last executing test programs: 12.630586893s ago: executing program 0 (id=1266): gettid() setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req={0x6, 0x87, 0x8, 0x7fff}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) accept4$alg(r3, 0x0, 0x0, 0x80000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x0, &(0x7f0000000c00)=ANY=[]) rename(&(0x7f0000001540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) io_setup(0x20000000001005, 0x0) 12.605276363s ago: executing program 4 (id=1267): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x1a, r1, 0x1, 0xf, 0x6, @multicast}, 0x14) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064004000475400", 0xd, 0x0, &(0x7f0000000140)={0x11, 0x8100, r1}, 0x14) 12.201449049s ago: executing program 4 (id=1270): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x1}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f00000000c0)={'wlan1\x00'}) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mount_setattr(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0) 10.410025062s ago: executing program 4 (id=1276): socket$nl_route(0x10, 0x3, 0x0) add_key$user(&(0x7f0000000100), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000180)="9e", 0x1, 0xfffffffffffffffa) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x54, 0xa, 0x2, "3258c546dacccfae1e008faa00000000f4ff4000", 0x50424752}) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0xfffd, 0x0, @loopback, 0xffffffff}, 0x69) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x100, 0xe000000, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000009180000000000"], 0x18}}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 8.596762656s ago: executing program 4 (id=1278): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff30"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0xfffffffffffffcd2, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 8.186197641s ago: executing program 0 (id=1280): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000100"/20], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) fsetxattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="6274f2660900aaaaaaa8aa"], &(0x7f0000000400)='<#\xda\x00', 0x4, 0x1) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6d8a, &(0x7f0000000300)={0x0, 0x37b5, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_emit_ethernet(0x36, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86158e6bc8d5dd606410a600000000fc020000000000000000000000000000fe88000000000000000000"], 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_POLL_ADD) io_uring_enter(r4, 0x2def, 0x4000, 0x0, 0x0, 0x0) userfaultfd(0x80801) request_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000001400)={'syz', 0x1}, &(0x7f0000001440)='/\x00', 0xfffffffffffffffe) add_key(&(0x7f0000000580)='pkcs7_test\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f00000004c0)="0c04d974619b89bf81ee56a8ec1df0ef26b630d26adbecbc21c4ae163fa158b400774c00ddef03a025e4f8b2a4be9b5f214bc695d3aa03a99544b2dbefe788d8c2a56b1048e98d8c407aea35de35d692363c4f07728315297a96bc823cf2f13877dae9a6065cb812dc42cb908b317169b0b914481c8420d9a5361b18e6f946bb78441578e20c0b15262b3bc55c19a98610e4de755f53fee0ce15e91724db30c6e1305404723b71653a3f40b3408b2543892c52a3f80f629870f2c7145a", 0xbd, 0xfffffffffffffffe) r7 = socket$nl_route(0x10, 0x3, 0x0) shmget(0x3, 0x2000, 0x78000080, &(0x7f0000ffc000/0x2000)=nil) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a8014000700fe8800000000000000ff0100000001011400350077673100000000000000000000000000c3ad57af4369684e66deb5b826b88eb6bc0be78ee9ec4b0000000000000009f5619f37f4ea777c803db5b3492ccdc0ef059517a9d523a9a7d8dada777d8f3e0ea349d006569e0b5743e3b0d517afcf8fdd90304ac8ef14796cbf4fd4f000b5a06dee0ffa9a33cb002d9600000000fa000000577a46d06d445b9e2d4db506000000bb0e199c75dc768fe3d54d2d6028438ee4bf72a3abf01b8925518c27523847fcb6e1"], 0x50}}, 0x0) socket$isdn(0x22, 0x3, 0x24) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r8, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r9, 0x0, 0x0, 0x30, 0x0, @in6={0xa, 0x4e23, 0x1, @loopback, 0x5}, @ib={0x1b, 0x0, 0xc, {"7d735931001016095e000303ff010001"}, 0x10001}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r8, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r9}}, 0x10) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="920c78d2f5dd238b"], 0x10}}, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r8, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) 8.143289462s ago: executing program 3 (id=1281): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x0) ftruncate(0xffffffffffffffff, 0x800) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x4, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r3, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='attr/current\x00') read$FUSE(r4, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000003, &(0x7f0000000000), 0x1, 0x4f3, &(0x7f0000000bc0)="$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") r5 = add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000011c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20044e, &(0x7f00000019c0)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe={'stripe', 0x3d, 0x401}}, {@test_dummy_encryption_v1}, {@data_journal}], [{@subj_type={'subj_type', 0x3d, ' hash='}}, {@obj_role={'obj_role', 0x3d, 'fscontext'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}, 0x3, 0x45d, &(0x7f0000000500)="$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") prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffe000/0x2000)=nil) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$restrict_keyring(0xa, r5, 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000040)={r5, 0x9, 0x25}, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'nhpoly1305\x00'}}, &(0x7f0000000140)="98f6637c139cdb1ee1", &(0x7f00000001c0)=""/37) 6.936776988s ago: executing program 3 (id=1282): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xbc4119ec97858a0}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet_smc(0x2b, 0x1, 0x0) openat$sequencer(0xffffff9c, &(0x7f00000001c0), 0x80800, 0x0) r3 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x481, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r3, 0x80045113, 0x0) r4 = memfd_create(&(0x7f0000000200)='\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xfe\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xa8ddj\x03\xbd\x16\x93\xb9r\x04h\xaa\x1aT\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\xa3[\x00\xa9C%}C\xf4c\xba\xf9H\x98}<\x98m#\xf5\x9e\xd3\xea\x00\x00\x00\x00', 0x3) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) symlink(0x0, &(0x7f00000059c0)='./file0\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, 0x0, 0x0) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000080)={0x455, 0x9f, 0x202, 0x5, 0x8, 0x1, 0xf37, 0xfffffffb}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) listen(r5, 0x5) 6.726434001s ago: executing program 1 (id=1283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_get$uid(0x3, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='tunl0\x00', 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="140001140040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r5 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r5, @ANYRES8=0x0, @ANYRES8=r3, @ANYRESHEX], 0x50}}, 0x40008014) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x0) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r7) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r8, 0x223, 0x0, 0x10000000, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x80) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r9, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40004) syz_genetlink_get_family_id$nfc(&(0x7f0000000740), r6) syz_genetlink_get_family_id$nbd(&(0x7f0000000a00), r6) 5.689354634s ago: executing program 1 (id=1285): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sysfs(0xffffffffffffff9c, 0x0, 0x80c00, 0x8) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x0, 0x40000133}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5.25061719s ago: executing program 4 (id=1286): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x1}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f00000000c0)={'wlan1\x00'}) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mount_setattr(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0) 5.050508073s ago: executing program 0 (id=1287): r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000380)={'stack ', ':\x00~\x14-\x90\x14\x05\x00\x8fQhj\x1b\x04\xe5\x8d\xa1\xc2\xaa-\xc7gD#\x03\x1c\xee\xaa\xdd\x80\x9e/\x19{S\x15\xfe\xbaO\xae\xa1z,\xde-\x8fKN\x86g\x9b\xe4\xfe\xae/\x90\xd8^O\x86\x81\x84\xabq\xeb\x8b;F\xe9\xee\xc8\xd1\xb4Q\x05\x14\xe7\xa9c(0D7[\xccB\xe1Y\x99\x05\xae\xba\x00\xc4\b1\x84\xd6\b\xb0\xf0\x9a\x98\x85;\xffUq9:\xaf\xa2\x83\x88d\xc0\xe5\xcfF\x144}\x02\xb9\xb1\x85\x7fx\xe6\'\x8c\x898\'eD\xcbj\xde;+\n1\xd4\x15\xf9Q\xacw\xcfS\xed\x80\fkt\xed\xdb|\x10\xbd\xbe\xf1\x94\x99\xe1?\x10\xda\xc7\xed['}, 0xb3) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.000125373s ago: executing program 1 (id=1288): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f00000ff000/0x14000)=nil, 0x14000, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r4, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) 4.069760765s ago: executing program 0 (id=1289): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) 3.74662003s ago: executing program 0 (id=1290): gettid() setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req={0x6, 0x87, 0x8, 0x7fff}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) accept4$alg(r3, 0x0, 0x0, 0x80000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x0, &(0x7f0000000c00)=ANY=[]) rename(&(0x7f0000001540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) io_setup(0x20000000001005, 0x0) 3.74633259s ago: executing program 2 (id=1291): syz_mount_image$exfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000040)={[{@errors_remount}, {@keep_last_dots}, {@gid}, {@sys_tz}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@errors_continue}, {@gid}, {@errors_remount}, {@errors_continue}, {@dmask}, {@discard}]}, 0x1, 0x152a, &(0x7f0000001ac0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, &(0x7f0000000040), 0x0}, 0x20) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x28242) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16, @ANYBLOB="0100acbd7000ffdb17d40600000008000100", @ANYRES32=0x0, @ANYBLOB="08000e00b4000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x10) 3.324585436s ago: executing program 1 (id=1292): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x0) ftruncate(0xffffffffffffffff, 0x800) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x4, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r3, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='attr/current\x00') read$FUSE(r4, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000003, &(0x7f0000000000), 0x1, 0x4f3, &(0x7f0000000bc0)="$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") r5 = add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000011c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20044e, &(0x7f00000019c0)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe={'stripe', 0x3d, 0x401}}, {@test_dummy_encryption_v1}, {@data_journal}], [{@subj_type={'subj_type', 0x3d, ' hash='}}, {@obj_role={'obj_role', 0x3d, 'fscontext'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}, 0x3, 0x45d, &(0x7f0000000500)="$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") prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffe000/0x2000)=nil) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$restrict_keyring(0xa, r5, 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000040)={r5, 0x9, 0x25}, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'nhpoly1305\x00'}}, &(0x7f0000000140)="98f6637c139cdb1ee1", &(0x7f00000001c0)=""/37) 2.338174749s ago: executing program 1 (id=1293): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_emit_ethernet(0x246, &(0x7f0000000480)={@broadcast, @link_local, @val={@void, {0x8100, 0x1, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000308", 0x20c, 0x3a, 0x0, @private1, @local, {[], @mlv2_report={0x8f, 0x0, 0x0, 0x1ff, 0x6, [{0x9, 0x2, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff, 0x4]}, {0x6, 0x1, 0x2, @loopback, [@local, @private1], [0x1e3e]}, {0x2, 0x1, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, [@mcast2, @private0, @private1, @local, @loopback], [0x4]}, {0x0, 0x2, 0x6, @rand_addr=' \x01\x00', [@mcast2, @mcast2, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0xd}, @mcast2], [0x42, 0x9]}, {0x3, 0x0, 0x9, @private2, [@ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0x42}, @mcast1, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1]}, {0x4, 0x5, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, [], [0x9, 0x4, 0x4, 0x4, 0xfff]}]}}}}}}, 0x0) r3 = dup(0xffffffffffffffff) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800006b02"]) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000003b40)={'filter\x00', 0x7, 0x4, 0x3c0, 0x1f0, 0xe8, 0x1f0, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x2, 0x7}}}, {{@arp={@multicast2, @empty, 0xff000000, 0xffffff00, 0x5, 0xf7, {@mac=@multicast, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x3, 0xfffe, 0x43fa, 0xde, 0x5, 0x0, 'vlan0\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x0, 0x1}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x91, {0xd7f}}}}, {{@arp={@loopback, @multicast1, 0xff, 0xff, 0xa, 0x10, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x0, 0xff, 0x6, 0x0, 0xfe00, 0x7ff, 'bridge_slave_1\x00', 'dummy0\x00', {}, {}, 0x0, 0x444}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x41, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) 2.304731539s ago: executing program 4 (id=1294): syz_emit_ethernet(0x42, &(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYRESDEC], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8f4, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x490420, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r6, 0x40806685, &(0x7f0000000180)={0x81, 0x3}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000840)={[{@data_ordered}, {@orlov}, {@data_err_abort}, {@init_itable}, {@dioread_nolock}, {@grpjquota, 0x2e}, {@oldalloc}, {@errors_continue}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x0, 0x4da, &(0x7f0000000140)="$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") 2.21060145s ago: executing program 3 (id=1295): socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x3fe, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0x4}, 'port0\x00', 0x786520dbf34c80ff, 0x20a03, 0x122, 0x0, 0x0, 0xc, 0x400, 0x0, 0x0, 0x87}) socket$packet(0x11, 0xa, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2402c015}, 0x44850) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6d8a, &(0x7f0000000300)={0x0, 0x37b2, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x10, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.019980066s ago: executing program 2 (id=1296): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x46}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 869.857588ms ago: executing program 3 (id=1297): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32) 854.624598ms ago: executing program 2 (id=1298): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sysfs(0xffffffffffffff9c, 0x0, 0x80c00, 0x8) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x0, 0x40000133}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 659.395581ms ago: executing program 2 (id=1299): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 535.172783ms ago: executing program 3 (id=1300): unshare(0x500) r0 = getpgrp(0xffffffffffffffff) ptrace(0x4208, r0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x109001, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r3, 0xc048aec8, &(0x7f00000005c0)) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) write$rfkill(0xffffffffffffffff, &(0x7f0000000100)={0x1, 0x1, 0x0, 0x0, 0x1}, 0x8) write$rfkill(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'team_slave_0\x00', 0x52d35ce30131f272}) syz_clone(0x100b300, 0x0, 0x0, 0x0, 0x0, 0x0) 477.704293ms ago: executing program 2 (id=1301): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8010) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x7ff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 230.573956ms ago: executing program 2 (id=1302): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000001300)=""/4089, 0xff9) socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) r1 = gettid() prlimit64(r1, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005080000024d56"]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtclass={0x40, 0x28, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0x3, 0xffe0}, {0x9, 0xf}}, [@tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x27, 0x7}}, @tclass_kind_options=@c_red={0x8}]}, 0x40}}, 0x44881) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e21, 0x800004, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) 212.139607ms ago: executing program 3 (id=1303): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) poll(&(0x7f0000000040)=[{r0, 0x2423}], 0x1, 0xfffeffff) ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf02, 0x0) 22.517809ms ago: executing program 0 (id=1304): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x0) ftruncate(0xffffffffffffffff, 0x800) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x4, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r3, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='attr/current\x00') read$FUSE(r4, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000003, &(0x7f0000000000), 0x1, 0x4f3, &(0x7f0000000bc0)="$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") r5 = add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000011c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20044e, &(0x7f00000019c0)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe={'stripe', 0x3d, 0x401}}, {@test_dummy_encryption_v1}, {@data_journal}], [{@subj_type={'subj_type', 0x3d, ' hash='}}, {@obj_role={'obj_role', 0x3d, 'fscontext'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}, 0x3, 0x45d, &(0x7f0000000500)="$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") prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffe000/0x2000)=nil) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$restrict_keyring(0xa, r5, 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000040)={r5, 0x9, 0x25}, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'nhpoly1305\x00'}}, &(0x7f0000000140)="98f6637c139cdb1ee1", &(0x7f00000001c0)=""/37) 0s ago: executing program 1 (id=1305): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) dup2(0xffffffffffffffff, r2) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) capset(0x0, 0x0) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r6 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, 0x0) syz_io_uring_submit(r7, 0x0, 0x0) io_uring_enter(r6, 0x48e9, 0x0, 0x2, 0x0, 0x0) bind$packet(r3, &(0x7f0000000080)={0x11, 0xf7, r5, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x14) r8 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000040)='source', &(0x7f0000001bc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b HID v0.00 Device [syz1] on syz0 [ 89.578642][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 89.664560][ T4515] loop1: detected capacity change from 0 to 512 [ 90.619048][ T4515] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.45: inode #1: comm syz.1.45: iget: illegal inode # [ 90.634494][ T4515] EXT4-fs (loop1): Remounting filesystem read-only [ 90.641500][ T4515] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.45: error while reading EA inode 1 err=-117 [ 90.648607][ T4518] netlink: 'syz.3.48': attribute type 9 has an invalid length. [ 90.656548][ T4515] EXT4-fs (loop1): Remounting filesystem read-only [ 90.667815][ T4515] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 90.681126][ T4515] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.45: inode #1: comm syz.1.45: iget: illegal inode # [ 90.695317][ T4515] EXT4-fs (loop1): Remounting filesystem read-only [ 90.701871][ T4515] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.45: error while reading EA inode 1 err=-117 [ 90.714584][ T4515] EXT4-fs (loop1): Remounting filesystem read-only [ 90.721370][ T4515] EXT4-fs (loop1): 1 orphan inode deleted [ 90.727321][ T4515] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 90.731499][ T4521] loop4: detected capacity change from 0 to 256 [ 90.759880][ T4518] loop3: detected capacity change from 0 to 1024 [ 90.831935][ T4518] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.868563][ T4521] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 91.164443][ T26] audit: type=1800 audit(1746091397.884:2): pid=4521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.47" name="file1" dev="loop4" ino=1048596 res=0 errno=0 [ 91.187785][ T4245] EXT4-fs (loop1): unmounting filesystem. [ 91.640180][ T4521] syz.4.47: attempt to access beyond end of device [ 91.640180][ T4521] loop4: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 91.992617][ T4539] binder: BINDER_SET_CONTEXT_MGR already set [ 92.240611][ T4539] binder: 4538:4539 ioctl 4018620d 200000000040 returned -16 [ 92.891231][ T4553] loop0: detected capacity change from 0 to 512 [ 92.899894][ T4554] netlink: 36 bytes leftover after parsing attributes in process `syz.3.55'. [ 93.393545][ C0] sched: RT throttling activated [ 93.475586][ T4557] loop4: detected capacity change from 0 to 512 [ 93.482781][ T4557] EXT4-fs: Ignoring removed orlov option [ 93.599888][ T4557] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 93.639990][ T4557] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 93.750280][ T4555] program syz.3.55 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.160683][ T4553] EXT4-fs (loop0): Test dummy encryption mode enabled [ 94.184771][ T4553] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 94.210778][ T4553] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 94.302112][ T4553] EXT4-fs (loop0): 1 truncate cleaned up [ 94.311733][ T4553] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 94.550191][ T4568] loop1: detected capacity change from 0 to 256 [ 94.609828][ T4566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.59'. [ 94.622120][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 94.663763][ T4566] netlink: 'syz.4.59': attribute type 5 has an invalid length. [ 94.696499][ T4566] netlink: 28 bytes leftover after parsing attributes in process `syz.4.59'. [ 94.710069][ T4566] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 94.719009][ T4566] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 94.734337][ T4566] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 94.776939][ T4566] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 95.106748][ T4566] device geneve2 entered promiscuous mode [ 96.156455][ T4577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'. [ 97.377727][ T4576] loop3: detected capacity change from 0 to 4096 [ 97.453897][ T4576] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 97.585826][ T4587] "syz.0.64" (4587) uses obsolete ecb(arc4) skcipher [ 99.971268][ T4614] loop2: detected capacity change from 0 to 512 [ 99.978494][ T4614] EXT4-fs: Ignoring removed orlov option [ 101.344837][ T4614] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 101.359600][ T4614] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 102.068209][ T4623] binder_alloc: binder_alloc_mmap_handler: 4621 200000ffc000-200001000000 already mapped failed -16 [ 102.080987][ T4623] fuse: Bad value for 'fd' [ 102.086175][ T4623] xt_CT: You must specify a L4 protocol and not use inversions on it [ 103.502105][ T4634] loop1: detected capacity change from 0 to 512 [ 103.675950][ T4634] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 103.695173][ T4634] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 103.723299][ T4634] EXT4-fs error (device loop1): ext4_acquire_dquot:6802: comm syz.1.77: Failed to acquire dquot type 0 [ 103.754880][ T4634] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 103.803684][ T4634] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 103.813376][ T4634] EXT4-fs error (device loop1): ext4_acquire_dquot:6802: comm syz.1.77: Failed to acquire dquot type 0 [ 103.915819][ T4634] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 103.973100][ T4634] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 104.023958][ T4634] EXT4-fs error (device loop1): ext4_acquire_dquot:6802: comm syz.1.77: Failed to acquire dquot type 0 [ 104.134836][ T4634] EXT4-fs (loop1): 1 orphan inode deleted [ 104.144697][ T4634] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 104.206280][ T4634] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.612465][ T4652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.81'. [ 104.966090][ T4653] xt_TPROXY: Can be used only with -p tcp or -p udp [ 105.565919][ T4245] EXT4-fs (loop1): unmounting filesystem. [ 105.684882][ T4656] loop2: detected capacity change from 0 to 8192 [ 105.831968][ T4656] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 106.132938][ T4656] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 106.362672][ T4656] REISERFS (device loop2): using ordered data mode [ 106.423670][ T4656] reiserfs: using flush barriers [ 106.428811][ T4663] 9pnet: p9_errstr2errno: server reported unknown error @cF S+v3c/ [ 106.478643][ T4656] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 106.519734][ T4656] REISERFS (device loop2): checking transaction log (loop2) [ 106.532694][ T4656] REISERFS (device loop2): Using r5 hash to sort names [ 106.543281][ T4656] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 106.949660][ T4671] loop0: detected capacity change from 0 to 512 [ 106.957592][ T4671] EXT4-fs: Ignoring removed orlov option [ 106.966053][ T4671] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 106.978649][ T4671] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 107.053652][ T4237] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 110.174847][ T4699] loop0: detected capacity change from 0 to 40427 [ 110.239947][ T4699] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 110.247603][ T4699] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 110.260238][ T4699] F2FS-fs (loop0): build fault injection attr: rate: 17008, type: 0x3ffff [ 110.269133][ T4699] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x1f8 [ 110.283844][ T4699] F2FS-fs (loop0): invalid crc value [ 110.337136][ T4695] loop4: detected capacity change from 0 to 2048 [ 110.382342][ T4699] F2FS-fs (loop0): Found nat_bits in checkpoint [ 110.438092][ T4699] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 110.445566][ T4699] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 110.666586][ T4695] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 112.341162][ T4252] syz-executor: attempt to access beyond end of device [ 112.341162][ T4252] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 112.403425][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 112.563754][ T4295] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 112.787454][ T4295] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 113.067096][ T4727] loop4: detected capacity change from 0 to 512 [ 113.077152][ T4727] EXT4-fs: Ignoring removed orlov option [ 113.099442][ T4727] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 113.112625][ T4727] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 113.585995][ T4295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.601121][ T4295] usb 2-1: config 0 descriptor?? [ 113.612279][ T4295] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 113.648854][ T4526] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 113.814029][ T4295] gp8psk: usb in 128 operation failed. [ 113.824235][ T4295] gp8psk: usb in 137 operation failed. [ 113.829748][ T4295] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 114.092117][ T4733] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 114.549742][ T4295] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 114.559281][ T4295] usb 2-1: media controller created [ 114.582430][ T4295] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 114.622260][ T4295] gp8psk_fe: Frontend attached [ 114.674507][ T4295] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 114.814946][ T4295] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 115.652851][ T4295] gp8psk: usb in 138 operation failed. [ 115.669029][ T4295] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 115.719706][ T4295] gp8psk: found Genpix USB device pID = 203 (hex) [ 115.796262][ T4295] usb 2-1: USB disconnect, device number 2 [ 116.037369][ T4295] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 118.213289][ T4773] "syz.1.111" (4773) uses obsolete ecb(arc4) skcipher [ 118.495089][ T4776] loop2: detected capacity change from 0 to 512 [ 118.505433][ T4776] EXT4-fs: Ignoring removed orlov option [ 119.367537][ T4776] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 119.380293][ T4776] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 120.669172][ T4791] loop0: detected capacity change from 0 to 512 [ 120.840961][ T4791] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 121.038222][ T4791] EXT4-fs (loop0): 1 truncate cleaned up [ 121.066328][ T4791] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 123.336333][ T4805] loop3: detected capacity change from 0 to 32768 [ 123.504825][ T4805] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 123.549853][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 125.307273][ T4246] ocfs2: Unmounting device (7,3) on (node local) [ 127.533370][ T4849] Bluetooth: MGMT ver 1.22 [ 129.577669][ T4874] loop1: detected capacity change from 0 to 1024 [ 129.661999][ T4874] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 129.896654][ T4881] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 130.805258][ T4245] EXT4-fs (loop1): unmounting filesystem. [ 130.893927][ T4893] loop2: detected capacity change from 0 to 512 [ 130.903056][ T4895] netlink: 16 bytes leftover after parsing attributes in process `syz.3.149'. [ 131.010540][ T4893] EXT4-fs (loop2): orphan cleanup on readonly fs [ 131.052048][ T4893] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 131.744989][ T4893] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.147: invalid indirect mapped block 4278190080 (level 0) [ 131.889340][ T4893] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.147: invalid indirect mapped block 1 (level 1) [ 131.964553][ T4893] EXT4-fs (loop2): 1 truncate cleaned up [ 131.987559][ T4893] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 132.032309][ T4893] EXT4-fs (loop2): unmounting filesystem. [ 132.163494][ T4872] loop0: detected capacity change from 0 to 32768 [ 132.250211][ T4893] netlink: 392 bytes leftover after parsing attributes in process `syz.2.147'. [ 132.317422][ T4872] XFS (loop0): Mounting V5 Filesystem [ 132.389297][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.395693][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.499429][ T4872] XFS (loop0): Ending clean mount [ 132.636727][ T4252] XFS (loop0): Unmounting Filesystem [ 133.887851][ T4927] loop0: detected capacity change from 0 to 16 [ 134.106173][ T4927] loop0: detected capacity change from 0 to 512 [ 134.124840][ T4927] EXT4-fs error (device loop0): __ext4_fill_super:5390: inode #2: comm syz.0.152: iget: bad i_size value: -1 [ 134.137710][ T4927] EXT4-fs (loop0): get root inode failed [ 134.143448][ T4927] EXT4-fs (loop0): mount failed [ 136.829411][ T4938] loop4: detected capacity change from 0 to 1024 [ 136.846210][ T4941] loop0: detected capacity change from 0 to 128 [ 136.911170][ T4941] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 136.962436][ T4938] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 137.020162][ T4941] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.253939][ T4938] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 138.373119][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 139.081791][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 139.513817][ T4293] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 139.905436][ T4293] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 139.964986][ T4293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.021722][ T4293] usb 1-1: config 0 descriptor?? [ 140.143053][ T4293] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 140.153848][ T4978] loop3: detected capacity change from 0 to 512 [ 140.186460][ T4978] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.168: casefold flag without casefold feature [ 140.209981][ T4978] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.168: couldn't read orphan inode 15 (err -117) [ 140.222208][ T4978] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 140.894704][ T4293] gp8psk: usb in 128 operation failed. [ 140.920118][ T4293] gp8psk: usb in 137 operation failed. [ 141.951366][ T4293] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 142.371383][ T4293] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 142.453418][ T4293] usb 1-1: media controller created [ 142.551938][ T4246] EXT4-fs (loop3): unmounting filesystem. [ 142.816050][ T4293] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 142.920222][ T4293] gp8psk_fe: Frontend attached [ 142.965196][ T4293] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 142.996977][ T4293] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 143.254062][ T4293] gp8psk: usb in 138 operation failed. [ 143.451976][ T4293] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 143.466351][ T4293] gp8psk: found Genpix USB device pID = 203 (hex) [ 143.670955][ T4293] usb 1-1: USB disconnect, device number 2 [ 144.198909][ T5012] Zero length message leads to an empty skb [ 144.274705][ T4293] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 144.390643][ T5016] device veth1_macvtap left promiscuous mode [ 144.400879][ T5016] device macsec0 entered promiscuous mode [ 144.698405][ T5025] loop0: detected capacity change from 0 to 256 [ 146.026502][ T5025] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 146.992140][ T5048] loop2: detected capacity change from 0 to 256 [ 147.136273][ T5048] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 148.092194][ T5063] loop0: detected capacity change from 0 to 16 [ 148.331766][ T5067] loop3: detected capacity change from 0 to 512 [ 148.342386][ T4237] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 148.373114][ T5063] loop0: detected capacity change from 0 to 512 [ 148.382232][ T5074] loop4: detected capacity change from 0 to 128 [ 148.452394][ T5063] EXT4-fs error (device loop0): __ext4_fill_super:5390: inode #2: comm syz.0.195: iget: bad i_size value: -1 [ 148.465977][ T5063] EXT4-fs (loop0): get root inode failed [ 148.471674][ T5063] EXT4-fs (loop0): mount failed [ 148.791813][ T5067] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.197: corrupted in-inode xattr [ 148.803718][ T4237] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 149.119533][ T5081] loop4: detected capacity change from 0 to 128 [ 150.864032][ T5081] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 150.894446][ T5081] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.271125][ T5067] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.197: couldn't read orphan inode 15 (err -117) [ 151.303299][ T5067] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 151.430179][ T5085] loop2: detected capacity change from 0 to 256 [ 151.593906][ T4246] EXT4-fs (loop3): unmounting filesystem. [ 151.601515][ T5085] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 152.083815][ T5093] loop4: detected capacity change from 0 to 256 [ 153.743106][ T5102] netlink: 'syz.0.206': attribute type 1 has an invalid length. [ 154.153708][ T5102] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.364573][ T5104] bond1: (slave veth3): Enslaving as an active interface with a down link [ 154.556616][ T5114] device veth1 entered promiscuous mode [ 154.895822][ T5114] device veth1 left promiscuous mode [ 155.089974][ T5114] bond1: (slave vlan2): making interface the new active one [ 155.124792][ T5114] device veth1 entered promiscuous mode [ 155.150589][ T5114] device vlan2 entered promiscuous mode [ 155.199888][ T5114] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 155.209236][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 155.670300][ T4290] kernel write not supported for file /sg0 (pid: 4290 comm: kworker/1:3) [ 156.862009][ T5134] loop2: detected capacity change from 0 to 2048 [ 156.963968][ T5134] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 157.387694][ T5134] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 157.444708][ T5134] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 157.467621][ T5134] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 157.503927][ T5134] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 157.538978][ T5134] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 158.452705][ T5152] loop3: detected capacity change from 0 to 256 [ 159.029597][ T5163] xt_connbytes: Forcing CT accounting to be enabled [ 159.036665][ T5163] Cannot find add_set index 0 as target [ 159.095077][ T5163] loop0: detected capacity change from 0 to 1024 [ 159.761116][ T5163] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 159.771700][ T5163] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 159.781210][ T5163] EXT4-fs error (device loop0): ext4_acquire_dquot:6802: comm syz.0.221: Failed to acquire dquot type 0 [ 159.799325][ T5163] EXT4-fs (loop0): 1 truncate cleaned up [ 159.805323][ T5163] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 160.130201][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 162.008007][ T5192] loop0: detected capacity change from 0 to 512 [ 162.096404][ T5192] EXT4-fs (loop0): orphan cleanup on readonly fs [ 162.109029][ T5192] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #4: comm syz.0.225: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 162.134783][ T5192] EXT4-fs error (device loop0): ext4_quota_enable:7013: comm syz.0.225: Bad quota inode: 4, type: 1 [ 162.147472][ T5192] EXT4-fs warning (device loop0): ext4_enable_quotas:7054: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 162.162824][ T5192] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 162.169593][ T5192] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 163.591843][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 165.441412][ T5219] loop2: detected capacity change from 0 to 1024 [ 165.559416][ T5222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.239'. [ 165.630273][ T5219] support for the xor transformation has been removed. [ 165.742041][ T4305] hfsplus: b-tree write err: -5, ino 4 [ 166.470548][ T5226] loop0: detected capacity change from 0 to 256 [ 169.058585][ T5247] loop4: detected capacity change from 0 to 16 [ 169.266028][ T4237] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 169.980877][ T5254] 9pnet_fd: Insufficient options for proto=fd [ 172.164097][ T4293] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 172.605386][ T4293] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.623793][ T4293] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 173.897600][ T4293] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 173.909292][ T4293] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 173.934576][ T4293] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 173.944098][ T4293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 173.952472][ T4293] usb 5-1: SerialNumber: syz [ 174.192351][ T4293] usb 5-1: 0:2 : does not exist [ 174.203819][ T4293] usb 5-1: unit 5 not found! [ 174.255323][ T4293] usb 5-1: USB disconnect, device number 2 [ 176.461387][ T5301] loop3: detected capacity change from 0 to 16 [ 176.588763][ T5302] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 176.604634][ T5302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.612763][ T5302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 176.912287][ T4237] udevd[4237]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.226813][ T5304] 9pnet_fd: Insufficient options for proto=fd [ 177.799779][ T5310] loop0: detected capacity change from 0 to 512 [ 177.925305][ T5310] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 178.000259][ T5310] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 178.060880][ T5310] EXT4-fs error (device loop0): ext4_acquire_dquot:6802: comm syz.0.264: Failed to acquire dquot type 0 [ 178.128541][ T5310] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 178.343907][ T5310] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 178.452844][ T5310] EXT4-fs error (device loop0): ext4_acquire_dquot:6802: comm syz.0.264: Failed to acquire dquot type 0 [ 178.677674][ T5310] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 178.759388][ T5310] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 178.831526][ T5310] EXT4-fs error (device loop0): ext4_acquire_dquot:6802: comm syz.0.264: Failed to acquire dquot type 0 [ 178.911293][ T5310] EXT4-fs (loop0): 1 orphan inode deleted [ 178.929250][ T5310] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 178.953879][ T5310] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.991954][ T4353] device vlan2 left promiscuous mode [ 179.487170][ T5326] xt_TPROXY: Can be used only with -p tcp or -p udp [ 180.137774][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 182.142823][ T5347] loop0: detected capacity change from 0 to 16 [ 183.072645][ T5356] netlink: 12 bytes leftover after parsing attributes in process `syz.4.276'. [ 183.571409][ T4237] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 183.620691][ T5347] loop0: detected capacity change from 0 to 512 [ 183.803709][ T5347] EXT4-fs error (device loop0): __ext4_fill_super:5390: inode #2: comm syz.0.274: iget: bad i_size value: -1 [ 183.816021][ T5347] EXT4-fs (loop0): get root inode failed [ 183.822418][ T5347] EXT4-fs (loop0): mount failed [ 185.866742][ T4261] Bluetooth: hci1: command 0x0406 tx timeout [ 185.873685][ T4259] Bluetooth: hci3: command 0x0406 tx timeout [ 185.873729][ T4259] Bluetooth: hci0: command 0x0406 tx timeout [ 185.873762][ T4259] Bluetooth: hci2: command 0x0406 tx timeout [ 185.970182][ T5373] binder_alloc: binder_alloc_mmap_handler: 5370 200000ffc000-200001000000 already mapped failed -16 [ 186.002226][ T5373] fuse: Bad value for 'fd' [ 186.012008][ T5373] xt_CT: You must specify a L4 protocol and not use inversions on it [ 186.869725][ T5375] loop4: detected capacity change from 0 to 512 [ 186.937829][ T5375] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.281: casefold flag without casefold feature [ 186.959772][ T5375] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.281: couldn't read orphan inode 15 (err -117) [ 186.980760][ T5375] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 187.290321][ T5383] loop3: detected capacity change from 0 to 512 [ 187.525569][ T5387] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 187.537445][ T5387] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 189.017178][ T5383] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 189.118950][ T5383] EXT4-fs (loop3): 1 truncate cleaned up [ 189.156216][ T5383] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 189.205316][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 190.096413][ T5409] fuse: Bad value for 'fd' [ 190.103687][ T5396] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 190.158446][ T5396] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 190.222608][ T5396] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 190.320550][ T5396] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 190.383405][ T5396] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 190.438905][ T5396] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 190.516300][ T5396] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 190.591448][ T5396] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 190.602859][ T5396] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 190.612032][ T5396] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 190.625001][ T5396] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 190.631263][ T5396] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 190.642955][ T5396] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 190.652107][ T5396] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 190.662355][ T5396] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 190.788016][ T4246] EXT4-fs (loop3): unmounting filesystem. [ 190.825497][ T5413] loop4: detected capacity change from 0 to 16 [ 190.907615][ T5413] loop4: detected capacity change from 0 to 512 [ 190.914549][ T5414] loop2: detected capacity change from 0 to 1024 [ 190.935143][ T5413] EXT4-fs error (device loop4): __ext4_fill_super:5390: inode #2: comm syz.4.292: iget: bad i_size value: -1 [ 190.955557][ T5413] EXT4-fs (loop4): get root inode failed [ 190.961311][ T5413] EXT4-fs (loop4): mount failed [ 191.001477][ T5416] loop3: detected capacity change from 0 to 1024 [ 191.018713][ T5414] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 191.035996][ T127] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 191.036459][ T4239] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 191.068448][ T5414] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.088282][ T5424] netlink: 'syz.1.294': attribute type 10 has an invalid length. [ 191.147764][ T5424] netlink: 156 bytes leftover after parsing attributes in process `syz.1.294'. [ 191.242644][ T5416] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 191.253213][ T5416] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.384915][ T4261] Bluetooth: hci0: command 0x0c1a tx timeout [ 192.391036][ T4261] Bluetooth: hci1: command 0x0c1a tx timeout [ 192.736626][ T4259] Bluetooth: hci4: command 0x0c1a tx timeout [ 192.743982][ T4261] Bluetooth: hci3: command 0x0c1a tx timeout [ 192.744024][ T4260] Bluetooth: hci2: command 0x0c1a tx timeout [ 193.329602][ T4246] EXT4-fs (loop3): unmounting filesystem. [ 193.359418][ T127] usb 1-1: device descriptor read/all, error -71 [ 193.384857][ T4247] EXT4-fs (loop2): unmounting filesystem. [ 193.846000][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.868898][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.473554][ T4261] Bluetooth: hci1: command 0x0406 tx timeout [ 194.479637][ T4261] Bluetooth: hci0: command 0x0406 tx timeout [ 194.539848][ T5453] loop2: detected capacity change from 0 to 512 [ 194.607147][ T5453] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.299: casefold flag without casefold feature [ 194.620454][ T5453] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.299: couldn't read orphan inode 15 (err -117) [ 194.633654][ T5453] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 194.783695][ T4261] Bluetooth: hci3: command 0x0406 tx timeout [ 194.789826][ T4261] Bluetooth: hci4: command 0x0406 tx timeout [ 194.796119][ T4259] Bluetooth: hci2: command 0x0406 tx timeout [ 194.847863][ T5460] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 196.248792][ T4247] EXT4-fs (loop2): unmounting filesystem. [ 196.273081][ T5471] loop0: detected capacity change from 0 to 16 [ 196.321368][ T5472] loop3: detected capacity change from 0 to 512 [ 196.328009][ T4237] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 196.334188][ T5471] loop0: detected capacity change from 0 to 512 [ 196.381254][ T5472] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 196.402514][ T5471] EXT4-fs error (device loop0): __ext4_fill_super:5390: inode #2: comm syz.0.305: iget: bad i_size value: -1 [ 196.420969][ T5471] EXT4-fs (loop0): get root inode failed [ 196.426813][ T5471] EXT4-fs (loop0): mount failed [ 196.589995][ T5472] EXT4-fs (loop3): 1 truncate cleaned up [ 196.595958][ T5472] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 198.499545][ T5491] loop2: detected capacity change from 0 to 4096 [ 198.515202][ T5491] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 198.541344][ T5491] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 198.569076][ T5491] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 198.600591][ T5491] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 198.623614][ T4289] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 198.644001][ T5491] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 198.673773][ T5493] bridge0: port 3(vlan2) entered blocking state [ 198.680235][ T5493] bridge0: port 3(vlan2) entered disabled state [ 198.683656][ T5491] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 198.709337][ T5491] ntfs: volume version 3.1. [ 198.711002][ T5493] device vlan2 entered promiscuous mode [ 198.721354][ T5491] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 198.729906][ T5493] device bond0 entered promiscuous mode [ 198.743886][ T5491] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 198.757489][ T5493] device bond_slave_0 entered promiscuous mode [ 198.773810][ T5493] device bond_slave_1 entered promiscuous mode [ 198.792741][ T5491] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 198.811470][ T5493] bridge0: port 3(vlan2) entered blocking state [ 198.811830][ T5491] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 198.818356][ T5493] bridge0: port 3(vlan2) entered forwarding state [ 198.835450][ T4289] usb 4-1: config 0 has an invalid interface number: 20 but max is 1 [ 198.847888][ T4289] usb 4-1: config 0 has an invalid interface number: 24 but max is 1 [ 198.858640][ T4289] usb 4-1: config 0 has no interface number 0 [ 198.865469][ T4289] usb 4-1: config 0 has no interface number 1 [ 198.892474][ T4289] usb 4-1: config 0 interface 20 has no altsetting 0 [ 198.906009][ T4289] usb 4-1: New USB device found, idVendor=14aa, idProduct=0201, bcdDevice=8b.1d [ 198.925325][ T4289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.958194][ T4289] usb 4-1: config 0 descriptor?? [ 199.415803][ T5503] "syz.4.313" (5503) uses obsolete ecb(arc4) skcipher [ 200.595055][ T4289] usb 4-1: string descriptor 0 read error: -71 [ 200.608317][ T4246] EXT4-fs (loop3): unmounting filesystem. [ 200.642805][ T4289] dvb-usb: found a 'WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)' in cold state, will try to load a firmware [ 200.970665][ T4289] usb 4-1: Direct firmware load for dvb-usb-dtt200u-01.fw failed with error -2 [ 200.979950][ T4289] usb 4-1: Falling back to sysfs fallback for: dvb-usb-dtt200u-01.fw [ 201.990390][ T5513] loop3: detected capacity change from 0 to 512 [ 202.049269][ T5513] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.316: casefold flag without casefold feature [ 202.062313][ T5513] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.316: couldn't read orphan inode 15 (err -117) [ 202.078408][ T5513] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 204.052354][ T4246] EXT4-fs (loop3): unmounting filesystem. [ 204.621057][ T5535] loop3: detected capacity change from 0 to 256 [ 204.901918][ T5543] loop2: detected capacity change from 0 to 2048 [ 204.919731][ T5544] netlink: 72 bytes leftover after parsing attributes in process `syz.3.326'. [ 204.994644][ T5543] ext4: Unknown parameter 'smackfshat' [ 205.720733][ T4526] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 208.554782][ T5582] loop4: detected capacity change from 0 to 16 [ 208.711027][ T4526] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 208.768002][ T5585] loop3: detected capacity change from 0 to 256 [ 209.096121][ T5582] loop4: detected capacity change from 0 to 512 [ 209.157029][ T5582] EXT4-fs error (device loop4): __ext4_fill_super:5390: inode #2: comm syz.4.337: iget: bad i_size value: -1 [ 209.169165][ T5582] EXT4-fs (loop4): get root inode failed [ 209.174896][ T5582] EXT4-fs (loop4): mount failed [ 210.834218][ T5601] "syz.0.339" (5601) uses obsolete ecb(arc4) skcipher [ 211.038159][ T5606] loop4: detected capacity change from 0 to 1024 [ 211.103118][ T5606] EXT4-fs: Ignoring removed orlov option [ 211.125854][ T5606] EXT4-fs (loop4): Test dummy encryption mode enabled [ 211.181736][ T5606] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 212.197315][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 212.336119][ T5599] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 214.181851][ T5637] loop3: detected capacity change from 0 to 256 [ 214.485536][ T5641] 9pnet_virtio: no channels available for device syz [ 217.175384][ T5661] loop2: detected capacity change from 0 to 256 [ 217.257909][ T5661] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 219.900408][ T5698] loop2: detected capacity change from 0 to 256 [ 221.759272][ T5708] loop2: detected capacity change from 0 to 1024 [ 221.767477][ T5708] EXT4-fs: Ignoring removed orlov option [ 221.774158][ T5708] EXT4-fs (loop2): Test dummy encryption mode enabled [ 221.790010][ T5708] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 221.922787][ T5714] netlink: 36 bytes leftover after parsing attributes in process `syz.1.375'. [ 222.789797][ T4247] EXT4-fs (loop2): unmounting filesystem. [ 222.989362][ T5723] netlink: 32 bytes leftover after parsing attributes in process `syz.3.378'. [ 224.080370][ T5745] "syz.2.382" (5745) uses obsolete ecb(arc4) skcipher [ 225.794195][ T5723] netlink: 'syz.3.378': attribute type 10 has an invalid length. [ 226.014572][ T5723] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.214865][ T5723] bond0: (slave team0): Enslaving as an active interface with an up link [ 227.477157][ T5768] loop2: detected capacity change from 0 to 1024 [ 227.524526][ T5768] EXT4-fs: Ignoring removed orlov option [ 227.545466][ T5768] EXT4-fs (loop2): Test dummy encryption mode enabled [ 227.593109][ T5768] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 228.525063][ T4247] EXT4-fs (loop2): unmounting filesystem. [ 229.652902][ T5777] netlink: 14 bytes leftover after parsing attributes in process `syz.1.391'. [ 229.691675][ T5777] bridge0: port 3(vlan2) entered disabled state [ 229.985330][ T5777] device vlan2 left promiscuous mode [ 229.990630][ T5777] device bond0 left promiscuous mode [ 229.996088][ T5777] device bond_slave_0 left promiscuous mode [ 230.002068][ T5777] device bond_slave_1 left promiscuous mode [ 230.008433][ T5777] bridge0: port 3(vlan2) entered disabled state [ 230.025849][ T5777] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.048060][ T5777] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.064405][ T5777] bond0 (unregistering): Released all slaves [ 230.212103][ T5791] netlink: 36 bytes leftover after parsing attributes in process `syz.3.395'. [ 230.452377][ T5798] loop2: detected capacity change from 0 to 512 [ 230.497284][ T5798] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.398: casefold flag without casefold feature [ 230.510973][ T5798] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.398: couldn't read orphan inode 15 (err -117) [ 230.524221][ T5798] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 232.714756][ T4247] EXT4-fs (loop2): unmounting filesystem. [ 234.419588][ T5833] loop0: detected capacity change from 0 to 512 [ 234.474054][ T5830] device wlan0 entered promiscuous mode [ 234.525072][ T5833] EXT4-fs (loop0): orphan cleanup on readonly fs [ 234.565769][ T5833] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 234.594171][ T5833] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.406: invalid indirect mapped block 4278190080 (level 0) [ 234.663748][ T5833] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.406: invalid indirect mapped block 1 (level 1) [ 234.690181][ T5833] EXT4-fs (loop0): 1 truncate cleaned up [ 234.730386][ T5833] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 234.761164][ T5833] EXT4-fs (loop0): unmounting filesystem. [ 234.979182][ T5833] netlink: 392 bytes leftover after parsing attributes in process `syz.0.406'. [ 235.151179][ T5846] loop2: detected capacity change from 0 to 16 [ 235.211847][ T5846] loop2: detected capacity change from 0 to 512 [ 235.239740][ T5846] EXT4-fs error (device loop2): __ext4_fill_super:5390: inode #2: comm syz.2.409: iget: bad i_size value: -1 [ 235.252056][ T5846] EXT4-fs (loop2): get root inode failed [ 235.257841][ T5846] EXT4-fs (loop2): mount failed [ 235.281163][ T5848] loop4: detected capacity change from 0 to 512 [ 235.353691][ T5848] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.410: casefold flag without casefold feature [ 235.372581][ T5848] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.410: couldn't read orphan inode 15 (err -117) [ 235.392692][ T5848] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 239.948623][ T127] libceph: connect (1)[c::]:6789 error -101 [ 240.365578][ T5889] ceph: No mds server is up or the cluster is laggy [ 240.395702][ T127] libceph: mon0 (1)[c::]:6789 connect error [ 241.363274][ T5908] loop2: detected capacity change from 0 to 16 [ 241.450461][ T4526] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 241.486936][ T5908] loop2: detected capacity change from 0 to 512 [ 241.524345][ T5908] EXT4-fs error (device loop2): __ext4_fill_super:5390: inode #2: comm syz.2.422: iget: bad i_size value: -1 [ 241.536544][ T5908] EXT4-fs (loop2): get root inode failed [ 241.542247][ T5908] EXT4-fs (loop2): mount failed [ 241.642854][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 241.671114][ T4526] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 244.178450][ T5936] loop3: detected capacity change from 0 to 512 [ 244.357887][ T5936] EXT4-fs (loop3): orphan cleanup on readonly fs [ 244.402400][ T5936] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 244.432894][ T5936] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.427: invalid indirect mapped block 4278190080 (level 0) [ 248.209476][ T5936] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.427: invalid indirect mapped block 1 (level 1) [ 248.310288][ T5936] EXT4-fs (loop3): 1 truncate cleaned up [ 248.423728][ T5936] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 248.476731][ T5936] EXT4-fs (loop3): unmounting filesystem. [ 248.880697][ T5967] loop3: detected capacity change from 0 to 512 [ 249.072714][ T5967] __quota_error: 5 callbacks suppressed [ 249.072733][ T5967] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 249.093651][ T5967] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 249.103084][ T5967] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.434: Failed to acquire dquot type 0 [ 249.336568][ T5967] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 249.383657][ T5967] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 249.393293][ T5967] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.434: Failed to acquire dquot type 0 [ 249.676773][ T5967] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 249.860927][ T5967] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 250.091011][ T5967] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.434: Failed to acquire dquot type 0 [ 250.177849][ T5967] EXT4-fs (loop3): 1 orphan inode deleted [ 250.223293][ T5967] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 250.263940][ T5967] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.616383][ T5967] xt_TPROXY: Can be used only with -p tcp or -p udp [ 250.790385][ T4246] EXT4-fs (loop3): unmounting filesystem. [ 250.887585][ T5993] loop2: detected capacity change from 0 to 16 [ 250.963985][ T5993] loop2: detected capacity change from 0 to 512 [ 251.023037][ T5993] EXT4-fs error (device loop2): __ext4_fill_super:5390: inode #2: comm syz.2.437: iget: bad i_size value: -1 [ 251.035563][ T5993] EXT4-fs (loop2): get root inode failed [ 251.041237][ T5993] EXT4-fs (loop2): mount failed [ 251.082858][ T4526] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 253.955512][ T6019] netlink: 16 bytes leftover after parsing attributes in process `syz.4.442'. [ 255.608290][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.614659][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.046593][ T6055] loop4: detected capacity change from 0 to 256 [ 256.200253][ T6055] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 258.970413][ T6092] delete_channel: no stack [ 258.979681][ T6090] delete_channel: no stack [ 261.758675][ T6123] netlink: 72 bytes leftover after parsing attributes in process `syz.3.466'. [ 261.829104][ T6128] "syz.1.467" (6128) uses obsolete ecb(arc4) skcipher [ 263.297252][ T6135] delete_channel: no stack [ 263.302431][ T6134] delete_channel: no stack [ 263.428444][ T6142] netlink: 392 bytes leftover after parsing attributes in process `syz.1.469'. [ 263.486205][ T6146] loop4: detected capacity change from 0 to 512 [ 263.656739][ T6146] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.473: casefold flag without casefold feature [ 263.683796][ T6146] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.473: couldn't read orphan inode 15 (err -117) [ 263.697015][ T6146] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 263.766229][ T6154] 9pnet_virtio: no channels available for device syz [ 265.221467][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 265.966846][ T6166] [U] . [ 266.179119][ T4289] dvb-usb: did not find the firmware file 'dvb-usb-dtt200u-01.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 266.197940][ T4289] dvb-usb: found a 'WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)' in cold state, will try to load a firmware [ 266.211206][ T4289] usb 4-1: Direct firmware load for dvb-usb-dtt200u-01.fw failed with error -2 [ 266.221582][ T4289] usb 4-1: Falling back to sysfs fallback for: dvb-usb-dtt200u-01.fw [ 269.072102][ T6217] bridge0: port 3(vlan2) entered blocking state [ 269.128197][ T6217] bridge0: port 3(vlan2) entered disabled state [ 269.362067][ T6234] mmap: syz.0.490 (6234) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 270.449760][ T6252] loop4: detected capacity change from 0 to 512 [ 270.535499][ T6252] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 270.603671][ T6252] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 270.632011][ T6252] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.493: Failed to acquire dquot type 0 [ 270.744264][ T6252] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 272.703560][ T4260] Bluetooth: hci4: command 0x0406 tx timeout [ 273.103559][ T6252] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 273.129880][ T6252] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.493: Failed to acquire dquot type 0 [ 273.170142][ T6252] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 273.187329][ T4260] Bluetooth: hci2: Malformed Event: 0x13 [ 273.233688][ T6252] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 273.283914][ T6252] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.493: Failed to acquire dquot type 0 [ 273.311432][ T6252] EXT4-fs (loop4): 1 orphan inode deleted [ 273.343607][ T6252] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 273.353686][ T6252] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.683779][ T4332] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 273.893608][ T4332] usb 3-1: Using ep0 maxpacket: 16 [ 273.912724][ T4332] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 273.930337][ T4332] usb 3-1: config 0 has no interface number 0 [ 274.356817][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 274.372843][ T4332] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 274.394013][ T4332] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 274.429370][ T4332] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 274.464966][ T4332] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 274.473202][ T4332] usb 3-1: Product: syz [ 274.495833][ T4332] usb 3-1: SerialNumber: syz [ 274.507375][ T4332] usb 3-1: config 0 descriptor?? [ 274.547962][ T4332] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 274.562804][ T4332] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input10 [ 274.835264][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 278.241563][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 278.249762][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 278.258199][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 278.278336][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 278.288400][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 278.299038][ T4292] usb 3-1: USB disconnect, device number 2 [ 278.310400][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 278.317393][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 279.235134][ T4292] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 279.304701][ T6312] xt_TPROXY: Can be used only with -p tcp or -p udp [ 280.505856][ T6325] netlink: 32 bytes leftover after parsing attributes in process `syz.1.514'. [ 280.672631][ T6318] "syz.3.511" (6318) uses obsolete ecb(arc4) skcipher [ 282.324653][ T3622] udevd[3622]: worker [4237] /devices/platform/dummy_hcd.3/usb4/4-1 is taking a long time [ 282.468471][ T6352] overlayfs: failed to resolve './file0': -2 [ 283.462746][ T6367] "syz.3.526" (6367) uses obsolete ecb(arc4) skcipher [ 286.473556][ T4558] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 286.519852][ T6400] kernel profiling enabled (shift: 9) [ 286.745501][ T4558] usb 3-1: config 0 has an invalid interface number: 20 but max is 1 [ 287.702821][ T4558] usb 3-1: config 0 has an invalid interface number: 24 but max is 1 [ 287.725980][ T4558] usb 3-1: config 0 has no interface number 0 [ 287.732151][ T4558] usb 3-1: config 0 has no interface number 1 [ 287.930090][ T6415] fuse: Bad value for 'user_id' [ 287.963797][ T4558] usb 3-1: config 0 interface 20 has no altsetting 0 [ 287.970729][ T4558] usb 3-1: New USB device found, idVendor=14aa, idProduct=0201, bcdDevice=8b.1d [ 288.021499][ T4558] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.067914][ T6418] binder: BINDER_SET_CONTEXT_MGR already set [ 288.107588][ T4558] usb 3-1: config 0 descriptor?? [ 288.133325][ T6418] binder: 6417:6418 ioctl 4018620d 200000000040 returned -16 [ 288.160110][ T4558] usb 3-1: can't set config #0, error -71 [ 288.551474][ T4558] usb 3-1: USB disconnect, device number 3 [ 288.595742][ T6429] "syz.0.542" (6429) uses obsolete ecb(arc4) skcipher [ 292.383199][ T6455] delete_channel: no stack [ 292.394899][ T6454] delete_channel: no stack [ 292.577260][ T6462] fuse: Bad value for 'user_id' [ 292.593791][ T4296] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 292.935691][ T4296] usb 3-1: config 0 has an invalid interface number: 20 but max is 1 [ 292.963659][ T4296] usb 3-1: config 0 has an invalid interface number: 24 but max is 1 [ 292.982222][ T4296] usb 3-1: config 0 has no interface number 0 [ 292.998397][ T4296] usb 3-1: config 0 has no interface number 1 [ 293.231572][ T6472] "syz.3.558" (6472) uses obsolete ecb(arc4) skcipher [ 293.303671][ T4296] usb 3-1: config 0 interface 20 has no altsetting 0 [ 293.434053][ T4558] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 294.773518][ T4296] usb 3-1: New USB device found, idVendor=14aa, idProduct=0201, bcdDevice=8b.1d [ 294.782778][ T4296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.801152][ T4296] usb 3-1: config 0 descriptor?? [ 294.807211][ T4296] usb 3-1: can't set config #0, error -71 [ 294.821508][ T4296] usb 3-1: USB disconnect, device number 4 [ 295.583863][ T4558] usb 2-1: Using ep0 maxpacket: 8 [ 296.617449][ T4558] usb 2-1: config 0 has no interfaces? [ 297.049900][ T4558] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 297.080271][ T4558] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.099730][ T4558] usb 2-1: Product: syz [ 297.108289][ T4558] usb 2-1: Manufacturer: syz [ 297.117239][ T4558] usb 2-1: SerialNumber: syz [ 297.214606][ T4558] usb 2-1: config 0 descriptor?? [ 297.271491][ T6500] delete_channel: no stack [ 297.277477][ T6499] delete_channel: no stack [ 297.432894][ T4558] usb 2-1: USB disconnect, device number 3 [ 297.512883][ T6507] fuse: Bad value for 'user_id' [ 297.528016][ T6492] sctp: failed to load transform for md5: -2 [ 297.988886][ T6516] loop4: detected capacity change from 0 to 512 [ 298.171294][ T6516] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 298.213750][ T6516] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 298.273562][ T6516] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.569: Failed to acquire dquot type 0 [ 298.420202][ T6516] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 298.653866][ T4558] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 298.746230][ T6516] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 298.881544][ T4558] usb 2-1: config 0 has an invalid interface number: 20 but max is 1 [ 298.932289][ T4558] usb 2-1: config 0 has an invalid interface number: 24 but max is 1 [ 298.944802][ T6516] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.569: Failed to acquire dquot type 0 [ 299.053744][ T6516] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 299.063541][ T4558] usb 2-1: config 0 has no interface number 0 [ 299.072151][ T4558] usb 2-1: config 0 has no interface number 1 [ 299.073599][ T6516] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 299.099161][ T4558] usb 2-1: config 0 interface 20 has no altsetting 0 [ 299.103569][ T6516] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.569: Failed to acquire dquot type 0 [ 299.123056][ T4558] usb 2-1: New USB device found, idVendor=14aa, idProduct=0201, bcdDevice=8b.1d [ 299.143746][ T6516] EXT4-fs (loop4): 1 orphan inode deleted [ 299.161127][ T6516] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 299.189452][ T4558] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.219299][ T6516] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.248239][ T4558] usb 2-1: config 0 descriptor?? [ 300.164502][ T6541] xt_TPROXY: Can be used only with -p tcp or -p udp [ 300.755071][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 301.059253][ T4558] usb 2-1: string descriptor 0 read error: -71 [ 301.106583][ T4558] dvb-usb: found a 'WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)' in cold state, will try to load a firmware [ 301.171751][ T6551] delete_channel: no stack [ 301.192149][ T6550] delete_channel: no stack [ 301.423983][ T6555] fuse: Bad value for 'fd' [ 302.330541][ T6570] binder: BINDER_SET_CONTEXT_MGR already set [ 302.336715][ T6570] binder: 6565:6570 ioctl 4018620d 200000000040 returned -16 [ 302.663773][ T4332] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 302.963748][ T4332] usb 5-1: Using ep0 maxpacket: 8 [ 302.970860][ T4332] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 303.025820][ T4332] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 303.081983][ T4332] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 303.122737][ T4332] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 303.159187][ T4332] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 303.368885][ T4332] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 303.393551][ T4332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.129140][ T6579] xt_TPROXY: Can be used only with -p tcp or -p udp [ 305.816907][ T4332] usb 5-1: usb_control_msg returned -71 [ 305.823395][ T4332] usbtmc 5-1:16.0: can't read capabilities [ 305.842882][ T4332] usb 5-1: USB disconnect, device number 3 [ 305.970282][ T6586] delete_channel: no stack [ 306.014521][ T6585] delete_channel: no stack [ 306.273783][ T4296] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 306.316431][ T6595] fuse: Bad value for 'fd' [ 306.533606][ T6598] 9pnet_virtio: no channels available for device syz [ 306.622805][ T6600] binder: 6599:6600 ioctl c0306201 0 returned -14 [ 306.713689][ T4296] usb 1-1: device not accepting address 5, error -71 [ 309.162348][ T6638] fuse: Bad value for 'fd' [ 309.314132][ T6641] binder: 6640:6641 ioctl c0306201 0 returned -14 [ 309.373671][ T4291] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 309.605398][ T4291] usb 3-1: config 0 has an invalid interface number: 20 but max is 1 [ 309.616180][ T4291] usb 3-1: config 0 has an invalid interface number: 24 but max is 1 [ 309.639844][ T4291] usb 3-1: config 0 has no interface number 0 [ 309.667766][ T4291] usb 3-1: config 0 has no interface number 1 [ 309.696848][ T4291] usb 3-1: config 0 interface 20 has no altsetting 0 [ 309.717305][ T4291] usb 3-1: New USB device found, idVendor=14aa, idProduct=0201, bcdDevice=8b.1d [ 309.762082][ T4291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.809011][ T4291] usb 3-1: config 0 descriptor?? [ 311.359787][ T4291] usb 3-1: string descriptor 0 read error: -71 [ 311.374233][ T4291] dvb-usb: found a 'WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)' in cold state, will try to load a firmware [ 311.445016][ T6671] fuse: Bad value for 'fd' [ 312.703393][ T6681] binder: 6680:6681 ioctl c0306201 0 returned -14 [ 312.775324][ T6685] netlink: 'syz.0.623': attribute type 10 has an invalid length. [ 315.356311][ T6710] fuse: Bad value for 'fd' [ 318.073831][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.080206][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.672335][ T6752] fuse: Bad value for 'fd' [ 318.868322][ T6755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.643'. [ 321.829297][ T4332] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 322.037395][ T6790] fuse: Invalid rootmode [ 322.056292][ T4332] usb 1-1: config 0 has an invalid interface number: 20 but max is 1 [ 322.083691][ T4332] usb 1-1: config 0 has an invalid interface number: 24 but max is 1 [ 322.103599][ T4332] usb 1-1: config 0 has no interface number 0 [ 322.109727][ T4332] usb 1-1: config 0 has no interface number 1 [ 322.139877][ T4332] usb 1-1: config 0 interface 20 has no altsetting 0 [ 322.157188][ T4332] usb 1-1: New USB device found, idVendor=14aa, idProduct=0201, bcdDevice=8b.1d [ 322.173683][ T4332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.213132][ T4332] usb 1-1: config 0 descriptor?? [ 323.559447][ T4332] usb 1-1: string descriptor 0 read error: -71 [ 323.568902][ T4332] dvb-usb: found a 'WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)' in cold state, will try to load a firmware [ 327.025050][ T4558] dvb-usb: did not find the firmware file 'dvb-usb-dtt200u-01.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 327.025876][ T4291] dvb-usb: did not find the firmware file 'dvb-usb-dtt200u-01.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 327.040248][ T4332] dvb-usb: did not find the firmware file 'dvb-usb-dtt200u-01.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 327.055554][ T4289] dvb-usb: did not find the firmware file 'dvb-usb-dtt200u-01.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 327.127807][ T4558] dvb-usb: found a 'WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)' in cold state, will try to load a firmware [ 327.168318][ T4558] usb 2-1: Direct firmware load for dvb-usb-dtt200u-01.fw failed with error -2 [ 327.186018][ T4332] dvb-usb: found a 'WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)' in cold state, will try to load a firmware [ 327.224899][ T4558] usb 2-1: Falling back to sysfs fallback for: dvb-usb-dtt200u-01.fw [ 327.341546][ T4291] dvb-usb: found a 'WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)' in cold state, will try to load a firmware [ 327.365403][ T4289] usb 4-1: USB disconnect, device number 2 [ 327.457801][ T6834] fuse: Invalid rootmode [ 331.346477][ T6865] loop4: detected capacity change from 0 to 256 [ 331.740934][ T6875] fuse: Invalid rootmode [ 334.555556][ T6899] [U] . [ 336.473307][ T6917] netlink: 16 bytes leftover after parsing attributes in process `syz.3.690'. [ 337.213697][ T6921] fuse: Bad value for 'rootmode' [ 337.546783][ T6925] loop4: detected capacity change from 0 to 256 [ 337.892371][ T6925] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 338.670636][ T6950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.700'. [ 339.461604][ T6956] netlink: 16 bytes leftover after parsing attributes in process `syz.1.701'. [ 344.043251][ T6994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.713'. [ 344.089308][ T6998] fuse: Bad value for 'rootmode' [ 344.566959][ T7012] xt_TPROXY: Can be used only with -p tcp or -p udp 0=Ҡk"0cC;.E@wԅHi=Rv[s;ݧ8[ UxR@]u+',]u g(0weͅz$aṒub9yYE)&O)6b;ygU4>rɓt_ƏʘG00HVpẑE=N Oeݢ2"yJIzF<@MS0QupQʃl~7MؤZGkφwW_Fc1׍`L챈*]kjFU)B6=x}[4OwO_;Õa,ax0 2a0s1=**$S8 +W1E$ƏmCK-X_^yb19Qs'C9wBx(ћ"uϛBI.XOWZtp0\PւXΐlfw;hB? e #`!dܱ o7Zlǂ` :[!vHDV.Mg` hZ qC>ԖE8ĵq%SS*vi#yIWgΙr#->6lc~cנ.k 7a#J#'NN&G]BV3^"7I+ |Ɛn^F/8'U"h7&1x}O Չ܌sQ":oLfz}on=LFl>=OIЅ9g6v8DQHwYǺԒ_f|q͙'0Y^}W_{Sq*{WUJ+-TZ7c.%,l6PX6? |9eJ5<)\8VY%v59C%wYz2˾~i5gR(\?ņ;1!Jq+t+5ԍbNuaY=H *93Z\PW'_n\I2OWEGR^Y ^2n Iڤ˭o+ӅJ\0{cT,g bJM%K{;.[ 345.334215][ T7026] fuse: Unknown parameter 'use00000000000000000000' uiT-[+x:%y1zsY<$]cpqo4@D\a)#Gȭ@Ӑ '걜Œz!'?C 1yY (f1GWZϑKs~eqgOﴂ3mmЎzAX˭e`]߳Axv+F0?O}.<{GNJkҿ2YÌ;Tc.c&͐&jzRΉcȧ- zjz/w$(>T |h3 7`(*xk"޺GzRAoOź:m@dc~້]F#wj&/oci!iP_yQ23@SvyAe]Q3L.p9^:l~Xz~M& H~h !cN'оZ8í aπLR%(ޅ]ZGӅԖj3D C9R8 M2xZb%#R|f䷓l_I\G_bhVi?NfgVBpI+h9? Mvs>'pMXsQ.`lqxIz4Rg[Ҫa_^AHzz/f2=aheRW5: &6k,c#VIVHF` WVo&WlIirdc 2-edD*.=8󗴦; ?w1)n߱[uyS Wq5'Zbʌ0ym:}kk |Vג;%+l;H#oFJ; !Yge4<;ύ#~OpL}q(Q;gj< N%Q=@~NHN߄04 gūG,S0l,Ðwm";o涠`H7vIj϶U(cޗYmO[AYɜ0π`;Wd!xX~# ; `VHdU+*us^[6;מ9[<*I41=E0AϝPn]-Y͌@z=8ސɝ[w+ؿbMUle*4x 8Xp|&d_ ʚֵ->Ek]Pת _pvS.R^fx,^}mV5p/ӯYNǐS9i`P!(m[,|"F w]e4w~h29bڬ@ׯ?TR>KyZ+btڞW-bQՊ ~fihv^|/x$,Y 㣖AɴVGHLSMK*SuLݭ8*1m&QpϿ5=X :==B>];oF j+XsmogIOP瀎p=w姩!z[ȭׂG$[niUJ\B԰ǯJz䐲GYE]Apaxe&1]/hKDRkZ*Ek7ܪc , k*u?'rϓkV}'reSJަkpᄔR $H$.ā`{^DY ۆIdmy/kQmң9tFVܐ|A\`KGJ%.R Dh)T"/0KhB&ƈJ+a z9Y2z dX[E EJiVAoUm4T[->`g-;3e-4$녋6#[ 346.513584][ T7032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.724'. [ 347.020101][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.726'. [ 347.783727][ T4290] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 348.009011][ T4290] usb 4-1: config 0 has an invalid interface number: 20 but max is 1 [ 348.096236][ T4290] usb 4-1: config 0 has an invalid interface number: 24 but max is 1 [ 348.277933][ T4290] usb 4-1: config 0 has no interface number 0 [ 348.305820][ T4290] usb 4-1: config 0 has no interface number 1 [ 348.333585][ T4290] usb 4-1: config 0 interface 20 has no altsetting 0 [ 348.340353][ T4290] usb 4-1: New USB device found, idVendor=14aa, idProduct=0201, bcdDevice=8b.1d [ 348.400572][ T4290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.458258][ T4290] usb 4-1: config 0 descriptor?? [ 348.954956][ T7055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.733'. [ 348.964183][ T7055] device bridge_slave_1 left promiscuous mode [ 348.975233][ T7055] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.028968][ T7055] device bridge_slave_0 left promiscuous mode [ 349.038043][ T7055] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.042133][ T7050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.227752][ T7060] xt_TPROXY: Can be used only with -p tcp or -p udp [ 349.632773][ T7052] hub 6-0:1.0: USB hub found [ 349.638716][ T7052] hub 6-0:1.0: 1 port detected [ 349.901221][ T7066] fuse: Unknown parameter 'use00000000000000000000' [ 350.873482][ T4290] usb 4-1: string descriptor 0 read error: -71 [ 350.925832][ T4290] dvb-usb: found a 'WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)' in cold state, will try to load a firmware [ 351.050846][ T7083] loop4: detected capacity change from 0 to 256 [ 351.125840][ T7083] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 352.349841][ T7095] loop4: detected capacity change from 0 to 512 [ 352.428804][ T7095] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 352.449804][ T7095] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 352.465380][ T7095] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.744: Failed to acquire dquot type 0 [ 352.484561][ T7095] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 352.495371][ T7095] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 352.505170][ T7095] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.744: Failed to acquire dquot type 0 [ 352.520790][ T7095] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 352.541574][ T7095] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 352.555600][ T7095] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.744: Failed to acquire dquot type 0 [ 352.587768][ T7095] EXT4-fs (loop4): 1 orphan inode deleted [ 352.594103][ T7095] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 352.613249][ T7095] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.935508][ T7108] xt_TPROXY: Can be used only with -p tcp or -p udp [ 352.951457][ T7107] fuse: Unknown parameter 'use00000000000000000000' [ 353.293904][ T7114] 9pnet_virtio: no channels available for device syz [ 354.319456][ T7130] ALSA: mixer_oss: invalid index 40000 [ 355.757651][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 355.920367][ T7140] loop4: detected capacity change from 0 to 256 [ 355.971827][ T7140] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 357.838439][ T7156] fuse: Unknown parameter 'user_i00000000000000000000' [ 360.507541][ T7179] syz.4.763 (7179): drop_caches: 2 [ 362.490863][ T7195] fuse: Bad value for 'fd' [ 362.670349][ T7194] fuse: Unknown parameter 'user_i00000000000000000000' [ 363.986531][ T7218] random: crng reseeded on system resumption [ 364.940915][ T7233] loop4: detected capacity change from 0 to 16 [ 367.435981][ T7245] loop4: detected capacity change from 0 to 512 [ 367.590213][ T7245] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.784: casefold flag without casefold feature [ 367.609373][ T7245] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.784: couldn't read orphan inode 15 (err -117) [ 367.626587][ T7245] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 367.701782][ T7253] fuse: Unknown parameter 'user_i00000000000000000000' [ 367.873396][ T7258] "syz.0.783" (7258) uses obsolete ecb(arc4) skcipher [ 369.235705][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 371.253275][ T7291] fuse: Unknown parameter 'user_id00000000000000000000' [ 372.280217][ T7298] "syz.4.799" (7298) uses obsolete ecb(arc4) skcipher [ 376.134861][ T7333] fuse: Unknown parameter 'user_id00000000000000000000' [ 378.922190][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.938155][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.449382][ T7379] delete_channel: no stack [ 382.454903][ T7378] delete_channel: no stack [ 383.656499][ T7398] netlink: 392 bytes leftover after parsing attributes in process `syz.0.828'. [ 388.394779][ T4558] dvb-usb: did not find the firmware file 'dvb-usb-dtt200u-01.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 388.411665][ T4332] dvb-usb: did not find the firmware file 'dvb-usb-dtt200u-01.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 388.426901][ T4290] dvb-usb: did not find the firmware file 'dvb-usb-dtt200u-01.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 388.522393][ T4332] usb 1-1: USB disconnect, device number 7 [ 388.538139][ T4291] dvb-usb: did not find the firmware file 'dvb-usb-dtt200u-01.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 388.560428][ T4291] usb 3-1: USB disconnect, device number 5 [ 388.580033][ T4290] dvb-usb: found a 'WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)' in cold state, will try to load a firmware [ 388.593214][ T4558] usb 2-1: USB disconnect, device number 4 [ 388.662865][ T4290] usb 4-1: Direct firmware load for dvb-usb-dtt200u-01.fw failed with error -2 [ 388.695101][ T4290] usb 4-1: Falling back to sysfs fallback for: dvb-usb-dtt200u-01.fw [ 389.086435][ T4332] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 389.744210][ T4332] usb 1-1: config 0 has an invalid interface number: 20 but max is 1 [ 389.782873][ T4332] usb 1-1: config 0 has an invalid interface number: 24 but max is 1 [ 389.791652][ T7445] xt_TPROXY: Can be used only with -p tcp or -p udp [ 389.826726][ T4332] usb 1-1: config 0 has no interface number 0 [ 389.862094][ T4332] usb 1-1: config 0 has no interface number 1 [ 389.887360][ T4332] usb 1-1: config 0 interface 20 has no altsetting 0 [ 389.932183][ T4332] usb 1-1: New USB device found, idVendor=14aa, idProduct=0201, bcdDevice=8b.1d [ 389.982455][ T4332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.125890][ T4332] usb 1-1: config 0 descriptor?? [ 390.166916][ T4332] usb 1-1: can't set config #0, error -71 [ 390.374497][ T4332] usb 1-1: USB disconnect, device number 8 [ 392.693040][ T7466] netlink: 392 bytes leftover after parsing attributes in process `syz.1.844'. [ 399.518560][ T4558] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 399.825716][ T4558] usb 5-1: config 0 has an invalid interface number: 20 but max is 1 [ 399.873041][ T4558] usb 5-1: config 0 has an invalid interface number: 24 but max is 1 [ 400.008200][ T4558] usb 5-1: config 0 has no interface number 0 [ 400.103451][ T4558] usb 5-1: config 0 has no interface number 1 [ 400.123567][ T4558] usb 5-1: config 0 interface 20 has no altsetting 0 [ 400.150765][ T4558] usb 5-1: New USB device found, idVendor=14aa, idProduct=0201, bcdDevice=8b.1d [ 400.170235][ T4558] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.197965][ T4558] usb 5-1: config 0 descriptor?? [ 401.611980][ T4558] usb 5-1: string descriptor 0 read error: -71 [ 401.988754][ T4558] dvb-usb: found a 'WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)' in cold state, will try to load a firmware [ 402.988375][ T7537] netlink: 392 bytes leftover after parsing attributes in process `syz.0.862'. [ 406.972118][ T4291] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 407.975271][ T4291] usb 1-1: config 0 has an invalid interface number: 20 but max is 1 [ 407.993448][ T4291] usb 1-1: config 0 has an invalid interface number: 24 but max is 1 [ 408.022286][ T4291] usb 1-1: config 0 has no interface number 0 [ 408.028846][ T4291] usb 1-1: config 0 has no interface number 1 [ 408.043541][ T4291] usb 1-1: config 0 interface 20 has no altsetting 0 [ 408.053786][ T4291] usb 1-1: New USB device found, idVendor=14aa, idProduct=0201, bcdDevice=8b.1d [ 408.073117][ T4291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.092402][ T4291] usb 1-1: config 0 descriptor?? [ 408.358855][ T4291] usb 1-1: string descriptor 0 read error: -71 [ 408.386711][ T4291] dvb-usb: found a 'WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)' in cold state, will try to load a firmware [ 411.148986][ T7599] netlink: 392 bytes leftover after parsing attributes in process `syz.3.879'. [ 418.102714][ T7663] netlink: 392 bytes leftover after parsing attributes in process `syz.1.895'. [ 421.450251][ T3622] udevd[3622]: worker [4237] /devices/platform/dummy_hcd.3/usb4/4-1 is taking a long time [ 427.144385][ T7728] fuse: Unknown parameter '0x0000000000000003' [ 427.657750][ T7734] netlink: 392 bytes leftover after parsing attributes in process `syz.2.915'. [ 434.277592][ T7801] netlink: 392 bytes leftover after parsing attributes in process `syz.1.931'. [ 439.588840][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.595670][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.615611][ T4330] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 439.840906][ T4330] usb 3-1: config 0 has an invalid interface number: 20 but max is 1 [ 439.901838][ T4330] usb 3-1: config 0 has an invalid interface number: 24 but max is 1 [ 440.064932][ T4330] usb 3-1: config 0 has no interface number 0 [ 440.071084][ T4330] usb 3-1: config 0 has no interface number 1 [ 440.087948][ T4330] usb 3-1: config 0 interface 20 has no altsetting 0 [ 440.113503][ T4330] usb 3-1: New USB device found, idVendor=14aa, idProduct=0201, bcdDevice=8b.1d [ 440.132912][ T4330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.154115][ T4330] usb 3-1: config 0 descriptor?? [ 441.856130][ T4330] usb 3-1: string descriptor 0 read error: -71 [ 441.866000][ T4330] dvb-usb: found a 'WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)' in cold state, will try to load a firmware [ 443.955806][ T7874] xt_TPROXY: Can be used only with -p tcp or -p udp [ 445.090918][ T7895] fuse: Unknown parameter 'fd0x0000000000000003' [ 449.956612][ T4290] dvb-usb: did not find the firmware file 'dvb-usb-dtt200u-01.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 449.957222][ T4291] dvb-usb: did not find the firmware file 'dvb-usb-dtt200u-01.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 449.972637][ T4558] dvb-usb: did not find the firmware file 'dvb-usb-dtt200u-01.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 450.004373][ T4330] dvb-usb: did not find the firmware file 'dvb-usb-dtt200u-01.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 450.038388][ T4330] dvb-usb: found a 'WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)' in cold state, will try to load a firmware [ 450.079237][ T4290] usb 4-1: USB disconnect, device number 3 [ 450.680390][ T4330] usb 3-1: Direct firmware load for dvb-usb-dtt200u-01.fw failed with error -2 [ 450.706376][ T4558] dvb-usb: found a 'WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)' in cold state, will try to load a firmware [ 450.770369][ T7941] fuse: Unknown parameter 'fd0x0000000000000003' [ 450.792124][ T4330] usb 3-1: Falling back to sysfs fallback for: dvb-usb-dtt200u-01.fw [ 450.830764][ T4291] dvb-usb: found a 'WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)' in cold state, will try to load a firmware [ 457.303822][ T4290] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 457.622536][ T4290] usb 2-1: config 0 has an invalid interface number: 20 but max is 1 [ 457.651168][ T4290] usb 2-1: config 0 has an invalid interface number: 24 but max is 1 [ 457.699185][ T4290] usb 2-1: config 0 has no interface number 0 [ 457.719600][ T4290] usb 2-1: config 0 has no interface number 1 [ 457.756786][ T4290] usb 2-1: config 0 interface 20 has no altsetting 0 [ 457.793288][ T4290] usb 2-1: New USB device found, idVendor=14aa, idProduct=0201, bcdDevice=8b.1d [ 457.826507][ T7991] fuse: Unknown parameter 'fd0x0000000000000003' [ 457.842957][ T4290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.909196][ T4290] usb 2-1: config 0 descriptor?? [ 459.605752][ T4290] usb 2-1: string descriptor 0 read error: -71 [ 459.729494][ T4290] dvb-usb: found a 'WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)' in cold state, will try to load a firmware [ 465.254670][ T3622] udevd[3622]: worker [4526] /devices/platform/dummy_hcd.4/usb5/5-1 is taking a long time [ 465.400426][ T8024] netlink: 392 bytes leftover after parsing attributes in process `syz.0.994'. [ 470.444667][ T8085] xt_TPROXY: Can be used only with -p tcp or -p udp [ 473.107794][ T8106] netlink: 392 bytes leftover after parsing attributes in process `syz.1.1011'. [ 475.909001][ T8134] xt_TPROXY: Can be used only with -p tcp or -p udp [ 480.354543][ T8174] netlink: 392 bytes leftover after parsing attributes in process `syz.2.1031'. [ 481.315642][ T4332] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 481.536799][ T4332] usb 4-1: config 0 has an invalid interface number: 20 but max is 1 [ 481.569810][ T4332] usb 4-1: config 0 has an invalid interface number: 24 but max is 1 [ 481.612115][ T4332] usb 4-1: config 0 has no interface number 0 [ 481.643062][ T4332] usb 4-1: config 0 has no interface number 1 [ 481.673763][ T4332] usb 4-1: config 0 interface 20 has no altsetting 0 [ 481.710504][ T4332] usb 4-1: New USB device found, idVendor=14aa, idProduct=0201, bcdDevice=8b.1d [ 481.762507][ T4332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.820044][ T4332] usb 4-1: config 0 descriptor?? [ 483.287956][ T8200] xt_TPROXY: Can be used only with -p tcp or -p udp [ 483.436423][ T4332] usb 4-1: string descriptor 0 read error: -71 [ 483.453271][ T4332] dvb-usb: found a 'WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)' in cold state, will try to load a firmware [ 486.494718][ T3622] udevd[3622]: worker [4239] /devices/platform/dummy_hcd.0/usb1/1-1 is taking a long time [ 490.150838][ T8257] netlink: 392 bytes leftover after parsing attributes in process `syz.4.1051'. [ 495.644686][ T8294] xt_TPROXY: Can be used only with -p tcp or -p udp [ 497.330033][ T8311] mkiss: ax0: crc mode is auto. [ 501.036293][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.042633][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.911320][ T8357] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1082'. [ 504.492153][ T8367] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 504.492153][ T8367] program syz.4.1085 not setting count and/or reply_len properly [ 505.807211][ T8389] fuse: Bad value for 'fd' [ 506.864151][ T8393] xt_TPROXY: Can be used only with -p tcp or -p udp [ 508.217421][ T8408] program syz.0.1098 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 508.276086][ T8407] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.415927][ T8407] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.609900][ T8407] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.659736][ T8407] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.972802][ T8430] "syz.1.1102" (8430) uses obsolete ecb(arc4) skcipher [ 510.933810][ T8407] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.991930][ T8407] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.069513][ T8407] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.127452][ T8407] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.274017][ T4291] dvb-usb: did not find the firmware file 'dvb-usb-dtt200u-01.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 511.274587][ T4330] dvb-usb: did not find the firmware file 'dvb-usb-dtt200u-01.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 511.304634][ T4558] dvb-usb: did not find the firmware file 'dvb-usb-dtt200u-01.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 511.320020][ T4290] dvb-usb: did not find the firmware file 'dvb-usb-dtt200u-01.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 511.335462][ T4332] dvb-usb: did not find the firmware file 'dvb-usb-dtt200u-01.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 511.382468][ T4291] usb 1-1: USB disconnect, device number 9 [ 511.383301][ T4290] dvb-usb: found a 'WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)' in cold state, will try to load a firmware [ 511.408187][ T4332] dvb-usb: found a 'WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)' in cold state, will try to load a firmware [ 511.422269][ T4558] usb 5-1: USB disconnect, device number 4 [ 511.442502][ T4332] usb 4-1: Direct firmware load for dvb-usb-dtt200u-01.fw failed with error -2 [ 511.487780][ T4330] usb 3-1: USB disconnect, device number 6 [ 511.507033][ T4332] usb 4-1: Falling back to sysfs fallback for: dvb-usb-dtt200u-01.fw [ 512.703642][ T4558] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 513.380530][ T8467] xt_TPROXY: Can be used only with -p tcp or -p udp [ 514.274602][ T8476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1117'. [ 516.919982][ T8509] xt_TPROXY: Can be used only with -p tcp or -p udp [ 518.792506][ T8528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1132'. [ 519.951681][ T8536] binder: BINDER_SET_CONTEXT_MGR already set [ 519.972432][ T8536] binder: 8535:8536 ioctl 4018620d 200000000040 returned -16 [ 520.098197][ T8538] fuse: Bad value for 'fd' [ 521.504613][ T4295] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 522.429534][ T4295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.452681][ T4295] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 522.468951][ T4295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.536219][ T4295] usb 1-1: config 0 descriptor?? [ 522.752201][ T4295] usbhid 1-1:0.0: can't add hid device: -71 [ 523.068027][ T4295] usbhid: probe of 1-1:0.0 failed with error -71 [ 523.182472][ T4295] usb 1-1: USB disconnect, device number 10 [ 523.198358][ T26] audit: type=1326 audit(1746091829.984:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8573 comm="syz.2.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcddb18e969 code=0x7ffc0000 [ 523.775782][ T26] audit: type=1326 audit(1746091830.544:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8573 comm="syz.2.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcddb18e969 code=0x7ffc0000 [ 523.800628][ T26] audit: type=1326 audit(1746091830.554:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8573 comm="syz.2.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fcddb18e969 code=0x7ffc0000 [ 523.836714][ T26] audit: type=1326 audit(1746091830.554:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8573 comm="syz.2.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcddb18e969 code=0x7ffc0000 [ 523.880724][ T26] audit: type=1326 audit(1746091830.554:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8573 comm="syz.2.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcddb18e969 code=0x7ffc0000 [ 523.904952][ T26] audit: type=1326 audit(1746091830.554:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8573 comm="syz.2.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fcddb18e969 code=0x7ffc0000 [ 523.944340][ T26] audit: type=1326 audit(1746091830.554:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8573 comm="syz.2.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcddb18e969 code=0x7ffc0000 [ 524.050451][ T26] audit: type=1326 audit(1746091830.554:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8573 comm="syz.2.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcddb18e969 code=0x7ffc0000 [ 524.086401][ T8579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1146'. [ 524.098221][ T26] audit: type=1326 audit(1746091830.554:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8573 comm="syz.2.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcddb18e969 code=0x7ffc0000 [ 524.123550][ T4291] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 524.137581][ T26] audit: type=1326 audit(1746091830.554:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8573 comm="syz.2.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcddb18e969 code=0x7ffc0000 [ 524.453438][ T8581] "syz.1.1147" (8581) uses obsolete ecb(arc4) skcipher [ 525.083535][ T4295] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 525.213932][ T8587] fuse: Bad value for 'fd' [ 525.315258][ T4291] usb 5-1: config 0 has an invalid interface number: 20 but max is 1 [ 525.345371][ T4291] usb 5-1: config 0 has an invalid interface number: 24 but max is 1 [ 525.387910][ T4291] usb 5-1: config 0 has no interface number 0 [ 525.395475][ T4291] usb 5-1: config 0 has no interface number 1 [ 525.401724][ T4291] usb 5-1: config 0 interface 20 has no altsetting 0 [ 525.418049][ T4291] usb 5-1: New USB device found, idVendor=14aa, idProduct=0201, bcdDevice=8b.1d [ 525.429755][ T4291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.460830][ T4291] usb 5-1: config 0 descriptor?? [ 525.654767][ T4291] usb 5-1: string descriptor 0 read error: -71 [ 525.673103][ T4291] dvb-usb: found a 'WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)' in cold state, will try to load a firmware [ 527.752145][ T8628] "syz.0.1158" (8628) uses obsolete ecb(arc4) skcipher [ 528.624402][ T8630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1161'. [ 528.672284][ T3622] udevd[3622]: worker [4237] /devices/platform/dummy_hcd.1/usb2/2-1 is taking a long time [ 529.706339][ T8637] fuse: Bad value for 'fd' [ 531.665688][ T8656] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 532.838592][ T8672] tmpfs: Unknown parameter 'usrquota' [ 532.928930][ T8676] fuse: Bad value for 'fd' [ 533.148459][ T8670] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 533.156989][ T8670] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 534.101717][ T8670] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 534.123606][ T8670] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 534.130696][ T8670] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 534.140999][ T8670] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 534.153927][ T8670] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 534.181473][ T8670] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 534.209775][ T8670] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 534.256117][ T8670] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 534.273537][ T8670] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 534.280807][ T8670] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 534.300358][ T8670] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 534.312492][ T8670] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 534.348488][ T8670] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 534.636611][ T8690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1175'. [ 535.053470][ T4260] Bluetooth: hci0: command 0x0c1a tx timeout [ 536.273513][ T4261] Bluetooth: hci1: command 0x0c1a tx timeout [ 536.279970][ T4261] Bluetooth: hci3: command 0x0c1a tx timeout [ 536.303441][ T4261] Bluetooth: hci4: command 0x0c1a tx timeout [ 536.309849][ T4261] Bluetooth: hci2: command 0x0c1a tx timeout [ 537.860340][ T8709] Bluetooth: hci0: command 0x0406 tx timeout [ 538.303634][ T8709] Bluetooth: hci3: command 0x0406 tx timeout [ 538.303716][ T4260] Bluetooth: hci1: command 0x0406 tx timeout [ 538.383608][ T8709] Bluetooth: hci2: command 0x0406 tx timeout [ 538.383665][ T4260] Bluetooth: hci4: command 0x0406 tx timeout [ 543.683487][ T4295] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 543.936258][ T4295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.229826][ T4295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.289473][ T4295] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 544.359683][ T4295] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 544.406682][ T4295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.440837][ T4295] usb 1-1: config 0 descriptor?? [ 544.862667][ T4295] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 544.938312][ T4295] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 545.218147][ T4295] usb 1-1: USB disconnect, device number 12 [ 548.137129][ T8811] binder: BINDER_SET_CONTEXT_MGR already set [ 548.174935][ T8811] binder: 8810:8811 ioctl 4018620d 200000000040 returned -16 [ 548.254020][ T8813] batman_adv: batadv0: Adding interface: dummy0 [ 548.280756][ T8813] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.305995][ C1] vkms_vblank_simulate: vblank timer overrun [ 548.313319][ T3622] udevd[3622]: worker [4262] /devices/platform/dummy_hcd.3/usb4/4-1 is taking a long time [ 548.374926][ T8813] batman_adv: batadv0: Interface activated: dummy0 [ 548.486885][ T8816] batadv0: mtu less than device minimum [ 548.494852][ T8816] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 548.507980][ T8816] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 548.520554][ T8816] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 548.533121][ T8816] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 548.545638][ T8816] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 548.558102][ T8816] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 548.570672][ T8816] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 548.583203][ T8816] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 548.595729][ T8816] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 549.924721][ T8876] 9pnet_virtio: no channels available for device syz [ 552.329481][ T8901] "syz.4.1214" (8901) uses obsolete ecb(arc4) skcipher [ 552.709722][ T8908] binder: BINDER_SET_CONTEXT_MGR already set [ 552.743533][ T8908] binder: 8907:8908 ioctl 4018620d 200000000040 returned -16 [ 555.009871][ T8936] "syz.0.1225" (8936) uses obsolete ecb(arc4) skcipher [ 555.960905][ T8945] binder: BINDER_SET_CONTEXT_MGR already set [ 555.991659][ T8945] binder: 8943:8945 ioctl 4018620d 200000000040 returned -16 [ 556.219337][ T4236] kernel read not supported for file /swradio8 (pid: 4236 comm: kworker/0:3) [ 558.655683][ T8981] 9pnet_virtio: no channels available for device syz [ 560.824462][ T9003] tmpfs: Unknown parameter 'usrquota' [ 561.151196][ T8995] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 561.235623][ T8995] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 561.270015][ T8995] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 561.285588][ T8995] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 561.302633][ T8995] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 561.674283][ T8995] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 561.696355][ T8995] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 561.741661][ T8995] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 561.759417][ T8995] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 561.800205][ T8995] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 561.818706][ T8995] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 561.839834][ T8995] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 561.858852][ T8995] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 561.876603][ T8995] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 561.883858][ T8995] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 562.465956][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.473687][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.863432][ T8709] Bluetooth: hci0: command 0x0c1a tx timeout [ 563.345966][ T8709] Bluetooth: hci1: command 0x0c1a tx timeout [ 563.853539][ T8709] Bluetooth: hci3: command 0x0c1a tx timeout [ 563.859653][ T8709] Bluetooth: hci2: command 0x0c1a tx timeout [ 565.329496][ T9054] binder: BINDER_SET_CONTEXT_MGR already set [ 565.335662][ T9054] binder: 9048:9054 ioctl 4018620d 200000000040 returned -16 [ 566.453491][ T8709] Bluetooth: hci4: command 0x0c1a tx timeout [ 566.459570][ T8709] Bluetooth: hci0: command 0x0406 tx timeout [ 566.464667][ T4260] Bluetooth: hci1: command 0x0406 tx timeout [ 566.465750][ T8709] Bluetooth: hci2: command 0x0406 tx timeout [ 566.471562][ T4260] Bluetooth: hci3: command 0x0406 tx timeout [ 566.678265][ T9059] netlink: 392 bytes leftover after parsing attributes in process `syz.1.1264'. [ 567.124399][ T9061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1265'. [ 568.571309][ T4261] Bluetooth: hci4: command 0x0406 tx timeout [ 569.032378][ T9087] "syz.0.1266" (9087) uses obsolete ecb(arc4) skcipher [ 572.753640][ T4291] dvb-usb: did not find the firmware file 'dvb-usb-dtt200u-01.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 572.754406][ T4332] dvb-usb: did not find the firmware file 'dvb-usb-dtt200u-01.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 572.784080][ T4290] dvb-usb: did not find the firmware file 'dvb-usb-dtt200u-01.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 572.826457][ T9120] device wg1 entered promiscuous mode [ 572.856586][ T4290] usb 2-1: USB disconnect, device number 5 [ 572.896042][ T4291] dvb-usb: found a 'WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)' in cold state, will try to load a firmware [ 572.938359][ T4332] usb 4-1: USB disconnect, device number 4 [ 572.957996][ T4291] usb 5-1: Direct firmware load for dvb-usb-dtt200u-01.fw failed with error -2 [ 572.968689][ T4291] usb 5-1: Falling back to sysfs fallback for: dvb-usb-dtt200u-01.fw [ 573.262601][ T9126] process 'syz.3.1282' launched '/dev/fd/11' with NULL argv: empty string added [ 574.321844][ T9135] netlink: 392 bytes leftover after parsing attributes in process `syz.2.1284'. [ 577.657432][ T9165] "syz.0.1290" (9165) uses obsolete ecb(arc4) skcipher [ 578.992486][ T9180] syz.3.1297 uses obsolete (PF_INET,SOCK_PACKET) [ 690.473341][ C0] ------------[ cut here ]------------ [ 690.479618][ C0] WARNING: CPU: 0 PID: 9202 at kernel/rcu/tree_stall.h:970 rcu_check_gp_start_stall+0x2dc/0x460 [ 690.490039][ C0] Modules linked in: [ 690.493941][ C0] CPU: 0 PID: 9202 Comm: syz.0.1304 Not tainted 6.1.135-syzkaller #0 [ 690.501986][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 690.512020][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 690.518330][ C0] Code: ff ff ff 48 c7 c7 00 2f a0 96 be 04 00 00 00 e8 0a aa 66 00 48 89 df b8 01 00 00 00 87 05 8c a5 34 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 40 ff 92 8c 74 47 48 c7 c0 24 af fe 8d 48 c1 e8 03 [ 690.537917][ C0] RSP: 0018:ffffc90000007b78 EFLAGS: 00010046 [ 690.543960][ C0] RAX: 0000000000000000 RBX: ffffffff8c92ff40 RCX: ffffffff816b8966 [ 690.551910][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8c92ff40 [ 690.559859][ C0] RBP: ffffc90000007df0 R08: 0000000000000004 R09: 0000000000000003 [ 690.567808][ C0] R10: fffffbfff2d405e0 R11: 1ffffffff2d405e0 R12: 0000000000002904 [ 690.575756][ C0] R13: dffffc0000000000 R14: 0000000000000a06 R15: dffffc0000000000 [ 690.583705][ C0] FS: 00007f2810c806c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 690.592612][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 690.599175][ C0] CR2: 000020000006b000 CR3: 000000001ffcc000 CR4: 00000000003506f0 [ 690.607132][ C0] DR0: 0000000000000007 DR1: 0000000000000002 DR2: 0000000000000008 [ 690.615095][ C0] DR3: 0000000000000006 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 690.623074][ C0] Call Trace: [ 690.626342][ C0] [ 690.629175][ C0] rcu_core+0x5d9/0x16a0 [ 690.633404][ C0] ? lock_chain_count+0x20/0x20 [ 690.638236][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 690.643240][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 690.648595][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 690.653772][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 690.658953][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 690.664144][ C0] ? __run_timers+0x770/0x7c0 [ 690.668800][ C0] ? __run_timers+0x73d/0x7c0 [ 690.673458][ C0] ? detach_timer+0x350/0x350 [ 690.678117][ C0] ? detach_timer+0x350/0x350 [ 690.682768][ C0] ? lock_chain_count+0x20/0x20 [ 690.687608][ C0] ? seqcount_lockdep_reader_access+0x15c/0x1c0 [ 690.693859][ C0] handle_softirqs+0x2a1/0x920 [ 690.698626][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 690.703485][ C0] ? do_softirq+0x200/0x200 [ 690.707971][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 690.713161][ C0] __irq_exit_rcu+0x12f/0x220 [ 690.717818][ C0] ? irq_exit_rcu+0x20/0x20 [ 690.722305][ C0] irq_exit_rcu+0x5/0x20 [ 690.726540][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 690.732156][ C0] [ 690.735066][ C0] [ 690.737978][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 690.743943][ C0] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 690.749748][ C0] Code: f5 ff 0f 1f 00 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 4e 5b 4a f7 48 89 df e8 a6 20 4b f7 e8 b1 22 6e f7 fb bf 01 00 00 00 b6 9d 3e f7 65 8b 05 b7 72 e9 75 85 c0 74 02 5b c3 e8 04 84 e7 [ 690.769329][ C0] RSP: 0018:ffffc9001b9b7bb8 EFLAGS: 00000286 [ 690.775393][ C0] RAX: 98fcabc279375c00 RBX: ffff88802f1d2500 RCX: 98fcabc279375c00 [ 690.783354][ C0] RDX: dffffc0000000000 RSI: ffffffff8a6bff00 RDI: 0000000000000001 [ 690.791311][ C0] RBP: ffff88802f1d2998 R08: dffffc0000000000 R09: ffffed1005e3a4a1 [ 690.799262][ C0] R10: ffffed1005e3a4a1 R11: 1ffff11005e3a4a0 R12: 1ffff11005e3a533 [ 690.807211][ C0] R13: 0000000000000021 R14: dffffc0000000000 R15: 0000000000000000 [ 690.815167][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 690.820343][ C0] get_signal+0x1163/0x1350 [ 690.824832][ C0] arch_do_signal_or_restart+0xb0/0x1230 [ 690.830443][ C0] ? __ia32_sys_rt_sigreturn+0x660/0x790 [ 690.836053][ C0] ? load_gs_index+0x120/0x120 [ 690.840793][ C0] ? get_sigframe_size+0x10/0x10 [ 690.845715][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 690.851151][ C0] exit_to_user_mode_loop+0x70/0x110 [ 690.856415][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 690.861939][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 690.867381][ C0] do_syscall_64+0x58/0xa0 [ 690.871775][ C0] ? clear_bhb_loop+0x45/0xa0 [ 690.876425][ C0] ? clear_bhb_loop+0x45/0xa0 [ 690.881076][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 690.886958][ C0] RIP: 0033:0x7f280fd8e967 [ 690.891348][ C0] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 690.910943][ C0] RSP: 002b:00007f2810c800e8 EFLAGS: 00000246 [ 690.916987][ C0] RAX: 00000000000000ca RBX: 00007f280ffb5fa8 RCX: 00007f280fd8e969 [ 690.924935][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f280ffb5fa8 [ 690.932884][ C0] RBP: 00007f280ffb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 690.940845][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f280ffb5fac [ 690.948792][ C0] R13: 0000000000000000 R14: 00007ffd386cc8e0 R15: 00007ffd386cc9c8 [ 690.956747][ C0] [ 690.959745][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 690.966997][ C0] CPU: 0 PID: 9202 Comm: syz.0.1304 Not tainted 6.1.135-syzkaller #0 [ 690.975036][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 690.985066][ C0] Call Trace: [ 690.988322][ C0] [ 690.991145][ C0] dump_stack_lvl+0x168/0x22e [ 690.995801][ C0] ? memcpy+0x3c/0x60 [ 690.999761][ C0] ? show_regs_print_info+0x12/0x12 [ 691.004936][ C0] ? load_image+0x3b0/0x3b0 [ 691.009429][ C0] panic+0x2c9/0x710 [ 691.013309][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 691.017807][ C0] __warn+0x2f8/0x4f0 [ 691.021762][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 691.027460][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 691.033157][ C0] report_bug+0x2ba/0x4f0 [ 691.037463][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 691.043159][ C0] handle_bug+0x3a/0x70 [ 691.047293][ C0] exc_invalid_op+0x16/0x40 [ 691.051784][ C0] asm_exc_invalid_op+0x16/0x20 [ 691.056612][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 691.062921][ C0] Code: ff ff ff 48 c7 c7 00 2f a0 96 be 04 00 00 00 e8 0a aa 66 00 48 89 df b8 01 00 00 00 87 05 8c a5 34 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 40 ff 92 8c 74 47 48 c7 c0 24 af fe 8d 48 c1 e8 03 [ 691.082500][ C0] RSP: 0018:ffffc90000007b78 EFLAGS: 00010046 [ 691.088542][ C0] RAX: 0000000000000000 RBX: ffffffff8c92ff40 RCX: ffffffff816b8966 [ 691.096491][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8c92ff40 [ 691.104439][ C0] RBP: ffffc90000007df0 R08: 0000000000000004 R09: 0000000000000003 [ 691.112385][ C0] R10: fffffbfff2d405e0 R11: 1ffffffff2d405e0 R12: 0000000000002904 [ 691.120329][ C0] R13: dffffc0000000000 R14: 0000000000000a06 R15: dffffc0000000000 [ 691.128279][ C0] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 691.133979][ C0] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 691.139672][ C0] rcu_core+0x5d9/0x16a0 [ 691.143890][ C0] ? lock_chain_count+0x20/0x20 [ 691.148715][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 691.153715][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 691.159072][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 691.164244][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 691.169418][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 691.174587][ C0] ? __run_timers+0x770/0x7c0 [ 691.179235][ C0] ? __run_timers+0x73d/0x7c0 [ 691.183887][ C0] ? detach_timer+0x350/0x350 [ 691.188540][ C0] ? detach_timer+0x350/0x350 [ 691.193189][ C0] ? lock_chain_count+0x20/0x20 [ 691.198015][ C0] ? seqcount_lockdep_reader_access+0x15c/0x1c0 [ 691.204234][ C0] handle_softirqs+0x2a1/0x920 [ 691.208981][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 691.213809][ C0] ? do_softirq+0x200/0x200 [ 691.218291][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 691.223468][ C0] __irq_exit_rcu+0x12f/0x220 [ 691.228127][ C0] ? irq_exit_rcu+0x20/0x20 [ 691.232628][ C0] irq_exit_rcu+0x5/0x20 [ 691.236871][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 691.242503][ C0] [ 691.245433][ C0] [ 691.248422][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 691.254409][ C0] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 691.260212][ C0] Code: f5 ff 0f 1f 00 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 4e 5b 4a f7 48 89 df e8 a6 20 4b f7 e8 b1 22 6e f7 fb bf 01 00 00 00 b6 9d 3e f7 65 8b 05 b7 72 e9 75 85 c0 74 02 5b c3 e8 04 84 e7 [ 691.279804][ C0] RSP: 0018:ffffc9001b9b7bb8 EFLAGS: 00000286 [ 691.285850][ C0] RAX: 98fcabc279375c00 RBX: ffff88802f1d2500 RCX: 98fcabc279375c00 [ 691.293799][ C0] RDX: dffffc0000000000 RSI: ffffffff8a6bff00 RDI: 0000000000000001 [ 691.301745][ C0] RBP: ffff88802f1d2998 R08: dffffc0000000000 R09: ffffed1005e3a4a1 [ 691.309691][ C0] R10: ffffed1005e3a4a1 R11: 1ffff11005e3a4a0 R12: 1ffff11005e3a533 [ 691.317640][ C0] R13: 0000000000000021 R14: dffffc0000000000 R15: 0000000000000000 [ 691.325610][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 691.330788][ C0] get_signal+0x1163/0x1350 [ 691.335279][ C0] arch_do_signal_or_restart+0xb0/0x1230 [ 691.340889][ C0] ? __ia32_sys_rt_sigreturn+0x660/0x790 [ 691.346499][ C0] ? load_gs_index+0x120/0x120 [ 691.351239][ C0] ? get_sigframe_size+0x10/0x10 [ 691.356159][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 691.361593][ C0] exit_to_user_mode_loop+0x70/0x110 [ 691.366859][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 691.372379][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 691.377819][ C0] do_syscall_64+0x58/0xa0 [ 691.382223][ C0] ? clear_bhb_loop+0x45/0xa0 [ 691.386904][ C0] ? clear_bhb_loop+0x45/0xa0 [ 691.391567][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 691.397451][ C0] RIP: 0033:0x7f280fd8e967 [ 691.401850][ C0] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 691.421438][ C0] RSP: 002b:00007f2810c800e8 EFLAGS: 00000246 [ 691.427486][ C0] RAX: 00000000000000ca RBX: 00007f280ffb5fa8 RCX: 00007f280fd8e969 [ 691.435438][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f280ffb5fa8 [ 691.443391][ C0] RBP: 00007f280ffb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 691.451512][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f280ffb5fac [ 691.459470][ C0] R13: 0000000000000000 R14: 00007ffd386cc8e0 R15: 00007ffd386cc9c8 [ 691.467435][ C0] [ 691.470707][ C0] Kernel Offset: disabled [ 691.475562][ C0] Rebooting in 86400 seconds..