 [ 608.565819][ C0] addrconf_permanent_addr+0x692/0xa00 [ 608.571294][ C0] addrconf_notify+0x827/0xf00 [ 608.576060][ C0] raw_notifier_call_chain+0xcb/0x160 [ 608.581451][ C0] __dev_notify_flags+0x194/0x300 [ 608.586644][ C0] dev_change_flags+0xe3/0x1a0 [ 608.591429][ C0] do_setlink+0xcdb/0x3d60 [ 608.595861][ C0] rtnl_newlink+0x1658/0x1a50 [ 608.600549][ C0] page last free stack trace: [ 608.605224][ C0] free_unref_page_prepare+0x637/0x6c0 [ 608.610695][ C0] free_unref_page+0x8f/0x2a0 [ 608.615383][ C0] __unfreeze_partials+0x1a5/0x200 [ 608.620605][ C0] put_cpu_partial+0x12d/0x190 [ 608.625392][ C0] qlist_free_all+0x35/0x90 [ 608.629911][ C0] kasan_quarantine_reduce+0x150/0x160 [ 608.635372][ C0] __kasan_slab_alloc+0x2f/0xd0 [ 608.640323][ C0] slab_post_alloc_hook+0x4c/0x380 [ 608.645482][ C0] kmem_cache_alloc+0x100/0x290 [ 608.650371][ C0] ptlock_alloc+0x1c/0x60 [ 608.654708][ C0] pte_alloc_one+0xc0/0x310 [ 608.659217][ C0] __pte_alloc+0x21/0x150 [ 608.663586][ C0] move_page_tables+0xf88/0x17a0 [ 608.668536][ C0] setup_arg_pages+0x7b4/0xa90 [ 608.673309][ C0] load_elf_binary+0xc12/0x28e0 [ 608.678166][ C0] bprm_execve+0xaee/0x1840 [ 608.682676][ C0] [ 608.685008][ C0] Memory state around the buggy address: [ 608.690646][ C0] ffff888078a08f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 608.698856][ C0] ffff888078a09000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 608.706937][ C0] >ffff888078a09080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 608.715002][ C0] ^ [ 608.719607][ C0] ffff888078a09100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 608.727688][ C0] ffff888078a09180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 608.735882][ C0] ================================================================== [ 608.744283][ C0] Disabling lock debugging due to kernel taint [ 608.750459][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 608.757654][ C0] CPU: 0 PID: 4315 Comm: kworker/u4:7 Tainted: G B syzkaller #0 [ 608.766692][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 608.776800][ C0] Workqueue: bat_events batadv_nc_worker [ 608.782564][ C0] Call Trace: [ 608.785852][ C0] [ 608.788711][ C0] dump_stack_lvl+0x188/0x250 [ 608.793402][ C0] ? show_regs_print_info+0x20/0x20 [ 608.798611][ C0] ? load_image+0x400/0x400 [ 608.803135][ C0] panic+0x2e5/0x810 [ 608.807128][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 608.811640][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 608.817545][ C0] ? _raw_spin_unlock+0x40/0x40 [ 608.822413][ C0] ? register_lock_class+0x7f8/0x890 [ 608.827739][ C0] check_panic_on_warn+0x80/0xa0 [ 608.832691][ C0] ? register_lock_class+0x7f8/0x890 [ 608.837990][ C0] end_report+0x6d/0xf0 [ 608.842184][ C0] kasan_report+0x102/0x130 [ 608.846873][ C0] ? register_lock_class+0x7f8/0x890 [ 608.852181][ C0] register_lock_class+0x7f8/0x890 [ 608.857306][ C0] ? is_dynamic_key+0x1f0/0x1f0 [ 608.862212][ C0] ? __down_trylock_console_sem+0x19f/0x1f0 [ 608.868126][ C0] ? vprintk_emit+0xa7/0x150 [ 608.872764][ C0] __lock_acquire+0x16f/0x7d10 [ 608.877546][ C0] ? mark_lock+0x94/0x320 [ 608.881907][ C0] ? __lock_acquire+0x13bc/0x7d10 [ 608.886947][ C0] ? mark_lock+0x94/0x320 [ 608.891283][ C0] ? __lock_acquire+0x13bc/0x7d10 [ 608.896351][ C0] ? verify_lock_unused+0x140/0x140 [ 608.901565][ C0] lock_acquire+0x19e/0x400 [ 608.906287][ C0] ? __wake_up+0xf4/0x180 [ 608.910641][ C0] ? read_lock_is_recursive+0x10/0x10 [ 608.916109][ C0] _raw_spin_lock_irqsave+0xb0/0x100 [ 608.921432][ C0] ? __wake_up+0xf4/0x180 [ 608.925784][ C0] ? _raw_spin_lock+0x40/0x40 [ 608.930479][ C0] __wake_up+0xf4/0x180 [ 608.934642][ C0] ? remove_wait_queue+0x120/0x120 [ 608.939783][ C0] ? _raw_spin_unlock+0x24/0x40 [ 608.944653][ C0] __usb_hcd_giveback_urb+0x396/0x520 [ 608.950072][ C0] dummy_timer+0x8a8/0x31e0 [ 608.954608][ C0] ? dummy_free_streams+0x530/0x530 [ 608.959821][ C0] ? dummy_free_streams+0x530/0x530 [ 608.965026][ C0] call_timer_fn+0x17b/0x540 [ 608.969630][ C0] ? dummy_free_streams+0x530/0x530 [ 608.974839][ C0] ? __run_timers+0x7f0/0x7f0 [ 608.979534][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 608.984743][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 608.990127][ C0] ? dummy_free_streams+0x530/0x530 [ 608.995347][ C0] __run_timers+0x53a/0x7f0 [ 608.999899][ C0] ? detach_timer+0x2b0/0x2b0 [ 609.004611][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 609.010611][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 609.015482][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 609.020807][ C0] run_timer_softirq+0x63/0xf0 [ 609.025588][ C0] handle_softirqs+0x339/0x830 [ 609.030364][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 609.035228][ C0] ? do_softirq+0x210/0x210 [ 609.039847][ C0] __irq_exit_rcu+0x13b/0x230 [ 609.044561][ C0] ? irq_exit_rcu+0x20/0x20 [ 609.049074][ C0] irq_exit_rcu+0x5/0x20 [ 609.053321][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 609.058966][ C0] [ 609.061906][ C0] [ 609.064845][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 609.070851][ C0] RIP: 0010:lock_acquire+0x208/0x400 [ 609.076168][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f1 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 609.095792][ C0] RSP: 0018:ffffc9000343faa0 EFLAGS: 00000206 [ 609.101888][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: b9f3ba7cfd525b00 [ 609.109907][ C0] RDX: 0000000000000000 RSI: ffffffff8a2b3a20 RDI: ffffffff8a79f780 [ 609.117911][ C0] RBP: ffffc9000343fbc0 R08: dffffc0000000000 R09: 1ffffffff203a218 [ 609.125891][ C0] R10: dffffc0000000000 R11: fffffbfff203a219 R12: ffffffff8c31eaa0 [ 609.133881][ C0] R13: 1ffff92000687f60 R14: 0000000000000246 R15: dffffc0000000000 [ 609.141885][ C0] ? rcu_lock_release+0x5/0x20 [ 609.146672][ C0] ? read_lock_is_recursive+0x10/0x10 [ 609.152054][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 609.157086][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 609.163193][ C0] rcu_lock_acquire+0x2a/0x30 [ 609.167993][ C0] ? rcu_lock_acquire+0x5/0x30 [ 609.172762][ C0] batadv_nc_worker+0xc9/0x5c0 [ 609.177534][ C0] process_one_work+0x85f/0x1010 [ 609.182495][ C0] ? worker_detach_from_pool+0x240/0x240 [ 609.188142][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 609.193435][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 609.198469][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 609.204050][ C0] ? wq_worker_running+0x97/0x170 [ 609.209090][ C0] worker_thread+0xaa6/0x1290 [ 609.213817][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 609.219026][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 609.224933][ C0] kthread+0x436/0x520 [ 609.229011][ C0] ? rcu_lock_release+0x20/0x20 [ 609.233868][ C0] ? kthread_blkcg+0xd0/0xd0 [ 609.238530][ C0] ret_from_fork+0x1f/0x30 [ 609.242976][ C0] [ 610.373684][ C0] Shutting down cpus with NMI [ 610.378778][ C0] Kernel Offset: disabled [ 610.383467][ C0] Rebooting in 86400 seconds..