last executing test programs: 2m0.493510956s ago: executing program 3 (id=51): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000280)='./file1\x00', 0x30008c0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x11, 0x308, &(0x7f0000000400)="$eJzs3U1rE0EcBvBndtNma0tdbUXwIFIN2ItovYiXSMmH8CRqk0JxqagtviBYxZOIvXv36NXPIF4UwXM9eRLP9SAj85Ls+ybV7m6qzw8aNjs7s//J7OzMBJoFEf23ljs7by5+U38CcOECLy4DDgAPaAA4huPe5vrG2kbQ6xYV5OJk0+QSMDlF6piV9V5WVg82h+Wrdw3MRPdROaSUV77WHQTVTvd+6cZ3ntJ3gqbtnTrRqym+PE/3nuXHFICtMoIZK8UtJXaxiweYrSwcIiIaS8KM744d52fs/N1xgJYdTPRsfNzG/z+1W3cApZOFqZHxX7erFKrdD+ukcL2nl3Aq3emvErPKept4P5F4PwlzZcVml2LYqlLH4kytrgW9cyu3g66DZ2hbkcPm9WvXXLp9sWibqaIXMtamBQalTeUeIrJnlNO6DhOqDksm/vsAYvHPFZ6xBOKD+CSuCR+v0R3M/xpSqGbSLeUnWsrEfz6/RF1LXx0Fe9tot9tO7JAj+iQn7BmsIbX04OadcdKWGfuCwB8Wp851NJHL1O7CkFxzmbmW9PYinJxc87Fcqjara8H7/FNVQrwSV8UCvuMdOpH5v6Pia6GwZ4a9RrTMUKA/cdU74y0b0WjZO5EeOTa/7Dw2+9PdZfAppjus9bP4nkZ78BI3cQmz9x4+uuUGQe+u2rgRqMtVbwz23JmxG0Fv4jkQTRqXDWyFe5qQWurg/qBUZWCL+1qgun9kJKmOFe5RvWxYgU/+Nh51Hyj1o5seoRZ1bnQ+7s+F1J82xJJ+SSkrrM627RjJpPpuTVSdsNFHOz5jqkMHm2pSYdZ/4XqlYSZ76sXPnKeP+EWALVGqOfZgBRfmlWZGDuBQwQouq9jcFVx6zZVaM+o11+mzwJnRz+jbOP8RooPPuM7v/4mIiIiIiIiIiIiIiIiIiIiIiIiIDpoq/l+i7joSERERERERERERERERERERERERERERER10yx7M716j//xfjPb83+SjWFzzk+D78vzf7XXw+b9E5fsdAAD//4BCdqE=") mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) open(&(0x7f0000000280)='./file1\x00', 0x1cd142, 0x0) unlink(&(0x7f00000000c0)='./file1\x00') 2m0.012273461s ago: executing program 3 (id=56): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) syz_mount_image$ocfs2(&(0x7f0000004480), &(0x7f00000044c0)='./file0\x00', 0x1808410, &(0x7f0000000080)={[{@data_ordered}, {@err_ro}, {@heartbeat_none}, {@localflocks}, {@heartbeat_none}, {@data_writeback}, {@localalloc}, {@intr}]}, 0x8, 0x446c, &(0x7f0000004780)="$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") r0 = creat(&(0x7f0000000000)='./file0\x00', 0x63) io_setup(0x12, &(0x7f0000000140)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa1ff}]) 1m58.102055851s ago: executing program 3 (id=64): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001701000003000000010000000000000018"], 0x30, 0x20000004}], 0x1, 0x40080) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b1", 0x1) sendmmsg$alg(r1, &(0x7f0000001580), 0x49249249249256f, 0x40484) 1m57.725880851s ago: executing program 3 (id=65): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x804b14, &(0x7f0000000040)={[{@nobarrier}]}, 0xfc, 0x491, &(0x7f0000000200)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1f0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x8, 0xadea}) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m57.455016065s ago: executing program 3 (id=66): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c) listen(r0, 0x100) r1 = dup(r0) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}], 0x18}, 0x8050) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e24, @local}}}, 0x84) 1m56.888366835s ago: executing program 3 (id=71): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r0, r0, 0x2f}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup=r0, r0, 0x2f, 0x2000, 0x4, @value=r3}, 0x20) 1m56.428412109s ago: executing program 32 (id=71): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r0, r0, 0x2f}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup=r0, r0, 0x2f, 0x2000, 0x4, @value=r3}, 0x20) 1m49.747991199s ago: executing program 2 (id=103): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') syz_open_dev$tty1(0xc, 0x4, 0x4) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0xc0, 0x0) 1m49.524648341s ago: executing program 2 (id=106): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x2000000000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000140)={0x1, 0x1, 0x9, 0x15}) close_range(r0, 0xffffffffffffffff, 0x0) 1m49.296385203s ago: executing program 2 (id=109): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r1}]}, 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 1m49.14543972s ago: executing program 0 (id=111): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e65766530"], 0x110}}, 0x0) 1m49.055401725s ago: executing program 2 (id=113): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./bus\x00', 0x210000, &(0x7f0000000380)={[{@nobarrier}, {@barrier}, {@commit={'commit', 0x3d, 0x5}}, {@i_version}, {@data_err_ignore}, {@init_itable}, {@errors_remount}, {@inlinecrypt}, {@bh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 1m48.788400949s ago: executing program 0 (id=114): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f00000001c0)={0x0, 0x7ffffffe, 0x0, 0x9}) 1m48.546194982s ago: executing program 2 (id=115): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048044}, 0x24008000) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)) 1m47.900632726s ago: executing program 2 (id=116): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f00000000c0)=0x4d, 0x4) 1m47.391270612s ago: executing program 33 (id=116): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f00000000c0)=0x4d, 0x4) 1m47.347718575s ago: executing program 0 (id=118): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000012c0)="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", 0x6a0}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000002280)=""/4088, 0xff8}], 0x1}, 0x40002160) 1m47.013362982s ago: executing program 0 (id=120): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000440)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nomblk_io_submit}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x103042, 0x0) 1m46.284287801s ago: executing program 0 (id=122): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffff0001}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 1m45.740242979s ago: executing program 0 (id=123): r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f00000000c0)=0xfffffffd, 0x4) connect$l2tp(r0, &(0x7f0000000680)={0x2, 0x0, @remote, 0x2}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180001a08001b"], 0x28}}, 0x800) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000), 0x4) 1m45.484886293s ago: executing program 34 (id=123): r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f00000000c0)=0xfffffffd, 0x4) connect$l2tp(r0, &(0x7f0000000680)={0x2, 0x0, @remote, 0x2}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180001a08001b"], 0x28}}, 0x800) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000), 0x4) 1m12.836685243s ago: executing program 4 (id=297): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty}, 0x1c) 1m12.040287095s ago: executing program 4 (id=305): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e20, 0x80000, @local, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@rthdrdstopts={{0x18}}], 0x18}, 0x440e0) 1m11.860377945s ago: executing program 4 (id=308): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1m11.588283119s ago: executing program 4 (id=311): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2a5b091, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x0) 1m11.525750812s ago: executing program 4 (id=312): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, @loopback, {[], @mld={0x82, 0x0, 0x0, 0xb, 0xc036, @remote}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 1m11.147914942s ago: executing program 4 (id=316): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x2000000, 0x0}) 1m10.698143625s ago: executing program 35 (id=316): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x2000000, 0x0}) 10.024976995s ago: executing program 7 (id=521): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x30, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth1\x00', &(0x7f0000000180)=@ethtool_sset_info={0x4a, 0x7, 0x3}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000f, 0x11, r0, 0xcfa3e000) 9.586297048s ago: executing program 6 (id=534): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x8004, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000040)="f0", 0x1}], 0x1}, 0x40054) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0xabb6, 0x67, 0xa4f, 0xc4, 0x4e, 0xffffff85, 0xa9}, 0x9c) 9.409821687s ago: executing program 1 (id=525): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0x159, &(0x7f00000004c0)="$eJzs27GKE0EcBvB/TKJRm9RisWBjFdQnUCSCuKAoKbRSiDaJBEyz2phH8QUFSZVuRPdI7nLJkRzs7ZH8fk0++GZgpsgOs7Af738dDSfTL5M38+g0GtF6GlksGtGNG9GM0iwAgEOySCn+pJTSrVnc/hUppXNDftayMACgMjuc/wDAgXH+A8Dxcf4DwPF59/7Dq2d53n+bZZ2I37NiUAzK37J/8TLvP8r+665mzYti0Fz2j8s+O9u3485J/2RjfzMePij7f93z1/lafzeG1W8fAAAAjkIvW9p4v+/1tvVlOvV+YO3+3op7rSvbBgCwh+n3H6NP4/Hnb3uFiMvMOojQjohrsAxBqDbU/WQCqrb609e9EgAAAAAAAAAAAAAAYJudvwfqXDx4kbZPr3uPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsO5vAAAA//9XS09N") write(0xffffffffffffffff, &(0x7f0000000100)="f0d319933f17f819727b20", 0xb) lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="cc7766d47465642e"], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x200480, 0x0) 9.212745918s ago: executing program 7 (id=527): syz_open_dev$hidraw(&(0x7f0000000080), 0xfffffffffffffff8, 0x519002) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 8.894180274s ago: executing program 6 (id=529): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4, 0x100000003, 0x1}) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x161281, 0x0) lsetxattr(&(0x7f0000000300)='./file1\x00', &(0x7f00000003c0)=@random={'trusted.', '@\x00'}, &(0x7f0000000440)='$\x9c@*\x00', 0x5, 0x1) 8.893855064s ago: executing program 1 (id=530): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/13, 0xd}, 0x2}], 0x1, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x2, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 8.633354808s ago: executing program 1 (id=531): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r1, r3, 0x25, 0x0, @val=@perf_event}, 0x18) syz_emit_ethernet(0xfc0, &(0x7f0000000000)=ANY=[], 0x0) syz_emit_ethernet(0x46, &(0x7f00000004c0)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x3, 0x6, "c241ab", 0x10, 0x11, 0x0, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, {[], {0x4e21, 0x4e23, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x2, 0x0, @val=0x80}}}}}}}}, 0x0) 5.910382451s ago: executing program 7 (id=532): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x1a3000) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_usb_connect(0x3, 0x48, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109023600010000000009040000040de67a0009050300000400000009050000ebff09030509050402d08fb68d0009058102"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_ep_write(r1, 0x81, 0x41, &(0x7f0000001180)="22c4e79fb3000000000000000000f7b300000002d97615d5f33085aef8574fc727117ae745299fb172da00d4118cb681eefe87bc4c70fa73f8f4d25125355fd264") 5.904580271s ago: executing program 6 (id=541): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000000314010028bd7000f6dbdf250900020073797a31001800000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x884}, 0x810) r2 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x20, 0x1402, 0x1, 0x70bd2a, 0x25dfdc01, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) 5.891822052s ago: executing program 1 (id=533): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f00000000c0)={[{@jqfmt_vfsv1}, {@nombcache}, {@jqfmt_vfsold}]}, 0x1, 0x57c, &(0x7f0000000100)="$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") r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 5.16441598s ago: executing program 5 (id=537): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x1, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x100, 0x1, 0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x88, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0) 5.008880888s ago: executing program 6 (id=538): syz_clone(0xe280, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0x0, 0x7fc00100}]}) r0 = epoll_create1(0x0) epoll_pwait(r0, 0x0, 0x0, 0x6, 0x0, 0x0) 4.807893079s ago: executing program 5 (id=539): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x30, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth1\x00', &(0x7f0000000040)=@ethtool_link_settings={0x1b, 0x4, 0xfa, 0x4, 0x2, 0xc, 0x59, 0x6, 0xb, 0x7, [0x1, 0x7fff, 0x3, 0xfffffff8, 0x7, 0x20000, 0x2, 0x4]}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000f, 0x11, r0, 0xcfa3e000) 4.314316265s ago: executing program 5 (id=540): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) 4.119714275s ago: executing program 5 (id=542): syz_open_dev$hidraw(&(0x7f0000000080), 0xfffffffffffffff8, 0x519002) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 1.106118513s ago: executing program 5 (id=543): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4, 0x100000003, 0x1}) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x161281, 0x0) lsetxattr(&(0x7f0000000300)='./file1\x00', &(0x7f00000003c0)=@random={'trusted.', '@\x00'}, &(0x7f0000000440)='$\x9c@*\x00', 0x5, 0x1) 1.105956943s ago: executing program 7 (id=544): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2000}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="3801"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@posixacl}]}}) 1.101210823s ago: executing program 6 (id=551): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='hybla', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) shutdown(r0, 0x1) 1.100349863s ago: executing program 1 (id=545): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x6, 0x4, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 849.971556ms ago: executing program 6 (id=546): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x145042, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x2013, r0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0x32600) 565.380521ms ago: executing program 5 (id=547): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 560.699181ms ago: executing program 1 (id=556): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000700)=ANY=[@ANYBLOB='journal_async_commit,heartbeat=none,usrquota,barrier=000000000\x000000000007,heartbeat=none,nointr,\x00'], 0x1, 0x4710, &(0x7f00000047c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 357.547572ms ago: executing program 7 (id=548): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) close(0x3) 0s ago: executing program 7 (id=549): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000000314010028bd7000f6dbdf250900020073797a31001800000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x884}, 0x810) r2 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x20, 0x1402, 0x1, 0x70bd2a, 0x25dfdc01, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) kernel console output (not intermixed with test programs): ROR (device loop3): int ocfs2_change_extent_flag(handle_t *, struct ocfs2_extent_tree *, u32, u32, u32, struct ocfs2_alloc_context *, struct ocfs2_cached_dealloc_ctxt *, int, int): Owner 17058 has an extent at cpos 0 which can no longer be found [ 84.555568][ T5886] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 84.565559][ T5886] OCFS2: File system is now read-only. [ 84.571499][ T5886] (syz.3.18,5886,1):ocfs2_mark_extent_refcounted:2359 ERROR: status = -30 [ 84.580149][ T5886] (syz.3.18,5886,1):ocfs2_add_refcount_flag:3706 ERROR: status = -30 [ 84.588507][ T5886] (syz.3.18,5886,1):ocfs2_reflink_remap_extent:4570 ERROR: status = -30 [ 84.597328][ T5886] (syz.3.18,5886,1):ocfs2_reflink_remap_blocks:4694 ERROR: status = -30 [ 84.606176][ T5886] (syz.3.18,5886,1):ocfs2_remap_file_range:2746 ERROR: status = -30 [ 84.646588][ T5886] syz.3.18 (5886) used greatest stack depth: 20656 bytes left [ 84.804316][ T5765] ocfs2: Unmounting device (7,3) on (node local) [ 85.216139][ T27] ssu100: probe of 1-1:0.0 failed with error -71 [ 85.258618][ T27] usb 1-1: USB disconnect, device number 2 [ 85.446915][ T5926] loop2: detected capacity change from 0 to 128 [ 85.672671][ T5934] capability: warning: `syz.3.34' uses deprecated v2 capabilities in a way that may be insecure [ 85.735951][ T5937] loop1: detected capacity change from 0 to 2048 [ 85.931384][ T5942] loop0: detected capacity change from 0 to 16 [ 85.975972][ T5942] erofs: (device loop0): mounted with root inode @ nid 36. [ 86.087641][ T5946] loop3: detected capacity change from 0 to 128 [ 86.110466][ T5946] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 86.141656][ T5946] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.227008][ T5946] ext2 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.507742][ T5765] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.800084][ T5975] loop3: detected capacity change from 0 to 64 [ 86.871754][ T5975] hfs: unable to locate alternate MDB [ 86.877566][ T5975] hfs: continuing without an alternate MDB [ 86.880660][ T5979] loop2: detected capacity change from 0 to 7 [ 86.892735][ T5979] Dev loop2: unable to read RDB block 7 [ 86.898635][ T5979] loop2: unable to read partition table [ 86.908580][ T5979] loop2: partition table beyond EOD, truncated [ 86.924863][ T5979] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà¶ ) failed (rc=-5) [ 87.099188][ T28] audit: type=1800 audit(1777295108.927:2): pid=5975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.51" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 87.400178][ T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 87.592154][ T27] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 87.611913][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.746461][ T27] usb 1-1: config 0 descriptor?? [ 88.005499][ T27] usbhid 1-1:0.0: can't add hid device: -71 [ 88.014205][ T27] usbhid: probe of 1-1:0.0 failed with error -71 [ 88.039194][ T27] usb 1-1: USB disconnect, device number 3 [ 88.120933][ T5983] loop1: detected capacity change from 0 to 131072 [ 88.131444][ T9] cfg80211: failed to load regulatory.db [ 88.160710][ T5983] F2FS-fs (loop1): Found nat_bits in checkpoint [ 88.211347][ T5983] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 88.512485][ T5997] loop3: detected capacity change from 0 to 32768 [ 88.582641][ T5997] JBD2: Ignoring recovery information on journal [ 88.621326][ T5997] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 88.680131][ T27] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 88.822834][ T5997] OCFS2: ERROR (device loop3): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 23 has 4294967295 used bits but only 16777215 total [ 88.844879][ T5997] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 88.854818][ T5997] OCFS2: File system is now read-only. [ 88.860485][ T5997] (syz.3.56,5997,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 88.868777][ T5997] (syz.3.56,5997,1):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 88.876873][ T5997] (syz.3.56,5997,1):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 88.884966][ T5997] (syz.3.56,5997,1):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 88.893485][ T5997] (syz.3.56,5997,1):ocfs2_write_cluster:1153 ERROR: status = -30 [ 88.901334][ T5997] (syz.3.56,5997,1):ocfs2_write_cluster_by_desc:1248 ERROR: status = -30 [ 88.909844][ T5997] (syz.3.56,5997,1):ocfs2_write_begin_nolock:1820 ERROR: status = -30 [ 88.919290][ T5997] (syz.3.56,5997,1):ocfs2_write_begin:1907 ERROR: status = -30 [ 88.949627][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 88.961548][ T27] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 88.979470][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.008937][ T27] usb 1-1: config 0 descriptor?? [ 89.043469][ T27] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 89.087580][ T27] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 89.133114][ T5765] ocfs2: Unmounting device (7,3) on (node local) [ 89.291721][ T1189] usb 1-1: USB disconnect, device number 4 [ 89.309855][ T1189] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 89.421085][ T6010] "syz.3.64" (6010) uses obsolete ecb(arc4) skcipher [ 89.434201][ T6010] trusted_key: syz.3.64 sent an empty control message without MSG_MORE. [ 89.538686][ T6012] loop3: detected capacity change from 0 to 512 [ 89.565035][ T6012] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.65: inode has both inline data and extents flags [ 89.582474][ T6012] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.65: couldn't read orphan inode 15 (err -117) [ 89.605409][ T6012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.072978][ T6019] loop2: detected capacity change from 0 to 4096 [ 90.130697][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.164416][ T6022] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.215555][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.245296][ T1139] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.322183][ T6024] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 90.367324][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.390431][ T6024] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 90.414987][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.475621][ T9] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 90.509560][ T9] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 90.528947][ T1139] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.529377][ T9] usb 2-1: Manufacturer: syz [ 90.575894][ T9] usb 2-1: config 0 descriptor?? [ 90.686710][ T1139] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.787040][ T1139] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.882099][ T6029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.74'. [ 91.443764][ T9] uclogic 0003:256C:006D.0001: interface is invalid, ignoring [ 91.570549][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.581064][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.589710][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.602856][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.611717][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 91.621544][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.708756][ T5153] usb 2-1: USB disconnect, device number 2 [ 92.579449][ T5153] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.731468][ T6042] chnl_net:caif_netlink_parms(): no params data found [ 92.733939][ T6065] syz.0.81 uses obsolete (PF_INET,SOCK_PACKET) [ 92.779845][ T5153] usb 3-1: Using ep0 maxpacket: 16 [ 92.796461][ T5153] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 92.810987][ T6065] syzkaller1: entered promiscuous mode [ 92.813898][ T5153] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.816710][ T6065] syzkaller1: entered allmulticast mode [ 92.831437][ T5153] usb 3-1: config 0 has no interface number 0 [ 92.844738][ T5153] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 92.868540][ T5153] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.890951][ T5153] usb 3-1: Product: syz [ 92.899688][ T5153] usb 3-1: Manufacturer: syz [ 92.912419][ T5153] usb 3-1: SerialNumber: syz [ 92.948379][ T5153] usb 3-1: config 0 descriptor?? [ 93.188995][ T5153] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 93.229493][ T5153] usb 3-1: No valid video chain found. [ 93.242022][ T5153] usb 3-1: USB disconnect, device number 2 [ 93.438256][ T6042] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.472202][ T6042] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.509579][ T6042] bridge_slave_0: entered allmulticast mode [ 93.517839][ T6042] bridge_slave_0: entered promiscuous mode [ 93.557060][ T6042] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.598026][ T6042] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.618898][ T6042] bridge_slave_1: entered allmulticast mode [ 93.644545][ T6042] bridge_slave_1: entered promiscuous mode [ 93.729511][ T5775] Bluetooth: hci1: command tx timeout [ 93.825803][ T6042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.873081][ T6042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.937119][ T6093] veth1_to_bond: entered allmulticast mode [ 93.993866][ T6093] veth1_to_bond: entered promiscuous mode [ 94.005937][ T6093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.85'. [ 94.082306][ T6093] veth1_to_bond (unregistering): left promiscuous mode [ 94.089544][ T6093] veth1_to_bond (unregistering): left allmulticast mode [ 94.122450][ T6093] bond0: (slave bond_slave_1): Releasing backup interface [ 94.189741][ T6042] team0: Port device team_slave_0 added [ 94.212629][ T6042] team0: Port device team_slave_1 added [ 94.437371][ T6042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.464757][ T6042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.499971][ T6042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.537663][ T1139] hsr_slave_0: left promiscuous mode [ 94.555950][ T1139] hsr_slave_1: left promiscuous mode [ 94.566298][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.582296][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.592418][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.609864][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.620724][ T1139] bridge_slave_1: left allmulticast mode [ 94.626447][ T1139] bridge_slave_1: left promiscuous mode [ 94.629416][ T5801] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 94.634090][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.659677][ T1139] bridge_slave_0: left allmulticast mode [ 94.665584][ T1139] bridge_slave_0: left promiscuous mode [ 94.679961][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.788396][ T1139] veth1_macvtap: left promiscuous mode [ 94.805468][ T1139] veth0_macvtap: left promiscuous mode [ 94.813595][ T1139] veth1_vlan: left promiscuous mode [ 94.821955][ T1139] veth0_vlan: left promiscuous mode [ 94.849693][ T5801] usb 1-1: Using ep0 maxpacket: 16 [ 94.859885][ T5801] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 94.880321][ T5801] usb 1-1: New USB device strings: Mfr=1, Product=21, SerialNumber=3 [ 94.888520][ T5801] usb 1-1: Product: syz [ 94.895801][ T5801] usb 1-1: Manufacturer: syz [ 94.908463][ T5801] usb 1-1: SerialNumber: syz [ 95.349881][ T5801] snd-usb-audio: probe of 1-1:1.0 failed with error -71 [ 95.360754][ T5801] usb 1-1: USB disconnect, device number 5 [ 95.513621][ T966] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 95.699523][ T966] usb 2-1: Using ep0 maxpacket: 16 [ 95.708901][ T1139] team0 (unregistering): Port device team_slave_1 removed [ 95.712388][ T966] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 95.745000][ T966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.765997][ T966] usb 2-1: config 0 descriptor?? [ 95.774843][ T1139] team0 (unregistering): Port device team_slave_0 removed [ 95.777346][ T966] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 95.800635][ T5775] Bluetooth: hci1: command tx timeout [ 95.835666][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.889421][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.026444][ T6127] set_capacity_and_notify: 1 callbacks suppressed [ 96.026470][ T6127] loop0: detected capacity change from 0 to 128 [ 96.066050][ T6127] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 96.102473][ T6127] hpfs: filesystem error: improperly stopped [ 96.108808][ T6127] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 96.131411][ T6127] hpfs: You really don't want any checks? You are crazy... [ 96.146609][ T6127] hpfs: hpfs_map_sector(): read error [ 96.152426][ T6127] hpfs: code page support is disabled [ 96.166005][ T6127] hpfs: hpfs_map_4sectors(): unaligned read [ 96.197661][ T6127] hpfs: hpfs_map_4sectors(): unaligned read [ 96.204022][ T6127] hpfs: filesystem error: unable to find root dir [ 96.462958][ T6129] Bluetooth: MGMT ver 1.22 [ 96.568804][ T1139] bond0 (unregistering): Released all slaves [ 96.664270][ T6133] loop8: detected capacity change from 0 to 7 [ 96.675820][ T6133] loop8: [POWERTEC] p1 p2 [ 96.681347][ T6133] loop8: p1 start 808464416 is beyond EOD, truncated [ 96.688691][ T6133] loop8: p2 start 926167352 is beyond EOD, truncated [ 96.742639][ T6042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.765300][ T6042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.818754][ T6042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.910751][ T6135] loop0: detected capacity change from 0 to 8 [ 97.021486][ T6042] hsr_slave_0: entered promiscuous mode [ 97.027534][ T966] gspca_sonixj: reg_w1 err -71 [ 97.060311][ T6042] hsr_slave_1: entered promiscuous mode [ 97.062223][ T966] sonixj: probe of 2-1:0.0 failed with error -71 [ 97.074028][ T6042] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.099701][ T966] usb 2-1: USB disconnect, device number 3 [ 97.109494][ T6042] Cannot create hsr debugfs directory [ 97.601635][ T6149] overlayfs: failed to clone lowerpath [ 97.724377][ T6042] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.769965][ T6154] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.793431][ T6042] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.847050][ T6042] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.879691][ T5775] Bluetooth: hci1: command tx timeout [ 97.888510][ T6042] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 98.286339][ T6178] loop2: detected capacity change from 0 to 1024 [ 98.297154][ T6042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.330967][ T6178] EXT4-fs: Ignoring removed i_version option [ 98.337665][ T6178] EXT4-fs: inline encryption not supported [ 98.352011][ T6042] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.409728][ T6178] EXT4-fs: Ignoring removed bh option [ 98.435301][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.442564][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.485550][ T6178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.491550][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.504930][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.745436][ T5768] EXT4-fs error (device loop2): ext4_read_inline_dir:1591: inode #12: block 7: comm syz-executor: path /33/bus/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 98.813959][ T5768] EXT4-fs (loop2): Remounting filesystem read-only [ 99.150909][ T6042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.158822][ T6176] loop1: detected capacity change from 0 to 32768 [ 99.206088][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.279173][ T6176] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 99.514374][ T6176] XFS (loop1): Ending clean mount [ 99.529271][ T1134] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.620296][ T28] audit: type=1800 audit(1777295121.447:3): pid=6176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.112" name="file1" dev="loop1" ino=4422 res=0 errno=0 [ 99.785160][ T1134] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.810331][ T5762] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 99.944823][ T1134] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.961415][ T5775] Bluetooth: hci1: command tx timeout [ 100.159804][ T1134] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.351965][ T6227] loop0: detected capacity change from 0 to 1024 [ 100.383884][ T6227] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.396288][ T6042] veth0_vlan: entered promiscuous mode [ 100.470745][ T6227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 100.521414][ T6042] veth1_vlan: entered promiscuous mode [ 100.542070][ T6227] loop0: detected capacity change from 1024 to 64 [ 100.565304][ T6233] syz.0.120: attempt to access beyond end of device [ 100.565304][ T6233] loop0: rw=524288, sector=192, nr_sectors = 18 limit=64 [ 100.630719][ T6233] syz.0.120: attempt to access beyond end of device [ 100.630719][ T6233] loop0: rw=0, sector=192, nr_sectors = 8 limit=64 [ 100.677067][ T28] audit: type=1800 audit(1777295122.507:4): pid=6233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.120" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 100.687950][ T6042] veth0_macvtap: entered promiscuous mode [ 100.772847][ T5773] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 100.784023][ T5773] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 100.794283][ T5773] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 100.803613][ T5773] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 100.811686][ T5773] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 100.819203][ T5773] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 100.952471][ T6042] veth1_macvtap: entered promiscuous mode [ 101.141224][ T6042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.156369][ T6042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.168317][ T6042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.181109][ T6042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.191373][ T6042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.206807][ T6042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.225168][ T6042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.265599][ T6042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.277238][ T6042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.293584][ T6042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.307048][ T6042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.324958][ T6042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.337748][ T6042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.340866][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 101.352018][ T6042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.393837][ T6228] kmmpd-loop0: attempt to access beyond end of device [ 101.393837][ T6228] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 101.429702][ T6228] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 101.522247][ T6042] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.535829][ T6042] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.544991][ T6042] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.562503][ T6042] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.172755][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.195819][ T5773] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.210675][ T5773] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.221159][ T5773] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.227947][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.248408][ T5773] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.267030][ T5773] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 102.278117][ T5773] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 102.376391][ T6235] chnl_net:caif_netlink_parms(): no params data found [ 102.470711][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.478701][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.677749][ T1134] hsr_slave_0: left promiscuous mode [ 102.705000][ T1134] hsr_slave_1: left promiscuous mode [ 102.713050][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.736909][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.762692][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.780585][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.800185][ T1134] bridge_slave_1: left allmulticast mode [ 102.805975][ T1134] bridge_slave_1: left promiscuous mode [ 102.813500][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.823665][ T1134] bridge_slave_0: left allmulticast mode [ 102.831888][ T1134] bridge_slave_0: left promiscuous mode [ 102.839010][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.863480][ T6261] loop1: detected capacity change from 0 to 32768 [ 102.915259][ T1134] veth1_macvtap: left promiscuous mode [ 102.915976][ T6261] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 102.922269][ T1134] veth0_macvtap: left promiscuous mode [ 102.931657][ T5773] Bluetooth: hci3: command tx timeout [ 102.935933][ T1134] veth1_vlan: left promiscuous mode [ 102.948666][ T1134] veth0_vlan: left promiscuous mode [ 103.018550][ T6261] XFS (loop1): Ending clean mount [ 103.109167][ T5762] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 103.472369][ T6290] loop1: detected capacity change from 0 to 2048 [ 103.500570][ T6290] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 103.537757][ T5776] udevd[5776]: incorrect nilfs2 checksum on /dev/loop1 [ 103.582219][ T6291] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.967701][ T1134] team0 (unregistering): Port device team_slave_1 removed [ 104.014014][ T1134] team0 (unregistering): Port device team_slave_0 removed [ 104.058589][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.113332][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.370740][ T5773] Bluetooth: hci2: command tx timeout [ 104.464518][ T1134] bond0 (unregistering): Released all slaves [ 104.631624][ T6235] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.638905][ T6235] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.663781][ T6235] bridge_slave_0: entered allmulticast mode [ 104.679558][ T6235] bridge_slave_0: entered promiscuous mode [ 104.697651][ T6235] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.713374][ T6235] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.723931][ T6235] bridge_slave_1: entered allmulticast mode [ 104.740231][ T6235] bridge_slave_1: entered promiscuous mode [ 104.958695][ T6235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.975149][ T6303] loop1: detected capacity change from 0 to 4096 [ 105.007938][ T6235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.010046][ T5773] Bluetooth: hci3: command tx timeout [ 105.166621][ T6303] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 105.174958][ T6303] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 105.216418][ T6235] team0: Port device team_slave_0 added [ 105.289267][ T6235] team0: Port device team_slave_1 added [ 105.414669][ T6266] chnl_net:caif_netlink_parms(): no params data found [ 105.451409][ T6235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.458418][ T6235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.487852][ T11] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22. [ 105.499686][ T6235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.528470][ T5762] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 105.570818][ T5762] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 105.578239][ T5762] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 105.710261][ T6235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.717471][ T6235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.929165][ T6358] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22. [ 106.062307][ T6235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.313083][ T6266] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.324483][ T6266] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.341094][ T6266] bridge_slave_0: entered allmulticast mode [ 106.350237][ T6266] bridge_slave_0: entered promiscuous mode [ 106.358964][ T6266] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.367177][ T6266] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.374788][ T6266] bridge_slave_1: entered allmulticast mode [ 106.387598][ T6266] bridge_slave_1: entered promiscuous mode [ 106.433321][ T6235] hsr_slave_0: entered promiscuous mode [ 106.439781][ T5773] Bluetooth: hci2: command tx timeout [ 106.459823][ T6235] hsr_slave_1: entered promiscuous mode [ 106.663647][ T6383] loop4: detected capacity change from 0 to 64 [ 106.740668][ T1134] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.870210][ T6266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.895813][ T6266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.981780][ T1134] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.052946][ T6266] team0: Port device team_slave_0 added [ 107.080512][ T5773] Bluetooth: hci3: command tx timeout [ 107.098000][ T6266] team0: Port device team_slave_1 added [ 107.156179][ T1134] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.208939][ T6395] warning: `syz.4.139' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 107.233178][ T6266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.246108][ T6266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.273832][ T6266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.352866][ T1134] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.438854][ T6266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.453300][ T6266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.483568][ T6266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.604675][ T6266] hsr_slave_0: entered promiscuous mode [ 107.626566][ T6266] hsr_slave_1: entered promiscuous mode [ 107.640701][ T6266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.648334][ T6266] Cannot create hsr debugfs directory [ 107.964656][ T6419] loop4: detected capacity change from 0 to 512 [ 108.025280][ T6419] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 108.070226][ T6419] EXT4-fs (loop4): 1 truncate cleaned up [ 108.078979][ T6419] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.102408][ T6235] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 108.147849][ T6235] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 108.156825][ T6042] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.243968][ T6235] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 108.276659][ T6235] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 108.519637][ T5773] Bluetooth: hci2: command tx timeout [ 108.992461][ T6451] loop4: detected capacity change from 0 to 256 [ 109.004125][ T6266] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 109.053438][ T6451] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 109.091079][ T6266] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 109.115556][ T6266] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 109.128123][ T28] audit: type=1800 audit(1777295130.967:5): pid=6451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.151" name="file1" dev="loop4" ino=1048595 res=0 errno=0 [ 109.158334][ T6266] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 109.159953][ T5773] Bluetooth: hci3: command tx timeout [ 109.224718][ T6235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.332066][ T6235] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.457504][ T6350] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.464735][ T6350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.610945][ T6338] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.618143][ T6338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.995268][ T6465] netlink: 40 bytes leftover after parsing attributes in process `syz.4.155'. [ 110.092038][ T1134] hsr_slave_0: left promiscuous mode [ 110.118542][ T1134] hsr_slave_1: left promiscuous mode [ 110.153754][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.173738][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.190840][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.208626][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.229298][ T1134] bridge_slave_1: left allmulticast mode [ 110.235160][ T1134] bridge_slave_1: left promiscuous mode [ 110.261519][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.310712][ T1134] bridge_slave_0: left allmulticast mode [ 110.316886][ T1134] bridge_slave_0: left promiscuous mode [ 110.341686][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.386098][ T6459] loop1: detected capacity change from 0 to 32768 [ 110.442759][ T6459] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.154 (6459) [ 110.479053][ T1134] veth1_macvtap: left promiscuous mode [ 110.484822][ T1134] veth0_macvtap: left promiscuous mode [ 110.496262][ T6459] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 110.508142][ T1134] veth1_vlan: left promiscuous mode [ 110.513601][ T1134] veth0_vlan: left promiscuous mode [ 110.520526][ T6459] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 110.529240][ T6459] BTRFS info (device loop1): using free space tree [ 110.600020][ T5773] Bluetooth: hci2: command tx timeout [ 110.646604][ T6459] BTRFS info (device loop1): enabling ssd optimizations [ 110.658821][ T6459] BTRFS info (device loop1): auto enabling async discard [ 110.975619][ T5762] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 111.519610][ T6511] loop1: detected capacity change from 0 to 256 [ 111.578745][ T6511] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x395e47cf, utbl_chksum : 0xe619d30d) [ 112.116878][ T1134] team0 (unregistering): Port device team_slave_1 removed [ 112.136375][ T1189] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 112.198877][ T1134] team0 (unregistering): Port device team_slave_0 removed [ 112.258085][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.303058][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.331821][ T1189] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 112.341387][ T1189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.354530][ T1189] usb 2-1: config 0 descriptor?? [ 112.477730][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 112.684131][ T1134] bond0 (unregistering): Released all slaves [ 112.702185][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.724719][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.735574][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 112.749041][ T8] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 112.758466][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.769904][ T8] usb 5-1: config 0 descriptor?? [ 112.867041][ T6266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.914205][ T6266] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.004733][ T6346] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.011975][ T6346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.078696][ T6340] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.085953][ T6340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.236829][ T8] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 113.348549][ T8] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 113.507770][ T6235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.610261][ T1189] usb 2-1: Cannot set autoneg [ 113.616039][ T1189] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 113.676520][ T1189] usb 2-1: USB disconnect, device number 4 [ 113.825448][ T6266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.125173][ T6235] veth0_vlan: entered promiscuous mode [ 114.156579][ T6235] veth1_vlan: entered promiscuous mode [ 114.206419][ T6235] veth0_macvtap: entered promiscuous mode [ 114.252383][ T6235] veth1_macvtap: entered promiscuous mode [ 114.326904][ T6235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.348213][ T6235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.358514][ T6235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.389501][ T6235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.406752][ C0] plantronics 0003:047F:FFFF.0002: usb_submit_urb(ctrl) failed: -1 [ 114.417882][ T6235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.432206][ T9] usb 5-1: USB disconnect, device number 2 [ 114.463900][ T6235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.501026][ T6235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.528416][ T6235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.554444][ T6235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.581439][ T6235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.632472][ T6235] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.649644][ T6235] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.658406][ T6235] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.668453][ T6235] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.788393][ T6266] veth0_vlan: entered promiscuous mode [ 114.827524][ T6266] veth1_vlan: entered promiscuous mode [ 114.917829][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.966984][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.010471][ T6266] veth0_macvtap: entered promiscuous mode [ 115.052520][ T6563] loop1: detected capacity change from 0 to 40427 [ 115.061190][ T6266] veth1_macvtap: entered promiscuous mode [ 115.085291][ T6563] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 115.110926][ T6563] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 115.138748][ T3485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.143399][ T6563] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 115.160602][ T3485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.202086][ T6563] F2FS-fs (loop1): Found nat_bits in checkpoint [ 115.214707][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.269374][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.299458][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.346117][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.358080][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.368995][ T6563] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 115.378811][ T6563] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 115.387240][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.413182][ T6266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.505850][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.534160][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.575592][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.607581][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.627738][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.661561][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.695113][ T6266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.734729][ T6266] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.755689][ T6266] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.766062][ T6266] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.775215][ T6266] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.924440][ T6590] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.992917][ T3485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.024019][ T6590] gretap0: entered promiscuous mode [ 116.029989][ T3485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.062326][ T6590] vlan2: entered promiscuous mode [ 116.268461][ T6578] loop4: detected capacity change from 0 to 40427 [ 116.306081][ T6578] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 116.311386][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.350111][ T6578] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 116.363775][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.414431][ T6578] F2FS-fs (loop4): invalid crc value [ 116.478500][ T6578] F2FS-fs (loop4): Found nat_bits in checkpoint [ 116.677300][ T6597] loop5: detected capacity change from 0 to 4096 [ 116.705717][ T6578] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 116.724081][ T6578] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 116.939459][ T1189] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 116.975013][ T48] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 117.015372][ T48] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 117.152652][ T1189] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 117.195295][ T1189] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 117.227123][ T1189] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 117.259443][ T1189] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 117.292041][ T1189] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 117.315892][ T1189] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.355141][ T1189] usb 7-1: Product: syz [ 117.365226][ T1189] usb 7-1: Manufacturer: syz [ 117.379567][ T1189] usb 7-1: SerialNumber: syz [ 117.403100][ T6603] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 117.432090][ T1189] cdc_mbim 7-1:1.0: skipping garbage [ 117.510945][ T5801] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 117.636358][ T6603] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 117.656558][ T6603] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 117.709603][ T5801] usb 6-1: Using ep0 maxpacket: 32 [ 117.722394][ T5801] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 117.743363][ T5801] usb 6-1: config 0 has no interface number 0 [ 117.767806][ T5801] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 117.803285][ T5801] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 117.813596][ T5801] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.833411][ T5801] usb 6-1: Product: syz [ 117.838261][ T5801] usb 6-1: Manufacturer: syz [ 117.858202][ T5801] usb 6-1: SerialNumber: syz [ 117.879226][ T5801] usb 6-1: config 0 descriptor?? [ 117.903551][ T5801] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 117.915487][ T5801] em28xx 6-1:0.132: Video interface 132 found: [ 118.032312][ T6630] loop4: detected capacity change from 0 to 2048 [ 118.057383][ T6630] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 118.091556][ T6630] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.289843][ T6603] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 118.297268][ T6603] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 118.306104][ T5801] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 118.324682][ T1189] cdc_mbim 7-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 118.333801][ T1189] cdc_mbim 7-1:1.0: setting rx_max = 2048 [ 118.534310][ T1189] cdc_mbim 7-1:1.0: setting tx_max = 184 [ 118.549983][ T1189] cdc_mbim 7-1:1.0: cdc-wdm0: USB WDM device [ 118.593310][ T1189] wwan wwan0: port wwan0mbim0 attached [ 118.639202][ T1189] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.6-1, CDC MBIM, e6:c4:33:49:3b:33 [ 118.773045][ T1189] usb 7-1: USB disconnect, device number 2 [ 118.790952][ T1189] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.6-1, CDC MBIM [ 118.872770][ T1189] wwan wwan0: port wwan0mbim0 disconnected [ 118.935119][ T27] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 119.134647][ T27] usb 5-1: unable to get BOS descriptor or descriptor too short [ 119.162878][ T27] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.179517][ T27] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 119.188643][ T27] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 119.201652][ T27] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 119.216490][ T27] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 119.230534][ T27] usb 5-1: config 1 interface 1 has no altsetting 0 [ 119.243416][ T27] usb 5-1: string descriptor 0 read error: -22 [ 119.250389][ T27] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 119.260297][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.452015][ T6660] netlink: 104 bytes leftover after parsing attributes in process `syz.6.184'. [ 119.480137][ T5801] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 119.517186][ T5801] em28xx 6-1:0.132: board has no eeprom [ 119.528984][ T6613] em28xx 6-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 119.629630][ T5801] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 119.638745][ T5801] em28xx 6-1:0.132: analog set to bulk mode. [ 119.667668][ T5830] em28xx 6-1:0.132: Registering V4L2 extension [ 119.710011][ T5801] usb 6-1: USB disconnect, device number 2 [ 119.727924][ T5801] em28xx 6-1:0.132: Disconnecting em28xx [ 120.029221][ T5830] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 120.055232][ T5830] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 120.070098][ T5830] em28xx 6-1:0.132: No AC97 audio processor [ 120.118221][ T5830] usb 6-1: Decoder not found [ 120.128163][ T5830] em28xx 6-1:0.132: failed to create media graph [ 120.148532][ T5830] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 120.210960][ T5830] em28xx 6-1:0.132: Remote control support is not available for this card. [ 120.249610][ T5801] em28xx 6-1:0.132: Closing input extension [ 120.335786][ T5801] em28xx 6-1:0.132: Freeing device [ 120.525124][ T6449] usb 5-1: USB disconnect, device number 3 [ 121.126674][ T6715] loop6: detected capacity change from 0 to 1024 [ 121.170339][ T6715] EXT4-fs: inline encryption not supported [ 121.273480][ T6715] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.400370][ T28] audit: type=1800 audit(1777295143.237:6): pid=6715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.197" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 121.581700][ T6266] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.757791][ T6703] loop1: detected capacity change from 0 to 32768 [ 121.821391][ T6703] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.194 (6703) [ 121.886380][ T6703] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 121.907689][ T6703] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 121.922704][ T6703] BTRFS info (device loop1): enabling auto defrag [ 121.947721][ T6703] BTRFS info (device loop1): use no compression [ 121.965536][ T6703] BTRFS info (device loop1): max_inline at 4096 [ 122.000954][ T6703] BTRFS info (device loop1): using free space tree [ 122.079505][ T6749] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 122.079602][ T27] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 122.251875][ T6703] BTRFS info (device loop1): enabling ssd optimizations [ 122.258929][ T6703] BTRFS info (device loop1): auto enabling async discard [ 122.304942][ T27] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 122.324340][ T27] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 122.359472][ T27] usb 5-1: Product: syz [ 122.363713][ T27] usb 5-1: Manufacturer: syz [ 122.368340][ T27] usb 5-1: SerialNumber: syz [ 122.392754][ T27] usb 5-1: config 0 descriptor?? [ 122.412701][ T27] ch341 5-1:0.0: ch341-uart converter detected [ 122.413165][ T28] audit: type=1800 audit(1777295144.247:7): pid=6703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.194" name="file1" dev="loop1" ino=263 res=0 errno=0 [ 122.589470][ T8] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 122.675050][ T5762] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 122.790312][ T8] usb 7-1: Using ep0 maxpacket: 32 [ 122.814565][ T8] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 122.831141][ T8] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 122.884917][ T8] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 122.934177][ T8] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 122.999861][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 123.014681][ T8] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 123.049509][ T8] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 123.058015][ T8] usb 7-1: Product: syz [ 123.109501][ T8] usb 7-1: Manufacturer: syz [ 123.119410][ T8] usb 7-1: SerialNumber: syz [ 123.140899][ T8] usb 7-1: config 0 descriptor?? [ 123.170292][ T8] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 123.215607][ T8] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 123.410289][ T6449] usb 7-1: USB disconnect, device number 3 [ 123.416227][ C0] ldusb 7-1:0.0: usb_submit_urb failed (-19) [ 123.435304][ T27] ch341-uart ttyUSB0: break control not supported, using simulated break [ 123.447811][ T6449] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 123.487077][ T27] usb 5-1: ch341-uart converter now attached to ttyUSB0 [ 123.545433][ T27] usb 5-1: USB disconnect, device number 4 [ 123.597711][ T27] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 123.616508][ T27] ch341 5-1:0.0: device disconnected [ 124.272574][ T6823] loop6: detected capacity change from 0 to 64 [ 125.356736][ T6857] loop5: detected capacity change from 0 to 1024 [ 125.381664][ T6857] ext4: Bad value for 'max_dir_size_kb' [ 125.449118][ T5776] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 125.593547][ T6863] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 126.030377][ T6882] loop6: detected capacity change from 0 to 128 [ 126.070326][ T6882] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 126.072788][ T6850] loop1: detected capacity change from 0 to 32768 [ 126.082396][ T8] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 126.097871][ T6882] hpfs: filesystem error: improperly stopped [ 126.104756][ T6882] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 126.113316][ T6882] hpfs: You really don't want any checks? You are crazy... [ 126.121507][ T6882] hpfs: Code page index out of array [ 126.126975][ T6882] hpfs: code page support is disabled [ 126.132964][ T6882] hpfs: hpfs_map_4sectors(): unaligned read [ 126.139695][ T6882] hpfs: hpfs_map_4sectors(): unaligned read [ 126.146922][ T6882] hpfs: filesystem error: unable to find root dir [ 126.157671][ T6850] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.227 (6850) [ 126.233096][ T6850] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 126.292957][ T6850] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 126.318120][ T8] usb 6-1: config 0 has no interfaces? [ 126.325136][ T6850] BTRFS info (device loop1): force clearing of disk cache [ 126.333785][ T6850] BTRFS info (device loop1): metadata ratio 0 [ 126.341414][ T8] usb 6-1: New USB device found, idVendor=23c5, idProduct=8699, bcdDevice=f8.85 [ 126.350882][ T8] usb 6-1: New USB device strings: Mfr=200, Product=24, SerialNumber=3 [ 126.359730][ T6850] BTRFS info (device loop1): enabling ssd optimizations [ 126.366829][ T8] usb 6-1: Product: syz [ 126.371547][ T8] usb 6-1: Manufacturer: syz [ 126.380282][ T6850] BTRFS info (device loop1): using spread ssd allocation scheme [ 126.388339][ T8] usb 6-1: SerialNumber: syz [ 126.411144][ T6850] BTRFS info (device loop1): using free space tree [ 126.420933][ T8] usb 6-1: config 0 descriptor?? [ 126.611445][ T6850] BTRFS info (device loop1): auto enabling async discard [ 126.684509][ T6850] BTRFS info (device loop1): rebuilding free space tree [ 126.729596][ T6870] netlink: 12 bytes leftover after parsing attributes in process `syz.5.234'. [ 126.791423][ T5804] usb 6-1: USB disconnect, device number 3 [ 126.838044][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a7e0800: rx timeout, send abort [ 126.849955][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a7e0800: 0x30000: (3) A timeout occurred and this is the connection abort to close the session. [ 127.137255][ T5762] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 127.302134][ T6921] loop4: detected capacity change from 0 to 128 [ 127.374559][ T6921] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 127.404661][ T6924] loop6: detected capacity change from 0 to 256 [ 127.583688][ T6924] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 127.745802][ T28] audit: type=1800 audit(1777295149.557:8): pid=6924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.241" name="file1" dev="loop6" ino=1048604 res=0 errno=0 [ 128.444766][ T6958] netlink: 'syz.1.250': attribute type 4 has an invalid length. [ 128.515796][ T6961] netlink: 'syz.1.250': attribute type 4 has an invalid length. [ 128.694129][ T6961] syz.1.250 (6961) used greatest stack depth: 20488 bytes left [ 128.884432][ T6976] loop4: detected capacity change from 0 to 1024 [ 128.958111][ T6976] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 129.049940][ T6976] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 129.059085][ T6976] EXT4-fs (loop4): orphan cleanup on readonly fs [ 129.100612][ T6976] EXT4-fs error (device loop4): ext4_free_blocks:6694: comm syz.4.256: Freeing blocks not in datazone - block = 0, count = 4096 [ 129.250396][ T6976] EXT4-fs (loop4): Remounting filesystem read-only [ 129.280004][ T6976] EXT4-fs (loop4): 1 orphan inode deleted [ 129.287041][ T6976] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 129.480409][ T6042] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.838187][ T7009] loop4: detected capacity change from 0 to 256 [ 129.964762][ T7009] FAT-fs (loop4): Directory bread(block 64) failed [ 130.000219][ T7009] FAT-fs (loop4): Directory bread(block 65) failed [ 130.029841][ T7009] FAT-fs (loop4): Directory bread(block 66) failed [ 130.053071][ T7009] FAT-fs (loop4): Directory bread(block 67) failed [ 130.069673][ T7009] FAT-fs (loop4): Directory bread(block 68) failed [ 130.086613][ T7009] FAT-fs (loop4): Directory bread(block 69) failed [ 130.107184][ T7009] FAT-fs (loop4): Directory bread(block 70) failed [ 130.132739][ T7009] FAT-fs (loop4): Directory bread(block 71) failed [ 130.146291][ T7009] FAT-fs (loop4): Directory bread(block 72) failed [ 130.153582][ T7009] FAT-fs (loop4): Directory bread(block 73) failed [ 130.651900][ T7037] loop1: detected capacity change from 0 to 1024 [ 130.742911][ T7037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 130.806285][ T7037] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.888809][ T7037] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: comm syz.1.273: lblock 0 mapped to illegal pblock 0 (length 1) [ 130.939909][ T7037] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 130.981884][ T7037] EXT4-fs (loop1): This should not happen!! Data will be lost [ 130.981884][ T7037] [ 131.039549][ T7052] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #15: comm syz.1.273: lblock 0 mapped to illegal pblock 0 (length 1) [ 131.067479][ T7057] loop4: detected capacity change from 0 to 512 [ 131.112551][ T7052] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #15: comm syz.1.273: lblock 0 mapped to illegal pblock 0 (length 1) [ 131.171621][ T7052] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #15: comm syz.1.273: lblock 0 mapped to illegal pblock 0 (length 1) [ 131.242093][ T7036] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #15: comm syz.1.273: lblock 0 mapped to illegal pblock 0 (length 1) [ 131.308404][ T7036] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #15: comm syz.1.273: lblock 0 mapped to illegal pblock 0 (length 1) [ 131.338915][ T7052] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #15: comm syz.1.273: lblock 0 mapped to illegal pblock 0 (length 1) [ 131.358844][ T7036] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #15: comm syz.1.273: lblock 0 mapped to illegal pblock 0 (length 1) [ 131.378194][ T7052] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #15: comm syz.1.273: lblock 0 mapped to illegal pblock 0 (length 1) [ 131.411473][ T7036] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #15: comm syz.1.273: lblock 0 mapped to illegal pblock 0 (length 1) [ 131.587515][ T7073] loop6: detected capacity change from 0 to 128 [ 131.772073][ T28] audit: type=1800 audit(1777295153.607:9): pid=7073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.282" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=1048609 res=0 errno=0 [ 131.814328][ C0] vkms_vblank_simulate: vblank timer overrun [ 131.860019][ T5762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 132.041522][ T7081] input: syz0 as /devices/virtual/input/input8 [ 132.109131][ T7062] loop5: detected capacity change from 0 to 32768 [ 132.243710][ T7062] JBD2: Ignoring recovery information on journal [ 132.367519][ T7062] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 132.515121][ T7062] (syz.5.279,7062,0):ocfs2_get_suballoc_slot_bit:2726 ERROR: invalid inode 2 requested [ 132.547640][ T7062] (syz.5.279,7062,0):ocfs2_get_suballoc_slot_bit:2751 ERROR: status = -22 [ 132.580011][ T7062] (syz.5.279,7062,1):ocfs2_test_inode_bit:2833 ERROR: get alloc slot and bit failed -22 [ 132.603207][ T7062] (syz.5.279,7062,1):ocfs2_test_inode_bit:2874 ERROR: status = -22 [ 132.849744][ T6235] ocfs2: Unmounting device (7,5) on (node local) [ 132.967778][ T7082] loop1: detected capacity change from 0 to 40427 [ 133.033826][ T7082] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 133.079463][ T7082] F2FS-fs (loop1): Image doesn't support compression [ 133.111651][ T7082] F2FS-fs (loop1): invalid crc value [ 133.173928][ T7082] F2FS-fs (loop1): Found nat_bits in checkpoint [ 133.335399][ T7082] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 133.405499][ T7082] syz.1.285: attempt to access beyond end of device [ 133.405499][ T7082] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 133.540331][ T5762] syz-executor: attempt to access beyond end of device [ 133.540331][ T5762] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 133.567387][ T5762] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 133.863047][ T7105] loop4: detected capacity change from 0 to 32768 [ 133.966864][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.978656][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.088619][ T7105] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=44, index = 4 [ 134.088619][ T7105] [ 134.161678][ T7105] ERROR: (device loop4): remounting filesystem as read-only [ 134.254818][ T7129] Zero length message leads to an empty skb [ 134.259093][ T7119] loop5: detected capacity change from 0 to 32768 [ 134.404609][ T28] audit: type=1800 audit(1777295156.237:10): pid=7119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.291" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 134.718516][ T48] read_mapping_page failed! [ 134.750777][ T48] ERROR: (device loop5): txCommit: [ 134.750777][ T48] [ 134.799950][ T48] ERROR: (device loop5): remounting filesystem as read-only [ 134.807358][ T48] jfs_write_inode: jfs_commit_inode failed! [ 135.586729][ T7177] loop1: detected capacity change from 0 to 512 [ 135.634098][ T7177] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 135.734592][ T7177] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.761702][ T7177] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 136.002925][ T5762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.259208][ T1134] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.425501][ C0] hrtimer: interrupt took 386329 ns [ 136.713356][ T1134] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.931777][ T1134] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.209191][ T1134] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.256513][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 137.271990][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 137.282910][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 137.302992][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 137.314570][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 137.334439][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 138.589550][ T7257] loop5: detected capacity change from 0 to 8 [ 138.892116][ T7223] chnl_net:caif_netlink_parms(): no params data found [ 139.400443][ T5773] Bluetooth: hci1: command tx timeout [ 140.066315][ T7223] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.100252][ T7223] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.128792][ T7223] bridge_slave_0: entered allmulticast mode [ 140.150672][ T7223] bridge_slave_0: entered promiscuous mode [ 140.182575][ T7223] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.216382][ T7223] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.263423][ T7223] bridge_slave_1: entered allmulticast mode [ 140.290804][ T7223] bridge_slave_1: entered promiscuous mode [ 140.622423][ T7223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.662911][ T7223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.746304][ T7282] loop5: detected capacity change from 0 to 32768 [ 140.842188][ T7282] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 141.016844][ T7282] XFS (loop5): Ending clean mount [ 141.199681][ T7223] team0: Port device team_slave_0 added [ 141.229166][ T7223] team0: Port device team_slave_1 added [ 141.272356][ T6235] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 141.489972][ T5773] Bluetooth: hci1: command tx timeout [ 141.508929][ T7299] loop6: detected capacity change from 0 to 32768 [ 141.590321][ T7223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.597327][ T7223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.627481][ T7223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.835075][ T1134] hsr_slave_0: left promiscuous mode [ 141.901622][ T1134] hsr_slave_1: left promiscuous mode [ 141.917218][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.946510][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.050614][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.101335][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.150181][ T1134] bridge_slave_1: left allmulticast mode [ 142.155902][ T1134] bridge_slave_1: left promiscuous mode [ 142.196998][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.277221][ T1134] bridge_slave_0: left allmulticast mode [ 142.300697][ T1134] bridge_slave_0: left promiscuous mode [ 142.311831][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.598890][ T1134] veth1_macvtap: left promiscuous mode [ 142.605818][ T1134] veth0_macvtap: left promiscuous mode [ 142.619945][ T1134] veth1_vlan: left promiscuous mode [ 142.625367][ T1134] veth0_vlan: left promiscuous mode [ 143.570160][ T5773] Bluetooth: hci1: command tx timeout [ 143.732893][ T7344] loop6: detected capacity change from 0 to 1024 [ 143.765347][ T7344] EXT4-fs: Ignoring removed i_version option [ 143.799034][ T7344] EXT4-fs: Ignoring removed bh option [ 143.819678][ T7344] ext4: Unknown parameter 'nouser_xattr' [ 144.144681][ T6449] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 144.195172][ T6449] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 144.353035][ T1134] team0 (unregistering): Port device team_slave_1 removed [ 144.389855][ T8] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 144.461459][ T1134] team0 (unregistering): Port device team_slave_0 removed [ 144.557617][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.627303][ T8] usb 6-1: config 0 has no interfaces? [ 144.659767][ T8] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.679526][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 144.692243][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.699484][ T8] usb 6-1: SerialNumber: syz [ 144.725965][ T8] usb 6-1: config 0 descriptor?? [ 145.072171][ T5830] usb 6-1: USB disconnect, device number 4 [ 145.521070][ T1134] bond0 (unregistering): Released all slaves [ 145.621619][ T7223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.628732][ T7223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.656399][ T5773] Bluetooth: hci1: command tx timeout [ 145.701485][ T7223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.964941][ T7223] hsr_slave_0: entered promiscuous mode [ 145.994472][ T7223] hsr_slave_1: entered promiscuous mode [ 146.009491][ T7223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.029394][ T7223] Cannot create hsr debugfs directory [ 146.943055][ T7223] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 146.978518][ T7223] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 147.007317][ T7223] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 147.038162][ T7223] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 147.361342][ T7223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.435104][ T7223] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.498891][ T6350] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.506131][ T6350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.566124][ T7359] loop1: detected capacity change from 0 to 32768 [ 147.592533][ T6350] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.599792][ T6350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.767323][ T7223] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.491664][ T7405] loop5: detected capacity change from 0 to 7 [ 148.521327][ T7405] Dev loop5: unable to read RDB block 7 [ 148.527012][ T7405] loop5: unable to read partition table [ 148.603055][ T7405] loop5: partition table beyond EOD, truncated [ 148.612508][ T7223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.633691][ T7405] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 149.370312][ T7427] vivid-003: disconnect [ 149.391687][ T7427] vivid-003: reconnect [ 149.969507][ T5804] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 150.106050][ T7223] veth0_vlan: entered promiscuous mode [ 150.161785][ T7223] veth1_vlan: entered promiscuous mode [ 150.179445][ T5804] usb 7-1: Using ep0 maxpacket: 8 [ 150.186878][ T5804] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 150.220600][ T5804] usb 7-1: config 179 has no interface number 0 [ 150.247328][ T5804] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 150.321853][ T5804] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 150.342671][ T7223] veth0_macvtap: entered promiscuous mode [ 150.381829][ T5804] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 150.386488][ T7223] veth1_macvtap: entered promiscuous mode [ 150.410665][ T5804] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 150.451115][ T5804] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 150.485311][ T7223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.495111][ T5804] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 150.498399][ T7223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.517202][ T5804] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.537030][ T7223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.556291][ T7223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.564943][ T7437] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 150.571757][ T7223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.589580][ T7223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.625243][ T7223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.757492][ T7223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.794719][ T7223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.835717][ T7223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.863999][ T7223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.886602][ T7223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.900411][ T7223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.945071][ T5804] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input9 [ 150.977049][ T7223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.082829][ T7223] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.119646][ T7437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.149577][ T7223] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.182262][ T7437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.259484][ T7223] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.334721][ T7223] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.526111][ T27] usb 7-1: USB disconnect, device number 4 [ 151.526174][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 151.526219][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 151.549482][ T7470] loop3: detected capacity change from 0 to 7 [ 151.575662][ T7470] Dev loop3: unable to read RDB block 7 [ 151.605554][ T7470] loop3: unable to read partition table [ 151.634326][ T27] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 151.668583][ T7470] loop3: partition table beyond EOD, truncated [ 151.698421][ T7470] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 151.818096][ T6346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.863213][ T6346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.039930][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.056280][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.626648][ T7486] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 153.048935][ T7467] loop5: detected capacity change from 0 to 32768 [ 153.093629][ T7467] (syz.5.378,7467,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 153.112834][ T7467] (syz.5.378,7467,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 153.258589][ T7467] JBD2: Ignoring recovery information on journal [ 153.525554][ T7467] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 154.104568][ T7467] syz.5.378 (7467) used greatest stack depth: 18768 bytes left [ 154.110094][ T7521] loop1: detected capacity change from 0 to 256 [ 154.210102][ T6449] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 154.269073][ T7521] FAT-fs (loop1): Directory bread(block 64) failed [ 154.310454][ T7521] FAT-fs (loop1): Directory bread(block 65) failed [ 154.330532][ T7521] FAT-fs (loop1): Directory bread(block 66) failed [ 154.343490][ T7521] FAT-fs (loop1): Directory bread(block 67) failed [ 154.369854][ T7521] FAT-fs (loop1): Directory bread(block 68) failed [ 154.376545][ T7521] FAT-fs (loop1): Directory bread(block 69) failed [ 154.423618][ T7521] FAT-fs (loop1): Directory bread(block 70) failed [ 154.439850][ T6449] usb 8-1: Using ep0 maxpacket: 16 [ 154.446030][ T7521] FAT-fs (loop1): Directory bread(block 71) failed [ 154.456957][ T6235] ocfs2: Unmounting device (7,5) on (node local) [ 154.478182][ T7521] FAT-fs (loop1): Directory bread(block 72) failed [ 154.500758][ T6449] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.501034][ T7521] FAT-fs (loop1): Directory bread(block 73) failed [ 154.579865][ T6449] usb 8-1: config 0 interface 0 has no altsetting 0 [ 154.620343][ T6449] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 154.651894][ T6449] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.712476][ T6449] usb 8-1: config 0 descriptor?? [ 155.274929][ T6449] nzxt-smart2 0003:1E71:2009.0004: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.7-1/input0 [ 155.465338][ T7541] netlink: 'syz.5.394': attribute type 10 has an invalid length. [ 155.677080][ T5804] usb 8-1: USB disconnect, device number 2 [ 155.738682][ T7541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.766159][ T7543] fido_id[7543]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 155.766792][ T7541] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 155.818309][ T7544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.894632][ T7544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.918348][ T7550] loop1: detected capacity change from 0 to 4096 [ 155.967092][ T7544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.995216][ T7550] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 156.045760][ T7544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.177615][ T7550] ntfs: (device loop1): parse_options(): NLS character set macgreÿ not found. Using previous one utf8. [ 156.274263][ T7550] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 156.344511][ T7550] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 156.401727][ T7544] bond0: (slave batadv0): Releasing backup interface [ 156.457763][ T7550] ntfs: volume version 3.1. [ 156.542625][ T7550] ntfs: (device loop1): ntfs_index_lookup(): Corrupt index. Aborting lookup. [ 156.585648][ T7550] ntfs: (device loop1): ntfs_mark_quotas_out_of_date(): Lookup of quota defaults entry failed. [ 156.629606][ T7550] ntfs: (device loop1): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 157.468127][ T7572] kvm: user requested TSC rate below hardware speed [ 157.534874][ T7572] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 157.743358][ T7576] Illegal XDP return value 4294967274 on prog (id 21) dev syz_tun, expect packet loss! [ 159.600597][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 159.833362][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.855671][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.877626][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 159.899779][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 159.919839][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.002675][ T9] usb 6-1: config 0 descriptor?? [ 160.540060][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd [ 160.584234][ T9] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 160.676540][ T9] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 160.773826][ T9] usb 6-1: USB disconnect, device number 5 [ 160.991222][ T7612] fido_id[7612]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 162.516213][ T7617] loop5: detected capacity change from 0 to 512 [ 162.627449][ T7617] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.413: inode has both inline data and extents flags [ 162.799453][ T7617] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.413: couldn't read orphan inode 15 (err -117) [ 162.927567][ T7617] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.942788][ T7622] netlink: 'syz.6.412': attribute type 10 has an invalid length. [ 162.969930][ T7620] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 163.021651][ T7617] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 163.173891][ T6235] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.177767][ T7622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.258680][ T7622] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 163.338081][ T7623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.431846][ T7623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.581268][ T7623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.588757][ T7623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.794008][ T7623] bond0: (slave batadv0): Releasing backup interface [ 165.825459][ T7668] loop7: detected capacity change from 0 to 2048 [ 165.965979][ T7668] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.049779][ T7692] loop6: detected capacity change from 0 to 128 [ 168.260379][ T7223] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.978096][ T7720] loop5: detected capacity change from 0 to 16 [ 169.082658][ T7722] netlink: 'syz.7.427': attribute type 10 has an invalid length. [ 169.110572][ T7720] erofs: (device loop5): mounted with root inode @ nid 36. [ 169.258083][ T7722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.302915][ T7722] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 169.446774][ T7723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.493240][ T7723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.549130][ T7723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.565222][ T7723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.731605][ T7723] bond0: (slave batadv0): Releasing backup interface [ 171.129832][ T7754] loop6: detected capacity change from 0 to 16 [ 171.174560][ T7754] erofs: (device loop6): mounted with root inode @ nid 36. [ 172.515336][ T7789] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input11 [ 174.092161][ T7825] input: syz0 as /devices/virtual/input/input12 [ 174.388297][ T7833] loop1: detected capacity change from 0 to 256 [ 174.489816][ T7833] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d) [ 174.629097][ T7832] exFAT-fs (loop1): error, exfat_zeroed_cluster: out of range(sect:224 len:8) [ 174.709529][ T7832] exFAT-fs (loop1): Filesystem has been set read-only [ 175.877124][ T7874] loop7: detected capacity change from 0 to 256 [ 175.963399][ T7874] FAT-fs (loop7): Directory bread(block 64) failed [ 175.990848][ T7874] FAT-fs (loop7): Directory bread(block 65) failed [ 176.005424][ T7874] FAT-fs (loop7): Directory bread(block 66) failed [ 176.020927][ T7874] FAT-fs (loop7): Directory bread(block 67) failed [ 176.036840][ T7874] FAT-fs (loop7): Directory bread(block 68) failed [ 176.067293][ T7874] FAT-fs (loop7): Directory bread(block 69) failed [ 176.102984][ T7874] FAT-fs (loop7): Directory bread(block 70) failed [ 176.112248][ T7874] FAT-fs (loop7): Directory bread(block 71) failed [ 176.126852][ T7874] FAT-fs (loop7): Directory bread(block 72) failed [ 176.147144][ T7874] FAT-fs (loop7): Directory bread(block 73) failed [ 176.355014][ T7874] xt_hashlimit: size too large, truncated to 1048576 [ 177.022246][ T7894] syzkaller1: entered promiscuous mode [ 177.048287][ T7894] syzkaller1: entered allmulticast mode [ 177.330019][ T5830] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 177.432111][ T7905] loop0: detected capacity change from 0 to 8 [ 177.469008][ T7905] Dev loop0: unable to read RDB block 8 [ 177.484438][ T7905] loop0: unable to read partition table [ 177.501941][ T7905] loop0: partition table beyond EOD, truncated [ 177.521491][ T7905] loop_reread_partitions: partition scan of loop0 (ÄNùh*h‘…ÿìžÝ×pਸ਼ "ýo§æ?<í ¯ÊºöÙXDˆÚbÔÌp0ìO{š¸›>.) failed (rc=-5) [ 177.537748][ T7903] loop6: detected capacity change from 0 to 4096 [ 177.564167][ T5830] usb 2-1: unable to get BOS descriptor or descriptor too short [ 177.580062][ T5830] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 177.651378][ T5830] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 177.685520][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.699971][ T5830] usb 2-1: Product: syz [ 177.704203][ T5830] usb 2-1: Manufacturer: syz [ 177.729192][ T5830] usb 2-1: SerialNumber: syz [ 177.972927][ T5830] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 178.177626][ T5830] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 178.237322][ T5830] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 178.568472][ T5830] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 178.593204][ T5830] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 178.782964][ T5830] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 178.958097][ T5830] usb 2-1: USB disconnect, device number 5 [ 178.969826][ T5803] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 179.144648][ T5776] udevd[5776]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 179.263146][ T5803] usb 7-1: Using ep0 maxpacket: 8 [ 179.277570][ T5803] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.309712][ T5803] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 179.318918][ T7956] dccp_xmit_packet: Payload too large (65475) for featneg. [ 179.349752][ T5803] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 179.384531][ T5803] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 179.438496][ T5803] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 179.467102][ T5803] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.528484][ T5803] hub 7-1:1.0: bad descriptor, ignoring hub [ 179.558433][ T5803] hub: probe of 7-1:1.0 failed with error -5 [ 179.590122][ T5803] cdc_wdm 7-1:1.0: skipping garbage [ 179.596382][ T5803] cdc_wdm 7-1:1.0: skipping garbage [ 179.658147][ T5803] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 179.667220][ T7913] loop5: detected capacity change from 0 to 32768 [ 179.676234][ T5803] cdc_wdm 7-1:1.0: Unknown control protocol [ 179.710519][ T7913] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.485 (7913) [ 179.852779][ T7913] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 179.893835][ T7913] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 179.948280][ T7913] BTRFS info (device loop5): enabling ssd optimizations [ 179.989747][ T7913] BTRFS info (device loop5): using spread ssd allocation scheme [ 180.014178][ T7913] BTRFS info (device loop5): using free space tree [ 180.200571][ T5803] usb 7-1: USB disconnect, device number 5 [ 180.321577][ T7913] BTRFS info (device loop5): auto enabling async discard [ 180.546517][ T7913] kernel write not supported for file [fanotify] (pid: 7913 comm: syz.5.485) [ 180.590077][ T5830] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 180.605618][ T6235] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 180.657305][ T7960] loop1: detected capacity change from 0 to 32768 [ 180.793975][ T5830] usb 7-1: Using ep0 maxpacket: 8 [ 180.811825][ T5830] usb 7-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 180.813152][ T7960] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 180.876229][ T5830] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 180.889397][ T5830] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 180.910862][ T5830] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 180.920454][ T5830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.934999][ T5830] hub 7-1:1.0: bad descriptor, ignoring hub [ 180.941273][ T5830] hub: probe of 7-1:1.0 failed with error -5 [ 180.955950][ T5830] cdc_wdm 7-1:1.0: skipping garbage [ 180.961811][ T5830] cdc_wdm 7-1:1.0: skipping garbage [ 180.967068][ T5830] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 181.038257][ T7960] XFS (loop1): Ending clean mount [ 181.329732][ T5804] usb 7-1: USB disconnect, device number 6 [ 181.435519][ T7981] loop7: detected capacity change from 0 to 32768 [ 181.533665][ T5762] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 181.553784][ T7981] JBD2: Ignoring recovery information on journal [ 181.792776][ T7981] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 182.232942][ T28] audit: type=1804 audit(1777295204.067:11): pid=8007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.483" name="/newroot/26/file1/file1" dev="loop7" ino=17058 res=1 errno=0 [ 182.277205][ T28] audit: type=1804 audit(1777295204.107:12): pid=8009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.483" name="/newroot/26/file1/file1" dev="loop7" ino=17058 res=1 errno=0 [ 182.811052][ T7223] ocfs2: Unmounting device (7,7) on (node local) [ 183.540940][ T8018] loop1: detected capacity change from 0 to 131072 [ 183.550290][ T8018] F2FS-fs (loop1): Invalid log sectorsize (67108873) [ 183.557051][ T8018] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 183.573494][ T8018] F2FS-fs (loop1): invalid crc value [ 183.690088][ T8018] F2FS-fs (loop1): Found nat_bits in checkpoint [ 183.706990][ T7998] loop5: detected capacity change from 0 to 40427 [ 183.776133][ T7998] F2FS-fs (loop5): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 183.794940][ T8018] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 183.802224][ T8018] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 183.864971][ T7998] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 183.950101][ T7998] F2FS-fs (loop5): invalid crc value [ 184.004782][ T7998] F2FS-fs (loop5): Found nat_bits in checkpoint [ 185.720617][ T5804] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 185.944763][ T5804] usb 6-1: Using ep0 maxpacket: 8 [ 185.968363][ T5804] usb 6-1: config 135 has an invalid interface number: 230 but max is 0 [ 185.983824][ T5804] usb 6-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 186.022900][ T5804] usb 6-1: config 135 has no interface number 0 [ 186.047851][ T5804] usb 6-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 186.100483][ T5804] usb 6-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 186.132439][ T5804] usb 6-1: config 135 interface 230 has no altsetting 0 [ 186.155938][ T5804] usb 6-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 186.167935][ T5804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.201978][ T5804] usb 6-1: Product: syz [ 186.206208][ T5804] usb 6-1: Manufacturer: syz [ 186.214614][ T5804] usb 6-1: SerialNumber: syz [ 186.478088][ T5803] usb 6-1: USB disconnect, device number 6 [ 186.552017][ T8080] loop1: detected capacity change from 0 to 2048 [ 186.588641][ T8080] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 186.919936][ T5153] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 187.157261][ T5153] usb 7-1: Using ep0 maxpacket: 8 [ 187.193408][ T5153] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 187.219589][ T5153] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 187.232847][ T5153] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 187.245243][ T5153] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.259678][ T5153] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 187.270273][ T5153] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.409593][ T5830] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 187.529984][ T5153] usb 7-1: GET_CAPABILITIES returned 0 [ 187.536406][ T5153] usbtmc 7-1:16.0: can't read capabilities [ 187.609526][ T5830] usb 6-1: Using ep0 maxpacket: 8 [ 187.616939][ T5830] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.628572][ T5830] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 187.658384][ T5830] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 187.671661][ T5830] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 187.683260][ T5830] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 187.695649][ T5830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.715611][ T5830] hub 6-1:1.0: bad descriptor, ignoring hub [ 187.722311][ T5830] hub: probe of 6-1:1.0 failed with error -5 [ 187.735416][ T5830] cdc_wdm 6-1:1.0: skipping garbage [ 187.741667][ T5830] cdc_wdm 6-1:1.0: skipping garbage [ 187.748359][ T5830] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 187.757829][ T5830] cdc_wdm 6-1:1.0: Unknown control protocol [ 187.773326][ T8082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.785257][ T8082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.816232][ C1] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 187.823067][ T28] audit: type=1326 audit(1777295209.647:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8081 comm="syz.6.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f079cdd9 code=0x7ffc0000 [ 187.832099][ T5830] usb 7-1: USB disconnect, device number 7 [ 187.889218][ T28] audit: type=1326 audit(1777295209.647:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8081 comm="syz.6.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f53f079cdd9 code=0x7ffc0000 [ 187.926050][ T28] audit: type=1326 audit(1777295209.667:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8081 comm="syz.6.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f079cdd9 code=0x7ffc0000 [ 187.952047][ T28] audit: type=1326 audit(1777295209.697:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8081 comm="syz.6.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f079cdd9 code=0x7ffc0000 [ 188.170081][ T5803] usb 6-1: USB disconnect, device number 7 [ 188.529464][ T5830] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 188.732024][ T5830] usb 6-1: Using ep0 maxpacket: 8 [ 188.741914][ T5830] usb 6-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 188.768544][ T5830] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 188.796277][ T5830] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 188.822840][ T5830] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 188.833991][ T5830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.867891][ T5830] hub 6-1:1.0: bad descriptor, ignoring hub [ 188.898085][ T5830] hub: probe of 6-1:1.0 failed with error -5 [ 188.903623][ T5803] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 188.908258][ T5830] cdc_wdm 6-1:1.0: skipping garbage [ 188.931212][ T5830] cdc_wdm 6-1:1.0: skipping garbage [ 188.936599][ T5830] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 189.139718][ T5803] usb 7-1: Using ep0 maxpacket: 8 [ 189.167473][ T5803] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.179605][ T5803] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 189.190900][ T5803] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 189.204603][ T5803] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 189.220266][ T5803] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 189.231350][ T5803] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.231931][ T1189] usb 6-1: USB disconnect, device number 8 [ 189.280467][ T5803] hub 7-1:1.0: bad descriptor, ignoring hub [ 189.287205][ T5803] hub: probe of 7-1:1.0 failed with error -5 [ 189.308247][ T5803] cdc_wdm 7-1:1.0: skipping garbage [ 189.327519][ T5803] cdc_wdm 7-1:1.0: skipping garbage [ 189.339642][ T5803] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 189.346597][ T5803] cdc_wdm 7-1:1.0: Unknown control protocol [ 189.553326][ T8088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.566720][ T8088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.709968][ T5153] usb 7-1: USB disconnect, device number 8 [ 190.109693][ T5153] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 190.341488][ T5153] usb 7-1: Using ep0 maxpacket: 16 [ 190.359945][ T5153] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 190.390553][ T5153] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 190.419407][ T5153] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 36816, setting to 1024 [ 190.452808][ T5153] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 190.472569][ T5153] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12161, setting to 1024 [ 190.491386][ T5153] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 190.512584][ T5153] usb 7-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 190.523737][ T5153] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.533747][ T5153] usb 7-1: Product: syz [ 190.539092][ T5153] usb 7-1: Manufacturer: syz [ 190.550300][ T5153] usb 7-1: SerialNumber: syz [ 190.568621][ T5153] usb 7-1: config 0 descriptor?? [ 190.613930][ C0] mcba_usb 7-1:0.0 can0: Tx URB aborted (-71) [ 190.622104][ T5153] mcba_usb 7-1:0.0: Microchip CAN BUS Analyzer connected [ 190.630536][ C0] mcba_usb 7-1:0.0 can0: Tx URB aborted (-71) [ 190.947824][ C0] mcba_usb 7-1:0.0 can0: Rx URB aborted (-75) [ 191.169991][ T5803] usb 7-1: USB disconnect, device number 9 [ 191.203383][ T5803] mcba_usb 7-1:0.0 can0: device disconnected [ 192.203390][ T8144] loop6: detected capacity change from 0 to 2048 [ 192.290254][ T8144] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 192.437398][ T8147] vlan2: entered promiscuous mode [ 192.449489][ T8147] bond0: entered promiscuous mode [ 192.510214][ T8147] bond_slave_0: entered promiscuous mode [ 192.551966][ T8147] bond_slave_1: entered promiscuous mode [ 192.948990][ T8164] vlan2: entered promiscuous mode [ 192.959596][ T8164] bond0: entered promiscuous mode [ 192.969278][ T8164] bond_slave_0: entered promiscuous mode [ 192.987301][ T8164] bond_slave_1: entered promiscuous mode [ 193.199478][ T966] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 193.409442][ T966] usb 8-1: Using ep0 maxpacket: 8 [ 193.426885][ T966] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.458052][ T966] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 193.477943][ T966] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 193.493547][ T966] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 193.506993][ T966] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 193.518836][ T966] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.537726][ T966] hub 8-1:1.0: bad descriptor, ignoring hub [ 193.546751][ T966] hub: probe of 8-1:1.0 failed with error -5 [ 193.564676][ T966] cdc_wdm 8-1:1.0: skipping garbage [ 193.582836][ T5803] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 193.584815][ T966] cdc_wdm 8-1:1.0: skipping garbage [ 193.621922][ T966] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 193.630848][ T966] cdc_wdm 8-1:1.0: Unknown control protocol [ 193.819590][ T5803] usb 6-1: Using ep0 maxpacket: 8 [ 193.837912][ T5803] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.868086][ T5803] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 193.919873][ T5803] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 193.969670][ T5803] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 194.006519][ T5803] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 194.018026][ T5803] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.092727][ T5803] hub 6-1:1.0: bad descriptor, ignoring hub [ 194.109432][ T5803] hub: probe of 6-1:1.0 failed with error -5 [ 194.127065][ T5803] cdc_wdm 6-1:1.0: skipping garbage [ 194.155407][ T5803] cdc_wdm 6-1:1.0: skipping garbage [ 194.324206][ T8178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.332545][ T8168] usb 8-1: reset high-speed USB device number 3 using dummy_hcd [ 194.364512][ T8178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.452076][ T5153] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 194.565250][ T8168] usb 8-1: device firmware changed [ 194.573342][ T8168] cdc_wdm 8-1:1.0: Error autopm - -16 [ 194.573437][ T966] usb 8-1: USB disconnect, device number 3 [ 194.608899][ T5803] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 194.618702][ T5803] cdc_wdm 6-1:1.0: Unknown control protocol [ 194.680471][ T5153] usb 7-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 194.698889][ T5153] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.708415][ T5153] usb 7-1: Product: syz [ 194.714217][ T5153] usb 7-1: Manufacturer: syz [ 194.731363][ T5153] usb 7-1: SerialNumber: syz [ 194.744471][ T5153] usb 7-1: config 0 descriptor?? [ 194.761865][ T5153] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 194.769878][ T966] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 194.935681][ T5803] usb 6-1: reset high-speed USB device number 9 using dummy_hcd [ 194.959443][ T966] usb 8-1: Using ep0 maxpacket: 8 [ 194.967000][ T5803] usb 6-1: device reset changed ep0 maxpacket size! [ 194.972166][ T966] usb 8-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 194.983456][ T5803] usb 6-1: USB disconnect, device number 9 [ 195.017461][ T966] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 195.042306][ T966] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 195.071364][ T966] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 195.080790][ T966] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.108927][ T966] hub 8-1:1.0: bad descriptor, ignoring hub [ 195.130366][ T966] hub: probe of 8-1:1.0 failed with error -5 [ 195.154721][ T966] cdc_wdm 8-1:1.0: skipping garbage [ 195.161780][ T966] cdc_wdm 8-1:1.0: skipping garbage [ 195.170510][ T966] cdc_wdm: probe of 8-1:1.0 failed with error -22 [ 195.405687][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.428690][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.436442][ T5803] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 195.471361][ T966] usb 8-1: USB disconnect, device number 4 [ 195.649968][ T5803] usb 6-1: Using ep0 maxpacket: 16 [ 195.663340][ T5803] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 195.676241][ T5803] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 195.689096][ T5803] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 36816, setting to 1024 [ 195.702508][ T5803] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 195.714601][ T5803] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12161, setting to 1024 [ 195.731140][ T5803] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 195.752731][ T5803] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 195.763615][ T5803] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.773633][ T5803] usb 6-1: Product: syz [ 195.778753][ T5803] usb 6-1: Manufacturer: syz [ 195.785642][ T5803] usb 6-1: SerialNumber: syz [ 195.804516][ T5803] usb 6-1: config 0 descriptor?? [ 195.865367][ C0] mcba_usb 6-1:0.0 can0: Tx URB aborted (-71) [ 195.873102][ T5803] mcba_usb 6-1:0.0: Microchip CAN BUS Analyzer connected [ 195.882013][ C0] mcba_usb 6-1:0.0 can0: Tx URB aborted (-71) [ 196.222751][ T8246] loop7: detected capacity change from 0 to 512 [ 196.239818][ T5153] gspca_sunplus: reg_w_riv err -71 [ 196.250532][ T5153] sunplus: probe of 7-1:0.0 failed with error -71 [ 196.276021][ T8246] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 196.297583][ T5153] usb 7-1: USB disconnect, device number 10 [ 196.314855][ T8246] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 196.329358][ C0] mcba_usb 6-1:0.0 can0: Rx URB aborted (-75) [ 196.392917][ T8246] EXT4-fs (loop7): 1 truncate cleaned up [ 196.426220][ T8246] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.542385][ T5830] usb 6-1: USB disconnect, device number 10 [ 196.571121][ T5830] mcba_usb 6-1:0.0 can0: device disconnected [ 196.628013][ T7223] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.858340][ T8258] loop7: detected capacity change from 0 to 2048 [ 196.907915][ T8258] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 197.491070][ T5773] Bluetooth: hci0: command 0x0406 tx timeout [ 197.544816][ T8274] vlan2: entered promiscuous mode [ 197.564455][ T8274] bond0: entered promiscuous mode [ 197.580866][ T8274] bond_slave_0: entered promiscuous mode [ 197.967787][ T8288] loop1: detected capacity change from 0 to 128 [ 198.404474][ T8297] loop6: detected capacity change from 0 to 512 [ 198.417583][ T8297] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 198.450848][ T5830] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 198.516820][ T8297] EXT4-fs (loop6): 1 truncate cleaned up [ 198.551444][ T8297] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.652196][ T5830] usb 8-1: Using ep0 maxpacket: 8 [ 198.684126][ T5830] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.733646][ T5830] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 198.770534][ T5830] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 198.807443][ T6266] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.824812][ T5830] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 198.856891][ T5830] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 198.888262][ T5830] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.924260][ T5830] hub 8-1:1.0: bad descriptor, ignoring hub [ 198.943087][ T5830] hub: probe of 8-1:1.0 failed with error -5 [ 198.971150][ T5830] cdc_wdm 8-1:1.0: skipping garbage [ 198.976435][ T5830] cdc_wdm 8-1:1.0: skipping garbage [ 198.995999][ T5830] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 199.003231][ T5830] cdc_wdm 8-1:1.0: Unknown control protocol [ 199.662178][ T8291] usb 8-1: reset high-speed USB device number 5 using dummy_hcd [ 199.873612][ T8291] usb 8-1: device firmware changed [ 199.885168][ T8291] cdc_wdm 8-1:1.0: Error autopm - -16 [ 199.885268][ T966] usb 8-1: USB disconnect, device number 5 [ 200.069695][ T966] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 200.279642][ T966] usb 8-1: Using ep0 maxpacket: 8 [ 200.298418][ T966] usb 8-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 200.309028][ T966] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 200.319070][ T966] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 200.334492][ T966] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 200.345364][ T966] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.364731][ T966] hub 8-1:1.0: bad descriptor, ignoring hub [ 200.376040][ T966] hub: probe of 8-1:1.0 failed with error -5 [ 200.390331][ T966] cdc_wdm 8-1:1.0: skipping garbage [ 200.395606][ T966] cdc_wdm 8-1:1.0: skipping garbage [ 200.405185][ T966] cdc_wdm: probe of 8-1:1.0 failed with error -22 [ 200.810106][ T8] usb 8-1: USB disconnect, device number 6 [ 201.414152][ T8375] loop1: detected capacity change from 0 to 512 [ 201.443470][ T8375] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 201.472200][ T8378] lo speed is unknown, defaulting to 1000 [ 201.483602][ T8378] lo speed is unknown, defaulting to 1000 [ 201.506640][ T8375] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.519921][ T8378] lo speed is unknown, defaulting to 1000 [ 201.568650][ T8378] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 201.584229][ T8375] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.649567][ T5804] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 201.668523][ T8378] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 201.814676][ T8378] lo speed is unknown, defaulting to 1000 [ 201.841210][ T8378] lo speed is unknown, defaulting to 1000 [ 201.858984][ T8378] lo speed is unknown, defaulting to 1000 [ 201.868508][ T5804] usb 8-1: Using ep0 maxpacket: 8 [ 201.886290][ T5804] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.903653][ T8378] lo speed is unknown, defaulting to 1000 [ 201.918656][ T5804] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 201.948223][ T5804] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 201.959975][ T5801] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 201.999443][ T5804] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 202.025122][ T5804] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 202.049873][ T5804] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.079897][ T5804] hub 8-1:1.0: bad descriptor, ignoring hub [ 202.108834][ T5804] hub: probe of 8-1:1.0 failed with error -5 [ 202.132143][ T5804] cdc_wdm 8-1:1.0: skipping garbage [ 202.147651][ T5804] cdc_wdm 8-1:1.0: skipping garbage [ 202.163308][ T5801] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 202.178326][ T5804] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 202.184881][ T5804] cdc_wdm 8-1:1.0: Unknown control protocol [ 202.192090][ T5801] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.236030][ T5801] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 202.289932][ T5801] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.336985][ T5801] usb 2-1: config 0 descriptor?? [ 202.351693][ T8371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.382500][ T5801] hub 2-1:0.0: USB hub found [ 202.395020][ T8371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.539900][ T966] usb 8-1: USB disconnect, device number 7 [ 202.584214][ T5801] hub 2-1:0.0: 1 port detected [ 202.959546][ T966] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 203.169706][ T966] usb 8-1: Using ep0 maxpacket: 16 [ 203.178187][ T966] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 203.203449][ T1189] usb 2-1: USB disconnect, device number 6 [ 203.219271][ T966] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 203.259454][ T966] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 36816, setting to 1024 [ 203.291658][ T966] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 203.307202][ T966] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12161, setting to 1024 [ 203.347261][ T966] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 203.363857][ T966] usb 8-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 203.389492][ T966] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.398778][ T966] usb 8-1: Product: syz [ 203.419699][ T966] usb 8-1: Manufacturer: syz [ 203.424538][ T966] usb 8-1: SerialNumber: syz [ 203.429569][ T5801] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 203.445932][ T966] usb 8-1: config 0 descriptor?? [ 203.476830][ C1] mcba_usb 8-1:0.0 can0: Tx URB aborted (-71) [ 203.483308][ T966] mcba_usb 8-1:0.0: Microchip CAN BUS Analyzer connected [ 203.490614][ C1] mcba_usb 8-1:0.0 can0: Tx URB aborted (-71) [ 203.639479][ T28] audit: type=1326 audit(1777295225.467:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8397 comm="syz.6.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f079cdd9 code=0x7fc00000 [ 203.664766][ T5801] usb 6-1: Using ep0 maxpacket: 8 [ 203.710241][ T5801] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.729477][ T5801] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 203.739588][ T5801] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 203.759457][ T28] audit: type=1326 audit(1777295225.467:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8397 comm="syz.6.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f53f079cdd9 code=0x7fc00000 [ 203.815720][ T5801] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 203.857091][ T5801] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 203.866558][ T28] audit: type=1326 audit(1777295225.467:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8397 comm="syz.6.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f079cdd9 code=0x7fc00000 [ 203.892999][ C1] mcba_usb 8-1:0.0 can0: Rx URB aborted (-75) [ 203.901931][ T5762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.909948][ T5801] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.950210][ T5801] hub 6-1:1.0: bad descriptor, ignoring hub [ 203.956279][ T5801] hub: probe of 6-1:1.0 failed with error -5 [ 203.963157][ T28] audit: type=1326 audit(1777295225.467:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8397 comm="syz.6.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f079cdd9 code=0x7fc00000 [ 203.986226][ T5801] cdc_wdm 6-1:1.0: skipping garbage [ 204.009480][ T5801] cdc_wdm 6-1:1.0: skipping garbage [ 204.039228][ T5801] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 204.046327][ T5801] cdc_wdm 6-1:1.0: Unknown control protocol [ 204.048729][ T28] audit: type=1326 audit(1777295225.467:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8397 comm="syz.6.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f079cdd9 code=0x7fc00000 [ 204.106534][ T966] usb 8-1: USB disconnect, device number 8 [ 204.122533][ T966] mcba_usb 8-1:0.0 can0: device disconnected [ 204.168927][ T28] audit: type=1326 audit(1777295225.467:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8397 comm="syz.6.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f079cdd9 code=0x7fc00000 [ 204.219266][ T28] audit: type=1326 audit(1777295225.467:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8397 comm="syz.6.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f079cdd9 code=0x7fc00000 [ 204.245962][ T28] audit: type=1326 audit(1777295225.467:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8397 comm="syz.6.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f079cdd9 code=0x7fc00000 [ 204.272368][ T28] audit: type=1326 audit(1777295225.467:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8397 comm="syz.6.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f079cdd9 code=0x7fc00000 [ 204.337198][ T28] audit: type=1326 audit(1777295225.467:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8397 comm="syz.6.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f079cdd9 code=0x7fc00000 [ 204.341924][ T1189] usb 6-1: USB disconnect, device number 11 [ 204.932932][ T1189] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 205.130442][ T1189] usb 6-1: Using ep0 maxpacket: 8 [ 205.139754][ T1189] usb 6-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 205.151674][ T1189] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 205.160734][ T1189] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 205.175006][ T1189] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 205.184222][ T1189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.202875][ T1189] hub 6-1:1.0: bad descriptor, ignoring hub [ 205.209035][ T1189] hub: probe of 6-1:1.0 failed with error -5 [ 205.232993][ T1189] cdc_wdm 6-1:1.0: skipping garbage [ 205.247899][ T1189] cdc_wdm 6-1:1.0: skipping garbage [ 205.254951][ T1189] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 205.581226][ T966] usb 6-1: USB disconnect, device number 12 [ 206.269157][ T8479] loop5: detected capacity change from 0 to 512 [ 206.312048][ T8479] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 206.410808][ T8479] EXT4-fs (loop5): 1 truncate cleaned up [ 206.447775][ T8479] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.644423][ T6235] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.071830][ T8488] loop6: detected capacity change from 0 to 8192 [ 207.212913][ T8488] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 207.346053][ T8488] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 207.356011][ T8488] FAT-fs (loop6): Filesystem has been set read-only [ 207.363904][ T8488] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 207.373534][ T8488] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 207.383508][ T8488] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 207.393521][ T8488] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 207.403096][ T8488] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 207.412725][ T8488] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 207.422358][ T8488] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 207.431974][ T8488] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 207.441527][ T8488] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 212.349342][ T8488] fat_get_cluster: 838315 callbacks suppressed [ 212.349380][ T8488] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 212.365771][ T8488] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 212.375360][ T8488] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 212.384847][ T8488] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 212.394429][ T8488] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 212.403914][ T8488] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 212.413842][ T8488] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 212.423465][ T8488] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 212.433193][ T8488] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 212.442701][ T8488] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 217.359426][ T8488] fat_get_cluster: 857501 callbacks suppressed [ 217.359455][ T8488] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 217.375708][ T8488] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 217.385197][ T8488] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 217.394695][ T8488] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 217.404184][ T8488] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 217.413689][ T8488] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 217.423173][ T8488] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 217.433137][ T8488] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 217.442860][ T8488] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 217.452397][ T8488] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 218.654121][ C1] ------------[ cut here ]------------ [ 218.659800][ C1] WARNING: CPU: 1 PID: 0 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600 [ 218.669601][ C1] Modules linked in: [ 218.673546][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 218.680631][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 218.690754][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 218.697126][ C1] Code: 24 4c 89 e7 e8 de 8c c0 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 d9 ca 82 f7 0f 0b e9 f6 f7 ff ff e8 cd ca 82 f7 <0f> 0b e9 48 fb ff ff e8 c1 ca 82 f7 48 c7 c7 00 86 64 8e 4c 89 e6 [ 218.716824][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 218.722967][ C1] RAX: ffffffff8a045733 RBX: ffffffff8a044536 RCX: ffff88801b66bc00 [ 218.730995][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 218.739115][ C1] RBP: 0000000000000000 R08: ffff88801b66bc00 R09: 0000000000000003 [ 218.747249][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff8880687fa3c0 [ 218.755307][ C1] R13: dffffc0000000000 R14: ffff8880687fa8b0 R15: ffff88802f775824 [ 218.763363][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 218.772364][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 218.778974][ C1] CR2: 00007ff21d90d275 CR3: 000000002d5fc000 CR4: 00000000003506e0 [ 218.787021][ C1] Call Trace: [ 218.790391][ C1] [ 218.793269][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 218.798869][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 218.804415][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 218.811358][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 218.817033][ C1] __iterate_interfaces+0x243/0x500 [ 218.822312][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 218.828760][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 218.836031][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 218.842337][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 218.849425][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 218.854662][ C1] __hrtimer_run_queues+0x520/0xc40 [ 218.859932][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 218.866039][ C1] ? hw_scan_work+0xf60/0xf60 [ 218.870794][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 218.875932][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 218.882074][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 218.887219][ C1] handle_softirqs+0x280/0x820 [ 218.892053][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 218.896851][ C1] ? do_softirq+0x1a0/0x1a0 [ 218.901416][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 218.906740][ C1] __irq_exit_rcu+0xd3/0x190 [ 218.911396][ C1] ? irq_exit_rcu+0x20/0x20 [ 218.915932][ C1] irq_exit_rcu+0x9/0x20 [ 218.920240][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 218.925907][ C1] [ 218.928851][ C1] [ 218.931843][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 218.937850][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 218.943545][ C1] Code: 39 21 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d e3 f3 41 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 218.963230][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 218.969354][ C1] RAX: e474785744e4a000 RBX: ffffffff8162a8f1 RCX: e474785744e4a000 [ 218.977344][ C1] RDX: 0000000000000001 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8e60 [ 218.985374][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b2b R09: 1ffff110171e6d65 [ 218.993401][ C1] R10: dffffc0000000000 R11: ffffed10171e6d66 R12: 1ffff92000030fc8 [ 219.001460][ C1] R13: dffffc0000000000 R14: 1ffff110036cd780 R15: 0000000000000000 [ 219.009527][ C1] ? do_idle+0x221/0x590 [ 219.013821][ C1] default_idle+0x13/0x20 [ 219.018187][ C1] default_idle_call+0x6c/0xa0 [ 219.023025][ C1] do_idle+0x221/0x590 [ 219.027133][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 219.032398][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 219.038606][ C1] cpu_startup_entry+0x43/0x60 [ 219.043453][ C1] start_secondary+0xee/0xf0 [ 219.048072][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 219.054229][ C1] [ 219.057283][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 219.064587][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 219.071634][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 219.081716][ C1] Call Trace: [ 219.085009][ C1] [ 219.087869][ C1] dump_stack_lvl+0x18c/0x250 [ 219.092581][ C1] ? show_regs_print_info+0x20/0x20 [ 219.097808][ C1] ? load_image+0x420/0x420 [ 219.102365][ C1] panic+0x2dc/0x730 [ 219.106305][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 219.110844][ C1] ? secondary_startup_64_no_verify+0x179/0x17b [ 219.117123][ C1] __warn+0x2e0/0x470 [ 219.121151][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 219.126941][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 219.132817][ C1] report_bug+0x2be/0x4f0 [ 219.137180][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 219.142924][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 219.148673][ C1] ? __ieee80211_beacon_get+0x1235/0x1600 [ 219.154414][ C1] handle_bug+0xcf/0x120 [ 219.158693][ C1] exc_invalid_op+0x1a/0x50 [ 219.163218][ C1] asm_exc_invalid_op+0x1a/0x20 [ 219.168096][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 219.174458][ C1] Code: 24 4c 89 e7 e8 de 8c c0 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 d9 ca 82 f7 0f 0b e9 f6 f7 ff ff e8 cd ca 82 f7 <0f> 0b e9 48 fb ff ff e8 c1 ca 82 f7 48 c7 c7 00 86 64 8e 4c 89 e6 [ 219.194184][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 219.200360][ C1] RAX: ffffffff8a045733 RBX: ffffffff8a044536 RCX: ffff88801b66bc00 [ 219.208352][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 219.216345][ C1] RBP: 0000000000000000 R08: ffff88801b66bc00 R09: 0000000000000003 [ 219.224422][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff8880687fa3c0 [ 219.232423][ C1] R13: dffffc0000000000 R14: ffff8880687fa8b0 R15: ffff88802f775824 [ 219.240444][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 219.246021][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 219.251881][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 219.257744][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 219.263356][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 219.268949][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 219.275774][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 219.281375][ C1] __iterate_interfaces+0x243/0x500 [ 219.286721][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 219.293023][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 219.300442][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 219.306719][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 219.313790][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 219.319017][ C1] __hrtimer_run_queues+0x520/0xc40 [ 219.324238][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 219.330341][ C1] ? hw_scan_work+0xf60/0xf60 [ 219.335049][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 219.340214][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 219.346330][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 219.351481][ C1] handle_softirqs+0x280/0x820 [ 219.356276][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 219.361099][ C1] ? do_softirq+0x1a0/0x1a0 [ 219.365639][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 219.370890][ C1] __irq_exit_rcu+0xd3/0x190 [ 219.375521][ C1] ? irq_exit_rcu+0x20/0x20 [ 219.380066][ C1] irq_exit_rcu+0x9/0x20 [ 219.384420][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 219.390087][ C1] [ 219.393029][ C1] [ 219.395969][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 219.401988][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 219.407657][ C1] Code: 39 21 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d e3 f3 41 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 219.427318][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 219.433426][ C1] RAX: e474785744e4a000 RBX: ffffffff8162a8f1 RCX: e474785744e4a000 [ 219.441428][ C1] RDX: 0000000000000001 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8e60 [ 219.449505][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b2b R09: 1ffff110171e6d65 [ 219.457495][ C1] R10: dffffc0000000000 R11: ffffed10171e6d66 R12: 1ffff92000030fc8 [ 219.465488][ C1] R13: dffffc0000000000 R14: 1ffff110036cd780 R15: 0000000000000000 [ 219.473492][ C1] ? do_idle+0x221/0x590 [ 219.477781][ C1] default_idle+0x13/0x20 [ 219.482142][ C1] default_idle_call+0x6c/0xa0 [ 219.486933][ C1] do_idle+0x221/0x590 [ 219.491046][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 219.496271][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 219.502466][ C1] cpu_startup_entry+0x43/0x60 [ 219.507258][ C1] start_secondary+0xee/0xf0 [ 219.511876][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 219.517990][ C1] [ 219.521394][ C1] Kernel Offset: disabled [ 219.525851][ C1] Rebooting in 86400 seconds..