last executing test programs: 2m30.425958898s ago: executing program 2 (id=3): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x3}) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000100)=0x7) 2m30.265311428s ago: executing program 2 (id=7): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x3, 0x452, &(0x7f0000000f80)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x3bd) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz0\x00', {0xe58, 0x0, 0x0, 0x9}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x1, 0x9, 0x1, 0x0, 0x80001ff, 0x4, 0x0, 0x1, 0x7fffffff, 0x2, 0x0, 0xfffffffd, 0x5, 0x0, 0xfdfffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffe, 0xfffff7ff, 0x7b67], [0x0, 0x0, 0xfffffffc, 0x3, 0x9, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x9b02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0xfffffff8, 0xfffffffc, 0x2, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x10, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0xc0000, 0xffffffff, 0x0, 0x39, 0xaecd, 0x0, 0x0, 0x3], [0x1, 0x0, 0x567, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10000000, 0x0, 0x101, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000000d, 0xffffffff, 0x0, 0xa, 0x3, 0x0, 0x14, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0x0, 0x1d, 0x400, 0x0, 0xed0, 0x4000002], [0x0, 0xe97, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffffffe, 0xf7b, 0x0, 0x0, 0x0, 0x4080, 0x10000, 0x0, 0x0, 0x8, 0x0, 0x3e8, 0xfffffffd, 0x10000001, 0x0, 0x0, 0x5861, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xc, 0x3491, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffc3fc, 0x3, 0x0, 0x101, 0xfffffffe, 0x0, 0x8949, 0x0, 0xfffffffe]}, 0x45c) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}}) 2m29.131616385s ago: executing program 2 (id=11): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)={0x5c, r2, 0x101, 0x70bd2a, 0x80000, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='v'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x2c, 0x51, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "1f36a5ed75a04b91f507422f23"}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4804) 2m27.516336321s ago: executing program 2 (id=14): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000009500000000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x88) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x2008010, &(0x7f0000000d80)=ANY=[], 0x23, 0x7f3, &(0x7f0000001800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="2f24634e311b994dbb0c2cdd3851", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x60, 0xf, 0x8, 0xfff, 0xbf, 0x0, &(0x7f0000000440)="7a06044585de40e1d394e4fc1e7e066ec03dca4706782c7cc878097c19bd9fba7f1e1462bd8aa503c27fb12d6614cb91fced6f152bf9f9901627dcff952d84301d13b0b3e91a2cefa2af8eb776c81437f07bd6d913a6bc54abadc06e2e72e17e979ad5451db7c5ac05d18421a8e190829623fb68f5acf3b8b3dce4aec6811224e536858f7deaa06a6392d5ef4ae6667306e5875b210b4443bae3de513b3daf512c8363481d9210f4cd8372830f5d741166be38ed66aa89f1b914ed5624cf41"}) 2m27.498739262s ago: executing program 32 (id=14): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000009500000000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x88) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x2008010, &(0x7f0000000d80)=ANY=[], 0x23, 0x7f3, &(0x7f0000001800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="2f24634e311b994dbb0c2cdd3851", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x60, 0xf, 0x8, 0xfff, 0xbf, 0x0, &(0x7f0000000440)="7a06044585de40e1d394e4fc1e7e066ec03dca4706782c7cc878097c19bd9fba7f1e1462bd8aa503c27fb12d6614cb91fced6f152bf9f9901627dcff952d84301d13b0b3e91a2cefa2af8eb776c81437f07bd6d913a6bc54abadc06e2e72e17e979ad5451db7c5ac05d18421a8e190829623fb68f5acf3b8b3dce4aec6811224e536858f7deaa06a6392d5ef4ae6667306e5875b210b4443bae3de513b3daf512c8363481d9210f4cd8372830f5d741166be38ed66aa89f1b914ed5624cf41"}) 47.794286846s ago: executing program 0 (id=647): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) r1 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000a40)={0xa, 0x4ea2, 0x7fff, @loopback, 0x9}, 0x1c) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40881) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 46.615972766s ago: executing program 0 (id=657): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'}) syz_clone3(&(0x7f00000003c0)={0xac020080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @multicast1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001500192340834b80040d8c560a0603a6ff8000000000000000006302496b3a17b42e64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 46.472071784s ago: executing program 0 (id=663): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000500)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@jqfmt_vfsold}, {@noinit_itable}, {@errors_remount}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") 45.764471827s ago: executing program 0 (id=678): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x1004000, &(0x7f0000002900)=ANY=[@ANYBLOB='gid=', @ANYRESDEC=0x0, @ANYBLOB=',undelete,anchor=00000000000000000004,anchor=00000000000000000004,uid=forget,unhide,gid=forget,iocharset=utf8,uid=forget,iocharset=default,uid=', @ANYRESDEC=0x0, @ANYBLOB=',nostrict,session=00000000000000000000,gid=corget,\x00'], 0x1, 0xc34, &(0x7f0000001bc0)="$eJzs3U9sXNd5N+D3XHHEofx9FRM7ipPGxaQtUlmxXP2LqViFO6pptgFkWQjF7AJwJFLqwBRJkFQjG2nBdNNFFwGKoousCLRGgRQNjKYIumRaF0g2XhRZdUW0sBEUXbBFgKwCFvfOGXFIkTYjkhJpP49N/WbunHPnnHvH98qC3jkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAET83iuXz5xNj3sUAMCjdHX0q2fOuf8DwMfKdf//DwAAAAAAAAAAAAAAB12KIp6MFLNXV9N49byjfqVdu3tvbHhk624Dqep5pGpf/tTPnjt/4UsvDF3s5pX29Af032ufjddGr19uvDxzZ3Zucn5+cqIxNt2+OTMxueM97Lb/ZqeqA9C48/rdiVu35hvnnj+/4eV7g+/3P3Fi8NLQs6ef6bYdGx4ZGV1vUt/y4UParsLjaBRxOlI8972fplZEFLH7Y1F/tOd+s4FqEqeqSYwNj1QTmWq3phfKF691D0QR0ejp1Oweo63PRfTVHukctteMWCyHXw74VDm90dnWXOvG1GTjWmtuob3Qnpm+ljqjLefTiCIupoiliFjpf3B3tSiiL1J85/hquhERR7rH4YtVYfD24yj2cY47UI6zUYtYKg7BOTvA+qOIVyPFz945GTfLY5Z/4gsRr5b5g4i3ynwpIpUfjAsR723xOeJw6osi/rw8/5dW00R1PeheV658rfGV6VszPW2715Vf8v7wwJXiMd0fBjblo3HAr031KKJVXfFX08P/ZgcAAAAAAAAAAAAAAACAvTYQRXwmUrzyb39U1RVHVZd+/NLQ7w/+/96a8ac/ZD9l2+cjYrHYWU3u0VwYeC1dS2mntcTqTvdcPYr441z/963HPRgAAAAAAAAAAAAAAAAAAICPtSJ+EilefPdkWoreNcXb07cb11s3pjqrwnbX/u2umb62trbWSJ1s5hzPuZhzKedyzpWcUeT+OZs5xwc6O17Mz5dyLudcyRlHcv+czZzjORdzLuVczrmSM/py/5zNnOM5F3Mu5VzOuZIzDsjavQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHyVFFPGLSPHtb6ymSBHRjBiPTi73P+7RAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACl/lTE9yNF4w+a97f1RUSq/u04Wf5yIZpHy/xkNIfKfCmal3O2quxrfusxjJ/dqaUifhwp+utv3z/h+fzXOs/ufwzirW+uP/tsXyePdF8cfL//iRPHLw2N/NrT2z1OWw3g1JX29N17jbHhkZHRns19+d0/2bNtML9vsTdTJyLm33jz9dbU1OTcwz8oPwK76H6IHqS+gz/T2oEf4SF6EH0HYhiPZ+58DJT3//cixW+/++/dG37n/l+P/9d5dv8OHz//k/X7/4ubd7TD+3/f5n75/l/e07e6/z/Zs+3F/LuRWl9EfeHObO1ERH3+jTdPt++0bk/enpy+cObMl4eGvnz+TO1oRP1We2qy59GeHC4AAAAAAAAAAAAAAACARycV8buRovXj1dSIiHtVvdbgpaFnTz9zJI5U9VYb6rZfG71+ufHyzJ3Zucn5+cmJxth0++bMxORO365elXuNDY/sy2Q+1MA+j3+g/vLM7Btz7dt/uLDl68fql2/ML8y1bm79cgxEEdHs3XKqGvDY8Eg16Kl2a7rqem3LYvpfXi0V8R+R4uaFRvp83pbr/zdX+G+o/1/cvKN9qv//RM+28j1TKuLnkeK3/uLp+Hw1zmPxwDHL7f4mUpy6+LncLo6W7bpj6HyvQKcysGz7P5HiH36xsW23HvLJ9bZnd3xgD4ny/B+PFN//s+/Gr+dtG7//Yevzf2zzjvbp/D/Vs+3Yhu8r2PXUyef/dKR46cm34zfytg/6/o/ud2+czI3vfz/HPp3/T/VsG8zv+5t7M3UAAAAAAAAAAIBDrZaK+NtI8cORvvRC3raTv/83sXlH+/T3vz7ds21ib9Yr+tAHuz6oAAAAAHBA1FIRP4kUtxfevl9DvbH+u6f+83fW6z+H06ZXqz/n+5XqewP28s//eg3m9x3f/bQBAAAAAAAAAAAAAAAAAADgQEmpiBfyeurjVT3/xLbrqS9Hilf+67ncLp0o23XXgR+sfq1fnZk+fXlqauZma6F1Y2qyMTrbujlZ9n0qUqz+9edy36JaX7273nxnjff1tdjnIsXI33XbdtZi765N/tR627Nl209Eiv/8+41tu+tYf2q97bmy7V9Fiq//09ZtT6y3PV+2/W6k+NHXG922x8q23e9H/fR62+dvzhT7cFYAAAAAAAAAAAAAAAAAAAD4uKmlIv40Uvz3naX7tfx5/f9az9PKW9/sWe9/k3vVOv+D1fr/2z1+mPX/q+8VWNzuXQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KMpRRFvRorZq6tpub983lG/0p6+e29seGTrbgOp6nmkal/+1M+eO3/hSy8MXezmB/ffa5+J10avX268PHNndm5yfn5yojE23b45MzG54z3stv9mp6oD0Ljz+t2JW7fmG+eeP7/h5XuD7/c/cWLw0tCzp5/pth0bHhkZ7WnTV3vod39A2mb70SjiLyPFc9/7afphf0QRuz8WH/LZ2W8D1SROVZMYGx6pJjLVbk0vlC9e6x6IIqLR06nZPUaP4FzsSjNisRx+OeBT5fRGZ1tzrRtTk41rrbmF9kJ7Zvpa6oy2nE8jiriYIpYiYqX/wd3VoojXI8V3jq+mf+6PONI9Dl+8OvrVM+e2H0exj3PcgXKcjVrEUnEIztkB1h9F/GOk+Nk7J+Nf+iP6ovMTX4h4tcwfRLwVnfOdyg/GhYj3tvgccTj1RRH/W57/S6vpnf7yetC9rlz5WuMr07dmetp2ryuH/v7wKB3wa1M9ivhRdcVfTf/qv2sAAAAAAAAAAAAAAACAA6SIX40UL757MlX1wfdritvTtxvXWzemOmV93dq/bs302traWiN1splzPOdizqWcyzlXckaR++dslllfWxvPzxdzLuVczrmSM47k/jmbOcdzLuZcyrmccyVn9OX+OZs5x3Mu5lzKuZxzJWcckNo9AAAAAAAAAAAAAAAAAADgo6Wo/knx7W+sprX+zvrS49HJZeuBfuT9XwAAAP//M3/28g==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f00000001c0)=0xc) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f0000000300)={[{@uid={'uid', 0x3d, r1}}]}) 45.347772191s ago: executing program 0 (id=687): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000440)={0x20, r0, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x20}}, 0x0) 44.760483207s ago: executing program 0 (id=696): socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1c916, &(0x7f0000000040)={[{@nobarrier}, {@noblock_validity}, {@nombcache}, {@nouser_xattr}, {@quota}, {@noacl}, {@nodiscard}, {@noauto_da_alloc}, {@resgid, 0x32}]}, 0x9b, 0x4e9, &(0x7f0000000540)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r0, 0x0) syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x248400, &(0x7f0000001c40)=ANY=[@ANYRESOCT, @ANYRES8=r0, @ANYRESOCT, @ANYBLOB="a92fe8de136908e852768595aa546296821087e5b1bbc32156ada61f7c8a700880fe17c721514fd66f6d073702603f43f39d10ed62b784f0ea603a459b42f61a2174a30374bec0296612104179832730d5741398231d9ffd1e9995a06bb5ada99b9f2d4a71c580fe19a6dea2485a8ef6042e0d96839465522c03ac9b1e3e4be07bd09a1568add843860228063e6e4a59adc27ad98e26260605e1df1bd5e5dcc1735af362ce57237d4455a267daeea0abe1d6dada51feb6b1751dfa136da4ab1a73a25bcfba9ba846676558290f27b2a256c22589e6ed22a79aeb7003da00"/240, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC, @ANYRESDEC, @ANYRESOCT=r0, @ANYRESOCT, @ANYRES16], 0x10, 0x1d0, &(0x7f0000000440)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r2, 0x1) connect$bt_rfcomm(r2, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 44.70549975s ago: executing program 33 (id=696): socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1c916, &(0x7f0000000040)={[{@nobarrier}, {@noblock_validity}, {@nombcache}, {@nouser_xattr}, {@quota}, {@noacl}, {@nodiscard}, {@noauto_da_alloc}, {@resgid, 0x32}]}, 0x9b, 0x4e9, &(0x7f0000000540)="$eJzs3d9vW1cdAPDvvYlD2qYkFTyUSpSKFiUV1Eka2kZIFJAQPFUCygNvJSROFMWJq8Rpm6iCVPwBSKgCJJ544gWJPwAJ9Y1XtKnS9j5t06Zpa7eHPWz1ZOe6S1M7cbrY7pLPR7rxOfdHvt9jy8c+9x75BnBonYmIixHxpFKpnI+IwWx9mi0PjkXExuZ+jx/dna4uSVQq199PIsnWVfcf2fI/s0NqfvXziN8lz8ddWVtfmCoWC8tZfbS8eHN0ZW39wvziVF9ELE1MjF+evDJ5aXJsX9o5EBFXf/r2X/70z59d/e/3br9x492R31fT+mG2vd6O/bbZ9Fz0b1nXGxHL7QjWBT1Ze3LdTgQAgJbUv+d/OyLOx2D01L7NAQAAAAdJ5UcD8UkSUQEAAAAOrLQ2NzZJ89k8gIFI03x+cw7v1+NoWiytlL87W1pdmtmcQzsUuXR2vlgYy+YKD0UuqdbHa+XP6xe31Sci4kRE3B88Uqvnp0vFmW6f/AAAAIBD4ti28f9Hg5vjfwAAAOCAGep2AgAAAEDb7T7+H+hIHgAAAED7NBj//6YbeQAAAABt8Ytr16pLpX7/65lba6sLpVsXZgorC/nF1en8dGn5Zn6uVJqr/Wbf4m7/r1gq3fx+LK3eGS0XVsqjK2vrNxZLq0vlG/PP3AIbAAAA6KAT33rwehIRGz84Uluq+rqdFNARvXvZ+a325QF0Xk+3EwC6Zk+f/8CBkut2AkDXJbtsbzp55/8vHPLeCx8JAAC8kOFvNL7+n+x6bmAj7VCKQJs4/weHl+v/cHi5/g+HVy56wkAeDrf2X/+vVPaUEAAAsO8GakuS5iNq5wEGIk3z+YjjtdsC5JLZ+WJhLCK+GhGvDea+Uq2P145MInH1EAAAAAAAAAAAAAAAAAAAAAAAAABaUqkkUQEAAAAOtIj0nSS7/9fw4LmB7ecH+pKPB2uPEXH779f/emeqXF4er67/4On68t+y9Re7cQYDAAAA2K4+Tq+P4wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgPz1+dHe6vnQy7ns/iYihRvF7o7/22B+5iDj6YRK9W45LIqJnH+Jv3IuIk43iJ9W0YijLolH8I12Mn0bEsX2ID4fZg2r/8+NG7780ztQeG7//Ltd6qC+uef+XViM/7WIa9T/HW4xx6uG/R5vGvxdxqrdx/1Pvf5Mm8c+2GP+3v15fb7at8o+I4YafP8nWWPXK+oX5xam5wlxhaWJi/PLklclLk2Ojs/PFQva3QYS++PM3//Nkp/YfjftN+9+d2n+uxfZ/+vDOo69tFnON4o+cbfz6n2wSP80++76Tlavbh+vljc3yVqf/9crpiFf/16z9M02e/91e/5EW23/+l398s8VdAYAOWFlbX5gqFgvLOxf6s91b2vnLV9jjs/Fsofq16KVohcJeC394OdJ4KQvd65MAAID2eH4M/Kz9uMYOAAAAAAAAAAAAAAAAAAAA7KyTv65Xt9GdpgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7OizAAAA//+yX9Co") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r0, 0x0) syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x248400, &(0x7f0000001c40)=ANY=[@ANYRESOCT, @ANYRES8=r0, @ANYRESOCT, @ANYBLOB="a92fe8de136908e852768595aa546296821087e5b1bbc32156ada61f7c8a700880fe17c721514fd66f6d073702603f43f39d10ed62b784f0ea603a459b42f61a2174a30374bec0296612104179832730d5741398231d9ffd1e9995a06bb5ada99b9f2d4a71c580fe19a6dea2485a8ef6042e0d96839465522c03ac9b1e3e4be07bd09a1568add843860228063e6e4a59adc27ad98e26260605e1df1bd5e5dcc1735af362ce57237d4455a267daeea0abe1d6dada51feb6b1751dfa136da4ab1a73a25bcfba9ba846676558290f27b2a256c22589e6ed22a79aeb7003da00"/240, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC, @ANYRESDEC, @ANYRESOCT=r0, @ANYRESOCT, @ANYRES16], 0x10, 0x1d0, &(0x7f0000000440)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r2, 0x1) connect$bt_rfcomm(r2, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 7.801331646s ago: executing program 5 (id=953): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x1, 0x11ed, &(0x7f0000002480)="$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") accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000000)=""/48, 0x30) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 6.55751737s ago: executing program 4 (id=960): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x803, 0x0) open$dir(0x0, 0x1, 0x19d) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) r2 = socket$nl_route(0x10, 0x3, 0x0) quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000301, 0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r4 = syz_io_uring_setup(0x1589, 0x0, &(0x7f0000000340)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r4, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000080)={0x50, 0xfffffffffffffffe, r7, {0x7, 0x29, 0x9, 0xffffffff90806dc4, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x6a3ea8d3341dee3e, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f00000001c0)={0x980900, 0xfffffff2, @value=0x9}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8044}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000240)={'sit0\x00', r9, 0x10, 0x20, 0x4, 0x71, {{0x14, 0x4, 0x1, 0x10, 0x50, 0x68, 0x0, 0x2, 0x2f, 0x0, @local, @broadcast, {[@timestamp_prespec={0x44, 0xc, 0xf3, 0x3, 0x6, [{@rand_addr=0x64010101, 0x60}]}, @timestamp={0x44, 0xc, 0xf, 0x0, 0xe, [0x6, 0x7]}, @timestamp_addr={0x44, 0xc, 0x7d, 0x1, 0x5, [{@multicast2, 0x3}]}, @end, @ssrr={0x89, 0x17, 0x31, [@loopback, @private=0xa010101, @local, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) sendmsg$nl_route(r0, 0x0, 0x4040844) 6.492527664s ago: executing program 3 (id=961): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffe8d}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) 5.269766997s ago: executing program 5 (id=964): ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 5.216356199s ago: executing program 4 (id=965): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x120002) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000a40)={0x40, 0x6, 0x3, "ee1ac4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x1, 0xe, "c282feb4a2f93110f63512b75e5d"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000680)={0x0, 0x3c, 0x3, &(0x7f0000000240)={0x7, "0fd62f1944b23de763cfb137449ccf18ea4ee9f23bc4e6acba8d11e8daa6c4ee99"}}) 5.21591764s ago: executing program 1 (id=966): unshare(0x2060600) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fgetxattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00', 0x0, 0x0) 5.143310214s ago: executing program 1 (id=967): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000440)=ANY=[@ANYBLOB="c92752ede134aaaaaaaaaaaa88a82e0081004704080045a7001400680000402f"], 0x0) 4.988554193s ago: executing program 1 (id=968): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) r3 = getpgid(r0) r4 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r3, r4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 4.728036398s ago: executing program 4 (id=970): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 4.608842676s ago: executing program 4 (id=971): bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x2, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r4 = syz_io_uring_setup(0x494, &(0x7f0000000480)={0x0, 0x7079, 0x10001, 0x14, 0x110}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc, 0x1}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000001c0)={0x5, 0x7, 0xa, 0x401, 0x5}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x7) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="880000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a31000000005c000380580000800800034000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r10], 0x3c}}, 0x8010) sendmsg$nl_route_sched(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xd, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24020080}, 0x4044080) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r2, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x3}, 0x8) 4.068360938s ago: executing program 4 (id=973): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x2200020, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000cc0)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x98, 0x50020000, 0x0, 0x98, 0x0, 0x198, 0x1f0, 0x1f0, 0x198, 0x1f0, 0x3, 0x0, {[{{@ip={@remote, @broadcast, 0xffffffff, 0x0, 'wlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@dev, @multicast1, 0xff0000ff, 0x0, 'sit0\x00', '\x00', {}, {}, 0xc}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x820, 0xe10, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xffff, 0x40, 0x0, 0x2, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400], 0x0, 0x0, 0xffffffffffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f00000018c0)={'IDLETIMER\x00'}, &(0x7f0000001900)=0x1e) sigaltstack(0x0, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000002000)={0x0, 0x2, 0x200, 0x2000002}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x6}) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000000240)=ANY=[], 0x1, 0xc42, &(0x7f0000000540)="$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") fcntl$lock(r0, 0x26, &(0x7f0000000080)) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f0000000140), 0x1) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000180)={[{@orlov}]}, 0xfe, 0x269, &(0x7f0000000200)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$FUSE_STATFS(r7, &(0x7f0000005f00)={0x60, 0x0, 0x0, {{0xfffffffffffffffd, 0x17, 0x4, 0x4, 0x8, 0xfffffc00, 0x1, 0x8}}}, 0x60) fadvise64(r7, 0x0, 0x60, 0x4) 3.154236733s ago: executing program 4 (id=975): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = open(0x0, 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000003d) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @local, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000000)="001036ffbd0a077c617f9c475f9526f9f1ce846e737358f5", 0x18}], 0x1}}], 0x1, 0x4000841) openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000040000100fcff070004000000010000000400488040000180cc243b00108008000b00090000000753e738c928f9d66fb555dd766a38c43349d9f22e916f559c140a1d695c27536d8a81c74d6084ab0b0416863c7e"], 0x58}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000140)=0x1) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x50, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x1a, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) listen(r7, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x83, 0x20000a2f, 0x401000, 0xe, 0x3, 0x2000000, 0x1, 0x3000000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x177) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) r9 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r9) 2.712537898s ago: executing program 3 (id=976): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x24000801) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) 2.467710033s ago: executing program 6 (id=978): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x7}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x3c}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x1d, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in=@loopback, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x40, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x7, 0x2, 0x0, 0xfbfffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0xf, 0x5}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x90}, 0x0) 2.467391793s ago: executing program 3 (id=979): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r3, 0x2000009) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={0x0, 0xe2, 0xfc}, &(0x7f0000000180)={'enc=', 'oaep', ' hash=', {'cbcmac(cipher_null-generic)\x00'}}, &(0x7f0000000280)="7a0543d40c2d6476d344a47ac4ec11898167e8e825ee9658e2a528ef3bf64187d69d294fa9eb5fbb16b198267b3e3e658ba0ce8c823860260ea71c7beadac15682748a0ba673861e7fa595e37fd09180519a79926f9fecc41233d9c0c665d834770fdc4f522dbbb94ad2ccd1c1bd79c1d8a61c6ff4a8297223c073c6325db616e583b9a12cbe41ecfb57d20d1fff6393ea81c9614d42ab296da976a1009df3e236d6ed03f108e910d7bdee00e501e2d1d17dce5663ce1e4174b1373897b15b21d5d6f55f58102baa3ef2ae41b5b145f8cbc4c3bdc8ab1b5392a73ae51b9294f2ba26", &(0x7f0000000380)=""/252) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x20000014}) r7 = shmget(0x2, 0x4000, 0x200, &(0x7f000063a000/0x4000)=nil) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r9, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r10, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$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") stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000500)=0x0) shmctl$IPC_SET(r7, 0x1, &(0x7f00000005c0)={{0x3, r9, r11, r12, 0x0, 0x100, 0x7ff}, 0x5, 0xffffffff, 0x40, 0x1000, r0, r0, 0x7}) 1.616595624s ago: executing program 6 (id=980): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0413a1810031", 0x15}], 0x1}, 0x40) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={0x0}, 0x18) 1.528645279s ago: executing program 6 (id=981): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 1.499801981s ago: executing program 1 (id=982): r0 = io_uring_setup(0x7c61, &(0x7f0000000000)={0x0, 0x0, 0x80, 0xfffffffd}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x11, &(0x7f00000002c0), 0x2) 1.433624105s ago: executing program 6 (id=983): socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) 1.384582728s ago: executing program 5 (id=984): unshare(0x2040400) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.356942939s ago: executing program 3 (id=985): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000020400000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014001200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b700000000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 1.315024692s ago: executing program 5 (id=986): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r2, 0xf33e, 0x401, 0x3, 0x2, 0x8}, 0x14) 1.1766179s ago: executing program 1 (id=987): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x8f, 0x0, &(0x7f0000000100)="e36680670000ec67838717bd86dde148f0630962bb87dd44fe42904bcee14db4241544716b9ea42231ed3373a3e29953e3bb017d9c1fd05dacf5bb80b4b7eef8ad7aea5349e4086457ad9f3f7547dde6489072ed1a1e534c999271c26ca4ba1e48f300d334baeabfce4ec97a4993ab9fb6a29515b1c7b7332fcfa55518c04400d3abaeb5aa833c1ef8a2af6b52883e", 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3cfd94f2}, 0x4c) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x28101) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 1.150688261s ago: executing program 1 (id=988): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) read(r0, &(0x7f0000000140)=""/238, 0xee) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) close(r0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000080), 0x200000, 0x4) 1.134220623s ago: executing program 6 (id=989): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffe5}, 0x68) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) 1.110321914s ago: executing program 5 (id=990): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x2, 0x0) syz_clone3(&(0x7f0000000580)={0x10c000480, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x5}, 0x58) 1.101196505s ago: executing program 3 (id=991): inotify_init() r0 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x3, 0x1, 0x5, 0xa, 0x3, 0x1, {0x5, 0x17d, 0x8, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x20000000, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0xa}}}, 0xa0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendfile(r0, r0, &(0x7f0000000080)=0x2, 0x7f03) 856.522599ms ago: executing program 6 (id=992): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) r3 = getpgid(r0) r4 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r3, r4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 859.32µs ago: executing program 5 (id=993): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 0s ago: executing program 3 (id=994): syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="0000000002000100240012800b00010065727370616e0000140002800600020030000000080004"], 0x44}}, 0x0) kernel console output (not intermixed with test programs): RCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.043022][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.062663][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.074720][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.095627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.103912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.117205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.126183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.135133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.144111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.153231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.163603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.172500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.195658][ T4196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.205348][ T4196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.214390][ T4196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.227725][ T4196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.242457][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.250820][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.266240][ T4185] device veth0_macvtap entered promiscuous mode [ 56.288606][ T4183] device veth0_vlan entered promiscuous mode [ 56.295569][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.304388][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.313258][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.320998][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.329603][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.343377][ T4184] device veth0_macvtap entered promiscuous mode [ 56.359169][ T4185] device veth1_macvtap entered promiscuous mode [ 56.372319][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.380339][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.390754][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.399730][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.408716][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.417332][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.435425][ T4184] device veth1_macvtap entered promiscuous mode [ 56.448987][ T4186] device veth0_vlan entered promiscuous mode [ 56.470597][ T4183] device veth1_vlan entered promiscuous mode [ 56.494153][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.511066][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.524456][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.532678][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.543350][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.553362][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.563895][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.575718][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.597483][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.606329][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.615707][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.624392][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.633373][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.642657][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.651188][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.662157][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.673176][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.684597][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.700660][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.709528][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.718602][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.727588][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.740809][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.752632][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.762696][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.773262][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.785220][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.798606][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.807584][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.817159][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.827059][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.835755][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.844313][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.856831][ T4183] device veth0_macvtap entered promiscuous mode [ 56.868830][ T4186] device veth1_vlan entered promiscuous mode [ 56.885137][ T4264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.891898][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.894140][ T4264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.910757][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.921644][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.930392][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.943658][ T4183] device veth1_macvtap entered promiscuous mode [ 56.962596][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.971236][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.035690][ T4264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.053121][ T4264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.064068][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.087844][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.098049][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.108881][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.118867][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.129323][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.140577][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.155752][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.164299][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.174525][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.195342][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.208873][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.219973][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.231203][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.241170][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.251633][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.265436][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.276762][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.308735][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.320436][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.330954][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.343056][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.350801][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.361183][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.380612][ T4186] device veth0_macvtap entered promiscuous mode [ 57.387620][ T4266] Bluetooth: hci1: command 0x040f tx timeout [ 57.391040][ T4183] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.394146][ T4266] Bluetooth: hci0: command 0x040f tx timeout [ 57.403054][ T4245] Bluetooth: hci2: command 0x040f tx timeout [ 57.410222][ T4183] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.424453][ T4183] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.433210][ T4183] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.452924][ T4186] device veth1_macvtap entered promiscuous mode [ 57.472140][ T413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.473441][ T4245] Bluetooth: hci3: command 0x040f tx timeout [ 57.480171][ T413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.486484][ T4245] Bluetooth: hci4: command 0x040f tx timeout [ 57.496451][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.515820][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.537790][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.569210][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.606861][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.615491][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.653856][ T4264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.683523][ T4264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.713590][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.727606][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.737775][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.748632][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.759096][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.770178][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.780242][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.791307][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.804602][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.813529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.828888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.840775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.871567][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.888124][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.899396][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.910226][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.920240][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.931338][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.941309][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.952744][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.965008][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.990748][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.000899][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.015448][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.026098][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.038643][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.048601][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.076151][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.093491][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.140424][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.170769][ T4264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.191274][ T4264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.201903][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 58.214372][ T4301] loop0: detected capacity change from 0 to 8192 [ 58.228905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.229807][ T4301] ======================================================= [ 58.229807][ T4301] WARNING: The mand mount option has been deprecated and [ 58.229807][ T4301] and is ignored by this kernel. Remove the mand [ 58.229807][ T4301] option from the mount to silence this warning. [ 58.229807][ T4301] ======================================================= [ 58.291163][ T4278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.320814][ T4278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.346179][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.385228][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.400629][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.418784][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.442308][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 58.470333][ T26] audit: type=1800 audit(1769328161.024:2): pid=4301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1" name="file0" dev="loop0" ino=1048589 res=0 errno=0 [ 58.546555][ T4307] loop2: detected capacity change from 0 to 512 [ 58.572103][ T7] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 58.589239][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 58.614960][ T4307] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 58.632371][ T7] usb 5-1: config 0 has no interface number 0 [ 58.637828][ T4311] loop3: detected capacity change from 0 to 1024 [ 58.650452][ T4307] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 58.689707][ T4307] EXT4-fs (loop2): 1 truncate cleaned up [ 58.702276][ T4307] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 58.875360][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 58.891657][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.900151][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.342541][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 59.369443][ T4307] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.7: bg 0: block 255: padding at end of block bitmap is not set [ 59.418329][ T7] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 59.427591][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.436047][ T7] usb 5-1: Product: syz [ 59.440239][ T7] usb 5-1: Manufacturer: syz [ 59.445106][ T7] usb 5-1: SerialNumber: syz [ 59.467233][ T4307] EXT4-fs (loop2): Remounting filesystem read-only [ 59.472694][ T4245] Bluetooth: hci2: command 0x0419 tx timeout [ 59.477831][ T7] usb 5-1: config 0 descriptor?? [ 59.481015][ T4245] Bluetooth: hci0: command 0x0419 tx timeout [ 59.492094][ T4245] Bluetooth: hci1: command 0x0419 tx timeout [ 59.519986][ T4311] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 59.553940][ T4252] Bluetooth: hci4: command 0x0419 tx timeout [ 59.562559][ T4252] Bluetooth: hci3: command 0x0419 tx timeout [ 59.598080][ T4311] hfsplus: xattr searching failed [ 59.606234][ T4183] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 59.625829][ T7] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 59.641376][ T4183] EXT4-fs (loop2): Remounting filesystem read-only [ 59.648636][ T4183] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 59.670183][ T4183] EXT4-fs (loop2): Remounting filesystem read-only [ 59.682034][ T7] usb 5-1: No valid video chain found. [ 59.682209][ T4183] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 59.739084][ T4183] EXT4-fs (loop2): Remounting filesystem read-only [ 59.755418][ T4183] EXT4-fs error (device loop2): ext4_dirty_inode:6058: inode #2: comm syz-executor: mark_inode_dirty error [ 59.768226][ T4183] EXT4-fs (loop2): Remounting filesystem read-only [ 59.800498][ T4321] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 59.814180][ T4328] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.12' resets device [ 59.816700][ T4321] EXT4-fs (loop2): Remounting filesystem read-only [ 59.864556][ T4328] loop3: detected capacity change from 0 to 1024 [ 59.882103][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.893696][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.904647][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 59.918175][ T4252] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 59.926115][ T23] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 59.940601][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.973935][ T23] usb 2-1: config 0 descriptor?? [ 60.030624][ T4330] overlayfs: missing 'lowerdir' [ 60.292251][ T4252] usb 1-1: Using ep0 maxpacket: 32 [ 60.601205][ T4252] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.634756][ T4252] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.801910][ T4252] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 60.811267][ T4252] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 60.820444][ T4252] usb 1-1: Product: syz [ 60.825950][ T4252] usb 1-1: Manufacturer: syz [ 60.878210][ T23] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 60.887388][ T4252] hub 1-1:4.0: USB hub found [ 60.901088][ T23] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 61.081920][ T4252] hub 1-1:4.0: 2 ports detected [ 61.220734][ T4333] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.273003][ T21] usb 2-1: USB disconnect, device number 2 [ 61.303287][ T4252] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 61.310396][ T4252] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 61.318056][ T4333] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.384269][ T4252] usb 1-1: USB disconnect, device number 2 [ 61.415988][ T4333] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.489815][ T4333] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.601047][ T4343] chnl_net:caif_netlink_parms(): no params data found [ 61.636275][ T23] usb 5-1: USB disconnect, device number 2 [ 61.777159][ T4343] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.789595][ T4343] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.798514][ T4343] device bridge_slave_0 entered promiscuous mode [ 61.811868][ T4343] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.821886][ T4343] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.829957][ T4343] device bridge_slave_1 entered promiscuous mode [ 61.860220][ T4343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.873754][ T4343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.994830][ T4359] loop0: detected capacity change from 0 to 128 [ 62.120156][ T4367] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 62.145765][ T4343] team0: Port device team_slave_0 added [ 62.154776][ T4343] team0: Port device team_slave_1 added [ 62.166458][ T4370] loop3: detected capacity change from 0 to 512 [ 62.208763][ T4359] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 62.276591][ T4370] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 62.317155][ T4370] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 62.325972][ T4359] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 62.387837][ T4343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.419471][ T4343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.423017][ T4370] System zones: 0-1, 15-15, 18-18, 34-34 [ 62.460579][ T4370] EXT4-fs (loop3): orphan cleanup on readonly fs [ 62.489931][ T4343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.498832][ T4370] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 62.526825][ T4370] EXT4-fs warning (device loop3): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 62.533830][ T4343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.576609][ T4370] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 62.595610][ T4384] loop1: detected capacity change from 0 to 256 [ 62.604042][ T4370] EXT4-fs (loop3): 1 truncate cleaned up [ 62.611240][ T4343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.618856][ T4370] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 62.702848][ T4384] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 62.754247][ T4343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.839982][ T4370] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 62.854449][ T4370] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 62.865028][ T4370] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 62.875561][ T4370] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 62.904976][ T4370] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 62.935711][ T4370] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 62.953579][ T4343] device hsr_slave_0 entered promiscuous mode [ 62.981489][ T4343] device hsr_slave_1 entered promiscuous mode [ 63.020705][ T4343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.085009][ T4343] Cannot create hsr debugfs directory [ 64.091694][ C1] sched: RT throttling activated [ 64.111793][ T4252] Bluetooth: hci1: command 0x0409 tx timeout [ 64.281771][ T21] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 64.496699][ T4400] team0: Port device team_slave_0 removed [ 64.536151][ T4410] loop0: detected capacity change from 0 to 16 [ 64.596335][ T4410] erofs: (device loop0): mounted with root inode @ nid 36. [ 64.682008][ T21] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 64.702062][ T21] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 64.726630][ T4255] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 64.730377][ T4343] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 64.852912][ T4343] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 64.878837][ T4343] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 64.903186][ T21] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 64.928823][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.941643][ T21] usb 2-1: Product: syz [ 64.947109][ T21] usb 2-1: Manufacturer: syz [ 64.977453][ T21] usb 2-1: SerialNumber: syz [ 64.979381][ T4255] usb 4-1: Using ep0 maxpacket: 16 [ 64.988704][ T21] usb 2-1: config 0 descriptor?? [ 65.005981][ T4428] process 'syz.4.33' launched './file0' with NULL argv: empty string added [ 65.114597][ T4255] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.139670][ T4255] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 65.168473][ T4343] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 65.175617][ T4391] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 65.183346][ T4391] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 65.201958][ T4255] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 65.220788][ T4255] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.283426][ T4255] usb 4-1: config 0 descriptor?? [ 65.305631][ T4437] blk_update_request: I/O error, dev loop0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 65.318606][ T4437] blk_update_request: I/O error, dev loop0, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 65.330024][ T4437] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 65.341797][ T4437] blk_update_request: I/O error, dev loop0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 65.353338][ T4437] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 65.363053][ T4437] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 65.370791][ T4437] UDF-fs: Scanning with blocksize 512 failed [ 65.380184][ T4437] blk_update_request: I/O error, dev loop0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 65.391849][ T4437] blk_update_request: I/O error, dev loop0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 65.403192][ T4437] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 65.413708][ T4437] blk_update_request: I/O error, dev loop0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 65.425143][ T4437] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 65.434845][ T4437] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 65.442603][ T4437] UDF-fs: Scanning with blocksize 1024 failed [ 65.451046][ T4437] blk_update_request: I/O error, dev loop0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 65.463273][ T4437] blk_update_request: I/O error, dev loop0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 65.474719][ T4437] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 65.485131][ T4437] blk_update_request: I/O error, dev loop0, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 65.496606][ T4437] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 65.506311][ T4437] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 65.514077][ T4437] UDF-fs: Scanning with blocksize 2048 failed [ 65.521924][ T4437] blk_update_request: I/O error, dev loop0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 65.533907][ T4437] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 65.544322][ T4437] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 65.554016][ T4437] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 65.561779][ T4437] UDF-fs: Scanning with blocksize 4096 failed [ 65.567952][ T4437] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 65.592313][ T4391] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 65.631017][ T4391] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 65.797700][ T4333] device hsr_slave_0 left promiscuous mode [ 65.818534][ T4333] device hsr_slave_1 left promiscuous mode [ 65.955248][ T4333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.971813][ T4333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.983808][ T4333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.999358][ T4333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.018509][ T4333] device bridge_slave_1 left promiscuous mode [ 66.033786][ T4255] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 66.045060][ T4333] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.054752][ T4255] HID 045e:07da: Invalid code 65582 type 1 [ 66.068310][ T4255] HID 045e:07da: Invalid code 65583 type 1 [ 66.084858][ T4255] HID 045e:07da: Invalid code 65584 type 1 [ 66.095033][ T4333] device bridge_slave_0 left promiscuous mode [ 66.105182][ T4255] HID 045e:07da: Invalid code 65585 type 1 [ 66.111037][ T4255] HID 045e:07da: Invalid code 65586 type 1 [ 66.111508][ T4333] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.146635][ T4255] HID 045e:07da: Invalid code 65587 type 1 [ 66.156793][ T21] Error reading MAC address [ 66.161850][ T4255] HID 045e:07da: Invalid code 65588 type 1 [ 66.173569][ T21] usb 2-1: USB disconnect, device number 3 [ 66.188252][ T4255] HID 045e:07da: Invalid code 65589 type 1 [ 66.199161][ T4334] Bluetooth: hci1: command 0x041b tx timeout [ 66.212846][ T4255] HID 045e:07da: Invalid code 65590 type 1 [ 66.246808][ T4333] device veth1_macvtap left promiscuous mode [ 66.255218][ T4255] HID 045e:07da: Invalid code 65591 type 1 [ 66.256295][ T4333] device veth0_macvtap left promiscuous mode [ 66.294664][ T4333] device veth1_vlan left promiscuous mode [ 66.321042][ T4333] device veth0_vlan left promiscuous mode [ 66.338081][ T4255] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0002/input/input5 [ 66.391049][ T4467] loop0: detected capacity change from 0 to 16 [ 66.446912][ T4255] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 66.517027][ T4467] erofs: (device loop0): mounted with root inode @ nid 36. [ 66.523112][ T4255] usb 4-1: USB disconnect, device number 2 [ 66.624117][ T4468] fido_id[4468]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 66.951357][ T21] kernel read not supported for file /snd/controlC0 (pid: 21 comm: kworker/1:0) [ 67.006058][ T4333] team0 (unregistering): Port device team_slave_1 removed [ 67.028619][ T4333] team0 (unregistering): Port device team_slave_0 removed [ 67.044712][ T4475] loop1: detected capacity change from 0 to 512 [ 67.085889][ T4333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.103207][ T4475] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 67.139912][ T4475] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 67.141131][ T4333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.162873][ T4475] EXT4-fs (loop1): orphan cleanup on readonly fs [ 67.175009][ T4475] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.52: attempt to clear invalid blocks 1024 len 1 [ 67.295835][ T4475] EXT4-fs (loop1): Remounting filesystem read-only [ 67.311934][ T4475] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.52: bg 0: block 361: padding at end of block bitmap is not set [ 67.353078][ T4475] EXT4-fs (loop1): Remounting filesystem read-only [ 67.359723][ T4475] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 67.391486][ T4475] EXT4-fs (loop1): Remounting filesystem read-only [ 67.404108][ T4333] bond0 (unregistering): Released all slaves [ 67.449834][ T4475] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.52: invalid indirect mapped block 1811939328 (level 0) [ 67.470881][ T4475] EXT4-fs (loop1): Remounting filesystem read-only [ 67.477986][ T4475] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.52: invalid indirect mapped block 2185560079 (level 1) [ 67.501311][ T4475] EXT4-fs (loop1): Remounting filesystem read-only [ 67.509972][ T4475] EXT4-fs (loop1): 1 truncate cleaned up [ 67.530408][ T4475] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,discard,errors=remount-ro,sb=0x0000000000000009. Quota mode: none. [ 67.540906][ T4486] binder: BINDER_SET_CONTEXT_MGR already set [ 67.557755][ T4486] binder: 4485:4486 ioctl 4018620d 200000000200 returned -16 [ 67.619526][ T4489] loop0: detected capacity change from 0 to 1024 [ 67.657452][ T4343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.671384][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.681894][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 67.684679][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.755783][ T4343] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.799590][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.815163][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.849077][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.856287][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.001293][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.042040][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.088550][ T4499] loop0: detected capacity change from 0 to 512 [ 68.104589][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.114960][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.123973][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.141508][ T4499] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 68.212258][ T4502] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 68.223239][ T4502] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 68.232894][ T4502] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 68.241099][ T4502] UDF-fs: Scanning with blocksize 512 failed [ 68.250532][ T4502] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 68.261236][ T4502] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 68.270943][ T4502] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 68.278819][ T4502] UDF-fs: Scanning with blocksize 1024 failed [ 68.287928][ T4502] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 68.298779][ T4502] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 68.308514][ T4502] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 68.316289][ T4502] UDF-fs: Scanning with blocksize 2048 failed [ 68.325026][ T4502] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 68.335549][ T4502] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 68.345371][ T4502] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 68.353126][ T4502] UDF-fs: Scanning with blocksize 4096 failed [ 68.359300][ T4502] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 68.398935][ T4334] Bluetooth: hci1: command 0x040f tx timeout [ 68.406733][ T4499] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 68.518824][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.526004][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.549222][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 68.562532][ T7] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 68.571590][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.656152][ T7] usb 4-1: config 0 descriptor?? [ 68.663494][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.672656][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.675128][ T4499] EXT4-fs (loop0): orphan cleanup on readonly fs [ 68.683251][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.707341][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.714204][ T4499] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3887: comm syz.0.50: Allocating blocks 41-42 which overlap fs metadata [ 68.716571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.776426][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.785187][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.793678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.805359][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.814120][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.828013][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.837473][ T4499] Quota error (device loop0): write_blk: dquota write failed [ 68.852006][ T4499] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 68.888010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.911848][ T4499] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.50: Failed to acquire dquot type 0 [ 68.941864][ T4499] EXT4-fs error (device loop0): mb_free_blocks:1876: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 68.972828][ T4499] EXT4-fs (loop0): 1 truncate cleaned up [ 68.979015][ T4499] EXT4-fs (loop0): pa ffff88807ec0e1c0: logic 1, phys. 41, len 23 [ 68.987379][ T4499] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4904: group 0, free 22, pa_free 23 [ 69.032200][ T4499] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000002,noblock_validity,noquota,nolazytime,nogrpid,errors=continue,jqfmt=vfsold,i_version,resuid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 69.134362][ T7] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 69.173223][ T7] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 69.278107][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.293170][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.369289][ T4343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.490974][ T4534] loop1: detected capacity change from 0 to 16 [ 69.507386][ T4533] input: syz1 as /devices/virtual/input/input6 [ 69.545204][ T4334] usb 4-1: USB disconnect, device number 3 [ 69.552085][ C1] plantronics 0003:047F:FFFF.0003: usb_submit_urb(ctrl) failed: -19 [ 69.597230][ T4534] erofs: (device loop1): mounted with root inode @ nid 36. [ 69.678715][ T4541] loop0: detected capacity change from 0 to 128 [ 69.902679][ T4541] attempt to access beyond end of device [ 69.902679][ T4541] loop0: rw=2049, want=148, limit=128 [ 70.019975][ T4541] attempt to access beyond end of device [ 70.019975][ T4541] loop0: rw=2049, want=833, limit=128 [ 70.042847][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.061367][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.210634][ T4541] attempt to access beyond end of device [ 70.210634][ T4541] loop0: rw=524288, want=409, limit=128 [ 70.241767][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.250713][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.262587][ T4541] attempt to access beyond end of device [ 70.262587][ T4541] loop0: rw=0, want=161, limit=128 [ 70.274543][ T4343] device veth0_vlan entered promiscuous mode [ 70.284048][ T4541] attempt to access beyond end of device [ 70.284048][ T4541] loop0: rw=0, want=161, limit=128 [ 70.624448][ T4172] Bluetooth: hci1: command 0x0419 tx timeout [ 70.865492][ T4555] attempt to access beyond end of device [ 70.865492][ T4555] loop0: rw=0, want=154, limit=128 [ 70.894664][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.943380][ T4541] attempt to access beyond end of device [ 70.943380][ T4541] loop0: rw=0, want=154, limit=128 [ 71.005930][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.027362][ T4541] Buffer I/O error on dev loop0, logical block 153, async page read [ 71.212998][ T4541] attempt to access beyond end of device [ 71.212998][ T4541] loop0: rw=0, want=155, limit=128 [ 71.388996][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.396097][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.441039][ T4343] device veth1_vlan entered promiscuous mode [ 71.510788][ T4541] Buffer I/O error on dev loop0, logical block 154, async page read [ 71.555352][ T4541] attempt to access beyond end of device [ 71.555352][ T4541] loop0: rw=0, want=156, limit=128 [ 71.673733][ T4541] Buffer I/O error on dev loop0, logical block 155, async page read [ 71.906558][ T4541] attempt to access beyond end of device [ 71.906558][ T4541] loop0: rw=0, want=157, limit=128 [ 71.922839][ T4541] Buffer I/O error on dev loop0, logical block 156, async page read [ 71.973297][ T4541] Buffer I/O error on dev loop0, logical block 157, async page read [ 71.989940][ T4582] loop3: detected capacity change from 0 to 512 [ 72.003483][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.019249][ T4581] Illegal XDP return value 4294967262, expect packet loss! [ 72.019987][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.026923][ T4541] Buffer I/O error on dev loop0, logical block 158, async page read [ 72.027014][ T4541] Buffer I/O error on dev loop0, logical block 159, async page read [ 72.027049][ T4541] Buffer I/O error on dev loop0, logical block 160, async page read [ 72.027137][ T4541] Buffer I/O error on dev loop0, logical block 153, async page read [ 72.027175][ T4541] Buffer I/O error on dev loop0, logical block 154, async page read [ 72.080245][ T4343] device veth0_macvtap entered promiscuous mode [ 72.135558][ T4582] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 72.158621][ T4343] device veth1_macvtap entered promiscuous mode [ 72.197033][ T4582] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 72.239091][ T4582] EXT4-fs (loop3): orphan cleanup on readonly fs [ 72.251939][ T4582] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3887: comm syz.3.65: Allocating blocks 41-42 which overlap fs metadata [ 72.296310][ T4582] Quota error (device loop3): write_blk: dquota write failed [ 72.304426][ T4582] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 72.314806][ T4582] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.65: Failed to acquire dquot type 0 [ 72.330962][ T4582] EXT4-fs error (device loop3): mb_free_blocks:1876: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 72.356480][ T4343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.367294][ T4582] EXT4-fs (loop3): 1 truncate cleaned up [ 72.373223][ T4582] EXT4-fs (loop3): pa ffff88807ec0e0e0: logic 1, phys. 41, len 23 [ 72.381120][ T4582] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4904: group 0, free 22, pa_free 23 [ 72.389843][ T4343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.392659][ T4582] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000002,noblock_validity,noquota,nolazytime,nogrpid,errors=continue,jqfmt=vfsold,i_version,resuid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 72.425112][ T4343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.436116][ T4343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.460955][ T4343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.477329][ T4343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.487439][ T4343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.504043][ T4343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.518756][ T4343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.531292][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.547591][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.588864][ T4343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.609591][ T4343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.634571][ T4343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.652337][ T4343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.668383][ T4343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.679220][ T4343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.694662][ T4343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.707460][ T4343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.724658][ T4343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.736401][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.750407][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.777940][ T4343] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.791442][ T4343] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.830267][ T4343] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.869735][ T4343] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.984111][ T4595] loop3: detected capacity change from 0 to 1024 [ 73.347006][ T4504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.373153][ T4504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.401413][ T4595] hfsplus: xattr searching failed [ 73.477658][ T4595] hfsplus: xattr searching failed [ 73.495994][ T4595] hfsplus: xattr searching failed [ 73.523466][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.584086][ T4321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.611792][ T4321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.630449][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.788445][ T4611] loop5: detected capacity change from 0 to 256 [ 73.912273][ T4611] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.965026][ T4611] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 75.093539][ T4624] overlayfs: missing 'lowerdir' [ 75.166947][ T4611] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 76.120701][ T4641] loop1: detected capacity change from 0 to 256 [ 76.200799][ T4641] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d) [ 76.893686][ T1324] cfg80211: failed to load regulatory.db [ 77.972113][ T4659] mmap: syz.5.85 (4659): VmData 49217536 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 78.106727][ T4665] loop3: detected capacity change from 0 to 512 [ 78.334695][ T4665] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 78.365836][ T4665] EXT4-fs (loop3): orphan cleanup on readonly fs [ 78.460829][ T4672] overlayfs: missing 'workdir' [ 78.638594][ T4665] Quota error (device loop3): v2_read_file_info: Block with free entry too big (4294967071 >= 6). [ 78.701601][ T4665] EXT4-fs warning (device loop3): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 78.797351][ T4665] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 78.866658][ T4665] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.88: bg 0: block 40: padding at end of block bitmap is not set [ 78.911096][ T4665] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 78.931625][ T4665] EXT4-fs (loop3): 1 truncate cleaned up [ 78.937363][ T4665] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 79.240032][ T4682] overlayfs: missing 'workdir' [ 79.528845][ T4687] binder: BINDER_SET_CONTEXT_MGR already set [ 79.600933][ T4687] binder: 4684:4687 ioctl 4018620d 200000000200 returned -16 [ 80.031896][ T1108] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 80.044930][ T4703] loop3: detected capacity change from 0 to 8192 [ 80.096386][ T4716] fuse: Bad value for 'fd' [ 80.164123][ T4703] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 80.171632][ T4703] UDF-fs: Scanning with blocksize 512 failed [ 80.244411][ T4703] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 80.286859][ T4703] UDF-fs: Scanning with blocksize 1024 failed [ 80.445824][ T4703] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 80.482382][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 80.520790][ T4703] UDF-fs: Scanning with blocksize 2048 failed [ 80.607401][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.951940][ T1108] usb 2-1: New USB device found, idVendor=056a, idProduct=0435, bcdDevice= 0.00 [ 80.977949][ T4703] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 81.023861][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.138123][ T1108] usb 2-1: config 0 descriptor?? [ 81.942746][ T4728] overlayfs: missing 'workdir' [ 82.395813][ T4739] loop3: detected capacity change from 0 to 1024 [ 82.455620][ T1108] wacom 0003:056A:0435.0004: Unknown device_type for 'HID 056a:0435'. Ignoring. [ 82.568689][ T4739] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,noauto_da_alloc,jqfmt=vfsold,stripe=0x0000000000000003,noauto_da_alloc,auto_da_alloc=0x0000000000000005,resuid=0x0000000000000000,dioread_lock,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 82.678006][ T4334] usb 2-1: USB disconnect, device number 4 [ 83.114563][ T4758] loop0: detected capacity change from 0 to 8192 [ 83.195253][ T4175] loop0: p1 < > p2 < > p4 [ 83.236770][ T4175] loop0: p4 size 16776968 extends beyond EOD, truncated [ 83.340047][ T4758] loop0: p1 < > p2 < > p4 [ 83.379447][ T4758] loop0: p4 size 16776968 extends beyond EOD, truncated [ 85.942222][ T4173] udevd[4173]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 85.944437][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 85.999545][ T4837] loop3: detected capacity change from 0 to 128 [ 86.014047][ T4839] loop5: detected capacity change from 0 to 16 [ 86.079680][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 86.144487][ T4844] loop0: detected capacity change from 0 to 128 [ 86.213670][ T4839] erofs: (device loop5): mounted with root inode @ nid 36. [ 86.245327][ T4837] handle_bad_sector: 3596 callbacks suppressed [ 86.245346][ T4837] attempt to access beyond end of device [ 86.245346][ T4837] loop3: rw=2049, want=148, limit=128 [ 86.410008][ T4844] FAT-fs (loop0): Directory bread(block 3163) failed [ 86.421255][ T4837] attempt to access beyond end of device [ 86.421255][ T4837] loop3: rw=2049, want=481, limit=128 [ 86.460912][ T4844] FAT-fs (loop0): Directory bread(block 3163) failed [ 86.470976][ T4867] loop5: detected capacity change from 0 to 8 [ 86.487682][ T4844] FAT-fs (loop0): Directory bread(block 3163) failed [ 86.489984][ T4820] attempt to access beyond end of device [ 86.489984][ T4820] loop3: rw=2049, want=154, limit=128 [ 86.552751][ T4867] attempt to access beyond end of device [ 86.552751][ T4867] loop5: rw=2048, want=36028797018963976, limit=8 [ 86.578760][ T4867] SQUASHFS error: Failed to read block 0xfffffffffffffffc: -5 [ 86.593536][ T4326] udevd[4326]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 86.594593][ T4173] udevd[4173]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 86.616924][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 86.639942][ T4867] unable to read xattr id index table [ 86.939138][ T4880] loop5: detected capacity change from 0 to 1024 [ 87.147245][ T4887] loop1: detected capacity change from 0 to 512 [ 87.272849][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 89.045255][ T4880] EXT4-fs (loop5): inline encryption not supported [ 89.056249][ T4880] EXT4-fs (loop5): Ignoring removed oldalloc option [ 89.094403][ T4880] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 89.111530][ T4887] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 89.221929][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 89.257143][ T4880] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,user_xattr,inlinecrypt,oldalloc,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,min_batch_time=0x0000000000000000,nombcache,errors=remount-ro,. Quota mode: writeback. [ 89.288907][ T4887] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.132: inode has both inline data and extents flags [ 89.386729][ T4887] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.132: couldn't read orphan inode 15 (err -117) [ 89.399517][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.431149][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.454137][ T4887] EXT4-fs (loop1): mounted filesystem without journal. Opts: noinit_itable,block_validity,quota,nombcache,,errors=continue. Quota mode: writeback. [ 89.486044][ T23] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 89.510408][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.754406][ T4913] netlink: 104 bytes leftover after parsing attributes in process `syz.3.133'. [ 89.825448][ T23] usb 1-1: config 0 descriptor?? [ 90.153517][ T23] usb 1-1: can't set config #0, error -71 [ 90.171924][ T23] usb 1-1: USB disconnect, device number 3 [ 90.561107][ T4936] loop5: detected capacity change from 0 to 1024 [ 91.678361][ T4936] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 91.837772][ T4936] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.783287][ T4963] loop0: detected capacity change from 0 to 2048 [ 92.788031][ T4973] loop3: detected capacity change from 0 to 256 [ 92.903603][ T4973] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 92.970809][ T4963] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.999643][ T4973] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 93.354358][ T4988] netlink: 'syz.5.155': attribute type 3 has an invalid length. [ 95.003514][ T5014] netlink: 28 bytes leftover after parsing attributes in process `syz.3.162'. [ 95.296150][ T5015] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 95.336015][ T5015] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 96.493616][ T5054] loop5: detected capacity change from 0 to 1024 [ 96.540318][ T5056] loop1: detected capacity change from 0 to 1024 [ 96.660856][ T5054] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 96.685512][ T5056] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 97.143503][ T5054] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 97.168296][ T5056] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 97.624328][ T5080] loop3: detected capacity change from 0 to 1024 [ 97.694894][ T5080] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 97.821493][ T5080] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,errors=remount-ro,dioread_nolock,nojournal_checksum,lazytime,noauto_da_alloc,. Quota mode: writeback. [ 97.854886][ T5054] syz.5.173 (5054) used greatest stack depth: 21136 bytes left [ 98.109010][ T5101] loop1: detected capacity change from 0 to 256 [ 98.121570][ T5103] loop5: detected capacity change from 0 to 128 [ 98.202658][ T5103] FAT-fs (loop5): Directory bread(block 524322) failed [ 98.222261][ T5103] FAT-fs (loop5): Directory bread(block 524323) failed [ 98.229182][ T5103] FAT-fs (loop5): Directory bread(block 524324) failed [ 98.288458][ T5103] FAT-fs (loop5): Directory bread(block 524325) failed [ 98.310997][ T5103] FAT-fs (loop5): Directory bread(block 524326) failed [ 98.337092][ T5103] FAT-fs (loop5): Directory bread(block 524327) failed [ 98.457031][ T5103] FAT-fs (loop5): Directory bread(block 524328) failed [ 98.464030][ T5103] FAT-fs (loop5): Directory bread(block 524329) failed [ 98.905043][ T5101] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 99.429029][ T5119] loop3: detected capacity change from 0 to 1024 [ 99.444384][ T5103] FAT-fs (loop5): Directory bread(block 524322) failed [ 99.462251][ T5103] FAT-fs (loop5): Directory bread(block 524323) failed [ 99.664526][ T5119] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 99.710075][ T5119] hfsplus: xattr searching failed [ 99.733300][ T5131] loop0: detected capacity change from 0 to 128 [ 99.918491][ T5146] loop5: detected capacity change from 0 to 164 [ 101.806320][ T5188] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 102.282851][ T5195] loop3: detected capacity change from 0 to 1024 [ 102.450199][ T5195] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,errors=remount-ro,. Quota mode: none. [ 102.534360][ T5195] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.547472][ T5213] loop5: detected capacity change from 0 to 128 [ 102.581237][ T5195] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.209: inode has both inline data and extents flags [ 102.724240][ T5195] EXT4-fs (loop3): Remounting filesystem read-only [ 102.746194][ T4312] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 102.764353][ T5213] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 102.844354][ T5213] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.444541][ T5213] syz.5.214 (pid 5213) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 103.546128][ T5231] loop1: detected capacity change from 0 to 512 [ 103.645718][ T5231] EXT4-fs (loop1): Ignoring removed bh option [ 103.724126][ T5231] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,usrquota,bh,,errors=continue. Quota mode: writeback. [ 103.726047][ T5241] loop3: detected capacity change from 0 to 1024 [ 103.799956][ T5244] loop5: detected capacity change from 0 to 512 [ 103.838749][ T5231] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.891900][ T5244] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 103.934376][ T4312] usb 1-1: config 11 has an invalid interface number: 74 but max is 1 [ 103.946346][ T4312] usb 1-1: config 11 has no interface number 1 [ 103.951297][ T5241] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,usrquota,,errors=continue. Quota mode: writeback. [ 103.952713][ T4312] usb 1-1: config 11 interface 0 has no altsetting 0 [ 103.989733][ T5244] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 104.008070][ T26] audit: type=1800 audit(1769328207.561:3): pid=5241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.221" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 104.030360][ T4312] usb 1-1: config 11 interface 74 has no altsetting 0 [ 104.378879][ T5244] EXT4-fs (loop5): 1 truncate cleaned up [ 104.400141][ T26] audit: type=1800 audit(1769328207.831:4): pid=5256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.219" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 104.421628][ T5244] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,nomblk_io_submit,noinit_itable,inode_readahead_blks=0x0000000000000010,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 104.479413][ T4312] usb 1-1: New USB device found, idVendor=0403, idProduct=f449, bcdDevice=5f.02 [ 104.497271][ T4312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.507126][ T4312] usb 1-1: Product: syz [ 104.510425][ T5244] EXT4-fs warning (device loop5): ext4_group_extend:1847: will only finish group (8193 blocks, 7937 new) [ 104.517109][ T4312] usb 1-1: Manufacturer: syz [ 104.527826][ T4312] usb 1-1: SerialNumber: syz [ 104.617854][ T5244] EXT4-fs warning (device loop5): ext4_group_extend:1852: can't read last block, resize aborted [ 104.767662][ T5271] loop1: detected capacity change from 0 to 128 [ 104.771543][ T5268] input: syz0 as /devices/virtual/input/input11 [ 104.814518][ T4173] udevd[4173]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 104.862832][ T4312] ftdi_sio 1-1:11.0: FTDI USB Serial Device converter detected [ 104.918784][ T4312] usb 1-1: Detected FT2232C [ 104.954190][ T4312] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 104.984165][ T4312] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 104.997476][ T4312] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 105.083577][ T4312] ftdi_sio 1-1:11.74: FTDI USB Serial Device converter detected [ 105.106159][ T4312] usb 1-1: Detected FT2232C [ 105.146361][ T4312] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 105.183743][ T4312] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 105.222859][ T4312] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 105.270325][ T4312] usb 1-1: USB disconnect, device number 4 [ 105.299245][ T4312] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 105.369677][ T4312] ftdi_sio 1-1:11.0: device disconnected [ 105.394420][ T4312] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 105.433028][ T5294] loop1: detected capacity change from 0 to 16 [ 105.440774][ T4312] ftdi_sio 1-1:11.74: device disconnected [ 105.809939][ T5302] netlink: 16 bytes leftover after parsing attributes in process `syz.1.234'. [ 107.697126][ T5308] loop1: detected capacity change from 0 to 512 [ 108.038298][ T5326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.243'. [ 108.066596][ T5330] capability: warning: `syz.1.241' uses deprecated v2 capabilities in a way that may be insecure [ 108.095520][ T5331] loop5: detected capacity change from 0 to 128 [ 108.213461][ T5331] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 108.245839][ T5331] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 109.658595][ T5363] loop0: detected capacity change from 0 to 2048 [ 110.108647][ T5369] loop5: detected capacity change from 0 to 512 [ 110.147486][ T5369] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 110.164489][ T5363] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.248954][ T26] audit: type=1800 audit(1769328213.801:5): pid=5363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.252" name="file1" dev="loop0" ino=1415 res=0 errno=0 [ 110.311575][ T5369] EXT4-fs (loop5): orphan cleanup on readonly fs [ 110.343174][ T5374] 9pnet: Insufficient options for proto=fd [ 110.397929][ T5369] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.253: bad orphan inode 15 [ 110.467131][ T5369] ext4_test_bit(bit=14, block=18) = 1 [ 110.496684][ T5369] is_bad_inode(inode)=0 [ 110.500893][ T5369] NEXT_ORPHAN(inode)=1023 [ 110.518027][ T26] audit: type=1800 audit(1769328214.071:6): pid=5376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.252" name="file1" dev="loop0" ino=1415 res=0 errno=0 [ 110.565914][ T5369] max_ino=32 [ 110.569252][ T5369] i_nlink=0 [ 110.603948][ T5369] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2922: inode #15: comm syz.5.253: corrupted xattr block 19 [ 110.638969][ T5385] loop1: detected capacity change from 0 to 1024 [ 110.641918][ T26] audit: type=1800 audit(1769328214.201:7): pid=5377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.252" name="file1" dev="loop0" ino=1415 res=0 errno=0 [ 110.662981][ T5383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.705443][ T5369] EXT4-fs warning (device loop5): ext4_evict_inode:302: xattr delete (err -117) [ 110.731497][ T5383] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.762217][ T5369] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 110.886331][ T5393] loop1: detected capacity change from 0 to 128 [ 110.936015][ T5383] syz.4.257 (5383) used greatest stack depth: 20944 bytes left [ 110.979583][ T5396] loop0: detected capacity change from 0 to 512 [ 111.013338][ T5369] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:406: inode #2: comm syz.5.253: No space for directory leaf checksum. Please run e2fsck -D. [ 111.052809][ T5393] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 111.060822][ T5369] EXT4-fs error (device loop5): htree_dirblock_to_tree:1083: inode #2: comm syz.5.253: Directory block failed checksum [ 111.117783][ T5396] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 111.128047][ T5393] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 111.197611][ T5396] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 111.251782][ T5406] loop3: detected capacity change from 0 to 8192 [ 111.362464][ T5396] EXT4-fs (loop0): 1 truncate cleaned up [ 111.445473][ T5396] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 112.294725][ T5418] Invalid ELF header magic: != ELF [ 112.551682][ T5426] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 113.340140][ T5436] loop0: detected capacity change from 0 to 128 [ 113.416651][ T5436] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 113.493478][ T5436] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.572020][ T4172] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 113.831777][ T4172] usb 4-1: Using ep0 maxpacket: 16 [ 113.972041][ T4172] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.988624][ T4172] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.018812][ T4172] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 114.055021][ T4172] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 114.109802][ T4172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.133007][ T5463] loop1: detected capacity change from 0 to 8 [ 114.189519][ T5465] xt_TCPMSS: Only works on TCP SYN packets [ 114.269285][ T5465] loop0: detected capacity change from 0 to 2048 [ 114.408977][ T4172] usb 4-1: config 0 descriptor?? [ 114.805477][ T5465] UDF-fs: warning (device loop0): udf_fill_super: No fileset found [ 114.950783][ T4172] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0005/input/input12 [ 115.067845][ T4172] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 115.128194][ T4172] usb 4-1: USB disconnect, device number 4 [ 115.251266][ T5475] fido_id[5475]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 116.595179][ T5499] loop3: detected capacity change from 0 to 512 [ 116.659236][ T5505] loop0: detected capacity change from 0 to 1024 [ 116.724999][ T5499] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 116.747178][ T5505] EXT4-fs (loop0): Mount option "delalloc" incompatible with ext2 [ 116.766966][ T5511] netlink: 'syz.5.295': attribute type 3 has an invalid length. [ 116.845993][ T5505] kvm: MONITOR instruction emulated as NOP! [ 117.038018][ T5499] EXT4-fs (loop3): 1 truncate cleaned up [ 117.064266][ T5499] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 118.154524][ T5535] netlink: 20 bytes leftover after parsing attributes in process `syz.3.290'. [ 118.163813][ T5535] netlink: 20 bytes leftover after parsing attributes in process `syz.3.290'. [ 118.615028][ T5539] 9pnet: Insufficient options for proto=fd [ 118.656610][ T5541] loop5: detected capacity change from 0 to 1024 [ 118.762496][ T5545] netlink: 168 bytes leftover after parsing attributes in process `syz.3.305'. [ 118.784230][ T5541] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 118.903901][ T5541] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #11: comm syz.5.304: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 119.003726][ T5541] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.304: couldn't read orphan inode 11 (err -117) [ 119.022837][ T5541] EXT4-fs (loop5): mounted filesystem without journal. Opts: sysvgroups,noload,mblk_io_submit,noload,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 119.158297][ T5553] loop3: detected capacity change from 0 to 512 [ 119.419437][ T5553] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 119.745910][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 119.848299][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 119.881509][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 120.155765][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 120.171699][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 120.180781][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 120.189763][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 120.199095][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 120.208062][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 120.217204][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 120.274670][ T5553] EXT4-fs (loop3): 1 truncate cleaned up [ 120.281833][ T5553] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 120.559960][ T5553] EXT4-fs error (device loop3): __ext4_iget:4912: inode #16: block 538: comm syz.3.309: invalid block [ 120.698928][ T5553] EXT4-fs (loop3): Remounting filesystem read-only [ 121.621785][ T5592] loop0: detected capacity change from 0 to 256 [ 121.850858][ T5592] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 122.562574][ T5599] loop3: detected capacity change from 0 to 1024 [ 122.978458][ T5615] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 123.180609][ T5624] loop5: detected capacity change from 0 to 2048 [ 123.366557][ T5624] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,grpid,,errors=continue. Quota mode: none. [ 123.420335][ T5624] EXT4-fs error (device loop5): ext4_lookup:1858: inode #16: comm syz.5.334: iget: bad i_size value: 8796093031208 [ 123.518542][ T5641] loop0: detected capacity change from 0 to 512 [ 123.642157][ T5641] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.340: inode has both inline data and extents flags [ 123.731283][ T5641] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.340: couldn't read orphan inode 15 (err -117) [ 123.775455][ T5644] loop3: detected capacity change from 0 to 2048 [ 123.786258][ T5641] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none. [ 123.848829][ T5644] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 123.858148][ T5648] loop5: detected capacity change from 0 to 1024 [ 123.889298][ T5644] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.965239][ T5650] loop0: detected capacity change from 0 to 1024 [ 124.006827][ T5648] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,grpquota,. Quota mode: writeback. [ 124.090003][ T5650] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 124.274433][ T5650] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc,mblk_io_submit,,errors=continue. Quota mode: none. [ 125.090664][ T9] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 125.172573][ T9] EXT4-fs (loop5): Remounting filesystem read-only [ 125.223283][ T5678] loop3: detected capacity change from 0 to 512 [ 125.279548][ T5678] EXT4-fs (loop3): Invalid want_extra_isize 9 [ 125.531377][ T5690] loop0: detected capacity change from 0 to 512 [ 125.559982][ T5694] loop5: detected capacity change from 0 to 256 [ 125.728090][ T5694] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 126.629273][ T5717] loop0: detected capacity change from 0 to 1024 [ 126.642497][ T5715] loop3: detected capacity change from 0 to 2048 [ 126.738666][ T5717] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 126.904977][ T5717] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.054266][ T5715] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.617153][ T5731] loop5: detected capacity change from 0 to 512 [ 127.680907][ T5732] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 127.871960][ T5731] EXT4-fs (loop5): bad s_min_extra_isize: 65528 [ 128.257824][ T5742] loop0: detected capacity change from 0 to 512 [ 128.272873][ T4334] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 128.404560][ T5742] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 128.575292][ T5742] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.375: No space for directory leaf checksum. Please run e2fsck -D. [ 128.608444][ T5742] EXT4-fs error (device loop0): ext4_readdir:223: inode #2: comm syz.0.375: path /57/file0: directory fails checksum at offset 0 [ 128.655192][ T4334] usb 4-1: Using ep0 maxpacket: 16 [ 129.420290][ T5736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.372'. [ 129.458172][ T5762] loop5: detected capacity change from 0 to 128 [ 129.462288][ T5736] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.494882][ T5762] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 129.584097][ T5736] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.359072][ T5776] loop0: detected capacity change from 0 to 1024 [ 130.447730][ T5776] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,noblock_validity,journal_dev=0x0000000000000009,nodioread_nolock,,errors=continue. Quota mode: none. [ 130.497238][ T5776] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.562442][ T5776] EXT4-fs error (device loop0): ext4_map_blocks:739: inode #15: comm syz.0.387: lblock 0 mapped to illegal pblock 0 (length 1) [ 130.588325][ T5776] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 130.602352][ T5776] EXT4-fs (loop0): This should not happen!! Data will be lost [ 130.602352][ T5776] [ 130.866941][ T4334] usb 4-1: unable to get BOS descriptor or descriptor too short [ 131.682007][ T4334] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 131.689634][ T4334] usb 4-1: can't read configurations, error -71 [ 131.730621][ T5813] loop0: detected capacity change from 0 to 128 [ 131.932028][ T4172] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 132.147780][ T4334] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 132.322264][ T4172] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.429544][ T4172] usb 6-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 132.602304][ T4334] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.646284][ T4172] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.697832][ T4334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 132.744823][ T4172] usb 6-1: config 0 descriptor?? [ 132.751901][ T4334] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.766638][ T4334] usb 4-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 132.776720][ T4334] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.794936][ T4334] usb 4-1: config 0 descriptor?? [ 132.823926][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.830331][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.855941][ T4334] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input13 [ 133.011415][ T5838] loop0: detected capacity change from 0 to 128 [ 133.053010][ T23] usb 4-1: USB disconnect, device number 6 [ 133.069563][ T5838] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 133.081575][ T5838] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.129175][ T23] appletouch 4-1:0.0: input: appletouch disconnected [ 133.228173][ T5797] loop5: detected capacity change from 0 to 16 [ 133.286717][ T5797] erofs: (device loop5): mounted with root inode @ nid 36. [ 133.973993][ T4172] hid-generic 0003:057E:200E.0006: hidraw0: USB HID v0.00 Device [HID 057e:200e] on usb-dummy_hcd.5-1/input0 [ 133.990826][ T4172] usb 6-1: USB disconnect, device number 2 [ 134.139771][ T5849] loop3: detected capacity change from 0 to 512 [ 134.222296][ T5852] fido_id[5852]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 134.237905][ T5849] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 134.431793][ T5849] EXT4-fs (loop3): 1 truncate cleaned up [ 134.443818][ T5857] loop5: detected capacity change from 0 to 512 [ 134.461789][ T5849] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,noquota,,errors=continue. Quota mode: none. [ 135.641819][ T5857] EXT4-fs (loop5): Test dummy encryption mode enabled [ 135.663249][ T5857] EXT4-fs (loop5): Test dummy encryption mode enabled [ 135.710727][ T5857] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 136.679668][ T5905] loop0: detected capacity change from 0 to 1024 [ 136.692270][ T5857] EXT4-fs (loop5): shut down requested (1) [ 136.928390][ T5905] EXT4-fs (loop0): Ignoring removed nobh option [ 137.387056][ T5905] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,noload,nobh,,errors=continue. Quota mode: none. [ 137.437983][ T5905] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.002168][ T5937] loop0: detected capacity change from 0 to 512 [ 138.062591][ T5937] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 138.190373][ T5937] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,norecovery,bsddf,,errors=continue. Quota mode: writeback. [ 138.211952][ T5937] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.348425][ T5945] EXT4-fs error (device loop0): __ext4_new_inode:1286: comm syz.0.442: failed to insert inode 16: doubly allocated? [ 139.468200][ T5951] loop0: detected capacity change from 0 to 512 [ 139.608127][ T5951] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 33619980: comm syz.0.446: invalid block [ 139.952504][ T5951] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.446: invalid indirect mapped block 10 (level 1) [ 140.370039][ T5951] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.446: invalid indirect mapped block 8 (level 1) [ 140.402017][ T5951] EXT4-fs (loop0): 1 truncate cleaned up [ 140.407782][ T5951] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 140.971329][ T5986] loop3: detected capacity change from 0 to 1024 [ 141.644882][ T5986] hfsplus: bad catalog entry type [ 141.756520][ T5994] binder: 5993:5994 ioctl c0306201 0 returned -14 [ 141.863187][ T4825] hfsplus: b-tree write err: -5, ino 4 [ 142.236867][ T21] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 142.520023][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 142.661746][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.684611][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.710084][ T21] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 142.731505][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.767700][ T21] usb 1-1: config 0 descriptor?? [ 142.832905][ T21] hub 1-1:0.0: USB hub found [ 143.159301][ T21] hub 1-1:0.0: 1 port detected [ 143.277262][ T6042] Zero length message leads to an empty skb [ 143.431999][ T21] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 143.480481][ T21] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 143.794293][ T21] usbhid 1-1:0.0: can't add hid device: -71 [ 143.806057][ T21] usbhid: probe of 1-1:0.0 failed with error -71 [ 143.975445][ T21] usb 1-1: USB disconnect, device number 5 [ 144.086706][ T6058] capability: warning: `syz.5.487' uses 32-bit capabilities (legacy support in use) [ 145.527294][ T6092] loop0: detected capacity change from 0 to 512 [ 145.534044][ T21] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 145.597528][ T6092] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 145.642630][ T6092] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 145.703416][ T6092] EXT4-fs (loop0): 1 truncate cleaned up [ 145.723131][ T6092] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,nomblk_io_submit,noinit_itable,inode_readahead_blks=0x0000000000000010,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 146.311071][ T6092] EXT4-fs warning (device loop0): ext4_group_extend:1852: can't read last block, resize aborted [ 146.522178][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.541895][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.558013][ T21] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 146.584735][ T21] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 146.601858][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.621458][ T21] usb 4-1: config 0 descriptor?? [ 146.632771][ T6108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.506'. [ 146.778525][ T6110] loop0: detected capacity change from 0 to 1024 [ 147.013314][ T6110] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,noblock_validity,journal_dev=0x0000000000000009,nodioread_nolock,,errors=continue. Quota mode: none. [ 147.041919][ T6110] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.224926][ T21] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 147.279158][ T21] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 147.742364][ C0] plantronics 0003:047F:FFFF.0007: hid_field_extract() called with n (132) > 32! (syz.0.512) [ 147.969145][ T7] usb 4-1: USB disconnect, device number 7 [ 148.282947][ T6133] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 148.855114][ T6156] loop3: detected capacity change from 0 to 8192 [ 149.103878][ T6156] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 149.746442][ T6174] loop0: detected capacity change from 0 to 128 [ 150.072838][ T6188] netlink: 52 bytes leftover after parsing attributes in process `syz.3.536'. [ 150.159510][ T6188] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.167078][ T6188] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.214108][ T6193] netlink: 76 bytes leftover after parsing attributes in process `syz.3.536'. [ 150.231934][ T6193] netlink: 52 bytes leftover after parsing attributes in process `syz.3.536'. [ 150.319309][ T6201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.543'. [ 150.328565][ T6201] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.458092][ T6201] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.340806][ T6211] netlink: 40 bytes leftover after parsing attributes in process `syz.5.546'. [ 151.722077][ T4226] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 152.171818][ T4226] usb 1-1: Using ep0 maxpacket: 16 [ 152.301924][ T4226] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.349778][ T4226] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.377479][ T4226] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 153.064187][ T4226] usb 1-1: config 0 interface 0 has no altsetting 0 [ 153.166266][ T4226] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 153.185486][ T4226] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.210021][ T4226] usb 1-1: config 0 descriptor?? [ 153.423294][ T6285] netlink: 12 bytes leftover after parsing attributes in process `syz.3.575'. [ 153.707105][ T4226] hid (null): nested delimiters [ 153.712667][ T4226] hid (null): nested delimiters [ 153.717604][ T4226] hid (null): nested delimiters [ 153.723057][ T4226] hid (null): report_id 24797 is invalid [ 154.378139][ T4226] usb 1-1: USB disconnect, device number 6 [ 154.766843][ T6325] 9pnet: Insufficient options for proto=fd [ 154.909637][ T6337] loop0: detected capacity change from 0 to 128 [ 155.067554][ T6337] binder: BINDER_SET_CONTEXT_MGR already set [ 155.105604][ T6337] binder: 6336:6337 ioctl 4018620d 2000000002c0 returned -16 [ 155.111814][ T4226] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 155.502391][ T4226] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.560164][ T4226] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.817109][ T4226] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 156.098658][ T4226] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 156.112619][ T4226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.140447][ T4226] usb 4-1: config 0 descriptor?? [ 157.103603][ T4226] plantronics 0003:047F:FFFF.0009: unknown main item tag 0xd [ 157.157931][ T4226] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 157.272668][ T4226] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 157.422009][ T4226] usb 4-1: USB disconnect, device number 8 [ 157.566108][ T6394] fido_id[6394]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 158.016503][ T6408] loop0: detected capacity change from 0 to 128 [ 160.161516][ T6434] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 160.190382][ T26] audit: type=1326 audit(1769328263.741:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.4.637" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e35b19cb9 code=0x0 [ 160.224129][ T6434] loop3: detected capacity change from 0 to 256 [ 160.290266][ T6434] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 160.468981][ T6450] netlink: 32 bytes leftover after parsing attributes in process `syz.1.639'. [ 162.036703][ T6502] loop3: detected capacity change from 0 to 256 [ 162.308630][ T6520] loop0: detected capacity change from 0 to 512 [ 162.389644][ T6520] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 162.440581][ T6520] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 162.480652][ T6529] 9pnet: Insufficient options for proto=fd [ 162.516254][ T6520] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3887: comm syz.0.663: Allocating blocks 41-42 which overlap fs metadata [ 162.547784][ T6520] EXT4-fs (loop0): Remounting filesystem read-only [ 162.557086][ T6520] Quota error (device loop0): write_blk: dquota write failed [ 162.585195][ T6520] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 162.607031][ T6520] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 162.617414][ T6520] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.663: Failed to acquire dquot type 1 [ 162.630450][ T6520] EXT4-fs (loop0): Remounting filesystem read-only [ 162.643205][ T6520] EXT4-fs error (device loop0): mb_free_blocks:1876: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 162.661577][ T6520] EXT4-fs (loop0): Remounting filesystem read-only [ 162.668341][ T6520] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #12: comm syz.0.663: corrupted inode contents [ 162.681896][ T6520] EXT4-fs (loop0): Remounting filesystem read-only [ 162.688438][ T6520] EXT4-fs error (device loop0): ext4_dirty_inode:6058: inode #12: comm syz.0.663: mark_inode_dirty error [ 162.709169][ T6520] EXT4-fs (loop0): Remounting filesystem read-only [ 162.715993][ T6520] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #12: comm syz.0.663: corrupted inode contents [ 162.729947][ T6520] EXT4-fs (loop0): Remounting filesystem read-only [ 162.736543][ T6520] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #12: comm syz.0.663: mark_inode_dirty error [ 162.750740][ T6520] EXT4-fs (loop0): Remounting filesystem read-only [ 162.758289][ T6520] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #12: comm syz.0.663: corrupted inode contents [ 162.774067][ T6520] EXT4-fs (loop0): Remounting filesystem read-only [ 162.780795][ T6520] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 162.791842][ T6520] EXT4-fs (loop0): Remounting filesystem read-only [ 162.798614][ T6520] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #12: comm syz.0.663: corrupted inode contents [ 162.812624][ T6520] EXT4-fs (loop0): Remounting filesystem read-only [ 162.819165][ T6520] EXT4-fs error (device loop0): ext4_truncate:4279: inode #12: comm syz.0.663: mark_inode_dirty error [ 162.832413][ T6520] EXT4-fs (loop0): Remounting filesystem read-only [ 162.840411][ T6520] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 162.857166][ T6520] EXT4-fs (loop0): Remounting filesystem read-only [ 162.873448][ T6520] EXT4-fs (loop0): 1 truncate cleaned up [ 162.879426][ T6520] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,inode_readahead_blks=0x0000000000200000,jqfmt=vfsold,noinit_itable,errors=remount-ro,noauto_da_alloc,sysvgroups,resgid=0x00000000000000002. Quota mode: writeback. [ 163.094113][ T6566] loop0: detected capacity change from 0 to 2048 [ 163.134181][ T6566] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 163.178143][ T6566] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.413455][ T4184] UDF-fs: error (device loop0): udf_read_inode: (ino 1440) failed !bh [ 163.468923][ T4184] UDF-fs: error (device loop0): udf_read_inode: (ino 1440) failed !bh [ 163.979473][ T4830] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.082649][ T4830] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.188593][ T4830] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.226537][ T6608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.296585][ T4830] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.684864][ T6612] chnl_net:caif_netlink_parms(): no params data found [ 164.969579][ T6612] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.019157][ T6612] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.060522][ T6612] device bridge_slave_0 entered promiscuous mode [ 165.127688][ T6612] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.145588][ T6612] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.184024][ T6612] device bridge_slave_1 entered promiscuous mode [ 165.280359][ T6612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.353512][ T6612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.438557][ T6612] team0: Port device team_slave_0 added [ 165.486747][ T6612] team0: Port device team_slave_1 added [ 165.558963][ T6612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.592022][ T6612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.655487][ T6612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.716567][ T6612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.731903][ T6612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.774840][ T6612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.097009][ T4830] device hsr_slave_0 left promiscuous mode [ 166.112326][ T4830] device hsr_slave_1 left promiscuous mode [ 166.144958][ T4830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.164158][ T4830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.195813][ T4830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.216136][ T4830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.241252][ T4830] device bridge_slave_1 left promiscuous mode [ 166.253172][ T4830] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.266081][ T4830] device bridge_slave_0 left promiscuous mode [ 166.276814][ T4830] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.306078][ T4830] device veth1_macvtap left promiscuous mode [ 166.312361][ T4830] device veth0_macvtap left promiscuous mode [ 166.321971][ T4830] device veth1_vlan left promiscuous mode [ 166.334242][ T4830] device veth0_vlan left promiscuous mode [ 166.425716][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 167.615475][ T4830] team0 (unregistering): Port device team_slave_1 removed [ 167.634883][ T4830] team0 (unregistering): Port device team_slave_0 removed [ 167.663829][ T4830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.689553][ T4830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.807146][ T4830] bond0 (unregistering): Released all slaves [ 167.848313][ T6612] device hsr_slave_0 entered promiscuous mode [ 167.855644][ T6612] device hsr_slave_1 entered promiscuous mode [ 167.862769][ T6612] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.871338][ T6612] Cannot create hsr debugfs directory [ 167.942367][ T6698] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 167.976461][ T6702] fuse: Bad value for 'fd' [ 168.335309][ T6722] loop3: detected capacity change from 0 to 128 [ 168.415143][ T6722] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 168.443710][ T6722] FAT-fs (loop3): Filesystem has been set read-only [ 168.490635][ T6612] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 168.503890][ T6730] netlink: 60 bytes leftover after parsing attributes in process `syz.5.735'. [ 168.510733][ T4255] Bluetooth: hci0: command 0x041b tx timeout [ 168.537985][ T6612] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 168.559254][ T6730] unsupported nlmsg_type 40 [ 168.577133][ T6612] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 168.622962][ T6612] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 168.774685][ T6746] netlink: 12 bytes leftover after parsing attributes in process `syz.5.738'. [ 168.788926][ T6746] bridge: RTM_NEWNEIGH with invalid ether address [ 169.027238][ T6612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.109017][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.117897][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.147969][ T6612] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.173037][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 169.194129][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.230180][ T4846] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.237337][ T4846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.311324][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.333402][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 169.347866][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.359306][ T4846] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.366451][ T4846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.417176][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 169.457811][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 169.528482][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 169.573109][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 169.592665][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 169.632732][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 169.689126][ T6612] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 169.711515][ T26] audit: type=1326 audit(1769328273.261:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6758 comm="syz.5.741" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa0bdd8acb9 code=0x0 [ 169.742298][ T6612] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 169.760095][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 169.802687][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 169.835138][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 169.872694][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 169.912179][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 169.951020][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 170.425496][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 170.453193][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 170.487240][ T6612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.582111][ T4226] Bluetooth: hci0: command 0x040f tx timeout [ 171.353579][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 171.376425][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.432628][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 171.449999][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.487086][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 171.509422][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 171.543773][ T6612] device veth0_vlan entered promiscuous mode [ 171.590345][ T6612] device veth1_vlan entered promiscuous mode [ 171.783459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 171.818184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 171.838054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 171.863674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 171.905108][ T6612] device veth0_macvtap entered promiscuous mode [ 171.935376][ T6612] device veth1_macvtap entered promiscuous mode [ 171.988322][ T6612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.061033][ T6612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.097218][ T6612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.136885][ T6612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.183508][ T6612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.221684][ T6612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.261690][ T6612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.281677][ T6612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.324042][ T6612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.339564][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 172.360203][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 172.410378][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 172.442690][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 172.484513][ T6612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.546609][ T6612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.581698][ T6612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.613315][ T6612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.641028][ T6612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.675495][ T6612] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.733791][ T1108] Bluetooth: hci0: command 0x0419 tx timeout [ 172.747941][ T6612] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.763255][ T6612] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.775495][ T6612] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.836955][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 172.850611][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 173.986447][ T4264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.024974][ T4264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.218343][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 174.505152][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.588604][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.925834][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 175.101341][ T6885] loop6: detected capacity change from 0 to 128 [ 175.128033][ T6887] loop3: detected capacity change from 0 to 512 [ 175.249185][ T6887] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.772: iget: bad i_size value: 38620345925642 [ 175.267483][ T6887] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.772: couldn't read orphan inode 15 (err -117) [ 175.333727][ T6887] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,delalloc,data_err=ignore,nojournal_checksum,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 175.370060][ T6905] loop6: detected capacity change from 0 to 128 [ 176.514031][ T23] Bluetooth: hci2: command 0x0406 tx timeout [ 176.520127][ T23] Bluetooth: hci4: command 0x0406 tx timeout [ 176.526288][ T23] Bluetooth: hci3: command 0x0406 tx timeout [ 176.692941][ T6905] FAT-fs (loop6): Directory bread(block 3163) failed [ 176.788761][ T6905] FAT-fs (loop6): Directory bread(block 3163) failed [ 176.827206][ T26] audit: type=1326 audit(1769328280.381:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.4.778" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f2e35b13ad7 code=0x0 [ 176.850373][ T6905] FAT-fs (loop6): Directory bread(block 3163) failed [ 177.028891][ T6930] loop3: detected capacity change from 0 to 256 [ 177.163440][ T6930] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 177.235806][ T6930] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 177.286347][ T6930] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 177.353370][ T6930] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 177.363815][ T26] audit: type=1800 audit(1769328280.911:11): pid=6930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.780" name="file1" dev="loop3" ino=1048645 res=0 errno=0 [ 177.398939][ T6930] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 177.412042][ T6927] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 177.562968][ T6930] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 177.712368][ T26] audit: type=1800 audit(1769328280.941:12): pid=6930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.780" name="file1" dev="loop3" ino=1048645 res=0 errno=0 [ 177.803728][ T6927] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 178.013122][ T6930] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 178.023556][ T6927] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 178.068985][ T6946] netlink: 'syz.5.788': attribute type 1 has an invalid length. [ 179.250332][ T6967] loop3: detected capacity change from 0 to 2048 [ 180.996487][ T6980] fuse: Bad value for 'fd' [ 181.129505][ T6980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.051982][ T7017] netlink: 104 bytes leftover after parsing attributes in process `syz.1.801'. [ 185.367943][ T7089] loop6: detected capacity change from 0 to 256 [ 185.568904][ T7089] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 186.115529][ T7089] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 186.520436][ T7123] loop3: detected capacity change from 0 to 128 [ 186.639117][ T7123] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 186.649978][ T7123] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.732094][ T7134] loop6: detected capacity change from 0 to 128 [ 186.806198][ T7123] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 186.998501][ T7134] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 187.214709][ T7134] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.753661][ T7151] loop3: detected capacity change from 0 to 2048 [ 187.837029][ T7151] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.200645][ T7176] loop3: detected capacity change from 0 to 256 [ 188.416197][ T7176] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 188.427069][ T7176] FAT-fs (loop3): Filesystem has been set read-only [ 188.459237][ T7176] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 188.476307][ T7176] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 188.653954][ T7176] syz.3.854 (7176) used greatest stack depth: 20848 bytes left [ 188.662156][ T26] audit: type=1800 audit(1769328292.191:13): pid=7176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.854" name="file1" dev="loop3" ino=1048646 res=0 errno=0 [ 189.070509][ T7200] loop6: detected capacity change from 0 to 1024 [ 189.187363][ T7207] loop3: detected capacity change from 0 to 1024 [ 189.197494][ T7200] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,usrquota,,errors=continue. Quota mode: writeback. [ 189.472212][ T7207] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 189.568868][ T7207] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 69: comm syz.3.863: lblock 8 mapped to illegal pblock 69 (length 1) [ 189.651792][ T7230] loop6: detected capacity change from 0 to 128 [ 189.695030][ T7207] EXT4-fs (loop3): Remounting filesystem read-only [ 189.706054][ T7207] Quota error (device loop3): write_blk: dquota write failed [ 189.724165][ T7207] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 68: comm syz.3.863: lblock 7 mapped to illegal pblock 68 (length 1) [ 189.761882][ T7207] EXT4-fs (loop3): Remounting filesystem read-only [ 189.772076][ T7207] Quota error (device loop3): write_blk: dquota write failed [ 189.799753][ T7230] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 189.802192][ T7207] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 67: comm syz.3.863: lblock 6 mapped to illegal pblock 67 (length 1) [ 189.861802][ T7207] EXT4-fs (loop3): Remounting filesystem read-only [ 189.885544][ T7207] Quota error (device loop3): write_blk: dquota write failed [ 189.914860][ T7207] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 189.953288][ T7207] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 48: comm syz.3.863: lblock 0 mapped to illegal pblock 48 (length 1) [ 190.018908][ T7250] loop6: detected capacity change from 0 to 256 [ 190.032337][ T7207] EXT4-fs (loop3): Remounting filesystem read-only [ 190.052913][ T7207] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 190.067557][ T7250] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 190.090064][ T7207] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.863: Failed to acquire dquot type 0 [ 190.122779][ T7207] EXT4-fs (loop3): Remounting filesystem read-only [ 190.126307][ T7250] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 190.129638][ T7207] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 190.223452][ T7207] EXT4-fs (loop3): Remounting filesystem read-only [ 190.230115][ T7207] EXT4-fs error (device loop3): ext4_evict_inode:282: inode #11: comm syz.3.863: mark_inode_dirty error [ 190.256041][ T7207] EXT4-fs (loop3): Remounting filesystem read-only [ 190.264100][ T7207] EXT4-fs warning (device loop3): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 190.279193][ T7207] EXT4-fs (loop3): 1 orphan inode deleted [ 190.288613][ T7207] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,noblock_validity,data_err=ignore,errors=remount-ro,nodiscard,stripe=0x0000000000000001,jqfmt=vfsv1,. Quota mode: none. [ 190.315201][ T4820] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 190.391789][ T4820] EXT4-fs (loop3): Remounting filesystem read-only [ 190.422290][ T4820] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 190.462919][ T4820] EXT4-fs error (device loop3): ext4_release_dquot:6270: comm kworker/u4:14: Failed to release dquot type 0 [ 190.484854][ T7207] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.863: Invalid inode bitmap blk 4 in block_group 0 [ 190.527251][ T7207] EXT4-fs (loop3): Remounting filesystem read-only [ 190.550684][ T4820] EXT4-fs (loop3): Remounting filesystem read-only [ 190.557664][ T7276] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 190.611513][ T7276] EXT4-fs (loop3): Remounting filesystem read-only [ 190.746028][ T4333] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 190.779618][ T7289] loop6: detected capacity change from 0 to 512 [ 190.796542][ T4333] EXT4-fs (loop3): Remounting filesystem read-only [ 190.819431][ T4333] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 190.838417][ T4333] EXT4-fs error (device loop3): ext4_release_dquot:6270: comm kworker/u4:9: Failed to release dquot type 0 [ 190.878884][ T4333] EXT4-fs (loop3): Remounting filesystem read-only [ 190.914022][ T4196] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 190.929107][ T7289] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 190.941061][ T4196] EXT4-fs (loop3): Remounting filesystem read-only [ 190.948169][ T7289] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 190.971558][ T4196] EXT4-fs error (device loop3): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error [ 191.013875][ T4196] EXT4-fs (loop3): Remounting filesystem read-only [ 191.048441][ T7289] EXT4-fs error (device loop6): ext4_do_update_inode:5222: inode #2: comm syz.6.894: corrupted inode contents [ 191.065273][ T7289] EXT4-fs error (device loop6): ext4_dirty_inode:6058: inode #2: comm syz.6.894: mark_inode_dirty error [ 191.176468][ T7289] EXT4-fs error (device loop6): ext4_do_update_inode:5222: inode #2: comm syz.6.894: corrupted inode contents [ 192.065765][ T7300] EXT4-fs error (device loop6): ext4_do_update_inode:5222: inode #2: comm syz.6.894: corrupted inode contents [ 192.138572][ T7300] EXT4-fs error (device loop6): ext4_dirty_inode:6058: inode #2: comm syz.6.894: mark_inode_dirty error [ 192.181432][ T7300] EXT4-fs error (device loop6): ext4_do_update_inode:5222: inode #2: comm syz.6.894: corrupted inode contents [ 192.245354][ T7300] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #2: comm syz.6.894: mark_inode_dirty error [ 192.296070][ T7300] EXT4-fs error (device loop6): ext4_do_update_inode:5222: inode #2: comm syz.6.894: corrupted inode contents [ 192.850424][ T7300] EXT4-fs error (device loop6): ext4_dirty_inode:6058: inode #2: comm syz.6.894: mark_inode_dirty error [ 193.036221][ T7289] EXT4-fs error (device loop6): ext4_do_update_inode:5222: inode #2: comm syz.6.894: corrupted inode contents [ 193.118040][ T7321] loop3: detected capacity change from 0 to 1024 [ 193.230942][ T7321] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 193.373794][ T7321] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 193.459419][ T7337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.906'. [ 193.559538][ T7348] loop6: detected capacity change from 0 to 512 [ 193.622655][ T7348] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 193.682005][ T7348] EXT4-fs (loop6): 1 truncate cleaned up [ 193.731843][ T7348] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 194.596866][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.613253][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.176513][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz.6.919'. [ 195.471193][ T7391] loop3: detected capacity change from 0 to 128 [ 195.541330][ T7391] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 195.572948][ T7391] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.953033][ T7411] loop6: detected capacity change from 0 to 512 [ 196.134781][ T7411] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 196.443812][ T7411] EXT4-fs (loop6): 1 truncate cleaned up [ 196.593001][ T7411] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 197.554616][ T7439] tipc: Enabling of bearer rejected, failed to enable media [ 198.816681][ T7474] loop6: detected capacity change from 0 to 128 [ 198.911364][ T7474] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 199.127125][ T7482] loop6: detected capacity change from 0 to 512 [ 199.201925][ T7482] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 199.319659][ T7482] EXT4-fs (loop6): 1 truncate cleaned up [ 199.336996][ T7482] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 200.501054][ T7513] loop6: detected capacity change from 0 to 256 [ 200.712296][ T7513] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 202.101814][ T7535] loop3: detected capacity change from 0 to 8 [ 204.233312][ T7587] netlink: 76 bytes leftover after parsing attributes in process `syz.4.971'. [ 204.273470][ T7587] netlink: 28 bytes leftover after parsing attributes in process `syz.4.971'. [ 204.371114][ T7587] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.529829][ T7587] syz.4.971 (7587) used greatest stack depth: 20432 bytes left [ 204.959362][ T7607] xt_TCPMSS: Only works on TCP SYN packets [ 205.725631][ T7606] loop6: detected capacity change from 0 to 8192 [ 206.425006][ T7628] netlink: 168 bytes leftover after parsing attributes in process `syz.6.978'. [ 206.544000][ T7631] loop3: detected capacity change from 0 to 256 [ 207.193784][ T7631] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 313.471604][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 313.478750][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7665/1:b..l [ 313.487148][ C1] (detected by 1, t=10502 jiffies, g=21653, q=180) [ 313.493754][ C1] task:dhcpcd-run-hook state:R running task stack:27216 pid: 7665 ppid: 7609 flags:0x00004002 [ 313.505597][ C1] Call Trace: [ 313.508897][ C1] [ 313.511845][ C1] __schedule+0x11ef/0x43c0 [ 313.516382][ C1] ? kasan_check_range+0x5a/0x290 [ 313.521408][ C1] ? lock_page_memcg+0x1ae/0x440 [ 313.526354][ C1] ? release_firmware_map_entry+0x190/0x190 [ 313.532270][ C1] ? preempt_schedule+0xbc/0xd0 [ 313.537125][ C1] preempt_schedule_common+0x82/0xd0 [ 313.542411][ C1] preempt_schedule+0xbc/0xd0 [ 313.547085][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 313.552718][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 313.557748][ C1] preempt_schedule_thunk+0x16/0x18 [ 313.562953][ C1] _raw_spin_unlock+0x36/0x40 [ 313.567635][ C1] filemap_map_pages+0x1054/0x13b0 [ 313.572756][ C1] ? filemap_read_page+0x4c0/0x4c0 [ 313.577865][ C1] ? count_memcg_event_mm+0x324/0x370 [ 313.583236][ C1] ? verify_lock_unused+0x140/0x140 [ 313.588434][ C1] ? locks_remove_posix+0x340/0x600 [ 313.593642][ C1] handle_mm_fault+0x25bc/0x4410 [ 313.598594][ C1] ? get_page+0xe0/0xe0 [ 313.602762][ C1] ? vmacache_find+0x53c/0x590 [ 313.607521][ C1] ? vmacache_update+0xa0/0x100 [ 313.612371][ C1] ? find_vma+0x1df/0x230 [ 313.616699][ C1] do_user_addr_fault+0x489/0xc80 [ 313.621749][ C1] exc_page_fault+0x60/0x100 [ 313.626378][ C1] asm_exc_page_fault+0x22/0x30 [ 313.631268][ C1] RIP: 0033:0x7f99bfc32ddc [ 313.635686][ C1] RSP: 002b:00007fffa4c76c58 EFLAGS: 00010206 [ 313.641752][ C1] RAX: 0000000000000200 RBX: 000055c22a9b6ee0 RCX: 0000000000000003 [ 313.649737][ C1] RDX: 000000002a9b6ee0 RSI: 00007f99bfc51280 RDI: 000055c22a9b6ee0 [ 313.657707][ C1] RBP: 000055c22a9a1c30 R08: 0000000000000000 R09: 0000000000000000 [ 313.665674][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 313.673639][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: 000055c22a9b6ee0 [ 313.681621][ C1] [ 313.684639][ C1] rcu: rcu_preempt kthread starved for 10370 jiffies! g21653 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 313.695978][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 313.705958][ C1] rcu: RCU grace-period kthread stack dump: [ 313.711852][ C1] task:rcu_preempt state:R running task stack:28016 pid: 15 ppid: 2 flags:0x00004000 [ 313.722642][ C1] Call Trace: [ 313.725928][ C1] [ 313.728868][ C1] __schedule+0x11ef/0x43c0 [ 313.733396][ C1] ? rcu_is_watching+0x11/0xa0 [ 313.738161][ C1] ? release_firmware_map_entry+0x190/0x190 [ 313.744065][ C1] schedule+0x11b/0x1e0 [ 313.748223][ C1] schedule_timeout+0x184/0x2d0 [ 313.753087][ C1] ? console_conditional_schedule+0x40/0x40 [ 313.758997][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 313.764892][ C1] ? update_process_times+0x200/0x200 [ 313.770269][ C1] ? prepare_to_swait_event+0x331/0x350 [ 313.775825][ C1] rcu_gp_fqs_loop+0x2be/0x11d0 [ 313.780687][ C1] ? dyntick_save_progress_counter+0x230/0x230 [ 313.786853][ C1] ? rcu_gp_init+0x10f0/0x10f0 [ 313.791649][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 313.796936][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 313.802225][ C1] rcu_gp_kthread+0x9b/0x370 [ 313.806815][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 313.812716][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 313.817829][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 313.823727][ C1] ? __kthread_parkme+0x157/0x1b0 [ 313.828754][ C1] kthread+0x436/0x520 [ 313.832839][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 313.837949][ C1] ? kthread_blkcg+0xd0/0xd0 [ 313.842538][ C1] ret_from_fork+0x1f/0x30 [ 313.846977][ C1] [ 313.850018][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 313.856362][ C1] NMI backtrace for cpu 1 [ 313.860692][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 313.867707][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 313.877852][ C1] Call Trace: [ 313.881217][ C1] [ 313.884054][ C1] dump_stack_lvl+0x188/0x250 [ 313.888736][ C1] ? show_regs_print_info+0x20/0x20 [ 313.893936][ C1] ? load_image+0x400/0x400 [ 313.898704][ C1] ? irq_work_queue+0xbf/0x140 [ 313.903470][ C1] nmi_cpu_backtrace+0x3a2/0x3d0 [ 313.908439][ C1] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 313.914675][ C1] ? _printk+0xda/0x130 [ 313.918827][ C1] ? cpu_online+0x1d/0x30 [ 313.923156][ C1] ? load_image+0x400/0x400 [ 313.927658][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 313.933724][ C1] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 313.939704][ C1] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 313.945861][ C1] print_other_cpu_stall+0x1110/0x1270 [ 313.951327][ C1] ? print_cpu_stall+0x5f0/0x5f0 [ 313.956262][ C1] ? timekeeping_advance+0x7f6/0xac0 [ 313.961557][ C1] rcu_sched_clock_irq+0x843/0x1120 [ 313.966764][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 313.971614][ C1] ? account_process_tick+0x22a/0x3a0 [ 313.976983][ C1] update_process_times+0x193/0x200 [ 313.982183][ C1] tick_sched_timer+0x37d/0x560 [ 313.987032][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 313.992578][ C1] __hrtimer_run_queues+0x4ad/0xb70 [ 313.997788][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 314.002895][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 314.009050][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 314.014013][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 314.019994][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 314.025628][ C1] [ 314.028556][ C1] [ 314.031485][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 314.037472][ C1] RIP: 0010:default_idle+0xb/0x10 [ 314.042517][ C1] Code: b7 48 89 df e8 f6 ea f8 f7 eb ad e8 8f af f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d b7 96 60 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 314.062143][ C1] RSP: 0018:ffffc90000d67d48 EFLAGS: 000002c2 [ 314.068220][ C1] RAX: 5607aee32853f100 RBX: ffff888016e98000 RCX: 5607aee32853f100 [ 314.076190][ C1] RDX: 0000000000000001 RSI: ffffffff8a2b2780 RDI: ffffffff8a79f780 [ 314.084159][ C1] RBP: ffffc90000d67e80 R08: ffff8880b913b30b R09: 1ffff11017227661 [ 314.092130][ C1] R10: dffffc0000000000 R11: ffffed1017227662 R12: 1ffff11002dd3000 [ 314.100191][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: 1ffff920001acfb4 [ 314.108179][ C1] default_idle_call+0x81/0xc0 [ 314.112950][ C1] do_idle+0x21f/0x580 [ 314.117027][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 314.122224][ C1] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 314.127857][ C1] ? schedule_idle+0x57/0x90 [ 314.132468][ C1] cpu_startup_entry+0x14/0x20 [ 314.137229][ C1] start_secondary+0x330/0x430 [ 314.142003][ C1] ? arch_scale_freq_tick+0x120/0x120 [ 314.147379][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 314.153295][ C1]