last executing test programs: 12m4.476755512s ago: executing program 1 (id=2): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r6, 0x0) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000000)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee01}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)={0x1c, r7, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40420d5}, 0x80) 12m1.832357751s ago: executing program 1 (id=11): mount$9p_rdma(&(0x7f0000000000), 0x0, &(0x7f00000000c0), 0x20, &(0x7f0000000140)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xfffffffffffffffc}}, {@sq={'sq', 0x3d, 0xfffffffffffffff8}}, {@rq={'rq', 0x3d, 0x6a0000}}, {@timeout={'timeout', 0x3d, 0xffff}}, {@timeout={'timeout', 0x3d, 0x6}}], [{@audit}, {@smackfshat}, {@obj_type={'obj_type', 0x3d, '}(-'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@subj_user}]}}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, 0x0) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f000067b000/0x2000)=nil], 0x0, 0x0, 0x2) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(0x0, 0x0, &(0x7f00000001c0)="a6", 0x1, r6) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 12m0.205747373s ago: executing program 1 (id=15): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x9ffc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000380)={0x0, "7daf66027870322987e83a35512e90c41b8b585a2cf070990a626c3d4fae6928240f1765c25d2f387c308a6dc8b8615961b8239ef167316d05f4b447933f7580", 0x39}, 0x48, r3) keyctl$KEYCTL_MOVE(0x1e, r3, r4, r3, 0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000070c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x83, &(0x7f00000005c0)={[{@norecovery}, {@noblock_validity}, {@sysvgroups}]}, 0x21, 0x624, &(0x7f0000000d80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) syz_clone(0x6a02f080, 0x0, 0xfffffffffffffd7b, 0x0, 0x0, 0x0) 11m57.597234081s ago: executing program 1 (id=20): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1d, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, &(0x7f0000000440)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) ppoll(&(0x7f0000000d40), 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) socket(0x2, 0x80805, 0x0) 11m55.093862149s ago: executing program 1 (id=22): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x420000008e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x8, 0x0, 0x0, 0x18, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2={0xff, 0x3}, 0x0, 0x0, 0xffffffff, 0xffffffff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x0, 0x34, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000030801030000000000000000030000013c0004800800014000000003080001400000001e08000240f7fffff9080002400000000b0800014000010001080001400000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r5 = socket(0xa, 0x6, 0x0) r6 = syz_io_uring_setup(0x126b, &(0x7f00000006c0), &(0x7f0000000140), &(0x7f0000000780)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r6, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x4e23, 0x0, 'none\x00', 0x0, 0x80000}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) readv(r7, 0x0, 0x0) 11m53.64791263s ago: executing program 1 (id=26): syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x40) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0xfdff) ioctl$KVM_SET_IRQCHIP(r6, 0xc048aec8, &(0x7f0000000980)={0x4, 0x0, @pic={0x52, 0x9, 0x2, 0x6, 0xbf, 0x4, 0xb, 0x6, 0x3, 0x1, 0x3, 0x23, 0xf, 0x0, 0x4e, 0x8}}) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 11m36.984922629s ago: executing program 32 (id=26): syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x40) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0xfdff) ioctl$KVM_SET_IRQCHIP(r6, 0xc048aec8, &(0x7f0000000980)={0x4, 0x0, @pic={0x52, 0x9, 0x2, 0x6, 0xbf, 0x4, 0xb, 0x6, 0x3, 0x1, 0x3, 0x23, 0xf, 0x0, 0x4e, 0x8}}) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 9m29.444357581s ago: executing program 0 (id=279): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000140)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [], {0x10, 0x6}}, 0x24, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x11) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000340)=""/160}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x80000000000008, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0}, 0x18) socket$inet(0x2, 0x2, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) ioprio_get$pid(0x0, r2) 9m27.675825894s ago: executing program 0 (id=282): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4044010) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x10000, @rand_addr=' \x01\x00', 0x3b06f9c9}, 0x1c) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb4, &(0x7f0000000140)=""/180, 0x41000, 0x4f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000340)={"c8fcf7d8", 0x8, 0xb, 0x7, 0xa73, 0x9, "9e908fdd9f1e7662aa2fb4729b34d3", "2113110b", "dadf94bf", "64c67da2", ["ad0d2c5d450e5c6eb7c9f519", "46fb109af258a8ecf6aa42cc", "6a3b7747ba91012fdd576c84", "dc31c98599167cd9f56e4597"]}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(r3, r0, 0x2) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x2}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) close_range(r4, 0xffffffffffffffff, 0x0) 9m26.78396721s ago: executing program 0 (id=285): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100), 0x4) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x800}, 0x20004011) recvmsg$unix(r0, 0x0, 0x10002) sendmsg$inet(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000080)=0x6, 0x4) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r2}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x98041, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) pipe2(0x0, 0x84880) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x21, 0x0) migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x8000000000000001, &(0x7f0000000240)=0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x4004) 9m25.833133227s ago: executing program 0 (id=287): syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000c40)={[{@jqfmt_vfsv0}, {@abort}, {@barrier}, {@barrier}, {@test_dummy_encryption}, {@nomblk_io_submit}]}, 0xfb, 0x49f, &(0x7f0000001440)="$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") write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="ed", 0x1, 0xffffffffffffffff) keyctl$set_timeout(0xf, r1, 0xfffffffffffffffd) read$FUSE(r0, &(0x7f00000035c0)={0x2020}, 0x2020) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f00000000c0)={0xa0002006}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f00000001c0)) poll(&(0x7f0000000000)=[{r3}], 0x1, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000080)={@mcast2}, 0x14) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) chroot(&(0x7f0000000000)='./file0\x00') getcwd(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d1000090401011e020d0000090582020002000000090503020002"], 0x0) 9m22.405816452s ago: executing program 0 (id=297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000006000000ff0f000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 9m21.891939735s ago: executing program 4 (id=299): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000c8, &(0x7f00000005c0)=ANY=[@ANYBLOB='codepage=874,nodots,dots,tz=UTC,dots,nodots,codepage=862,dots,dots,check=strict,allow_utime=000000000000000000001,sys_immutable,nodots,nfs,quiet,dots,nodots,nodots,debug,usefree,tz=UTC,flush,nodots,\x00'], 0xfd, 0x1bf, &(0x7f0000000940)="$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") syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000040)=ANY=[], 0x0, 0x182, &(0x7f00000006c0)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) 9m20.273529937s ago: executing program 4 (id=301): openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r4, 0x6) r5 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xfffffdef}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 9m19.212533765s ago: executing program 4 (id=306): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setpgid(0x0, r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 9m18.126877763s ago: executing program 4 (id=307): syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000c40)={[{@jqfmt_vfsv0}, {@abort}, {@barrier}, {@barrier}, {@test_dummy_encryption}, {@nomblk_io_submit}]}, 0xfb, 0x49f, &(0x7f0000001440)="$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") write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="ed", 0x1, 0xffffffffffffffff) keyctl$set_timeout(0xf, r1, 0xfffffffffffffffd) read$FUSE(r0, &(0x7f00000035c0)={0x2020}, 0x2020) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f00000000c0)={0xa0002006}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f00000001c0)) poll(&(0x7f0000000000)=[{r3}], 0x1, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000080)={@mcast2}, 0x14) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) chroot(&(0x7f0000000000)='./file0\x00') getcwd(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d1000090401011e020d0000090582020002000000090503020002"], 0x0) 9m15.985863528s ago: executing program 4 (id=314): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, &(0x7f0000000380)=0x400000, 0x4) ptrace$pokeuser(0x6, r2, 0x358, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2140, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) capset(&(0x7f0000000300)={0x19980330}, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x40, 0xa, 0x5680, 0xfffffffffffffffa, 0x16}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) 9m10.215449108s ago: executing program 0 (id=323): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100), 0x4) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x800}, 0x20004011) recvmsg$unix(r0, 0x0, 0x10002) r2 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000080)=0x6, 0x4) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r3}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x98041, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) pipe2(0x0, 0x84880) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r6, &(0x7f0000000480), 0x21, 0x0) migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x8000000000000001, &(0x7f0000000240)=0x1) sendmmsg$inet(r2, &(0x7f0000000b00)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x4004) 9m9.783274322s ago: executing program 33 (id=323): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100), 0x4) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x800}, 0x20004011) recvmsg$unix(r0, 0x0, 0x10002) r2 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000080)=0x6, 0x4) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r3}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x98041, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) pipe2(0x0, 0x84880) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r6, &(0x7f0000000480), 0x21, 0x0) migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x8000000000000001, &(0x7f0000000240)=0x1) sendmmsg$inet(r2, &(0x7f0000000b00)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x4004) 9m9.702992392s ago: executing program 4 (id=325): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000c8, &(0x7f00000005c0)=ANY=[@ANYBLOB='codepage=874,nodots,dots,tz=UTC,dots,nodots,codepage=862,dots,dots,check=strict,allow_utime=000000000000000000001,sys_immutable,nodots,nfs,quiet,dots,nodots,nodots,debug,usefree,tz=UTC,flush,nodots,\x00'], 0xfd, 0x1bf, &(0x7f0000000940)="$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") syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000040)=ANY=[], 0x0, 0x182, &(0x7f00000006c0)="$eJzskr9OAkEQxr+9O/4ZJZpY0UBB/FMox6HGTkvs7WwkcCLxUOFIBELiGWMoLIylT8BrmPgCWhgfgJqCWJszezu3nvgI7q+4b+fb2dmZhVO35SYAfE0HVewjQEcab4zBAJBlwptoQh9J30kfhOCV8g7IvyXNuL1+nHJyWBLGWcVx7HYOwGfgScvdu9EwCUp9TAdVvjgG4Pu+z70awNMxH8nRAbQiORkDWA6G8GUOH4QHqwAKneZlwe31NxrNSt2u2+eWXtoxt0xz2yqcNBzbFF820waHj7QOIJGEhO/HANxRPBduXAthkdZon6VwJM/GwzdMM8yiRc6GyvAs+0og/L2AQ6yAt3XlsYibD6oYCEYqg0GnoGjgpz9xVzLY2KxeOLUhGFh4bARD1iiOEZOBFQ1Kux4WRKkhlcyTlklHpGPS7MxfxvD4956iNQ+Io5vqdNpF/kjdCl+xcGVJz1r0og/Gb33Sfg/3ov15W4VCoVAoFAqFQqH4b3wHAAD//1+Udic=") socket$inet6_tcp(0xa, 0x1, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000f80)={'wlan1\x00', 0x0}) 9m9.140104506s ago: executing program 34 (id=325): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000c8, &(0x7f00000005c0)=ANY=[@ANYBLOB='codepage=874,nodots,dots,tz=UTC,dots,nodots,codepage=862,dots,dots,check=strict,allow_utime=000000000000000000001,sys_immutable,nodots,nfs,quiet,dots,nodots,nodots,debug,usefree,tz=UTC,flush,nodots,\x00'], 0xfd, 0x1bf, &(0x7f0000000940)="$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") syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000040)=ANY=[], 0x0, 0x182, &(0x7f00000006c0)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000f80)={'wlan1\x00', 0x0}) 3m45.578880133s ago: executing program 5 (id=1090): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x104}}, 0x0) 3m45.062921766s ago: executing program 5 (id=1093): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000c8, &(0x7f00000005c0)=ANY=[@ANYBLOB='codepage=874,nodots,dots,tz=UTC,dots,nodots,codepage=862,dots,dots,check=strict,allow_utime=000000000000000000001,sys_immutable,nodots,nfs,quiet,dots,nodots,nodots,debug,usefree,tz=UTC,flush,nodots,\x00'], 0xfd, 0x1bf, &(0x7f0000000940)="$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") syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000040)=ANY=[], 0x0, 0x182, &(0x7f00000006c0)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) 3m43.11151814s ago: executing program 5 (id=1102): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r6, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r7, 0x4) lseek(r5, 0xc6c3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3m39.894718813s ago: executing program 5 (id=1109): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000000540)={[{@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@umask={'umask', 0x3d, 0x9}}, {@dmask={'dmask', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@gid={'gid', 0x3d, 0xee00}}, {@errors_remount}, {@errors_remount}, {@errors_remount}, {@namecase}, {@errors_continue}]}, 0x5, 0x1510, &(0x7f00000037c0)="$eJzs3Am4TlX7MPD7Xmvt45D0dJLhsNa6N08yLCdJMiTJkCRJkmRKSDrJKwmJQ6akQxKS4ZAMh5AMJ0465nkekyTpJEmmTMn6rlN83t7qe//v/+17/a//uX/Xta9n3c/a99prP/czrL0N33UZWrNxrWoNiQj+LfjrQxIAxALAQAC4DgACACgXVy4uqz+nxKR/7yDsr/VI6tWeAbuauP7ZG9c/e+P6Z29c/+yN65+9cf2zN65/9sb1Zyw72zy94PW8Zd+N7/9nZ/z7/79IZumxX60tfWPXfyGF65+9cf3/1wr+Kztx/bM3rn/2xvXP3rj+2UGOP+3h+mdvXH/GsrOrff+Zt6u7Xe33H2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yx7OGsv0IBwOX21Z4XY4wxxhhjjDHG/jo+x9WeAWOMMcYYY4wxxv7/QxAgQUEAMZADYiEn5AIBANdCHrgOInA9xMENkBduhHyQHwpAQYiHQlAYNBiwQBBCESgKUbgJisHNUBxKQEkoBQ5KQwLcAmXgVigLt0E5uB3Kwx1QASpCJagMd0IVuAuqwt1QDe6B6lADakItuBdqw31QB+6HuvAA1IMHoT48BA3gYWgIj0AjeBQaw2PQBB6HptAMmkMLaPnfyn8JesDL0BN6QRL0hj7wCvSFftAfBsBAeBUGwWswGF6HZBgCQ+ENGAZvwnB4C0bASBgFb8NoeAfGwFgYB+MhBSbARHgXJsF7MBmmwFSYBqkwHWbA+zATZsFs+ADmwIcwF+bBfFgAafARLIRFkA4fw2L4BDJgCSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVtsB12wE7YBbvhU9gDn8Fe+Bz2wRf/Yv6Zf8jvioCAAgUqVBiDMRiLsZgLc2FuzI15MA9GMIJxGId5MS/mw3xYAAtgPMZjYSyMBg0SEhbBIhjFKBbDYlgci2NJLIkOHSZgApbBW7EslsVyWA7LY3msgBWxIlbGylgFq2BVrIrVsBpWx+pYE2vivXgv9sY6WAfrYl2sh/Uu357ChtgQG2EjbIyNsQk2wabYFJtjc2yJLbEVtsLW2BrbYltsh+2wPbbHREzEDtgBO2JH7ISdsDN2xi7YBbtiN+yGL+UAfBlfxl5YXfTGPtgH+2Jyjv44AAfgqzgIX8PX8HVMxiE4FN/AN/BNHI6ncQSOxFE4CquId3AMjkUS4zEFU3AiTsRJOAkn4xScgtMwFafjDJyBM3EWzsIPcA5+iB/iPJyHCzAN03AhLsJ0TMfFeAYzcAkuxWW4HFfgclyFq3EVrsV1uBY34AbchJtwC27BbbgNd+AO3IUKAD/Fz/AzTMZ9uA/34348gAfwIB7ETMzEQ3gID+NhPIJH8CgexWN4HE/gcTyFp/A0nsGzeBbP43m8gC/Ef9NoV4k1ySCyKKFEjIgRsSJW5BK5RG6RW+QReURERESciBN5RV6RT+QTBUQBES/iRWFRWBhhBIkwBgBEVERFMVFMFBfFRUlRUjjhRIJIEGVEGVFWlBXlxO2ivLhDVBAVRRtXWVQWVURbV1XcLaqJaqK6qCFqilqilqgtaos6oo6oK+qKeqKeqC8eEg1Eb+yPj4isyjQWQ7CJGIpNRTMhL32DtRLDsbVoI9qKp8RIHIHtRSuXKJ4VHcQY7Cj+Jsbi86KzGI9dxIuiq+gmuouXRA/R2vUUvcRk7C36iGnYV/QT/cUAMRNriA9wTs6a4nWRLIaIoeINsQDfFMPFW2KEGClGibfFaPGOGCPGinFivEgRE8RE8a6YJN4Tk8UUMVVME6liupgh3hczxSwxW3wg5ogPxVwxT8wXC0Sa+EgsFItEuvhYLBafiAyxRCwVy8RysUKsFKvEarFGrBXrxHqxQWwUm8RmsUVsFdvEdrFD7BS7xG7xqdgjPhN7xedin/hC7BdfigPiK3FQfC0yxTfikPhWHBbfiSPie3FU/CCOiePihDgpTokfxWlxRpwV58R58ZO4IH4WF4UXIFEKKaWSgYyROWSszClzyWtkbhlcenWvl3HyBplX3ijzyfyygCwo42UhWVhqaaSVJENZRBaVUXmTLCZvlsVlCVlSlpJOlpYJ8hZZRt4qy8rbZDl5uywv75AVZEVZSVaWd8oq8i4JkV+PUV3WkDVlLXmvrC3vk3Xk/bKufEDWkw/K+vIh2UA+LBvKR2Qj+ahsLB+TTeTjsqlsJpvLFrKlfEK2kk/K1rKNbCufku3k07K9fEYmymdlB+kvvUWel53lC7KLfFF2ld1kd/mzvCi97Cl7SYDeso98RfaV/WR/OUAOlK/KQfI1OVi+LpPlEDlUviGHyTflcPmWHCFHylHybTlaviPHyLFynBwvU+QEOVG+KyfJ9+RkOUVOldNkqpwu+18aabaU/zT/3T/IH/zL0TfJzXKL3Cq3ye1yh9wpd8ndcrfcI/fIvXKv3Cf3yf1yvzwgD8iD8qDMlJnykDwkD8vD8og8Io/Ko/KYPC7PyZPylPxRnpZn5Bl5Tp6X5+WFS68BKFRCSaVUoGJUDhWrcqpc6hqVW12r8qjrVERdr+LUDSqvulHlU/lVAVVQxatCqrDSyiirSIWqiCqqouomvPSGUSVVKeVUaZWgbvlX8lUxdbMqrkr8Jv/y/JL+ZH4tVUvVSrVSrVVr1Va1Ve1UO9VetVeJKlF1UB1UR9VRdVKdVGfVWXVRXVRX1VV1V91VD9VD9VQ9VZJKUn3UK6qv6qf6qwFqoHpVDVKD1GA1WCWrZDVUDVXD1DA1XA1XI9QINUqNUqPVaDVGjVHj1DiVolLURDVRTVKT1GQ1WU1VU1WqSlUz1Aw1U81Us9VsNUfNUXPVXDVfzVdpKk0tVAtVukpXi9VilaGWqCVqmVqmVqgVapVapdaoNWqdWqc2qA0qQ21Wm9VWtVVtV9vVTrVT7Va71R61R+1Ve9U+tU/tV/vVAXVAHVQHVabKVIfUIXVYHVZH1BF1VB1Vx9QxdUKdUKfUKXVanVZn1Vl1Xp1XF9QFdVFdzFr2BSIQgQpUEBPEBLFBbJAryBXkDnIHeYI8QSSIBHFBXJA3uDHIF+QPCgQFg/igUFA40IEJbCAuFT0a3BQUC24OigclgpJBqcAFpYOE4JagTHBrUDa4LSgX3B6UD+4IKgQVg0pB5eDOoEpwV1A1uDuoFtwTVA9qBDWDWsG9Qe3gvqBOcH9QN3ggqBc8GNQPHgoaBA8HDYNHgkbBo0Hj4LGgSfB40DRoFjQPWgQt/9LxvT+d/0nXU/fSSbq37qNf0X11P91fD9AD9at6kH5ND9av62Q9RA/Vb+hh+k09XL+lR+iRepR+W4/W7+gxeqwep8frFD1BT9Tv6kn6PT1ZT9FT9TSdqqfrGfp9PVPP0rP1B3qO/lDP1fP0fL1Ap+mP9EK9SKfrj/Vi/YnO0Ev0Ur1ML9cr9Eq9Sq/Wa/RavU6v1xv0Rr1Jb9Zb9Fa9TW/XO/ROvUvv1p/qPfozvVd/rvfpL/R+/aU+oL/SB/XXOlN/ow/pb/Vh/Z0+or/XR/UP+pg+rk/ok/qU/lGf1mf0WX1On9c/6Qv6Z31R+6zFfdbPu1FGmRgTY2JNrMllcpncJrfJY/KYiImYOBNn8pq8Jp/JZwqYAibexJvCprDJQoZMEVPERE3UFDPFTHFT3JQ0JY0zziSYBFPGlDFlTVlTzpQz5U15U8FUMJVMJXOnudPcZe4yd5u7zT3mHlPD1DC1TC1T29Q2dUwdU9fUNfVMPVPf1DcNTAPT0DQ0jUwj09g0Nk1ME9PUNDXNTXPT0rQ0rUwr09q0Nm1NW9POtDPtTXuTaBJNB9PBdDQdTSfTyXQ2nU0X08V0NV1Nd9Pd9DA9TE/T0ySZJNPH9DF9TV/T3/Q3A81AM8gMMoPNYJNsks1QM9QMM8PMcDPcjDAjzaishap5x4wxY804M96kmBQz0Uw0k8wkM9lMNlPNVJNqUs0MM8PMNDPNbDPbzDFzzFwz18w3802aSTMLzUKTbtLNYrPYZJgMs9QsNcvNcrPSrDSrzWqz1qw162G92Wg2ms1ms9lqtprtZrvZaXaa3Wa32WP2mL1mr9ln9pn9Zr85YA6Yg+agyTSZ5pA5ZA6bw+aIOWKOmqPmmDlmTpgT5pQ5ZU6b0+asOWvOm/yXfi+9ibU5bS57jc1tr7V57HX2H+MCtqCNt4VsYattPpv/N7Gx1ha3JWxJW8o6W9om2Ft+F1ewFW0lW9neaavYu2zV38W17X22jr3f1rUP2Fr23t/E9eyDtr59zDZABLDNbCPbwja2j9km9nHb1DazzW0L284+bdvbZ2yifdZ2sM/9Ll5oF9nVdo1da9fZPfYze9aes4ftd/a8/cn2tL3sQPuqHWRfs4Pt6zbZDvldPMq+bUfbd+wYO9aOs+N/F0+102yqnW5n2PftTDvrd3Ga/cjOsel2rp1n59sFv8RZc0q3H9vF9hObYZfYpXaZXW5X2JV21f+d6zK7wW60m+xu+6ndarfZ7XaH3Wl3/RJnncde+7ndZ7+wh+y39oD9yh60R2ym/eaXOOv8jtjv7VH7gz1mj9sT9qQ9ZX+0p+2ZX84/69xP2p/tRestEBKQJEUBxVAOiqWclIuuodx0LeWh6yhC11Mc3UB56UbKR/mpABWkeCpEhUmTIUtEIRWhohSlm+jyOr0klSJHpSmBbqEydCuVpduoHN1O5ekOqkAVqRJVpjupCt1FVeluqkb3UHWqQTWpFt1Ltek+qkP3U116gOrRg1SfHqIG9DA1pEeoET1KjekxakKPU1NqRs2pBbWkJ6gVPUmtqQ21paeoHT1N7ekZSqRnqQM9Rx3pb9SJnqfO9AJ1oRepK3Wj7vQS9aCXqSf1oiTqTX3oFepL/ag/DaCB9CoNotdoML1OyTSEhtIbNIzepOH0Fo2gkTSK3qbR9A6NobE0jsZTCk2gifQuTaL3aDJNoak0jVJpOs2g92kmzaLZ9AHNoQ9pLs2j+bSA0ugjWkiLKJ0+psX0CWXQElpKy2g5raCVtIpW0xpaS+toPW2gjbSJNtMW2krbaDvtoJ20i3bTp7SHPqO99Dntoy9oP31JB+grOkhfUyZ9Q4foWzpM39ER+t73oh/oGB2nE3SSTtGPdJrO0Fk6R+fpJ7pAP9NF8gQhhiKUoQqDMCbMEcaGOcNc4TVh7vDaME94XRgJrw/jwhvCvOGNYb4wf1ggLBjGh4XCwqEOTWhDCsOwSFg0jIY3hcXCm8PiYYmwZFgqdGHpMCG8JSwT3hqWDW8Ly4W3h+XDO8IKYcXwsQcqh3eGVcK7wqrh3WG18J6welgjrBnWCu8Na4f3hXXC+8O64QNh2fDBsH74UNggfDhsGD4SNgofDRuHj4VNwsfDpmGzsHnYImwZPhG2Cp8MW4dtwrbhU2G78OmwffhMmBg+G3YIn/ul/8FFf96fFPYO+4SvhK+E3t8v50cXRNOiH0UXRhdF06MfRxdHP4lmRJdEl0aXRZdHV0RXRldFV0fXRNdG10XXRzdEN0Y3Rb2vlQMcOuGkUy5wMS6Hi3U5XS53jcvtrnV53HUu4q53ce4Gl9fd6PK5/K6AK+jiXSFX2GlnnHXkQlfEFXVRd5Mr5m52xV0JV9KVcs6VdgmuhWvpWrpW7knX2rVxbd1T7in3tHvaPeOecc+6Du4519H9zXVyz7vO7gX3gnvRdXXdXHf3kuvhJuT59TOZ5Pq4Pq6v6+v6u/5uoBvoBrlBbrAb7JJdshvqhrphbpgb7oa7EW6EG+VGudFutBvjxrhxbpxLcSluopvoJrlJbrKb7Ka6qS7VpboZboab6Wa6KrN+PcpcN9fNd/NdmktzC13WmjHdLXaLXYbLcEvdUrfcLXcr3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O91Ot9vtdnv8db8O6va5/W6/O+AOuIPua5fpvnGH3LfusPvOHXHfu6PuB3fMHXcn3El3yv3oTrsz7qw75867n9wF97O76LxLiUyITIy8G5kUeS8yOTIlMjUyLZIamR6ZEXk/MjMyKzI78kFkTuTDyNzIvMj8yIJIWuSjyMLIokh65OPI4sgnkYzIksjSyLLI8siKiPeFtoa+iC/qo/4mX8zf7Iv7Er6kL+WdL+0T/C2+jL/Vl/W3+XL+dl/e3+Er+Iq+kn/cN/XNfHPfwrf0T/hW/knf2rfxbf1Tvp1/2rf3z/hE/6zv4J/zHf3ffCf/vO/sX/Bd/Iu+q+/mu/uXfA//su/pe/kk39v38a/4vr6f7+8H+IH+VT/Iv+YH+9d9sh/ih/o3/DD/ph/u3/Ij/Eg/KuZtP/ryJTKM9yl+gp/o3/WT/Ht+sp/ip/ppPtVP9zP8+36mn+Vn+w/8HP+hn+vn+fl+gU/zH/mFfpFP9x/7xf4Tn+GXXL6p7Ff6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX673+F3+l1+t//U7/Gf+b3+c7/Pf+H3+y/9Af+VP+i/9pn+G3/If+sP++/8Ef+9P+p/8Mf8cX/Cn/Sn/I/+tD/jz/pz/rz/yV/wP/uL/G/WGGOMMcb+SyZcaYo/6u/9B8+Jv9u5DwBcu61g5t/3Z60o1+f7td1PxLeLAMCzvbo8cnmrXj0pKenSvhkSgqLzAC7/SVCWGLgSL4G28DQkQhso84fz7ye6nad/Mn70doBcf5cTC1fiK+N/+SfjP/HUqIXlw7Nx/4/x5wEUL3olJydciZdAW5X12AbK/sn4+Vv9k/nn/CoFoPXf5eSGK/GV+SfAk/AcJP5mT8YYY4wxxhhj7Ff9RKVOl68/L/+Nzz+6Po9XV3JywJX4n12fM8YYY4wxxhhj7Op7vlv3Z55ITGzT6V9vVP1vZXHjf2rDe4DLzygA+DcHBPiPn8WW/8ixki99dP6xa/k5H8D/jFL+FY2r/MXEGGOMMcYY+8tdWfT/9nl1tSbEGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xlQ/+J/07sap8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdrX9nwAAAP//geYOMQ==") mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x23694ca, 0x0) 3m38.85121838s ago: executing program 5 (id=1113): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/asound/timers\x00', 0x0, 0x0) lseek(r0, 0x164, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, 0xffffffffffffffff, 0x5, 0x0, 0x0, @void, @value}, 0x10) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x22f42) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r8, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "10003d2b00f7006c", "20e48560999fd10000000000000000ff06100000050000108f00000f00"}) write$sndseq(r8, &(0x7f00000000c0)=[{0x5, 0x3, 0x0, 0x0, @time, {0xd}, {0x0, 0x21}, @result={0x0, 0x316}}], 0x1c) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r9, 0x1, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = syz_open_procfs(0x0, &(0x7f0000000340)='fdinfo/4\x00') read$FUSE(r10, &(0x7f0000002140)={0x2020}, 0x2100) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) write$UHID_CREATE2(r1, &(0x7f00000002c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) 3m36.201196329s ago: executing program 5 (id=1123): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000340)={0x3c, 0x0, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8}]}]}, 0x3c}}, 0x0) 3m36.07391332s ago: executing program 35 (id=1123): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000340)={0x3c, 0x0, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8}]}]}, 0x3c}}, 0x0) 7.12401628s ago: executing program 8 (id=2324): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="000086dd000311000400000000006e6ad9ba00442f0100000000000000000000ffffac1414bbff020000000000000000000000000001042022eb"], 0x7a) 6.742086893s ago: executing program 8 (id=2329): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/asound/timers\x00', 0x0, 0x0) lseek(r0, 0x164, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, 0xffffffffffffffff, 0x5, 0x0, 0x0, @void, @value}, 0x10) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x22f42) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r7, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "10003d2b00f7006c", "20e48560999fd10000000000000000ff06100000050000108f00000f00"}) write$sndseq(r7, &(0x7f00000000c0)=[{0x5, 0x3, 0x0, 0x0, @time, {0xd}, {0x0, 0x21}, @result={0x0, 0x316}}], 0x1c) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r8, 0x1, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = syz_open_procfs(0x0, &(0x7f0000000340)='fdinfo/4\x00') read$FUSE(r9, &(0x7f0000002140)={0x2020}, 0x2100) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) 5.810418149s ago: executing program 8 (id=2334): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000000), 0x10) sendto$l2tp(r0, &(0x7f0000000080)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f00000000c0)=0x401, 0x4) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x10100, 0x0) 5.76324183s ago: executing program 6 (id=2335): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, 0x0) 5.70425326s ago: executing program 8 (id=2337): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231306e53f070c00d1192a94010706001600377f0f6e460b09007a15b3"], 0x0}, 0x0) 5.531351791s ago: executing program 6 (id=2338): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4044010) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x10000, @rand_addr=' \x01\x00', 0x3b06f9c9}, 0x1c) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb4, &(0x7f0000000140)=""/180, 0x41000, 0x4f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000340)={"c8fcf7d8", 0x8, 0xb, 0x7, 0xa73, 0x9, "9e908fdd9f1e7662aa2fb4729b34d3", "2113110b", "dadf94bf", "64c67da2", ["ad0d2c5d450e5c6eb7c9f519", "46fb109af258a8ecf6aa42cc", "6a3b7747ba91012fdd576c84", "dc31c98599167cd9f56e4597"]}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(r3, r0, 0x2) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x2}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) close_range(r4, 0xffffffffffffffff, 0x0) 4.414823849s ago: executing program 7 (id=2344): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x5d, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x18}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) uname(&(0x7f0000000640)=""/87) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) 4.365469499s ago: executing program 6 (id=2345): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/asound/timers\x00', 0x0, 0x0) lseek(r0, 0x164, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, 0xffffffffffffffff, 0x5, 0x0, 0x0, @void, @value}, 0x10) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x22f42) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r7, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "10003d2b00f7006c", "20e48560999fd10000000000000000ff06100000050000108f00000f00"}) write$sndseq(r7, &(0x7f00000000c0)=[{0x5, 0x3, 0x0, 0x0, @time, {0xd}, {0x0, 0x21}, @result={0x0, 0x316}}], 0x1c) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r8, 0x1, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = syz_open_procfs(0x0, &(0x7f0000000340)='fdinfo/4\x00') read$FUSE(r9, &(0x7f0000002140)={0x2020}, 0x2100) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) 3.677472814s ago: executing program 2 (id=2348): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f00000003c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd3f503f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32ccd508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f71105c4a42e9b979fcee1f628d1cec3462830606bb612bfed912c1cdc907bb91a2e86de2ad5", @ANYBLOB=',session=0000\x00000000000000005,\x00'], 0x12, 0xc38, &(0x7f0000001080)="$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") setresuid(0x0, 0xee01, 0xee01) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) chown(&(0x7f0000000040)='./file1\x00', 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0x8}}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodiscard}, {@nodelalloc}, {@acl}, {@dioread_lock}]}, 0x1, 0x571, &(0x7f0000003780)="$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") 3.394204356s ago: executing program 3 (id=2349): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) 3.393168806s ago: executing program 6 (id=2350): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$rtc(&(0x7f0000000240), 0x9, 0x4c0900) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x13) r5 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r7, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="02002bbd7000fddbdf250100000000000000014100000018001700000000000000057564703a73797a3200000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000812}, 0x24000001) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000040)={[{0x2d, 'cpu'}]}, 0x5) 3.298973157s ago: executing program 7 (id=2351): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, &(0x7f0000000100)}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x95d}) 3.207027858s ago: executing program 3 (id=2352): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x1d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440), 0x1c9381, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001780)={@cgroup=r6, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) write$vga_arbiter(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="6465636f64657320696f2b6d656d00b6f82debda494f961ff38d22a28ca0639cf80cd40688aa9d31e34867885e8a8796411bdd5344d3799f3b2cf019a25f1ae04783328259a406323247e2a21f44571dae3ec4878475a1b8dda1ab36fc7fb3c00ead"], 0xf) r7 = syz_open_procfs(0x0, &(0x7f0000001080)='smaps_rollup\x00') read$FUSE(r7, &(0x7f0000002e40)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce851400040002000000ac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) 2.206036315s ago: executing program 7 (id=2353): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000004940)={0x0, 0xfe28, 0x3, 0x8, 0x4d17, 0x6}, &(0x7f0000004980)=0x14) 2.173125145s ago: executing program 2 (id=2354): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000280)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSG0EmKPILUhcaModhzFTmlCD+mZKxKVOMGRP4BzT9y5IHrjUg5I/IhADRIHoxlPUje1m6hJ7Gz8+UijeW/e1N/vazrvxS+NXwBD62pE7EbEWETcjojp7HouO+KT9pHc93Tv/tL+3v2lXLRan/0zl7Yn16LjzySuZK9ZjIgffS/ip7kX4za2d9YWq9XKZlafbdY2ZhvbOzdWa4srlZXKerm8ML8w99HND8tn1td3amNZ6atP/rj7rZ8naU1lVzr7cZbaXS8cxkmMRsQPziPYAIxk/RkbdCK8knxEvBkR76bP/3SMpF9NAOAya7WmozXdWQcALrt8ugaWy5eytYCpyOdLpfYa3lsxma/WG83rd+pb68vttbKZKOTvrFYrc9la4UwUckl9Pi0/q5eP1G9GxBsR8cvxibReWqpXlwf5jQ8ADLErR+b//4y3538A4JIrDjoBAKDvzP8AMHzM/wAwfMz/ADB82vP/xKDTAAD6yPt/ABg+5n8AGCo//PTT5GjtZ59/vXx3e2utfvfGcqWxVqptLZWW6psbpZV6fSX9zJ7aca9Xrdc35j+IrXsz395oNGcb2zu3avWt9eat9HO9b1UK6V27fegZANDLG+88epxLZuSPJ9IjOvZyKAw0M+C85QedADAwI4NOABgYu33B8DrFe3zLA3BJdNmi9znFbr8g1Gq1WueXEnDOrn3J+j8Mq471f/8LGIaM9X8YXtb/YXi1WrmT7vkfJ70RALjYrPEDPX7+/2Z2/l32w4GfLB+94+F5ZgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX28H+v6VsL/CpyOdLpYjXImImCrk7q9XKXES8HhF/Hi+MJ/X5AecMAJxW/m+5bP+va9PvTz3X9PaVw+JYRPzs15/96t5is7n5p4ix3L/GD643H2bXy/3PHgA43sE8nZ473sg/3bu/dHD0M5+/fzciiu34+3tjsX8YfzRG03MxChEx+e9cVm/LdaxdnMbug4j4Yrf+52IqXQNp73x6NH4S+7W+xs8/Fz+ftrXPyd/FF84gFxg2j5Lx55Nuz18+rqbn7s9/MR2hTi8b/5KXWtpPx8Bn8Q/Gv5Ee49/Vk8b44A/fb5cmXmx7EPHl0YiD2Psd489B/FyP+O+fMP5fvvL2u73aWr+JuBbd43fGmm3WNmYb2zs3VmuLK5WVynq5vDC/MPfRzQ/Ls+ka9Wzv2eAfH19/vVdb0v/JHvGLx/T/6yfs/2//d/vHX3tJ/G++1y1+Pt56SfxkTvzGCeMvTv6+2Kstib/co//Hff2vnzD+k7/uvLBtOAAwOI3tnbXFarWy+TkqPE6+pxl8Ggr9LyT/ZC9AGl0L3+lXrLHo3vSL99rP9JGmVuuVYvUaMc5i1Q24CA4f+oj476CTAQAAAAAAAAAAAAAAuurHbywNuo8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcXv8PAAD//+a4zis=") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9d}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0xff, 0x0, &(0x7f0000000d40)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) 2.110918695s ago: executing program 8 (id=2355): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4044010) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x10000, @rand_addr=' \x01\x00', 0x3b06f9c9}, 0x1c) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb4, &(0x7f0000000140)=""/180, 0x41000, 0x4f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000340)={"c8fcf7d8", 0x8, 0xb, 0x7, 0xa73, 0x9, "9e908fdd9f1e7662aa2fb4729b34d3", "2113110b", "dadf94bf", "64c67da2", ["ad0d2c5d450e5c6eb7c9f519", "46fb109af258a8ecf6aa42cc", "6a3b7747ba91012fdd576c84", "dc31c98599167cd9f56e4597"]}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(r3, r0, 0x2) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x2}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) close_range(r4, 0xffffffffffffffff, 0x0) 2.030710866s ago: executing program 2 (id=2356): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000280)="$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") link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x2) link(&(0x7f0000000280)='./file1\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x8001, 0x3, 0x0, 0x2000, 0xffffffff}) 1.981797906s ago: executing program 2 (id=2357): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x4441, &(0x7f0000004480)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0x40406f06, &(0x7f00000000c0)={0x0, 0x0, 0x86fb}) 1.772512478s ago: executing program 6 (id=2358): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/asound/timers\x00', 0x0, 0x0) lseek(r0, 0x164, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400"], 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x22f42) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r8, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "10003d2b00f7006c", "20e48560999fd10000000000000000ff06100000050000108f00000f00"}) write$sndseq(r8, &(0x7f00000000c0)=[{0x5, 0x3, 0x0, 0x0, @time, {0xd}, {0x0, 0x21}, @result={0x0, 0x316}}], 0x1c) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r9, 0x1, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = syz_open_procfs(0x0, &(0x7f0000000340)='fdinfo/4\x00') read$FUSE(r10, &(0x7f0000002140)={0x2020}, 0x2100) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) write$UHID_CREATE2(r1, &(0x7f00000002c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) 1.565548169s ago: executing program 3 (id=2359): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) shutdown(r0, 0x1) recvfrom(r0, 0x0, 0x0, 0x40008143, 0x0, 0x0) 1.341224291s ago: executing program 3 (id=2360): openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000005) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) dup(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2f19c4, &(0x7f0000000400)=ANY=[]) mount(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000200)) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2) sendmmsg$unix(r3, 0x0, 0x0, 0x4040) chdir(0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x8000, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 1.191046162s ago: executing program 7 (id=2361): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/asound/timers\x00', 0x0, 0x0) lseek(r0, 0x164, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, 0xffffffffffffffff, 0x5, 0x0, 0x0, @void, @value}, 0x10) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x22f42) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r7, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "10003d2b00f7006c", "20e48560999fd10000000000000000ff06100000050000108f00000f00"}) write$sndseq(r7, &(0x7f00000000c0)=[{0x5, 0x3, 0x0, 0x0, @time, {0xd}, {0x0, 0x21}, @result={0x0, 0x316}}], 0x1c) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r8, 0x1, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = syz_open_procfs(0x0, &(0x7f0000000340)='fdinfo/4\x00') read$FUSE(r9, &(0x7f0000002140)={0x2020}, 0x2100) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) 917.592824ms ago: executing program 8 (id=2362): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x5d, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x18}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) uname(&(0x7f0000000640)=""/87) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) 733.727725ms ago: executing program 2 (id=2363): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x2000000) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0xb, 0x380000, 0x3ff, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x4, 0x7fff, 0x6, 0x7, 0x4, 0xca3, 0x7, 0x80000000, 0xfffffffffffffffd, 0xffffffffffffffff, 0x9, 0x0, 0x100, 0x4, 0x2, 0x7, 0x3, 0x8, 0x5}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0xe, 0xe, 0x6, 0xf, 0xa, 0x0, 0x2, 0x9, 0x2, 0x4, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x7, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x8, 0x7, 0x3, 0x7ff}) 699.830016ms ago: executing program 6 (id=2364): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_setup(0x6, &(0x7f0000001380)=0x0) write$binfmt_aout(r0, 0x0, 0x776) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x8001, r0, 0x0}]) 229.419719ms ago: executing program 7 (id=2365): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@sysvgroups}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x44d, &(0x7f0000000340)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x194) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 139.52541ms ago: executing program 3 (id=2366): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x5b}, 0x9) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={r1, 0x65, 0x10}, 0xc) 28.33767ms ago: executing program 3 (id=2367): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@test_dummy_encryption}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x460, &(0x7f00000008c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000180)=""/66, 0x42) 368.44µs ago: executing program 2 (id=2368): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x4000000, @loopback, 0x1}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvfrom(r0, 0x0, 0x0, 0xc0010100, 0x0, 0x0) 0s ago: executing program 7 (id=2369): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) kernel console output (not intermixed with test programs): m_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 555.036751][ T9349] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 555.113888][ T9353] loop7: detected capacity change from 0 to 4096 [ 555.114985][ T9349] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 555.155214][ T9349] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 555.282830][ T9358] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 555.391734][ T9353] NILFS (loop7): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 555.408352][ T9353] NILFS error (device loop7): nilfs_bmap_truncate: broken bmap (inode number=12) [ 555.525063][ T9353] Remounting filesystem read-only [ 555.530191][ T9353] NILFS (loop7): error -5 truncating bmap (ino=12) [ 555.586230][ T5974] NILFS (loop7): disposed unprocessed dirty file(s) when detaching log writer [ 555.616379][ T5974] NILFS (loop7): discard dirty page: offset=0, ino=2 [ 555.623794][ T5974] NILFS (loop7): discard dirty block: blocknr=14, size=4096 [ 555.659462][ T5974] NILFS (loop7): discard dirty page: offset=0, ino=6 [ 555.679976][ T5974] NILFS (loop7): discard dirty block: blocknr=23, size=4096 [ 555.702239][ T5974] NILFS (loop7): discard dirty page: offset=4096, ino=6 [ 555.723122][ T5974] NILFS (loop7): discard dirty block: blocknr=24, size=4096 [ 555.745365][ T5974] NILFS (loop7): discard dirty page: offset=8192, ino=6 [ 555.770166][ T5974] NILFS (loop7): discard dirty block: blocknr=25, size=4096 [ 555.904261][ T9367] loop6: detected capacity change from 0 to 764 [ 555.981555][ T9367] Symlink component flag not implemented [ 556.003249][ T9367] Symlink component flag not implemented [ 556.130943][ T9367] Symlink component flag not implemented (129) [ 556.157060][ T9367] Symlink component flag not implemented (6) [ 556.189080][ T9369] loop7: detected capacity change from 0 to 8192 [ 556.269105][ T9369] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 556.973102][ T9377] loop2: detected capacity change from 0 to 4096 [ 557.073388][ T9377] ntfs: volume version 3.1. [ 557.290136][ T9382] loop3: detected capacity change from 0 to 4096 [ 557.332674][ T9387] loop5: detected capacity change from 0 to 2048 [ 558.019820][ T9382] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 558.058860][ T9387] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 558.229232][ T9394] loop2: detected capacity change from 0 to 512 [ 558.344993][ T9382] ntfs3: loop3: failed to convert "c46c" to iso8859-5 [ 558.380285][ T9394] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 558.414393][ T9394] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 558.618779][ T9409] loop7: detected capacity change from 0 to 512 [ 560.121701][ T9409] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,,errors=continue. Quota mode: writeback. [ 560.301554][ T9409] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 561.988170][ T9446] loop2: detected capacity change from 0 to 1024 [ 562.114445][ T9444] loop5: detected capacity change from 0 to 4096 [ 562.269779][ T9444] NILFS (loop5): invalid segment: Checksum error in segment payload [ 562.295299][ T9444] NILFS (loop5): trying rollback from an earlier position [ 562.348357][ T9444] NILFS (loop5): recovery cancelled because norecovery option was specified for a read/write mount [ 562.630845][ T9443] loop6: detected capacity change from 0 to 32768 [ 563.027022][ T9459] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 563.126913][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.134266][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.644459][ T9464] loop6: detected capacity change from 0 to 64 [ 563.677825][ T9465] loop5: detected capacity change from 0 to 512 [ 563.719131][ T9464] hfs: session requires an argument [ 563.724403][ T9464] hfs: unable to parse mount options [ 564.505762][ T9465] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 564.733262][ T9465] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 564.980498][ T9476] loop7: detected capacity change from 0 to 2048 [ 565.005558][ T9480] loop2: detected capacity change from 0 to 64 [ 565.242219][ T9480] Bad inode number on dev loop2: 6 is out of range [ 565.276998][ T9476] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 565.931185][ T9489] loop3: detected capacity change from 0 to 4096 [ 566.213532][ T9489] __ntfs_error: 25 callbacks suppressed [ 566.213552][ T9489] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 566.230998][ T9489] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 566.245142][ T9489] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 566.256785][ T9489] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 566.269819][ T9489] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 566.325931][ T9489] ntfs: volume version 3.1. [ 566.338489][ T9489] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 566.350748][ T9489] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 566.376489][ T9489] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 566.387760][ T9489] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 566.399565][ T9489] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 566.764986][ T9500] loop2: detected capacity change from 0 to 1764 [ 568.393120][ T500] kworker/dying (500) used greatest stack depth: 18296 bytes left [ 568.535202][ T9515] loop5: detected capacity change from 0 to 256 [ 568.717232][ T9515] exfat: Deprecated parameter 'namecase' [ 568.830248][ T9522] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 568.956005][ T9515] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 569.394612][ T9524] loop7: detected capacity change from 0 to 512 [ 569.574068][ T9529] loop3: detected capacity change from 0 to 1024 [ 569.739310][ T9524] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 569.971832][ T9524] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 571.040566][ T9543] loop6: detected capacity change from 0 to 4096 [ 571.215914][ T9543] ntfs: volume version 3.1. [ 571.222423][ T9543] __ntfs_error: 13 callbacks suppressed [ 571.222442][ T9543] ntfs: (device loop6): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 571.240546][ T9543] ntfs: (device loop6): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 571.255200][ T9543] ntfs: (device loop6): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 571.266635][ T9543] ntfs: (device loop6): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 571.277985][ T9543] ntfs: (device loop6): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 571.294234][ T9543] ntfs: (device loop6): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute name is placed after the attribute value. [ 571.307842][ T9543] ntfs: (device loop6): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 571.321841][ T9543] ntfs: (device loop6): load_and_init_quota(): Failed to load $Quota/$Q index. [ 571.330836][ T9543] ntfs: (device loop6): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 571.354367][ T9541] ntfs: (device loop6): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 571.961431][ T9553] loop3: detected capacity change from 0 to 4096 [ 572.118826][ T9553] ntfs: volume version 3.1. [ 572.164683][ T1276] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.359113][ T1276] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.225830][ T9573] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 574.951286][ T1276] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.228425][ T9569] loop7: detected capacity change from 0 to 4096 [ 575.449220][ T9569] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 575.467248][ T9569] ntfs3: loop7: Failed to load $Extend. [ 575.480099][ T1276] bridge0: port 3(netdevsim0) entered disabled state [ 575.556130][ T9569] ntfs3: loop7: ino=5, "/" directory corrupted [ 575.565532][ T9585] loop6: detected capacity change from 0 to 512 [ 575.574121][ T1276] device netdevsim0 left promiscuous mode [ 575.673459][ T1276] bridge0: port 3(netdevsim0) entered disabled state [ 575.730228][ T1276] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.785841][ T9585] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 575.797081][ T9585] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 576.178039][ T9579] lo speed is unknown, defaulting to 1000 [ 576.222835][ T9599] loop2: detected capacity change from 0 to 764 [ 576.332977][ T9599] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 576.428436][ T9599] Symlink component flag not implemented [ 576.482459][ T9599] Symlink component flag not implemented [ 576.520324][ T9599] Symlink component flag not implemented (128) [ 576.536082][ T9599] Symlink component flag not implemented (122) [ 576.595494][ T1276] tipc: Disabling bearer [ 576.607520][ T1276] tipc: Left network mode [ 576.818379][ T9579] chnl_net:caif_netlink_parms(): no params data found [ 577.249054][ T9579] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.292034][ T9579] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.313741][ T9579] device bridge_slave_0 entered promiscuous mode [ 577.343945][ T9579] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.369527][ T9579] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.390362][ T9579] device bridge_slave_1 entered promiscuous mode [ 577.649117][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 577.735524][ T9579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 577.770202][ T9579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.094643][ T9579] team0: Port device team_slave_0 added [ 578.123764][ T9633] loop6: detected capacity change from 0 to 2048 [ 578.177771][ T9579] team0: Port device team_slave_1 added [ 578.333986][ T9579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 578.376372][ T9649] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 578.588101][ T9579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.614405][ C1] vkms_vblank_simulate: vblank timer overrun [ 578.978258][ T9579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 578.995459][ T9633] attempt to access beyond end of device [ 578.995459][ T9633] loop6: rw=0, want=19791209300042, limit=2048 [ 579.012865][ T9633] NILFS (loop6): I/O error reading meta-data file (ino=6, block-offset=1) [ 579.147290][ T9579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 579.164859][ T9579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.260119][ T9579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.538662][ T9579] device hsr_slave_0 entered promiscuous mode [ 579.616932][ T9579] device hsr_slave_1 entered promiscuous mode [ 579.644227][ T9579] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 579.682760][ T9579] Cannot create hsr debugfs directory [ 579.688522][ T1326] Bluetooth: hci4: command 0x041b tx timeout [ 579.850923][ T9666] loop7: detected capacity change from 0 to 512 [ 580.071299][ T9666] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 580.126323][ T9666] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 580.184959][ T1276] device hsr_slave_0 left promiscuous mode [ 580.206695][ T1276] device hsr_slave_1 left promiscuous mode [ 580.235047][ T1276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.280644][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.321824][ T1276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.360318][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.388308][ T1276] batman_adv: batadv0: Interface deactivated: vlan0 [ 580.394998][ T1276] batman_adv: batadv0: Removing interface: vlan0 [ 580.402254][ T1276] device bridge_slave_1 left promiscuous mode [ 580.408625][ T1276] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.418982][ T1276] device bridge_slave_0 left promiscuous mode [ 580.425211][ T1276] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.601642][ T1276] device veth1_macvtap left promiscuous mode [ 580.640646][ T1276] device veth0_macvtap left promiscuous mode [ 580.684632][ T1276] device veth1_vlan left promiscuous mode [ 580.720581][ T1276] device veth0_vlan left promiscuous mode [ 581.796451][ T4521] Bluetooth: hci4: command 0x040f tx timeout [ 581.842604][ T9703] loop3: detected capacity change from 0 to 64 [ 581.973505][ T1276] team0 (unregistering): Port device team_slave_1 removed [ 582.031871][ T9703] hfs: unable to read volume bitmap [ 582.047190][ T9703] hfs: can't find a HFS filesystem on dev loop3 [ 582.067805][ T1276] team0 (unregistering): Port device team_slave_0 removed [ 582.756455][ T1276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.773798][ T1276] device bond_slave_1 left promiscuous mode [ 582.815449][ T1276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.827306][ T1276] device bond_slave_0 left promiscuous mode [ 582.952915][ T1276] bond0 (unregistering): Released all slaves [ 583.002788][ T9713] loop6: detected capacity change from 0 to 4096 [ 583.846307][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 583.870959][ T9713] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 583.982434][ T9579] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 584.089799][ T9579] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 584.203146][ T9579] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 584.231669][ T9579] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 584.274560][ T9713] ntfs3: loop6: failed to convert "c46c" to iso8859-5 [ 584.592201][ T9726] loop3: detected capacity change from 0 to 4096 [ 584.727039][ T9726] __ntfs_error: 21 callbacks suppressed [ 584.727079][ T9726] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 584.744535][ T9726] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 584.762930][ T9726] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 584.774524][ T9726] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 584.787811][ T9726] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 584.808915][ T9726] ntfs: volume version 3.1. [ 584.821736][ T9726] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 584.835011][ T9726] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 584.858355][ T9726] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 584.869608][ T9726] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 584.881143][ T9726] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 585.143670][ T9579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.192089][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 585.206775][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 585.248324][ T9579] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.400371][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 585.450234][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 585.606928][ T9742] loop6: detected capacity change from 0 to 4096 [ 586.045722][ T9744] loop3: detected capacity change from 0 to 4096 [ 586.170310][ T9744] ntfs: volume version 3.1. [ 586.189624][ T9742] ntfs: volume version 3.1. [ 586.203998][ T4380] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.211146][ T4380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.423059][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 586.457124][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 586.516809][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 586.541588][ T9752] loop6: detected capacity change from 0 to 512 [ 586.551484][ T4380] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.558624][ T4380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.674475][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 586.715708][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 586.755146][ T9752] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 586.809322][ T9752] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 586.988201][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 587.143677][ T9725] loop2: detected capacity change from 0 to 32768 [ 587.190323][ T9752] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 587.312572][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 587.418706][ T9752] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 587.457000][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 587.475350][ T9752] System zones: 0-2, 18-18, 34-35 [ 587.497293][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 587.541506][ T9752] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 587.736415][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 587.845238][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 588.057008][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 588.533186][ T9767] loop2: detected capacity change from 0 to 256 [ 588.550418][ T9579] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 588.610358][ T9767] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 588.682173][ T9579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 588.725922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 588.747696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 589.174147][ T9783] loop2: detected capacity change from 0 to 64 [ 589.252416][ T9783] MINIX-fs: mounting file system with errors, running fsck is recommended [ 589.334550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 589.352460][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 589.378134][ T9794] loop6: detected capacity change from 0 to 512 [ 589.399837][ T9579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 589.495196][ T9794] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 589.576614][ T9794] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 589.687088][ T9794] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 590.114096][ T9794] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 590.210220][ T9794] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e118, mo2=0000] [ 590.472414][ T9794] EXT4-fs (loop6): orphan cleanup on readonly fs [ 590.490213][ T9794] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1171: bg 0: block 34: padding at end of block bitmap is not set [ 590.525240][ T9794] __quota_error: 39 callbacks suppressed [ 590.525256][ T9794] Quota error (device loop6): write_blk: dquota write failed [ 590.614873][ T9794] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 590.663664][ T9794] EXT4-fs error (device loop6): ext4_acquire_dquot:6197: comm syz.6.1171: Failed to acquire dquot type 1 [ 590.751502][ T9794] EXT4-fs (loop6): 1 truncate cleaned up [ 590.768645][ T9794] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,bsdgroups,nogrpid,noblock_validity,,errors=continue. Quota mode: writeback. [ 591.302819][ T9816] loop2: detected capacity change from 0 to 2048 [ 591.612017][ T9816] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 591.623688][ T9831] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 591.670880][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 591.680203][ T9816] Remounting filesystem read-only [ 591.737346][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 591.761058][ T9816] NILFS (loop2): the device already has a read-only mount. [ 591.842907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 591.862868][ T9838] loop6: detected capacity change from 0 to 16 [ 591.888373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 591.929617][ T9838] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 591.939719][ T9579] device veth0_vlan entered promiscuous mode [ 591.957441][ T9844] loop7: detected capacity change from 0 to 8 [ 591.973849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 591.990982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 592.007548][ T9838] erofs: (device loop6): mounted with root inode @ nid 36. [ 592.079718][ T9579] device veth1_vlan entered promiscuous mode [ 592.148452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 592.164186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 592.226988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 592.235655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 592.374329][ T9579] device veth0_macvtap entered promiscuous mode [ 592.485975][ T9861] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 593.307194][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 593.799634][ T9579] device veth1_macvtap entered promiscuous mode [ 594.095036][ T9579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.131069][ T9871] loop3: detected capacity change from 0 to 512 [ 594.166062][ T9579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.196150][ T9579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.218210][ T9878] loop7: detected capacity change from 0 to 64 [ 594.246261][ T9579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.269940][ T9579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.316443][ T9579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.350614][ T9579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 594.362973][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 594.374343][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 594.391794][ T9871] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 594.415977][ T9878] hfs: unable to locate alternate MDB [ 594.650483][ T9885] loop6: detected capacity change from 0 to 4096 [ 594.708892][ T9878] hfs: continuing without an alternate MDB [ 594.778341][ T9871] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 594.990351][ T9871] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 595.017325][ T9579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.032340][ T9579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.036248][ T9885] ntfs: (device loop6): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 595.051780][ T9579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.054042][ T9885] ntfs: (device loop6): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 595.079819][ T9885] ntfs: (device loop6): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 595.089039][ T9579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.091292][ T9885] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 595.114117][ T9885] ntfs: (device loop6): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 595.134999][ T9885] ntfs: volume version 3.1. [ 595.136505][ T9871] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 595.151021][ T9885] ntfs: (device loop6): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 595.163699][ T9885] ntfs: (device loop6): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 595.186195][ T9885] ntfs: (device loop6): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 595.189178][ T9871] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e118, mo2=0000] [ 595.236559][ T9579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.258620][ T9871] EXT4-fs (loop3): orphan cleanup on readonly fs [ 595.266605][ T9579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.277147][ T9579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.289865][ T9871] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1190: bg 0: block 34: padding at end of block bitmap is not set [ 595.311071][ T9889] loop2: detected capacity change from 0 to 128 [ 595.317876][ T9579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.403065][ T9871] EXT4-fs error (device loop3): ext4_acquire_dquot:6197: comm syz.3.1190: Failed to acquire dquot type 1 [ 595.406925][ T9579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 595.431172][ T9579] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.440113][ T9579] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.465075][ T9579] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.483784][ T9579] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.485946][ T9871] EXT4-fs (loop3): 1 truncate cleaned up [ 595.508524][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 595.525975][ T9871] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,bsdgroups,nogrpid,noblock_validity,,errors=continue. Quota mode: writeback. [ 595.527372][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 595.587337][ T9889] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 595.603034][ T9889] System zones: 1-3, 19-19, 35-36 [ 595.622037][ T9889] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 595.704572][ T9898] loop6: detected capacity change from 0 to 256 [ 595.766282][ T9889] ext4 filesystem being mounted at /258/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 595.861084][ T9889] EXT4-fs warning (device loop2): ext4_group_extend:1823: can't shrink FS - resize aborted [ 595.872065][ T9898] FAT-fs (loop6): Directory bread(block 64) failed [ 595.899721][ T9898] FAT-fs (loop6): Directory bread(block 65) failed [ 595.922656][ T4380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.936243][ T9898] FAT-fs (loop6): Directory bread(block 66) failed [ 595.945746][ T4380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.974810][ T9898] FAT-fs (loop6): Directory bread(block 67) failed [ 596.012519][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.024033][ T9898] FAT-fs (loop6): Directory bread(block 68) failed [ 596.053311][ T9898] FAT-fs (loop6): Directory bread(block 69) failed [ 596.064919][ T6292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 596.092273][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.108163][ T9898] FAT-fs (loop6): Directory bread(block 70) failed [ 596.141503][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 596.168431][ T9898] FAT-fs (loop6): Directory bread(block 71) failed [ 596.175554][ T9898] FAT-fs (loop6): Directory bread(block 72) failed [ 596.226089][ T9898] FAT-fs (loop6): Directory bread(block 73) failed [ 596.926129][ T9914] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 597.952455][ T9916] loop2: detected capacity change from 0 to 4096 [ 598.039673][ T9916] __ntfs_error: 10 callbacks suppressed [ 598.039714][ T9916] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 598.057169][ T9916] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 598.075655][ T9916] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 598.087317][ T9916] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 598.100655][ T9916] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 598.125793][ T9916] ntfs: volume version 3.1. [ 598.150361][ T9916] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 598.163736][ T9916] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 598.178391][ T9916] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 598.189558][ T9916] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 598.200940][ T9916] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 598.264890][ T9919] loop8: detected capacity change from 0 to 256 [ 598.582194][ T9924] loop6: detected capacity change from 0 to 1024 [ 599.707151][ T9938] loop7: detected capacity change from 0 to 4096 [ 599.880919][ T9938] ntfs: volume version 3.1. [ 600.709316][ T9949] loop3: detected capacity change from 0 to 4096 [ 600.986824][ T9952] loop7: detected capacity change from 0 to 64 [ 600.996979][ T9949] ntfs: volume version 3.1. [ 601.073134][ T9957] loop8: detected capacity change from 0 to 256 [ 601.161046][ T9957] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 601.175318][ T9957] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 601.191135][ T9957] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 601.214070][ T9957] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 601.259207][ T9957] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 601.271209][ T9957] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 601.301484][ T9957] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 601.324128][ T9965] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 601.360394][ T9957] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 601.374136][ T9965] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 601.383255][ T9957] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 601.406385][ T9968] loop7: detected capacity change from 0 to 256 [ 601.413875][ T9957] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 601.435381][ T9968] exfat: Deprecated parameter 'namecase' [ 601.455474][ T9957] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 601.605750][ T9968] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 601.618818][ T9957] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 601.628053][ T9957] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 601.637411][ T9957] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 601.646097][ T9957] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 601.654636][ T9957] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 601.664660][ T9957] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 601.673254][ T9957] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 601.682452][ T9957] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 602.490137][ T9979] loop3: detected capacity change from 0 to 4096 [ 602.639242][ T9957] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 602.651469][ T9957] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 602.676887][ T9979] ntfs: volume version 3.1. [ 602.676898][ T9957] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 602.724440][ T9957] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 602.746947][ T9957] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 602.785529][ T9099] udevd[9099]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 603.158074][ T9099] udevd[9099]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 603.496291][T10002] loop7: detected capacity change from 0 to 4096 [ 603.542075][T10002] __ntfs_error: 55 callbacks suppressed [ 603.542114][T10002] ntfs: (device loop7): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 603.559551][T10002] ntfs: (device loop7): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 603.586209][T10002] ntfs: (device loop7): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 603.597824][T10002] ntfs: (device loop7): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 603.611012][T10002] ntfs: (device loop7): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 603.630521][T10002] ntfs: volume version 3.1. [ 603.645356][T10002] ntfs: (device loop7): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 603.658718][T10002] ntfs: (device loop7): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 603.694590][T10002] ntfs: (device loop7): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 603.705801][T10002] ntfs: (device loop7): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 603.717194][T10002] ntfs: (device loop7): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 603.763159][ T9099] udevd[9099]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 603.774820][T10005] loop3: detected capacity change from 0 to 64 [ 603.803290][ T9099] udevd[9099]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 604.209644][T10018] loop3: detected capacity change from 0 to 1024 [ 604.431799][T10020] loop7: detected capacity change from 0 to 4096 [ 604.504561][T10020] ntfs: volume version 3.1. [ 604.820178][T10026] loop6: detected capacity change from 0 to 4096 [ 605.185259][T10026] ntfs: volume version 3.1. [ 605.210258][T10030] loop7: detected capacity change from 0 to 256 [ 605.282534][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 605.308087][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 605.395407][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 605.405449][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 605.415012][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 605.430346][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 605.439567][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 605.452735][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 605.464017][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 605.543129][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 605.582182][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 605.603972][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 605.645538][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 605.672112][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 605.723542][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 605.753167][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 605.774288][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 605.808429][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 605.835092][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 605.851269][ T4519] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 605.873639][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 605.913109][T10050] loop8: detected capacity change from 0 to 16 [ 605.931934][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 605.962452][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 605.975379][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 606.014972][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 606.036797][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 606.062020][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 606.083230][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 606.093897][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 606.108942][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 606.122366][ T4519] usb 4-1: Using ep0 maxpacket: 16 [ 606.134575][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 606.143689][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 606.163769][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 606.175241][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 606.210396][T10050] erofs: (device loop8): mounted with root inode @ nid 36. [ 606.218309][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 606.235283][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 606.249308][T10050] attempt to access beyond end of device [ 606.249308][T10050] loop8: rw=0, want=15300821032, limit=16 [ 606.266305][ T4519] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 606.274509][ T4519] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.286732][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 606.305566][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 606.317691][ T4519] usb 4-1: config 0 has no interface number 0 [ 606.325843][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 606.335216][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 606.336187][T10050] erofs: (device loop8): z_erofs_lz4_decompress: failed to decompress -18 in[3072, 1024] out[4459] [ 606.352058][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 606.412804][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 606.435215][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 606.486573][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 606.506334][ T4519] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 606.525821][ T4519] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.537493][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 606.544847][ T4519] usb 4-1: Product: syz [ 606.550555][ T4519] usb 4-1: Manufacturer: syz [ 606.555453][ T4519] usb 4-1: SerialNumber: syz [ 606.566098][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 606.587912][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 606.607888][ T4519] usb 4-1: config 0 descriptor?? [ 606.617939][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 606.630511][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 606.644471][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 606.661601][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 606.672683][ T4519] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 606.686145][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 606.694774][ T4519] usb 4-1: No valid video chain found. [ 606.709872][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 606.735044][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 606.744119][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 606.753025][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 606.762072][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 606.770893][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 606.779965][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 606.788863][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 606.797943][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 606.816505][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 606.825094][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 606.858577][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 606.875799][ T4519] usb 4-1: USB disconnect, device number 7 [ 606.973970][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 607.009606][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 607.049388][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 607.078340][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 607.098618][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 607.145368][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 607.154328][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 607.163292][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 607.871425][T10070] loop8: detected capacity change from 0 to 4096 [ 608.203406][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 608.294393][T10070] ntfs: volume version 3.1. [ 608.360956][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 608.501931][T10030] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 611.108130][T10107] loop6: detected capacity change from 0 to 512 [ 611.509778][T10107] EXT4-fs (loop6): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000007,inode_readahead_blks=0x0000000000000800,norecovery,user_xattr,,errors=continue. Quota mode: writeback. [ 612.344314][T10122] loop8: detected capacity change from 0 to 4096 [ 613.311769][T10107] ext4 filesystem being mounted at /195/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 613.324262][T10122] __ntfs_error: 57 callbacks suppressed [ 613.324281][T10122] ntfs: (device loop8): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 613.341777][T10122] ntfs: (device loop8): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 613.360207][T10122] ntfs: (device loop8): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 613.371758][T10122] ntfs: (device loop8): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 613.384875][T10122] ntfs: (device loop8): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 613.400058][T10122] ntfs: volume version 3.1. [ 613.408491][T10122] ntfs: (device loop8): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 613.420745][T10122] ntfs: (device loop8): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 613.442677][T10122] ntfs: (device loop8): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 613.454118][T10122] ntfs: (device loop8): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 613.465558][T10122] ntfs: (device loop8): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 613.690929][T10135] netlink: 'syz.3.1253': attribute type 4 has an invalid length. [ 613.699319][T10135] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1253'. [ 613.711309][T10135] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 614.039965][T10157] loop8: detected capacity change from 0 to 256 [ 614.190980][T10157] exfat: Deprecated parameter 'namecase' [ 614.206233][T10157] exfat: Deprecated parameter 'utf8' [ 614.383893][T10157] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 619.250525][T10254] loop7: detected capacity change from 0 to 4096 [ 619.618178][T10254] __ntfs_error: 8 callbacks suppressed [ 619.618196][T10254] ntfs: (device loop7): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 619.635518][T10254] ntfs: (device loop7): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 619.650587][T10254] ntfs: (device loop7): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 619.662068][T10254] ntfs: (device loop7): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 619.675116][T10254] ntfs: (device loop7): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 619.690144][T10254] ntfs: volume version 3.1. [ 619.697574][T10254] ntfs: (device loop7): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 619.709760][T10254] ntfs: (device loop7): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 619.766365][T10254] ntfs: (device loop7): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 619.777470][T10254] ntfs: (device loop7): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 619.788895][T10254] ntfs: (device loop7): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 620.180464][T10267] loop7: detected capacity change from 0 to 1024 [ 620.602719][T10271] loop8: detected capacity change from 0 to 4096 [ 620.753658][T10271] ntfs: volume version 3.1. [ 621.506879][T10291] loop7: detected capacity change from 0 to 2048 [ 621.640058][T10291] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 623.094640][T10309] loop7: detected capacity change from 0 to 4096 [ 623.201849][T10309] ntfs: volume version 3.1. [ 624.340177][T10322] netlink: 129384 bytes leftover after parsing attributes in process `syz.7.1304'. [ 624.607386][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.613708][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.198504][T10360] netlink: 'syz.2.1314': attribute type 4 has an invalid length. [ 626.236103][T10360] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1314'. [ 626.936403][ T4521] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 627.246217][ T4521] usb 3-1: Using ep0 maxpacket: 8 [ 627.366392][ T4521] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 627.387277][T10387] loop8: detected capacity change from 0 to 8 [ 627.432449][ T4521] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 627.453617][ T4521] usb 3-1: config 135 has no interface number 0 [ 627.473965][ T4521] usb 3-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 627.497068][T10387] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 627.534131][ T4521] usb 3-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 627.581938][ T4521] usb 3-1: config 135 interface 230 has no altsetting 0 [ 627.788817][ T4521] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 627.805396][ T4521] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.823094][ T4521] usb 3-1: Product: syz [ 627.840237][ T4521] usb 3-1: Manufacturer: syz [ 627.855778][ T4521] usb 3-1: SerialNumber: syz [ 628.176341][ T4521] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 628.182995][ T4521] usb 3-1: No valid video chain found. [ 628.216982][ T4521] usb 3-1: USB disconnect, device number 5 [ 628.255368][T10419] netlink: 'syz.7.1328': attribute type 21 has an invalid length. [ 628.283034][T10419] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1328'. [ 628.320330][T10419] netlink: 'syz.7.1328': attribute type 4 has an invalid length. [ 628.343826][T10419] netlink: 'syz.7.1328': attribute type 5 has an invalid length. [ 628.355783][T10419] netlink: 3 bytes leftover after parsing attributes in process `syz.7.1328'. [ 629.434163][T10436] misc userio: The device must be registered before sending interrupts [ 630.117283][T10463] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1341'. [ 630.151919][T10463] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1341'. [ 630.191998][T10463] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1341'. [ 630.221720][T10463] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1341'. [ 637.016173][ T4214] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 637.266119][ T4214] usb 3-1: Using ep0 maxpacket: 32 [ 637.386368][ T4214] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 637.414863][ T4214] usb 3-1: config 0 has no interface number 0 [ 637.421340][ T4214] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.446105][ T4214] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.481641][ T4214] usb 3-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 637.515442][ T4214] usb 3-1: config 0 interface 1 has no altsetting 0 [ 637.527443][ T4520] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 637.806254][ T4520] usb 4-1: Using ep0 maxpacket: 16 [ 637.928118][ T4214] usb 3-1: New USB device found, idVendor=076a, idProduct=0300, bcdDevice= 0.00 [ 637.933866][ T4520] usb 4-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 637.946965][ T4214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.957914][ T4214] usb 3-1: config 0 descriptor?? [ 637.977131][ T4520] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.994195][ T4520] usb 4-1: config 0 descriptor?? [ 638.515883][ T4214] hid-generic 0003:076A:0300.0001: hidraw0: USB HID v0.05 Device [HID 076a:0300] on usb-dummy_hcd.2-1/input1 [ 639.012528][ T4214] usb 3-1: USB disconnect, device number 6 [ 639.197171][ T4520] elecom 0003:056E:011C.0002: item fetching failed at offset 3/5 [ 639.205224][ T4520] elecom: probe of 0003:056E:011C.0002 failed with error -22 [ 639.233895][ T4520] usb 4-1: USB disconnect, device number 8 [ 639.336129][ T4519] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 639.527274][ T7721] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 639.746332][ T4519] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 639.757812][ T4519] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 639.767437][ T4519] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.796611][T10635] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 640.047737][ T7721] usb 8-1: Using ep0 maxpacket: 32 [ 640.286411][ T7721] usb 8-1: unable to get BOS descriptor or descriptor too short [ 640.376333][ T7721] usb 8-1: config 127 has an invalid interface number: 25 but max is 0 [ 640.417747][ T7721] usb 8-1: config 127 has no interface number 0 [ 640.448464][ T7721] usb 8-1: config 127 interface 25 has no altsetting 0 [ 640.669661][ T7721] usb 8-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 640.692668][ T7721] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.716543][ T7721] usb 8-1: Product: syz [ 640.726227][ T7721] usb 8-1: Manufacturer: syz [ 640.741203][ T7721] usb 8-1: SerialNumber: syz [ 641.238584][ T7721] usb 8-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 642.562676][ T4520] usb 9-1: USB disconnect, device number 2 [ 642.816487][T10701] futex_wake_op: syz.6.1415 tries to shift op by 144; fix this program [ 643.389811][ T7721] ueagle-atm 8-1:127.25: usbatm_usb_probe: bind failed: -19! [ 643.572496][ T7721] usb 8-1: USB disconnect, device number 7 [ 648.753254][ T9143] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 649.356452][ T9143] usb 4-1: Using ep0 maxpacket: 8 [ 649.476196][ T9143] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 649.512584][ T9143] usb 4-1: config 179 has no interface number 0 [ 649.526178][ T9142] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 649.534630][ T9143] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 649.552720][ T9143] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 649.594927][ T9143] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 649.607662][ T9143] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 649.630727][ T9143] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 649.645832][ T9143] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 649.662858][ T9143] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.726317][T10769] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 649.899429][ T9142] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.919969][ T9142] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 649.940368][ T9142] usb 7-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00 [ 649.960671][ T9142] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.026469][T10769] udc-core: couldn't find an available UDC or it's busy [ 650.043714][T10769] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 650.062869][ T9142] usb 7-1: config 0 descriptor?? [ 650.430274][ T9143] usb 4-1: USB disconnect, device number 9 [ 650.446098][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 650.534330][T10816] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 651.460205][ T9142] wacom 0003:056A:00B8.0003: Unknown device_type for 'HID 056a:00b8'. Assuming pen. [ 651.533291][ T9142] wacom 0003:056A:00B8.0003: hidraw0: USB HID v0.00 Device [HID 056a:00b8] on usb-dummy_hcd.6-1/input0 [ 651.598049][ T9142] input: Wacom Intuos4 4x6 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:00B8.0003/input/input9 [ 651.655315][T10833] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1467'. [ 651.767503][ T9142] usb 7-1: USB disconnect, device number 6 [ 652.803513][T10849] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 652.996284][ T4214] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 653.490578][ T4214] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.512408][ T4214] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.574679][ T4214] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 653.599294][ T4214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.636540][ T4214] usb 3-1: config 0 descriptor?? [ 654.165924][ T4214] pyra 0003:1E7D:2CF6.0004: global environment stack underflow [ 654.290241][ T4214] pyra 0003:1E7D:2CF6.0004: item 0 0 1 11 parsing failed [ 654.502815][ T4214] pyra 0003:1E7D:2CF6.0004: parse failed [ 654.539690][ T4214] pyra: probe of 0003:1E7D:2CF6.0004 failed with error -22 [ 654.611060][ T4214] usb 3-1: USB disconnect, device number 7 [ 655.287883][ T4519] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 655.916525][T10881] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 656.950004][T10892] ubi31: attaching mtd0 [ 656.954846][T10892] ubi31 error: ubi_attach_mtd_dev: bad VID header (16) or data offsets (80) [ 657.773751][ T4519] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 657.871205][ T4519] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.886764][ T4519] usb 7-1: config 0 descriptor?? [ 657.906220][ T4519] usb 7-1: can't set config #0, error -71 [ 657.919583][ T4519] usb 7-1: USB disconnect, device number 7 [ 657.946275][T10906] tipc: Started in network mode [ 657.951178][T10906] tipc: Node identity 225604c7d7c9, cluster identity 4711 [ 657.965557][T10906] tipc: Enabled bearer , priority 24 [ 658.596333][ T4521] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 658.604869][ T4520] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 659.016237][ T4521] usb 9-1: Using ep0 maxpacket: 16 [ 659.080925][ T4519] tipc: Node number set to 4120839367 [ 659.160577][ T4520] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 659.172592][ T4521] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 659.180845][ T4521] usb 9-1: config 0 has no interface number 0 [ 659.187469][ T4520] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.197560][ T4521] usb 9-1: config 0 interface 41 has no altsetting 0 [ 659.206339][ T4520] usb 8-1: config 0 interface 0 has no altsetting 0 [ 659.212963][ T4520] usb 8-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 659.227195][T10936] netlink: 'syz.2.1503': attribute type 1 has an invalid length. [ 659.246375][ T4520] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.273201][ T4520] usb 8-1: config 0 descriptor?? [ 659.400705][ T4521] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 659.428898][ T4521] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.440309][ T4521] usb 9-1: Product: syz [ 659.444498][ T4521] usb 9-1: Manufacturer: syz [ 659.453118][ T4521] usb 9-1: SerialNumber: syz [ 659.471214][ T4521] usb 9-1: config 0 descriptor?? [ 659.522060][ T4521] CoreChips: probe of 9-1:0.41 failed with error -22 [ 659.732456][ T4521] usb 9-1: USB disconnect, device number 3 [ 659.760310][ T4520] saitek 0003:06A3:0621.0005: unbalanced delimiter at end of report description [ 659.775762][ T4520] saitek 0003:06A3:0621.0005: parse failed [ 659.783914][ T4520] saitek: probe of 0003:06A3:0621.0005 failed with error -22 [ 659.991152][ T4168] usb 8-1: USB disconnect, device number 8 [ 660.776326][ T4521] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 661.212266][ T4521] usb 3-1: config index 0 descriptor too short (expected 5668, got 36) [ 661.236183][ T4521] usb 3-1: config 3 has too many interfaces: 84, using maximum allowed: 32 [ 661.267756][ T4521] usb 3-1: config 3 has 1 interface, different from the descriptor's value: 84 [ 661.305656][ T4521] usb 3-1: config 3 has no interface number 0 [ 661.344666][ T4521] usb 3-1: config 3 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 661.403689][ T4521] usb 3-1: config 3 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 662.327087][ T4521] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 662.346069][ T4521] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.373395][ T4521] usb 3-1: Product: syz [ 662.386106][ T4521] usb 3-1: Manufacturer: syz [ 662.396362][ T4521] usb 3-1: SerialNumber: syz [ 662.456381][T10969] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 662.687165][ T4521] usb-storage 3-1:3.20: USB Mass Storage device detected [ 662.727688][ T4521] usb-storage 3-1:3.20: Quirks match for vid 04e6 pid 000b: 4 [ 662.916193][ T4521] scsi host1: usb-storage 3-1:3.20 [ 663.036151][ T9143] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 663.153994][ T4521] usb 3-1: USB disconnect, device number 8 [ 663.396362][ T9143] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 663.423005][ T9143] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 663.452429][ T9143] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 663.498696][ T9143] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 663.679773][ T9143] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.709952][ T9143] usb 7-1: config 0 descriptor?? [ 663.726433][T11004] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 664.267303][T11030] tipc: Started in network mode [ 664.272198][T11030] tipc: Node identity , cluster identity 4711 [ 664.313903][T11032] netlink: 'syz.7.1539': attribute type 10 has an invalid length. [ 664.407074][T11032] team0: Port device netdevsim0 added [ 664.413014][T11034] netlink: 'syz.7.1539': attribute type 10 has an invalid length. [ 664.460831][T11034] team0: Port device netdevsim0 removed [ 664.467105][ T9143] hid-led: probe of 0003:27B8:01ED.0006 failed with error -71 [ 664.639128][T11034] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 664.647205][ T9143] usb 7-1: USB disconnect, device number 8 [ 667.226167][ T4521] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 667.657290][T11088] tipc: Started in network mode [ 667.679505][T11088] tipc: Node identity ., cluster identity 4711 [ 667.685736][T11088] tipc: Enabling of bearer rejected, failed to enable media [ 668.396344][ T4521] usb 9-1: device descriptor read/all, error -71 [ 669.291608][ T4519] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 669.935393][ T4521] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 670.366938][ T4519] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 44, changing to 9 [ 670.432580][ T4519] usb 3-1: New USB device found, idVendor=18d1, idProduct=5030, bcdDevice= 0.00 [ 670.446145][ T4521] usb 9-1: Using ep0 maxpacket: 32 [ 670.523775][ T4519] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.557682][ T4519] usb 3-1: config 0 descriptor?? [ 670.581921][ T4521] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.604243][ T4521] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 670.623450][ T4521] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 670.634576][ T4521] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.646778][T11127] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 670.866588][ T4521] hub 9-1:4.0: USB hub found [ 671.588971][ T1326] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 671.673903][ T4519] hid-generic 0003:18D1:5030.0007: unbalanced delimiter at end of report description [ 671.685018][ T4519] hid-generic: probe of 0003:18D1:5030.0007 failed with error -22 [ 671.703417][ T4519] usb 3-1: USB disconnect, device number 9 [ 671.736312][ T4521] hub 9-1:4.0: 6 ports detected [ 671.756334][ T4521] hub 9-1:4.0: insufficient power available to use all downstream ports [ 672.882271][ T1326] usb 4-1: Using ep0 maxpacket: 32 [ 672.890313][ T4521] hub 9-1:4.0: hub_hub_status failed (err = -71) [ 672.906719][ T4521] hub 9-1:4.0: config failed, can't get hub status (err -71) [ 673.123208][ T4521] usb 9-1: USB disconnect, device number 5 [ 673.326287][ T1326] usb 4-1: config 0 interface 0 has no altsetting 0 [ 673.356897][ T1326] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 673.755928][ T1326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.926551][ T1326] usb 4-1: config 0 descriptor?? [ 674.122010][ T1326] usb 4-1: can't set config #0, error -71 [ 674.135592][ T1326] usb 4-1: USB disconnect, device number 10 [ 676.023396][ T9142] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 676.867015][ T9142] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 676.892056][ T9142] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 676.922244][ T9142] usb 8-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 676.952167][ T9142] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.071653][ T9142] usb 8-1: config 0 descriptor?? [ 677.178670][ T4521] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 677.353672][T11207] tipc: Cannot configure node identity twice [ 677.654574][ T4521] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8D is Bulk; changing to Interrupt [ 677.670946][ T4521] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 677.691628][ T4521] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 677.709731][ T4521] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 4 [ 677.726260][ T9142] kye 0003:0458:5010.0008: hidraw0: USB HID v0.03 Device [HID 0458:5010] on usb-dummy_hcd.7-1/input0 [ 677.737825][ T9142] kye 0003:0458:5010.0008: tablet-enabling feature report not found [ 677.743465][ T4521] usb 9-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 677.750596][ T9142] kye 0003:0458:5010.0008: tablet enabling failed [ 677.761692][ T4521] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.813303][ T4521] usb 9-1: config 0 descriptor?? [ 677.856429][T11189] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 677.862807][ T9142] usb 8-1: USB disconnect, device number 9 [ 678.151148][ T4521] usb 9-1: USB disconnect, device number 6 [ 679.420657][ T13] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 679.626129][ T9142] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 680.427878][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 680.464133][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.485530][ T13] usb 4-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 680.517242][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.541665][ T13] usb 4-1: config 0 descriptor?? [ 680.683456][T11261] netlink: 'syz.2.1611': attribute type 10 has an invalid length. [ 680.719253][T11261] team0: Port device netdevsim0 added [ 680.734509][T11261] netlink: 'syz.2.1611': attribute type 10 has an invalid length. [ 680.780198][T11261] team0: Port device netdevsim0 removed [ 680.804124][T11261] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 680.836624][ T9142] usb 7-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice= 0.00 [ 680.850018][ T9142] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.870455][ T9142] usb 7-1: config 0 descriptor?? [ 681.336291][ T13] maltron 0003:058F:9410.0009: unknown main item tag 0x0 [ 681.540551][ T13] maltron 0003:058F:9410.0009: hidraw0: USB HID v0.00 Device [HID 058f:9410] on usb-dummy_hcd.3-1/input0 [ 681.612661][ T13] usb 4-1: USB disconnect, device number 11 [ 681.817160][ T9142] apple 0003:05AC:022B.000A: hidraw0: USB HID v0.00 Device [HID 05ac:022b] on usb-dummy_hcd.6-1/input0 [ 682.496274][ T13] usb 7-1: USB disconnect, device number 9 [ 682.607545][T11282] tipc: Enabling of bearer rejected, failed to enable media [ 683.834438][T11312] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 684.906275][ T4168] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 685.178224][ T4168] usb 4-1: Using ep0 maxpacket: 16 [ 685.306296][ T4168] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.353674][ T4168] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.397095][ T4168] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 685.445149][ T4168] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 685.475197][ T4168] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.579560][ T4168] usb 4-1: config 0 descriptor?? [ 686.063577][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.071183][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.508111][ T4168] logitech 0003:046D:C20E.000B: rdesc size test failed for formula gp [ 686.546650][ T4168] logitech 0003:046D:C20E.000B: ignoring exceeding usage max [ 686.575853][ T4168] logitech 0003:046D:C20E.000B: unbalanced collection at end of report description [ 686.613035][ T4168] logitech 0003:046D:C20E.000B: parse failed [ 686.619371][ T4168] logitech: probe of 0003:046D:C20E.000B failed with error -22 [ 686.647009][ T1326] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 686.751273][ T4168] usb 4-1: USB disconnect, device number 12 [ 687.147006][ T1326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.158521][ T1326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.168458][ T1326] usb 3-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 687.176192][ T9142] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 687.177951][ T1326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.198487][ T1326] usb 3-1: config 0 descriptor?? [ 687.789921][ T4519] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 687.810631][T11395] use of bytesused == 0 is deprecated and will be removed in the future, [ 687.820615][T11395] use the actual size instead. [ 687.883986][ T1326] glorious 0003:258A:0036.000C: item fetching failed at offset 5/7 [ 687.895888][ T1326] glorious: probe of 0003:258A:0036.000C failed with error -22 [ 687.932591][T11402] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1663'. [ 688.026473][ T9142] usb 9-1: Using ep0 maxpacket: 8 [ 688.076197][ T4519] usb 4-1: Using ep0 maxpacket: 16 [ 688.276408][ T4519] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.329217][ T4519] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.421996][ T4519] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 688.539073][ T4519] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 688.631590][ T4519] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.664786][ T1326] usb 3-1: USB disconnect, device number 10 [ 688.681679][ T4519] usb 4-1: config 0 descriptor?? [ 688.686325][ T9142] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 688.707469][ T9142] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 688.786231][ T9142] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 688.795947][ T9142] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 246 [ 688.826527][ T9142] usb 9-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 688.835590][ T9142] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.854352][ T9142] usb 9-1: config 0 descriptor?? [ 688.886577][T11374] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 689.477364][ T9142] usb 9-1: USB disconnect, device number 7 [ 689.634112][ T4519] microsoft 0003:045E:07DA.000D: report is too long [ 689.641206][ T4519] microsoft 0003:045E:07DA.000D: item 0 4 0 8 parsing failed [ 689.648952][ T4519] microsoft 0003:045E:07DA.000D: parse failed [ 689.655053][ T4519] microsoft: probe of 0003:045E:07DA.000D failed with error -22 [ 689.687615][ T4519] usb 4-1: USB disconnect, device number 13 [ 690.951115][T11445] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 690.958212][T11445] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 691.228566][T11445] vhci_hcd vhci_hcd.0: Device attached [ 691.436196][ T9143] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 691.490560][ T4168] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 691.602049][T11461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1682'. [ 691.611374][T11461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1682'. [ 691.620408][T11461] netlink: 'syz.3.1682': attribute type 11 has an invalid length. [ 691.676436][ T9143] usb 3-1: Using ep0 maxpacket: 16 [ 691.987044][ T9143] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 692.072099][ T9143] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.228568][ T9143] usb 3-1: Product: syz [ 692.331528][ T9143] usb 3-1: Manufacturer: syz [ 692.366156][ T9143] usb 3-1: SerialNumber: syz [ 692.415839][ T9143] usb 3-1: config 0 descriptor?? [ 692.617602][ T9143] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 693.150314][T11450] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 693.164931][ T9143] usb 3-1: Detected FT232H [ 693.177295][ T1276] vhci_hcd: stop threads [ 693.182623][ T1276] vhci_hcd: release socket [ 693.186239][ T9143] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 693.195688][ T1276] vhci_hcd: disconnect device [ 693.216161][ T9143] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 693.322274][ T9143] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 693.331571][ T9143] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 693.342748][ T9143] usb 3-1: USB disconnect, device number 11 [ 693.352108][ T9143] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 693.362252][ T9143] ftdi_sio 3-1:0.0: device disconnected [ 693.396165][ T4214] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 693.909183][ T4214] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.936080][ T4214] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 693.956247][ T4214] usb 8-1: New USB device found, idVendor=056a, idProduct=0018, bcdDevice= 0.00 [ 693.965512][ T4214] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.976667][ T4214] usb 8-1: config 0 descriptor?? [ 694.464631][ T4214] wacom 0003:056A:0018.000E: unknown main item tag 0x0 [ 694.475448][ T4214] wacom 0003:056A:0018.000E: unknown main item tag 0x0 [ 695.025511][ T4214] wacom 0003:056A:0018.000E: unknown main item tag 0x0 [ 695.058145][ T4214] wacom 0003:056A:0018.000E: unknown main item tag 0x0 [ 695.124993][ T4214] wacom 0003:056A:0018.000E: unknown main item tag 0x0 [ 695.220644][ T4214] wacom 0003:056A:0018.000E: Unknown device_type for 'HID 056a:0018'. Assuming pen. [ 695.257764][ T4214] wacom 0003:056A:0018.000E: hidraw0: USB HID v0.00 Device [HID 056a:0018] on usb-dummy_hcd.7-1/input0 [ 695.301663][ T4214] input: Wacom BambooFun 6x8 Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:056A:0018.000E/input/input12 [ 695.429387][ T4214] usb 8-1: USB disconnect, device number 10 [ 696.601553][ T4519] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 696.606123][ T4214] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 696.636152][ T4168] vhci_hcd: vhci_device speed not set [ 696.866143][ T4519] usb 8-1: Using ep0 maxpacket: 16 [ 696.867750][ T4214] usb 3-1: Using ep0 maxpacket: 8 [ 697.006278][ T4214] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 697.006326][ T4519] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 697.029313][ T4214] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 697.035534][ T4519] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 697.042978][ T4214] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 697.057350][ T4519] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 697.063033][ T4214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.071894][ T4519] usb 8-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 697.088396][ T4519] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.112436][ T4214] usb 3-1: config 0 descriptor?? [ 697.117022][ T4519] usb 8-1: config 0 descriptor?? [ 698.751835][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 699.000841][ T4214] kone 0003:1E7D:2CED.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.2-1/input0 [ 699.216124][ T4519] logitech 0003:046D:C20E.0010: rdesc size test failed for formula gp [ 699.284015][ T4519] logitech 0003:046D:C20E.0010: ignoring exceeding usage max [ 699.378827][ T4519] logitech 0003:046D:C20E.0010: unbalanced collection at end of report description [ 699.516605][ T4519] logitech 0003:046D:C20E.0010: parse failed [ 699.568381][ T4519] logitech: probe of 0003:046D:C20E.0010 failed with error -22 [ 699.667561][ T4519] usb 8-1: USB disconnect, device number 11 [ 699.754438][ T9143] usb 3-1: USB disconnect, device number 12 [ 700.001649][ T9142] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 700.325276][T11579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 700.346956][T11577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 701.036388][ T9142] usb 9-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 701.066096][ T9142] usb 9-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 701.094916][ T9142] usb 9-1: Manufacturer: syz [ 701.128447][ T9142] usb 9-1: config 0 descriptor?? [ 701.208846][T11595] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 701.235040][ C1] vkms_vblank_simulate: vblank timer overrun [ 701.310401][T11595] CIFS mount error: No usable UNC path provided in device string! [ 701.310401][T11595] [ 701.336457][T11595] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 701.817287][ T9142] gs_usb 9-1:0.0: Configuring for 125 interfaces [ 701.823662][ T9142] gs_usb 9-1:0.0: Driver cannot handle more that 2 CAN interfaces [ 701.846217][ T9142] gs_usb: probe of 9-1:0.0 failed with error -22 [ 701.883849][ T9142] usb 9-1: USB disconnect, device number 8 [ 704.766725][T11649] UBIFS error (pid: 11649): cannot open "./file0", error -22 [ 707.436232][ T9143] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 707.896328][ T9143] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 707.913980][ T9143] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 707.924974][ T9143] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 707.935000][ T9143] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 708.227839][ T9143] usb 7-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 708.297307][ T9143] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.387395][ T9143] usb 7-1: Product: syz [ 708.468405][ T9143] usb 7-1: Manufacturer: syz [ 708.515271][ T9143] usb 7-1: SerialNumber: syz [ 708.682290][ T9143] usb 7-1: config 0 descriptor?? [ 708.818523][ T4521] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 708.978769][ T9143] ums-isd200 7-1:0.0: USB Mass Storage device detected [ 709.226883][ T9143] scsi host1: usb-storage 7-1:0.0 [ 709.286219][ T4519] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 709.406304][ T4521] usb 8-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 709.420990][ T9143] usb 7-1: USB disconnect, device number 10 [ 709.439859][ T4521] usb 8-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 709.455346][ T4521] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 709.470711][ T4521] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 709.489291][ T4521] usb 8-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 709.503168][ T4521] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.532910][ T4521] usb 8-1: config 0 descriptor?? [ 709.566574][ T4519] usb 4-1: Using ep0 maxpacket: 16 [ 709.588549][ T4521] usb-storage 8-1:0.0: USB Mass Storage device detected [ 709.600803][ T4521] usb-storage 8-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 710.319524][ T4519] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 710.384814][ T4214] usb 8-1: USB disconnect, device number 12 [ 710.429575][ T4519] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 710.439511][ T4519] usb 4-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.00 [ 710.449670][ T4519] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.467290][ T4519] usb 4-1: config 0 descriptor?? [ 711.546355][ T4519] wacom 0003:056A:00E5.0011: hidraw0: USB HID vff.fe Device [HID 056a:00e5] on usb-dummy_hcd.3-1/input0 [ 711.641486][ T4519] usb 4-1: USB disconnect, device number 14 [ 713.179341][T11809] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 713.244925][T11812] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 713.531114][T11809] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 714.618804][T11847] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 715.503999][ T13] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 715.691941][T11861] Context (ID=0x1) not attached to queue pair (handle=0x1:0x0) [ 716.491055][ T13] usb 9-1: Using ep0 maxpacket: 8 [ 717.926881][ T13] usb 9-1: unable to read config index 0 descriptor/all [ 717.934187][ T13] usb 9-1: can't read configurations, error -71 [ 718.957277][T11914] Set syz0 is full, maxelem 0 reached [ 719.983108][T11937] netlink: set zone limit has 4 unknown bytes [ 720.255889][T11945] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 720.264001][T11945] IPv6: NLM_F_CREATE should be set when creating new route [ 720.271276][T11945] IPv6: NLM_F_CREATE should be set when creating new route [ 721.956220][ T4521] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 722.225756][T11983] tipc: Enabling of bearer rejected, failed to enable media [ 722.466230][ T4521] usb 7-1: Using ep0 maxpacket: 16 [ 722.666807][ T4521] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 722.774569][ T4521] usb 7-1: config 0 has no interface number 0 [ 722.804239][ T4521] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 722.838118][ T4521] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 723.526188][ T4521] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 723.575566][ T4521] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.623122][ T4521] usb 7-1: Product: syz [ 723.635908][ T4521] usb 7-1: Manufacturer: syz [ 723.694425][ T4521] usb 7-1: SerialNumber: syz [ 723.736661][ T4521] usb 7-1: config 0 descriptor?? [ 723.762034][T11959] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 723.776155][T11959] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 723.941844][ T9142] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 723.996208][ T4519] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 724.047682][T11959] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 724.054743][T11959] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 724.413755][ T4519] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 724.435269][ T4519] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 724.445889][ T4519] usb 8-1: config 0 interface 0 has no altsetting 0 [ 724.456361][ T9142] usb 9-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 724.458520][ T4519] usb 8-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 724.475649][ T9142] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.478432][ T4519] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.493380][ T9142] usb 9-1: config 0 descriptor?? [ 724.505375][ T4519] usb 8-1: config 0 descriptor?? [ 724.548518][ T9142] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 724.736370][ T4521] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 724.751112][ T4521] asix 7-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 724.762368][ T4521] asix: probe of 7-1:0.251 failed with error -71 [ 724.762478][T12040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1901'. [ 724.778891][ T4521] usb 7-1: USB disconnect, device number 11 [ 724.971390][ T4519] wacom 0003:056A:00C6.0012: hidraw0: USB HID v0.00 Device [HID 056a:00c6] on usb-dummy_hcd.7-1/input0 [ 725.058721][ T9142] cpia1 9-1:0.0: unexpected state after lo power cmd: 00 [ 725.174595][ T9143] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 725.214420][ T4214] usb 8-1: USB disconnect, device number 13 [ 725.498830][ T9142] gspca_cpia1: usb_control_msg 02, error -71 [ 725.504873][ T9142] cpia1 9-1:0.0: only firmware version 1 is supported (got: 0) [ 725.520827][ T9142] usb 9-1: USB disconnect, device number 11 [ 725.776466][ T9143] usb 3-1: Using ep0 maxpacket: 8 [ 725.790549][ T26] kauditd_printk_skb: 42 callbacks suppressed [ 725.790566][ T26] audit: type=1326 audit(1741637262.940:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12053 comm="syz.7.1906" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7324f9f169 code=0x0 [ 725.970032][ T9143] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 725.990126][ T9143] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 726.004220][ T9143] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 726.266376][ T9143] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 726.297719][ T9143] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.305745][ T9143] usb 3-1: Product: syz [ 726.335841][ T9143] usb 3-1: Manufacturer: syz [ 726.986112][ T9143] usb 3-1: SerialNumber: syz [ 728.083726][T12098] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 728.986349][ T9143] usb 3-1: 0:2 : does not exist [ 729.096274][ T9143] usb 3-1: USB disconnect, device number 13 [ 729.137960][T11133] udevd[11133]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 729.287278][ T13] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 729.736167][ T13] usb 9-1: Using ep0 maxpacket: 16 [ 729.892070][ T13] usb 9-1: config 0 has no interfaces? [ 729.905061][ T13] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 729.938941][ T13] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.982753][ T13] usb 9-1: config 0 descriptor?? [ 730.285016][T12085] udc-core: couldn't find an available UDC or it's busy [ 730.310327][T12085] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 730.321303][T12139] pim6reg: tun_chr_ioctl cmd 1074025673 [ 730.334422][ T13] usb 9-1: USB disconnect, device number 12 [ 731.256108][T12154] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 732.314557][T12161] usb usb8: usbfs: process 12161 (syz.2.1941) did not claim interface 0 before use [ 733.547989][T12183] program syz.6.1949 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 734.154781][T12201] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 735.079989][T12211] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1958'. [ 735.499883][T12231] user requested TSC rate below hardware speed [ 735.766499][ T21] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 735.819182][T12244] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 736.026330][ T21] usb 8-1: Using ep0 maxpacket: 32 [ 736.147281][ T21] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 736.243203][ T21] usb 8-1: config 0 has no interface number 0 [ 736.796651][ T21] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 736.822275][ T21] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.854207][ T21] usb 8-1: Product: syz [ 736.870340][ T21] usb 8-1: Manufacturer: syz [ 736.880571][ T21] usb 8-1: SerialNumber: syz [ 736.910824][ T21] usb 8-1: config 0 descriptor?? [ 736.961313][ T21] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 737.856490][ T21] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 737.871753][ T21] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 738.029281][T12227] udc-core: couldn't find an available UDC or it's busy [ 738.051081][T12227] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 738.162704][T12293] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 738.609141][ T13] usb 8-1: USB disconnect, device number 14 [ 738.626082][ C1] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 738.639236][ T13] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 738.679321][ T13] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 738.710219][ T13] quatech2 8-1:0.51: device disconnected [ 739.306246][ T21] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 740.376286][ T21] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 740.424880][ T21] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 740.631050][T12329] vlan1: default FDB implementation only supports local addresses [ 740.662430][ T21] usb 3-1: config 0 has no interface number 0 [ 740.691917][ T21] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 740.705996][ T21] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 740.947259][ T21] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 740.966711][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.974742][ T21] usb 3-1: Product: syz [ 741.007569][ T21] usb 3-1: Manufacturer: syz [ 741.023126][ T21] usb 3-1: SerialNumber: syz [ 741.052665][ T21] usb 3-1: config 0 descriptor?? [ 741.151721][T12355] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2015'. [ 741.592245][ T13] usb 3-1: USB disconnect, device number 14 [ 742.036197][ T4521] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 742.506377][ T21] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 742.555141][T12387] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 742.694031][ T4519] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 742.830006][ T4521] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 742.929992][ T21] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 743.004247][ T21] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 743.050655][ T4521] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.117133][ T21] usb 9-1: New USB device found, idVendor=056a, idProduct=032a, bcdDevice= 0.00 [ 743.205698][ T4521] usb 8-1: config 0 descriptor?? [ 743.247919][ T4521] cp210x 8-1:0.0: cp210x converter detected [ 743.280104][ T21] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.300679][ T21] usb 9-1: config 0 descriptor?? [ 743.567804][ T4519] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 743.586095][ T4519] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 743.621875][ T4519] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 743.642220][ T4519] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.660583][ T4519] usb 3-1: config 0 descriptor?? [ 743.696342][ T4521] cp210x 8-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 743.819565][ T21] wacom 0003:056A:032A.0013: unknown main item tag 0x4 [ 743.897212][ T21] wacom 0003:056A:032A.0013: hidraw0: USB HID v0.00 Device [HID 056a:032a] on usb-dummy_hcd.8-1/input0 [ 744.020637][ T21] usb 9-1: USB disconnect, device number 13 [ 744.100400][ T4521] cp210x 8-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 744.114306][ T4521] cp210x 8-1:0.0: GPIO initialisation failed: -71 [ 744.129574][ T4521] usb 8-1: cp210x converter now attached to ttyUSB0 [ 744.149179][ T4521] usb 8-1: USB disconnect, device number 15 [ 744.176992][ T4521] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 744.185782][ T4521] cp210x 8-1:0.0: device disconnected [ 744.373567][ T4519] lenovo 0003:17EF:6047.0014: unknown main item tag 0x0 [ 744.390808][ T4519] lenovo 0003:17EF:6047.0014: unknown main item tag 0x0 [ 744.411036][ T4519] lenovo 0003:17EF:6047.0014: unknown main item tag 0x0 [ 744.423930][ T4519] lenovo 0003:17EF:6047.0014: unknown main item tag 0x0 [ 744.461735][ T4519] lenovo 0003:17EF:6047.0014: unknown main item tag 0x0 [ 744.502970][ T4519] lenovo 0003:17EF:6047.0014: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 744.786392][ T4519] lenovo 0003:17EF:6047.0014: Failed to switch middle button: -71 [ 744.836392][ T4519] lenovo 0003:17EF:6047.0014: Fn-lock setting failed: -71 [ 744.872028][ T4519] lenovo 0003:17EF:6047.0014: Sensitivity setting failed: -71 [ 744.899020][ T4519] usb 3-1: USB disconnect, device number 15 [ 744.946109][ T21] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 744.999864][T12417] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 745.186225][ T21] usb 7-1: Using ep0 maxpacket: 16 [ 745.327004][ T21] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.433835][ T21] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.571927][ T4521] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 745.601670][ T21] usb 7-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 745.635148][ T21] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.660300][ T21] usb 7-1: config 0 descriptor?? [ 745.740665][T12425] Process accounting resumed [ 746.184752][ T9143] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 746.322524][ T21] nzxt-kraken2 0003:1E71:170E.0015: unbalanced collection at end of report description [ 746.340640][ T21] nzxt-kraken2 0003:1E71:170E.0015: hid parse failed with -22 [ 746.352060][ T21] nzxt-kraken2: probe of 0003:1E71:170E.0015 failed with error -22 [ 746.516151][ T9143] usb 8-1: Using ep0 maxpacket: 16 [ 746.531972][ T4521] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 746.542647][ T4521] usb 9-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 746.544382][ T21] usb 7-1: USB disconnect, device number 12 [ 746.551770][ T4521] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.562960][ T4521] usb 9-1: config 0 descriptor?? [ 746.646399][ T9143] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.666152][ T9143] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 746.685418][ T9143] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.714708][ T9143] usb 8-1: config 0 descriptor?? [ 747.038562][ T4521] holtek_mouse 0003:04D9:A070.0016: unbalanced collection at end of report description [ 747.048652][ T4521] holtek_mouse 0003:04D9:A070.0016: hid parse failed: -22 [ 747.055821][ T4521] holtek_mouse: probe of 0003:04D9:A070.0016 failed with error -22 [ 747.076203][ T21] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 747.199413][ T9143] mcp2221 0003:04D8:00DD.0017: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 747.265054][ T9142] usb 9-1: USB disconnect, device number 14 [ 747.326165][ T21] usb 4-1: Using ep0 maxpacket: 16 [ 747.437796][T12454] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2055'. [ 747.446324][ T21] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 747.451588][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.461319][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.462734][ T21] usb 4-1: config 0 has an invalid descriptor of length 205, skipping remainder of the config [ 747.526184][ T21] usb 4-1: config 0 has no interface number 0 [ 747.720191][ T4521] usb 8-1: USB disconnect, device number 16 [ 747.857092][ T21] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 747.894644][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.903806][ T21] usb 4-1: Product: syz [ 747.914766][ T21] usb 4-1: Manufacturer: syz [ 747.920848][ T21] usb 4-1: SerialNumber: syz [ 748.137683][ T21] usb 4-1: config 0 descriptor?? [ 748.188154][ T21] usb 4-1: Found UVC 0.00 device syz (046c:14e8) [ 748.201557][ T21] usb 4-1: No valid video chain found. [ 748.221797][ T9143] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 748.336422][T12473] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2062'. [ 748.476357][ T9143] usb 9-1: Using ep0 maxpacket: 8 [ 748.620037][ T9143] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 748.781745][ T9143] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 748.974735][ T9143] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 749.063496][ T9143] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 749.143524][T12482] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2066'. [ 749.359261][ T9143] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 749.369255][ T9143] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.393128][ T9142] usb 4-1: USB disconnect, device number 15 [ 749.826652][ T9143] usb 9-1: GET_CAPABILITIES returned 0 [ 749.833266][ T9143] usbtmc 9-1:16.0: can't read capabilities [ 750.257756][ T4521] usb 9-1: USB disconnect, device number 15 [ 750.854549][T12506] ALSA: mixer_oss: invalid OSS volume '' [ 751.220314][T12513] lo speed is unknown, defaulting to 1000 [ 751.340501][T12513] lo speed is unknown, defaulting to 1000 [ 751.390023][T12513] lo speed is unknown, defaulting to 1000 [ 751.617851][T12513] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 751.735835][T12513] lo speed is unknown, defaulting to 1000 [ 751.748524][T12513] lo speed is unknown, defaulting to 1000 [ 751.780526][T12513] lo speed is unknown, defaulting to 1000 [ 751.800947][T12513] lo speed is unknown, defaulting to 1000 [ 751.826505][T12513] lo speed is unknown, defaulting to 1000 [ 752.403263][T12556] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 753.128558][T12562] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2095'. [ 754.081758][ T21] Bluetooth: hci5: command 0x1003 tx timeout [ 754.552907][T12593] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 755.121178][ T4177] Bluetooth: hci5: sending frame failed (-49) [ 755.784763][T12623] Bluetooth: hci6: Frame reassembly failed (-84) [ 756.011512][ T4521] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 757.028131][T12632] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 757.198129][ T9139] Bluetooth: hci5: command 0x1001 tx timeout [ 757.210406][T12625] Bluetooth: hci5: sending frame failed (-49) [ 757.603450][T12638] netlink: 124 bytes leftover after parsing attributes in process `syz.7.2124'. [ 757.613071][T12638] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2124'. [ 757.669964][ T4521] usb 3-1: Using ep0 maxpacket: 8 [ 757.826375][ T4521] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 757.836135][ T9139] Bluetooth: hci6: command 0x1003 tx timeout [ 757.841003][ T4521] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 757.842207][T12625] Bluetooth: hci6: sending frame failed (-49) [ 757.864979][ T4521] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 758.498018][ T4521] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 758.585355][ T4521] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 758.598922][ T4521] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 758.608664][ T4521] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.619942][T12648] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 758.619942][T12648] program syz.2.2127 not setting count and/or reply_len properly [ 758.646242][ T4521] usb 3-1: can't set config #16, error -71 [ 758.662168][ T4521] usb 3-1: USB disconnect, device number 16 [ 759.236144][ T4521] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 759.276449][ T9142] Bluetooth: hci5: command 0x1009 tx timeout [ 759.611663][ T9139] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 759.623244][ T9139] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 759.632312][ T9139] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 759.640039][ T9139] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 759.647832][ T9139] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 759.655364][ T9139] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 759.656323][ T4521] usb 8-1: config 0 has an invalid interface number: 117 but max is 0 [ 759.663299][ T9139] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 759.676003][ T4521] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 759.679066][ T9139] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 759.694215][ T4521] usb 8-1: config 0 has no interface number 0 [ 759.696541][ T9139] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 759.702059][ T4521] usb 8-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 759.709941][ T9139] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 759.725490][ T4521] usb 8-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 759.727878][ T9139] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 759.747552][ T9139] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 759.754945][ T9139] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 759.762397][ T9139] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 759.769839][ T9139] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 759.777578][ T9139] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 759.784990][ T9139] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 759.798146][ T9139] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz0] on syz0 [ 759.845189][T12681] siw: device registration error -23 [ 759.916257][ T9139] Bluetooth: hci6: command 0x1001 tx timeout [ 759.923342][T12625] Bluetooth: hci6: sending frame failed (-49) [ 759.926343][ T4521] usb 8-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 759.939093][ T4521] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.952835][ T4521] usb 8-1: Product: syz [ 759.958310][ T4521] usb 8-1: Manufacturer: syz [ 759.963053][ T4521] usb 8-1: SerialNumber: syz [ 759.985230][ T4521] usb 8-1: config 0 descriptor?? [ 760.560432][ T4521] usb 8-1: USB disconnect, device number 17 [ 761.596340][ T9142] Bluetooth: hci4: command 0x0405 tx timeout [ 761.996234][ T21] Bluetooth: hci6: command 0x1009 tx timeout [ 762.106126][ T9139] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 762.486105][ T9139] usb 3-1: Using ep0 maxpacket: 16 [ 762.612215][ T9139] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 762.632355][ T9139] usb 3-1: config 0 interface 0 has no altsetting 0 [ 762.646806][ T9139] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 762.667161][ T9139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.686731][ T9139] usb 3-1: config 0 descriptor?? [ 763.181830][ T9139] hid (null): unknown global tag 0xe [ 763.187384][ T9139] hid (null): report_id 15736 is invalid [ 763.198595][ T9139] hid (null): unknown global tag 0xe [ 763.209058][ T9139] cougar 0003:060B:500A.0019: unexpected long global item [ 763.216568][ T9139] cougar 0003:060B:500A.0019: parse failed [ 763.226890][ T9139] cougar: probe of 0003:060B:500A.0019 failed with error -22 [ 763.368977][T12765] block nbd6: shutting down sockets [ 763.400787][ T9139] usb 3-1: USB disconnect, device number 17 [ 763.740521][T12780] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2177'. [ 763.750191][T12780] netlink: 9 bytes leftover after parsing attributes in process `syz.8.2177'. [ 763.759590][T12780] netlink: 9 bytes leftover after parsing attributes in process `syz.8.2177'. [ 763.770092][T12780] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 764.018576][T12788] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 764.042836][T12788] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.178485][T12808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2188'. [ 765.202614][T12808] netlink: 'syz.2.2188': attribute type 20 has an invalid length. [ 765.216390][T12808] netlink: 'syz.2.2188': attribute type 21 has an invalid length. [ 765.410782][T12820] netlink: 296 bytes leftover after parsing attributes in process `syz.2.2192'. [ 765.453454][T12820] unsupported nlmsg_type 40 [ 766.280971][T12829] kvm [12826]: vcpu0, guest rIP: 0xfff0 unimplemented MMIO_CONF_BASE wrmsr: 0xfff0 [ 766.533729][T12853] Bluetooth: hci5: Frame reassembly failed (-84) [ 766.550437][ T1326] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 766.726256][ T4519] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 766.826149][ T1326] usb 7-1: Using ep0 maxpacket: 32 [ 766.956510][ T1326] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 766.969953][ T1326] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.992641][ T1326] usb 7-1: config 0 descriptor?? [ 767.050885][ T1326] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 767.126790][ T4519] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 767.140239][ T4519] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.153879][ T4519] usb 3-1: config 0 descriptor?? [ 767.207984][ T4519] cp210x 3-1:0.0: cp210x converter detected [ 767.619597][T12866] ptrace attach of ""[12867] was attempted by "./syz-executor exec"[12866] [ 767.636338][ T4519] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 767.661494][ T4168] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 767.704510][ T4519] usb 3-1: cp210x converter now attached to ttyUSB0 [ 767.911068][ T21] usb 3-1: USB disconnect, device number 18 [ 767.946740][ T21] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 767.951309][ T1326] gspca_nw80x: reg_r err -71 [ 767.962608][ T1326] nw80x: probe of 7-1:0.0 failed with error -71 [ 767.973218][ T21] cp210x 3-1:0.0: device disconnected [ 768.023020][ T1326] usb 7-1: USB disconnect, device number 13 [ 768.036340][ T4168] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 768.075968][ T4168] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.093757][ T4168] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 768.176367][ T4168] usb 4-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.00 [ 768.185985][ T4168] usb 4-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 768.200332][ T4168] usb 4-1: Product: syz [ 768.219869][ T4168] usb 4-1: config 0 descriptor?? [ 768.406406][ T4519] usb 8-1: new low-speed USB device number 18 using dummy_hcd [ 768.646297][ T1326] Bluetooth: hci5: command 0x1003 tx timeout [ 768.658396][ T9581] Bluetooth: hci5: sending frame failed (-49) [ 768.731598][ T4168] wacom 0003:056A:010E.001A: unknown main item tag 0x0 [ 768.873836][ T4168] wacom 0003:056A:010E.001A: unknown main item tag 0x0 [ 769.024567][ T4168] wacom 0003:056A:010E.001A: hidraw0: USB HID vff.ea Device [syz] on usb-dummy_hcd.3-1/input0 [ 769.491756][ T4519] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 769.511188][ T4519] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 769.534207][ T4519] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 769.549715][ T4519] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 769.568947][ T4519] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 769.656398][ T4519] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 769.666078][ T4519] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 769.689425][ T4519] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 769.699114][ T4168] usb 4-1: USB disconnect, device number 16 [ 769.721612][ T4519] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 770.401953][ T4519] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 770.457493][T12913] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 770.559899][ T4519] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 770.568714][ T4519] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 770.579756][ T4519] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 770.589973][ T4519] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 770.604643][ T26] audit: type=1326 audit(1741637307.750:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12915 comm="syz.3.2232" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f329e2ac169 code=0x0 [ 770.604931][ T4519] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 770.716163][ T13] Bluetooth: hci5: command 0x1001 tx timeout [ 770.723447][ T9581] Bluetooth: hci5: sending frame failed (-49) [ 770.737667][T12927] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2237'. [ 770.747570][T12927] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2237'. [ 771.096247][ T4519] usb 8-1: string descriptor 0 read error: -22 [ 771.102569][ T4519] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 771.118054][ T4519] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.406945][ T4519] usb 8-1: can't set config #168, error -71 [ 771.605514][ T4519] usb 8-1: USB disconnect, device number 18 [ 771.955448][T12957] xt_NFQUEUE: number of total queues is 0 [ 772.541306][ T13] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 772.806333][ T4519] Bluetooth: hci5: command 0x1009 tx timeout [ 772.871337][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 773.136239][ T13] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 773.144361][ T13] usb 3-1: config 0 has no interface number 0 [ 773.163187][ T13] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 773.184774][ T13] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 773.236104][ T26] audit: type=1400 audit(1741637310.370:22): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=12978 comm="syz.3.2258" [ 773.873185][ T13] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 773.882691][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.907944][ T13] usb 3-1: Product: syz [ 773.912144][ T13] usb 3-1: Manufacturer: syz [ 773.926169][ T13] usb 3-1: SerialNumber: syz [ 773.943202][ T13] usb 3-1: config 0 descriptor?? [ 774.042034][ T26] audit: type=1326 audit(1741637311.190:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13009 comm="syz.7.2271" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7324f9f169 code=0x0 [ 774.206127][ T4168] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 774.228299][ T4521] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 774.456323][ T13] radio-si470x 3-1:0.35: DeviceID=0x9242 ChipID=0x0000 [ 774.467142][ T13] radio-si470x 3-1:0.35: This driver is known to work with firmware version 12, [ 774.476588][ T4521] usb 4-1: Using ep0 maxpacket: 8 [ 774.481844][ T13] radio-si470x 3-1:0.35: but the device has firmware version 0. [ 774.566339][ T4168] usb 7-1: config 0 has an invalid interface number: 69 but max is 0 [ 774.574884][ T4168] usb 7-1: config 0 has no interface number 0 [ 774.581203][ T4168] usb 7-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 774.591350][ T4168] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 774.606320][ T4521] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 774.614624][ T4521] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 774.624712][ T4521] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 774.634882][ T4521] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 774.645041][ T4521] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 774.658168][ T13] radio-si470x 3-1:0.35: software version 146, hardware version 66 [ 774.666150][ T4521] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 774.675507][ T13] radio-si470x 3-1:0.35: If you have some trouble using this driver, [ 774.683659][ T4521] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.691695][ T13] radio-si470x 3-1:0.35: please report to V4L ML at linux-media@vger.kernel.org [ 774.756962][ T4168] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 774.766175][ T4168] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.774510][ T4168] usb 7-1: Product: syz [ 774.778811][ T4168] usb 7-1: Manufacturer: syz [ 774.783617][ T4168] usb 7-1: SerialNumber: syz [ 774.794980][ T4168] usb 7-1: config 0 descriptor?? [ 774.816796][T13004] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 774.837325][ T4168] cyberjack 7-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 774.849271][ T4168] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 774.866299][ T13] radio-si470x 3-1:0.35: si470x_set_report: usb_control_msg returned -71 [ 774.891787][ T13] radio-si470x 3-1:0.35: submitting int urb failed (-90) [ 774.923560][ T13] radio-si470x 3-1:0.35: si470x_set_report: usb_control_msg returned -71 [ 774.934794][ T13] radio-si470x: probe of 3-1:0.35 failed with error -22 [ 774.989471][ T4521] usb 4-1: GET_CAPABILITIES returned 0 [ 774.995128][ T4521] usbtmc 4-1:16.0: can't read capabilities [ 775.009163][ T13] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 775.068871][ T13] usb 3-1: USB disconnect, device number 19 [ 775.202473][ T4521] usb 4-1: USB disconnect, device number 17 [ 775.261937][ T4519] usb 7-1: USB disconnect, device number 14 [ 775.271689][ T4519] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 775.283172][ T4519] cyberjack 7-1:0.69: device disconnected [ 777.680699][T13049] sctp: [Deprecated]: syz.6.2284 (pid 13049) Use of int in max_burst socket option deprecated. [ 777.680699][T13049] Use struct sctp_assoc_value instead [ 777.806254][ T4168] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 778.246434][ T4168] usb 4-1: Using ep0 maxpacket: 8 [ 778.506842][ T4168] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 778.525558][ T4168] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 778.540766][ T4168] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 778.572798][ T4168] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 778.597741][ T4168] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 778.614157][ T4168] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 778.623493][ T4168] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.906234][ T4168] usb 4-1: GET_CAPABILITIES returned 0 [ 778.915036][ T4168] usbtmc 4-1:16.0: can't read capabilities [ 778.953201][T13096] device bond_slave_0 entered promiscuous mode [ 778.985370][T13095] device bond_slave_0 left promiscuous mode [ 779.550656][ T4168] usb 4-1: USB disconnect, device number 18 [ 779.866231][ T9143] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 780.117917][ T9143] usb 3-1: Using ep0 maxpacket: 8 [ 780.355525][ T9143] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 780.364271][ T9143] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 780.377036][ T9143] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 780.390803][ T9143] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 780.401423][ T9143] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 780.417105][ T9143] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 780.431143][ T9143] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.927525][ T9143] usb 3-1: usb_control_msg returned -32 [ 781.122266][ T9143] usbtmc 3-1:16.0: can't read capabilities [ 782.382821][T13179] device syzkaller1 entered promiscuous mode [ 782.557617][ T9142] usb 3-1: USB disconnect, device number 20 [ 782.925890][T13200] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 783.860016][ T13] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 784.296105][ T13] usb 9-1: Using ep0 maxpacket: 16 [ 784.507587][ T13] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 784.652610][ T13] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 784.676315][ T13] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 784.696801][ T13] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 784.797767][ T13] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.927055][ T13] usb 9-1: config 0 descriptor?? [ 785.733083][T13238] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 786.766669][ T13] usbhid 9-1:0.0: can't add hid device: -71 [ 786.778411][ T13] usbhid: probe of 9-1:0.0 failed with error -71 [ 786.800044][ T13] usb 9-1: USB disconnect, device number 16 [ 893.276051][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 893.283225][ C0] rcu: 1-...!: (0 ticks this GP) idle=8d9/1/0x4000000000000000 softirq=37966/37970 fqs=18 [ 893.295445][ C0] (detected by 0, t=10502 jiffies, g=47641, q=235) [ 893.302051][ C0] Sending NMI from CPU 0 to CPUs 1: [ 893.307270][ C1] NMI backtrace for cpu 1 [ 893.307281][ C1] CPU: 1 PID: 13280 Comm: syz.3.2367 Not tainted 5.15.178-syzkaller #0 [ 893.307296][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 893.307317][ C1] RIP: 0010:kasan_check_range+0x6/0x290 [ 893.307339][ C1] Code: e8 0f 84 75 08 31 c0 c3 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 cc cc cc cc cc cc cc cc cc cc cc cc 55 41 57 41 56 53 01 48 85 f6 0f 84 9a 01 00 00 48 89 fd 48 01 f5 0f 82 59 02 00 [ 893.307355][ C1] RSP: 0018:ffffc90000dd0a58 EFLAGS: 00000046 [ 893.307368][ C1] RAX: 0000000000000001 RBX: ffff8880228c0af0 RCX: ffffffff8162e03f [ 893.307379][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff9098c108 [ 893.307388][ C1] RBP: 000000000000005d R08: dffffc0000000000 R09: fffffbfff2131822 [ 893.307398][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 893.307407][ C1] R13: ffff8880228c0ae8 R14: 1ffff11004518162 R15: ffff8880228c0b10 [ 893.307418][ C1] FS: 00007f329c1156c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 893.307431][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 893.307441][ C1] CR2: 00007f3293d34000 CR3: 000000007adca000 CR4: 00000000003506e0 [ 893.307454][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 893.307462][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 893.307471][ C1] Call Trace: [ 893.307478][ C1] [ 893.307485][ C1] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 893.307500][ C1] ? read_lock_is_recursive+0x10/0x10 [ 893.307516][ C1] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 893.307536][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 893.307550][ C1] ? nmi_handle+0xf7/0x370 [ 893.307566][ C1] ? kasan_check_range+0x6/0x290 [ 893.307579][ C1] ? default_do_nmi+0x62/0x150 [ 893.307594][ C1] ? exc_nmi+0xa8/0x100 [ 893.307607][ C1] ? end_repeat_nmi+0x16/0x31 [ 893.307623][ C1] ? __lock_acquire+0xcef/0x1ff0 [ 893.307642][ C1] ? kasan_check_range+0x6/0x290 [ 893.307655][ C1] ? kasan_check_range+0x6/0x290 [ 893.307668][ C1] ? kasan_check_range+0x6/0x290 [ 893.307681][ C1] [ 893.307685][ C1] [ 893.307690][ C1] __lock_acquire+0xcef/0x1ff0 [ 893.307708][ C1] lock_acquire+0x1db/0x4f0 [ 893.307720][ C1] ? __hrtimer_run_queues+0x662/0xcf0 [ 893.307737][ C1] ? read_lock_is_recursive+0x10/0x10 [ 893.307750][ C1] ? rcu_lock_release+0x5/0x20 [ 893.307766][ C1] ? __netif_schedule+0xc0/0x310 [ 893.307782][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 893.307796][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 893.307813][ C1] _raw_spin_lock_irq+0xcf/0x110 [ 893.307829][ C1] ? __hrtimer_run_queues+0x662/0xcf0 [ 893.307842][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 893.307860][ C1] __hrtimer_run_queues+0x662/0xcf0 [ 893.307879][ C1] ? hrtimer_interrupt+0x980/0x980 [ 893.307891][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 893.307909][ C1] hrtimer_interrupt+0x392/0x980 [ 893.307930][ C1] __sysvec_apic_timer_interrupt+0x13b/0x4b0 [ 893.307948][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 893.307964][ C1] [ 893.307968][ C1] [ 893.307973][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 893.307987][ C1] RIP: 0010:unwind_next_frame+0x52e/0x1fa0 [ 893.308003][ C1] Code: c1 e8 3f 48 01 c8 48 83 e0 fe 49 8d 1c 46 48 89 d8 48 c1 e8 03 0f b6 04 10 84 c0 75 27 48 63 03 48 01 d8 48 8d 4b 04 4c 39 e8 <4c> 0f 46 f1 48 8d 43 fc 48 0f 47 e8 4c 0f 46 e3 49 39 ee 76 b3 e9 [ 893.308014][ C1] RSP: 0018:ffffc9000394f308 EFLAGS: 00000293 [ 893.308026][ C1] RAX: ffffffff8138ca77 RBX: ffffffff8e189724 RCX: ffffffff8e189728 [ 893.308037][ C1] RDX: dffffc0000000000 RSI: ffffffff8e81452e RDI: ffffffff8e189704 [ 893.308047][ C1] RBP: ffffffff8e189724 R08: 0000000000000009 R09: ffffc9000394f420 [ 893.308057][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffff8e189720 [ 893.308066][ C1] R13: ffffffff8138ca8e R14: ffffffff8e189724 R15: ffffc9000394f420 [ 893.308077][ C1] ? __unwind_start+0xee/0x720 [ 893.308092][ C1] ? __unwind_start+0xd7/0x720 [ 893.308108][ C1] ? unwind_next_frame+0xbb/0x1fa0 [ 893.308122][ C1] ? unwind_next_frame+0x1437/0x1fa0 [ 893.308137][ C1] ? __unwind_start+0xef/0x720 [ 893.308153][ C1] __unwind_start+0x59d/0x720 [ 893.308168][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 893.308183][ C1] arch_stack_walk+0xdb/0x140 [ 893.308200][ C1] ? __unwind_start+0xef/0x720 [ 893.308215][ C1] stack_trace_save+0x113/0x1c0 [ 893.308230][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 893.308246][ C1] ? mark_lock+0x98/0x340 [ 893.308260][ C1] __kasan_slab_alloc+0x8e/0xc0 [ 893.308290][ C1] slab_post_alloc_hook+0x53/0x380 [ 893.308305][ C1] ? should_failslab+0x5/0x20 [ 893.308319][ C1] ? slab_pre_alloc_hook+0x53/0xc0 [ 893.308333][ C1] ? security_file_alloc+0x24/0x120 [ 893.308348][ C1] kmem_cache_alloc+0xf3/0x280 [ 893.308364][ C1] security_file_alloc+0x24/0x120 [ 893.308379][ C1] __alloc_file+0xc3/0x240 [ 893.308395][ C1] alloc_empty_file+0x92/0x180 [ 893.308411][ C1] path_openat+0xfc/0x2f20 [ 893.308425][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 893.308438][ C1] ? validate_chain+0x112/0x5930 [ 893.308452][ C1] ? mark_lock+0x98/0x340 [ 893.308465][ C1] ? __lock_acquire+0x1295/0x1ff0 [ 893.308479][ C1] ? mark_lock+0x98/0x340 [ 893.308492][ C1] ? __lock_acquire+0x1295/0x1ff0 [ 893.308504][ C1] ? do_filp_open+0x460/0x460 [ 893.308524][ C1] do_filp_open+0x21c/0x460 [ 893.308537][ C1] ? vfs_tmpfile+0x2e0/0x2e0 [ 893.308556][ C1] ? _raw_spin_unlock+0x24/0x40 [ 893.308570][ C1] ? alloc_fd+0x598/0x630 [ 893.308588][ C1] do_sys_openat2+0x13b/0x4f0 [ 893.308603][ C1] ? do_sys_open+0x220/0x220 [ 893.308620][ C1] __x64_sys_openat+0x243/0x290 [ 893.308643][ C1] ? __ia32_sys_open+0x270/0x270 [ 893.308658][ C1] ? syscall_enter_from_user_mode+0x2e/0x240 [ 893.308673][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 893.308688][ C1] ? syscall_enter_from_user_mode+0x2e/0x240 [ 893.308704][ C1] do_syscall_64+0x3b/0xb0 [ 893.308717][ C1] ? clear_bhb_loop+0x15/0x70 [ 893.308729][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 893.308745][ C1] RIP: 0033:0x7f329e2aaad0 [ 893.308761][ C1] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 893.308772][ C1] RSP: 002b:00007f329c114da0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 893.308786][ C1] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f329e2aaad0 [ 893.308796][ C1] RDX: 0000000000000002 RSI: 00007f329c114eb0 RDI: 00000000ffffff9c [ 893.308805][ C1] RBP: 00007f329c114eb0 R08: 0000000000000000 R09: 000000000000045a [ 893.308814][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 893.308822][ C1] R13: 00007f329c114ef0 R14: 00007f329c114eb0 R15: 00007f3293cf5000 [ 893.308838][ C1] [ 893.309264][ C0] rcu: rcu_preempt kthread starved for 10410 jiffies! g47641 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 893.984926][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 893.994910][ C0] rcu: RCU grace-period kthread stack dump: [ 894.000801][ C0] task:rcu_preempt state:R running task stack:26816 pid: 15 ppid: 2 flags:0x00004000 [ 894.011580][ C0] Call Trace: [ 894.014852][ C0] [ 894.017789][ C0] __schedule+0x12c4/0x45b0 [ 894.022294][ C0] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 894.028184][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 894.034087][ C0] ? __mod_timer+0xa8e/0xeb0 [ 894.038680][ C0] ? release_firmware_map_entry+0x190/0x190 [ 894.044568][ C0] ? mod_timer_pending+0x20/0x20 [ 894.049501][ C0] ? lockdep_softirqs_off+0x420/0x420 [ 894.054873][ C0] schedule+0x11b/0x1f0 [ 894.059026][ C0] schedule_timeout+0x1b9/0x300 [ 894.063871][ C0] ? console_conditional_schedule+0x40/0x40 [ 894.069763][ C0] ? update_process_times+0x200/0x200 [ 894.075138][ C0] ? prepare_to_swait_event+0x321/0x340 [ 894.080686][ C0] rcu_gp_fqs_loop+0x2bf/0x1080 [ 894.085540][ C0] ? dyntick_save_progress_counter+0x230/0x230 [ 894.091695][ C0] ? rcu_gp_init+0x1140/0x1140 [ 894.096461][ C0] ? finish_swait+0xc5/0x1d0 [ 894.101051][ C0] rcu_gp_kthread+0xa4/0x360 [ 894.105637][ C0] ? _raw_spin_unlock+0x40/0x40 [ 894.110485][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 894.115600][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 894.121517][ C0] ? __kthread_parkme+0x15c/0x1c0 [ 894.126551][ C0] kthread+0x3f6/0x4f0 [ 894.130627][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 894.135735][ C0] ? kthread_blkcg+0xd0/0xd0 [ 894.140321][ C0] ret_from_fork+0x1f/0x30 [ 894.144744][ C0] [ 894.147755][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 894.154101][ C0] NMI backtrace for cpu 0 [ 894.158413][ C0] CPU: 0 PID: 13289 Comm: syz.2.2370 Not tainted 5.15.178-syzkaller #0 [ 894.166639][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 894.176688][ C0] Call Trace: [ 894.179961][ C0] [ 894.182796][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 894.187473][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 894.193096][ C0] ? panic+0x860/0x860 [ 894.197173][ C0] nmi_cpu_backtrace+0x46a/0x4a0 [ 894.202102][ C0] ? __wake_up_klogd+0xd5/0x100 [ 894.206957][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 894.213101][ C0] ? _printk+0xd1/0x120 [ 894.217254][ C0] ? cpu_online+0x1f/0x40 [ 894.221580][ C0] ? panic+0x860/0x860 [ 894.225645][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 894.231706][ C0] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 894.237685][ C0] rcu_check_gp_kthread_starvation+0x1d2/0x240 [ 894.244002][ C0] print_other_cpu_stall+0x137a/0x14d0 [ 894.249576][ C0] ? print_cpu_stall+0x600/0x600 [ 894.254521][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 894.259554][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 894.264754][ C0] rcu_sched_clock_irq+0xa38/0x1150 [ 894.270062][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 894.274927][ C0] ? hrtimer_run_queues+0x163/0x450 [ 894.280130][ C0] ? account_process_tick+0x232/0x3a0 [ 894.285510][ C0] update_process_times+0x196/0x200 [ 894.290721][ C0] tick_sched_timer+0x386/0x550 [ 894.295585][ C0] ? tick_setup_sched_timer+0x2d0/0x2d0 [ 894.301136][ C0] __hrtimer_run_queues+0x55b/0xcf0 [ 894.306355][ C0] ? hrtimer_interrupt+0x980/0x980 [ 894.311476][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 894.317562][ C0] hrtimer_interrupt+0x392/0x980 [ 894.322519][ C0] __sysvec_apic_timer_interrupt+0x13b/0x4b0 [ 894.328500][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 894.334129][ C0] [ 894.337053][ C0] [ 894.339979][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 894.345951][ C0] RIP: 0010:smp_call_function_many_cond+0xa93/0xd90 [ 894.352535][ C0] Code: 04 03 84 c0 0f 85 84 00 00 00 45 8b 7d 00 44 89 fe 83 e6 01 31 ff e8 3c d6 0b 00 41 83 e7 01 75 07 e8 d1 d2 0b 00 eb 41 f3 90 <48> b8 00 00 00 00 00 fc ff df 0f b6 04 03 84 c0 75 11 41 f7 45 00 [ 894.372132][ C0] RSP: 0018:ffffc900031febe0 EFLAGS: 00000246 [ 894.378194][ C0] RAX: ffffffff8174b2e4 RBX: 1ffff110171e80b1 RCX: 0000000000080000 [ 894.386243][ C0] RDX: ffffc9000dd29000 RSI: 000000000007ffff RDI: 0000000000080000 [ 894.394207][ C0] RBP: ffffc900031fed20 R08: ffffffff8174b2b4 R09: fffffbfff2131822 [ 894.402169][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 894.410134][ C0] R13: ffff8880b8f40588 R14: ffff8880b8e3b380 R15: 0000000000000001 [ 894.418105][ C0] ? smp_call_function_many_cond+0xa84/0xd90 [ 894.424079][ C0] ? smp_call_function_many_cond+0xab4/0xd90 [ 894.430066][ C0] ? flush_tlb_all+0x20/0x20 [ 894.434655][ C0] ? smp_call_function_many+0x30/0x30 [ 894.440017][ C0] ? do_raw_spin_lock+0x14a/0x370 [ 894.445130][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 894.450321][ C0] ? flush_tlb_all+0x20/0x20 [ 894.454908][ C0] on_each_cpu_cond_mask+0x3b/0x80 [ 894.460016][ C0] __purge_vmap_area_lazy+0x294/0x1740 [ 894.465471][ C0] ? cpumask_next+0xc3/0xf0 [ 894.469968][ C0] ? purge_fragmented_blocks_allcpus+0x855/0x950 [ 894.476286][ C0] ? purge_fragmented_blocks_allcpus+0x8da/0x950 [ 894.482603][ C0] ? _vm_unmap_aliases+0x441/0x4e0 [ 894.487720][ C0] ? purge_fragmented_blocks_allcpus+0x950/0x950 [ 894.494049][ C0] _vm_unmap_aliases+0x453/0x4e0 [ 894.498988][ C0] change_page_attr_set_clr+0x308/0x1050 [ 894.504643][ C0] ? __set_memory_prot+0x100/0x100 [ 894.509758][ C0] ? find_vm_area+0xf9/0x130 [ 894.514523][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 894.519538][ C0] ? do_raw_spin_lock+0x14a/0x370 [ 894.524563][ C0] set_memory_ro+0xa1/0xe0 [ 894.528972][ C0] ? set_memory_nx+0x130/0x130 [ 894.533731][ C0] ? _raw_spin_unlock+0x24/0x40 [ 894.538578][ C0] bpf_int_jit_compile+0xbf36/0xc6c0 [ 894.543893][ C0] ? emit_bpf_dispatcher+0xd90/0xd90 [ 894.549169][ C0] ? bpf_prog_calc_tag+0x69a/0x8f0 [ 894.554270][ C0] ? kfree+0xf1/0x270 [ 894.558263][ C0] ? __might_sleep+0xc0/0xc0 [ 894.562853][ C0] ? debug_mutex_init+0x34/0x70 [ 894.567694][ C0] ? bpf_check+0xe95f/0x12d40 [ 894.572363][ C0] bpf_check+0x1128c/0x12d40 [ 894.576996][ C0] ? bpf_get_btf_vmlinux+0x10/0x10 [ 894.582173][ C0] ? ktime_get_with_offset+0x101/0x320 [ 894.587630][ C0] ? seqcount_lockdep_reader_access+0x153/0x220 [ 894.593866][ C0] ? ktime_get_real_ts64+0x460/0x460 [ 894.599154][ C0] ? __might_fault+0xb4/0x110 [ 894.603824][ C0] ? memset+0x1f/0x40 [ 894.607795][ C0] ? bpf_obj_name_cpy+0x186/0x1d0 [ 894.612814][ C0] bpf_prog_load+0x12b3/0x1b60 [ 894.617580][ C0] ? map_freeze+0x360/0x360 [ 894.622074][ C0] ? __might_fault+0xb8/0x110 [ 894.626755][ C0] ? __might_fault+0xb4/0x110 [ 894.631426][ C0] ? bpf_lsm_bpf+0x5/0x10 [ 894.635746][ C0] ? security_bpf+0x7d/0xa0 [ 894.640244][ C0] __sys_bpf+0x343/0x670 [ 894.644485][ C0] ? bpf_link_show_fdinfo+0x300/0x300 [ 894.649865][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 894.655838][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 894.661033][ C0] __x64_sys_bpf+0x78/0x90 [ 894.665443][ C0] do_syscall_64+0x3b/0xb0 [ 894.669853][ C0] ? clear_bhb_loop+0x15/0x70 [ 894.674524][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 894.680414][ C0] RIP: 0033:0x7f54bc9b0169 [ 894.684826][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 894.704422][ C0] RSP: 002b:00007f54ba819038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 894.712833][ C0] RAX: ffffffffffffffda RBX: 00007f54bcbc8fa0 RCX: 00007f54bc9b0169 [ 894.720797][ C0] RDX: 0000000000000070 RSI: 0000400000000440 RDI: 0000000000000005 [ 894.728758][ C0] RBP: 00007f54bca312a0 R08: 0000000000000000 R09: 0000000000000000 [ 894.736720][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 894.744800][ C0] R13: 0000000000000001 R14: 00007f54bcbc8fa0 R15: 00007fffc28d64e8 [ 894.752803][ C0]