last executing test programs: 7m18.421905459s ago: executing program 32 (id=213): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@ldst={0x3, 0x0, 0x4, 0x1, 0xb, 0xffffffffffffffc0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0x7fff, 0x0, 0x0, 0x40f00}, 0xfe4e) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./control\x00', 0x210000, &(0x7f0000000940)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@bh}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@orlov}, {@noauto_da_alloc}, {@jqfmt_vfsv1}, {@usrjquota}], [{@audit}, {@context={'context', 0x3d, 'system_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'fd\x00'}}]}, 0xff, 0x451, &(0x7f0000001740)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x50) unshare(0x62020600) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r3, r3, 0x0, 0xe3aa6ea) sendmsg$inet6(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)="bc074a853114cd54fa", 0x9}], 0x1, &(0x7f0000000bc0)=ANY=[], 0x1d8}, 0x4000801) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x7, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) unshare(0x2040400) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, 0x0) 5m4.978772158s ago: executing program 3 (id=653): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount_setattr(0xffffffffffffff9c, 0x0, 0x200, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x81f) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) 5m3.526572594s ago: executing program 3 (id=655): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r0, 0x8cee000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) syz_emit_ethernet(0x36, &(0x7f00000004c0)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5, 0x3}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x0, 0x2c, 0x0, @remote, @local}}}}, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r1, 0x0, 0x0, 0x4001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x40) 5m2.81684698s ago: executing program 3 (id=658): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000200)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) write(r1, &(0x7f0000000080)='g', 0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0x6, 0x3, 0x6, 0x7fff, 0x1a, "ee1dd756f560f25a63b2f119c3439425ea59d8"}) 5m2.184490307s ago: executing program 3 (id=660): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@grpquota}]}, 0xff, 0x485, &(0x7f0000001040)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x2d, 0xfffffffd, 0x20000, 0x2, 0x0, 0x9, 0x7, 0x0, 0x0, 0x8, 0x10001}}, 0x50) fchown(r0, 0x0, 0x0) 5m0.884861083s ago: executing program 3 (id=667): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x6, 0x0) userfaultfd(0x80001) 4m58.372680854s ago: executing program 3 (id=672): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000200)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) write(r1, &(0x7f0000000080)='g', 0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0x6, 0x3, 0x6, 0x7fff, 0x1a, "ee1dd756f560f25a63b2f119c3439425ea59d8"}) 4m56.231166839s ago: executing program 33 (id=672): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000200)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) write(r1, &(0x7f0000000080)='g', 0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0x6, 0x3, 0x6, 0x7fff, 0x1a, "ee1dd756f560f25a63b2f119c3439425ea59d8"}) 4m17.846165791s ago: executing program 4 (id=772): ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x88bfa000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x338, 0x338, 0xffffffff, 0x290, 0x0, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@uncond, 0x0, 0x198, 0x1e0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xf, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'ip6tnl0\x00', 0x12, 0x2, 0x9, 0x2004, 0x5, 0x3, {0xc35}, {0x1ff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x12, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00', @port=0x4e21, @icmp_id=0x68}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xa, 0x4, "ed481ca2c99b76ccda2879f6a12da5725ea2669d62d23b45710a851be124"}}}, {{@ip={@local, @remote, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @local, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@broadcast, @ipv4=@empty, @gre_key=0x3, @icmp_id=0x64}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) 4m16.492453104s ago: executing program 4 (id=776): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x17) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0x90) 4m16.168341632s ago: executing program 4 (id=778): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4m14.707133411s ago: executing program 4 (id=781): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000405a04105201010102030109022000010100803209040000020806f50007058102000200070502020002"], 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 4m12.617995542s ago: executing program 4 (id=784): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff0905"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xc0145b0e, &(0x7f0000000040)={0x100000, 0x0, 0x0, 0x0, 0x3}) ioctl$HIDIOCGUSAGE(r1, 0xc0105b08, &(0x7f0000000000)={0x1, 0xfffffffe, 0x7, 0x0, 0x401}) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201200202000010"], 0x0) 4m8.416043912s ago: executing program 4 (id=798): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f00000001c0)={{}, "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"}) r1 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) close(r1) ioprio_get$pid(0x1, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x8000) 3m53.252368262s ago: executing program 34 (id=798): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f00000001c0)={{}, "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"}) r1 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) close(r1) ioprio_get$pid(0x1, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x8000) 3m3.214431675s ago: executing program 7 (id=945): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 3m1.763088589s ago: executing program 7 (id=951): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r0, 0x10000000005, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x10, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000408c002000000000000400000018110000b49c084ae18f6d5f2cbda63e118e78bdb2d3784798c30419e76d66749dd5b5f4fbcddc7da1575b9ee7ddb09f93a57b2beb01d443c48166716b0a5ae98e84a56876acc236488e0ad6d3900342389c0c22bf3758dd0633e6bdd2e1da62885c30f9f495cd46239d928e280a66dc1e76bcc4e2c394d62d3666d7102aff538eae080165e9ae9c50cb68c29366bbf5ee269a11556e89ec7b6db46e7df25d35e0991513f8b4d368b3c911d3406e1e59daa0d0f431", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf09200000000000550901000000000095000000"], &(0x7f0000000480)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(r3, 0x0) 2m59.668951919s ago: executing program 7 (id=954): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001000000400000104"], 0x20}}, 0x20000090) syz_emit_vhci(&(0x7f0000000280)=ANY=[], 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 2m58.499936091s ago: executing program 7 (id=956): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x90) sendmsg$FOU_CMD_DEL(r0, 0x0, 0x4000) 2m57.932502054s ago: executing program 7 (id=959): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) syz_open_dev$dvb_frontend(0x0, 0x0, 0x2000) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, 0x0) mq_open(0x0, 0x42, 0x197, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r3 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, 0x0, 0x0}, 0x94) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2m55.859943603s ago: executing program 7 (id=965): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r2, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0xf29d}], 0x1a000, 0x40010102, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r3, 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) 2m41.559342469s ago: executing program 6 (id=994): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8402) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, 0x0) 2m40.747805049s ago: executing program 6 (id=996): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000040)=0x3ff) sendfile(r1, r2, 0x0, 0x10ffff) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000740)={0x0, 0x483aa011, 0x4, 0xfdfdffff, 0x2, "fe941600faff008000"}) 2m40.634476332s ago: executing program 35 (id=965): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r2, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0xf29d}], 0x1a000, 0x40010102, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r3, 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) 2m38.039305892s ago: executing program 6 (id=1005): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/protocols\x00') lseek(r3, 0x2004, 0x0) 2m36.660780355s ago: executing program 6 (id=1008): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="88000000000803"], 0x88}, 0x1, 0x0, 0x0, 0x48090}, 0x200080d0) 2m36.108187598s ago: executing program 6 (id=1012): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000740)='./file1\x00', 0xa00004, &(0x7f0000000200)={[{@rootdir={'rootdir', 0x3d, 0x2}}, {@gid_ignore}, {@dmode}, {}, {@nostrict}, {@utf8}, {@uid_ignore}, {}, {@anchor={'anchor', 0x3d, 0xae9d}}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@undelete}, {@partition={'partition', 0x3d, 0xa}}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@uid_ignore}]}, 0x5, 0xc87, &(0x7f0000000780)="$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") ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m35.466321724s ago: executing program 6 (id=1016): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000040)=0x3ff) sendfile(r1, r2, 0x0, 0x10ffff) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000740)={0x0, 0x483aa011, 0x4, 0xfdfdffff, 0x2, "fe941600faff008000"}) 2m20.22016997s ago: executing program 36 (id=1016): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000040)=0x3ff) sendfile(r1, r2, 0x0, 0x10ffff) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000740)={0x0, 0x483aa011, 0x4, 0xfdfdffff, 0x2, "fe941600faff008000"}) 24.668311732s ago: executing program 0 (id=1323): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000000c0)={[{@dax_inode}, {@dax}, {@nombcache}]}, 0xff, 0x561, &(0x7f0000001640)="$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") syz_open_dev$usbfs(0x0, 0x76, 0x103901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 23.362317145s ago: executing program 0 (id=1326): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001000000400000104"], 0x20}}, 0x20000090) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)}], 0x1) 19.821106352s ago: executing program 0 (id=1331): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socket$kcm(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6(0x10, 0x80000, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="0100fcffffff000000002f000000100003800400040008000200fd7f000018000180140002006d616376746170"], 0x3c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012100, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) 19.665996529s ago: executing program 2 (id=1332): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x20200ccc, &(0x7f0000002c00)=ANY=[], 0xfe, 0x1528, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001680)='./file0/file0\x00', 0x1c1002, 0x12) write(r0, &(0x7f0000000100)="3f01", 0x2) 17.883957399s ago: executing program 2 (id=1337): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)="02", 0x1}], 0x1, 0x7ffffe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./file0\x00') linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 17.040039644s ago: executing program 1 (id=1340): syz_io_uring_complete(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) chdir(0x0) syz_mount_image$exfat(0x0, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1070425, 0x0, 0x3, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file0\x00') r0 = getpid() sched_setaffinity(0x0, 0x64, &(0x7f00000002c0)=0xffffffffffffff11) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) setgroups(0x0, 0x0) keyctl$chown(0x4, r3, 0xee01, 0x0) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x21cc46, &(0x7f0000000380)=ANY=[], 0x1, 0x1536, &(0x7f0000002c00)="$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") socket$packet(0x11, 0x3, 0x300) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendto$inet(r4, &(0x7f0000000280)="02", 0x1, 0x14, 0x0, 0x0) shutdown(r4, 0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r4, 0x0, r5, 0x0, 0x7ffff000, 0x0) 16.522955806s ago: executing program 9 (id=1341): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r1, 0x0, r3, 0x0, 0x714f, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x8, 0x7, 0x4, 0xffffff21, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x64, 0x0, 0x5, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @loopback}}}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f2, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x7, 0x8, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @multicast1}}}}) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000000)={r0, 0x0, 0xfff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x17, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x9}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x82) 10.434876698s ago: executing program 9 (id=1344): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x800, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x6, &(0x7f0000000000)) syz_emit_vhci(0x0, 0x4) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/202, 0xca}], 0x1) 10.235787797s ago: executing program 1 (id=1345): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2, 0xf5ff}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) 10.059575054s ago: executing program 2 (id=1346): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x82084, 0x0) syz_extract_tcp_res(0x0, 0x6, 0x5) syz_emit_ethernet(0x30f, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000640)={0x0, 0x2, [0x4a1, 0xc34, 0xf62, 0x4b]}) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0xc5, &(0x7f0000000300)={0x0, 0x10f211, 0x4, 0x2006, 0x40001c, 0x0, r0}, &(0x7f00000007c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x14) shutdown(0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x7, 0x3, "ac1a91"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = syz_mount_image$ntfs3(&(0x7f000001f6c0), &(0x7f0000000280)='./file0\x00', 0x3014041, &(0x7f0000000180)={[{@sparse}, {@prealloc}, {@force}, {}, {}, {@sparse}, {@prealloc}, {@acl}, {@nohidden}, {@gid}, {@nohidden}, {@discard}, {@nohidden}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@dmask={'dmask', 0x3d, 0x5}}, {@gid}]}, 0x0, 0x1f27e, &(0x7f000001f700)="$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") getdents64(r3, &(0x7f0000000040)=""/154, 0x9a) connect$phonet_pipe(r2, &(0x7f0000000040), 0x10) 10.009708951s ago: executing program 5 (id=1347): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@nojournal_checksum}, {@grpquota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@i_version}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlockall(0x7) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 9.355964663s ago: executing program 8 (id=1348): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r3, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000000c0)="01", 0x24}]) 9.062693173s ago: executing program 1 (id=1349): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010002000000406a0800010100000000010902120001010080320904000000ff000000"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r1, &(0x7f0000000a00)='0\x00', 0x2) 7.519514714s ago: executing program 9 (id=1350): openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0xb3b54c18e0590239, 0x0, &(0x7f0000bbdffc)) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x180000) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) 7.29650555s ago: executing program 8 (id=1351): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys_mount\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='bfq', 0x3) 4.939463336s ago: executing program 2 (id=1352): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000405a04105201010102030109022000010100803209040000020806f50007058102000200070502"], 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) 4.845653411s ago: executing program 0 (id=1353): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000000c0)={[{@dax_inode}, {@dax}, {@nombcache}]}, 0xff, 0x561, &(0x7f0000001640)="$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") syz_open_dev$usbfs(0x0, 0x76, 0x103901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 4.784333598s ago: executing program 9 (id=1354): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x2c}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x1}) 4.720487671s ago: executing program 8 (id=1355): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x58, 0x4855}, 0x24000052) 4.720270845s ago: executing program 5 (id=1356): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xd13e84410888cde4, 0x1000, 0x4, 0x1}, 0x20) 4.286887651s ago: executing program 1 (id=1357): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r1, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.94374391s ago: executing program 8 (id=1358): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mysys/bus/usb-serial/drivers/sierra/new_id\x00', 0x1, 0x0) write(r1, 0x0, 0x0) 3.886857012s ago: executing program 9 (id=1359): ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x88bfa000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x338, 0x338, 0xffffffff, 0x290, 0x0, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@uncond, 0x0, 0x198, 0x1e0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xf, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'ip6tnl0\x00', 0x12, 0x2, 0x9, 0x2004, 0x5, 0x3, {0xc35}, {0x1ff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x12, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00', @port=0x4e21, @icmp_id=0x68}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xa, 0x4, "ed481ca2c99b76ccda2879f6a12da5725ea2669d62d23b45710a851be124"}}}, {{@ip={@local, @remote, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @local, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@broadcast, @ipv4=@empty, @gre_key=0x3, @icmp_id=0x64}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) 3.799996296s ago: executing program 5 (id=1360): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001000000400000104"], 0x20}}, 0x20000090) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c0", 0x1}], 0x1) 3.642126216s ago: executing program 1 (id=1361): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2, 0xf5ff}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) 3.597261401s ago: executing program 0 (id=1362): poll(0x0, 0x0, 0xb) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000480)='./file1\x00', 0x3004050, &(0x7f0000001640)=ANY=[], 0x3, 0x1063e, &(0x7f0000020c80)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2, 0xf5ff}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) 2.736434431s ago: executing program 5 (id=1363): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000140)) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x9) 2.734291484s ago: executing program 8 (id=1364): r0 = socket$netlink(0x10, 0x3, 0xa) r1 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840) r6 = dup(r0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) r7 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r7, 0x200004) sendfile(r6, r7, 0x0, 0x80001d00c0d1) 2.545117117s ago: executing program 1 (id=1365): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socket$kcm(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6(0x10, 0x80000, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="0100fcffffff000000002f000000100003800400040008000200fd7f000018000180140002006d616376746170"], 0x3c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012100, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) 2.538073896s ago: executing program 2 (id=1366): openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = gettid() timer_create(0x5, &(0x7f0000000540)={0x0, 0x37, 0x2, @tid=r0}, &(0x7f0000000580)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0xb3b54c18e0590239, 0x0, &(0x7f0000bbdffc)) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x180000) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) 2.251907087s ago: executing program 5 (id=1367): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys_mount\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='bfq', 0x3) 1.304744598s ago: executing program 8 (id=1368): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x804810, &(0x7f0000000000)={[{@init_itable}, {@usrjquota}, {@abort}, {@noload}]}, 0x26, 0x758, &(0x7f0000000ac0)="$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") chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x86400, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000006c0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 941.544395ms ago: executing program 2 (id=1369): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010002000000406a0800010100000000010902120001010080320904000000ff000000"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r1, &(0x7f0000000a00)='0\x00', 0x2) 552.609904ms ago: executing program 5 (id=1370): openat(0xffffffffffffff9c, 0x0, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) r4 = fsopen(&(0x7f0000000240)='tracefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000040)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D\xde\x1e-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\x98\xf2\x1e\xe4\'U\xb3\xf8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\r\x00\x00\x00\x86N\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xff\x01\x00\x00\x00\x00\x00\x00\x96t\\\x0f\x12C\xf0\xe5C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\x8e\xa8\x10\x94JmDv\xcc^\xf1\xc4g\xd6,\x1e\xa0\xcc\xbf\xfd\x97\v\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1\tf>>\xb5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x97\xc0\xf6\x0e\x00\x00\x00\x00\x00\x00\x00\xf9\xdcaA\x95\x9fUjHo\x93\xa0jh:\xe3\xa9\xd0:&\f\xb2VK=c&!92\xb8@A\x9eb\xab\xbd\xf8#,\x8e\x86T_\xc4\x88\x9b\x11vC\x14\x99j\x01R \xeb\xaaa\xaab\xe4B\x88jST\xfbt \x85\x13\xc73', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x100000000000000) 80.832216ms ago: executing program 0 (id=1371): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x58, 0x4855}, 0x24000052) 0s ago: executing program 9 (id=1372): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x2c}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x1}) kernel console output (not intermixed with test programs): 4.284582][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 404.284654][ C1] ? __alloc_skb+0x140/0x710 [ 404.284710][ C1] __alloc_skb+0x140/0x710 [ 404.284756][ C1] ? __alloc_skb+0x5b7/0x710 [ 404.284803][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 404.284853][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.284899][ C1] ? lock_acquire+0x1b9/0x370 [ 404.284950][ C1] __netdev_alloc_skb+0x7a/0x960 [ 404.285009][ C1] __ieee80211_beacon_get+0xba1/0x1ee0 [ 404.285070][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.285118][ C1] ? __lock_acquire+0x49f/0x1a40 [ 404.285170][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 404.285228][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 404.285289][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.285345][ C1] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 404.285409][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.285462][ C1] __iterate_interfaces+0x2e6/0x650 [ 404.285513][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 404.285575][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 404.285640][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 404.285701][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 404.285746][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 404.285789][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 404.285865][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 404.285926][ C1] handle_softirqs+0x1ea/0x9b0 [ 404.285978][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 404.286026][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.286074][ C1] ? _raw_spin_unlock+0x28/0x50 [ 404.286113][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.286160][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 404.286228][ C1] __irq_exit_rcu+0x162/0x210 [ 404.286276][ C1] irq_exit_rcu+0x9/0x30 [ 404.286321][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 404.286369][ C1] [ 404.286381][ C1] [ 404.286395][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 404.286440][ C1] RIP: 0010:_raw_spin_unlock+0x4/0x50 [ 404.286483][ C1] Code: 00 31 f6 e8 7e 2a 29 f6 58 89 d8 5b 5d e9 7f 89 53 f5 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <53> 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 ba 2f 29 f6 48 89 df e8 [ 404.286522][ C1] RSP: 0018:ffffc900054b79b0 EFLAGS: 00000246 [ 404.286554][ C1] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc90006d21000 [ 404.286580][ C1] RDX: 0000000000080000 RSI: ffffffff825b6466 RDI: ffff88807c396cc0 [ 404.286606][ C1] RBP: 0000000000210008 R08: 0000000000000005 R09: 0000000000000000 [ 404.286637][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88801dbcd3c0 [ 404.286662][ C1] R13: ffff88807c3e3e50 R14: 0000000000000000 R15: 1ffff92000a96f3d [ 404.286702][ C1] ? follow_page_pte+0x516/0x13f0 [ 404.286749][ C1] follow_page_pte+0x520/0x13f0 [ 404.286796][ C1] ? __pfx_follow_page_pte+0x10/0x10 [ 404.286838][ C1] ? __pfx___might_resched+0x10/0x10 [ 404.286892][ C1] __get_user_pages+0x741/0x32a0 [ 404.286952][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 404.286998][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.287054][ C1] populate_vma_page_range+0x267/0x3f0 [ 404.287103][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 404.287147][ C1] ? __pfx_find_vma_intersection+0x10/0x10 [ 404.287191][ C1] ? do_mmap+0x93f/0x12f0 [ 404.287237][ C1] __mm_populate+0x107/0x3a0 [ 404.287284][ C1] ? __pfx___mm_populate+0x10/0x10 [ 404.287329][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.287380][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.287428][ C1] ? up_write+0x2e5/0x5c0 [ 404.287483][ C1] vm_mmap_pgoff+0x37f/0x470 [ 404.287528][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 404.287569][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.287628][ C1] ? __pfx_do_futex+0x10/0x10 [ 404.287692][ C1] ksys_mmap_pgoff+0xe4/0x610 [ 404.287733][ C1] ? __x64_sys_futex+0x358/0x4d0 [ 404.287789][ C1] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 404.287831][ C1] ? __pfx___x64_sys_futex+0x10/0x10 [ 404.287900][ C1] __x64_sys_mmap+0x125/0x190 [ 404.287959][ C1] do_syscall_64+0x115/0x870 [ 404.288015][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.288056][ C1] RIP: 0033:0x7f0e7159de99 [ 404.288087][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.288125][ C1] RSP: 002b:00007f0e72520028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 404.288160][ C1] RAX: ffffffffffffffda RBX: 00007f0e71825fa0 RCX: 00007f0e7159de99 [ 404.288187][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 404.288212][ C1] RBP: 00007f0e71633eaf R08: ffffffffffffffff R09: 0000000000000000 [ 404.288239][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 404.288264][ C1] R13: 00007f0e71826038 R14: 00007f0e71825fa0 R15: 00007ffd25c499e8 [ 404.288316][ C1] [ 404.883797][ T8782] CPU: 0 UID: 0 PID: 8782 Comm: syz.1.804 Not tainted syzkaller #0 PREEMPT(full) [ 404.883837][ T8782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 404.883854][ T8782] Call Trace: [ 404.883863][ T8782] [ 404.883874][ T8782] dump_stack_lvl+0x100/0x190 [ 404.883911][ T8782] should_fail_ex.cold+0x5/0xa [ 404.883938][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.883977][ T8782] should_failslab+0xc2/0x120 [ 404.884007][ T8782] __kmalloc_node_noprof+0x101/0x830 [ 404.884050][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.884083][ T8782] ? __get_vm_area_node+0x1dc/0x330 [ 404.884111][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.884144][ T8782] ? __get_vm_area_node+0x208/0x330 [ 404.884173][ T8782] ? __vmalloc_node_range_noprof+0x409/0x1630 [ 404.884221][ T8782] __vmalloc_node_range_noprof+0x409/0x1630 [ 404.884267][ T8782] ? bpf_check+0x1cc/0xb7d0 [ 404.884296][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.884331][ T8782] ? rcu_read_unlock+0x17/0x60 [ 404.884370][ T8782] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 404.884403][ T8782] ? rcu_is_watching+0x12/0xc0 [ 404.884443][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.884478][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.884511][ T8782] ? rcu_is_watching+0x12/0xc0 [ 404.884551][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.884585][ T8782] ? __kmalloc_large_node_noprof+0x5d/0x70 [ 404.884616][ T8782] ? find_held_lock+0x2b/0x80 [ 404.884659][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.884697][ T8782] ? bpf_check+0x1cc/0xb7d0 [ 404.884723][ T8782] __vmalloc_node_noprof+0xad/0xf0 [ 404.884756][ T8782] ? bpf_check+0x1cc/0xb7d0 [ 404.884788][ T8782] bpf_check+0x1cc/0xb7d0 [ 404.884815][ T8782] ? trace_contention_end+0x126/0x160 [ 404.884852][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.884887][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.884920][ T8782] ? __css_rstat_updated+0x1ce/0x5a0 [ 404.884954][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.884990][ T8782] ? __pfx___css_rstat_updated+0x10/0x10 [ 404.885034][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.885068][ T8782] ? __lock_acquire+0x49f/0x1a40 [ 404.885099][ T8782] ? __mod_memcg_state+0x12b/0x500 [ 404.885141][ T8782] ? __pfx_bpf_check+0x10/0x10 [ 404.885182][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.885217][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.885251][ T8782] ? find_held_lock+0x2b/0x80 [ 404.885291][ T8782] ? bpf_prog_load+0x1933/0x2fa0 [ 404.885329][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.885365][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.885398][ T8782] ? __asan_memset+0x23/0x50 [ 404.885436][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.885470][ T8782] ? lsm_blob_alloc+0x2b/0x90 [ 404.885519][ T8782] ? bpf_prog_load+0x244d/0x2fa0 [ 404.885553][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.885586][ T8782] bpf_prog_load+0x244d/0x2fa0 [ 404.885633][ T8782] ? __pfx_bpf_prog_load+0x10/0x10 [ 404.885708][ T8782] __sys_bpf+0x18dc/0x4e80 [ 404.885757][ T8782] ? __pfx___sys_bpf+0x10/0x10 [ 404.885794][ T8782] ? __pfx_futex_hash+0x10/0x10 [ 404.885830][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.885864][ T8782] ? simple_attr_write_xsigned.isra.0+0x22a/0x310 [ 404.885908][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.885949][ T8782] ? futex_wait+0x11e/0x370 [ 404.885995][ T8782] ? __pfx_futex_wait+0x10/0x10 [ 404.886039][ T8782] ? find_held_lock+0x2b/0x80 [ 404.886088][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.886121][ T8782] ? rcu_read_lock_any_held+0x6a/0xa0 [ 404.886164][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.886201][ T8782] ? find_held_lock+0x2b/0x80 [ 404.886242][ T8782] ? ksys_write+0x190/0x250 [ 404.886277][ T8782] ? ksys_write+0x190/0x250 [ 404.886333][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.886366][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.886400][ T8782] ? __x64_sys_futex+0x358/0x4d0 [ 404.886439][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.886474][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.886507][ T8782] ? xfd_validate_state+0x129/0x190 [ 404.886547][ T8782] ? __x64_sys_bpf+0xce/0x140 [ 404.886586][ T8782] __x64_sys_bpf+0xce/0x140 [ 404.886627][ T8782] ? do_syscall_64+0x90/0x870 [ 404.886665][ T8782] do_syscall_64+0x115/0x870 [ 404.886704][ T8782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.886733][ T8782] RIP: 0033:0x7f796d59de99 [ 404.886756][ T8782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.886783][ T8782] RSP: 002b:00007f796e545028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 404.886809][ T8782] RAX: ffffffffffffffda RBX: 00007f796d825fa0 RCX: 00007f796d59de99 [ 404.886827][ T8782] RDX: 0000000000000080 RSI: 0000200000000200 RDI: 0000000000000005 [ 404.886845][ T8782] RBP: 00007f796d633eaf R08: 0000000000000000 R09: 0000000000000000 [ 404.886862][ T8782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.886879][ T8782] R13: 00007f796d826038 R14: 00007f796d825fa0 R15: 00007ffffb113db8 [ 404.886917][ T8782] [ 405.416459][ T8782] syz.1.804: vmalloc error: size 4096, failed to allocated page array size 8, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 405.419858][ T4986] CPU: 1 UID: 0 PID: 4986 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 405.419902][ T4986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 405.419924][ T4986] Call Trace: [ 405.419936][ T4986] [ 405.419950][ T4986] dump_stack_lvl+0x100/0x190 [ 405.419996][ T4986] should_fail_ex.cold+0x5/0xa [ 405.420031][ T4986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.420081][ T4986] should_failslab+0xc2/0x120 [ 405.420119][ T4986] __kmalloc_noprof+0xfc/0x820 [ 405.420184][ T4986] ? tomoyo_encode2+0xfb/0x3c0 [ 405.420246][ T4986] tomoyo_encode2+0xfb/0x3c0 [ 405.420305][ T4986] tomoyo_encode+0x29/0x50 [ 405.420356][ T4986] tomoyo_realpath_from_path+0x18c/0x690 [ 405.420422][ T4986] tomoyo_path_perm+0x276/0x460 [ 405.420464][ T4986] ? tomoyo_path_perm+0x262/0x460 [ 405.420513][ T4986] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 405.420560][ T4986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.420653][ T4986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.420696][ T4986] ? find_held_lock+0x2b/0x80 [ 405.420749][ T4986] ? __might_fault+0xc5/0x140 [ 405.420797][ T4986] ? __might_fault+0xc5/0x140 [ 405.420852][ T4986] security_inode_getattr+0x116/0x280 [ 405.420899][ T4986] vfs_statx+0x11f/0x3f0 [ 405.420958][ T4986] ? __pfx_vfs_statx+0x10/0x10 [ 405.421017][ T4986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.421061][ T4986] ? do_getname+0x191/0x390 [ 405.421102][ T4986] vfs_fstatat+0x77/0xe0 [ 405.421166][ T4986] __do_sys_newfstatat+0x9d/0x120 [ 405.421228][ T4986] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 405.421299][ T4986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.421351][ T4986] do_syscall_64+0x115/0x870 [ 405.421404][ T4986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.421441][ T4986] RIP: 0033:0x7f59bd711b0a [ 405.421470][ T4986] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 405.421505][ T4986] RSP: 002b:00007ffd0459c728 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 405.421538][ T4986] RAX: ffffffffffffffda RBX: 00007ffd0459cbc0 RCX: 00007f59bd711b0a [ 405.421566][ T4986] RDX: 00007ffd0459c730 RSI: 00007ffd0459cbc0 RDI: 00000000ffffff9c [ 405.421589][ T4986] RBP: 0000560296285910 R08: 0000000000000000 R09: 0000000000000000 [ 405.421612][ T4986] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd0459c7c0 [ 405.421635][ T4986] R13: 0000560258e89100 R14: 0000000000000000 R15: 00007ffd0459e0e0 [ 405.421683][ T4986] [ 405.430311][ T4986] ERROR: Out of memory at tomoyo_realpath_from_path. [ 405.435986][ T8782] CPU: 0 UID: 0 PID: 8782 Comm: syz.1.804 Not tainted syzkaller #0 PREEMPT(full) [ 405.436031][ T8782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 405.436052][ T8782] Call Trace: [ 405.436064][ T8782] [ 405.436078][ T8782] dump_stack_lvl+0x100/0x190 [ 405.436122][ T8782] warn_alloc.cold+0x94/0xa8 [ 405.436161][ T8782] ? __pfx_warn_alloc+0x10/0x10 [ 405.436211][ T8782] ? dump_stack_lvl+0x17c/0x190 [ 405.436252][ T8782] ? rcu_is_watching+0x12/0xc0 [ 405.436308][ T8782] ? __kasan_kmalloc+0x8a/0xb0 [ 405.436366][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.436410][ T8782] ? __kmalloc_node_noprof+0x357/0x830 [ 405.436465][ T8782] ? __entry_text_end+0x1020b6/0x1020b9 [ 405.436507][ T8782] ? __get_vm_area_node+0x1dc/0x330 [ 405.436545][ T8782] ? __get_vm_area_node+0x208/0x330 [ 405.436582][ T8782] ? __vmalloc_node_range_noprof+0x409/0x1630 [ 405.436636][ T8782] __vmalloc_node_range_noprof+0x1394/0x1630 [ 405.436702][ T8782] ? bpf_check+0x1cc/0xb7d0 [ 405.436740][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.436797][ T8782] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 405.436840][ T8782] ? rcu_is_watching+0x12/0xc0 [ 405.436891][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.436937][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.436980][ T8782] ? rcu_is_watching+0x12/0xc0 [ 405.437031][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.437075][ T8782] ? __kmalloc_large_node_noprof+0x5d/0x70 [ 405.437115][ T8782] ? find_held_lock+0x2b/0x80 [ 405.437171][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.437220][ T8782] ? bpf_check+0x1cc/0xb7d0 [ 405.437255][ T8782] __vmalloc_node_noprof+0xad/0xf0 [ 405.437297][ T8782] ? bpf_check+0x1cc/0xb7d0 [ 405.437340][ T8782] bpf_check+0x1cc/0xb7d0 [ 405.437374][ T8782] ? trace_contention_end+0x126/0x160 [ 405.437423][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.437469][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.437514][ T8782] ? __css_rstat_updated+0x1ce/0x5a0 [ 405.437557][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.437603][ T8782] ? __pfx___css_rstat_updated+0x10/0x10 [ 405.437667][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.437710][ T8782] ? __lock_acquire+0x49f/0x1a40 [ 405.437751][ T8782] ? __mod_memcg_state+0x12b/0x500 [ 405.437807][ T8782] ? __pfx_bpf_check+0x10/0x10 [ 405.437855][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.437901][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.437945][ T8782] ? find_held_lock+0x2b/0x80 [ 405.437998][ T8782] ? bpf_prog_load+0x1933/0x2fa0 [ 405.438047][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.438095][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.438139][ T8782] ? __asan_memset+0x23/0x50 [ 405.438187][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.438231][ T8782] ? lsm_blob_alloc+0x2b/0x90 [ 405.438294][ T8782] ? bpf_prog_load+0x244d/0x2fa0 [ 405.438343][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.438386][ T8782] bpf_prog_load+0x244d/0x2fa0 [ 405.438447][ T8782] ? __pfx_bpf_prog_load+0x10/0x10 [ 405.438544][ T8782] __sys_bpf+0x18dc/0x4e80 [ 405.438608][ T8782] ? __pfx___sys_bpf+0x10/0x10 [ 405.438661][ T8782] ? __pfx_futex_hash+0x10/0x10 [ 405.438709][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.438752][ T8782] ? simple_attr_write_xsigned.isra.0+0x22a/0x310 [ 405.438810][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.438864][ T8782] ? futex_wait+0x11e/0x370 [ 405.438924][ T8782] ? __pfx_futex_wait+0x10/0x10 [ 405.438980][ T8782] ? find_held_lock+0x2b/0x80 [ 405.439043][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.439087][ T8782] ? rcu_read_lock_any_held+0x6a/0xa0 [ 405.439143][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.439186][ T8782] ? find_held_lock+0x2b/0x80 [ 405.439239][ T8782] ? ksys_write+0x190/0x250 [ 405.439285][ T8782] ? ksys_write+0x190/0x250 [ 405.439359][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.439403][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.439446][ T8782] ? __x64_sys_futex+0x358/0x4d0 [ 405.439498][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.439544][ T8782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.439588][ T8782] ? xfd_validate_state+0x129/0x190 [ 405.439645][ T8782] ? __x64_sys_bpf+0xce/0x140 [ 405.439696][ T8782] __x64_sys_bpf+0xce/0x140 [ 405.439749][ T8782] ? do_syscall_64+0x90/0x870 [ 405.439799][ T8782] do_syscall_64+0x115/0x870 [ 405.439849][ T8782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.439888][ T8782] RIP: 0033:0x7f796d59de99 [ 405.439916][ T8782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.439951][ T8782] RSP: 002b:00007f796e545028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 405.439987][ T8782] RAX: ffffffffffffffda RBX: 00007f796d825fa0 RCX: 00007f796d59de99 [ 405.440011][ T8782] RDX: 0000000000000080 RSI: 0000200000000200 RDI: 0000000000000005 [ 405.440034][ T8782] RBP: 00007f796d633eaf R08: 0000000000000000 R09: 0000000000000000 [ 405.440057][ T8782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.440079][ T8782] R13: 00007f796d826038 R14: 00007f796d825fa0 R15: 00007ffffb113db8 [ 405.440128][ T8782] [ 405.440187][ T8782] Mem-Info: [ 406.326675][ T8782] active_anon:7959 inactive_anon:0 isolated_anon:0 [ 406.326675][ T8782] active_file:7 inactive_file:45480 isolated_file:0 [ 406.326675][ T8782] unevictable:768 dirty:145 writeback:0 [ 406.326675][ T8782] slab_reclaimable:6612 slab_unreclaimable:99806 [ 406.326675][ T8782] mapped:35675 shmem:1490 pagetables:1595 [ 406.326675][ T8782] sec_pagetables:0 bounce:0 [ 406.326675][ T8782] kernel_misc_reclaimable:0 [ 406.326675][ T8782] free:1304803 free_pcp:8853 free_cma:0 [ 406.473661][ T8782] Node 0 active_anon:31884kB inactive_anon:0kB active_file:28kB inactive_file:182388kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:142660kB dirty:676kB writeback:0kB shmem:4424kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13296kB pagetables:5992kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 406.551134][ T5997] udevd[5997]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:5.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 406.587432][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.806'. [ 406.759979][ T8797] syz.5.808 (8797): drop_caches: 2 [ 406.862041][ T8800] fuse: Unknown parameter 'fd0x0000000000000003' [ 407.344484][ T8782] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:240kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:12kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 407.517419][ T8782] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 407.657129][ T8782] lowmem_reserve[]: 0 2472 2473 2473 2473 [ 407.686180][ T8782] Node 0 DMA32 free:1263500kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32176kB inactive_anon:0kB active_file:28kB inactive_file:184776kB unevictable:1536kB writepending:740kB zspages:0kB present:3129332kB managed:2532300kB mlocked:0kB bounce:0kB free_pcp:31212kB local_pcp:13052kB free_cma:0kB [ 407.805825][ T8782] lowmem_reserve[]: 0 0 0 0 0 [ 407.814814][ T8807] loop5: detected capacity change from 0 to 512 [ 407.819452][ T8782] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 407.862447][ T8807] EXT4-fs: Ignoring removed orlov option [ 407.886748][ T8807] EXT4-fs: Ignoring removed mblk_io_submit option [ 407.887083][ T5773] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 407.958154][ T8807] EXT4-fs error (device loop5): ext4_iget_extra_inode:5179: inode #15: comm syz.5.811: corrupted in-inode xattr: e_value size too large [ 407.983717][ T8807] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 407.988934][ T8807] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.811: couldn't read orphan inode 15 (err -117) [ 407.998773][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 407.998806][ C1] EXT4-fs (loop5): initial error at time 1785308833: ext4_iget_extra_inode:5179: inode 15 [ 407.998861][ C1] EXT4-fs (loop5): last error at time 1785308833: ext4_iget_extra_inode:5179: inode 15 [ 408.052346][ T8782] lowmem_reserve[]: 0 0 0 0 0 [ 408.069474][ T8782] Node 1 Normal free:3941356kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:240kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:420kB local_pcp:0kB free_cma:0kB [ 408.106659][ T8782] lowmem_reserve[]: 0 0 0 0 0 [ 408.107444][ T8807] loop5: lost filesystem error report for type 5 error -117 [ 408.112083][ T8782] Node 0 [ 408.129638][ T8807] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.154112][ T5773] usb 7-1: Using ep0 maxpacket: 8 [ 408.181787][ T5773] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 408.195122][ T5773] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 408.229050][ T8782] DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 408.244187][ T5773] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 408.262073][ T5773] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 408.272773][ T8782] Node 0 DMA32: 360*4kB (ME) 542*8kB (UME) 609*16kB (UME) 1463*32kB (UME) 871*64kB (UME) 258*128kB (UME) 75*256kB (UME) 26*512kB (UME) 12*1024kB (UM) 4*2048kB (UM) 258*4096kB (UM) = 1260864kB [ 408.300193][ T5773] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 408.533600][ T8782] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 408.539602][ T5773] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 408.550914][ T8782] Node 1 [ 408.566516][ T5773] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 408.580081][ T5773] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.590716][ T8782] Normal: 7*4kB (UM) 4*8kB (UM) 5*16kB (UM) 7*32kB (UM) 6*64kB (UM) 6*128kB (UM) 4*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 959*4096kB (M) = 3941356kB [ 408.644287][ T8782] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 408.657143][ T8782] Node 0 hugepages_total=5 hugepages_free=5 hugepages_surp=0 hugepages_size=2048kB [ 408.738743][ T8782] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 408.791901][ T8782] Node 1 hugepages_total=5 hugepages_free=5 hugepages_surp=0 hugepages_size=2048kB [ 408.818084][ T5628] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.840603][ T8782] 47061 total pagecache pages [ 408.850706][ T5773] usbtmc 7-1:16.0: probe with driver usbtmc failed with error -22 [ 408.885649][ T8782] 0 pages in swap cache [ 408.911716][ T8782] Free swap = 124996kB [ 408.923016][ T8782] Total swap = 124996kB [ 408.946989][ T8782] 2097051 pages RAM [ 408.961298][ T8782] 0 pages HighMem/MovableOnly [ 408.982473][ T8782] 432265 pages reserved [ 408.997601][ T8782] 0 pages cma reserved [ 409.120260][ T8819] loop5: detected capacity change from 0 to 512 [ 409.148146][ T8819] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.5.814: corrupted xattr block 95: invalid header [ 409.220076][ T8819] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 409.220647][ T8819] EXT4-fs error (device loop5): ext4_validate_block_bitmap:431: comm syz.5.814: bg 0: block 7: invalid block bitmap [ 409.229927][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 409.229952][ C0] EXT4-fs (loop5): initial error at time 1785308835: ext4_expand_extra_isize_ea:2810: inode 11 [ 409.229994][ C0] EXT4-fs (loop5): last error at time 1785308835: ext4_expand_extra_isize_ea:2810: inode 11 [ 409.332935][ T8825] loop1: detected capacity change from 0 to 128 [ 409.379840][ T8819] loop5: lost filesystem error report for type 5 error -117 [ 409.387270][ T8819] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 409.459652][ T8819] loop5: lost filesystem error report for type 5 error -117 [ 409.465456][ T8819] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #11: comm syz.5.814: corrupted xattr block 95: invalid header [ 409.563378][ T8825] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 409.575918][ T8819] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 409.589845][ T8826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.609065][ T8819] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 409.700556][ T8825] ext4 filesystem being mounted at /140/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 409.933724][ T8819] EXT4-fs (loop5): 1 orphan inode deleted [ 410.165232][ T8826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.174217][ T8819] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.016567][ T5628] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.034602][ T5624] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 413.219953][ T5765] usb 7-1: USB disconnect, device number 12 [ 414.394928][ T5849] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 414.621283][ T5849] usb 1-1: Using ep0 maxpacket: 8 [ 414.860053][ T5849] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 414.869017][ T5849] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 414.893764][ T5849] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 414.970224][ T5849] usb 1-1: config 0 has no interface number 0 [ 414.998730][ T5849] usb 1-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 415.059262][ T5849] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 415.078590][ T5849] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 415.099743][ T5849] usb 1-1: Product: syz [ 415.128077][ T8854] loop5: detected capacity change from 0 to 128 [ 415.156481][ T5849] usb 1-1: config 0 descriptor?? [ 415.166680][ T8856] fuse: Unknown parameter 'use00000000000000000000' [ 415.247461][ T8854] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 415.334954][ T8854] hpfs: filesystem error: improperly stopped [ 415.378233][ T8854] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 415.443065][ T8854] hpfs: You really don't want any checks? You are crazy... [ 415.457291][ T8854] hpfs: Code page index out of array [ 415.473095][ T8854] hpfs: code page support is disabled [ 415.488962][ T8854] hpfs: hpfs_map_4sectors(): unaligned read [ 415.506609][ T8854] hpfs: hpfs_map_4sectors(): unaligned read [ 415.533379][ T8854] hpfs: filesystem error: unable to find root dir [ 415.958220][ T5637] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 415.973517][ T5637] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 415.974285][ T6377] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 415.994840][ T5637] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 416.010312][ T5637] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 416.021465][ T5637] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 417.083795][ T8881] loop6: detected capacity change from 0 to 512 [ 417.186883][ T8881] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.6.829: corrupted xattr block 95: invalid header [ 417.301090][ T5765] usb 1-1: USB disconnect, device number 33 [ 417.333611][ T8881] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 417.337068][ T8881] EXT4-fs error (device loop6): ext4_validate_block_bitmap:431: comm syz.6.829: bg 0: block 7: invalid block bitmap [ 417.346327][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 417.346361][ C1] EXT4-fs (loop6): initial error at time 1785308843: ext4_expand_extra_isize_ea:2810: inode 11 [ 417.346419][ C1] EXT4-fs (loop6): last error at time 1785308843: ext4_expand_extra_isize_ea:2810: inode 11 [ 417.540013][ T8881] loop6: lost filesystem error report for type 5 error -117 [ 417.540613][ T8881] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 417.663821][ T5637] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 417.672795][ T8881] loop6: lost filesystem error report for type 5 error -117 [ 417.802108][ T8881] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2972: inode #11: comm syz.6.829: corrupted xattr block 95: invalid header [ 417.894157][ T5765] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 418.077414][ T5637] Bluetooth: hci2: command tx timeout [ 418.188694][ T8881] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 418.382959][ T8881] EXT4-fs warning (device loop6): ext4_evict_inode:287: xattr delete (err -117) [ 418.586921][ T5765] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 418.648647][ T8881] EXT4-fs (loop6): 1 orphan inode deleted [ 418.656683][ T5765] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.698244][ T5765] usb 1-1: Product: syz [ 418.717756][ T5765] usb 1-1: Manufacturer: syz [ 418.723420][ T5765] usb 1-1: SerialNumber: syz [ 418.761237][ T8881] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.781600][ T5765] ums-karma 1-1:1.0: USB Mass Storage device detected [ 419.245801][ T5765] ums-karma 1-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 419.245801][ T5765] Please send a copy of this message to and [ 420.485747][ T5637] Bluetooth: hci2: command tx timeout [ 421.551048][ T5765] ums-karma 1-1:1.0: probe with driver ums-karma failed with error -5 [ 422.361911][ T5765] usb 1-1: USB disconnect, device number 34 [ 422.382795][ T6779] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.563784][ T5637] Bluetooth: hci2: command tx timeout [ 424.526434][ T8937] fuse: Unknown parameter 'use00000000000000000000' [ 424.633942][ T5637] Bluetooth: hci2: command tx timeout [ 424.720199][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.252389][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.414173][ T8963] afs: Bad value for 'source' [ 426.512609][ T8965] netlink: 20 bytes leftover after parsing attributes in process `syz.6.845'. [ 428.109740][ T8953] loop7: detected capacity change from 0 to 32768 [ 428.123802][ T8970] loop1: detected capacity change from 0 to 128 [ 428.151059][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.170406][ T8970] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 428.222773][ T8970] hpfs: filesystem error: improperly stopped [ 428.268033][ T8970] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 428.307369][ T8970] hpfs: You really don't want any checks? You are crazy... [ 428.360254][ T8970] hpfs: Code page index out of array [ 428.411255][ T8970] hpfs: code page support is disabled [ 428.433658][ T8970] hpfs: hpfs_map_4sectors(): unaligned read [ 428.460009][ T8970] hpfs: hpfs_map_4sectors(): unaligned read [ 428.490336][ T30] audit: type=1800 audit(1785308854.484:34): pid=8953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.843" name="file1" dev="loop7" ino=4 res=0 errno=0 [ 428.518054][ T8970] hpfs: filesystem error: unable to find root dir [ 428.745802][ T8975] syzkaller0: entered promiscuous mode [ 428.751362][ T8975] syzkaller0: entered allmulticast mode [ 428.814391][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.053131][ T8994] overlayfs: missing 'lowerdir' [ 430.678364][ T9012] loop0: detected capacity change from 0 to 128 [ 431.217486][ T5637] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 431.367318][ T9012] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 431.500480][ T9012] ext4 filesystem being mounted at /152/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 432.388350][ T5627] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 432.613834][ T5849] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 432.843859][ T5849] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 432.906578][ T5849] usb 2-1: config 0 has no interface number 0 [ 432.970391][ T5849] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 433.031458][ T5849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.090825][ T5849] usb 2-1: Product: syz [ 433.136123][ T5849] usb 2-1: Manufacturer: syz [ 434.135321][ T5849] usb 2-1: SerialNumber: syz [ 434.274939][ T5849] usb 2-1: config 0 descriptor?? [ 434.530495][ T5849] usb 2-1: selecting invalid altsetting 1 [ 434.578081][ T5849] dvb_ttusb_budget: ttusb_init_controller: error [ 434.610938][ T5849] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 435.304011][ T5849] DVB: Unable to find symbol stv0299_attach() [ 435.938345][ T5849] DVB: Unable to find symbol tda8083_attach() [ 435.970174][ T5849] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 436.012073][ T5849] usb 2-1: USB disconnect, device number 23 [ 436.149637][ T9057] overlayfs: missing 'lowerdir' [ 439.298248][ T9083] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 439.359644][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.366964][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.657402][ T6379] netdevsim netdevsim4 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.132658][ T1159] netdevsim netdevsim4 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.531794][ T1159] netdevsim netdevsim4 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.551297][ T1159] netdevsim netdevsim4 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.627682][ T36] bridge_slave_1: left allmulticast mode [ 440.658378][ T36] bridge_slave_1: left promiscuous mode [ 440.680244][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.736555][ T36] bridge_slave_0: left allmulticast mode [ 440.753004][ T36] bridge_slave_0: left promiscuous mode [ 440.776962][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.130925][ T9100] loop5: detected capacity change from 0 to 256 [ 442.065010][ T9102] overlayfs: missing 'lowerdir' [ 442.439524][ T9100] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc20ee313, utbl_chksum : 0xe619d30d) [ 443.788448][ T9117] loop0: detected capacity change from 0 to 256 [ 443.818833][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.886512][ T30] audit: type=1804 audit(1785308869.884:35): pid=9117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.883" name="/newroot/160/file0/bus" dev="loop0" ino=1048915 res=1 errno=0 [ 443.925200][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.975503][ T36] bond0 (unregistering): Released all slaves [ 444.115190][ T5637] Bluetooth: hci6: unexpected event 0x03 length: 1 < 11 [ 446.892090][ T9154] loop6: detected capacity change from 0 to 256 [ 446.929049][ T9159] overlayfs: missing 'lowerdir' [ 447.027744][ T8872] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.033044][ T9154] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x13601927, utbl_chksum : 0xe619d30d) [ 447.066176][ T8872] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.104101][ T8872] bridge_slave_0: entered allmulticast mode [ 447.122151][ T8872] bridge_slave_0: entered promiscuous mode [ 447.173245][ T8872] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.201351][ T8872] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.213090][ T5954] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 447.269688][ T8872] bridge_slave_1: entered allmulticast mode [ 447.337367][ T8872] bridge_slave_1: entered promiscuous mode [ 447.438430][ T36] hsr_slave_0: left promiscuous mode [ 447.456644][ T36] hsr_slave_1: left promiscuous mode [ 447.469165][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.501562][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.546841][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.569755][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.669252][ T36] veth1_macvtap: left promiscuous mode [ 447.677061][ T9176] loop6: detected capacity change from 0 to 256 [ 447.690011][ T36] veth0_macvtap: left promiscuous mode [ 448.588193][ T30] audit: type=1804 audit(1785308874.584:36): pid=9176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.900" name="/newroot/88/file0/bus" dev="loop6" ino=1048917 res=1 errno=0 [ 448.662131][ T36] veth1_vlan: left promiscuous mode [ 448.693899][ T36] veth0_vlan: left promiscuous mode [ 449.495265][ T5773] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 449.946661][ T5773] usb 8-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 449.979704][ T5773] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.008211][ T5773] usb 8-1: Product: syz [ 450.019919][ T5773] usb 8-1: Manufacturer: syz [ 450.045603][ T5773] usb 8-1: SerialNumber: syz [ 450.108502][ T5773] ums-karma 8-1:1.0: USB Mass Storage device detected [ 450.199238][ T5773] ums-karma 8-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 450.199238][ T5773] Please send a copy of this message to and [ 450.511883][ T5773] ums-karma 8-1:1.0: probe with driver ums-karma failed with error -5 [ 450.589242][ T5773] usb 8-1: USB disconnect, device number 2 [ 451.187685][ T36] team0 (unregistering): Port device team_slave_1 removed [ 452.204461][ T36] team0 (unregistering): Port device team_slave_0 removed [ 453.831520][ T8872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.918121][ T8872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.239845][ T8872] team0: Port device team_slave_0 added [ 454.314800][ T5773] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 454.351612][ T8872] team0: Port device team_slave_1 added [ 454.459361][ T8872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.489558][ T8872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.528381][ T5773] usb 6-1: Using ep0 maxpacket: 8 [ 454.571989][ T5773] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 454.585501][ T8872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.606165][ T5773] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 454.636500][ T5773] usb 6-1: config 0 has no interface number 0 [ 454.639961][ T8872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.660106][ T8872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.668722][ T5773] usb 6-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 454.779662][ T5773] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 454.828233][ T5773] usb 6-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 454.867205][ T5773] usb 6-1: Product: syz [ 454.914832][ T5773] usb 6-1: config 0 descriptor?? [ 454.953645][ T8872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.166575][ T8872] hsr_slave_0: entered promiscuous mode [ 455.211671][ T8872] hsr_slave_1: entered promiscuous mode [ 455.236521][ T8872] debugfs: 'hsr0' already exists in 'hsr' [ 455.259456][ T8872] Cannot create hsr debugfs directory [ 456.440028][ T9273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.574294][ T9273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.266210][ T24] usb 6-1: USB disconnect, device number 18 [ 459.273007][ T8872] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 459.321256][ T8872] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 459.335717][ T8872] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 459.408772][ T8872] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 459.469921][ T8872] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 459.515059][ T8872] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 459.548868][ T8872] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 459.572321][ T9304] loop5: detected capacity change from 0 to 512 [ 459.608948][ T8872] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 459.617771][ T9304] EXT4-fs: Ignoring removed orlov option [ 459.654570][ T9304] EXT4-fs: Ignoring removed mblk_io_submit option [ 459.739638][ T9304] EXT4-fs error (device loop5): ext4_iget_extra_inode:5179: inode #15: comm syz.5.931: corrupted in-inode xattr: e_value size too large [ 459.774354][ T9304] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 459.775408][ T9304] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.931: couldn't read orphan inode 15 (err -117) [ 459.784669][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 459.784694][ C0] EXT4-fs (loop5): initial error at time 1785308885: ext4_iget_extra_inode:5179: inode 15 [ 459.784754][ C0] EXT4-fs (loop5): last error at time 1785308885: ext4_iget_extra_inode:5179: inode 15 [ 459.877354][ T9304] loop5: lost filesystem error report for type 5 error -117 [ 459.895577][ T9304] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.445022][ T5628] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.776963][ T9321] loop7: detected capacity change from 0 to 512 [ 460.969548][ T9321] EXT4-fs (loop7): blocks per group (34) and clusters per group (32768) inconsistent [ 462.743940][ T8872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.895550][ T8872] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.010041][ T6378] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.017270][ T6378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.108740][ T6378] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.116017][ T6378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.490913][ T9329] loop0: detected capacity change from 0 to 256 [ 463.613800][ T30] audit: type=1804 audit(1785308889.604:37): pid=9329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.937" name="/newroot/168/file0/bus" dev="loop0" ino=1048932 res=1 errno=0 [ 465.367209][ T9351] loop1: detected capacity change from 0 to 2048 [ 465.438346][ T9351] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 465.551719][ T30] audit: type=1800 audit(1785308891.544:38): pid=9351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.944" name="bus" dev="loop1" ino=1367 res=0 errno=0 [ 466.407547][ T9372] loop6: detected capacity change from 0 to 128 [ 466.530145][ T9372] syz.6.949: attempt to access beyond end of device [ 466.530145][ T9372] loop6: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 466.791736][ T9374] syz.6.949: attempt to access beyond end of device [ 466.791736][ T9374] loop6: rw=8390657, sector=140, nr_sectors = 2 limit=128 [ 466.858648][ T9374] Buffer I/O error on dev loop6, logical block 70, lost async page write [ 466.905209][ T9374] syz.6.949: attempt to access beyond end of device [ 466.905209][ T9374] loop6: rw=8390657, sector=142, nr_sectors = 2 limit=128 [ 466.987213][ T9374] Buffer I/O error on dev loop6, logical block 71, lost async page write [ 467.396180][ T9374] syz.6.949: attempt to access beyond end of device [ 467.396180][ T9374] loop6: rw=8390657, sector=144, nr_sectors = 2 limit=128 [ 467.432114][ T9374] Buffer I/O error on dev loop6, logical block 72, lost async page write [ 467.479035][ T9374] syz.6.949: attempt to access beyond end of device [ 467.479035][ T9374] loop6: rw=2049, sector=146, nr_sectors = 104 limit=128 [ 468.614248][ T8872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.622731][ T5281] 8021q: adding VLAN 0 to HW filter on device eth9 [ 468.858994][ T9394] loop0: detected capacity change from 0 to 256 [ 468.979998][ T30] audit: type=1804 audit(1785308894.974:39): pid=9394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.953" name="/newroot/173/file0/bus" dev="loop0" ino=1048935 res=1 errno=0 [ 470.278849][ T9413] loop0: detected capacity change from 0 to 512 [ 470.299282][ T9413] EXT4-fs: Ignoring removed orlov option [ 470.338058][ T9413] EXT4-fs: Ignoring removed mblk_io_submit option [ 470.389650][ T9413] EXT4-fs error (device loop0): ext4_iget_extra_inode:5179: inode #15: comm syz.0.957: corrupted in-inode xattr: e_value size too large [ 470.437440][ T9413] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 470.441255][ T9413] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.957: couldn't read orphan inode 15 (err -117) [ 470.450504][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 470.450535][ C1] EXT4-fs (loop0): initial error at time 1785308896: ext4_iget_extra_inode:5179: inode 15 [ 470.450593][ C1] EXT4-fs (loop0): last error at time 1785308896: ext4_iget_extra_inode:5179: inode 15 [ 470.528557][ T9413] loop0: lost filesystem error report for type 5 error -117 [ 470.536799][ T9413] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.605492][ T8872] veth0_vlan: entered promiscuous mode [ 470.625706][ T8872] veth1_vlan: entered promiscuous mode [ 470.823292][ T5627] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.992136][ T8872] veth0_macvtap: entered promiscuous mode [ 471.052633][ T8872] veth1_macvtap: entered promiscuous mode [ 471.543077][ T8872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.590100][ T8872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.632695][ T36] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.730946][ T36] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.802088][ T36] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.842935][ T36] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.173913][ T9438] loop6: detected capacity change from 0 to 256 [ 472.261188][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.319024][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.535815][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.635995][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.368639][ T9459] loop1: detected capacity change from 0 to 256 [ 474.413570][ T5765] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 474.532894][ T30] audit: type=1804 audit(1785308900.524:40): pid=9459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.968" name="/newroot/167/file0/bus" dev="loop1" ino=1048942 res=1 errno=0 [ 474.641267][ T5765] usb 7-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 474.680838][ T5765] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.712361][ T5281] 8021q: adding VLAN 0 to HW filter on device eth10 [ 474.758982][ T5765] emi26 - firmware loader 7-1:1.0: emi26_probe start [ 474.821024][ T5765] usb 7-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 474.859026][ T5765] usb 7-1: Falling back to sysfs fallback for: emi26/loader.fw [ 475.175842][ T5765] usb 7-1: emi26_load_firmware - request_firmware() failed [ 475.206048][ T5765] usb 7-1: emi26_load_firmware - error loading firmware: error = -12 [ 475.236804][ T5765] emi26 - firmware loader 7-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 475.571915][ T24] usb 7-1: USB disconnect, device number 13 [ 476.549122][ T9494] loop6: detected capacity change from 0 to 2048 [ 476.604276][ T9498] loop8: detected capacity change from 0 to 256 [ 476.621235][ T9494] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 476.714312][ T30] audit: type=1800 audit(1785308902.704:41): pid=9494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.976" name="bus" dev="loop6" ino=1367 res=0 errno=0 [ 478.954365][ T36] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 479.009574][ T5281] 8021q: adding VLAN 0 to HW filter on device eth11 [ 480.211906][ T9517] loop8: detected capacity change from 0 to 512 [ 480.353129][ T9517] EXT4-fs error (device loop8): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.8.982: corrupted xattr block 95: invalid header [ 480.397005][ T9517] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 480.402174][ T9517] EXT4-fs error (device loop8): ext4_validate_block_bitmap:431: comm syz.8.982: bg 0: block 7: invalid block bitmap [ 480.411409][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 480.411442][ C1] EXT4-fs (loop8): initial error at time 1785308906: ext4_expand_extra_isize_ea:2810: inode 11 [ 480.411496][ C1] EXT4-fs (loop8): last error at time 1785308906: ext4_expand_extra_isize_ea:2810: inode 11 [ 480.489513][ T9517] loop8: lost filesystem error report for type 5 error -117 [ 480.490123][ T9517] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 480.511001][ T9522] loop5: detected capacity change from 0 to 256 [ 480.602792][ T9517] loop8: lost filesystem error report for type 5 error -117 [ 480.603293][ T9517] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2972: inode #11: comm syz.8.982: corrupted xattr block 95: invalid header [ 480.674359][ T30] audit: type=1804 audit(1785308906.674:42): pid=9522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.983" name="/newroot/151/file0/bus" dev="loop5" ino=1048944 res=1 errno=0 [ 481.724608][ T9517] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 481.740937][ T9517] EXT4-fs warning (device loop8): ext4_evict_inode:287: xattr delete (err -117) [ 481.813792][ T9517] EXT4-fs (loop8): 1 orphan inode deleted [ 481.905877][ T9517] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.393665][ T9521] Bluetooth: hci1: command 0x0406 tx timeout [ 482.854259][ T8872] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.934650][ T9534] loop5: detected capacity change from 0 to 512 [ 482.970961][ T9534] EXT4-fs: Ignoring removed orlov option [ 483.108825][ T9534] EXT4-fs: Ignoring removed mblk_io_submit option [ 483.197870][ T9534] EXT4-fs error (device loop5): ext4_iget_extra_inode:5179: inode #15: comm syz.5.986: corrupted in-inode xattr: e_value size too large [ 483.333663][ T9534] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 483.337733][ T9534] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.986: couldn't read orphan inode 15 (err -117) [ 483.347107][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 483.347163][ C0] EXT4-fs (loop5): initial error at time 1785308909: ext4_iget_extra_inode:5179: inode 15 [ 483.347259][ C0] EXT4-fs (loop5): last error at time 1785308909: ext4_iget_extra_inode:5179: inode 15 [ 483.428048][ T9540] loop0: detected capacity change from 0 to 512 [ 483.510890][ T9540] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 483.539103][ T9534] loop5: lost filesystem error report for type 5 error -117 [ 483.571452][ T9534] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.624932][ T9540] EXT4-fs (loop0): DAX unsupported by block device. [ 486.200456][ T9556] loop0: detected capacity change from 0 to 256 [ 486.953887][ T5281] 8021q: adding VLAN 0 to HW filter on device eth12 [ 488.563521][ T9580] loop0: detected capacity change from 0 to 256 [ 489.146617][ T9584] fuse: Unknown parameter '0x0000000000000003' [ 489.661210][ T9521] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 489.678397][ T9521] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 489.699198][ T9521] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 489.720161][ T9521] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 489.737612][ T9521] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 490.361374][ T9606] loop8: detected capacity change from 0 to 256 [ 491.834853][ T9521] Bluetooth: hci0: command tx timeout [ 491.943174][ T9619] netlink: 116 bytes leftover after parsing attributes in process `syz.6.1008'. [ 492.335311][ T9630] loop8: detected capacity change from 0 to 256 [ 492.453298][ T9631] loop6: detected capacity change from 0 to 2048 [ 492.458188][ T5628] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.584980][ T9631] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=18881, location=18881 [ 492.628825][ T9631] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 492.719689][ T9634] fuse: Unknown parameter '0x0000000000000003' [ 492.755488][ T36] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.162481][ T36] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.373616][ T5765] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 493.913934][ T9521] Bluetooth: hci0: command tx timeout [ 494.150336][ T9650] loop0: detected capacity change from 0 to 256 [ 494.284135][ T36] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.335579][ T5765] usb 9-1: config 17 has an invalid interface number: 255 but max is 0 [ 494.357656][ T5765] usb 9-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 494.387974][ T5765] usb 9-1: config 17 has no interface number 0 [ 494.423915][ T5765] usb 9-1: too many endpoints for config 17 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 495.201222][ T5765] usb 9-1: config 17 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 495.216367][ T5765] usb 9-1: config 17 interface 255 has no altsetting 0 [ 495.223306][ T5765] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 495.234329][ T5765] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.331692][ T5765] aiptek 9-1:17.255: interface has no int in endpoints, but must have minimum 1 [ 495.471407][ T36] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.639157][ T9669] loop1: detected capacity change from 0 to 256 [ 495.963188][ T6377] netdevsim netdevsim7 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.993771][ T9521] Bluetooth: hci0: command tx timeout [ 496.229668][ T6377] netdevsim netdevsim7 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.283550][ T13] netdevsim netdevsim7 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.528198][ T6272] netdevsim netdevsim7 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.582014][ T9589] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.602046][ T9589] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.618865][ T9589] bridge_slave_0: entered allmulticast mode [ 496.626595][ T5751] usb 9-1: USB disconnect, device number 2 [ 496.696354][ T9589] bridge_slave_0: entered promiscuous mode [ 496.749421][ T36] bridge_slave_1: left allmulticast mode [ 496.765029][ T9695] fuse: Unknown parameter '0x0000000000000003' [ 496.772837][ T36] bridge_slave_1: left promiscuous mode [ 496.782780][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.822666][ T36] bridge_slave_0: left allmulticast mode [ 496.829523][ T36] bridge_slave_0: left promiscuous mode [ 496.835917][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.904309][ T9701] loop1: detected capacity change from 0 to 256 [ 498.073644][ T9521] Bluetooth: hci0: command tx timeout [ 499.133265][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.240778][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.333096][ T36] bond0 (unregistering): Released all slaves [ 499.467111][ T9589] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.499863][ T9589] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.520607][ T9589] bridge_slave_1: entered allmulticast mode [ 499.551465][ T9589] bridge_slave_1: entered promiscuous mode [ 499.770609][ T9589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.865153][ T9589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.691064][ T9589] team0: Port device team_slave_0 added [ 500.814512][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.822197][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.036855][ T9589] team0: Port device team_slave_1 added [ 501.051173][ T9743] fuse: Unknown parameter '0x0000000000000003' [ 501.292289][ T9589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.311994][ T9589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.379273][ T9589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.406719][ T9589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.422036][ T9589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.481546][ T9589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.516043][ T36] hsr_slave_0: left promiscuous mode [ 501.530237][ T36] hsr_slave_1: left promiscuous mode [ 501.541820][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.551818][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.565071][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.575846][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.641011][ T36] veth1_macvtap: left promiscuous mode [ 501.661317][ T36] veth0_macvtap: left promiscuous mode [ 501.676367][ T36] veth1_vlan: left promiscuous mode [ 501.693643][ T36] veth0_vlan: left promiscuous mode [ 502.912759][ T9768] loop1: detected capacity change from 0 to 256 [ 503.006076][ T30] audit: type=1804 audit(1785308929.004:43): pid=9768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1052" name="/newroot/184/file0/bus" dev="loop1" ino=1048955 res=1 errno=0 [ 503.383875][ T5892] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 503.546959][ T5892] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.576702][ T36] team0 (unregistering): Port device team_slave_1 removed [ 503.585664][ T5892] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 503.608627][ T36] team0 (unregistering): Port device team_slave_0 removed [ 503.612056][ T5892] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 503.649480][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.671025][ T5892] usb 1-1: Product: syz [ 503.683146][ T5892] usb 1-1: Manufacturer: syz [ 503.694509][ T5892] usb 1-1: SerialNumber: syz [ 503.769753][ T5892] cdc_mbim 1-1:1.0: skipping garbage [ 503.966282][ T9774] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 504.006969][ T5281] 8021q: adding VLAN 0 to HW filter on device eth13 [ 504.233079][ T9589] hsr_slave_0: entered promiscuous mode [ 504.265102][ T9589] hsr_slave_1: entered promiscuous mode [ 504.442726][ T9787] loop8: detected capacity change from 0 to 256 [ 504.490482][ T9787] exfat: Deprecated parameter 'namecase' [ 504.537745][ T9787] exfat: Deprecated parameter 'namecase' [ 504.599364][ T9774] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 504.629669][ T5892] cdc_mbim 1-1:1.0: setting tx_max = 16384 [ 504.660566][ T9787] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 504.683713][ T5892] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 504.892200][ T5892] wwan wwan0: port wwan0mbim0 attached [ 505.040027][ T5892] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 0e:10:32:11:7c:4f [ 505.109368][ T5892] usb 1-1: USB disconnect, device number 35 [ 505.272118][ T5892] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 505.838502][ T5892] wwan wwan0: port wwan0mbim0 disconnected [ 506.254605][ T30] audit: type=1326 audit(1785308932.254:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9799 comm="syz.0.1059" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483759de99 code=0x7ffc0000 [ 506.373946][ T30] audit: type=1326 audit(1785308932.254:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9799 comm="syz.0.1059" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483759de99 code=0x7ffc0000 [ 507.242110][ T9803] loop8: detected capacity change from 0 to 131072 [ 507.286928][ T30] audit: type=1326 audit(1785308932.254:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9799 comm="syz.0.1059" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483759de99 code=0x7ffc0000 [ 507.337944][ T9803] F2FS-fs (loop8): Segment count (31) mismatch with total segments from devices (0) [ 507.347479][ T9803] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 507.375044][ T30] audit: type=1326 audit(1785308932.254:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9799 comm="syz.0.1059" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f483759de99 code=0x7ffc0000 [ 507.419608][ T9803] F2FS-fs (loop8): invalid crc value [ 507.534633][ T9589] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 507.538349][ T9803] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 507.560672][ T30] audit: type=1326 audit(1785308932.254:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9799 comm="syz.0.1059" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483759de99 code=0x7ffc0000 [ 507.598401][ T9803] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 507.605511][ T9803] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 507.614141][ T30] audit: type=1326 audit(1785308932.254:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9799 comm="syz.0.1059" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483759de99 code=0x7ffc0000 [ 507.641811][ T30] audit: type=1326 audit(1785308932.304:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9799 comm="syz.0.1059" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f483755e6ce code=0x7ffc0000 [ 507.669857][ T30] audit: type=1326 audit(1785308932.304:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9799 comm="syz.0.1059" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f483755e6ce code=0x7ffc0000 [ 507.701904][ T9589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 507.745497][ T9589] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 507.758608][ T30] audit: type=1326 audit(1785308932.314:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9799 comm="syz.0.1059" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f483755e6ce code=0x7ffc0000 [ 507.870847][ T9589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 507.916099][ T9589] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 507.960937][ T9589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 507.997328][ T9815] fuse: Unknown parameter '0x0000000000000003' [ 508.002969][ T9589] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 508.064495][ T9589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 508.553211][ T9589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.627750][ T9589] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.680430][ T9649] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.687716][ T9649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.970900][ T5630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 508.984874][ T5630] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 508.998023][ T5630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 509.008670][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 509.022720][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 509.030367][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.037563][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.396115][ T9842] loop1: detected capacity change from 0 to 256 [ 509.497988][ T5281] 8021q: adding VLAN 0 to HW filter on device eth14 [ 509.515729][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 509.515754][ T30] audit: type=1804 audit(1785308935.494:72): pid=9842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1067" name="/newroot/187/file0/bus" dev="loop1" ino=1048956 res=1 errno=0 [ 510.139667][ T5892] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 510.512947][ T9649] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 510.596578][ T5892] usb 1-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 510.697527][ T5892] usb 1-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 510.752289][ T5892] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 510.816392][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.110460][ T5892] usb 1-1: string descriptor 0 read error: -71 [ 511.120430][ T9521] Bluetooth: hci1: command tx timeout [ 511.154319][ T5892] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 511.180438][ T5892] usb 1-1: USB disconnect, device number 36 [ 511.231312][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.423698][ T7251] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 511.540974][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.619186][ T7251] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 511.648238][ T7251] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.715952][ T7251] emi26 - firmware loader 2-1:1.0: emi26_probe start [ 511.803748][ T7251] usb 2-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 511.853556][ T7251] usb 2-1: Falling back to sysfs fallback for: emi26/loader.fw [ 511.881497][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.148075][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.708659][ T36] netdevsim netdevsim6 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.891004][ T36] netdevsim netdevsim6 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.007956][ T9589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.093921][ T1168] netdevsim netdevsim6 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.195068][ T9521] Bluetooth: hci1: command tx timeout [ 513.263005][ T1168] netdevsim netdevsim6 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.346538][ T9906] fuse: Unknown parameter '0x0000000000000003' [ 513.378968][ T13] bridge_slave_1: left allmulticast mode [ 513.387815][ T13] bridge_slave_1: left promiscuous mode [ 513.394952][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.419303][ T13] bridge_slave_0: left allmulticast mode [ 513.431831][ T13] bridge_slave_0: left promiscuous mode [ 513.447533][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.086985][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.145340][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.190584][ T13] bond0 (unregistering): Released all slaves [ 515.273566][ T9521] Bluetooth: hci1: command tx timeout [ 517.383570][ T9521] Bluetooth: hci1: command tx timeout [ 517.804091][ T9952] loop1: detected capacity change from 0 to 256 [ 518.072122][ T9835] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.120373][ T9835] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.158893][ T9835] bridge_slave_0: entered allmulticast mode [ 518.198511][ T9835] bridge_slave_0: entered promiscuous mode [ 518.415535][ T9835] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.449170][ T9835] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.472359][ T9835] bridge_slave_1: entered allmulticast mode [ 518.502143][ T9835] bridge_slave_1: entered promiscuous mode [ 518.552717][ T9968] fuse: Unknown parameter 'fd0x0000000000000003' [ 518.621590][ T13] hsr_slave_0: left promiscuous mode [ 518.645278][ T13] hsr_slave_1: left promiscuous mode [ 518.656571][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.671470][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.688230][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.704850][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.736226][ T13] veth1_macvtap: left promiscuous mode [ 518.742659][ T13] veth0_macvtap: left promiscuous mode [ 518.751028][ T13] veth1_vlan: left promiscuous mode [ 518.757129][ T13] veth0_vlan: left promiscuous mode [ 520.860915][ T9998] fuse: Bad value for 'fd' [ 520.913628][ T13] team0 (unregistering): Port device team_slave_1 removed [ 520.962853][ T13] team0 (unregistering): Port device team_slave_0 removed [ 521.952129][ T9835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.970565][ T9835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.251881][ T9835] team0: Port device team_slave_0 added [ 522.305815][ T9835] team0: Port device team_slave_1 added [ 522.477777][ T9835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.525848][ T9835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.676812][ T9835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.843327][ T13] IPVS: stop unused estimator thread 0... [ 522.912454][ T9835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.968357][ T9835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.129220][ T9835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.530045][T10025] loop5: detected capacity change from 0 to 4096 [ 523.565384][T10025] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 524.041652][T10025] ntfs3(loop5): ino=19, mi_enum_attr [ 524.057470][T10025] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 524.309785][T10025] ntfs3(loop5): failed to convert "c46c" to cp936 [ 524.401549][T10025] ntfs3(loop5): ino=20, mi_enum_attr [ 524.958411][ T9589] veth0_vlan: entered promiscuous mode [ 525.268459][T10030] fuse: Unknown parameter 'fd0x0000000000000003' [ 525.358381][ T9589] veth1_vlan: entered promiscuous mode [ 525.426720][ T9589] veth0_macvtap: entered promiscuous mode [ 525.441425][ T9589] veth1_macvtap: entered promiscuous mode [ 525.544587][ T9835] hsr_slave_0: entered promiscuous mode [ 525.554283][ T9835] hsr_slave_1: entered promiscuous mode [ 525.568066][ T9835] debugfs: 'hsr0' already exists in 'hsr' [ 525.575496][ T9835] Cannot create hsr debugfs directory [ 525.695594][ T9589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.901133][ T9589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.933956][ T1159] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.047810][ T1159] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.101091][ T1159] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.263078][ T1159] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.738004][ T9835] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.432657][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.478117][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.374838][ T9835] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.568889][T10077] fuse: Unknown parameter 'fd0x0000000000000003' [ 529.679834][ T9835] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.683565][ T5773] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 529.738640][ T5804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.763299][ T5804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.857898][ T5773] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 529.885004][ T5773] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 529.896654][ T9835] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.908250][ T5773] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 529.937137][ T5773] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 529.976672][ T5773] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 529.995735][ T5773] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 530.009813][ T5773] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 530.049627][ T5773] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 530.180198][T10086] syz.8.1116 (10086): drop_caches: 2 [ 530.264674][ T5773] usb 6-1: Product: syz [ 530.288401][ T5773] usb 6-1: Manufacturer: syz [ 530.355762][T10071] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 530.399114][ T5773] cdc_wdm 6-1:1.0: skipping garbage [ 530.662386][ T5773] cdc_wdm 6-1:1.0: skipping garbage [ 530.679363][ T5773] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 530.704424][ T5773] cdc_wdm 6-1:1.0: Unknown control protocol [ 531.418061][ T5773] usb 6-1: USB disconnect, device number 19 [ 531.652925][ T30] audit: type=1326 audit(1785308957.644:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10099 comm="syz.0.1118" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483759de99 code=0x7ffc0000 [ 532.219532][ T30] audit: type=1326 audit(1785308957.644:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10099 comm="syz.0.1118" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483759de99 code=0x7ffc0000 [ 532.587042][ T30] audit: type=1326 audit(1785308957.684:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10099 comm="syz.0.1118" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483759de99 code=0x7ffc0000 [ 532.757373][ T30] audit: type=1326 audit(1785308957.684:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10099 comm="syz.0.1118" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483759de99 code=0x7ffc0000 [ 532.803929][ T30] audit: type=1326 audit(1785308957.684:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10099 comm="syz.0.1118" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483759de99 code=0x7ffc0000 [ 532.842901][ T30] audit: type=1326 audit(1785308957.684:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10099 comm="syz.0.1118" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f483759de99 code=0x7ffc0000 [ 532.941234][ T30] audit: type=1326 audit(1785308957.724:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10099 comm="syz.0.1118" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f483759de99 code=0x7ffc0000 [ 533.856625][ T30] audit: type=1326 audit(1785308957.904:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10099 comm="syz.0.1118" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f483759de99 code=0x7ffc0000 [ 534.524421][ T30] audit: type=1326 audit(1785308957.944:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10099 comm="syz.0.1118" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483759de99 code=0x7ffc0000 [ 534.718861][ T5281] 8021q: adding VLAN 0 to HW filter on device eth15 [ 534.727434][ T9521] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 534.875015][ T9835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 534.930113][ T9835] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 534.977706][ T9835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 535.048685][ T9835] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 535.094869][ T9835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 535.148950][ T9835] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 535.187140][ T9835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 535.238322][ T9835] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 535.265327][T10137] loop0: detected capacity change from 0 to 2048 [ 535.416866][T10137] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 535.549138][ T30] audit: type=1800 audit(1785308961.544:82): pid=10137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1128" name="bus" dev="loop0" ino=1367 res=0 errno=0 [ 536.417532][ T9835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.522248][ T9835] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.083249][ T6378] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.090472][ T6378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.184540][ T6378] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.191813][ T6378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.390342][T10155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1130'. [ 538.803577][ T5630] Bluetooth: hci2: command 0x0406 tx timeout [ 539.319587][ T890] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 539.594204][T10171] loop1: detected capacity change from 0 to 4096 [ 539.631146][T10171] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 540.446084][ T990] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 540.823614][ T990] usb 6-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 540.998737][ T990] usb 6-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 541.258906][ T990] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 541.528144][ T990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.594175][T10171] ntfs3(loop1): ino=19, mi_enum_attr [ 541.614342][T10171] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 541.679390][ T140] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 541.732409][ T890] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 542.089970][ T890] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 542.100367][ T890] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 542.111841][ T890] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 542.123445][ T890] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 542.128481][ T990] aiptek 6-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 542.135623][ T890] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 542.276211][ T890] usb 1-1: string descriptor 0 read error: -71 [ 542.319676][ T890] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 542.729452][ T890] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 543.194780][ T890] usb 1-1: can't set config #1, error -71 [ 543.222915][ T890] usb 1-1: USB disconnect, device number 37 [ 543.911883][ T990] usb 6-1: USB disconnect, device number 20 [ 544.137902][T10197] loop8: detected capacity change from 0 to 128 [ 544.261649][T10199] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1138'. [ 544.733901][T10197] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 544.777167][T10197] hpfs: filesystem error: improperly stopped [ 544.822458][T10197] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 544.833532][T10197] hpfs: You really don't want any checks? You are crazy... [ 544.853532][T10197] hpfs: Code page index out of array [ 544.860388][T10197] hpfs: code page support is disabled [ 544.873985][T10197] hpfs: hpfs_map_4sectors(): unaligned read [ 544.896328][T10197] hpfs: hpfs_map_4sectors(): unaligned read [ 544.924031][T10197] hpfs: filesystem error: unable to find root dir [ 545.010533][T10197] hpfs: hpfs_map_4sectors(): unaligned read [ 546.215597][ T5281] 8021q: adding VLAN 0 to HW filter on device eth16 [ 546.353795][T10220] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1144'. [ 547.777242][T10233] loop0: detected capacity change from 0 to 512 [ 547.874171][ T9835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.956182][T10233] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 548.039205][T10233] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 548.096315][ T9835] veth0_vlan: entered promiscuous mode [ 548.217735][ T9835] veth1_vlan: entered promiscuous mode [ 548.429215][ T9835] veth0_macvtap: entered promiscuous mode [ 548.507121][ T9835] veth1_macvtap: entered promiscuous mode [ 548.619663][ T9835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.589207][ T9835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.646454][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.676602][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.732859][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.804894][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.339867][ T5627] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.720008][ T5954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.777502][ T5954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.972534][ T5954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.017995][ T5954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.046437][ T5751] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 551.249156][ T5751] usb 1-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 551.311582][ T5751] usb 1-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 551.413606][ T5751] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 551.467287][ T5751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.513737][ T890] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 551.520875][ T5751] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 551.571242][T10270] loop2: detected capacity change from 0 to 2048 [ 551.667981][T10270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 551.692438][T10270] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 551.728048][T10270] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm syz.2.1064: bg 0: block 321: padding at end of block bitmap is not set [ 551.763963][T10270] fs-verity (loop2, inode 13): ext4_end_enable_verity() failed with err -28 [ 551.782359][ T5281] 8021q: adding VLAN 0 to HW filter on device eth17 [ 551.801453][ T890] usb 10-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 551.865739][ T890] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.868196][T10274] loop5: detected capacity change from 0 to 128 [ 551.955409][T10274] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 552.018319][ T9835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.048097][ T890] emi26 - firmware loader 10-1:1.0: emi26_probe start [ 552.065973][T10274] hpfs: filesystem error: improperly stopped [ 552.109715][T10274] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 552.170846][T10274] hpfs: You really don't want any checks? You are crazy... [ 552.217920][T10274] hpfs: Code page index out of array [ 552.238920][T10274] hpfs: code page support is disabled [ 552.265848][T10274] hpfs: hpfs_map_4sectors(): unaligned read [ 552.295499][T10274] hpfs: hpfs_map_4sectors(): unaligned read [ 552.321064][T10274] hpfs: filesystem error: unable to find root dir [ 555.155950][ T9] usb 1-1: USB disconnect, device number 38 [ 557.351261][T10341] loop5: detected capacity change from 0 to 128 [ 557.423340][T10341] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 557.434950][ T5281] 8021q: adding VLAN 0 to HW filter on device eth18 [ 557.444730][T10341] hpfs: filesystem error: improperly stopped [ 557.458822][T10341] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 557.513981][T10341] hpfs: You really don't want any checks? You are crazy... [ 557.562145][T10341] hpfs: Code page index out of array [ 557.589228][T10341] hpfs: code page support is disabled [ 557.635346][T10341] hpfs: hpfs_map_4sectors(): unaligned read [ 557.659131][T10341] hpfs: hpfs_map_4sectors(): unaligned read [ 557.691409][T10341] hpfs: filesystem error: unable to find root dir [ 558.810972][T10362] overlayfs: overlapping lowerdir path [ 560.157773][T10374] loop8: detected capacity change from 0 to 2048 [ 561.678465][T10374] loop8: p1 p3 p4 [ 561.687459][T10374] loop8: p4 size 589824 extends beyond EOD, truncated [ 562.248448][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.254905][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.767246][T10387] loop9: detected capacity change from 0 to 512 [ 562.817998][T10387] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 562.851516][T10387] EXT4-fs (loop9): DAX unsupported by block device. [ 562.896070][ T5738] udevd[5738]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 562.899575][ T5992] udevd[5992]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 562.919444][ T5997] udevd[5997]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 564.947964][T10395] loop5: detected capacity change from 0 to 256 [ 564.984323][ T9521] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 565.290382][T10399] loop9: detected capacity change from 0 to 128 [ 565.435079][T10399] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 565.485401][T10399] hpfs: filesystem error: improperly stopped [ 565.523210][ T30] audit: type=1326 audit(1785308991.514:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10406 comm="syz.2.1190" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0adc99de99 code=0x7ffc0000 [ 565.633263][T10399] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 565.664872][ T30] audit: type=1326 audit(1785308991.514:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10406 comm="syz.2.1190" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0adc99de99 code=0x7ffc0000 [ 565.666448][ T5281] 8021q: adding VLAN 0 to HW filter on device eth19 [ 565.704100][T10399] hpfs: You really don't want any checks? You are crazy... [ 565.742805][T10399] hpfs: Code page index out of array [ 565.780769][T10399] hpfs: code page support is disabled [ 565.829767][T10399] hpfs: hpfs_map_4sectors(): unaligned read [ 565.862121][ T30] audit: type=1326 audit(1785308991.544:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10406 comm="syz.2.1190" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0adc99de99 code=0x7ffc0000 [ 565.903057][ T30] audit: type=1326 audit(1785308991.544:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10406 comm="syz.2.1190" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0adc99de99 code=0x7ffc0000 [ 565.930001][ T30] audit: type=1326 audit(1785308991.544:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10406 comm="syz.2.1190" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f0adc99de99 code=0x7ffc0000 [ 565.964093][T10399] hpfs: hpfs_map_4sectors(): unaligned read [ 565.981952][T10399] hpfs: filesystem error: unable to find root dir [ 566.054864][ T30] audit: type=1326 audit(1785308991.544:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10406 comm="syz.2.1190" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0adc99de99 code=0x7ffc0000 [ 566.121764][ T30] audit: type=1326 audit(1785308991.554:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10406 comm="syz.2.1190" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0adc99de99 code=0x7ffc0000 [ 566.192936][ T30] audit: type=1326 audit(1785308991.554:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10406 comm="syz.2.1190" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0adc99de99 code=0x7ffc0000 [ 566.220871][ T30] audit: type=1326 audit(1785308991.554:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10406 comm="syz.2.1190" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0adc99de99 code=0x7ffc0000 [ 566.449942][T10418] netlink: 308 bytes leftover after parsing attributes in process `syz.9.1194'. [ 566.488701][T10418] loop9: detected capacity change from 0 to 256 [ 566.504141][ T30] audit: type=1326 audit(1785308991.554:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10406 comm="syz.2.1190" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0adc99de99 code=0x7ffc0000 [ 566.531808][T10418] exfat: Deprecated parameter 'utf8' [ 566.569470][T10418] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 567.377782][ T5892] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 567.443821][ T5773] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 567.795050][ T5892] usb 1-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 567.842343][ T5892] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 567.864366][ T5773] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 567.892708][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.902025][ T5773] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 567.931954][ T5773] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 567.984273][ T5773] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.993055][ T5773] usb 3-1: Product: syz [ 567.999337][ T5773] usb 3-1: Manufacturer: syz [ 568.007571][ T5773] usb 3-1: SerialNumber: syz [ 568.019981][ T5892] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 568.399362][ T5751] usb 3-1: USB disconnect, device number 9 [ 568.411977][T10443] loop1: detected capacity change from 0 to 512 [ 568.491956][T10443] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 568.534832][T10443] EXT4-fs (loop1): DAX unsupported by block device. [ 569.441599][ T9521] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 570.348317][ T990] usb 1-1: USB disconnect, device number 39 [ 570.712211][ T30] audit: type=1326 audit(1785308996.704:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10466 comm="syz.0.1204" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483759de99 code=0x7ffc0000 [ 570.892743][ T30] audit: type=1326 audit(1785308996.744:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10466 comm="syz.0.1204" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483759de99 code=0x7ffc0000 [ 571.127645][ T30] audit: type=1326 audit(1785308996.744:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10466 comm="syz.0.1204" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483759de99 code=0x7ffc0000 [ 571.217508][ T30] audit: type=1326 audit(1785308996.744:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10466 comm="syz.0.1204" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483759de99 code=0x7ffc0000 [ 571.347131][ T30] audit: type=1326 audit(1785308996.754:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10466 comm="syz.0.1204" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f483759de99 code=0x7ffc0000 [ 571.431390][ T5281] 8021q: adding VLAN 0 to HW filter on device eth20 [ 571.466177][ T30] audit: type=1326 audit(1785308996.754:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10466 comm="syz.0.1204" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483759de99 code=0x7ffc0000 [ 571.538417][ T30] audit: type=1326 audit(1785308996.754:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10466 comm="syz.0.1204" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483759de99 code=0x7ffc0000 [ 571.642025][ T30] audit: type=1326 audit(1785308996.754:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10466 comm="syz.0.1204" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483759de99 code=0x7ffc0000 [ 571.751289][ T30] audit: type=1326 audit(1785308996.754:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10466 comm="syz.0.1204" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f483759de99 code=0x7ffc0000 [ 571.854397][ T30] audit: type=1326 audit(1785308996.754:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10466 comm="syz.0.1204" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f483759de99 code=0x7ffc0000 [ 572.432772][T10483] loop0: detected capacity change from 0 to 2048 [ 572.489576][ T890] usb 10-1: emi26_load_firmware - request_firmware() failed [ 572.552999][ T890] usb 10-1: emi26_load_firmware - error loading firmware: error = -2 [ 572.576669][ T890] emi26 - firmware loader 10-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 572.591665][ T7251] usb 2-1: emi26_load_firmware - request_firmware() failed [ 572.629445][ T7251] usb 2-1: emi26_load_firmware - error loading firmware: error = -110 [ 572.668873][ T7251] emi26 - firmware loader 2-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 572.716834][ T890] usb 10-1: USB disconnect, device number 2 [ 572.769154][ T7251] usb 2-1: USB disconnect, device number 24 [ 572.960845][T10494] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1211'. [ 573.597391][ T48] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 574.638761][T10502] syz.1.1214 (10502): drop_caches: 2 [ 574.932324][ T9521] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 575.173958][ T5773] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 575.631542][ T5773] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 575.917267][ T5773] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 576.000347][T10514] loop1: detected capacity change from 0 to 512 [ 576.042695][ T5773] usb 10-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 576.051939][T10516] loop5: detected capacity change from 0 to 1024 [ 576.082831][T10516] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 576.111394][T10514] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 576.131265][ T5773] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.133820][T10514] EXT4-fs (loop1): DAX unsupported by block device. [ 576.168427][T10516] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 2: comm syz.5.1219: lblock 2 mapped to illegal pblock 2 (length 1) [ 576.193625][T10516] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 576.195400][T10516] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 576.204531][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 576.204565][ C1] EXT4-fs (loop5): initial error at time 1785309002: ext4_map_blocks:791: inode 3: block 2 [ 576.204633][ C1] EXT4-fs (loop5): last error at time 1785309002: ext4_map_blocks:791: inode 3: block 2 [ 576.248874][ T5773] usb 10-1: Product: syz [ 576.284083][ T5773] usb 10-1: Manufacturer: syz [ 576.291960][T10516] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 48: comm syz.5.1219: lblock 0 mapped to illegal pblock 48 (length 1) [ 576.344006][ T5773] usb 10-1: SerialNumber: syz [ 577.538671][T10516] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 577.538813][ T5773] ums-karma 10-1:1.0: USB Mass Storage device detected [ 577.587042][T10516] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 578.315220][ T5773] ums-karma 10-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 578.315220][ T5773] Please send a copy of this message to and [ 578.408659][T10516] EXT4-fs error (device loop5): ext4_acquire_dquot:7039: comm syz.5.1219: Failed to acquire dquot type 0 [ 578.505936][T10516] loop5: lost filesystem error report for type 5 error -117 [ 578.511656][T10516] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 578.532672][ T5773] usb 10-1: USB disconnect, device number 3 [ 578.610717][T10516] loop5: lost filesystem error report for type 5 error -117 [ 578.625238][T10516] EXT4-fs error (device loop5): ext4_evict_inode:267: inode #11: comm syz.5.1219: mark_inode_dirty error [ 578.693695][T10516] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 578.717537][T10516] EXT4-fs warning (device loop5): ext4_evict_inode:269: couldn't mark inode dirty (err -117) [ 578.923799][T10516] EXT4-fs (loop5): 1 orphan inode deleted [ 578.967825][ T48] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 579.138236][ T48] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 579.152000][ T48] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 579.194201][T10516] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 579.268006][ T48] EXT4-fs error (device loop5): ext4_release_dquot:7075: comm kworker/u8:3: Failed to release dquot type 0 [ 579.282057][T10540] overlayfs: failed to resolve './file1/file0': -2 [ 579.477016][T10545] loop9: detected capacity change from 0 to 128 [ 579.525701][T10545] EXT4-fs (loop9): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 579.581223][ T5628] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.644655][ T5628] EXT4-fs error (device loop5): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 579.688056][ T5628] loop5: lost filesystem error report for type 5 error -117 [ 579.697481][ T5997] udevd[5997]: incorrect ext4 checksum on /dev/loop9 [ 579.700975][ T5628] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 579.773710][ T5628] loop5: lost filesystem error report for type 5 error -117 [ 579.774032][ T5628] EXT4-fs error (device loop5): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 579.874276][ T5628] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 581.596994][T10556] loop8: detected capacity change from 0 to 512 [ 581.659985][T10556] EXT4-fs: Ignoring removed orlov option [ 581.692355][T10556] EXT4-fs: Ignoring removed mblk_io_submit option [ 581.781377][T10556] EXT4-fs error (device loop8): ext4_iget_extra_inode:5179: inode #15: comm syz.8.1229: corrupted in-inode xattr: e_value size too large [ 581.902696][T10556] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 581.903582][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 581.919218][ C1] EXT4-fs (loop8): initial error at time 1785309007: ext4_iget_extra_inode:5179: inode 15 [ 581.929214][ C1] EXT4-fs (loop8): last error at time 1785309007: ext4_iget_extra_inode:5179: inode 15 [ 581.943945][T10556] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.1229: couldn't read orphan inode 15 (err -117) [ 581.985415][T10556] loop8: lost filesystem error report for type 5 error -117 [ 582.005318][T10556] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 582.655041][ T9521] Bluetooth: hci5: unexpected event 0x03 length: 1 < 11 [ 583.466142][T10576] syz.9.1230 (10576): drop_caches: 2 [ 583.538863][ T8872] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.234288][T10588] loop0: detected capacity change from 0 to 128 [ 584.301000][T10588] EXT4-fs (loop0): Test dummy encryption mode enabled [ 584.361358][T10588] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 584.510936][T10588] ext4 filesystem being mounted at /239/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 584.847334][T10588] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 585.063343][ T30] audit: type=1800 audit(1785309011.054:103): pid=10588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1236" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 585.683597][ T7251] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 585.868046][ T7251] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 585.924211][ T7251] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 585.965633][ T7251] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 586.022005][ T7251] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 586.049942][ T7251] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.078155][ T7251] usb 9-1: Product: syz [ 586.091867][ T7251] usb 9-1: Manufacturer: syz [ 586.108693][ T7251] usb 9-1: SerialNumber: syz [ 586.134506][ T7251] usb 9-1: config 0 descriptor?? [ 586.160226][T10603] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 586.181889][ T7251] usb 9-1: ucan: probing device on interface #0 [ 586.203349][ T7251] usb 9-1: ucan: invalid EP count (1) [ 586.223240][ T7251] usb 9-1: ucan: probe failed; try to update the device firmware [ 588.447946][T10634] syz.5.1247 (10634): drop_caches: 2 [ 588.522641][ T5627] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 588.575648][ T890] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 588.643219][ T5751] usb 9-1: USB disconnect, device number 3 [ 588.755769][ T890] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 588.810292][ T890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.886034][T10641] loop0: detected capacity change from 0 to 512 [ 588.893037][ T890] emi26 - firmware loader 2-1:1.0: emi26_probe start [ 588.937820][ T890] usb 2-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 588.949119][T10641] EXT4-fs: Ignoring removed orlov option [ 588.994421][ T890] usb 2-1: Falling back to sysfs fallback for: emi26/loader.fw [ 589.003943][T10641] EXT4-fs: Ignoring removed mblk_io_submit option [ 589.126262][T10641] EXT4-fs error (device loop0): ext4_iget_extra_inode:5179: inode #15: comm syz.0.1248: corrupted in-inode xattr: e_value size too large [ 589.174980][T10641] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 589.178913][T10641] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1248: couldn't read orphan inode 15 (err -117) [ 589.188389][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 589.188419][ C1] EXT4-fs (loop0): initial error at time 1785309015: ext4_iget_extra_inode:5179: inode 15 [ 589.188475][ C1] EXT4-fs (loop0): last error at time 1785309015: ext4_iget_extra_inode:5179: inode 15 [ 589.272223][T10641] loop0: lost filesystem error report for type 5 error -117 [ 589.311809][T10641] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 595.126231][T10700] syz.1.1261 (10700): drop_caches: 2 [ 595.974880][ T9521] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 596.485484][T10720] loop8: detected capacity change from 0 to 4096 [ 596.596881][T10720] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 598.757110][T10720] ntfs3(loop8): ino=19, mi_enum_attr [ 598.846993][T10720] ntfs3(loop8): Failed to initialize $Extend/$ObjId. [ 598.948515][T10720] ntfs3(loop8): failed to convert "c46c" to cp936 [ 598.978549][T10720] ntfs3(loop8): ino=20, mi_enum_attr [ 600.871149][ T5627] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.041052][T10746] loop9: detected capacity change from 0 to 4096 [ 601.088773][T10746] EXT4-fs: inline encryption not supported [ 601.141974][T10746] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 601.205699][T10746] EXT4-fs (loop9): Test dummy encryption mode enabled [ 602.130120][T10746] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 602.198782][T10746] System zones: 0-5 [ 602.981116][T10746] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 604.339358][ T9589] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.437744][ T9521] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 604.816081][T10779] loop5: detected capacity change from 0 to 2048 [ 605.440704][T10779] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 605.640228][ T30] audit: type=1800 audit(1785309031.634:104): pid=10779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1282" name="bus" dev="loop5" ino=1367 res=0 errno=0 [ 606.187513][ T36] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 608.161648][T10804] loop9: detected capacity change from 0 to 4096 [ 608.311660][T10804] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512). [ 608.627832][T10804] ntfs3(loop9): ino=19, mi_enum_attr [ 608.691590][T10804] ntfs3(loop9): Failed to initialize $Extend/$ObjId. [ 608.875229][T10802] ntfs3(loop9): failed to convert "c46c" to cp936 [ 608.885123][T10802] ntfs3(loop9): ino=20, mi_enum_attr [ 609.134381][T10816] loop5: detected capacity change from 0 to 512 [ 609.206533][T10816] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 609.281598][T10816] EXT4-fs (loop5): 1 truncate cleaned up [ 609.289625][T10816] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 609.399515][ T5628] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.473872][ T5751] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 610.530288][T10834] loop9: detected capacity change from 0 to 128 [ 610.577643][T10834] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 610.630280][T10834] hpfs: filesystem error: improperly stopped [ 610.666331][T10834] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 610.691588][T10834] hpfs: You really don't want any checks? You are crazy... [ 610.705879][ T5751] usb 6-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 610.729482][T10834] hpfs: Code page index out of array [ 610.745897][ T5751] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.760518][T10834] hpfs: code page support is disabled [ 610.787816][T10834] hpfs: hpfs_map_4sectors(): unaligned read [ 610.812070][ T5751] emi26 - firmware loader 6-1:1.0: emi26_probe start [ 610.822635][T10834] hpfs: hpfs_map_4sectors(): unaligned read [ 610.850835][T10834] hpfs: filesystem error: unable to find root dir [ 610.960352][ T9521] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 611.062693][T10839] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 611.107849][ T5751] usb 6-1: emi26_load_firmware - request_firmware() failed [ 611.158479][ T5751] usb 6-1: emi26_load_firmware - error loading firmware: error = -2 [ 611.180415][ T890] usb 2-1: emi26_load_firmware - request_firmware() failed [ 611.227098][ T890] usb 2-1: emi26_load_firmware - error loading firmware: error = -2 [ 611.237291][ T5751] emi26 - firmware loader 6-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 611.312193][ T890] emi26 - firmware loader 2-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 611.514765][ T5751] usb 6-1: USB disconnect, device number 21 [ 612.262500][T10848] loop0: detected capacity change from 0 to 512 [ 612.303993][T10848] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 612.364799][T10848] EXT4-fs (loop0): DAX unsupported by block device. [ 612.416970][ T890] usb 2-1: USB disconnect, device number 25 [ 613.963586][ T5751] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 614.203810][ T5751] usb 6-1: device descriptor read/64, error -71 [ 614.475634][ T5751] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 615.233319][ T5751] usb 6-1: device descriptor read/64, error -71 [ 615.345033][ T5751] usb usb6-port1: attempt power cycle [ 615.517877][ T9521] Bluetooth: hci0: command 0x0406 tx timeout [ 615.685619][ T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 615.727896][T10871] loop0: detected capacity change from 0 to 4096 [ 615.802821][T10871] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 615.846102][ T5751] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 615.882086][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 615.951977][ T9] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 615.990370][ T5751] usb 6-1: device descriptor read/8, error -71 [ 616.202194][ T9] usb 9-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 616.359262][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.572065][ T9] usb 9-1: Product: syz [ 616.661696][ T9] usb 9-1: Manufacturer: syz [ 616.725046][T10871] ntfs3(loop0): ino=19, mi_enum_attr [ 616.740122][ T9] usb 9-1: SerialNumber: syz [ 616.808720][T10871] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 616.905872][ T9] ums-karma 9-1:1.0: USB Mass Storage device detected [ 616.993937][T10884] loop5: detected capacity change from 0 to 512 [ 617.041138][T10884] EXT4-fs: Ignoring removed orlov option [ 617.105377][T10884] EXT4-fs: Ignoring removed mblk_io_submit option [ 617.118560][ T9] ums-karma 9-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 617.118560][ T9] Please send a copy of this message to and [ 617.284176][T10884] EXT4-fs error (device loop5): ext4_iget_extra_inode:5179: inode #15: comm syz.5.1310: corrupted in-inode xattr: e_value size too large [ 617.401090][T10884] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 617.403115][T10884] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.1310: couldn't read orphan inode 15 (err -117) [ 617.412350][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 617.412374][ C0] EXT4-fs (loop5): initial error at time 1785309043: ext4_iget_extra_inode:5179: inode 15 [ 617.412415][ C0] EXT4-fs (loop5): last error at time 1785309043: ext4_iget_extra_inode:5179: inode 15 [ 617.571970][ T9] usb 9-1: USB disconnect, device number 4 [ 617.654230][T10884] loop5: lost filesystem error report for type 5 error -117 [ 617.657713][T10884] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 617.985492][ T5630] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 619.105907][ T890] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 619.289755][ T890] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 619.321257][ T890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.369357][ T890] emi26 - firmware loader 2-1:1.0: emi26_probe start [ 619.447529][ T890] usb 2-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 619.477601][ T890] usb 2-1: Falling back to sysfs fallback for: emi26/loader.fw [ 619.624411][T10916] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 619.710749][ T890] usb 2-1: emi26_load_firmware - request_firmware() failed [ 619.739040][ T890] usb 2-1: emi26_load_firmware - error loading firmware: error = -2 [ 619.776210][ T890] emi26 - firmware loader 2-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 620.857867][ T990] usb 2-1: USB disconnect, device number 26 [ 623.678831][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.685274][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.006612][T10953] loop0: detected capacity change from 0 to 512 [ 624.086746][T10953] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 624.182249][T10953] EXT4-fs (loop0): DAX unsupported by block device. [ 625.100657][T10960] loop2: detected capacity change from 0 to 4096 [ 625.166438][T10960] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 627.317440][T10960] ntfs3(loop2): ino=19, mi_enum_attr [ 627.343856][T10960] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 627.427749][T10960] ntfs3(loop2): failed to convert "c46c" to cp936 [ 627.486065][T10960] ntfs3(loop2): ino=20, mi_enum_attr [ 627.747165][ T5630] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 627.858920][ T5628] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.548178][T10990] loop1: detected capacity change from 0 to 512 [ 630.690582][T10990] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 630.805692][T10990] ext4 filesystem being mounted at /234/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 630.932642][T10990] EXT4-fs warning (device loop1): verify_group_input:136: Cannot add at group 4 (only 1 groups) [ 630.982601][T11004] loop9: detected capacity change from 0 to 512 [ 631.054382][T11004] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 631.090660][T11006] loop8: detected capacity change from 0 to 16 [ 631.101690][T11004] EXT4-fs (loop9): DAX unsupported by block device. [ 631.379021][T11006] erofs (device loop8): invalid ishare xattr prefix id 0 [ 631.412422][ T5624] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.570526][T11024] loop1: detected capacity change from 0 to 256 [ 636.094353][ T9521] Bluetooth: hci1: command 0x0406 tx timeout [ 637.869802][T11024] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc20ee313, utbl_chksum : 0xe619d30d) [ 638.326519][ T5630] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 638.806253][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 639.303974][T11039] loop5: detected capacity change from 0 to 1024 [ 639.594773][T11040] loop2: detected capacity change from 0 to 4096 [ 639.858014][T11039] EXT4-fs: Ignoring removed i_version option [ 640.021330][T11040] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 641.388281][T11040] ntfs3(loop2): ino=19, mi_enum_attr [ 641.410925][T11040] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 641.499246][T11040] ntfs3(loop2): failed to convert "c46c" to cp936 [ 641.517054][T11040] ntfs3(loop2): ino=20, mi_enum_attr [ 641.864376][T11039] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 642.223589][ T990] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 642.231501][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 642.393778][ T990] usb 2-1: device descriptor read/64, error -32 [ 643.453590][ T990] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 643.635143][ T5628] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.665193][ T990] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 643.698341][ T990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.792697][ T990] emi26 - firmware loader 2-1:1.0: emi26_probe start [ 643.827064][T11060] loop0: detected capacity change from 0 to 512 [ 643.842236][ T990] usb 2-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 643.888962][ T990] usb 2-1: Falling back to sysfs fallback for: emi26/loader.fw [ 643.932873][T11060] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 643.994801][T11060] EXT4-fs (loop0): DAX unsupported by block device. [ 644.103643][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 644.506642][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 644.646581][ T24] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 644.662356][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.708100][ T24] usb 3-1: Product: syz [ 644.751693][ T24] usb 3-1: Manufacturer: syz [ 644.785978][ T24] usb 3-1: SerialNumber: syz [ 644.829849][ T24] ums-karma 3-1:1.0: USB Mass Storage device detected [ 644.859702][ T5630] Bluetooth: hci5: unexpected event 0x03 length: 1 < 11 [ 644.905081][ T24] ums-karma 3-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 644.905081][ T24] Please send a copy of this message to and [ 645.695964][ T24] usb 3-1: USB disconnect, device number 10 [ 647.640966][T11115] loop8: detected capacity change from 0 to 2048 [ 647.768909][T11115] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 647.853977][ T5765] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 647.875709][T11115] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 647.985331][ T30] audit: type=1800 audit(1785309073.984:105): pid=11115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1368" name="file0" dev="loop8" ino=13 res=0 errno=0 [ 648.095794][ T5765] usb 3-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 648.140125][ T5765] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.294817][ T5765] emi26 - firmware loader 3-1:1.0: emi26_probe start [ 648.479468][ T5765] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 648.491589][ T5765] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 648.500014][ T5765] CPU: 0 UID: 0 PID: 5765 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 648.509395][ T5765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 648.519447][ T5765] Workqueue: usb_hub_wq hub_event [ 648.524491][ T5765] RIP: 0010:request_ihex_firmware.constprop.0+0x11e/0x250 [ 648.531614][ T5765] Code: 48 89 04 24 e8 c3 1a b8 00 4c 39 24 24 0f 82 94 00 00 00 e8 b4 1a b8 00 49 8d 7c 24 04 48 89 f8 48 89 fe 48 c1 e8 03 83 e6 07 <42> 8a 0c 38 49 8d 44 24 05 48 89 c2 48 c1 ea 03 40 38 f1 40 0f 9e [ 648.551256][ T5765] RSP: 0018:ffffc9000437eec8 EFLAGS: 00010202 [ 648.557319][ T5765] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffc9001de78000 [ 648.565285][ T5765] RDX: 0000000000100000 RSI: 0000000000000004 RDI: 0000000000000004 [ 648.573246][ T5765] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 648.581204][ T5765] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 648.589165][ T5765] R13: ffff88802b0b5540 R14: ffffc9000437efe8 R15: dffffc0000000000 [ 648.597128][ T5765] FS: 0000000000000000(0000) GS:ffff888123ddc000(0000) knlGS:0000000000000000 [ 648.606048][ T5765] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 648.612622][ T5765] CR2: 000000110c27730e CR3: 0000000057ecf000 CR4: 0000000000350ef0 [ 648.620606][ T5765] Call Trace: [ 648.623873][ T5765] [ 648.626821][ T5765] ? __pfx_request_ihex_firmware.constprop.0+0x10/0x10 [ 648.633686][ T5765] ? emi26_probe+0x114/0xe30 [ 648.638305][ T5765] emi26_probe+0x13c/0xe30 [ 648.642746][ T5765] ? _raw_spin_lock_irqsave+0x52/0x60 [ 648.648115][ T5765] ? find_held_lock+0x2b/0x80 [ 648.652803][ T5765] ? __pfx_emi26_probe+0x10/0x10 [ 648.657740][ T5765] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.663373][ T5765] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 648.669180][ T5765] ? lockdep_hardirqs_on+0x78/0x100 [ 648.674381][ T5765] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.680016][ T5765] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.685655][ T5765] ? __pm_runtime_set_status+0x13c/0x970 [ 648.691322][ T5765] usb_probe_interface+0x303/0x8f0 [ 648.696453][ T5765] ? __pfx_usb_probe_interface+0x10/0x10 [ 648.702094][ T5765] really_probe+0x241/0xa60 [ 648.706603][ T5765] __driver_probe_device+0x20e/0x450 [ 648.711893][ T5765] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.717531][ T5765] driver_probe_device+0x4a/0x140 [ 648.722597][ T5765] __device_attach_driver+0x1df/0x320 [ 648.727985][ T5765] ? __pfx___device_attach_driver+0x10/0x10 [ 648.733921][ T5765] bus_for_each_drv+0x159/0x1e0 [ 648.738773][ T5765] ? __pfx_bus_for_each_drv+0x10/0x10 [ 648.744146][ T5765] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.749783][ T5765] ? lockdep_hardirqs_on+0x78/0x100 [ 648.754984][ T5765] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.760650][ T5765] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 648.766459][ T5765] __device_attach+0x1e4/0x4d0 [ 648.771234][ T5765] ? __pfx___device_attach+0x10/0x10 [ 648.776529][ T5765] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.782163][ T5765] ? do_raw_spin_unlock+0x145/0x1e0 [ 648.787368][ T5765] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.793005][ T5765] device_initial_probe+0xaf/0xd0 [ 648.798045][ T5765] bus_probe_device+0x64/0x160 [ 648.802813][ T5765] device_add+0x121d/0x1970 [ 648.807329][ T5765] ? __pfx_device_add+0x10/0x10 [ 648.812190][ T5765] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.817823][ T5765] ? mark_held_locks+0x40/0x70 [ 648.822592][ T5765] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.828232][ T5765] usb_set_configuration+0xd97/0x1c60 [ 648.833628][ T5765] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 648.839696][ T5765] usb_generic_driver_probe+0xa1/0xe0 [ 648.845070][ T5765] usb_probe_device+0xef/0x400 [ 648.849841][ T5765] ? __pfx_usb_probe_device+0x10/0x10 [ 648.855222][ T5765] really_probe+0x241/0xa60 [ 648.859735][ T5765] __driver_probe_device+0x20e/0x450 [ 648.865063][ T5765] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.870746][ T5765] driver_probe_device+0x4a/0x140 [ 648.875779][ T5765] __device_attach_driver+0x1df/0x320 [ 648.881163][ T5765] ? __pfx___device_attach_driver+0x10/0x10 [ 648.887070][ T5765] bus_for_each_drv+0x159/0x1e0 [ 648.891920][ T5765] ? __pfx_bus_for_each_drv+0x10/0x10 [ 648.897293][ T5765] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.902927][ T5765] ? lockdep_hardirqs_on+0x78/0x100 [ 648.908130][ T5765] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.913764][ T5765] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 648.919571][ T5765] __device_attach+0x1e4/0x4d0 [ 648.924343][ T5765] ? __pfx___device_attach+0x10/0x10 [ 648.929635][ T5765] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.935270][ T5765] ? do_raw_spin_unlock+0x145/0x1e0 [ 648.940476][ T5765] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.946123][ T5765] device_initial_probe+0xaf/0xd0 [ 648.951179][ T5765] bus_probe_device+0x64/0x160 [ 648.955972][ T5765] device_add+0x121d/0x1970 [ 648.960513][ T5765] ? __pfx_device_add+0x10/0x10 [ 648.965379][ T5765] ? usb_detect_static_quirks+0x335/0x3e0 [ 648.971122][ T5765] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.976775][ T5765] usb_new_device.cold+0x685/0x115c [ 648.981997][ T5765] ? _mutex_trylock_nest_lock+0x241/0x310 [ 648.987733][ T5765] ? do_raw_spin_lock+0x128/0x260 [ 648.992767][ T5765] ? __pfx_usb_new_device+0x10/0x10 [ 648.997976][ T5765] ? srso_alias_return_thunk+0x5/0xfbef5 [ 649.003614][ T5765] ? mark_held_locks+0x40/0x70 [ 649.008381][ T5765] hub_event+0x30a3/0x4a60 [ 649.012821][ T5765] ? __pfx_hub_event+0x10/0x10 [ 649.017594][ T5765] ? debug_object_deactivate+0x2e4/0x3b0 [ 649.023334][ T5765] ? srso_alias_return_thunk+0x5/0xfbef5 [ 649.028975][ T5765] ? srso_alias_return_thunk+0x5/0xfbef5 [ 649.034625][ T5765] ? srso_alias_return_thunk+0x5/0xfbef5 [ 649.040300][ T5765] ? rcu_is_watching+0x12/0xc0 [ 649.045079][ T5765] process_one_work+0xa23/0x1940 [ 649.050028][ T5765] ? __pfx_process_one_work+0x10/0x10 [ 649.055398][ T5765] ? srso_alias_return_thunk+0x5/0xfbef5 [ 649.061041][ T5765] ? srso_alias_return_thunk+0x5/0xfbef5 [ 649.066688][ T5765] worker_thread+0x5ef/0xe50 [ 649.071329][ T5765] ? kthread+0x13a/0x450 [ 649.075591][ T5765] ? __pfx_worker_thread+0x10/0x10 [ 649.080705][ T5765] kthread+0x370/0x450 [ 649.084792][ T5765] ? __pfx_kthread+0x10/0x10 [ 649.089402][ T5765] ret_from_fork+0x72b/0xd50 [ 649.094003][ T5765] ? __pfx_ret_from_fork+0x10/0x10 [ 649.099126][ T5765] ? srso_alias_return_thunk+0x5/0xfbef5 [ 649.104786][ T5765] ? __switch_to+0x800/0x10f0 [ 649.109480][ T5765] ? __switch_to_asm+0x39/0x70 [ 649.114257][ T5765] ? __pfx_kthread+0x10/0x10 [ 649.118861][ T5765] ret_from_fork_asm+0x1a/0x30 [ 649.123642][ T5765] [ 649.126648][ T5765] Modules linked in: [ 649.133067][ T5765] ---[ end trace 0000000000000000 ]--- [ 649.141867][ T990] usb 2-1: emi26_load_firmware - request_firmware() failed [ 649.155686][ T990] usb 2-1: emi26_load_firmware - error loading firmware: error = -12 [ 649.171064][ T990] emi26 - firmware loader 2-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 649.188796][ T990] usb 2-1: USB disconnect, device number 28 [ 649.206242][ T5765] RIP: 0010:request_ihex_firmware.constprop.0+0x11e/0x250 [ 649.208960][T11115] fs-verity (loop8, inode 13): Error -4 building Merkle tree [ 649.213823][ T5765] Code: 48 89 04 24 e8 c3 1a b8 00 4c 39 24 24 0f 82 94 00 00 00 e8 b4 1a b8 00 49 8d 7c 24 04 48 89 f8 48 89 fe 48 c1 e8 03 83 e6 07 <42> 8a 0c 38 49 8d 44 24 05 48 89 c2 48 c1 ea 03 40 38 f1 40 0f 9e [ 649.352487][ T5765] RSP: 0018:ffffc9000437eec8 EFLAGS: 00010202 [ 649.398487][ T8872] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.429905][ T5765] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffc9001de78000 [ 649.510466][ T5765] RDX: 0000000000100000 RSI: 0000000000000004 RDI: 0000000000000004 [ 649.544367][ T5765] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 649.588296][ T5765] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 649.606742][ T5765] R13: ffff88802b0b5540 R14: ffffc9000437efe8 R15: dffffc0000000000 [ 649.626547][ T5765] FS: 0000000000000000(0000) GS:ffff888123ddc000(0000) knlGS:0000000000000000 [ 649.648303][ T5765] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 649.682057][ T5765] CR2: 0000200000239030 CR3: 000000007a75d000 CR4: 0000000000350ef0 [ 649.703514][ T5765] Kernel panic - not syncing: Fatal exception [ 649.709864][ T5765] Kernel Offset: disabled [ 649.714183][ T5765] Rebooting in 86400 seconds..