last executing test programs: 4m40.895032879s ago: executing program 1 (id=417): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) write$binfmt_elf64(r0, &(0x7f0000000e80)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x4, 0x7, 0x6, 0x10001, 0x3, 0x3e, 0xce, 0x86, 0x40, 0x1cb, 0x4, 0xe, 0x38, 0x1, 0x0, 0x7, 0x4}, [{0x3, 0x6d1b, 0x5ef39a30, 0x3, 0x5, 0x1, 0x3, 0x67688000000000}], "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x878) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4m39.575887294s ago: executing program 1 (id=420): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="696f636861727365743d63703835302c706172743d3078303030303030303030303030303030332c636f6465706167653d69736f383835392d332c6469725f756d61736b3d30303030303030303030303030303030303030303030352c706172743d3078303030303030303030303030303038322c00724acebf9930ce7d6654ef852160bc6dcb17f5e27c7d187e041f030061162b687a6ebac3f35b1c179e467710c0c8"], 0x1, 0x308, &(0x7f0000002640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4c}, 0x8) 4m38.453327605s ago: executing program 1 (id=423): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff77}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xa3}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 4m37.172067539s ago: executing program 1 (id=427): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r1 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000001080)={0x5, 0xd, 0x2, 0x5, 0x5, 0x8, "96f865ac131bf78cd2fb00", 0x8, 0x3, 0x8, 0xfd, 0x9, 0x0, 0x6}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="cf00000000400000000001c0"]) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0) 4m36.056773171s ago: executing program 1 (id=429): r0 = syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x3200400, &(0x7f0000000c00)=ANY=[], 0x1, 0xa76, &(0x7f00000000c0)="$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") r1 = open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x6) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x800, &(0x7f00000001c0)={[{@allow_utime={'allow_utime', 0x3d, 0x80000001}}, {@umask={'umask', 0x3d, 0x2}}, {@namecase}, {@discard}, {@fmask={'fmask', 0x3d, 0xab}}, {@discard}, {@namecase}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@errors_remount}]}, 0x1, 0x1536, &(0x7f0000001980)="$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") r2 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_buf(r2, 0x29, 0xca, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) syz_open_dev$loop(&(0x7f0000000b40), 0xf1, 0x40) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x400, 0x0, 0x2, 0x17, 0x10, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) renameat2(r1, &(0x7f0000000b80)='./file1\x00', r0, &(0x7f0000000bc0)='./bus\x00', 0x4) setns(r7, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r5, 0xffffffffffffffff, 0x0) 4m28.72429676s ago: executing program 1 (id=443): gettid() ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) mkdirat(0xffffffffffffff9c, 0x0, 0x100) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xf8f, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x23}) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpid() bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/63, 0x3f}, 0x7}], 0x4000135, 0x2, 0x0) write(r0, &(0x7f00000000c0)="510003000000", 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) socket$inet_udp(0x2, 0x2, 0x0) close(0x3) 4m13.621390096s ago: executing program 32 (id=443): gettid() ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) mkdirat(0xffffffffffffff9c, 0x0, 0x100) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xf8f, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x23}) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpid() bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/63, 0x3f}, 0x7}], 0x4000135, 0x2, 0x0) write(r0, &(0x7f00000000c0)="510003000000", 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) socket$inet_udp(0x2, 0x2, 0x0) close(0x3) 15.029880966s ago: executing program 4 (id=1141): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0xa}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000001140)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r3, 0x84, 0x3, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r5, 0x114, 0x1d, 0x0, 0x0) r6 = io_uring_setup(0xf08, 0x0) r7 = socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) io_setup(0x6, &(0x7f0000004680)=0x0) io_submit(r8, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) io_uring_register$IORING_UNREGISTER_NAPI(r6, 0x1c, &(0x7f0000000040), 0x1) 13.968834876s ago: executing program 5 (id=1145): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x10002}}, {@dioread_lock}, {@data_err_ignore}, {@mb_optimize_scan}, {@dioread_nolock}, {@nobarrier}, {@abort}, {@user_xattr}, {@norecovery}, {@errors_remount}]}, 0x1, 0x570, &(0x7f00000019c0)="$eJzs3c1rHOUfAPDvbF76+vs1hVJURAI9WNFumsSXCh7qUbRY0HtdkjGUbLoluylNLLQ92IsXKYKIBfHgTe8ei/+Af0VBi0VK0IOXyGxm022zm2zTbXbrfj4w4XlmZvM835l5nn1mn1k2gIE1nv0pRDwfEV8mEYciIsm3DUe+cXx9v9X7V2ayJYm1tY/+TOr7ZfnG/2q87kCeeS4ifvk84tXC5nKryyvzpXI5XczzE7WFixPV5ZUT5xdKc+lcemFqevrUG9NTb7/1ZtdifeXs3998ePu9U18cW/36p7uHbyZxOg7m25rjeALXmjPjMZ4fk5E4/ciOk10orJ8kva4AOzKUt/ORyPqAQzGUt3rgv+9qRKwBAyrR/mFANcYBjXv7Lt0HPzPuvbt+A7Q5/uH1z0Zib/3eaP9q8tCdUXa/O9aF8rMyfv791s1sie59DgGwrWvXI+Lk8PDm/i/J+7+dO9nBPo+Wof+D3XM7G/+81mr8U9gY/0SL8c+BFm13J7Zv/4W7XSimrWz8907L8e/GpNXYUJ77X33MN5J8er6cZn3b/yPieIzsyfJbzeecWr2z1m5b8/gvW7LyG2PBvB53h/c8/JrZUq30JDE3u3c94oWW499k4/wnLc5/djzOdljG0fTWS+22bR//07X2fcTLLc//gxmtZOv5yYn69TDRuCo2++vG0V/blb85/tHYzfiz879/6/jHkub52urjl/Hd3n/Sdtseij86v/5Hk4/r6dF83eVSrbY4GTGafLB5/dSD1zbyjf2z+I8f27r/a3X974uITzqM/8aRH1/sKP4eXP9Z/LOPdf4fP3Hn/c++bVd+Z/3f6/XU8XxNJ/1fpxV8kmMHAAAAAAAA/aYQEQcjKRQ30oVCsbj+fMeR2F8oj60//xGzUf+u7FiMFBoz3YeanoeYzJ+HbeSnHslPR8ThiPhqaF89X5yplGd7HTwAAAAAAAAAAAAAAAAAAAD0iQNtvv+f+W2o17UDnjo/+Q2Da9v2341fegL6kvd/GFzaPwwu7R8Gl/YPg6up/e/pZT2A3ef9HwaX9g+DS/sHAAAAAAAAAAAAAAAAAAAAAAAAAACArjp75ky2rK3evzKT5WcvLS/NVy6dmE2r88WFpZniTGXxYnGuUpkrp8WZysJ2/69cqVycnIqlyxO1tFqbqC6vnFuoLF2onTu/UJpLz6UjuxIVAAAAAAAAAAAAAAAAAAAAPFuqyyvzpXI5XZSQ2FFiuD+qsZ7ILummNVd7XZ+tEn/80BfVaJfodc8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/8GwAA//9ITzKe") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x200000, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='Q', 0x1, 0x200980) listxattr(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) 12.546088813s ago: executing program 5 (id=1148): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000000c0)={r5, 0xa}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={r5, 0x20, &(0x7f0000001140)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r3, 0x84, 0x3, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r6, 0x114, 0x1d, 0x0, 0x0) r7 = io_uring_setup(0xf08, 0x0) r8 = socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) io_setup(0x6, &(0x7f0000004680)=0x0) io_submit(r9, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) io_uring_register$IORING_UNREGISTER_NAPI(r7, 0x1c, &(0x7f0000000040), 0x1) 8.738194475s ago: executing program 4 (id=1162): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file2\x00', 0x4800, &(0x7f0000000100)=ANY=[], 0x1, 0x6bb, &(0x7f00000018c0)="$eJzs3c1vXFfdB/DvHY8dT9ombpq0eR5VqtVIgIhI7FgpmA0BIWSkCqGyYG0lTmNlkhbHRW6FqMPrtov+Ad1kg1ghsWITqbBgA7vukJeVkNh0g1kNujN3XjJ+m+bF45TPJ7pzzj3nnnN/93fvnbfImgD/s5bOp34/RZbOv75Rrm/dW2hu3Vu41a0nOZZkM6knqSUp/t1qtT5OriRFb5piqNzhw9XFNz75bOvTzlq9Wtrb1/YbN6TabnOoebPbNptkoiofwQPzXX3k+Ype5FeSnKtKGLvJJK3WZFo9P/nrs72esvNkp2zsNnr68AIFnpii87pZvhjXBttnkuPVjV6+D+i+8tbGEuQIjo243fA7CAAAAHjajPIZ+OR2trNRnDiEcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOALYbP/+/9FtdS69dkU3d//n6raUtWPllc+3+b3n1QcAAAAAAAAAHCIXtnOdjZyorveKtr/5/9qe+V0+/GZvJM7WclaLmQjy1nPetYyn2RmYKKpjeX19bX5EUZe2nXkpQMCPVaVjcdz3AAAAAAAAADwBfOLLPX//x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI6CIpnoFCnuDjTPpFZPMp1kqmzYTP7erT/N7o87AAAAADgEJ7eznY2c6K63ipxO8mL7O4DpvJPbWc9q1tPMSq61vxfofOqvbd1baG7dW7hVLjvn/fa/HlidPiCM9ozpfPew+57Ptrdo5HpW2y0XcjVvpZlrqbVHls5W8XRnHYrrbhlT8a3KiAm6VpXlkX9QlTu8P+Jk+xv+MqWx/xcsM+2MTPYyMlfFVmbj+e6Z2f0MDZ2dgwzvaT61XmCnh/Y0FPBD5fx4VZbH85u9cj4Ww5m4NHD1vbh/zpMv//H3P56r6kfnkEYzUZWt9mNjZyYWBjLx0iiZuNG8ffPG9Tvnn7ZM7DDXzsSZ3vpSvpcf5Xxm88OsZTU/zXLWs5LZfLddW65OfjFwe++RqSudYnK33S71E9fN+1R1hU5UrZ8nplfbY09kNT/IW7mWlbzW/ncp8/l6LudyFgfO8Jn9z3D7rq89cNf3XwFaz+2axnNfqSrl095vq3JXe3Y8KWVenx/I6+Bz7ky7b7Cln6VTB2epTMsDz41/2j+U+v9XlXIfvxw49+M3nIn5gUy8sF8muhfynebtm2s3lt8ebXenPhgY/usj9ZRaXi+nypOV7gnqXx1l3wvdvqF8lX2ne321HX1nen2dO3Vzzzt1qnoPt3OmS+2+l3btW2j3nR3o2+391sHv5gAYs+NfPT7V+Gfjb42PGr9q3Gi8Pv2dY9849vJUJv88+c363MSXai8Xf8hH+Xn/8z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDw7rz73s3lZnNlbajSarXe36Or2TqZ7NH1cJXanmGUlfoBoe6oZPYfz5QDui2t9Lq6P2f2GIM/qPJ/zyajj6p+gSedlvrjzfMYK/9ptVpVS7HHNr/7y85EPTdS6qZGvzYOqExXV3jlSKSuqtQPeadjekICDs3F9VtvX7zz7ntfW721/ObKmyu3Fy9fXpxbvPzawsXrq82Vuc7juKMEnoT+i/64IwEAAAAAAAAAAABGNdrfA+SR/pxg3McIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPN2Wzqd+P0Xm5y7Mletb9xaa5dKt97esJ6klKX6WFB8nV9JZMjMwXbHXfj5cXXzjk8+2Pu3PVS75/tUDxo1ms1oym2SiU959XPNdrcp9FfsdQtE7wjJh57qJg3H7bwAAAP//EOj9JQ==") r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) listen(r3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) poll(&(0x7f0000000280)=[{0xffffffffffffffff, 0x480}], 0x1, 0xfffff801) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="021800001c00000002000000fedbdf25050006006c8000000a000000000000000000000000000000000000000000000000000000000000000800120000000000feffff7f0000000006000000000000000000000000000000e0000002000000000000000000000000e000000200000000000000000000000005000500002000000a00000000000000fe8000000000000000000000000000bb000000040000000008001900000000000a004e2200000030200100000000000000000000000000010f0b00000a"], 0xe0}}, 0x0) shutdown(0xffffffffffffffff, 0x2) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) syz_io_uring_setup(0x795c, &(0x7f0000000000)={0x0, 0x5c49, 0x0, 0x1, 0x352}, 0x0, 0x0) syz_usb_connect(0x5, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001accd5910a9054a264ce50102030109023e0001030f400809049bbc000e01000d0a0d020101020401727f05240600000509000500030b24130b21c4"], 0x0) 8.608115537s ago: executing program 0 (id=1164): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'wlan0\x00'}) 8.371791151s ago: executing program 0 (id=1165): r0 = epoll_create1(0x80000) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)={0x90000009}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002042, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) futex(&(0x7f0000000040)=0x2, 0xb, 0x2, 0x0, &(0x7f0000000100)=0x1, 0x2) futex(&(0x7f0000000140)=0x1, 0x6, 0x6, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x2) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) futex(&(0x7f0000000040)=0x1, 0x1, 0x0, 0x0, 0x0, 0x1) timer_create(0x2, &(0x7f0000000800)={0x0, 0x21}, &(0x7f0000000000)) io_setup(0x1, 0x0) 5.375692978s ago: executing program 2 (id=1167): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @empty}, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0xfffffffffffffffd, 0x2, 0x4}) syz_usb_connect$uac1(0x3, 0xa2, 0x0, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x10001, 0x240000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x0, 0x0}) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) connect$rds(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x1, [], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x4e23, 0x1, @empty, 0x3}, 0x1c) socket$inet_icmp(0x2, 0x2, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='net/icmp6\x00') ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.328223699s ago: executing program 4 (id=1168): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x32, 0x0, &(0x7f0000000100)="f5b9547ed387d7e9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 5.23926132s ago: executing program 4 (id=1169): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="696f636861727365743d63703835302c706172743d3078303030303030303030303030303030332c636f6465706167653d69736f383835392d332c6469725f756d61736b3d30303030303030303030303030303030303030303030352c706172743d3078303030303030303030303030303038322c00724acebf9930ce7d6654ef852160bc6dcb17f5e27c7d187e041f030061162b687a6ebac3f35b1c179e467710c0c8"], 0x1, 0x308, &(0x7f0000002640)="$eJzs3b9u00AcB/DvnZ02pVUxbRESC6hQAUtFgQGxBKGs7EwIaFKpqlVEWyTahVAxIh6AnVfgIVhAjCzAwsQDdDO6n8+OHV+cViRxW74fKZFzvj+/w//uLNEDEf23HjR/fLz923wU4MEDcA/QAOqAD+A8LtRfbu6s74TtVllFnpQwH4W4pCrkWd1su4qaclIimkySfPiYkTQaqSiK7v+sOgiqnFz9DhqYtNeh7K+POa5h6e1cB7hUUSiVyf4bqAMc4BVmKwyHiIiOAfv81/YxMSNJCloDS/axf6Kf/70Oqg5guO6EhaSotEDm+S+ju0iZ43tWdnXnezKFM/t1Mks8TDC1nt8TiM+s3BhMuWeVv6KYjUVPra37WF59g5bGPhpWpsCCfLfiUzcxINpFx9y0RP/aanh4Ju6NGVFO9e5OQlpbD9sytXXEP3+0Fv+d+qy+qscqwAe00vGfHylzmORIBT1HStdM/Df71zgtpUwu2Gl/o9HQuSznpJGLtgVrQC/r7hlJts7kBUEnjcAR536yIW3PIf9aIe7diqsB1a183lUqSH8Vy0pbC7lSnj0Tllefh6WvUkYj6aJ6rx6pRfzBJzQz439t4ltC5sosu9UryWnPjLg/E+6cvuQMCk+OTrp1OY3Amjxy3wg44tuyd3iGu5jd3t3b8MKwvWU2njo2XsxsKZtSews484x+w0NJHnS6KfLweB1Fh605GmXwN4Zaobl/pCnm8nFlNldZmqLHfZhO2UYySijsan5B2Qk50o0kqKFUaAZau3sb368Vdw39/kTH0LZKDrpNKAxi6ZQz4y4Vz/9kJG9HdXKfMV9ByTi9fJKJXI0r6QwuPxScc41dBswNpvvP4Loterf6zBllznXlOnA1k6hQ2mIgcZ4aqolveML3/0REREREREREREREREREREREREREJ804/sdC2lhQaVeJiIiIiIiIiIiIiIiIiIiIiIiIiIiIiE6sw6//O9Vdqcn1N+Jl/d9g4Pq/uQWA7UJR6fq/VsD1f4nG4m8AAAD//8fte5U=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4c}, 0x8) 5.198183441s ago: executing program 0 (id=1170): syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000040)='./file1\x00', 0x4400, &(0x7f0000000080)=ANY=[@ANYBLOB='shortad,rootdir=00000000000000000002,noadinicb\x00\x00\x00\x00=', @ANYRES64, @ANYRESDEC], 0x1, 0xa23, &(0x7f0000001b00)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000001a80)=""/4096, 0x1000) 4.920165746s ago: executing program 4 (id=1171): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000400)={0x10000000}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000740)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @val={@void, {0x8100, 0x4, 0x1, 0x4}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={0xac, 0x14, 0x14, 0x26}, @broadcast, @private=0xa010102}}}}, &(0x7f00000007c0)={0x0, 0x1, [0x79, 0x62e, 0x458, 0x4e7]}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) read$FUSE(r6, &(0x7f00000020c0)={0x2020}, 0x2020) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000140)='asymmetric\x00', 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000840)={0x8c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "aa352dfa47"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e6b8562908"}]]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000040}, 0xc041) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.801363308s ago: executing program 4 (id=1172): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0xa}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000001140)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r3, 0x84, 0x3, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r5, 0x114, 0x1d, 0x0, 0x0) r6 = io_uring_setup(0xf08, 0x0) r7 = socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) io_setup(0x6, &(0x7f0000004680)=0x0) io_submit(r8, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) io_uring_register$IORING_UNREGISTER_NAPI(r6, 0x1c, &(0x7f0000000040), 0x1) 3.68024215s ago: executing program 0 (id=1173): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x22000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x14484, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRES64=0x0, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC=0x0, @ANYRES64=r0, @ANYRESDEC=r0], 0x0, 0x2ff, &(0x7f0000000540)="$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") r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000000000040"]) 3.577663502s ago: executing program 5 (id=1174): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file2\x00', 0x4800, &(0x7f0000000100)=ANY=[], 0x1, 0x6bb, &(0x7f00000018c0)="$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") openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) listen(r2, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) poll(&(0x7f0000000280)=[{r3, 0x480}], 0x1, 0xfffff801) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="021800001c00000002000000fedbdf25050006006c8000000a000000000000000000000000000000000000000000000000000000000000000800120000000000feffff7f0000000006000000000000000000000000000000e0000002000000000000000000000000e000000200000000000000000000000005000500002000000a00000000000000fe8000000000000000000000000000bb000000040000000008001900000000000a004e2200000030200100000000000000000000000000010f0b00000a"], 0xe0}}, 0x0) shutdown(r3, 0x2) 3.550680713s ago: executing program 2 (id=1175): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000a40), 0x1, 0x775, &(0x7f0000000280)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000200)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.331825497s ago: executing program 0 (id=1176): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x58}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3.017400642s ago: executing program 5 (id=1177): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$kcm(0x29, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000000)=""/151, 0x97}], 0x1, 0xd, 0x0) 2.961592094s ago: executing program 0 (id=1178): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file2\x00', 0x4800, &(0x7f0000000100)=ANY=[], 0x1, 0x6bb, &(0x7f00000018c0)="$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") r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) listen(r3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) poll(&(0x7f0000000280)=[{0xffffffffffffffff, 0x480}], 0x1, 0xfffff801) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="021800001c00000002000000fedbdf25050006006c8000000a000000000000000000000000000000000000000000000000000000000000000800120000000000feffff7f0000000006000000000000000000000000000000e0000002000000000000000000000000e000000200000000000000000000000005000500002000000a00000000000000fe8000000000000000000000000000bb000000040000000008001900000000000a004e2200000030200100000000000000000000000000010f0b00000a"], 0xe0}}, 0x0) shutdown(0xffffffffffffffff, 0x2) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) syz_io_uring_setup(0x795c, &(0x7f0000000000)={0x0, 0x5c49, 0x0, 0x1, 0x352}, 0x0, 0x0) syz_usb_connect(0x5, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001accd5910a9054a264ce50102030109023e0001030f400809049bbc000e01000d0a0d020101020401727f05240600000509000500030b24130b21c4"], 0x0) 2.911531344s ago: executing program 2 (id=1179): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000140)=ANY=[], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x32, 0x0, &(0x7f0000000100)="f5b9547ed387d7e9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.628262609s ago: executing program 5 (id=1181): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="696f636861727365743d63703835302c706172743d3078303030303030303030303030303030332c636f6465706167653d69736f383835392d332c6469725f756d61736b3d30303030303030303030303030303030303030303030352c706172743d3078303030303030303030303030303038322c00724acebf9930ce7d6654ef852160bc6dcb17f5e27c7d187e041f030061162b687a6ebac3f35b1c179e467710c0c8"], 0x1, 0x308, &(0x7f0000002640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4c}, 0x8) 1.493259571s ago: executing program 2 (id=1182): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) 1.070582149s ago: executing program 5 (id=1184): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000000c0)={r5, 0xa}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={r5, 0x20, &(0x7f0000001140)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r3, 0x84, 0x3, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r6, 0x114, 0x1d, 0x0, 0x0) r7 = io_uring_setup(0xf08, 0x0) r8 = socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) io_setup(0x6, &(0x7f0000004680)=0x0) io_submit(r9, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) io_uring_register$IORING_UNREGISTER_NAPI(r7, 0x1c, &(0x7f0000000040), 0x1) 963.872391ms ago: executing program 2 (id=1185): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @empty}, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0xfffffffffffffffd, 0x2, 0x4}) syz_usb_connect$uac1(0x3, 0xa2, 0x0, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x10001, 0x240000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x0, 0x0}) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) connect$rds(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x1, [], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x4e23, 0x1, @empty, 0x3}, 0x1c) socket$inet_icmp(0x2, 0x2, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='net/icmp6\x00') ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 963.769281ms ago: executing program 3 (id=1186): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt(r0, 0x1, 0x1, &(0x7f0000000300)=""/121, &(0x7f0000000180)=0x79) 817.636984ms ago: executing program 3 (id=1187): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file2\x00', 0x4800, &(0x7f0000000100)=ANY=[], 0x1, 0x6bb, &(0x7f00000018c0)="$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") openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) listen(r2, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) poll(&(0x7f0000000280)=[{r3, 0x480}], 0x1, 0xfffff801) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="021800001c00000002000000fedbdf25050006006c8000000a000000000000000000000000000000000000000000000000000000000000000800120000000000feffff7f0000000006000000000000000000000000000000e0000002000000000000000000000000e000000200000000000000000000000005000500002000000a00000000000000fe8000000000000000000000000000bb000000040000000008001900000000000a004e2200000030200100000000000000000000000000010f0b00000a"], 0xe0}}, 0x0) shutdown(r3, 0x2) 455.350711ms ago: executing program 3 (id=1188): r0 = fsopen(&(0x7f0000000240)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000100)='./bus\x00', 0x4000423) r3 = open(&(0x7f0000000000)='./bus\x00', 0x40000, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 252.077625ms ago: executing program 3 (id=1189): r0 = syz_io_uring_setup(0x2b65, &(0x7f0000002f40)={0x0, 0x5c8b, 0x1000, 0x1, 0x2c7}, &(0x7f0000002fc0), &(0x7f0000003000)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000003400)={0x0, 0x9b144e97bc8ff4f8, 0x0, 0x0, 0x0}, 0x20) 226.480065ms ago: executing program 3 (id=1190): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000152,iocharset=iso8859-1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x1, 0x14fe, &(0x7f0000002a80)="$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") r0 = open(&(0x7f0000000180)='./file1\x00', 0x64842, 0x8) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) 103.456077ms ago: executing program 2 (id=1191): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x5480, &(0x7f0000000340)={0x0, 0xc7a1, 0x8, 0x2}, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) 0s ago: executing program 3 (id=1192): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x1, 0x200) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000180)=0xce5) kernel console output (not intermixed with test programs): 1) entered forwarding state [ 80.607303][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.649479][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.671502][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.705475][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.725075][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.732343][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.768884][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.780038][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.796223][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.813211][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.825849][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.837871][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.849990][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.860815][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.890770][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.903259][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.913907][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.931891][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.959895][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.973817][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.992047][ T4274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.003755][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.017722][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.033741][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.043839][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.057353][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.067408][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.077065][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.086465][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.097451][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.106741][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.122611][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.188076][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.199301][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.208351][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.218286][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.228059][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.237378][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.247575][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.258787][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.275342][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.306642][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.314436][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.322191][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.335065][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.343664][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.353009][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.362059][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.400150][ T4267] device veth0_vlan entered promiscuous mode [ 81.432920][ T4273] device veth0_vlan entered promiscuous mode [ 81.450498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.465715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.485993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.505495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.524102][ T4267] device veth1_vlan entered promiscuous mode [ 81.552289][ T4273] device veth1_vlan entered promiscuous mode [ 81.567752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.577143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.586985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.598368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.650936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.670430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.695160][ T4275] device veth0_vlan entered promiscuous mode [ 81.729876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.744724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.752866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.769548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.781005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.808332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.827401][ T4275] device veth1_vlan entered promiscuous mode [ 81.841869][ T4273] device veth0_macvtap entered promiscuous mode [ 81.852656][ T4267] device veth0_macvtap entered promiscuous mode [ 81.877885][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.889060][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.898106][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.907909][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.916322][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.923833][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.937028][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.947616][ T4267] device veth1_macvtap entered promiscuous mode [ 81.958478][ T4273] device veth1_macvtap entered promiscuous mode [ 81.979550][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.989016][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.997674][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.007204][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.028255][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.049092][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.058466][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.068442][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.077382][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.088339][ T4275] device veth0_macvtap entered promiscuous mode [ 82.113626][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.123484][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.133630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.151809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.163406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.179082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.188056][ T4282] Bluetooth: hci4: command 0x040f tx timeout [ 82.201395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.225659][ T4275] device veth1_macvtap entered promiscuous mode [ 82.246009][ T4267] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.255407][ T4267] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.265737][ T4282] Bluetooth: hci1: command 0x040f tx timeout [ 82.280808][ T4271] Bluetooth: hci2: command 0x040f tx timeout [ 82.284612][ T4286] Bluetooth: hci3: command 0x040f tx timeout [ 82.286940][ T4285] Bluetooth: hci0: command 0x040f tx timeout [ 82.305100][ T4267] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.314030][ T4267] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.333446][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.345930][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.358052][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.385049][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.395437][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.405574][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.444952][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.459273][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.478994][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.519140][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.542939][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.556347][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.567021][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.578777][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.588061][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.599439][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.609961][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.619554][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.628500][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.637969][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.647174][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.655741][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.668204][ T4273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.677386][ T4273] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.686245][ T4273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.695281][ T4273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.718384][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.745202][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.762343][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.774261][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.786741][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.800655][ T4274] device veth0_vlan entered promiscuous mode [ 82.836861][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.858335][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.876055][ T4275] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.890511][ T4275] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.900628][ T4275] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.912269][ T4275] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.958354][ T4274] device veth1_vlan entered promiscuous mode [ 82.985196][ T4357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.993562][ T4357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.055606][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.098065][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.108165][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.124530][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.133439][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.176116][ T4274] device veth0_macvtap entered promiscuous mode [ 83.194397][ T4357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.202695][ T4357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.226213][ T4274] device veth1_macvtap entered promiscuous mode [ 83.245927][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.247669][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.261679][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.268021][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.277833][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.287756][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.296840][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.306385][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.316952][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.325536][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.337730][ T4340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.351189][ T4266] device veth0_vlan entered promiscuous mode [ 83.354326][ T4340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.403880][ T4266] device veth1_vlan entered promiscuous mode [ 83.418816][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.430546][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.443325][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.455620][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.466607][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.477809][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.488473][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.499990][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.512497][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.548326][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.559707][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.569336][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.617913][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.629224][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.640335][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.652142][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.653623][ T4381] loop2: detected capacity change from 0 to 1024 [ 83.662134][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.662182][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.664203][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.678921][ T4381] ======================================================= [ 83.678921][ T4381] WARNING: The mand mount option has been deprecated and [ 83.678921][ T4381] and is ignored by this kernel. Remove the mand [ 83.678921][ T4381] option from the mount to silence this warning. [ 83.678921][ T4381] ======================================================= [ 83.740063][ T4381] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 561850441793539)! [ 83.759522][ T4381] EXT4-fs (loop2): group descriptors corrupted! [ 83.760381][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.775678][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.787835][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.796909][ T4340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.797275][ T4274] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.822326][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.823990][ T4274] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.830372][ T4340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.845502][ T4274] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.861697][ T4274] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.888770][ T4266] device veth0_macvtap entered promiscuous mode [ 83.902597][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.912991][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.923249][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.933022][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.978346][ T4266] device veth1_macvtap entered promiscuous mode [ 83.996679][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.009104][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.152716][ T4354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.163336][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.192315][ T4382] loop2: detected capacity change from 0 to 4096 [ 84.199981][ T4354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.216116][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.228741][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.242819][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.254111][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.264580][ T4285] Bluetooth: hci4: command 0x0419 tx timeout [ 84.271550][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.271574][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.271591][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.276535][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.384303][ T4285] Bluetooth: hci0: command 0x0419 tx timeout [ 84.390410][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 84.397978][ T4285] Bluetooth: hci2: command 0x0419 tx timeout [ 84.404135][ T4285] Bluetooth: hci3: command 0x0419 tx timeout [ 84.543647][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.554922][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.564929][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.577625][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.588333][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.604109][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.658720][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.670531][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.691752][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.737117][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.766024][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.785800][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.789435][ T4397] loop3: detected capacity change from 0 to 128 [ 85.801160][ T4399] loop0: detected capacity change from 0 to 512 [ 85.809450][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.823398][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.874908][ T4266] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.897990][ T4266] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.911421][ T4397] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 85.922245][ T4397] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.933528][ T4266] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.937280][ T4399] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 85.951172][ T4266] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.089998][ T4399] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.285752][ T4357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.302970][ T4357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.323364][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.421745][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.906605][ T14] cfg80211: failed to load regulatory.db [ 86.923570][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.943084][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.969678][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.986580][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.988490][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 87.127860][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.150306][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 87.295134][ T4416] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.564341][ T4312] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.671432][ T4430] loop4: detected capacity change from 0 to 512 [ 88.730509][ T4430] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 88.759624][ T4312] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 88.779499][ T4312] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.790292][ T4430] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 88.820597][ T4312] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 88.843298][ T4430] EXT4-fs (loop4): 1 truncate cleaned up [ 88.850605][ T4312] usb 1-1: config 1 has no interface number 1 [ 88.867598][ T4430] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 88.924491][ T4312] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 88.933020][ T4424] loop1: detected capacity change from 0 to 32768 [ 88.965122][ T4430] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #12: comm syz.4.13: corrupted in-inode xattr [ 89.042041][ T4312] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 89.085276][ T4312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.121497][ T4312] usb 1-1: Product: syz [ 89.140739][ T4312] usb 1-1: Manufacturer: syz [ 89.148217][ T4312] usb 1-1: SerialNumber: syz [ 89.249263][ T4266] EXT4-fs (loop4): unmounting filesystem. [ 89.249362][ T4415] loop3: detected capacity change from 0 to 40427 [ 89.354202][ T4415] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 89.362356][ T4415] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 89.435244][ T4415] F2FS-fs (loop3): invalid crc value [ 90.574503][ T4415] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4) [ 90.655538][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 90.664985][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 90.673369][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 90.681924][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 90.690327][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 90.692951][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 90.970793][ T4429] loop2: detected capacity change from 0 to 32768 [ 91.180547][ T4451] loop0: detected capacity change from 0 to 128 [ 91.187254][ T14] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.222115][ T4312] usb 1-1: USB disconnect, device number 2 [ 91.244556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.308194][ T4429] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 91.329546][ T4448] loop3: detected capacity change from 0 to 1024 [ 91.342566][ T4451] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 91.361355][ T4448] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 561850441793539)! [ 91.408024][ T14] usb 2-1: config index 0 descriptor too short (expected 8192, got 77) [ 91.414903][ T4451] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.429000][ T4444] udevd[4444]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 91.444995][ T4448] EXT4-fs (loop3): group descriptors corrupted! [ 91.449902][ T14] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.504006][ T14] usb 2-1: config 0 has no interfaces? [ 91.562953][ T14] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 91.599099][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 91.604250][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.672020][ T14] usb 2-1: Product: syz [ 91.697923][ T14] usb 2-1: Manufacturer: syz [ 91.722964][ T14] usb 2-1: SerialNumber: syz [ 91.734510][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.761178][ T14] usb 2-1: config 0 descriptor?? [ 91.889152][ T4267] ocfs2: Unmounting device (7,2) on (node local) [ 91.933476][ T4457] loop3: detected capacity change from 0 to 4096 [ 91.988843][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 92.214223][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 93.419695][ T4440] netlink: 'syz.1.14': attribute type 1 has an invalid length. [ 93.783557][ T14] usb 2-1: USB disconnect, device number 2 [ 95.488508][ T4491] loop2: detected capacity change from 0 to 4096 [ 95.811463][ T4484] loop3: detected capacity change from 0 to 32768 [ 95.898058][ T4491] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 95.957598][ T4493] netlink: 16 bytes leftover after parsing attributes in process `syz.1.29'. [ 95.978657][ T4482] loop4: detected capacity change from 0 to 32768 [ 96.040697][ T4482] [ 96.040697][ T4482] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 96.040697][ T4482] [ 96.064395][ T4494] netlink: 'syz.1.29': attribute type 10 has an invalid length. [ 96.188896][ T4487] loop0: detected capacity change from 0 to 40427 [ 96.216711][ T4487] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 96.236430][ T4482] [ 96.236430][ T4482] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 96.236430][ T4482] [ 96.361607][ T4487] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 96.750913][ T4482] [ 96.750913][ T4482] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 96.750913][ T4482] [ 96.782884][ T4487] F2FS-fs (loop0): invalid crc value [ 96.800571][ T4494] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 96.811188][ T4482] [ 96.811188][ T4482] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 96.811188][ T4482] [ 96.873352][ T4482] [ 96.873352][ T4482] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 96.873352][ T4482] [ 96.909667][ T4482] [ 96.909667][ T4482] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 96.909667][ T4482] [ 97.018186][ T4267] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 97.039668][ T4487] F2FS-fs (loop0): Found nat_bits in checkpoint [ 97.049476][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 97.810427][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.834259][ T107] [ 97.834259][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 97.834259][ T107] [ 97.962351][ T75] [ 97.962351][ T75] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 97.962351][ T75] [ 97.987801][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.002034][ T75] [ 98.002034][ T75] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 98.002034][ T75] [ 98.054548][ T4266] [ 98.054548][ T4266] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 98.054548][ T4266] [ 98.084323][ T4487] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 98.099468][ T107] [ 98.099468][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 98.099468][ T107] [ 98.143203][ T4487] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 98.170407][ T4266] [ 98.170407][ T4266] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 98.170407][ T4266] [ 98.182731][ T4506] loop3: detected capacity change from 0 to 4096 [ 98.394317][ T4511] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.030409][ T4526] input: syz0 as /devices/virtual/input/input5 [ 101.742189][ T4530] loop0: detected capacity change from 0 to 4096 [ 101.924215][ T4535] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 102.252809][ T4538] capability: warning: `syz.4.39' uses 32-bit capabilities (legacy support in use) [ 102.560513][ T4541] loop0: detected capacity change from 0 to 4096 [ 102.593507][ T4544] loop4: detected capacity change from 0 to 1024 [ 102.837427][ T4548] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.611447][ T4544] hfsplus: bad catalog entry type [ 103.644330][ T128] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.015893][ T4354] hfsplus: b-tree write err: -5, ino 4 [ 104.149360][ T128] usb 2-1: config index 0 descriptor too short (expected 8192, got 77) [ 104.170506][ T128] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.210561][ T128] usb 2-1: config 0 has no interfaces? [ 104.236765][ T128] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 104.263035][ T128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.282896][ T128] usb 2-1: Product: syz [ 104.288836][ T128] usb 2-1: Manufacturer: syz [ 104.293740][ T128] usb 2-1: SerialNumber: syz [ 104.323764][ T128] usb 2-1: config 0 descriptor?? [ 104.656759][ T4547] netlink: 'syz.1.40': attribute type 1 has an invalid length. [ 104.679005][ T128] usb 2-1: USB disconnect, device number 3 [ 106.858601][ T128] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 107.774400][ T128] usb 5-1: Using ep0 maxpacket: 32 [ 107.795307][ T128] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 107.858617][ T128] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.971717][ T128] usb 5-1: Product: syz [ 108.009182][ T128] usb 5-1: Manufacturer: syz [ 108.019517][ T128] usb 5-1: SerialNumber: syz [ 108.062408][ T128] usb 5-1: config 0 descriptor?? [ 108.091056][ T128] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 108.464877][ T4602] loop0: detected capacity change from 0 to 4096 [ 108.525154][ T4608] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.727120][ T128] gspca_ov534_9: reg_w failed -71 [ 109.078391][ T14] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 109.114559][ T128] gspca_ov534_9: Unknown sensor 0000 [ 109.114610][ T128] ov534_9: probe of 5-1:0.0 failed with error -22 [ 109.165192][ T128] usb 5-1: USB disconnect, device number 2 [ 109.300860][ T14] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 109.380314][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.472385][ T14] usb 4-1: Product: syz [ 109.946841][ T14] usb 4-1: Manufacturer: syz [ 109.951532][ T14] usb 4-1: SerialNumber: syz [ 110.098867][ T14] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 110.152311][ T14] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 110.789245][ T26] usb 4-1: USB disconnect, device number 2 [ 110.904809][ T14] usb 4-1: ath9k_htc: Unable to allocate URBs [ 111.027162][ T26] usb 4-1: ath9k_htc: USB layer deinitialized [ 111.617501][ T4626] loop4: detected capacity change from 0 to 4096 [ 112.427103][ T4639] capability: warning: `syz.4.67' uses deprecated v2 capabilities in a way that may be insecure [ 112.439171][ T4639] process 'syz.4.67' launched '/dev/fd/6' with NULL argv: empty string added [ 113.024349][ T128] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 113.896307][ T128] usb 2-1: config index 0 descriptor too short (expected 8192, got 77) [ 113.984148][ T128] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.996392][ T128] usb 2-1: config 0 has no interfaces? [ 114.037660][ T128] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 114.057750][ T128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.067517][ T128] usb 2-1: Product: syz [ 114.071761][ T128] usb 2-1: Manufacturer: syz [ 114.078074][ T4646] netlink: 'syz.2.71': attribute type 12 has an invalid length. [ 114.085943][ T128] usb 2-1: SerialNumber: syz [ 114.122076][ T128] usb 2-1: config 0 descriptor?? [ 114.335499][ T52] block nbd3: Attempted send on invalid socket [ 114.342052][ T52] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 114.353782][ T52] block nbd3: Attempted send on invalid socket [ 114.360086][ T52] I/O error, dev nbd3, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 114.369802][ T4656] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 114.380343][ T52] block nbd3: Attempted send on invalid socket [ 114.386633][ T52] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 114.396043][ T4656] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 114.406952][ T52] block nbd3: Attempted send on invalid socket [ 114.413795][ T52] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 114.423657][ T52] block nbd3: Attempted send on invalid socket [ 114.430752][ T52] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 114.440382][ T4656] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 114.450582][ T52] block nbd3: Attempted send on invalid socket [ 114.457327][ T52] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 114.467126][ T4656] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 114.477424][ T52] block nbd3: Attempted send on invalid socket [ 114.483679][ T52] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 114.493618][ T52] block nbd3: Attempted send on invalid socket [ 114.499899][ T52] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 114.509457][ T4656] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 114.519868][ T52] block nbd3: Attempted send on invalid socket [ 114.526137][ T52] I/O error, dev nbd3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 114.535574][ T4656] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 114.546042][ T52] block nbd3: Attempted send on invalid socket [ 114.552280][ T52] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 114.562469][ T4656] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 114.572628][ T4656] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 114.582403][ T4656] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 116.344994][ T128] usb 2-1: can't set config #0, error -71 [ 116.380082][ T128] usb 2-1: USB disconnect, device number 4 [ 116.431111][ T4671] loop3: detected capacity change from 0 to 4096 [ 116.485673][ T4671] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 116.593869][ T4671] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 116.659818][ T4671] ntfs3: loop3: Failed to load $AttrDef -> 0 [ 118.141471][ T4678] loop1: detected capacity change from 0 to 32768 [ 118.298620][ T4678] XFS (loop1): Mounting V5 Filesystem [ 118.614207][ T4678] XFS (loop1): Ending clean mount [ 118.639718][ T4701] loop3: detected capacity change from 0 to 64 [ 119.003826][ T4274] XFS (loop1): Unmounting Filesystem [ 119.127575][ T4705] loop4: detected capacity change from 0 to 4096 [ 119.217364][ T4709] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.241804][ T4732] autofs4:pid:4732:autofs_fill_super: called with bogus options [ 120.359569][ T4736] netlink: 'syz.4.93': attribute type 12 has an invalid length. [ 120.384749][ T26] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 120.525174][ T4740] netlink: 68 bytes leftover after parsing attributes in process `syz.0.97'. [ 120.594247][ T22] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 120.620505][ T26] usb 3-1: config index 0 descriptor too short (expected 8192, got 77) [ 120.631155][ T26] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.642092][ T26] usb 3-1: config 0 has no interfaces? [ 120.670546][ T26] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 120.680245][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.693577][ T26] usb 3-1: Product: syz [ 120.698162][ T26] usb 3-1: Manufacturer: syz [ 120.704015][ T26] usb 3-1: SerialNumber: syz [ 120.725518][ T26] usb 3-1: config 0 descriptor?? [ 120.784122][ T22] usb 2-1: Using ep0 maxpacket: 32 [ 120.794379][ T22] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 120.813544][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.831341][ T22] usb 2-1: Product: syz [ 120.842251][ T22] usb 2-1: Manufacturer: syz [ 120.853606][ T22] usb 2-1: SerialNumber: syz [ 120.880473][ T22] usb 2-1: config 0 descriptor?? [ 120.903478][ T22] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 120.977274][ T4720] netlink: 'syz.2.89': attribute type 1 has an invalid length. [ 121.099409][ T22] gspca_ov534_9: reg_w failed -71 [ 121.373601][ T4743] loop3: detected capacity change from 0 to 64 [ 121.714164][ T22] gspca_ov534_9: Unknown sensor 0000 [ 121.714233][ T22] ov534_9: probe of 2-1:0.0 failed with error -22 [ 121.791527][ T22] usb 2-1: USB disconnect, device number 5 [ 122.807913][ T14] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 123.060230][ T4757] loop1: detected capacity change from 0 to 256 [ 123.095401][ T4757] exfat: Deprecated parameter 'namecase' [ 123.135706][ T14] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 123.143970][ T14] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 123.154896][ T4757] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 123.231057][ T14] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 123.249076][ T4759] loop3: detected capacity change from 0 to 4096 [ 123.559270][ T14] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 123.787033][ T14] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 124.031526][ T4763] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 124.213690][ T14] usb 1-1: config 0 interface 0 has no altsetting 0 [ 124.235190][ T14] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 124.254127][ T14] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 124.262717][ T14] usb 1-1: Product: syz [ 124.288812][ T14] usb 1-1: Manufacturer: syz [ 124.293496][ T14] usb 1-1: SerialNumber: syz [ 124.366069][ T14] usb 1-1: config 0 descriptor?? [ 124.474682][ T4746] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 124.510323][ T14] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 124.614820][ T14] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 124.643131][ T26] usb 3-1: USB disconnect, device number 2 [ 124.829678][ T4469] usb 1-1: USB disconnect, device number 3 [ 124.871981][ T4469] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 124.948029][ T4780] netlink: 68 bytes leftover after parsing attributes in process `syz.3.110'. [ 125.003185][ T4782] loop0: detected capacity change from 0 to 64 [ 125.069833][ T4444] blk_print_req_error: 3 callbacks suppressed [ 125.069849][ T4444] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 125.779611][ T4271] Bluetooth: Frame is too long (len 12, expected len 4) [ 126.560022][ T27] audit: type=1326 audit(1756911224.886:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4801 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d91d8ebe9 code=0x7ffc0000 [ 126.865838][ T27] audit: type=1326 audit(1756911224.886:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4801 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9d91d8ebe9 code=0x7ffc0000 [ 126.899501][ T4333] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 127.284238][ T27] audit: type=1326 audit(1756911224.886:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4801 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d91d8ebe9 code=0x7ffc0000 [ 127.307362][ T27] audit: type=1326 audit(1756911224.886:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4801 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f9d91d8ebe9 code=0x7ffc0000 [ 127.945339][ T4333] usb 3-1: config index 0 descriptor too short (expected 8192, got 77) [ 127.953760][ T4333] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.995220][ T4333] usb 3-1: config 0 has no interfaces? [ 128.040846][ T27] audit: type=1326 audit(1756911224.886:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4801 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d91d8ebe9 code=0x7ffc0000 [ 128.919010][ T27] audit: type=1326 audit(1756911224.886:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4801 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f9d91d8ebe9 code=0x7ffc0000 [ 128.962962][ T27] audit: type=1326 audit(1756911224.886:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4801 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d91d8ebe9 code=0x7ffc0000 [ 128.993271][ T4834] loop4: detected capacity change from 0 to 512 [ 129.102378][ T27] audit: type=1326 audit(1756911224.886:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4801 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9d91d8ebe9 code=0x7ffc0000 [ 129.125931][ T27] audit: type=1326 audit(1756911224.976:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4801 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d91d8ebe9 code=0x7ffc0000 [ 129.152755][ T4834] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 129.193510][ T4844] loop1: detected capacity change from 0 to 64 [ 129.196400][ T4834] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.347807][ T27] audit: type=1326 audit(1756911224.986:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4801 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d91d8ebe9 code=0x7ffc0000 [ 129.696097][ T4834] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #2: comm syz.4.126: corrupted inode contents [ 129.712384][ T4834] EXT4-fs error (device loop4): ext4_dirty_inode:6119: inode #2: comm syz.4.126: mark_inode_dirty error [ 129.725374][ T4834] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #2: comm syz.4.126: corrupted inode contents [ 129.800410][ T4834] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.126: mark_inode_dirty error [ 130.237188][ T4852] loop3: detected capacity change from 0 to 128 [ 130.302309][ T4266] EXT4-fs (loop4): unmounting filesystem. [ 131.248860][ T75] kworker/u4:4: attempt to access beyond end of device [ 131.248860][ T75] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 132.286935][ T4864] loop0: detected capacity change from 0 to 2048 [ 132.333559][ T4864] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=66359, location=66359 [ 132.482519][ T4864] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.727850][ T4333] usb 3-1: string descriptor 0 read error: -71 [ 132.858905][ T4333] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 132.869156][ T4333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.988911][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.996414][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.571728][ T4333] usb 3-1: config 0 descriptor?? [ 133.715572][ T4333] usb 3-1: can't set config #0, error -71 [ 133.755360][ T4333] usb 3-1: USB disconnect, device number 3 [ 135.293401][ T4895] loop0: detected capacity change from 0 to 64 [ 135.355503][ T4444] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 136.560271][ T4886] loop2: detected capacity change from 0 to 32768 [ 137.377831][ T4904] loop0: detected capacity change from 0 to 4096 [ 137.458276][ T4886] XFS (loop2): Mounting V5 Filesystem [ 137.465701][ T4904] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 137.764314][ T4469] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 137.873853][ T4886] XFS (loop2): AIL initialisation failed: error -12 [ 138.016761][ T4886] XFS (loop2): log mount failed [ 138.116592][ T4469] usb 4-1: config index 0 descriptor too short (expected 8192, got 77) [ 138.155944][ T4469] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.334274][ T4469] usb 4-1: config 0 has no interfaces? [ 139.055471][ T4469] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 139.084197][ T4469] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.122231][ T4469] usb 4-1: Product: syz [ 139.132394][ T4469] usb 4-1: Manufacturer: syz [ 139.149749][ T4469] usb 4-1: SerialNumber: syz [ 139.280096][ T4469] usb 4-1: config 0 descriptor?? [ 139.316098][ T4938] loop2: detected capacity change from 0 to 2048 [ 139.388790][ T4941] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 139.524975][ T4920] netlink: 'syz.3.147': attribute type 1 has an invalid length. [ 139.566960][ T27] audit: type=1800 audit(1756911237.996:12): pid=4938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.152" name="bus" dev="loop2" ino=2097152 res=0 errno=0 [ 139.945071][ T4949] loop4: detected capacity change from 0 to 64 [ 141.067338][ T4469] usb 4-1: USB disconnect, device number 3 [ 144.724491][ T4990] loop4: detected capacity change from 0 to 64 [ 144.817790][ T4991] netlink: 'syz.2.168': attribute type 1 has an invalid length. [ 144.827073][ T4444] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 145.842840][ T4997] netlink: 36 bytes leftover after parsing attributes in process `syz.4.170'. [ 146.849265][ T5003] netlink: 224 bytes leftover after parsing attributes in process `syz.4.171'. [ 147.284177][ T26] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 147.486761][ T26] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.511699][ T26] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 147.559023][ T26] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 147.592781][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.640718][ T26] usb 5-1: config 0 descriptor?? [ 147.856044][ T5010] loop1: detected capacity change from 0 to 40427 [ 147.890053][ T5010] F2FS-fs (loop1): invalid crc value [ 147.899004][ T5010] F2FS-fs (loop1): Found nat_bits in checkpoint [ 147.932934][ T5010] F2FS-fs (loop1): Start checkpoint disabled! [ 147.963025][ T5010] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 148.085779][ T26] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 148.195304][ T5003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.278322][ T5017] mmap: syz.1.173 (5017) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 148.296129][ T5003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.324747][ T26] dvb-usb: bulk message failed: -22 (3/0) [ 149.200856][ T26] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 149.301542][ T26] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 149.351907][ T26] usb 5-1: media controller created [ 149.376232][ T26] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 149.536997][ T26] dvb-usb: bulk message failed: -22 (6/0) [ 149.556136][ T26] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 149.615071][ T26] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 149.698168][ T26] dvb-usb: schedule remote query interval to 150 msecs. [ 149.723751][ T26] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 149.766622][ T5029] loop0: detected capacity change from 0 to 64 [ 149.776794][ T26] usb 5-1: USB disconnect, device number 3 [ 149.841381][ T4376] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 150.001416][ T26] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 150.171910][ T5032] netlink: 36 bytes leftover after parsing attributes in process `syz.2.181'. [ 153.599603][ T26] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 153.860600][ T5066] netlink: 'syz.1.189': attribute type 12 has an invalid length. [ 154.405688][ T26] usb 5-1: config index 0 descriptor too short (expected 8192, got 77) [ 154.414374][ T26] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.425169][ T26] usb 5-1: config 0 has no interfaces? [ 154.433436][ T26] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 154.480279][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.511436][ T26] usb 5-1: Product: syz [ 154.526952][ T26] usb 5-1: Manufacturer: syz [ 154.531926][ T26] usb 5-1: SerialNumber: syz [ 154.559613][ T26] usb 5-1: config 0 descriptor?? [ 154.776369][ T5053] netlink: 'syz.4.185': attribute type 1 has an invalid length. [ 154.937585][ T5073] loop3: detected capacity change from 0 to 4096 [ 154.996766][ T5076] netlink: 36 bytes leftover after parsing attributes in process `syz.1.193'. [ 155.042433][ T5079] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 156.151255][ T26] usb 5-1: USB disconnect, device number 4 [ 159.032765][ T5111] netlink: 'syz.0.204': attribute type 12 has an invalid length. [ 160.301803][ T5118] loop4: detected capacity change from 0 to 4096 [ 160.858011][ T5121] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 161.517263][ T5129] netlink: 36 bytes leftover after parsing attributes in process `syz.4.209'. [ 161.842787][ T126] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 162.734220][ T126] usb 1-1: config index 0 descriptor too short (expected 8192, got 77) [ 162.784089][ T126] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.867625][ T126] usb 1-1: config 0 has no interfaces? [ 162.884151][ T126] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 162.914385][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.964132][ T126] usb 1-1: Product: syz [ 162.974472][ T126] usb 1-1: Manufacturer: syz [ 162.986949][ T126] usb 1-1: SerialNumber: syz [ 163.014683][ T126] usb 1-1: config 0 descriptor?? [ 163.255447][ T5126] netlink: 'syz.0.208': attribute type 1 has an invalid length. [ 163.272563][ T5144] loop4: detected capacity change from 0 to 512 [ 164.178348][ T5144] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #12: comm syz.4.212: iget: bad extra_isize 64544 (inode size 256) [ 164.257098][ T5144] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.212: couldn't read orphan inode 12 (err -117) [ 164.301906][ T5144] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 164.313589][ T5153] netlink: 'syz.2.218': attribute type 12 has an invalid length. [ 164.329573][ T5144] EXT4-fs (loop4): unmounting filesystem. [ 165.564914][ T126] usb 1-1: USB disconnect, device number 4 [ 165.743317][ T5163] loop3: detected capacity change from 0 to 4096 [ 165.846850][ T5170] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.005502][ T5172] netlink: 68 bytes leftover after parsing attributes in process `syz.2.222'. [ 167.473488][ T5191] loop3: detected capacity change from 0 to 64 [ 169.536810][ T5209] netlink: 'syz.0.232': attribute type 12 has an invalid length. [ 169.804225][ T4469] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 169.841342][ T5212] loop3: detected capacity change from 0 to 4096 [ 169.933960][ T5214] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 170.094958][ T4469] usb 5-1: config index 0 descriptor too short (expected 8192, got 77) [ 170.123052][ T4469] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.814828][ T5218] netlink: 156 bytes leftover after parsing attributes in process `syz.0.235'. [ 170.833361][ T5218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.235'. [ 170.864102][ T5218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.235'. [ 170.878871][ T4469] usb 5-1: config 0 has no interfaces? [ 170.898979][ T5218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.235'. [ 170.925135][ T4469] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 170.945376][ T4469] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.996464][ T4469] usb 5-1: Product: syz [ 171.000727][ T4469] usb 5-1: Manufacturer: syz [ 171.026774][ T4469] usb 5-1: SerialNumber: syz [ 171.067190][ T4469] usb 5-1: config 0 descriptor?? [ 171.245375][ T5222] loop0: detected capacity change from 0 to 64 [ 171.325103][ T5210] netlink: 'syz.4.231': attribute type 1 has an invalid length. [ 171.391088][ T5222] hfs: unable to open catalog tree [ 171.433173][ T5222] hfs: can't find a HFS filesystem on dev loop0 [ 171.629374][ T5226] netlink: 68 bytes leftover after parsing attributes in process `syz.3.237'. [ 172.631257][ T4469] usb 5-1: USB disconnect, device number 5 [ 174.464380][ T4333] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 174.836592][ T5251] netlink: 'syz.1.245': attribute type 12 has an invalid length. [ 175.658259][ T4333] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 175.672122][ T4333] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.680368][ T4333] usb 1-1: Product: syz [ 175.684619][ T4333] usb 1-1: Manufacturer: syz [ 175.689254][ T4333] usb 1-1: SerialNumber: syz [ 175.696251][ T4333] usb 1-1: config 0 descriptor?? [ 175.926844][ T4333] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 177.179570][ T5266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.249'. [ 177.256152][ T5274] loop1: detected capacity change from 0 to 2048 [ 177.320162][ T5274] NILFS (loop1): unrecognized mount option "" [ 177.341628][ T4333] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 177.376348][ T4333] usb 1-1: USB disconnect, device number 5 [ 177.422730][ T5276] netlink: 'syz.2.251': attribute type 1 has an invalid length. [ 177.613251][ T5284] netlink: 68 bytes leftover after parsing attributes in process `syz.3.252'. [ 180.122122][ T5308] netlink: 'syz.0.259': attribute type 12 has an invalid length. [ 180.393069][ T5313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.260'. [ 180.915705][ T5318] loop0: detected capacity change from 0 to 8 [ 181.200376][ T27] audit: type=1800 audit(1756911279.626:13): pid=5318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.262" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 181.904398][ T7] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 182.096922][ T7] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 182.110716][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.131153][ T5335] netlink: 68 bytes leftover after parsing attributes in process `syz.1.267'. [ 182.152923][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.189588][ T7] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 182.220126][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.237315][ T7] usb 5-1: Product: syz [ 182.246424][ T7] usb 5-1: Manufacturer: syz [ 182.259537][ T7] usb 5-1: SerialNumber: syz [ 182.397323][ T5337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.261'. [ 185.919226][ T7] usb 5-1: 0:2 : does not exist [ 186.223030][ T7] usb 5-1: USB disconnect, device number 6 [ 186.894575][ T5352] netlink: 'syz.1.272': attribute type 12 has an invalid length. [ 187.035872][ T4444] udevd[4444]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.424157][ T4333] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 187.757131][ T5369] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 187.763980][ T5369] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 187.787621][ T4333] usb 4-1: config index 0 descriptor too short (expected 8192, got 77) [ 187.819363][ T4333] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.870101][ T4333] usb 4-1: config 0 has no interfaces? [ 187.891310][ T27] audit: type=1326 audit(1756911286.316:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5367 comm="syz.2.276" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff85858ebe9 code=0x0 [ 187.919665][ T4333] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 187.939510][ T4333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.943613][ T5373] loop0: detected capacity change from 0 to 1024 [ 187.955044][ T4333] usb 4-1: Product: syz [ 187.959436][ T4333] usb 4-1: Manufacturer: syz [ 187.974426][ T4333] usb 4-1: SerialNumber: syz [ 187.994604][ T4333] usb 4-1: config 0 descriptor?? [ 188.047898][ T5373] EXT4-fs: Ignoring removed bh option [ 188.134301][ T5373] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 189.779284][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 189.901856][ T5384] netlink: 'syz.3.270': attribute type 1 has an invalid length. [ 191.056542][ T5390] netlink: 68 bytes leftover after parsing attributes in process `syz.0.278'. [ 193.076135][ T5408] netlink: 'syz.2.285': attribute type 12 has an invalid length. [ 193.337932][ T5412] loop4: detected capacity change from 0 to 128 [ 194.437970][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.444483][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.525624][ T4753] kworker/u4:12: attempt to access beyond end of device [ 194.525624][ T4753] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 194.742552][ T4469] usb 4-1: USB disconnect, device number 4 [ 194.813226][ T5419] loop4: detected capacity change from 0 to 64 [ 194.976823][ T5406] loop0: detected capacity change from 0 to 32768 [ 195.043276][ T5406] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 195.054956][ T27] audit: type=1326 audit(1756911293.486:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5418 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85858ebe9 code=0x7ffc0000 [ 195.126725][ T27] audit: type=1326 audit(1756911293.486:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5418 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85858ebe9 code=0x7ffc0000 [ 195.150513][ T27] audit: type=1326 audit(1756911293.506:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5418 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff85858ebe9 code=0x7ffc0000 [ 195.173525][ T27] audit: type=1326 audit(1756911293.506:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5418 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85858ebe9 code=0x7ffc0000 [ 195.984095][ T27] audit: type=1326 audit(1756911293.506:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5418 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85858ebe9 code=0x7ffc0000 [ 196.101054][ T27] audit: type=1326 audit(1756911293.506:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5418 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7ff85858ebe9 code=0x7ffc0000 [ 196.192086][ T27] audit: type=1326 audit(1756911293.506:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5418 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85858ebe9 code=0x7ffc0000 [ 196.295049][ T4273] ocfs2: Unmounting device (7,0) on (node local) [ 196.306310][ T27] audit: type=1326 audit(1756911293.506:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5418 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85858ebe9 code=0x7ffc0000 [ 196.342633][ T27] audit: type=1326 audit(1756911293.506:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5418 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7ff85858ebe9 code=0x7ffc0000 [ 196.366500][ T5438] netlink: 68 bytes leftover after parsing attributes in process `syz.4.292'. [ 197.117231][ T5440] loop1: detected capacity change from 0 to 512 [ 197.145450][ T27] audit: type=1326 audit(1756911293.506:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5418 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85858ebe9 code=0x7ffc0000 [ 198.039357][ T5440] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #12: comm syz.1.291: iget: bad extra_isize 64544 (inode size 256) [ 198.076296][ T5440] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.291: couldn't read orphan inode 12 (err -117) [ 198.119976][ T5452] netlink: 'syz.2.297': attribute type 12 has an invalid length. [ 198.240043][ T5440] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 198.300428][ T5440] EXT4-fs (loop1): unmounting filesystem. [ 198.924164][ T4469] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 199.157872][ T4469] usb 4-1: config index 0 descriptor too short (expected 8192, got 77) [ 199.181772][ T4469] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.222253][ T4469] usb 4-1: config 0 has no interfaces? [ 199.403343][ T4469] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 199.445429][ T4469] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.518098][ T4469] usb 4-1: Product: syz [ 199.564127][ T4469] usb 4-1: Manufacturer: syz [ 199.598293][ T4469] usb 4-1: SerialNumber: syz [ 199.658823][ T4469] usb 4-1: config 0 descriptor?? [ 200.140736][ T5466] netlink: 'syz.3.300': attribute type 1 has an invalid length. [ 201.453827][ T5490] netlink: 68 bytes leftover after parsing attributes in process `syz.4.308'. [ 201.624241][ T4271] Bluetooth: hci1: command 0x0406 tx timeout [ 201.630450][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 201.634412][ T4285] Bluetooth: hci4: command 0x0406 tx timeout [ 201.636520][ T4286] Bluetooth: hci0: command 0x0406 tx timeout [ 201.642538][ T4285] Bluetooth: hci3: command 0x0406 tx timeout [ 201.763614][ T5497] netlink: 16 bytes leftover after parsing attributes in process `syz.0.309'. [ 201.780227][ T5497] netlink: 'syz.0.309': attribute type 10 has an invalid length. [ 202.223605][ T5497] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 202.530828][ T5501] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 202.763861][ T5501] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 202.910391][ T5501] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 203.143028][ T5510] netlink: 'syz.4.312': attribute type 12 has an invalid length. [ 203.300568][ T4469] usb 4-1: USB disconnect, device number 5 [ 203.851401][ T5531] loop1: detected capacity change from 0 to 16 [ 204.577135][ T5531] erofs: (device loop1): mounted with root inode @ nid 36. [ 204.853578][ T5531] erofs: (device loop1): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 205.104460][ T5531] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 205.215292][ T5531] erofs: (device loop1): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 205.264572][ T5531] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 205.292581][ T5531] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 205.313476][ T5531] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 205.765287][ T5521] loop3: detected capacity change from 0 to 32768 [ 205.824535][ T5521] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.315 (5521) [ 205.983813][ T5545] loop0: detected capacity change from 0 to 128 [ 206.092705][ T5521] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 206.107568][ T5545] EXT4-fs (loop0): Test dummy encryption mode enabled [ 206.148068][ T5521] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 206.189415][ T5521] BTRFS info (device loop3): using free space tree [ 206.210265][ T5545] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 206.235071][ T5545] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 206.251076][ T5553] netlink: 68 bytes leftover after parsing attributes in process `syz.1.323'. [ 206.752239][ T5521] BTRFS error (device loop3): open_ctree failed: -12 [ 206.887692][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 207.067441][ T5584] netlink: 'syz.0.326': attribute type 12 has an invalid length. [ 207.256986][ T5591] loop1: detected capacity change from 0 to 64 [ 207.513867][ T4444] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by udevd (4444) [ 207.575219][ T5591] hfs: unable to open catalog tree [ 207.588981][ T5591] hfs: can't find a HFS filesystem on dev loop1 [ 207.620573][ T5590] netlink: 'syz.2.325': attribute type 1 has an invalid length. [ 207.874270][ T126] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 208.566416][ T126] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 208.593479][ T126] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.300201][ T126] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 209.332722][ T126] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 209.352698][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.376133][ T126] usb 4-1: Product: syz [ 209.491128][ T126] usb 4-1: Manufacturer: syz [ 209.500634][ T126] usb 4-1: SerialNumber: syz [ 209.514712][ T5607] loop0: detected capacity change from 0 to 8 [ 212.179102][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 212.179143][ T27] audit: type=1800 audit(1756911310.606:38): pid=5612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.331" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 212.988182][ T126] usb 4-1: 0:2 : does not exist [ 213.341627][ T126] usb 4-1: USB disconnect, device number 6 [ 213.605282][ T4376] udevd[4376]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 214.131411][ T5625] loop4: detected capacity change from 0 to 512 [ 214.250299][ T5625] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 214.284474][ T5625] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 214.316542][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.618921][ T5625] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 3: comm syz.4.337: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 214.843690][ T5625] EXT4-fs (loop4): Remounting filesystem read-only [ 215.106163][ T4266] EXT4-fs (loop4): unmounting filesystem. [ 216.178612][ T5636] loop4: detected capacity change from 0 to 64 [ 216.201135][ T5636] hfs: unable to open catalog tree [ 216.217965][ T5636] hfs: can't find a HFS filesystem on dev loop4 [ 216.395338][ T5639] netlink: 'syz.2.341': attribute type 12 has an invalid length. [ 221.470590][ T5666] loop3: detected capacity change from 0 to 512 [ 221.513500][ T5666] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 221.588285][ T5666] EXT4-fs (loop3): 1 truncate cleaned up [ 221.619299][ T5666] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 222.024126][ T4326] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 222.332598][ T4326] usb 5-1: config index 0 descriptor too short (expected 8192, got 77) [ 222.368943][ T4326] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.434139][ T4326] usb 5-1: config 0 has no interfaces? [ 222.644058][ T4326] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 222.663222][ T5664] loop0: detected capacity change from 0 to 32768 [ 223.372145][ T5664] XFS: ikeep mount option is deprecated. [ 223.392858][ T4326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.561370][ T5690] netlink: 'syz.2.355': attribute type 12 has an invalid length. [ 223.600406][ T4326] usb 5-1: Product: syz [ 223.654163][ T4326] usb 5-1: Manufacturer: syz [ 223.690502][ T4326] usb 5-1: SerialNumber: syz [ 223.714983][ T5664] XFS (loop0): Mounting V5 Filesystem [ 223.730821][ T4326] usb 5-1: config 0 descriptor?? [ 223.974350][ T5664] XFS (loop0): Ending clean mount [ 224.036448][ T5664] XFS (loop0): Quotacheck needed: Please wait. [ 224.113489][ T5681] netlink: 'syz.4.350': attribute type 1 has an invalid length. [ 224.322349][ T5664] XFS (loop0): Quotacheck: Done. [ 224.630597][ T4273] XFS (loop0): Unmounting Filesystem [ 225.727414][ T5709] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 225.870796][ T5709] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 228.150975][ T4326] usb 5-1: USB disconnect, device number 7 [ 231.771992][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 232.198331][ T5741] netlink: 'syz.4.366': attribute type 12 has an invalid length. [ 233.507623][ T5755] netlink: 68 bytes leftover after parsing attributes in process `syz.0.368'. [ 234.677604][ T5761] loop1: detected capacity change from 0 to 4096 [ 234.986112][ T4333] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 235.632918][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 235.894291][ T4333] usb 5-1: device descriptor read/64, error -32 [ 236.760593][ T5761] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 236.804122][ T4333] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 238.055144][ T4274] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 238.517091][ T5791] loop1: detected capacity change from 0 to 512 [ 238.688846][ T5791] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 239.241784][ T5791] EXT4-fs (loop1): 1 truncate cleaned up [ 239.355471][ T5791] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 239.474611][ T5797] netlink: 'syz.2.381': attribute type 12 has an invalid length. [ 240.262792][ T4333] usb 5-1: device descriptor read/all, error -71 [ 240.280729][ T4333] usb usb5-port1: attempt power cycle [ 243.445857][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 245.411684][ T5848] netlink: 'syz.0.392': attribute type 12 has an invalid length. [ 246.619873][ T5865] loop4: detected capacity change from 0 to 4096 [ 248.447457][ T5861] sched: RT throttling activated [ 249.517813][ T5865] NILFS (loop4): error -4 creating segctord thread [ 250.114119][ T5578] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 250.347762][ T5870] sd 0:0:1:0: PR command failed: 1026 [ 250.366804][ T5873] loop3: detected capacity change from 0 to 256 [ 250.455133][ T5578] usb 1-1: config index 0 descriptor too short (expected 8192, got 77) [ 250.472874][ T5870] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 250.474789][ T5578] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.514610][ T5870] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 250.636382][ T5578] usb 1-1: config 0 has no interfaces? [ 250.850699][ T5873] FAT-fs (loop3): IO charset iso8859 not found [ 250.970547][ T5878] loop1: detected capacity change from 0 to 16 [ 251.068001][ T5878] erofs: (device loop1): erofs_read_inode: unsupported i_format 32 of nid 36 [ 251.198635][ T4444] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 252.248715][ T5578] usb 1-1: string descriptor 0 read error: -71 [ 252.264616][ T5578] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 252.315318][ T5578] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.474658][ T5578] usb 1-1: config 0 descriptor?? [ 252.570982][ T5892] netlink: 'syz.1.403': attribute type 12 has an invalid length. [ 252.574415][ T5578] usb 1-1: can't set config #0, error -71 [ 252.606711][ T5578] usb 1-1: USB disconnect, device number 6 [ 253.473578][ T5899] netlink: 20 bytes leftover after parsing attributes in process `syz.2.404'. [ 253.501136][ T5899] device vlan2 entered promiscuous mode [ 253.507249][ T5899] device gretap0 entered promiscuous mode [ 256.211851][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.218871][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.359846][ T5918] loop1: detected capacity change from 0 to 256 [ 256.425361][ T5918] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 256.441638][ T5918] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 256.501155][ T5918] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 257.570429][ T5918] exFAT-fs (loop1): hint_cluster is invalid (17) [ 259.230314][ T5944] netlink: 'syz.3.419': attribute type 12 has an invalid length. [ 259.325727][ T5947] Bluetooth: MGMT ver 1.22 [ 259.462143][ T5949] loop1: detected capacity change from 0 to 64 [ 259.620040][ T5949] hfs: unable to open catalog tree [ 259.658957][ T5949] hfs: can't find a HFS filesystem on dev loop1 [ 263.073563][ T5984] loop1: detected capacity change from 0 to 2048 [ 263.135110][ T5985] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 263.198895][ T27] audit: type=1800 audit(1756911361.626:39): pid=5984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.429" name="bus" dev="loop1" ino=2097152 res=0 errno=0 [ 263.260585][ T27] audit: type=1804 audit(1756911361.626:40): pid=5984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.429" name="/newroot/74/file2/bus" dev="loop1" ino=2097152 res=1 errno=0 [ 267.467410][ T6001] netlink: 'syz.0.434': attribute type 12 has an invalid length. [ 268.570987][ T128] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 268.894258][ T128] usb 4-1: Using ep0 maxpacket: 32 [ 268.906271][ T128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10168, setting to 1024 [ 268.925107][ T128] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 269.648657][ T128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.669059][ T128] usb 4-1: config 0 descriptor?? [ 269.676701][ T6005] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 269.698510][ T128] hub 4-1:0.0: USB hub found [ 269.968595][ T128] hub 4-1:0.0: 1 port detected [ 269.991659][ T6016] loop0: detected capacity change from 0 to 4096 [ 270.075178][ T6016] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 271.554243][ T128] hub 4-1:0.0: hub_ext_port_status failed (err = -32) [ 272.962258][ T4273] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 273.944214][ T5576] usb 4-1: USB disconnect, device number 7 [ 275.845405][ T6049] netlink: 'syz.2.449': attribute type 12 has an invalid length. [ 277.489653][ T6060] loop4: detected capacity change from 0 to 4096 [ 279.077506][ T6070] syz.2.455 uses obsolete (PF_INET,SOCK_PACKET) [ 279.804841][ T6075] sctp: failed to load transform for md5: -2 [ 280.518511][ T6092] loop4: detected capacity change from 0 to 64 [ 280.593627][ T6092] hfs: unable to open catalog tree [ 280.606091][ T6092] hfs: can't find a HFS filesystem on dev loop4 [ 281.793862][ T6102] loop4: detected capacity change from 0 to 256 [ 282.538898][ T6106] device geneve2 entered promiscuous mode [ 282.773420][ T6109] Zero length message leads to an empty skb [ 282.983445][ T6102] FAT-fs (loop4): IO charset iso8859 not found [ 282.987504][ T6114] loop3: detected capacity change from 0 to 2048 [ 283.118396][ T6115] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 283.147998][ T27] audit: type=1800 audit(1756911381.576:41): pid=6114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.465" name="bus" dev="loop3" ino=2097152 res=0 errno=0 [ 283.227052][ T27] audit: type=1804 audit(1756911381.606:42): pid=6116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.465" name="/newroot/95/file2/bus" dev="loop3" ino=2097152 res=1 errno=0 [ 283.249530][ T6033] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 283.436467][ T6033] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.461922][ T6033] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.511649][ T6033] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 283.526648][ T6033] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 283.546845][ T6033] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.707467][ T6033] usb 1-1: config 0 descriptor?? [ 284.139953][ T6033] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 284.407026][ T6033] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 286.557735][ T6131] sctp: failed to load transform for md5: -2 [ 286.601361][ T126] usb 1-1: USB disconnect, device number 7 [ 286.886498][ T6147] loop0: detected capacity change from 0 to 64 [ 286.965688][ T6147] hfs: unable to open catalog tree [ 286.994697][ T6147] hfs: can't find a HFS filesystem on dev loop0 [ 288.975010][ T4285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 289.011976][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 289.020679][ T4285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 289.031986][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 289.052869][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 289.137792][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 289.606517][ T6174] loop0: detected capacity change from 0 to 4096 [ 289.751573][ T6164] chnl_net:caif_netlink_parms(): no params data found [ 290.055021][ T6164] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.095624][ T6164] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.139195][ T6164] device bridge_slave_0 entered promiscuous mode [ 290.179087][ T6164] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.198860][ T6164] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.235602][ T6164] device bridge_slave_1 entered promiscuous mode [ 290.373550][ T6164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.466474][ T6164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.631350][ T6164] team0: Port device team_slave_0 added [ 290.683584][ T6164] team0: Port device team_slave_1 added [ 290.795464][ T6164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.813058][ T6164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.938653][ T6164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.987840][ T6164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.011054][ T6164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.108090][ T6164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.313897][ T4282] Bluetooth: hci2: command 0x0409 tx timeout [ 293.370496][ T6164] device hsr_slave_0 entered promiscuous mode [ 293.384453][ T4282] Bluetooth: hci2: command 0x041b tx timeout [ 293.564472][ T6164] device hsr_slave_1 entered promiscuous mode [ 293.615772][ T6164] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.630063][ T6164] Cannot create hsr debugfs directory [ 295.160315][ T6164] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 295.235404][ T6164] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 295.251960][ T6164] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 295.286659][ T6164] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 295.464268][ T4282] Bluetooth: hci2: command 0x040f tx timeout [ 296.212084][ T6164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.405508][ T5498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 296.507551][ T5498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 296.538752][ T6164] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.435292][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 297.449560][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 297.561389][ T4282] Bluetooth: hci2: command 0x0419 tx timeout [ 297.576716][ T4761] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.584042][ T4761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.592036][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 297.685621][ T4828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 297.715131][ T4828] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 297.734710][ T4828] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.741966][ T4828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.785191][ T4828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 297.820232][ T6256] loop0: detected capacity change from 0 to 2048 [ 297.843900][ T4828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 297.884640][ T6256] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=66359, location=66359 [ 297.913222][ T4828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 297.930611][ T4828] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 297.951439][ T6256] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 297.963381][ T4828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 297.985976][ T4828] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 298.002392][ T4828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 298.031962][ T4828] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 298.118425][ T4828] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 298.220315][ T6164] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 298.271276][ T6164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 298.534694][ T4825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 298.594505][ T4825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 298.751027][ T6265] loop4: detected capacity change from 0 to 2048 [ 298.913097][ T6269] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 298.946576][ T27] audit: type=1800 audit(1756911397.376:43): pid=6265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.502" name="bus" dev="loop4" ino=2097152 res=0 errno=0 [ 299.044144][ T27] audit: type=1804 audit(1756911397.406:44): pid=6265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.502" name="/newroot/97/file2/bus" dev="loop4" ino=2097152 res=1 errno=0 [ 299.642209][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 299.673938][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 299.752306][ T6164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.093500][ T6289] overlayfs: failed to clone upperpath [ 304.226136][ T6301] loop0: detected capacity change from 0 to 16 [ 304.291455][ T6301] erofs: (device loop0): mounted with root inode @ nid 36. [ 304.564732][ T6306] erofs: (device loop0): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 304.575565][ T6306] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 304.585926][ T6306] erofs: (device loop0): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 304.596673][ T6306] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 304.606759][ T6306] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 304.616195][ T6306] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 304.780929][ T6164] device veth0_vlan entered promiscuous mode [ 304.827814][ T6164] device veth1_vlan entered promiscuous mode [ 304.984571][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 305.113583][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 305.206187][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 305.247099][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 305.295702][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 305.765987][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 305.810943][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 305.830718][ T6164] device veth0_macvtap entered promiscuous mode [ 305.863119][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 305.890007][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 305.913395][ T6164] device veth1_macvtap entered promiscuous mode [ 305.928112][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 305.946345][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 305.987060][ T6164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.018154][ T6164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.040576][ T6164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.070730][ T6164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.097489][ T6164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.123257][ T6164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.136436][ T6164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.148857][ T6164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.161425][ T6164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.211036][ T6164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.230788][ T6164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.240594][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 306.263252][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 306.486273][ T6164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.515509][ T6164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.551430][ T6164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.600107][ T6164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.634282][ T6164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.646158][ T6164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.668502][ T6164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.704104][ T6164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.748390][ T6164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.768111][ T6164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.825852][ T6164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.960800][ T6164] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.969878][ T6164] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.979838][ T6164] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.989334][ T6164] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.001556][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 307.014465][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 307.213565][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.233579][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.283460][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 307.322975][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.351756][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.414215][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 307.733100][ T6334] netlink: 'syz.0.518': attribute type 10 has an invalid length. [ 307.752955][ T6338] netlink: 72 bytes leftover after parsing attributes in process `syz.3.519'. [ 309.998903][ T6334] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 310.263109][ T6334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 310.359932][ T6334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 311.924456][ T6353] loop5: detected capacity change from 0 to 16 [ 311.998486][ T6353] erofs: (device loop5): mounted with root inode @ nid 36. [ 316.385254][ T6389] loop0: detected capacity change from 0 to 16 [ 316.422140][ T6389] erofs: (device loop0): mounted with root inode @ nid 36. [ 316.455733][ T27] audit: type=1326 audit(1756911414.886:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.5.533" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b4e38ebe9 code=0x0 [ 317.331333][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.337747][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.098150][ T6421] loop5: detected capacity change from 0 to 16 [ 321.174304][ T6421] erofs: (device loop5): mounted with root inode @ nid 36. [ 324.815318][ T6443] netlink: 'syz.3.550': attribute type 1 has an invalid length. [ 324.859575][ T6453] netlink: 72 bytes leftover after parsing attributes in process `syz.0.551'. [ 325.078059][ T6436] loop5: detected capacity change from 0 to 32768 [ 325.111153][ T6436] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.548 (6436) [ 325.191179][ T6436] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 325.224511][ T6436] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 325.272736][ T6436] BTRFS info (device loop5): setting nodatasum [ 325.305059][ T6436] BTRFS info (device loop5): force zlib compression, level 3 [ 325.394985][ T6436] BTRFS info (device loop5): enabling ssd optimizations [ 325.402028][ T6436] BTRFS info (device loop5): allowing degraded mounts [ 325.484264][ T6436] BTRFS info (device loop5): using free space tree [ 326.447542][ T6436] BTRFS error (device loop5): open_ctree failed: -12 [ 326.514290][ T4276] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 326.552932][ T6351] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by udevd (6351) [ 326.704133][ T4276] usb 1-1: Using ep0 maxpacket: 8 [ 326.719134][ T4276] usb 1-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config [ 326.789271][ T4276] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 64256, setting to 1024 [ 327.037290][ T4276] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 327.048177][ T4276] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 327.109662][ T4276] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 327.160844][ T4276] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.201839][ T4276] usb 1-1: Product: syz [ 327.222755][ T4276] usb 1-1: Manufacturer: syz [ 327.402614][ T4276] usb 1-1: SerialNumber: syz [ 331.429893][ T4276] usb 1-1: can't set config #1, error -71 [ 331.592416][ T4276] usb 1-1: USB disconnect, device number 8 [ 333.659844][ T6538] loop0: detected capacity change from 0 to 16 [ 333.738315][ T6538] erofs: (device loop0): mounted with root inode @ nid 36. [ 338.591432][ T6033] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 339.436195][ T6033] usb 6-1: config index 0 descriptor too short (expected 8192, got 77) [ 339.458282][ T6033] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.482724][ T6033] usb 6-1: config 0 has no interfaces? [ 339.597728][ T6033] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 339.607818][ T6033] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.746636][ T6033] usb 6-1: Product: syz [ 339.751428][ T6033] usb 6-1: Manufacturer: syz [ 339.756655][ T6033] usb 6-1: SerialNumber: syz [ 339.769691][ T6033] usb 6-1: config 0 descriptor?? [ 341.851739][ T6033] usb 6-1: USB disconnect, device number 2 [ 341.988298][ T6575] tipc: Failed to remove unknown binding: 66,1,1/0:1454220523/1454220525 [ 342.007177][ T6575] tipc: Failed to remove unknown binding: 66,1,1/0:1454220523/1454220525 [ 342.016327][ T6575] tipc: Failed to remove unknown binding: 66,1,1/0:1454220523/1454220525 [ 342.074841][ T6582] loop5: detected capacity change from 0 to 16 [ 342.098940][ T6582] erofs: (device loop5): mounted with root inode @ nid 36. [ 346.331212][ T4282] Bluetooth: hci0: unexpected cc 0x203c length: 9 > 1 [ 347.269855][ T6619] netlink: 'syz.3.593': attribute type 1 has an invalid length. [ 347.520108][ T6624] loop5: detected capacity change from 0 to 1024 [ 350.293805][ T4348] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 350.494299][ T4348] usb 6-1: Using ep0 maxpacket: 16 [ 350.501426][ T4348] usb 6-1: config 3 has an invalid interface number: 155 but max is 0 [ 350.516015][ T4348] usb 6-1: config 3 has an invalid interface association descriptor of length 3, skipping [ 350.533015][ T4348] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 350.609849][ T4348] usb 6-1: config 3 has no interface number 0 [ 350.674857][ T4348] usb 6-1: config 3 interface 155 has no altsetting 0 [ 350.696071][ T4348] usb 6-1: New USB device found, idVendor=05a9, idProduct=264a, bcdDevice=e5.4c [ 350.714355][ T4348] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.739697][ T4348] usb 6-1: Product: syz [ 350.745140][ T4348] usb 6-1: Manufacturer: syz [ 350.750744][ T4348] usb 6-1: SerialNumber: syz [ 352.766841][ T4348] usb 6-1: can't set config #3, error -71 [ 352.793264][ T4348] usb 6-1: USB disconnect, device number 3 [ 353.056908][ T6657] loop0: detected capacity change from 0 to 1024 [ 353.209860][ T6657] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #11: comm syz.0.604: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 353.396236][ T6657] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.604: couldn't read orphan inode 11 (err -117) [ 353.464454][ T6657] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 353.769851][ T6657] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.604: Invalid block bitmap block 0 in block_group 0 [ 353.894373][ T6657] Quota error (device loop0): write_blk: dquota write failed [ 353.958427][ T6657] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 353.981288][ T6670] tipc: Enabling of bearer rejected, failed to enable media [ 353.993168][ T6657] EXT4-fs error (device loop0): ext4_acquire_dquot:6816: comm syz.0.604: Failed to acquire dquot type 0 [ 354.253449][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 354.266687][ T5498] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-8 [ 355.414638][ T5498] EXT4-fs error (device loop0): ext4_release_dquot:6852: comm kworker/u4:25: Failed to release dquot type 0 [ 355.463450][ T6683] tipc: Enabling of bearer rejected, failed to enable media [ 358.154132][ T6033] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 358.355706][ T6033] usb 1-1: config index 0 descriptor too short (expected 8192, got 77) [ 358.374245][ T6033] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.427624][ T6033] usb 1-1: config 0 has no interfaces? [ 358.463325][ T6033] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 358.511274][ T6033] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.553028][ T6033] usb 1-1: Product: syz [ 358.575214][ T6033] usb 1-1: Manufacturer: syz [ 358.596627][ T6033] usb 1-1: SerialNumber: syz [ 358.642046][ T6033] usb 1-1: config 0 descriptor?? [ 358.884603][ T6704] netlink: 'syz.0.617': attribute type 1 has an invalid length. [ 359.725033][ T6714] loop5: detected capacity change from 0 to 128 [ 361.899984][ T6033] usb 1-1: USB disconnect, device number 9 [ 366.310876][ T6749] loop5: detected capacity change from 0 to 1024 [ 367.491449][ T6763] loop0: detected capacity change from 0 to 128 [ 368.589923][ T6754] tipc: Failed to remove unknown binding: 66,1,1/0:4010139599/4010139601 [ 368.732124][ T6754] tipc: Failed to remove unknown binding: 66,1,1/0:4010139599/4010139601 [ 368.820161][ T6754] tipc: Failed to remove unknown binding: 66,1,1/0:4010139599/4010139601 [ 369.524351][ T4347] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 369.681368][ T6760] loop5: detected capacity change from 0 to 32768 [ 369.737776][ T4347] usb 1-1: config index 0 descriptor too short (expected 8192, got 77) [ 369.769753][ T4347] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.835095][ T4347] usb 1-1: config 0 has no interfaces? [ 369.858148][ T4347] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 369.876777][ T4347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.898499][ T4347] usb 1-1: Product: syz [ 369.898605][ T6760] ERROR: (device loop5): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 369.898605][ T6760] [ 369.920336][ T4347] usb 1-1: Manufacturer: syz [ 369.937422][ T4347] usb 1-1: SerialNumber: syz [ 369.956022][ T4347] usb 1-1: config 0 descriptor?? [ 369.977112][ T6760] ERROR: (device loop5): remounting filesystem as read-only [ 369.990093][ T6760] jfs_readdir: unexpected rc = -5 from dtReadNext [ 370.164482][ T107] blkno = 8ed2c, nblocks = 1 [ 370.169251][ T107] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 370.169251][ T107] [ 370.208441][ T107] JFS: metapage_get_blocks failed [ 370.326388][ T6771] netlink: 'syz.0.636': attribute type 1 has an invalid length. [ 370.336731][ T107] ERROR: (device loop5): release_metapage: write_one_page() failed [ 370.336731][ T107] [ 370.378646][ T107] blkno = 8ed2c, nblocks = 1 [ 370.413606][ T107] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 370.413606][ T107] [ 370.573022][ T6776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.639'. [ 373.475419][ T6801] loop5: detected capacity change from 0 to 1024 [ 375.753531][ T4348] usb 1-1: USB disconnect, device number 10 [ 376.601505][ T6835] netlink: 'syz.2.654': attribute type 10 has an invalid length. [ 376.901336][ T6835] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 376.911868][ T6839] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 377.133325][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 377.161378][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 377.191548][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 377.452944][ T6835] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 377.475174][ C0] Illegal XDP return value 16128 on prog (id 27) dev veth0_to_bridge, expect packet loss! [ 378.486622][ T6843] tipc: Failed to remove unknown binding: 66,1,1/0:1553554646/1553554648 [ 378.564165][ T6843] tipc: Failed to remove unknown binding: 66,1,1/0:1553554646/1553554648 [ 378.578210][ T6843] tipc: Failed to remove unknown binding: 66,1,1/0:1553554646/1553554648 [ 378.747757][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.754311][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.774037][ T4276] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 379.980677][ T4276] usb 1-1: config index 0 descriptor too short (expected 8192, got 77) [ 380.017590][ T4276] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.102887][ T4276] usb 1-1: config 0 has no interfaces? [ 380.168956][ T4276] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 380.229319][ T4276] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.271284][ T4276] usb 1-1: Product: syz [ 380.301562][ T4276] usb 1-1: Manufacturer: syz [ 380.316733][ T4276] usb 1-1: SerialNumber: syz [ 380.384953][ T4276] usb 1-1: config 0 descriptor?? [ 380.655812][ T6861] netlink: 'syz.0.662': attribute type 1 has an invalid length. [ 383.580914][ T4276] usb 1-1: USB disconnect, device number 11 [ 383.900564][ T6894] loop0: detected capacity change from 0 to 2048 [ 384.104595][ T6899] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 384.867490][ T27] audit: type=1800 audit(1756911483.296:46): pid=6894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.673" name="bus" dev="loop0" ino=2097152 res=0 errno=0 [ 385.034289][ T27] audit: type=1804 audit(1756911483.326:47): pid=6904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.673" name="/newroot/142/file2/bus" dev="loop0" ino=2097152 res=1 errno=0 [ 388.769970][ T27] audit: type=1326 audit(1756911487.196:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9818ebe9 code=0x7ffc0000 [ 388.808931][ T6936] netlink: 'syz.4.683': attribute type 1 has an invalid length. [ 388.833150][ T27] audit: type=1326 audit(1756911487.226:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc9818ebe9 code=0x7ffc0000 [ 388.874196][ T27] audit: type=1326 audit(1756911487.226:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9818ebe9 code=0x7ffc0000 [ 388.906911][ T27] audit: type=1326 audit(1756911487.226:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc9818ebe9 code=0x7ffc0000 [ 389.770930][ T6948] loop5: detected capacity change from 0 to 128 [ 389.845137][ T27] audit: type=1326 audit(1756911487.226:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9818ebe9 code=0x7ffc0000 [ 389.877213][ T27] audit: type=1326 audit(1756911487.226:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdc9818ebe9 code=0x7ffc0000 [ 390.030610][ T27] audit: type=1326 audit(1756911487.226:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9818ebe9 code=0x7ffc0000 [ 390.099748][ T27] audit: type=1326 audit(1756911487.226:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc9818ebe9 code=0x7ffc0000 [ 390.232445][ T27] audit: type=1326 audit(1756911487.226:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9818ebe9 code=0x7ffc0000 [ 390.318947][ T27] audit: type=1326 audit(1756911487.226:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdc9818ebe9 code=0x7ffc0000 [ 390.433506][ T27] audit: type=1326 audit(1756911487.226:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9818ebe9 code=0x7ffc0000 [ 392.338944][ T27] audit: type=1326 audit(1756911487.226:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdc9818ebe9 code=0x7ffc0000 [ 392.474767][ T6960] loop5: detected capacity change from 0 to 1024 [ 393.944576][ T27] audit: type=1326 audit(1756911487.226:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9818ebe9 code=0x7ffc0000 [ 394.147512][ T27] audit: type=1326 audit(1756911487.226:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdc9818d69f code=0x7ffc0000 [ 394.194131][ T27] audit: type=1326 audit(1756911487.226:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9818ebe9 code=0x7ffc0000 [ 394.421784][ T6971] loop5: detected capacity change from 0 to 1024 [ 396.684111][ T4276] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 396.884166][ T4276] usb 6-1: Using ep0 maxpacket: 16 [ 396.892692][ T4276] usb 6-1: config 3 has an invalid interface number: 155 but max is 0 [ 396.960730][ T4276] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 397.044978][ T4276] usb 6-1: config 3 has no interface number 0 [ 397.082882][ T4276] usb 6-1: config 3 interface 155 has no altsetting 0 [ 397.148158][ T4276] usb 6-1: New USB device found, idVendor=05a9, idProduct=264a, bcdDevice=e5.4c [ 397.248287][ T4276] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.374050][ T4276] usb 6-1: Product: syz [ 397.378873][ T4276] usb 6-1: Manufacturer: syz [ 397.383905][ T4276] usb 6-1: SerialNumber: syz [ 397.422278][ T4276] usb 6-1: can't set config #3, error -71 [ 397.452491][ T4276] usb 6-1: USB disconnect, device number 4 [ 398.094320][ T4276] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 398.384022][ T4276] usb 6-1: Using ep0 maxpacket: 32 [ 398.397743][ T4276] usb 6-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af [ 399.173885][ T4276] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.182335][ T4276] usb 6-1: Product: syz [ 399.202072][ T4276] usb 6-1: Manufacturer: syz [ 399.207002][ T4276] usb 6-1: SerialNumber: syz [ 399.235478][ T4276] usb 6-1: config 0 descriptor?? [ 399.313744][ T4276] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 399.474995][ T4276] gspca_sunplus: reg_w_riv err -71 [ 399.480342][ T4276] sunplus: probe of 6-1:0.0 failed with error -71 [ 399.527554][ T4276] usb 6-1: USB disconnect, device number 5 [ 402.234243][ T7028] netlink: 'syz.4.712': attribute type 1 has an invalid length. [ 403.640327][ T4282] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 403.649622][ T4282] Bluetooth: hci3: Injecting HCI hardware error event [ 403.658598][ T4282] Bluetooth: hci3: hardware error 0x00 [ 404.579356][ T4276] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 405.172832][ T4276] usb 6-1: unable to get BOS descriptor or descriptor too short [ 405.302590][ T4276] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 405.312262][ T4276] usb 6-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 405.325895][ T4276] usb 6-1: config 1 interface 0 has no altsetting 1 [ 405.336065][ T4276] usb 6-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 405.355669][ T4276] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.371737][ T4276] usb 6-1: Product: syz [ 405.400812][ T4276] usb 6-1: Manufacturer: syz [ 405.421260][ T4276] usb 6-1: SerialNumber: syz [ 405.494350][ T4276] smsusb:smsusb_probe: board id=8, interface number 0 [ 405.666650][ T4276] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 405.694271][ T4276] smsusb: probe of 6-1:1.0 failed with error -71 [ 405.704133][ T4282] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 405.760779][ T4276] usb 6-1: USB disconnect, device number 6 [ 412.963818][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 416.132089][ T4276] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 416.944608][ T4276] usb 6-1: config 0 has no interfaces? [ 416.961158][ T4276] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 416.980486][ T4276] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.124558][ T4276] usb 6-1: Product: syz [ 417.128987][ T4276] usb 6-1: Manufacturer: syz [ 417.213661][ T4276] usb 6-1: SerialNumber: syz [ 417.220282][ T4276] usb 6-1: config 0 descriptor?? [ 417.680190][ T7133] netlink: 160 bytes leftover after parsing attributes in process `syz.2.742'. [ 418.361555][ T7106] netlink: 'syz.5.734': attribute type 1 has an invalid length. [ 423.231164][ T4276] usb 6-1: USB disconnect, device number 7 [ 428.789968][ T7220] netlink: 'syz.0.769': attribute type 1 has an invalid length. [ 428.816751][ T7217] netlink: 'syz.2.770': attribute type 10 has an invalid length. [ 428.877415][ T7217] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 428.889114][ T7217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 428.898206][ T7217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 429.302605][ T7227] tipc: Enabling of bearer rejected, failed to enable media [ 439.738007][ T7315] netlink: 'syz.4.801': attribute type 1 has an invalid length. [ 440.248339][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.255203][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 448.097979][ T7371] netlink: 'syz.3.823': attribute type 10 has an invalid length. [ 448.330269][ T7371] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 450.739780][ T7403] netlink: 'syz.0.836': attribute type 1 has an invalid length. [ 455.687759][ T7448] netlink: 'syz.0.855': attribute type 12 has an invalid length. [ 457.995923][ T7497] netlink: 'syz.3.873': attribute type 12 has an invalid length. [ 473.236903][ T7637] netlink: 'syz.2.926': attribute type 12 has an invalid length. [ 477.196344][ T7681] netlink: 'syz.2.941': attribute type 12 has an invalid length. [ 480.444676][ T7722] loop5: detected capacity change from 0 to 1024 [ 482.009896][ T5577] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 482.204148][ T5577] usb 6-1: Using ep0 maxpacket: 16 [ 482.218099][ T5577] usb 6-1: config 3 has an invalid interface number: 155 but max is 0 [ 482.254010][ T5577] usb 6-1: config 3 has an invalid interface association descriptor of length 3, skipping [ 482.279906][ T5577] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 482.295069][ T5577] usb 6-1: config 3 has no interface number 0 [ 482.311466][ T5577] usb 6-1: config 3 interface 155 has no altsetting 0 [ 482.321524][ T5577] usb 6-1: New USB device found, idVendor=05a9, idProduct=264a, bcdDevice=e5.4c [ 482.341413][ T5577] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.350049][ T5577] usb 6-1: Product: syz [ 482.354753][ T5577] usb 6-1: Manufacturer: syz [ 482.359830][ T5577] usb 6-1: SerialNumber: syz [ 483.795369][ T5577] usb 6-1: Found UVC 0.00 device syz (05a9:264a) [ 483.870055][ T5577] usb 6-1: No valid video chain found. [ 483.913395][ T5577] usb 6-1: USB disconnect, device number 8 [ 484.004764][ T7769] loop5: detected capacity change from 0 to 16 [ 484.083614][ T7769] erofs: (device loop5): mounted with root inode @ nid 36. [ 487.152265][ T7810] loop5: detected capacity change from 0 to 16 [ 487.214282][ T7810] erofs: (device loop5): mounted with root inode @ nid 36. [ 499.986317][ T7958] loop5: detected capacity change from 0 to 1024 [ 501.203316][ T7977] loop5: detected capacity change from 0 to 1024 [ 501.319944][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 501.319961][ T27] audit: type=1804 audit(1756911599.746:65): pid=7977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1042" name="/newroot/84/file1/bus" dev="loop5" ino=26 res=1 errno=0 [ 501.634495][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.641082][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.629379][ T8007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1055'. [ 502.641707][ T8007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1055'. [ 502.661705][ T8007] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1055'. [ 502.673318][ T8007] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1055'. [ 502.687482][ T8008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1055'. [ 502.699490][ T8008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1055'. [ 502.710987][ T8008] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1055'. [ 502.721401][ T8008] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1055'. [ 503.079855][ T8016] loop5: detected capacity change from 0 to 512 [ 503.159968][ T8016] EXT4-fs: Ignoring removed orlov option [ 503.213739][ T8016] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 503.269513][ T8016] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 503.331463][ T8016] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2195: inode #15: comm syz.5.1059: corrupted in-inode xattr [ 503.551646][ T8016] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1059: couldn't read orphan inode 15 (err -117) [ 503.570121][ T8016] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 503.669096][ T6164] EXT4-fs (loop5): unmounting filesystem. [ 503.773735][ T8039] loop5: detected capacity change from 0 to 2048 [ 503.791656][ T8039] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 514.646193][ T8140] loop5: detected capacity change from 0 to 512 [ 514.766376][ T8140] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 514.899409][ T8140] EXT4-fs (loop5): 1 truncate cleaned up [ 514.925500][ T8140] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 515.575132][ T8140] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2195: inode #15: comm syz.5.1106: corrupted in-inode xattr [ 515.729151][ T8140] EXT4-fs (loop5): Remounting filesystem read-only [ 515.754056][ T8140] EXT4-fs warning (device loop5): ext4_xattr_set_entry:1732: inode #15: comm syz.5.1106: unable to update i_inline_off [ 515.798834][ T8140] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 515.912994][ T6164] EXT4-fs (loop5): unmounting filesystem. [ 522.088983][ T8205] 9pnet_fd: Insufficient options for proto=fd [ 525.022861][ T8256] loop5: detected capacity change from 0 to 1024 [ 525.058088][ T8256] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 525.131962][ T8256] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 525.299814][ T8256] EXT4-fs error (device loop5): __ext4_get_inode_loc:4507: comm syz.5.1145: Invalid inode table block 808464432 in block_group 0 [ 525.351252][ T8263] EXT4-fs error (device loop5): __ext4_get_inode_loc:4507: comm syz.5.1145: Invalid inode table block 808464432 in block_group 0 [ 525.502171][ T8256] EXT4-fs (loop5): Remounting filesystem read-only [ 525.516531][ T8263] EXT4-fs (loop5): Remounting filesystem read-only [ 525.524219][ T8256] EXT4-fs error (device loop5): __ext4_get_inode_loc:4507: comm syz.5.1145: Invalid inode table block 808464432 in block_group 0 [ 525.559376][ T8256] EXT4-fs (loop5): Remounting filesystem read-only [ 525.566538][ T27] audit: type=1800 audit(1756911623.996:66): pid=8256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1145" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 526.334351][ T6164] EXT4-fs error (device loop5): __ext4_get_inode_loc:4507: comm syz-executor: Invalid inode table block 808464432 in block_group 0 [ 526.422442][ T6164] EXT4-fs (loop5): Remounting filesystem read-only [ 526.460315][ T6164] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 526.570613][ T6164] EXT4-fs (loop5): Remounting filesystem read-only [ 526.586071][ T6164] EXT4-fs error (device loop5): ext4_dirty_inode:6119: inode #15: comm syz-executor: mark_inode_dirty error [ 526.638916][ T6164] EXT4-fs (loop5): Remounting filesystem read-only [ 526.664167][ T4470] EXT4-fs error (device loop5): __ext4_get_inode_loc:4507: comm kworker/u4:9: Invalid inode table block 808464432 in block_group 0 [ 526.728821][ T4470] EXT4-fs (loop5): Remounting filesystem read-only [ 526.735796][ T4470] EXT4-fs error (device loop5): __ext4_get_inode_loc:4507: comm kworker/u4:9: Invalid inode table block 808464432 in block_group 0 [ 526.753345][ T4470] EXT4-fs (loop5): Remounting filesystem read-only [ 526.783661][ T6164] EXT4-fs (loop5): unmounting filesystem. [ 532.366327][ T8323] 9pnet_fd: Insufficient options for proto=fd [ 535.444069][ T8352] loop5: detected capacity change from 0 to 1024 [ 535.678321][ T8356] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1176'. [ 537.390963][ T8376] loop5: detected capacity change from 0 to 64 [ 537.431449][ T8376] hfs: unable to open catalog tree [ 537.454280][ T8376] hfs: can't find a HFS filesystem on dev loop5 [ 537.466077][ T27] audit: type=1326 audit(1756911635.886:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.2.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85858ebe9 code=0x7ffc0000 [ 537.657188][ T27] audit: type=1326 audit(1756911635.896:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.2.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85858ebe9 code=0x7ffc0000 [ 537.801652][ T27] audit: type=1326 audit(1756911635.996:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.2.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff85858ebe9 code=0x7ffc0000 [ 537.834003][ T27] audit: type=1326 audit(1756911635.996:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.2.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85858ebe9 code=0x7ffc0000 [ 537.868717][ T27] audit: type=1326 audit(1756911635.996:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.2.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85858ebe9 code=0x7ffc0000 [ 537.900670][ T27] audit: type=1326 audit(1756911636.056:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.2.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff85858ebe9 code=0x7ffc0000 [ 537.963784][ T27] audit: type=1326 audit(1756911636.056:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.2.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85858ebe9 code=0x7ffc0000 [ 537.992757][ T27] audit: type=1326 audit(1756911636.056:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.2.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85858ebe9 code=0x7ffc0000 [ 539.063028][ C1] ------------[ cut here ]------------ [ 539.069198][ C1] WARNING: CPU: 1 PID: 8372 at net/mac80211/tx.c:4944 __ieee80211_beacon_get+0x1952/0x1f50 [ 539.079506][ C1] Modules linked in: [ 539.083472][ C1] CPU: 1 PID: 8372 Comm: syz.0.1178 Not tainted syzkaller #0 [ 539.091043][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 539.101329][ C1] RIP: 0010:__ieee80211_beacon_get+0x1952/0x1f50 [ 539.107782][ C1] Code: ff ff ff e8 00 41 e4 f7 0f 0b 48 8b 7c 24 20 e8 44 ae 7f fe e9 dd e9 ff ff e8 ea 40 e4 f7 0f 0b e9 f1 ee ff ff e8 de 40 e4 f7 <0f> 0b e9 61 f2 ff ff e8 d2 40 e4 f7 48 c7 c7 f0 7a fa 8d 4c 89 f6 [ 539.127747][ C1] RSP: 0018:ffffc900001e08a0 EFLAGS: 00010246 [ 539.134209][ C1] RAX: ffffffff899c8f42 RBX: 0000000000000000 RCX: ffff8880279e1dc0 [ 539.142547][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 539.150900][ C1] RBP: ffffc900001e0aa8 R08: ffff8880279e1dc0 R09: 0000000000000003 [ 539.159079][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: 1ffff9200003c12c [ 539.167542][ C1] R13: dffffc0000000000 R14: ffff8880760be258 R15: ffff88802953f000 [ 539.175881][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 539.184904][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 539.191666][ C1] CR2: 000000110c3c64af CR3: 000000005b7af000 CR4: 00000000003506e0 [ 539.199894][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 539.208038][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 539.216309][ C1] Call Trace: [ 539.219623][ C1] [ 539.222626][ C1] ? verify_lock_unused+0x140/0x140 [ 539.227966][ C1] ? verify_lock_unused+0x140/0x140 [ 539.233359][ C1] ? __ieee80211_beacon_get+0xad/0x1f50 [ 539.239002][ C1] ? ieee80211_beacon_get_template+0x40/0x40 [ 539.245186][ C1] ieee80211_beacon_get_tim+0x5b/0x4d0 [ 539.250908][ C1] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 539.256753][ C1] ? read_lock_is_recursive+0x10/0x10 [ 539.262221][ C1] __iterate_interfaces+0x243/0x500 [ 539.267783][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 539.274198][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 539.281448][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 539.287803][ C1] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 539.295029][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 539.300458][ C1] __hrtimer_run_queues+0x554/0xd60 [ 539.305775][ C1] ? hw_scan_work+0xf30/0xf30 [ 539.310723][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 539.316010][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 539.322220][ C1] hrtimer_run_softirq+0x183/0x2a0 [ 539.327411][ C1] handle_softirqs+0x2a1/0x920 [ 539.332672][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 539.337955][ C1] ? do_softirq+0x200/0x200 [ 539.342715][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 539.348201][ C1] __irq_exit_rcu+0x12f/0x220 [ 539.353211][ C1] ? irq_exit_rcu+0x20/0x20 [ 539.357940][ C1] irq_exit_rcu+0x5/0x20 [ 539.362331][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 539.368251][ C1] [ 539.371346][ C1] [ 539.374579][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 539.381003][ C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 539.387019][ C1] Code: f5 ff 0f 1f 00 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 8e 18 42 f7 48 89 df e8 e6 dd 42 f7 e8 61 d1 65 f7 fb bf 01 00 00 00 46 5b 36 f7 65 8b 05 67 14 e1 75 85 c0 74 02 5b c3 e8 b4 25 df [ 539.407412][ C1] RSP: 0018:ffffc90003b3f2d8 EFLAGS: 00000286 [ 539.413818][ C1] RAX: 2577760b3bf90b00 RBX: ffff888056256870 RCX: 2577760b3bf90b00 [ 539.422476][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c0300 RDI: 0000000000000001 [ 539.430785][ C1] RBP: ffffc90003b3f590 R08: dffffc0000000000 R09: fffffbfff215c24a [ 539.438876][ C1] R10: fffffbfff215c24a R11: 1ffffffff215c249 R12: dffffc0000000000 [ 539.447160][ C1] R13: 1ffff1100ac4ad0d R14: ffff888056256868 R15: ffff888056256870 [ 539.455462][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 539.460889][ C1] filemap_remove_folio+0xf5/0x2c0 [ 539.466418][ C1] truncate_inode_folio+0x59/0x70 [ 539.471982][ C1] shmem_undo_range+0x4d2/0x2050 [ 539.477142][ C1] ? shmem_truncate_range+0xb0/0xb0 [ 539.482889][ C1] ? do_raw_spin_lock+0x11d/0x280 [ 539.488059][ C1] ? percpu_counter_add_batch+0x13b/0x160 [ 539.494083][ C1] shmem_evict_inode+0x248/0xa40 [ 539.499302][ C1] ? _raw_spin_unlock+0x24/0x40 [ 539.504792][ C1] ? inode_wait_for_writeback+0x1b0/0x200 [ 539.510755][ C1] ? shmem_free_in_core_inode+0xb0/0xb0 [ 539.516654][ C1] ? do_raw_spin_lock+0x11d/0x280 [ 539.522464][ C1] ? bit_waitqueue+0x30/0x30 [ 539.527613][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 539.533837][ C1] ? shmem_free_in_core_inode+0xb0/0xb0 [ 539.539970][ C1] evict+0x485/0x870 [ 539.544056][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 539.549269][ C1] ? proc_nr_inodes+0x2f0/0x2f0 [ 539.554603][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 539.561233][ C1] ? _raw_spin_unlock+0x24/0x40 [ 539.566303][ C1] ? iput+0x768/0x980 [ 539.570536][ C1] __dentry_kill+0x431/0x650 [ 539.575336][ C1] dentry_kill+0xb8/0x290 [ 539.579833][ C1] ? dput+0x37/0x1d0 [ 539.584116][ C1] dput+0xfa/0x1d0 [ 539.588093][ C1] __fput+0x5e0/0x920 [ 539.592496][ C1] task_work_run+0x1ca/0x250 [ 539.597320][ C1] ? task_work_cancel+0x230/0x230 [ 539.602431][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 539.607794][ C1] do_exit+0x93e/0x2400 [ 539.612394][ C1] ? put_task_struct+0x80/0x80 [ 539.617427][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 539.625407][ C1] ? lock_chain_count+0x20/0x20 [ 539.630558][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 539.636003][ C1] do_group_exit+0x217/0x2d0 [ 539.640758][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 539.646257][ C1] get_signal+0x1272/0x1350 [ 539.651121][ C1] arch_do_signal_or_restart+0xb0/0x1230 [ 539.656965][ C1] ? do_futex+0x310/0x320 [ 539.661538][ C1] ? __might_sleep+0xd0/0xd0 [ 539.666423][ C1] ? __ia32_sys_get_robust_list+0x80/0x80 [ 539.672480][ C1] ? get_sigframe_size+0x10/0x10 [ 539.677958][ C1] ? blkcg_maybe_throttle_current+0x19f/0xa60 [ 539.684228][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 539.689530][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 539.695736][ C1] exit_to_user_mode_loop+0x70/0x110 [ 539.701097][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 539.706808][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 539.712599][ C1] do_syscall_64+0x58/0xa0 [ 539.717157][ C1] ? clear_bhb_loop+0x60/0xb0 [ 539.721973][ C1] ? clear_bhb_loop+0x60/0xb0 [ 539.726744][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 539.732710][ C1] RIP: 0033:0x7fd7f778ebe9 [ 539.737345][ C1] Code: Unable to access opcode bytes at 0x7fd7f778ebbf. [ 539.744845][ C1] RSP: 002b:00007fd7f85a80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 539.753582][ C1] RAX: fffffffffffffe00 RBX: 00007fd7f79c6278 RCX: 00007fd7f778ebe9 [ 539.761683][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd7f79c6278 [ 539.769828][ C1] RBP: 00007fd7f79c6270 R08: 0000000000000000 R09: 0000000000000000 [ 539.778081][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.786246][ C1] R13: 00007fd7f79c6308 R14: 00007fff363b1120 R15: 00007fff363b1208 [ 539.794415][ C1] [ 539.797777][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 539.805359][ C1] CPU: 1 PID: 8372 Comm: syz.0.1178 Not tainted syzkaller #0 [ 539.813977][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 539.824688][ C1] Call Trace: [ 539.828126][ C1] [ 539.831203][ C1] dump_stack_lvl+0x168/0x22e [ 539.836209][ C1] ? memcpy+0x3c/0x60 [ 539.840433][ C1] ? show_regs_print_info+0x12/0x12 [ 539.846113][ C1] ? load_image+0x3b0/0x3b0 [ 539.850698][ C1] panic+0x2c9/0x710 [ 539.854688][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 539.859613][ C1] __warn+0x2f8/0x4f0 [ 539.864137][ C1] ? __ieee80211_beacon_get+0x1952/0x1f50 [ 539.870008][ C1] ? __ieee80211_beacon_get+0x1952/0x1f50 [ 539.876106][ C1] report_bug+0x2ba/0x4f0 [ 539.880587][ C1] ? __ieee80211_beacon_get+0x1952/0x1f50 [ 539.886910][ C1] handle_bug+0x3a/0x70 [ 539.891196][ C1] exc_invalid_op+0x16/0x40 [ 539.896021][ C1] asm_exc_invalid_op+0x16/0x20 [ 539.901003][ C1] RIP: 0010:__ieee80211_beacon_get+0x1952/0x1f50 [ 539.907727][ C1] Code: ff ff ff e8 00 41 e4 f7 0f 0b 48 8b 7c 24 20 e8 44 ae 7f fe e9 dd e9 ff ff e8 ea 40 e4 f7 0f 0b e9 f1 ee ff ff e8 de 40 e4 f7 <0f> 0b e9 61 f2 ff ff e8 d2 40 e4 f7 48 c7 c7 f0 7a fa 8d 4c 89 f6 [ 539.928576][ C1] RSP: 0018:ffffc900001e08a0 EFLAGS: 00010246 [ 539.935222][ C1] RAX: ffffffff899c8f42 RBX: 0000000000000000 RCX: ffff8880279e1dc0 [ 539.943527][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 539.952150][ C1] RBP: ffffc900001e0aa8 R08: ffff8880279e1dc0 R09: 0000000000000003 [ 539.960588][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: 1ffff9200003c12c [ 539.968706][ C1] R13: dffffc0000000000 R14: ffff8880760be258 R15: ffff88802953f000 [ 539.976919][ C1] ? __ieee80211_beacon_get+0x1952/0x1f50 [ 539.982941][ C1] ? verify_lock_unused+0x140/0x140 [ 539.988204][ C1] ? verify_lock_unused+0x140/0x140 [ 539.993751][ C1] ? __ieee80211_beacon_get+0xad/0x1f50 [ 539.999830][ C1] ? ieee80211_beacon_get_template+0x40/0x40 [ 540.006073][ C1] ieee80211_beacon_get_tim+0x5b/0x4d0 [ 540.012042][ C1] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 540.017882][ C1] ? read_lock_is_recursive+0x10/0x10 [ 540.023333][ C1] __iterate_interfaces+0x243/0x500 [ 540.028852][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 540.035426][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 540.042690][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 540.049060][ C1] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 540.056254][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 540.061584][ C1] __hrtimer_run_queues+0x554/0xd60 [ 540.067026][ C1] ? hw_scan_work+0xf30/0xf30 [ 540.071824][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 540.077187][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 540.083304][ C1] hrtimer_run_softirq+0x183/0x2a0 [ 540.088464][ C1] handle_softirqs+0x2a1/0x920 [ 540.093300][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 540.098408][ C1] ? do_softirq+0x200/0x200 [ 540.103064][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 540.108325][ C1] __irq_exit_rcu+0x12f/0x220 [ 540.113328][ C1] ? irq_exit_rcu+0x20/0x20 [ 540.117891][ C1] irq_exit_rcu+0x5/0x20 [ 540.122276][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 540.128194][ C1] [ 540.131354][ C1] [ 540.134577][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 540.140693][ C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 540.146560][ C1] Code: f5 ff 0f 1f 00 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 8e 18 42 f7 48 89 df e8 e6 dd 42 f7 e8 61 d1 65 f7 fb bf 01 00 00 00 46 5b 36 f7 65 8b 05 67 14 e1 75 85 c0 74 02 5b c3 e8 b4 25 df [ 540.167403][ C1] RSP: 0018:ffffc90003b3f2d8 EFLAGS: 00000286 [ 540.173529][ C1] RAX: 2577760b3bf90b00 RBX: ffff888056256870 RCX: 2577760b3bf90b00 [ 540.181667][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c0300 RDI: 0000000000000001 [ 540.190050][ C1] RBP: ffffc90003b3f590 R08: dffffc0000000000 R09: fffffbfff215c24a [ 540.198245][ C1] R10: fffffbfff215c24a R11: 1ffffffff215c249 R12: dffffc0000000000 [ 540.206263][ C1] R13: 1ffff1100ac4ad0d R14: ffff888056256868 R15: ffff888056256870 [ 540.214304][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 540.219746][ C1] filemap_remove_folio+0xf5/0x2c0 [ 540.225084][ C1] truncate_inode_folio+0x59/0x70 [ 540.230437][ C1] shmem_undo_range+0x4d2/0x2050 [ 540.235632][ C1] ? shmem_truncate_range+0xb0/0xb0 [ 540.241003][ C1] ? do_raw_spin_lock+0x11d/0x280 [ 540.246268][ C1] ? percpu_counter_add_batch+0x13b/0x160 [ 540.252064][ C1] shmem_evict_inode+0x248/0xa40 [ 540.257253][ C1] ? _raw_spin_unlock+0x24/0x40 [ 540.262167][ C1] ? inode_wait_for_writeback+0x1b0/0x200 [ 540.268325][ C1] ? shmem_free_in_core_inode+0xb0/0xb0 [ 540.273914][ C1] ? do_raw_spin_lock+0x11d/0x280 [ 540.279031][ C1] ? bit_waitqueue+0x30/0x30 [ 540.283760][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 540.289124][ C1] ? shmem_free_in_core_inode+0xb0/0xb0 [ 540.294926][ C1] evict+0x485/0x870 [ 540.299164][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 540.304345][ C1] ? proc_nr_inodes+0x2f0/0x2f0 [ 540.309752][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 540.315396][ C1] ? _raw_spin_unlock+0x24/0x40 [ 540.320312][ C1] ? iput+0x768/0x980 [ 540.324793][ C1] __dentry_kill+0x431/0x650 [ 540.329467][ C1] dentry_kill+0xb8/0x290 [ 540.334021][ C1] ? dput+0x37/0x1d0 [ 540.338034][ C1] dput+0xfa/0x1d0 [ 540.341976][ C1] __fput+0x5e0/0x920 [ 540.346020][ C1] task_work_run+0x1ca/0x250 [ 540.351013][ C1] ? task_work_cancel+0x230/0x230 [ 540.356281][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 540.361886][ C1] do_exit+0x93e/0x2400 [ 540.366581][ C1] ? put_task_struct+0x80/0x80 [ 540.371494][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 540.377570][ C1] ? lock_chain_count+0x20/0x20 [ 540.382566][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 540.387660][ C1] do_group_exit+0x217/0x2d0 [ 540.392405][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 540.397750][ C1] get_signal+0x1272/0x1350 [ 540.402608][ C1] arch_do_signal_or_restart+0xb0/0x1230 [ 540.412488][ C1] ? do_futex+0x310/0x320 [ 540.417218][ C1] ? __might_sleep+0xd0/0xd0 [ 540.421960][ C1] ? __ia32_sys_get_robust_list+0x80/0x80 [ 540.427858][ C1] ? get_sigframe_size+0x10/0x10 [ 540.433018][ C1] ? blkcg_maybe_throttle_current+0x19f/0xa60 [ 540.439573][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 540.444941][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 540.450542][ C1] exit_to_user_mode_loop+0x70/0x110 [ 540.456047][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 540.461725][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 540.467335][ C1] do_syscall_64+0x58/0xa0 [ 540.471888][ C1] ? clear_bhb_loop+0x60/0xb0 [ 540.476709][ C1] ? clear_bhb_loop+0x60/0xb0 [ 540.481451][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 540.487486][ C1] RIP: 0033:0x7fd7f778ebe9 [ 540.491928][ C1] Code: Unable to access opcode bytes at 0x7fd7f778ebbf. [ 540.499075][ C1] RSP: 002b:00007fd7f85a80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 540.507971][ C1] RAX: fffffffffffffe00 RBX: 00007fd7f79c6278 RCX: 00007fd7f778ebe9 [ 540.516178][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd7f79c6278 [ 540.524292][ C1] RBP: 00007fd7f79c6270 R08: 0000000000000000 R09: 0000000000000000 [ 540.532969][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 540.541264][ C1] R13: 00007fd7f79c6308 R14: 00007fff363b1120 R15: 00007fff363b1208 [ 540.549314][ C1] [ 540.552630][ C1] Kernel Offset: disabled [ 540.557135][ C1] Rebooting in 86400 seconds..