last executing test programs: 4m3.710864235s ago: executing program 2 (id=572): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="200507"], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000280)={0x40, 0xf, 0x2, '\x00\x00'}, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f00000005c0)={0x20, 0xb, 0x1, "f7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 3m59.39918163s ago: executing program 2 (id=595): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$usbfs(&(0x7f00000000c0), 0x10000, 0x505402) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x2c020400) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000"], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$tun(0xffffffffffffffff, 0x0, 0x19) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x1000, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0x3, 0x0, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = semget(0x1, 0x2, 0x291) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000280)=""/195) unshare(0x2c020400) 3m57.18652682s ago: executing program 2 (id=597): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) io_setup(0x8, &(0x7f0000004200)) syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x380000c, &(0x7f0000000400)={[{@max_batch_time={'max_batch_time', 0x3d, 0xd}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@auto_da_alloc}, {@jqfmt_vfsv0}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_get$uid(0x3, 0xffffffffffffffff) r2 = getpid() syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file2\x00', 0x800, &(0x7f0000000840)=ANY=[@ANYBLOB='iocharset=cp874,umask=00000000000000000000002,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,iocharset=default,namecase\x00\x00,fmaskI00000000000100000000406,fmask=00000000000000000000011,fmask=00000000000000000000006,fm!sk=00000000000000000000003,\x00'], 0x1, 0x1529, &(0x7f0000000d40)="$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") sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[], 0x32600) listen(r1, 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) 3m54.864660613s ago: executing program 2 (id=602): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8032, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000007000000850000001b000000b700000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r4}, 0x50) 3m53.734158193s ago: executing program 2 (id=605): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001200)={r4, 0x0, &(0x7f0000002780)=""/4100}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x20, 0x1, 0x2000, 0x25dfdbfe, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10001}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) listen(0xffffffffffffffff, 0x204) socket$netlink(0x10, 0x3, 0x4) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x70}}, 0x0) sendmmsg(r7, &(0x7f0000000180), 0x3ef, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, 0x0, 0x802) socket(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 3m50.261542629s ago: executing program 2 (id=609): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x109d81) preadv(0xffffffffffffffff, &(0x7f0000005940)=[{0x0}], 0x1, 0x100, 0xd531) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000300)=0x455e, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 3m33.953056034s ago: executing program 32 (id=609): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x109d81) preadv(0xffffffffffffffff, &(0x7f0000005940)=[{0x0}], 0x1, 0x100, 0xd531) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000300)=0x455e, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 2m58.290481845s ago: executing program 5 (id=731): getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x402, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x191c) syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000280)='./file0\x00', 0x208408, &(0x7f0000000000)=ANY=[], 0x80, 0x168, &(0x7f00000002c0)="$eJzs2r9Kw0AcB/CfNFrp6OhUqFQHm6SJ1tmxuPkGpc21wYstiSDt5CZOgsI5+BKCT+AjdHTTxcGXiCQ5QkyLBinkhO9naL7wy59f7pqbruWPvTYLWkT7k7vTjy1/7NU79lGftVmPEl0iqkdhHoYPOi14S+vzkPQlJ5Rr5zM5NvaG4uSGudyxym4JAAAAAAAAAAAAAAAAAAAAAAAKatZkqI2Ed81c7rQz1aChnfU4d/ygpPZK16zLPVzEBH+MxsdeOOcq/nXFsR/Vze/X38uwOxL8PT++xoU3MYLprOV6vaEzdM4ty+6YB6Z5aBnxvYz8HZtPsieah8+mTqGU1jP7zV6L7DeT869tu+L2Mv+0YDqT869AWFOjjYKhQkQKtLH6sElEf7u8qyn2j/o3oUJKtJEJ6RKxsXRV0X5dd1RRW0+Og6rdeInWP70/5gNZjN+1SisaM/mk3NdT1osDwM++AgAA//8/aDZP") mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) mount(&(0x7f0000000080)=@md0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000040)='exfat\x00', 0x208000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r3, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000180)={r3, 0x77, "cc3411c63a01f74fd14f257e2870e42828b60567e493178a315443bef1ac15651e31b8cc47ed164e9e21b23b48fcfbc5a9c3b84fdab9baca68c6b74fd945c0f18df416136a790b544b2e963acc1206b37f9f1929e7691054111239d8abec9ae8ddeefbb1fca65ffebf32ba872823015908ee7e43b8fdbd"}, &(0x7f0000000240)=0x7f) 2m56.439216982s ago: executing program 5 (id=733): socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r0], 0x7c}}, 0x0) 2m55.337630601s ago: executing program 5 (id=741): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00}, 0x94) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x20000000000006) truncate(&(0x7f00000000c0)='./file1\x00', 0xa3f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace(0x10, 0x1) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 2m49.81539239s ago: executing program 5 (id=748): r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r1 = epoll_create1(0x0) fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) syz_open_dev$usbmon(0x0, 0x14dd, 0x4a4740) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0x122448, &(0x7f00000002c0)={[], [{@audit}, {@smackfsroot}, {@subj_user={'subj_user', 0x3d, '&'}}]}, 0x1, 0x45e, &(0x7f0000001080)="$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") openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000240)={0x0, 0x1, {0x3, 0x2, 0x1, 0x0, 0x5}, 0xc}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) 2m45.157227787s ago: executing program 5 (id=758): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) write$binfmt_elf32(r1, &(0x7f0000002a80)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x6, 0x23, 0x7, 0xe, 0x3, 0x3, 0x6, 0x158, 0x38, 0x2bd, 0x1, 0x7f, 0x20, 0x1, 0x1, 0x9, 0x2fc}, [{0x3, 0x0, 0x7, 0xcc6, 0x7, 0xca, 0x5, 0x800}], "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x658) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) sendmmsg$inet(r1, &(0x7f00000029c0)=[{{&(0x7f0000000a00)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000480)='R', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000440)="d2", 0x1}], 0x1}}, {{&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000002180)=[{&(0x7f0000000e80)="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", 0xec1}], 0x1}}], 0x3, 0x4040040) 2m41.233605148s ago: executing program 5 (id=767): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrusage(0x0, &(0x7f0000000380)) ioctl$FE_DISEQC_SEND_MASTER_CMD(0xffffffffffffffff, 0x40076f3f, &(0x7f0000000100)={"d74d9e6a1ea8", 0x6}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x28, 0x36, 0x117, 0xfffffffc, 0x814000, {0x1, 0x7c}, [@typed={0x14, 0x4, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7f8, 0x971, &(0x7f0000000000)=0x1) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000002010000000000000000000020000000000000000000000000000000000000000000000000000000000fe08ffff0000000000000000000000000000000000000000000000010000000000000000000000000000ffffffff0000000000000000000000000000000000140000000000000000000ae11f"]}, 0x11c) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000040)=0x6, 0x3cea, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00005d1000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00004c5000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r3}, 0x68) 2m26.109996751s ago: executing program 33 (id=767): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrusage(0x0, &(0x7f0000000380)) ioctl$FE_DISEQC_SEND_MASTER_CMD(0xffffffffffffffff, 0x40076f3f, &(0x7f0000000100)={"d74d9e6a1ea8", 0x6}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x28, 0x36, 0x117, 0xfffffffc, 0x814000, {0x1, 0x7c}, [@typed={0x14, 0x4, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7f8, 0x971, &(0x7f0000000000)=0x1) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000002010000000000000000000020000000000000000000000000000000000000000000000000000000000fe08ffff0000000000000000000000000000000000000000000000010000000000000000000000000000ffffffff0000000000000000000000000000000000140000000000000000000ae11f"]}, 0x11c) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000040)=0x6, 0x3cea, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00005d1000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00004c5000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r3}, 0x68) 19.931078064s ago: executing program 4 (id=1165): r0 = socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @host}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) 14.553807797s ago: executing program 4 (id=1180): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x48020) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89ff, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x28) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x800}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x44800, 0x40140}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x2b}}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x44}, 0x40818) 11.960113141s ago: executing program 0 (id=1187): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0xc0) 11.518636876s ago: executing program 0 (id=1189): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file1\x00', 0x1000000, &(0x7f00000000c0)=ANY=[], 0x1, 0x214, &(0x7f0000000240)="$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") socket$nl_route(0x10, 0x3, 0x0) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x200010) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_RMID(r0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) 10.962996476s ago: executing program 4 (id=1191): getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x402, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x191c) syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000280)='./file0\x00', 0x208408, &(0x7f0000000000)=ANY=[], 0x80, 0x168, &(0x7f00000002c0)="$eJzs2r9Kw0AcB/CfNFrp6OhUqFQHm6SJ1tmxuPkGpc21wYstiSDt5CZOgsI5+BKCT+AjdHTTxcGXiCQ5QkyLBinkhO9naL7wy59f7pqbruWPvTYLWkT7k7vTjy1/7NU79lGftVmPEl0iqkdhHoYPOi14S+vzkPQlJ5Rr5zM5NvaG4uSGudyxym4JAAAAAAAAAAAAAAAAAAAAAAAKatZkqI2Ed81c7rQz1aChnfU4d/ygpPZK16zLPVzEBH+MxsdeOOcq/nXFsR/Vze/X38uwOxL8PT++xoU3MYLprOV6vaEzdM4ty+6YB6Z5aBnxvYz8HZtPsieah8+mTqGU1jP7zV6L7DeT869tu+L2Mv+0YDqT869AWFOjjYKhQkQKtLH6sElEf7u8qyn2j/o3oUJKtJEJ6RKxsXRV0X5dd1RRW0+Og6rdeInWP70/5gNZjN+1SisaM/mk3NdT1osDwM++AgAA//8/aDZP") mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) mount(&(0x7f0000000080)=@md0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000040)='exfat\x00', 0x208000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r3, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000180)={r3, 0x77, "cc3411c63a01f74fd14f257e2870e42828b60567e493178a315443bef1ac15651e31b8cc47ed164e9e21b23b48fcfbc5a9c3b84fdab9baca68c6b74fd945c0f18df416136a790b544b2e963acc1206b37f9f1929e7691054111239d8abec9ae8ddeefbb1fca65ffebf32ba872823015908ee7e43b8fdbd"}, &(0x7f0000000240)=0x7f) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='statm\x00') 10.429668105s ago: executing program 0 (id=1192): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000180)='./file1\x00', 0x10, &(0x7f00000007c0)={[{@discard}, {@order_strict}, {@nobarrier}, {@nodiscard}, {@discard}]}, 0x3, 0xd99, &(0x7f0000000e80)="$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") ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000180)='qnx6\x00', 0x0) fsmount(r3, 0x0, 0x80) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r4, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {0x0, 0x0, 0x8, 0x98f}}) 9.808905788s ago: executing program 4 (id=1193): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000003c0)={[{@quota}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@block_validity}, {@nodelalloc}, {@quota}, {@nolazytime}, {@grpjquota}, {@mblk_io_submit}, {@barrier_val={'barrier', 0x3d, 0xff}}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}]}, 0x3, 0x452, &(0x7f0000000780)="$eJzs289vFFUcAPDvTFug/LAV8Qc/1CoaG3+0tKBy8KLRxIMmJl7wWNtCkIUaWhMhRNEYPBoS78ajiX+BJ70Y9WTiVe+GhBguoqc1szvD/mC3tMu2g+znkwx9b+YN7333zdt9M283gIE1kf2TROyMiN8jYqyebS0wUf9z/dqF+X+uXZhPolp9+6+kVu7vaxfmi6LFeTvyzGQakX6WxP4O9S6fO39qrlJZPJvnp1dOvz+9fO78cydPz51YPLF4Zvbo0SOHZ158Yfb5vsR5b9bWfR8tHdj7+juX35w/dvndn79Nivjb4uiTidUOPlmt9rm6cu1qSifDJTaEdRmKiKy7RmrjfyyGotF5Y/Hap6U2DthQ1VyXwxerwF0sibJbAJSj+KDP7n+LbfNmH+W7+nL9BiiL+3q+1Y8MR5qXGWm7v+2niYg4dvHfr7ItNuY5BABAi++z+c+zneZ/aTzQVO6efG1oPF9L2R0R90XEnoi4P6JW9sGIeGid9bcvktw8/0mv9BTYGmXzv5fyta3W+V8x+4vxoTy3qxb/SHL8ZGXxUP6aTMbI1iw/s0odP7z62xfdjjXP/7Itq7+YC+btuDK8tfWchbmVuduJudnVTyL2DXeKP7mxEpBExN6I2NdjHSef/uZAt2O3jn8VfVhnqn4d8VS9/y9GW/yFZPX1yeltUVk8NF1cFTf75ddLb3Wr/7bi74Os/7d3vP5vxD+eNK/XLq+/jkt/fN71nmaqp+u/sWNL/vfDuZWVszMRW5I36o1u3j/bOLfIF+Wz+CcPdh7/u6PxSuyPiOwifjgiHomIR/O+eywiHo+Ig53Dy24d46dXnnivW/x3Qv8vtPX/eGuRtv5vJLZE+57OiaFTP37X+j82kmt7/ztSS03me9by/reWdvV2NQMAAMD/TxoROyNJp26kR9Opqfp3+PfE9rSytLzyzPGlD84s1H8jMB4jafGka6zpeehMfltf5Gfb8ofz58ZfDo3W8lPzS5WFsoOHAbfjpvGf1sZ/5s+hslsHbDi/14LB1TT+kzLbAWw+n/8wuIx/GFwdxv9oGe0ANl+nz/+PS2gHsPnaxr9lPxgg7v9hcBn/MLiax78vAMDAWB6NW/9IvlNiW/RylsRdk4j0jmhGfxJJj6NgrYmdZQe4/kTZ70wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD98V8AAAD///Mv57k=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x83) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000900)=@v1={0x0, @aes128, 0x0, @desc4}) close(r1) r3 = eventfd2(0x0, 0x80000) read(r3, &(0x7f0000002500)=""/126, 0x7e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$eventfd(r1, &(0x7f0000000040)=0x9, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee0, 0xc8931, 0xffffffffffffffff, 0x0) 8.950956279s ago: executing program 6 (id=1194): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dsp(0xffffffffffffff9c, 0x0, 0x8041, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x20004450) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0xf27, 0xd7b, 0x1, 0x4, 0x5, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x6, 0x6a, 0x0, 0xc7c, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e57, 0x3, 0x2000e66, 0x3, 0x1, 0x10004086, 0x0, 0xfffffff8]}) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000400)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f00000000c0)) ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r4, 0x400448e7, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000000)='squashfs\x00', 0x200013, 0x0) syz_emit_ethernet(0x4b, &(0x7f0000000500)={@random="37d4e38896a8", @broadcast, @val={@val, {0x8100, 0x5, 0x1}}, {@mpls_uc={0x8847, {[], @ipv6=@generic={0x9, 0x6, "dfe9b0", 0xd, 0x3a, 0xff, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, {[], "74e873cb971ee531818f0498eb"}}}}}}, 0x0) 8.949840008s ago: executing program 0 (id=1195): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001200)={r3, 0x0, &(0x7f0000002780)=""/4100}, 0x20) 8.731944526s ago: executing program 1 (id=1196): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x3, 0x40000000, 0x10}) 8.051211961s ago: executing program 6 (id=1198): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) syz_open_dev$usbmon(0x0, 0x14dd, 0x4a4740) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0x122448, &(0x7f00000002c0)={[], [{@audit}, {@smackfsroot}, {@subj_user={'subj_user', 0x3d, '&'}}]}, 0x1, 0x45e, &(0x7f0000001080)="$eJzs28tvG8UfAPDvbh5t+vglv1IefQCBgoh4JE1aoAcuIJA4gITEpRxDklalboOaINGqgoJQOaJK3BFHJP4CTnBBwAmJK9xRpQr1QuFktPZuY7u2m7hOFurPR9pmZne2M1/Pjj27YwcwsCazf5KIXRHxa0SM17PNBSbrf25cv7jw1/WLC0lUq2/+kdTK/Xn94kJRtDhvZ56ZSiPST5I40KbelfMXTs9XKkvn8vzM6pl3Z1bOX3jm1Jn5k0snl87OHTt29Mjs88/NPduXOP+ftXX/B8sH97361pXXF45fefvHr4eK+Fvi6JPJbgcfr1b7XF25djekk+ESG8KGZGMg666R2vgfj6FY67zxeOXjUhsHbKpqrsPhS1XgLpZE2S0AylF80Gf3v8W2dbOP8l17sX4DlMV9I9/qR4YjzcuMtNzf9tNkRBy/9PcX2Rab8xwCAKDJt9n85+l287807mso9798bWgiX0vZExH3RMTeiLg3olb2/oh4YIP1ty6S3Dr/Sa/2FNg6ZfO/F/K1reb5XzH7i4mhPLe7Fv9IcuJUZelw/ppMxci2LD/bpY7vXv7ls07HGud/2ZbVX8wF83ZcHd7WfM7i/Or8ncTc6NpHEfuH28Wf3FwJSCJiX0Ts77GOU09+dbDTsdvH30Uf1pmqX0Y8Ue//S9ESfyHpvj45sz0qS4dniqviVj/9fPmNTvXfUfx9kPX/jrbX/834J5LG9dqVjddx+bdPO97TTPd0/a/tGM3/vj+/unpuNmI0ea3e6Mb9c2vnFvmifBb/1KH2439PrL0SByIiu4gfjIiHIuLhvO8eiYhHI+JQS1yN99c/vPTYO53i79L/o91e037J4l9s6f+J5iIt/b+WGI3WPe0TQ6e//6b5f1xX/Lms/4/WUlP5nvW8/62nXb1dzQAAAPDfk0bErkjS6ZvpsXR6uv4d/r2xI60sr6w+dWL5vbOL9d8ITMRIWjzpGm94Hjqb39YX+bmW/JH8ufHnQ2O1/PTCcmWx7OBhwO28ZfyntfGf+X2o7NYBm87vtWBwNYz/pMx2AFvP5z8MLuMfBleb8T9WRjuArdfu8//DEtoBbL2W8W/ZDwaI+38YXMY/DK7G8e8LADAwVsbi9j+Sb5fYHr2cJXHXJCL9VzSjP4mkx1HQITG/vWXPrrID3Hii7HcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/vgnAAD//8Wp7zg=") openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r6, 0x0, 0x30, &(0x7f0000000000)=""/4091, 0x0) syz_open_dev$usbmon(&(0x7f0000000a00), 0xa, 0x4000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r4, r2, 0x11, 0x0, r4}, 0x14) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r1, r2, 0x11, 0x0, r1}, 0x11) 7.033634437s ago: executing program 6 (id=1199): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0xc0) 6.936134421s ago: executing program 4 (id=1200): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000400)={0x1, 0x4, 0x0, 0x81, 0x1b, "0062ba7d820700000d0000efffffffff086304"}) syz_open_pts(r3, 0x80) utime(0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 6.725646768s ago: executing program 6 (id=1202): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file1\x00', 0x1000000, &(0x7f00000000c0)=ANY=[], 0x1, 0x214, &(0x7f0000000240)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") socket$nl_route(0x10, 0x3, 0x0) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x200010) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_RMID(r0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) 5.254178971s ago: executing program 6 (id=1203): r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r1 = epoll_create1(0x0) fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) syz_open_dev$usbmon(0x0, 0x14dd, 0x4a4740) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0x122448, &(0x7f00000002c0)={[], [{@audit}, {@smackfsroot}, {@subj_user={'subj_user', 0x3d, '&'}}]}, 0x1, 0x45e, &(0x7f0000001080)="$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") openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000240)={0x0, 0x1, {0x3, 0x2, 0x1, 0x0, 0x5}, 0xc}) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r6, 0x0, 0x30, &(0x7f0000000000)=""/4091, 0x0) syz_open_dev$usbmon(&(0x7f0000000a00), 0xa, 0x4000) 5.115922246s ago: executing program 4 (id=1204): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x474, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x40040, 0x6ab858183a7ef6ba) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0x4, 0x0, 0x0, 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$session_to_parent(0x12) 4.869996815s ago: executing program 3 (id=1205): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) truncate(&(0x7f00000000c0)='./file1\x00', 0xa3f) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) ptrace(0x10, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x4058534c, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 4.517275018s ago: executing program 3 (id=1206): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000019000100000000000000000002180000"], 0x2c}}, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x141842, 0x0) 3.943871979s ago: executing program 6 (id=1207): r0 = socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @host}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) 3.584126491s ago: executing program 3 (id=1208): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) migrate_pages(0x0, 0x3, 0x0, &(0x7f0000000280)=0xa) 3.552333993s ago: executing program 3 (id=1209): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) syz_open_dev$usbmon(0x0, 0x14dd, 0x4a4740) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0x122448, &(0x7f00000002c0)={[], [{@audit}, {@smackfsroot}, {@subj_user={'subj_user', 0x3d, '&'}}]}, 0x1, 0x45e, &(0x7f0000001080)="$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") openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r6, 0x0, 0x30, &(0x7f0000000000)=""/4091, 0x0) syz_open_dev$usbmon(&(0x7f0000000a00), 0xa, 0x4000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r4, r2, 0x11, 0x0, r4}, 0x14) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r1, r2, 0x11, 0x0, r1}, 0x11) 3.224777304s ago: executing program 0 (id=1210): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) close(r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, 0x0}, 0x20) 3.144805317s ago: executing program 3 (id=1211): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a000090400000103010100092100082001220100090581"], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"}) r1 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) socket(0x80000000000000a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xa4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000080)={0xa, 0x100, 0x1, {0xe7ff, 0x1, 0x406, 0x870}}) write$binfmt_aout(r0, 0x0, 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r5 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000200)={0x0, 0xfa, 0xaf, 0xa5e, 0x5, "ad062b190043fc4064c276a6077ea685b6f1f6"}) r6 = dup3(r5, r0, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000001c0)=0x3) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10162, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 2.955885694s ago: executing program 0 (id=1212): r0 = socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @host}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) 2.716834363s ago: executing program 1 (id=1213): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file1\x00', 0x1000000, &(0x7f00000000c0)=ANY=[], 0x1, 0x214, &(0x7f0000000240)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") socket$nl_route(0x10, 0x3, 0x0) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x200010) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_RMID(r0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) 889.325958ms ago: executing program 1 (id=1214): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) 696.002435ms ago: executing program 1 (id=1215): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000005300)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000840)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca70c73d97ce54164c1942b2568635bec8e020b41fb2f8009900"/202, 0xca}], 0x1}}, {{0x0, 0x0, &(0x7f0000005200)=[{&(0x7f0000000c00)}, {&(0x7f0000004140)="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", 0x946}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 563.85928ms ago: executing program 1 (id=1216): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) truncate(&(0x7f00000000c0)='./file1\x00', 0xa3f) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) ptrace(0x10, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x4058534c, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 352.077988ms ago: executing program 1 (id=1217): r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r1 = epoll_create1(0x0) fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) syz_open_dev$usbmon(0x0, 0x14dd, 0x4a4740) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0x122448, &(0x7f00000002c0)={[], [{@audit}, {@smackfsroot}, {@subj_user={'subj_user', 0x3d, '&'}}]}, 0x1, 0x45e, &(0x7f0000001080)="$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") openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000240)={0x0, 0x1, {0x3, 0x2, 0x1, 0x0, 0x5}, 0xc}) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r5, 0x0, 0x30, &(0x7f0000000000)=""/4091, 0x0) syz_open_dev$usbmon(&(0x7f0000000a00), 0xa, 0x4000) 0s ago: executing program 3 (id=1218): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000019000100000000000000000002180000"], 0x2c}}, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x141842, 0x0) kernel console output (not intermixed with test programs): tsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 108.542258][ T1111] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 108.553450][ T1111] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 108.563183][ T1111] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.576127][ T1111] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 108.585340][ T1111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.594895][ T1111] usb 3-1: config 0 descriptor?? [ 108.740734][ T1111] rc_core: IR keymap rc-hauppauge not found [ 108.746726][ T1111] Registered IR keymap rc-empty [ 108.759751][ T1111] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 108.790637][ T1111] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 108.821925][ T1111] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 108.839171][ T1111] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input20 [ 108.877718][ T1111] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 108.894739][ T4239] usb 5-1: failed to send control message: -71 [ 108.903009][ T4239] ch341-uart: probe of ttyUSB0 failed with error -71 [ 108.919797][ T4239] usb 5-1: USB disconnect, device number 4 [ 108.920792][ T1111] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 108.928974][ T4239] ch341 5-1:0.0: device disconnected [ 108.981033][ T1111] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 109.040710][ T1111] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 109.082868][ T1111] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 109.173804][ T5118] input: syz0 as /devices/virtual/input/input21 [ 110.040647][ T1111] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 110.090766][ T1111] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 110.170124][ T1111] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 110.710596][ T1111] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 110.740930][ T1111] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 110.785029][ T1111] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 110.807613][ T1111] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 110.859537][ T1111] usb 3-1: USB disconnect, device number 7 [ 110.881910][ T5137] netlink: 64 bytes leftover after parsing attributes in process `syz.0.303'. [ 111.490251][ T5151] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 111.669664][ T5127] loop4: detected capacity change from 0 to 32768 [ 111.712137][ T5127] ======================================================= [ 111.712137][ T5127] WARNING: The mand mount option has been deprecated and [ 111.712137][ T5127] and is ignored by this kernel. Remove the mand [ 111.712137][ T5127] option from the mount to silence this warning. [ 111.712137][ T5127] ======================================================= [ 111.942024][ T5127] XFS (loop4): Mounting V5 Filesystem [ 112.184273][ T5127] XFS (loop4): Ending clean mount [ 112.228528][ T5127] XFS (loop4): Quotacheck needed: Please wait. [ 112.366133][ T5166] input: syz0 as /devices/virtual/input/input22 [ 113.149512][ T5168] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 113.230853][ T5127] XFS (loop4): Quotacheck: Done. [ 113.288558][ T4195] XFS (loop4): Unmounting Filesystem [ 114.327049][ T5176] overlayfs: failed to clone upperpath [ 114.632516][ T5187] tipc: Started in network mode [ 114.642083][ T5187] tipc: Node identity 7f000001, cluster identity 4711 [ 114.761504][ T5187] tipc: Enabled bearer , priority 10 [ 115.504247][ T5189] loop4: detected capacity change from 0 to 32768 [ 115.640595][ T4239] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 115.717939][ T5189] XFS (loop4): Mounting V5 Filesystem [ 115.882886][ T1111] tipc: Node number set to 2130706433 [ 115.902766][ T5189] XFS (loop4): Ending clean mount [ 115.911486][ T5189] XFS (loop4): Quotacheck needed: Please wait. [ 115.940607][ T4239] usb 2-1: Using ep0 maxpacket: 16 [ 116.138229][ T5189] XFS (loop4): Quotacheck: Done. [ 116.170947][ T4239] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 116.183316][ T4239] usb 2-1: config 0 has no interface number 0 [ 116.210787][ T4239] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 116.508011][ T4239] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 117.490652][ T4239] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 117.898225][ T4239] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.906832][ T4239] usb 2-1: Product: syz [ 117.911291][ T4239] usb 2-1: Manufacturer: syz [ 117.915917][ T4239] usb 2-1: SerialNumber: syz [ 117.922814][ T4239] usb 2-1: config 0 descriptor?? [ 117.951606][ T5194] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 117.975069][ T5194] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 118.059171][ T5234] loop2: detected capacity change from 0 to 512 [ 118.217343][ T5194] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 118.239899][ T5194] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 118.511103][ T4239] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 118.986268][ T4239] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 119.020686][ T4239] asix: probe of 2-1:0.34 failed with error -71 [ 119.049020][ T4239] usb 2-1: USB disconnect, device number 5 [ 119.432877][ T4195] XFS (loop4): Unmounting Filesystem [ 119.440332][ T5243] loop0: detected capacity change from 0 to 8192 [ 119.697666][ T5247] input: syz0 as /devices/virtual/input/input23 [ 121.043585][ T5259] loop1: detected capacity change from 0 to 128 [ 121.160417][ T5259] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 121.512236][ T5266] loop4: detected capacity change from 0 to 1024 [ 121.602208][ T5266] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 121.713093][ T5266] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c028, mo2=0102] [ 121.737012][ T5266] System zones: 0-1, 3-12 [ 121.752149][ T5251] loop0: detected capacity change from 0 to 40427 [ 121.770989][ T5266] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,abort,resuid=0x0000000000000000,user_xattr,discard,errors=remount-ro,debug,noinit_itable,nomblk_io_submit,nodelalloc,inode_readahead_blks=0x0000000000040000,. Quota mode: none. [ 121.818419][ T5251] F2FS-fs (loop0): invalid crc value [ 121.859122][ T5251] F2FS-fs (loop0): Found nat_bits in checkpoint [ 122.085354][ T5251] F2FS-fs (loop0): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 122.497638][ T5278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.346'. [ 122.853451][ T5288] input: syz0 as /devices/virtual/input/input24 [ 123.751671][ T5293] loop0: detected capacity change from 0 to 16 [ 123.782844][ T5293] erofs: (device loop0): mounted with root inode @ nid 36. [ 123.851894][ T5293] attempt to access beyond end of device [ 123.851894][ T5293] loop0: rw=524288, want=12304, limit=16 [ 123.885156][ T5293] attempt to access beyond end of device [ 123.885156][ T5293] loop0: rw=524288, want=1072, limit=16 [ 123.967233][ T5305] input: syz0 as /devices/virtual/input/input25 [ 124.837150][ T5293] attempt to access beyond end of device [ 124.837150][ T5293] loop0: rw=0, want=12304, limit=16 [ 124.909763][ T26] audit: type=1800 audit(1779941301.619:2): pid=5293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.350" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 124.982602][ T5293] syz.0.350 (5293) used greatest stack depth: 20592 bytes left [ 125.471405][ T5327] loop1: detected capacity change from 0 to 32768 [ 125.523367][ T5327] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.361 (5327) [ 125.553797][ T5327] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 125.563005][ T5327] BTRFS info (device loop1): metadata ratio 0 [ 125.569131][ T5327] BTRFS info (device loop1): setting nodatasum [ 125.575501][ T5327] BTRFS info (device loop1): using free space tree [ 125.582080][ T5327] BTRFS info (device loop1): has skinny extents [ 125.771891][ T5327] BTRFS info (device loop1): enabling ssd optimizations [ 126.139941][ T5323] loop2: detected capacity change from 0 to 32768 [ 126.208150][ T5323] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.359 (5323) [ 126.406076][ T4183] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (4183) [ 126.425470][ T5325] loop0: detected capacity change from 0 to 32768 [ 126.478932][ T5325] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.358 (5325) [ 127.376090][ T5354] input: syz0 as /devices/virtual/input/input26 [ 127.490689][ T5325] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 127.540913][ T5325] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 127.580574][ T5325] BTRFS info (device loop0): force lzo compression, level 0 [ 127.614868][ T5325] BTRFS info (device loop0): max_inline at 4096 [ 127.630620][ T5325] BTRFS info (device loop0): allowing degraded mounts [ 127.687744][ T5325] BTRFS info (device loop0): using free space tree [ 127.750583][ T5325] BTRFS info (device loop0): has skinny extents [ 128.278254][ T26] audit: type=1800 audit(1779941304.989:3): pid=5326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.361" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 128.805766][ T5371] input: syz0 as /devices/virtual/input/input27 [ 129.165507][ T5325] BTRFS error (device loop0): open_ctree failed: -12 [ 129.588755][ T4180] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by udevd (4180) [ 129.820926][ T5400] xt_TCPMSS: Only works on TCP SYN packets [ 130.751309][ T5408] input: syz0 as /devices/virtual/input/input28 [ 132.641569][ T5415] crypto_alloc_aead failed rc=-4 [ 132.972789][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.979154][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.125515][ T5406] loop2: detected capacity change from 0 to 32768 [ 133.182174][ T5443] loop1: detected capacity change from 0 to 1764 [ 133.184758][ T5406] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.375 (5406) [ 133.231450][ T5406] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 133.253783][ T5406] BTRFS info (device loop2): turning on sync discard [ 133.318596][ T5406] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 133.373486][ T5406] BTRFS info (device loop2): use zstd compression, level 3 [ 133.404859][ T5406] BTRFS info (device loop2): turning on async discard [ 133.445998][ T5406] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 133.500796][ T5406] BTRFS info (device loop2): trying to use backup root at mount time [ 133.509160][ T5406] BTRFS info (device loop2): enabling auto defrag [ 133.516156][ T5406] BTRFS info (device loop2): using free space tree [ 133.523059][ T5406] BTRFS info (device loop2): has skinny extents [ 133.860652][ T26] audit: type=1800 audit(1779941310.389:4): pid=5451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.382" name="file0" dev="loop1" ino=1923 res=0 errno=0 [ 134.293763][ T5406] BTRFS error (device loop2): open_ctree failed: -12 [ 135.159926][ T5474] loop0: detected capacity change from 0 to 1024 [ 135.529316][ T5474] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 136.520604][ T1111] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 136.559532][ T5496] input: syz0 as /devices/virtual/input/input29 [ 137.710589][ T1111] usb 2-1: Using ep0 maxpacket: 16 [ 137.748790][ T5504] loop4: detected capacity change from 0 to 4096 [ 138.535652][ T5504] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 138.621246][ T1111] usb 2-1: unable to read config index 0 descriptor/all [ 138.638820][ T1111] usb 2-1: can't read configurations, error -71 [ 138.657690][ T5504] ntfs3: loop4: Failed to load $Extend. [ 138.738003][ T4196] Bluetooth: hci4: unexpected event for opcode 0x007f [ 138.900762][ T13] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 139.017593][ T5522] pit: kvm: requested 134933 ns i8254 timer period limited to 200000 ns [ 139.041831][ T5522] pit: kvm: requested 43580 ns i8254 timer period limited to 200000 ns [ 139.151176][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 139.151711][ T5522] pit: kvm: requested 122361 ns i8254 timer period limited to 200000 ns [ 139.463754][ T5522] pit: kvm: requested 66209 ns i8254 timer period limited to 200000 ns [ 139.550769][ T13] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 139.628034][ T5522] pit: kvm: requested 177676 ns i8254 timer period limited to 200000 ns [ 139.645107][ T5522] pit: kvm: requested 45257 ns i8254 timer period limited to 200000 ns [ 139.653708][ T13] usb 1-1: config 0 has no interface number 0 [ 139.660190][ T13] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 139.702812][ T5534] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4195] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5534] [ 139.807118][ T13] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 140.130826][ T13] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 140.167431][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.207417][ T13] usb 1-1: Product: syz [ 140.293189][ T13] usb 1-1: Manufacturer: syz [ 140.318135][ T13] usb 1-1: SerialNumber: syz [ 140.436619][ T13] usb 1-1: config 0 descriptor?? [ 140.461040][ T5511] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 140.480748][ T5511] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 141.445628][ T5511] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 141.500562][ T3522] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 141.510800][ T5511] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 141.626064][ T5547] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 141.667278][ T5547] kvm: pic: level sensitive irq not supported [ 141.667472][ T5547] kvm: pic: non byte read [ 141.687573][ T5547] kvm: pic: level sensitive irq not supported [ 141.687657][ T5547] kvm: pic: non byte read [ 141.707703][ T5547] kvm: pic: level sensitive irq not supported [ 141.707901][ T5547] kvm: pic: non byte read [ 141.720061][ T5547] kvm: pic: level sensitive irq not supported [ 141.720198][ T5547] kvm: pic: non byte read [ 141.741227][ T5547] kvm: pic: level sensitive irq not supported [ 141.741370][ T5547] kvm: pic: non byte read [ 141.760094][ T5547] kvm: pic: level sensitive irq not supported [ 141.760241][ T5547] kvm: pic: non byte read [ 141.760527][ T3522] usb 5-1: Using ep0 maxpacket: 16 [ 141.770954][ T13] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 141.793433][ T5547] kvm: pic: level sensitive irq not supported [ 141.793815][ T5547] kvm: pic: non byte read [ 141.812029][ T5538] loop2: detected capacity change from 0 to 40427 [ 141.867275][ T5551] loop1: detected capacity change from 0 to 256 [ 141.882045][ T5538] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 141.891619][ T5538] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 141.900745][ T3522] usb 5-1: config 0 has an invalid descriptor of length 246, skipping remainder of the config [ 141.911980][ T3522] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 141.927848][ T3522] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 141.938879][ T3522] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.949030][ T5551] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 141.949405][ T3522] usb 5-1: config 0 descriptor?? [ 142.014036][ T5538] F2FS-fs (loop2): Found nat_bits in checkpoint [ 142.051611][ T5551] exFAT-fs (loop1): hint_cluster is invalid (17) [ 142.157805][ T5538] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 142.165536][ T5538] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 142.405969][ T4194] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 142.406009][ T4194] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 142.418695][ T4194] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 142.429522][ T4194] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 142.437735][ T4194] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 142.447213][ T4194] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 142.462769][ T4194] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 142.593248][ T5564] x_tables: duplicate underflow at hook 1 [ 143.516786][ T3522] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 143.620679][ T13] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 143.649500][ T13] asix: probe of 1-1:0.34 failed with error -71 [ 143.680161][ T13] usb 1-1: USB disconnect, device number 7 [ 143.781036][ T4237] usb 5-1: USB disconnect, device number 5 [ 144.421167][ T3522] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 144.632671][ T3522] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 144.666096][ T3522] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 144.740761][ T3522] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.819344][ T3522] usb 3-1: config 0 descriptor?? [ 144.865507][ T5570] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 144.893545][ T3522] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 146.203235][ T5607] loop1: detected capacity change from 0 to 512 [ 146.236417][ T5607] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 146.329013][ T5607] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 146.390683][ T1111] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 146.433688][ T5607] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 146.483900][ T5607] System zones: 1-12 [ 146.503431][ T5607] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 146.556774][ T5607] EXT4-fs (loop1): 1 truncate cleaned up [ 146.563114][ T5607] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 146.693962][ T26] audit: type=1800 audit(1779941323.409:5): pid=5607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.428" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 146.770684][ T1111] usb 1-1: config 0 has no interfaces? [ 146.894647][ T1111] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 146.914355][ T1111] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 146.976726][ T1111] usb 1-1: Product: syz [ 147.049011][ T1111] usb 1-1: Manufacturer: syz [ 147.087725][ T1111] usb 1-1: config 0 descriptor?? [ 147.229208][ T13] usb 3-1: USB disconnect, device number 8 [ 147.251430][ T5622] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.431'. [ 147.515596][ T7] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 147.576360][ T3522] usb 1-1: USB disconnect, device number 8 [ 147.761772][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 147.882068][ T7] usb 2-1: config 0 has an invalid descriptor of length 246, skipping remainder of the config [ 147.936931][ T7] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 147.960156][ T7] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 147.993448][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.021732][ T7] usb 2-1: config 0 descriptor?? [ 148.370872][ T5632] loop4: detected capacity change from 0 to 128 [ 148.557551][ T5632] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 149.136096][ T5627] loop2: detected capacity change from 0 to 32768 [ 150.570854][ T13] usb 2-1: USB disconnect, device number 8 [ 150.937530][ T5647] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4195] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5647] [ 150.961702][ T5627] XFS (loop2): Mounting V5 Filesystem [ 150.964552][ T5654] loop1: detected capacity change from 0 to 64 [ 150.983922][ T5642] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 151.051241][ T5627] XFS (loop2): log mount failed [ 153.010562][ T4237] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 153.458132][ T5693] loop4: detected capacity change from 0 to 256 [ 153.651044][ T4237] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 153.673714][ T4237] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.740935][ T4237] usb 3-1: config 0 descriptor?? [ 153.830003][ T4237] cp210x 3-1:0.0: cp210x converter detected [ 153.875246][ T5693] exfat: Unknown parameter 'nÿecase' [ 154.190532][ T3522] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 154.430576][ T3522] usb 2-1: Using ep0 maxpacket: 16 [ 154.502101][ T4237] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 154.534384][ T4237] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 154.546198][ T5705] sctp: [Deprecated]: syz.4.456 (pid 5705) Use of struct sctp_assoc_value in delayed_ack socket option. [ 154.546198][ T5705] Use struct sctp_sack_info instead [ 154.600737][ T3522] usb 2-1: config 0 has an invalid descriptor of length 246, skipping remainder of the config [ 154.650819][ T4237] usb 3-1: cp210x converter now attached to ttyUSB0 [ 154.758917][ T4237] usb 3-1: USB disconnect, device number 9 [ 154.934454][ T4237] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 155.078749][ T4237] cp210x 3-1:0.0: device disconnected [ 155.448742][ T3522] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 155.457858][ T3522] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 155.466970][ T3522] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.487626][ T3522] usb 2-1: config 0 descriptor?? [ 155.514712][ T5709] loop4: detected capacity change from 0 to 256 [ 155.732739][ T5713] loop0: detected capacity change from 0 to 128 [ 156.140576][ T4238] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 156.190697][ T4237] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 156.240548][ T4234] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 156.555645][ T4237] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.567956][ T4237] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 156.570652][ T4238] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 156.596174][ T4238] usb 5-1: config 0 has no interface number 0 [ 156.597686][ T4237] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.602944][ T4238] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 156.618958][ T4237] usb 3-1: config 0 descriptor?? [ 156.650790][ T4234] usb 1-1: unable to get BOS descriptor or descriptor too short [ 156.662997][ T4237] pwc: Askey VC010 type 2 USB webcam detected. [ 156.730872][ T4234] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 156.850753][ T4238] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 156.859850][ T4238] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.880533][ T4238] usb 5-1: Product: syz [ 156.889711][ T4238] usb 5-1: Manufacturer: syz [ 156.894449][ T4238] usb 5-1: SerialNumber: syz [ 156.904163][ T4234] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 156.909826][ T4238] usb 5-1: config 0 descriptor?? [ 156.917990][ T4234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.930073][ T4234] usb 1-1: Product: syz [ 156.937075][ T4234] usb 1-1: Manufacturer: syz [ 156.945698][ T4234] usb 1-1: SerialNumber: syz [ 156.962561][ T4238] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 157.082353][ T5726] fuse: Unknown parameter 'fd0x0000000000000006' [ 157.110742][ T4237] pwc: recv_control_msg error -32 req 02 val 2b00 [ 157.127632][ T4238] usb 2-1: USB disconnect, device number 9 [ 157.150629][ T4237] pwc: recv_control_msg error -32 req 02 val 2700 [ 157.210631][ T4237] pwc: recv_control_msg error -32 req 02 val 2c00 [ 157.264791][ T4234] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 157.278266][ T4237] pwc: recv_control_msg error -32 req 04 val 1000 [ 157.350632][ T4234] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 157.361560][ T4237] pwc: recv_control_msg error -32 req 04 val 1300 [ 157.410634][ T4237] pwc: recv_control_msg error -32 req 04 val 1400 [ 157.450650][ T4237] pwc: recv_control_msg error -32 req 02 val 2000 [ 157.493064][ T4234] usb 1-1: USB disconnect, device number 9 [ 157.575844][ T5736] loop1: detected capacity change from 0 to 16 [ 157.616507][ T5469] usb 5-1: USB disconnect, device number 6 [ 157.654100][ T5736] erofs: (device loop1): mounted with root inode @ nid 36. [ 157.729060][ T5736] attempt to access beyond end of device [ 157.729060][ T5736] loop1: rw=524288, want=1072, limit=16 [ 157.740685][ T4237] pwc: recv_control_msg error -71 req 04 val 1500 [ 157.770575][ T4237] pwc: recv_control_msg error -71 req 02 val 2500 [ 157.820734][ T4237] pwc: recv_control_msg error -71 req 02 val 2400 [ 157.851529][ T4196] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 157.876760][ T4183] udevd[4183]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.926912][ T5736] erofs: (device loop1): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 89 [ 157.937350][ T4237] pwc: recv_control_msg error -71 req 02 val 2600 [ 158.010896][ T4237] pwc: recv_control_msg error -71 req 02 val 2900 [ 158.026794][ T5736] erofs: (device loop1): z_erofs_readahead: readahead error at page 9 @ nid 89 [ 158.061589][ T4237] pwc: recv_control_msg error -71 req 02 val 2800 [ 158.074540][ T5741] loop0: detected capacity change from 0 to 256 [ 158.113701][ T5736] erofs: (device loop1): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 89 [ 158.130743][ T4237] pwc: recv_control_msg error -71 req 04 val 1100 [ 158.160168][ T5741] exfat: Deprecated parameter 'utf8' [ 158.197036][ C1] usb 5-1: yurex_control_callback - control failed: -71 [ 158.202925][ T4237] pwc: recv_control_msg error -71 req 04 val 1200 [ 158.213842][ T5469] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 158.217345][ T5736] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 89 [ 158.229228][ T5736] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 158.269099][ T5741] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 158.300838][ T5736] attempt to access beyond end of device [ 158.300838][ T5736] loop1: rw=524288, want=24, limit=16 [ 158.328634][ T4237] pwc: Registered as video103. [ 158.386469][ T4237] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input31 [ 158.396752][ T5741] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5f1fc80d, utbl_chksum : 0xe619d30d) [ 158.419549][ T5736] attempt to access beyond end of device [ 158.419549][ T5736] loop1: rw=524288, want=56, limit=16 [ 158.521061][ T5736] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 158.521518][ T4237] usb 3-1: USB disconnect, device number 10 [ 158.549155][ T26] audit: type=1800 audit(1779941335.259:6): pid=5736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.468" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 158.559992][ T5736] syz.1.468 (5736) used greatest stack depth: 19888 bytes left [ 158.956482][ T5754] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 158.988396][ T5754] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 159.240707][ T7] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 159.678454][ T5760] fuse: Unknown parameter 'fd0x0000000000000006' [ 159.811596][ T5764] loop2: detected capacity change from 0 to 512 [ 159.886933][ T5764] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 159.898807][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 159.975005][ T5764] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.477: invalid indirect mapped block 9 (level 0) [ 160.029125][ T5764] EXT4-fs (loop2): 1 truncate cleaned up [ 160.035311][ T7] usb 5-1: config 0 has an invalid descriptor of length 246, skipping remainder of the config [ 160.041010][ T5764] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000008000000,nodiscard,,errors=continue. Quota mode: none. [ 160.045973][ T7] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 160.071333][ T7] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 160.090657][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.101216][ T7] usb 5-1: config 0 descriptor?? [ 161.167268][ T5784] input: syz0 as /devices/virtual/input/input32 [ 162.273483][ T5806] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 162.344455][ T5806] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 162.672245][ T5816] tipc: Started in network mode [ 162.686727][ T5816] tipc: Node identity 1a7ef544b5e9, cluster identity 4711 [ 162.718892][ T5816] tipc: Enabled bearer , priority 0 [ 162.727740][ T5820] device syzkaller0 entered promiscuous mode [ 162.762413][ T5816] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 162.809060][ T4237] usb 5-1: USB disconnect, device number 7 [ 162.953921][ T5816] tipc: Resetting bearer [ 162.987868][ T5815] tipc: Resetting bearer [ 163.217831][ T5830] input: syz0 as /devices/virtual/input/input33 [ 164.964830][ T5815] tipc: Disabling bearer [ 165.036655][ T5838] loop4: detected capacity change from 0 to 512 [ 165.072005][ T7] tipc: Node number set to 2945971524 [ 165.082786][ T5832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.495'. [ 165.194019][ T5838] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 165.263802][ T5838] EXT4-fs (loop4): 1 truncate cleaned up [ 165.269559][ T5838] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 165.400608][ T7] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 165.640691][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 165.990863][ T7] usb 2-1: config 0 has no interfaces? [ 166.350904][ T7] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 166.385325][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.470229][ T7] usb 2-1: Product: syz [ 166.491001][ T7] usb 2-1: Manufacturer: syz [ 166.495654][ T7] usb 2-1: SerialNumber: syz [ 167.211219][ T7] usb 2-1: config 0 descriptor?? [ 167.455659][ T13] usb 2-1: USB disconnect, device number 10 [ 167.490573][ T1111] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 167.544303][ T5866] loop0: detected capacity change from 0 to 256 [ 167.669410][ T5870] loop2: detected capacity change from 0 to 128 [ 167.744941][ T1111] usb 5-1: Using ep0 maxpacket: 32 [ 167.873519][ T1111] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.893909][ T1111] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 167.903346][ T1111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.914486][ T1111] usb 5-1: config 0 descriptor?? [ 167.951914][ T1111] hub 5-1:0.0: bad descriptor, ignoring hub [ 167.983174][ T1111] hub: probe of 5-1:0.0 failed with error -5 [ 168.017972][ T1111] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 168.059146][ T5876] loop1: detected capacity change from 0 to 164 [ 168.085621][ T5877] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 168.106177][ T5877] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 168.302811][ T5876] Unable to read rock-ridge attributes [ 168.528136][ T5884] overlayfs: failed to clone upperpath [ 168.764457][ T1111] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 168.827199][ T5890] loop0: detected capacity change from 0 to 128 [ 168.929912][ T5890] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 169.016231][ T1111] usb 2-1: Using ep0 maxpacket: 16 [ 169.037890][ T5890] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 169.083741][ T5890] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 169.150632][ T1111] usb 2-1: config 0 has an invalid descriptor of length 246, skipping remainder of the config [ 169.166289][ T1111] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 169.184083][ T1111] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 169.211167][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.229669][ T1111] usb 2-1: config 0 descriptor?? [ 169.234920][ T2327] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 169.531521][ T5882] netlink: 'syz.1.511': attribute type 16 has an invalid length. [ 169.539690][ T5882] netlink: 'syz.1.511': attribute type 3 has an invalid length. [ 169.547654][ T5882] netlink: 132 bytes leftover after parsing attributes in process `syz.1.511'. [ 169.565920][ T1111] usb 2-1: USB disconnect, device number 11 [ 169.630788][ T2327] usb 3-1: config 0 has no interfaces? [ 169.671582][ T5380] usb 5-1: USB disconnect, device number 8 [ 169.800770][ T2327] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 169.810192][ T2327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.818322][ T2327] usb 3-1: Product: syz [ 169.822690][ T2327] usb 3-1: Manufacturer: syz [ 169.827730][ T2327] usb 3-1: SerialNumber: syz [ 169.843538][ T2327] usb 3-1: config 0 descriptor?? [ 171.247336][ T5892] device veth0_vlan left promiscuous mode [ 171.289871][ T5892] device veth0_vlan entered promiscuous mode [ 171.704505][ T4236] usb 3-1: USB disconnect, device number 11 [ 171.750546][ T5916] loop0: detected capacity change from 0 to 24 [ 171.875485][ T5915] romfs: read error for inode 0x8000 [ 172.386921][ T5921] loop4: detected capacity change from 0 to 32768 [ 172.455173][ T5921] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.525 (5921) [ 172.480628][ T5923] mmap: syz.3.526 (5923) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 172.524423][ T5921] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 172.533197][ T5921] BTRFS info (device loop4): metadata ratio 0 [ 172.539265][ T5921] BTRFS info (device loop4): setting nodatasum [ 172.545485][ T5921] BTRFS info (device loop4): using free space tree [ 172.552383][ T5921] BTRFS info (device loop4): has skinny extents [ 172.560555][ T2327] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 172.569332][ T5925] fuse: Unknown parameter 'ÿ Ž›2rR îÃêø½HIBK³æ Œ*ù§Í' [ 172.712380][ T5935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.527'. [ 172.742387][ T5937] netlink: 'syz.3.529': attribute type 16 has an invalid length. [ 172.752077][ T5937] netlink: 'syz.3.529': attribute type 3 has an invalid length. [ 172.810536][ T2327] usb 2-1: Using ep0 maxpacket: 32 [ 172.811851][ T5937] netlink: 132 bytes leftover after parsing attributes in process `syz.3.529'. [ 172.919302][ T5921] BTRFS info (device loop4): enabling ssd optimizations [ 173.118757][ T2327] usb 2-1: unable to get BOS descriptor or descriptor too short [ 173.177548][ T5951] loop2: detected capacity change from 0 to 4096 [ 173.200624][ T2327] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 189, changing to 11 [ 173.220643][ T2327] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 12102, setting to 1024 [ 173.242395][ T2327] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 173.264146][ T2327] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 173.325646][ T26] audit: type=1800 audit(1779941350.039:7): pid=5960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.525" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 173.346728][ T5951] NILFS (loop2): invalid segment: Checksum error in segment payload [ 173.434210][ T5951] NILFS (loop2): trying rollback from an earlier position [ 173.450917][ T2327] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 173.467263][ T2327] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.487145][ T2327] usb 2-1: Product: syz [ 173.491942][ T2327] usb 2-1: Manufacturer: syz [ 173.507484][ T2327] usb 2-1: SerialNumber: syz [ 173.642766][ T5965] input: syz0 as /devices/virtual/input/input34 [ 173.993791][ T5951] NILFS (loop2): recovery complete [ 174.146974][ T5967] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 174.470761][ T5920] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 174.477881][ T5920] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 174.614021][ T5972] loop0: detected capacity change from 0 to 1024 [ 174.795046][ T5972] EXT4-fs (loop0): Ignoring removed nobh option [ 174.856077][ T5972] EXT4-fs (loop0): Ignoring removed nobh option [ 174.905495][ T5972] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 175.018031][ T5972] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8002c098, mo2=0002] [ 175.067327][ T5972] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,debug,nobh,commit=0x0000000000000005,inode_readahead_blks=0x0000000000040000,nobh,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 175.480934][ T2327] cdc_ncm 2-1:1.0: bind() failure [ 175.528937][ T2327] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 175.580345][ T2327] cdc_ncm 2-1:1.1: bind() failure [ 175.697758][ T2327] usb 2-1: USB disconnect, device number 12 [ 176.103321][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 177.083003][ T5995] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 177.422905][ T6012] loop0: detected capacity change from 0 to 256 [ 177.688098][ T6014] syz.2.547 (6014) used greatest stack depth: 16464 bytes left [ 178.901296][ T5409] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 179.160696][ T5409] usb 3-1: Using ep0 maxpacket: 32 [ 179.336005][ T5409] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 179.354480][ T5409] usb 3-1: config 0 has no interface number 0 [ 179.362819][ T5409] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 179.375730][ T5409] usb 3-1: config 0 interface 85 has no altsetting 0 [ 180.219214][ T5409] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 180.229008][ T5409] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.237488][ T5409] usb 3-1: Product: syz [ 180.246449][ T5409] usb 3-1: Manufacturer: syz [ 180.256764][ T5409] usb 3-1: SerialNumber: syz [ 180.273676][ T5409] usb 3-1: config 0 descriptor?? [ 181.020687][ T6071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.563'. [ 181.057227][ T6028] loop2: detected capacity change from 0 to 2048 [ 181.130726][ T6045] Bluetooth: hci0: command 0x0406 tx timeout [ 181.137334][ T6045] Bluetooth: hci2: command 0x0406 tx timeout [ 181.148008][ T6045] Bluetooth: hci1: command 0x0406 tx timeout [ 181.159771][ T6028] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.245229][ T6079] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 181.310079][ T6079] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.420910][ T5409] appletouch 3-1:0.85: Geyser mode initialized. [ 181.430677][ T5409] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input35 [ 181.646853][ T6045] usb 3-1: USB disconnect, device number 12 [ 181.662646][ T5380] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 181.722410][ T6045] appletouch 3-1:0.85: input: appletouch disconnected [ 182.988002][ T5380] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 182.998213][ T5380] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 183.021698][ T5380] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 183.035211][ T5380] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 183.047316][ T5380] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 183.210700][ T4238] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 183.218468][ T5380] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 183.253544][ T5380] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 183.268004][ T5380] usb 5-1: Product: syz [ 183.279751][ T5380] usb 5-1: Manufacturer: syz [ 183.353486][ T5380] cdc_wdm 5-1:1.0: skipping garbage [ 183.363958][ T5380] cdc_wdm 5-1:1.0: skipping garbage [ 183.393944][ T5380] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 183.402156][ T5380] cdc_wdm 5-1:1.0: Unknown control protocol [ 183.500663][ T4238] usb 3-1: Using ep0 maxpacket: 16 [ 183.518890][ T6113] input: syz0 as /devices/virtual/input/input36 [ 183.680756][ T4238] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 183.694629][ T4238] usb 3-1: config 0 has no interface number 0 [ 183.730729][ T4238] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 183.773634][ T4238] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 184.026937][ T6128] input: syz0 as /devices/virtual/input/input37 [ 184.090710][ T4238] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 184.137570][ T4238] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.289230][ T4238] usb 3-1: Product: syz [ 184.401915][ T4238] usb 3-1: Manufacturer: syz [ 184.504813][ T4238] usb 3-1: SerialNumber: syz [ 184.659716][ T4238] usb 3-1: config 0 descriptor?? [ 184.870949][ T6101] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 184.882226][ T6101] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 184.953007][ T5383] usb 5-1: USB disconnect, device number 9 [ 185.021688][ T5469] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 185.108691][ T6101] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 185.141106][ T6101] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 185.390730][ T5469] usb 1-1: config 0 has no interfaces? [ 185.404570][ T4238] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 185.477015][ T5469] usb 1-1: config 0 has no interfaces? [ 185.560766][ T5469] usb 1-1: config 0 has no interfaces? [ 185.566297][ T5469] usb 1-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 185.595936][ T5469] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.629195][ T5469] usb 1-1: config 0 descriptor?? [ 185.829719][ T6131] loop1: detected capacity change from 0 to 40427 [ 185.876378][ T6131] F2FS-fs (loop1): Unrecognized mount option "age_extent_cache" or missing value [ 185.897397][ T5469] usb 1-1: USB disconnect, device number 10 [ 185.990401][ T6135] loop4: detected capacity change from 0 to 32768 [ 186.026362][ T6135] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop4 scanned by syz.4.587 (6135) [ 186.099607][ T6135] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 186.115876][ T4711] udevd[4711]: incorrect btrfs checksum on /dev/loop4 [ 186.129189][ T6135] BTRFS error (device loop4): superblock checksum mismatch [ 186.174152][ T6135] BTRFS error (device loop4): open_ctree failed: -22 [ 186.284638][ T4711] udevd[4711]: incorrect btrfs checksum on /dev/loop4 [ 186.500735][ T4238] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 186.520714][ T4238] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 186.560618][ T4238] asix: probe of 3-1:0.34 failed with error -71 [ 186.597935][ T4238] usb 3-1: USB disconnect, device number 13 [ 188.783675][ T6141] loop4: detected capacity change from 0 to 32768 [ 189.444680][ T6166] loop2: detected capacity change from 0 to 512 [ 189.513719][ T6166] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 189.588714][ T6166] EXT4-fs (loop2): 1 truncate cleaned up [ 189.755288][ T6166] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x000000000000000d,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,auto_da_alloc,jqfmt=vfsv0,data=journal,,errors=continue. Quota mode: none. [ 191.469292][ T6038] Bluetooth: hci4: command 0x0406 tx timeout [ 191.680752][ T6170] loop4: detected capacity change from 0 to 32768 [ 191.774689][ T6170] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.599 (6170) [ 191.826557][ T6170] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 191.861117][ T6170] BTRFS info (device loop4): using free space tree [ 191.890579][ T6170] BTRFS info (device loop4): has skinny extents [ 192.038366][ T6168] loop1: detected capacity change from 0 to 40427 [ 192.201300][ T6168] F2FS-fs (loop1): invalid crc value [ 192.263545][ T6170] BTRFS info (device loop4): enabling ssd optimizations [ 192.334989][ T6168] F2FS-fs (loop1): Found nat_bits in checkpoint [ 192.662607][ T6168] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 195.553277][ T6220] input: syz0 as /devices/virtual/input/input38 [ 195.650899][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.657229][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.121382][ T4239] Bluetooth: hci0: command 0x0401 tx timeout [ 196.288800][ T6229] input: syz0 as /devices/virtual/input/input39 [ 196.310392][ T6231] device bridge1 entered promiscuous mode [ 197.658818][ T6242] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 197.739807][ T6242] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 197.974034][ T5471] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 198.017343][ T6259] loop0: detected capacity change from 0 to 4096 [ 198.107558][ T6261] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 198.640867][ T5471] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.750076][ T5471] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.307943][ T5471] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 199.327984][ T5471] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.523151][ T5471] usb 2-1: config 0 descriptor?? [ 200.422242][ T5471] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 200.820788][ T5471] cp2112 0003:10C4:EA90.0004: error requesting version [ 200.830365][ T6280] loop0: detected capacity change from 0 to 2048 [ 200.840526][ T5471] cp2112: probe of 0003:10C4:EA90.0004 failed with error -71 [ 200.909093][ T5471] usb 2-1: USB disconnect, device number 13 [ 201.097086][ T6285] fido_id[6285]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 205.435706][ T6326] loop4: detected capacity change from 0 to 1024 [ 205.593240][ T6326] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 205.707514][ T6326] JBD2: no valid journal superblock found [ 205.713570][ T6326] EXT4-fs (loop4): error loading journal [ 206.652806][ T6326] binder: BINDER_SET_CONTEXT_MGR already set [ 206.659234][ T6326] binder: 6325:6326 ioctl 4018620d 200000004a80 returned -16 [ 207.280785][ T6340] loop5: detected capacity change from 0 to 7 [ 207.298139][ T6340] Dev loop5: unable to read RDB block 7 [ 207.304356][ T6340] loop5: unable to read partition table [ 207.310664][ T6340] loop5: partition table beyond EOD, truncated [ 207.316987][ T6340] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 207.347903][ T6340] binder: 6338:6340 ioctl c0285840 200000000000 returned -22 [ 209.656025][ T6350] loop0: detected capacity change from 0 to 4096 [ 209.707572][ T6350] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 209.749304][ T6350] EXT4-fs (loop0): inline encryption not supported [ 209.781047][ T6350] EXT4-fs (loop0): Test dummy encryption mode enabled [ 209.895642][ T6350] EXT4-fs (loop0): inline encryption not supported [ 210.665255][ T6350] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c128, mo2=0003] [ 210.682159][ T6350] System zones: 0-5 [ 210.716315][ T6355] loop4: detected capacity change from 0 to 2048 [ 210.940549][ T6355] EXT4-fs (loop4): cluster size (2048) smaller than block size (4096) [ 210.958816][ T6350] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,errors=remount-ro,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,inlinecrypt,. Quota mode: writeback. [ 212.111635][ T6364] tmpfs: Bad value for 'mpol' [ 213.026610][ T6377] loop4: detected capacity change from 0 to 32768 [ 213.158116][ T6377] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.653 (6377) [ 213.360540][ T6377] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 213.369686][ T6377] BTRFS info (device loop4): metadata ratio 0 [ 213.376112][ T6377] BTRFS info (device loop4): setting nodatasum [ 213.382400][ T6377] BTRFS info (device loop4): using free space tree [ 213.389189][ T6377] BTRFS info (device loop4): has skinny extents [ 213.994643][ T6378] chnl_net:caif_netlink_parms(): no params data found [ 214.281018][ T6377] BTRFS info (device loop4): enabling ssd optimizations [ 214.480297][ T6378] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.700415][ T6378] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.737913][ T26] audit: type=1800 audit(1779941391.239:8): pid=6415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.653" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 215.204293][ T13] Bluetooth: hci5: command 0x0409 tx timeout [ 215.223024][ T6378] device bridge_slave_0 entered promiscuous mode [ 215.234725][ T6378] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.242286][ T6378] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.272525][ T6378] device bridge_slave_1 entered promiscuous mode [ 215.736810][ T6378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.930537][ T6378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.530520][ T4180] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop4 scanned by udevd (4180) [ 216.650593][ T13] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 217.380708][ T6038] Bluetooth: hci5: command 0x041b tx timeout [ 217.460329][ T6378] team0: Port device team_slave_0 added [ 217.498232][ T6378] team0: Port device team_slave_1 added [ 217.609083][ T6378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.620810][ T13] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 217.646833][ T6378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.650269][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.784756][ T6378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.822964][ T13] usb 2-1: Product: syz [ 217.836765][ T13] usb 2-1: Manufacturer: syz [ 217.842359][ T6439] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 217.850847][ T6438] loop4: detected capacity change from 0 to 4096 [ 217.857532][ T13] usb 2-1: SerialNumber: syz [ 217.882964][ T13] usb 2-1: config 0 descriptor?? [ 218.104389][ T6438] NILFS (loop4): invalid segment: Checksum error in segment payload [ 218.361708][ T6438] NILFS (loop4): trying rollback from an earlier position [ 218.880757][ T6439] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 218.905197][ T6438] NILFS (loop4): recovery complete [ 218.920820][ T13] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 218.944478][ T6446] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 219.048616][ T6378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.059361][ T6378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.137100][ T6378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.331279][ T6378] device hsr_slave_0 entered promiscuous mode [ 219.346683][ T6378] device hsr_slave_1 entered promiscuous mode [ 219.372276][ T6378] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.394610][ T6378] Cannot create hsr debugfs directory [ 219.440533][ T4238] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 219.453946][ T6038] Bluetooth: hci5: command 0x040f tx timeout [ 219.690565][ T4238] usb 5-1: Using ep0 maxpacket: 16 [ 219.747155][ T6378] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 219.772060][ T6378] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 219.810726][ T4238] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 219.821854][ T6378] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 219.829201][ T4238] usb 5-1: config 0 has no interface number 0 [ 219.853155][ T6378] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 219.864116][ T4238] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 219.904961][ T4238] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 220.056385][ T6378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.090878][ T4238] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 220.120536][ T4238] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.147729][ T4238] usb 5-1: Product: syz [ 220.160550][ T4238] usb 5-1: Manufacturer: syz [ 220.170679][ T4238] usb 5-1: SerialNumber: syz [ 220.179309][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.200780][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.210003][ T4238] usb 5-1: config 0 descriptor?? [ 220.229918][ T6378] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.240815][ T6453] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 220.249340][ T6453] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 220.270145][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.285049][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.287840][ T13] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 220.301733][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.308851][ T4273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.363620][ T13] usb 2-1: USB disconnect, device number 14 [ 220.371659][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.390910][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.411693][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.425626][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.432780][ T4273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.441480][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.461271][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.478826][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.500860][ T6453] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 220.516773][ T6453] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 220.528953][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.558657][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.591425][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.615580][ T6378] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 220.626845][ T6378] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.641115][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.650126][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.658997][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.667961][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.699639][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.737829][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.780710][ T4238] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 221.100237][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 221.119509][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 221.157697][ T6475] hub 8-0:1.0: USB hub found [ 221.168560][ T6378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.183322][ T6475] hub 8-0:1.0: 1 port detected [ 221.220657][ T4238] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 221.241545][ T4238] asix: probe of 5-1:0.34 failed with error -71 [ 221.280900][ T4238] usb 5-1: USB disconnect, device number 10 [ 221.547539][ T5471] Bluetooth: hci5: command 0x0419 tx timeout [ 221.640959][ T6482] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 221.674272][ T6482] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 221.869499][ T6487] loop4: detected capacity change from 0 to 65 [ 221.910927][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 221.935289][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 222.000241][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 222.030846][ T6487] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 222.066210][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 222.113107][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 222.281169][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 222.310814][ T6378] device veth0_vlan entered promiscuous mode [ 222.417862][ T6489] sd 0:0:1:0: device reset [ 222.872341][ T6378] device veth1_vlan entered promiscuous mode [ 222.920718][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 223.031048][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 223.040198][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 223.231913][ T6378] device veth0_macvtap entered promiscuous mode [ 224.087827][ T6378] device veth1_macvtap entered promiscuous mode [ 224.201477][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 224.297963][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 224.388219][ T6378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.460528][ T6378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.473135][ T6378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.484292][ T6378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.518708][ T6510] loop4: detected capacity change from 0 to 16 [ 224.644417][ T6378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.728700][ T6378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.746800][ T6378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.770410][ T6378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.975036][ T6378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.168885][ T6378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.355275][ T6378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.391785][ T6510] erofs: (device loop4): mounted with root inode @ nid 36. [ 225.468678][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 225.492450][ T6509] attempt to access beyond end of device [ 225.492450][ T6509] loop4: rw=524288, want=1072, limit=16 [ 225.577807][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 225.608891][ T6522] loop5: detected capacity change from 0 to 7 [ 225.625028][ T6522] Dev loop5: unable to read RDB block 7 [ 225.630939][ T6522] loop5: unable to read partition table [ 225.637293][ T6522] loop5: partition table beyond EOD, truncated [ 225.643732][ T6522] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 225.674721][ T6522] binder: 6519:6522 ioctl c0285840 200000000000 returned -22 [ 225.808890][ T6378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.845181][ T4196] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 226.093191][ T6378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.128335][ T6509] erofs: (device loop4): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 89 [ 226.264693][ T6378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.302648][ T6509] erofs: (device loop4): z_erofs_readahead: readahead error at page 9 @ nid 89 [ 226.401400][ T6378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.460944][ T6509] erofs: (device loop4): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 89 [ 226.471049][ T6509] erofs: (device loop4): z_erofs_readahead: readahead error at page 8 @ nid 89 [ 226.480111][ T6509] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 226.489324][ T6509] attempt to access beyond end of device [ 226.489324][ T6509] loop4: rw=524288, want=24, limit=16 [ 226.500916][ T6509] attempt to access beyond end of device [ 226.500916][ T6509] loop4: rw=524288, want=56, limit=16 [ 226.514292][ T6509] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 226.532541][ T6378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.548279][ T26] audit: type=1800 audit(1779941403.259:9): pid=6509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.683" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 226.579423][ T6378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.626325][ T6378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.645015][ T6378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.658953][ T6378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.669693][ T6378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.681111][ T6378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.699080][ T6378] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.707942][ T6378] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.758980][ T6378] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.793281][ T6378] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.834220][ T6530] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 226.987170][ T6537] loop1: detected capacity change from 0 to 24 [ 227.814177][ T6536] romfs: read error for inode 0x8000 [ 228.012421][ T6530] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 228.038306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 228.088842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 228.094093][ T6539] loop4: detected capacity change from 0 to 512 [ 230.331078][ T1258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.764619][ T6569] input: syz0 as /devices/virtual/input/input41 [ 234.888425][ T1258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.977293][ T6564] syz.0.694 (6564): drop_caches: 2 [ 234.987620][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 235.063454][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.086015][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.243698][ T4697] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.313258][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 235.428036][ T4697] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.542947][ T4697] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.673073][ T4697] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.759930][ T6584] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.699'. [ 236.258956][ T6592] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input42 [ 236.267819][ T4697] tipc: Disabling bearer [ 236.293546][ T4697] tipc: Left network mode [ 236.886249][ T6607] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4190] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6607] [ 237.529373][ T6610] loop5: detected capacity change from 0 to 32768 [ 237.744020][ T6612] loop0: detected capacity change from 0 to 32768 [ 237.772464][ T6604] IPVS: Error connecting to the multicast addr [ 242.157225][ T6655] loop5: detected capacity change from 0 to 4096 [ 242.418901][ T6666] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4197] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6666] [ 244.603010][ T6655] EXT4-fs (loop5): Test dummy encryption mode enabled [ 244.655167][ T6655] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 247.327640][ T6708] loop1: detected capacity change from 0 to 512 [ 247.371316][ T4697] device hsr_slave_0 left promiscuous mode [ 247.991985][ T4697] device hsr_slave_1 left promiscuous mode [ 248.009799][ T4697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.175700][ T4697] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.206946][ T4697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.228247][ T4697] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.682028][ T4697] device bridge_slave_1 left promiscuous mode [ 249.369303][ T4697] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.724381][ T6735] loop5: detected capacity change from 0 to 24 [ 249.768860][ T4697] device bridge_slave_0 left promiscuous mode [ 249.835555][ T6732] romfs: read error for inode 0x8000 [ 249.921463][ T4697] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.037017][ T4697] device veth1_macvtap left promiscuous mode [ 250.055052][ T4697] device veth0_macvtap left promiscuous mode [ 250.407049][ T4697] team0 (unregistering): Port device team_slave_1 removed [ 250.425963][ T4697] team0 (unregistering): Port device team_slave_0 removed [ 250.439643][ T4697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.466508][ T4697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.579886][ T4697] bond0 (unregistering): Released all slaves [ 250.623118][ T6747] loop0: detected capacity change from 0 to 128 [ 250.673151][ T6717] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 250.695363][ T6717] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 250.713146][ T6747] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 250.829977][ T6737] netlink: 48 bytes leftover after parsing attributes in process `syz.5.733'. [ 250.850888][ T6747] ext4 filesystem being mounted at /145/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 251.335847][ T4196] Bluetooth: hci4: unexpected event for opcode 0x041b [ 251.873208][ T6763] loop5: detected capacity change from 0 to 128 [ 252.017433][ T6763] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 253.105463][ T6778] loop1: detected capacity change from 0 to 24 [ 255.853545][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.859986][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.959301][ T6780] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6378] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6780] [ 256.097489][ T6780] UDF-fs: error (device loop5): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 256.509605][ T6771] romfs: read error for inode 0x8000 [ 259.013892][ T6809] block device autoloading is deprecated and will be removed. [ 259.455471][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 259.549395][ T4196] Bluetooth: hci4: unexpected event for opcode 0x041b [ 259.605813][ T6815] loop5: detected capacity change from 0 to 512 [ 260.266634][ T6807] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 260.288793][ T6819] loop4: detected capacity change from 0 to 512 [ 260.464104][ T6823] loop1: detected capacity change from 0 to 512 [ 260.495419][ T6819] EXT4-fs (loop4): Test dummy encryption mode enabled [ 261.358112][ T6823] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 261.402050][ T6835] loop0: detected capacity change from 0 to 128 [ 261.423428][ T6823] EXT4-fs (loop1): invalid journal inode [ 261.439754][ T6823] EXT4-fs (loop1): can't get journal size [ 261.649928][ T6819] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.755: inode has both inline data and extents flags [ 261.663423][ T6823] EXT4-fs (loop1): 1 truncate cleaned up [ 261.675116][ T6823] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 261.676786][ T6835] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 261.941280][ T6819] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.755: couldn't read orphan inode 15 (err -117) [ 262.402023][ T6819] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 262.951068][ T6847] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 263.702254][ T6819] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 265.301018][ T6870] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4195] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6870] [ 265.561829][ T6877] netlink: 'syz.5.767': attribute type 4 has an invalid length. [ 268.219329][ T6906] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 268.945216][ T6919] loop0: detected capacity change from 0 to 512 [ 269.093440][ T6919] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 269.129827][ T6919] EXT4-fs (loop0): invalid journal inode [ 269.157748][ T6919] EXT4-fs (loop0): can't get journal size [ 269.375718][ T6919] EXT4-fs (loop0): 1 truncate cleaned up [ 269.399611][ T6919] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 274.267293][ T6992] loop4: detected capacity change from 0 to 64 [ 274.900114][ T6992] hfs: request for non-existent node 131072 in B*Tree [ 274.915910][ T6992] hfs: request for non-existent node 131072 in B*Tree [ 275.020850][ T7001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.797'. [ 276.070517][ T6045] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 276.217626][ T1109] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 276.244392][ T7029] netlink: 48 bytes leftover after parsing attributes in process `syz.1.805'. [ 276.330615][ T6045] usb 5-1: Using ep0 maxpacket: 32 [ 276.450618][ T6045] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 276.465920][ T6045] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 276.506783][ T6045] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 276.553179][ T6045] usb 5-1: config 0 interface 0 has no altsetting 0 [ 276.731724][ T6045] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 276.751105][ T6045] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 276.987239][ T6045] usb 5-1: Product: syz [ 277.016452][ T6045] usb 5-1: Manufacturer: syz [ 277.022075][ T6045] usb 5-1: SerialNumber: syz [ 277.030768][ T1109] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 277.046157][ T6045] usb 5-1: config 0 descriptor?? [ 277.235395][ T6045] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 277.238347][ T1109] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 277.257359][ T6045] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 277.707777][ T6045] usb 5-1: USB disconnect, device number 11 [ 277.885628][ T6045] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 278.021816][ T1109] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 278.030145][ T1109] usb 1-1: Product: syz [ 278.034409][ T1109] usb 1-1: Manufacturer: syz [ 278.039045][ T1109] usb 1-1: SerialNumber: syz [ 278.668569][ T4196] Bluetooth: hci4: unexpected event for opcode 0x041b [ 279.042791][ T1109] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 279.564620][ T7082] loop1: detected capacity change from 0 to 4096 [ 280.384555][ T7088] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 281.405876][ T6038] usb 1-1: USB disconnect, device number 11 [ 281.507389][ T6038] usblp0: removed [ 281.752486][ T7112] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4190] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7112] [ 282.461223][ T7111] loop4: detected capacity change from 0 to 128 [ 282.713579][ T7111] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 283.453080][ T7132] loop0: detected capacity change from 0 to 1024 [ 283.744356][ T7134] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 283.898796][ T7134] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 284.066374][ T7132] hfsplus: bad catalog entry type [ 284.735672][ T7134] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 285.450974][ T6045] Bluetooth: hci1: command 0x0409 tx timeout [ 285.843766][ T7121] chnl_net:caif_netlink_parms(): no params data found [ 285.848417][ T7141] loop4: detected capacity change from 0 to 4096 [ 286.222057][ T7163] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4197] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7163] [ 286.591596][ T7164] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4190] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7164] [ 286.764738][ T7165] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 287.025077][ T7174] loop0: detected capacity change from 0 to 128 [ 288.128210][ T6045] Bluetooth: hci1: command 0x041b tx timeout [ 288.303180][ T7121] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.311710][ T7174] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 288.465845][ T7121] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.519564][ T7121] device bridge_slave_0 entered promiscuous mode [ 288.535089][ T7121] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.545250][ T7121] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.461526][ T7121] device bridge_slave_1 entered promiscuous mode [ 289.777639][ T7193] loop4: detected capacity change from 0 to 512 [ 290.384043][ T6045] Bluetooth: hci1: command 0x040f tx timeout [ 290.441883][ T7205] loop1: detected capacity change from 0 to 512 [ 291.327675][ T7200] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 291.830785][ T7218] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4195] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7218] [ 292.033067][ T7200] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 292.214616][ T7121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.297035][ T7227] loop0: detected capacity change from 0 to 128 [ 292.328760][ T7121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.372891][ T7226] loop1: detected capacity change from 0 to 512 [ 292.410482][ T6045] Bluetooth: hci1: command 0x0419 tx timeout [ 292.416759][ T7227] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 292.481260][ T7121] team0: Port device team_slave_0 added [ 292.492995][ T7121] team0: Port device team_slave_1 added [ 292.631663][ T7121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.638663][ T7121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.740100][ T7121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.115921][ T7121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.287078][ T7121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.330223][ T7121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.529079][ T7253] loop1: detected capacity change from 0 to 128 [ 293.547087][ T7252] loop0: detected capacity change from 0 to 512 [ 293.560495][ T7121] device hsr_slave_0 entered promiscuous mode [ 293.583782][ T7253] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 293.594574][ T7121] device hsr_slave_1 entered promiscuous mode [ 293.610312][ T7252] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 293.665006][ T7252] EXT4-fs (loop0): invalid journal inode [ 293.692449][ T7252] EXT4-fs (loop0): can't get journal size [ 293.698554][ T7253] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4202] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7253] [ 293.715656][ T7253] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 293.844519][ T7252] EXT4-fs (loop0): 1 truncate cleaned up [ 293.850373][ T7252] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 294.317566][ T7268] loop1: detected capacity change from 0 to 512 [ 295.279932][ T7274] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 295.314387][ T7274] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 295.365890][ T7121] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 295.396658][ T7121] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 295.593397][ T7121] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 295.981127][ T7121] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 296.235804][ T7285] xt_TCPMSS: Only works on TCP SYN packets [ 296.239831][ T7290] loop1: detected capacity change from 0 to 128 [ 296.346774][ T7294] loop0: detected capacity change from 0 to 512 [ 296.385206][ T7290] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 296.544654][ T7121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.827789][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 296.871440][ T7301] loop1: detected capacity change from 0 to 128 [ 296.919987][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 297.038179][ T7301] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 297.109956][ T7121] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.186117][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 297.222406][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 297.335335][ T523] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.342654][ T523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.371265][ T7301] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4202] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7301] [ 297.388596][ T7301] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 297.533985][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 297.689581][ T7308] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4197] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7308] [ 297.720658][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 297.882529][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 298.191095][ T523] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.198585][ T523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.306543][ T7310] loop1: detected capacity change from 0 to 2048 [ 298.511498][ T7121] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 298.526630][ T7121] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 298.614585][ T7321] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 298.790975][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 298.846931][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 298.933847][ T7325] loop4: detected capacity change from 0 to 512 [ 298.952616][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 298.986675][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 299.031675][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 299.081122][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 299.501769][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 299.510542][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 299.527265][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 299.545633][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 299.580832][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 299.588892][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 299.656886][ T7343] loop0: detected capacity change from 0 to 128 [ 299.851607][ T7339] xt_TCPMSS: Only works on TCP SYN packets [ 299.861429][ T7343] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 300.051210][ T7351] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4197] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7351] [ 300.086304][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 300.180998][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 300.198985][ T7121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.499067][ T7360] loop1: detected capacity change from 0 to 32768 [ 300.508879][ T7362] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4197] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7362] [ 300.616630][ T7359] loop0: detected capacity change from 0 to 512 [ 303.103930][ T7386] loop0: detected capacity change from 0 to 512 [ 303.142210][ T7391] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 303.355029][ T7391] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 304.003433][ T7404] netlink: 87 bytes leftover after parsing attributes in process `syz.4.885'. [ 305.058422][ T7402] xt_TCPMSS: Only works on TCP SYN packets [ 305.299170][ T7411] loop1: detected capacity change from 0 to 128 [ 305.446825][ T4697] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.462418][ T7411] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 305.731190][ T4697] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.761551][ T7411] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4202] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7411] [ 305.763468][ T7411] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 305.787606][ T6416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 305.788326][ T6416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 305.859932][ T4697] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.869072][ T7121] device veth0_vlan entered promiscuous mode [ 305.877460][ T7121] device veth1_vlan entered promiscuous mode [ 305.901370][ T7121] device veth0_macvtap entered promiscuous mode [ 305.905612][ T7121] device veth1_macvtap entered promiscuous mode [ 305.916688][ T7121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.916756][ T7121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.916768][ T7121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.916783][ T7121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.916794][ T7121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.916807][ T7121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.916819][ T7121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.916833][ T7121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.916846][ T7121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.916860][ T7121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.918211][ T7121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.207328][ T7121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.475846][ T7424] loop1: detected capacity change from 0 to 32768 [ 306.490641][ T7121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.500774][ T7121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.511555][ T7121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.511570][ T7121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.511586][ T7121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.511599][ T7121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.511613][ T7121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.511638][ T7121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.511652][ T7121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.512914][ T7121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.594818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 306.603978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 306.612766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 306.638507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 306.687819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 306.749981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 306.826998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 306.836053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 306.844980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 306.854209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 306.863380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 306.877570][ T7121] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.889759][ T7121] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.903773][ T7121] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.024835][ T7121] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.307492][ T4697] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.632867][ T7444] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4190] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7444] [ 308.318788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 308.347120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 308.355303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 308.558805][ T6416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.619637][ T7455] loop0: detected capacity change from 0 to 128 [ 308.720963][ T6416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.741637][ T7455] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 308.817022][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 309.196501][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.204858][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.225865][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 309.664883][ T7481] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4195] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7481] [ 309.796048][ T7480] xt_TCPMSS: Only works on TCP SYN packets [ 311.627892][ T7502] loop6: detected capacity change from 0 to 512 [ 311.932263][ T7506] loop0: detected capacity change from 0 to 32768 [ 311.964359][ T7508] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4195] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7508] [ 314.193584][ T7522] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 314.361259][ T7522] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 315.361845][ T7536] loop4: detected capacity change from 0 to 512 [ 315.396938][ T7541] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4190] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7541] [ 315.533763][ T7543] xt_TCPMSS: Only works on TCP SYN packets [ 317.295663][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.780620][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.354693][ T7567] loop0: detected capacity change from 0 to 512 [ 318.652091][ T4697] device hsr_slave_0 left promiscuous mode [ 319.206660][ T4697] device hsr_slave_1 left promiscuous mode [ 319.280782][ T4697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.300148][ T4697] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.366165][ T7584] loop6: detected capacity change from 0 to 4096 [ 319.391835][ T4697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.506369][ T4697] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.536015][ T4697] device bridge_slave_1 left promiscuous mode [ 319.566317][ T4697] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.586663][ T4697] device bridge_slave_0 left promiscuous mode [ 319.599078][ T4697] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.625679][ T7597] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4190] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7597] [ 319.640271][ T7599] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 319.707695][ T4697] device veth1_macvtap left promiscuous mode [ 319.722475][ T4697] device veth0_macvtap left promiscuous mode [ 319.736109][ T4697] device veth1_vlan left promiscuous mode [ 319.751421][ T4697] device veth0_vlan left promiscuous mode [ 319.816692][ T6216] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 320.919926][ T7612] netlink: 'syz.3.930': attribute type 16 has an invalid length. [ 321.057810][ T7612] netlink: 164 bytes leftover after parsing attributes in process `syz.3.930'. [ 321.067647][ T6216] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.099377][ T6216] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 321.116197][ T6216] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 321.129361][ T6216] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.294007][ T6216] usb 5-1: config 0 descriptor?? [ 321.456351][ T4697] team0 (unregistering): Port device team_slave_1 removed [ 321.495944][ T4697] team0 (unregistering): Port device team_slave_0 removed [ 321.537092][ T4697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.593469][ T4697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.726179][ T6216] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 321.733347][ T6216] dvb-usb: bulk message failed: -22 (3/0) [ 321.758399][ T6216] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 321.785335][ T6216] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 321.797116][ T6216] usb 5-1: media controller created [ 321.808901][ T6216] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 321.865379][ T4697] bond0 (unregistering): Released all slaves [ 322.068683][ T6216] dvb-usb: bulk message failed: -22 (6/0) [ 322.082501][ T6216] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 322.093123][ T26] audit: type=1326 audit(1779941498.809:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.3.933" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8446f84e59 code=0x7ffc0000 [ 322.170418][ T6216] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input43 [ 322.293798][ T6216] dvb-usb: schedule remote query interval to 150 msecs. [ 322.350119][ T6216] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 322.573562][ T6216] usb 5-1: USB disconnect, device number 12 [ 322.725880][ T26] audit: type=1326 audit(1779941498.809:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.3.933" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8446f84e59 code=0x7ffc0000 [ 322.868410][ T26] audit: type=1326 audit(1779941498.839:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.3.933" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f8446f84e59 code=0x7ffc0000 [ 322.914397][ T26] audit: type=1326 audit(1779941498.839:13): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.3.933" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8446f84e59 code=0x7ffc0000 [ 322.971818][ T26] audit: type=1326 audit(1779941498.839:14): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.3.933" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8446f84e59 code=0x7ffc0000 [ 322.997002][ T7578] netlink: 24 bytes leftover after parsing attributes in process `syz.1.922'. [ 323.006319][ T7585] netlink: 24 bytes leftover after parsing attributes in process `syz.1.922'. [ 323.325287][ T6216] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 323.333330][ T7632] loop6: detected capacity change from 0 to 32768 [ 325.973046][ T7659] loop4: detected capacity change from 0 to 256 [ 326.691809][ T7659] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 327.012313][ T7664] loop6: detected capacity change from 0 to 24 [ 327.571596][ T7669] hub 8-0:1.0: USB hub found [ 327.578833][ T7669] hub 8-0:1.0: 1 port detected [ 328.379624][ T7663] romfs: read error for inode 0x8000 [ 330.921450][ T7698] loop4: detected capacity change from 0 to 32768 [ 331.222082][ T7704] loop6: detected capacity change from 0 to 1024 [ 331.231014][ T7698] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 331.239770][ T7698] BTRFS info (device loop4): metadata ratio 0 [ 331.245938][ T7698] BTRFS info (device loop4): setting nodatasum [ 331.252165][ T7698] BTRFS info (device loop4): using free space tree [ 331.258702][ T7698] BTRFS info (device loop4): has skinny extents [ 331.421745][ T7704] EXT4-fs error (device loop6): ext4_map_blocks:741: inode #3: block 1: comm syz.6.954: lblock 1 mapped to illegal pblock 1 (length 1) [ 331.515181][ T7704] Quota error (device loop6): write_blk: dquota write failed [ 331.600747][ T7704] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 331.793684][ T7704] EXT4-fs error (device loop6): ext4_acquire_dquot:6236: comm syz.6.954: Failed to acquire dquot type 0 [ 331.837312][ T7726] loop0: detected capacity change from 0 to 256 [ 332.730013][ T7704] EXT4-fs error (device loop6): ext4_free_blocks:6231: comm syz.6.954: Freeing blocks not in datazone - block = 0, count = 4096 [ 333.190107][ T7704] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.954: Invalid inode bitmap blk 0 in block_group 0 [ 333.250712][ T523] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 333.295011][ T7726] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 333.330351][ T7704] EXT4-fs error (device loop6) in ext4_free_inode:362: Corrupt filesystem [ 334.501124][ T7746] hub 8-0:1.0: USB hub found [ 334.510685][ T7746] hub 8-0:1.0: 1 port detected [ 334.893630][ T523] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 334.909733][ T7704] EXT4-fs (loop6): 1 orphan inode deleted [ 335.085714][ T7704] EXT4-fs (loop6): mounted filesystem without journal. Opts: €; noinit_itable,discard,data_err=ignore,max_batch_time=0x0000000000000006,journal_dev=0x0000000000000006,nolazytime,nobarrier,,errors=continue. Quota mode: writeback. [ 335.462572][ T7755] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4202] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7755] [ 336.368344][ T523] EXT4-fs error (device loop6): ext4_release_dquot:6272: comm kworker/u4:4: Failed to release dquot type 0 [ 337.752191][ T7698] BTRFS error (device loop4): open_ctree failed: -12 [ 338.363696][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 338.391214][ T7786] loop0: detected capacity change from 0 to 512 [ 338.421197][ T4180] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (4180) [ 338.457695][ T7785] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 338.522156][ T7786] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 338.628635][ T7779] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 338.639892][ T7779] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 338.741850][ T7786] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.970: invalid indirect mapped block 4294967295 (level 1) [ 338.843357][ T7786] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.970: invalid indirect mapped block 4294967295 (level 1) [ 338.885056][ T7786] EXT4-fs (loop0): 2 truncates cleaned up [ 338.914090][ T7786] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=ignore,quota,dioread_nolock,grpid,usrjquota=,,errors=continue. Quota mode: writeback. [ 339.888529][ T26] audit: type=1800 audit(1779941516.599:15): pid=7786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.970" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 339.946455][ T7786] EXT4-fs (loop0): shut down requested (2) [ 340.205401][ T7816] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4195] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7816] [ 340.993427][ T7820] loop1: detected capacity change from 0 to 256 [ 341.157937][ T7820] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 342.603953][ T7836] blktrace: Concurrent blktraces are not allowed on loop12 [ 346.045616][ T7881] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[7121] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7881] [ 347.234043][ T7893] loop0: detected capacity change from 0 to 32768 [ 347.257908][ T7889] tipc: Started in network mode [ 347.293708][ T7889] tipc: Node identity 080211000001, cluster identity 4711 [ 347.378714][ T7889] tipc: Enabled bearer , priority 0 [ 347.425812][ T7899] loop1: detected capacity change from 0 to 128 [ 347.524928][ T7893] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 347.534253][ T7893] BTRFS info (device loop0): metadata ratio 0 [ 347.540360][ T7893] BTRFS info (device loop0): setting nodatasum [ 347.546987][ T7893] BTRFS info (device loop0): using free space tree [ 347.554174][ T7893] BTRFS info (device loop0): has skinny extents [ 348.533982][ T7899] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 348.700812][ T4237] tipc: Node number set to 134418688 [ 348.878735][ T7899] xt_TCPMSS: Only works on TCP SYN packets [ 349.250873][ T7937] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4202] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7937] [ 349.513162][ T7893] BTRFS info (device loop0): enabling ssd optimizations [ 349.653099][ T7951] binder: 7945:7951 ioctl c0285840 200000000000 returned -22 [ 349.688755][ T7952] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4202] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7952] [ 350.149391][ T26] audit: type=1800 audit(1779941526.849:16): pid=7956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.994" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 351.363962][ T7975] hub 8-0:1.0: USB hub found [ 351.370328][ T7975] hub 8-0:1.0: 1 port detected [ 352.224412][ T7984] loop1: detected capacity change from 0 to 128 [ 352.429841][ T7986] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4195] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7986] [ 352.509927][ T7984] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 352.656688][ T7984] xt_TCPMSS: Only works on TCP SYN packets [ 352.812366][ T7994] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4195] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7994] [ 352.890900][ T4180] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop0 scanned by udevd (4180) [ 353.282188][ T8017] binder: 8011:8017 ioctl c0285840 200000000000 returned -22 [ 354.178805][ T8027] hub 8-0:1.0: USB hub found [ 354.187613][ T8027] hub 8-0:1.0: 1 port detected [ 354.928935][ T8030] netlink: 'syz.4.1022': attribute type 1 has an invalid length. [ 356.240658][ T8040] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4190] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8040] [ 356.376119][ T8050] loop6: detected capacity change from 0 to 128 [ 356.386777][ T8030] 8021q: adding VLAN 0 to HW filter on device bond1 [ 356.486441][ T8050] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 356.542045][ T8036] 8021q: adding VLAN 0 to HW filter on device bond1 [ 356.563477][ T8036] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 356.608788][ T8036] bond1: (slave vxcan3): Error -22 calling dev_set_mtu [ 356.617350][ T8050] xt_TCPMSS: Only works on TCP SYN packets [ 357.518013][ T8074] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 357.537779][ T8072] loop1: detected capacity change from 0 to 4096 [ 357.611142][ T8074] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 357.636102][ T8083] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 359.377874][ T8107] binder: 8097:8107 ioctl c0285840 200000000000 returned -22 [ 359.794781][ T8110] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[7121] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8110] [ 361.384861][ T8103] loop1: detected capacity change from 0 to 256 [ 361.598796][ T8103] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 361.618747][ T8129] loop6: detected capacity change from 0 to 4096 [ 361.696234][ T8135] loop4: detected capacity change from 0 to 512 [ 361.890461][ T8138] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 362.510793][ T8135] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 362.604088][ T8135] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.824348][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 362.845296][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 363.061703][ T8153] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 363.220933][ T8165] loop0: detected capacity change from 0 to 256 [ 363.404519][ T8173] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4195] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8173] [ 363.738589][ T8165] FAT-fs (loop0): Directory bread(block 64) failed [ 363.757886][ T8177] loop4: detected capacity change from 0 to 128 [ 363.764504][ T8165] FAT-fs (loop0): Directory bread(block 65) failed [ 363.784744][ T8165] FAT-fs (loop0): Directory bread(block 66) failed [ 363.822438][ T8165] FAT-fs (loop0): Directory bread(block 67) failed [ 363.864281][ T8184] binder: 8181:8184 ioctl c0285840 200000000000 returned -22 [ 364.221971][ T8165] FAT-fs (loop0): Directory bread(block 68) failed [ 364.305805][ T8177] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 364.377123][ T8165] FAT-fs (loop0): Directory bread(block 69) failed [ 364.638357][ T8165] FAT-fs (loop0): Directory bread(block 70) failed [ 364.829773][ T8165] FAT-fs (loop0): Directory bread(block 71) failed [ 365.170509][ T8165] FAT-fs (loop0): Directory bread(block 72) failed [ 365.370041][ T8165] FAT-fs (loop0): Directory bread(block 73) failed [ 365.395836][ T8193] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4195] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8193] [ 365.428086][ T8177] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 365.786855][ T8206] tipc: Started in network mode [ 365.796004][ T8206] tipc: Node identity 080211000001, cluster identity 4711 [ 365.826936][ T8206] tipc: Enabled bearer , priority 0 [ 366.112195][ T8210] loop6: detected capacity change from 0 to 256 [ 366.168276][ T8208] loop4: detected capacity change from 0 to 4096 [ 367.036240][ T6038] tipc: Node number set to 134418688 [ 367.096354][ T8210] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 367.204490][ T8217] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 368.080726][ T8231] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4190] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8231] [ 368.619446][ T8244] loop6: detected capacity change from 0 to 256 [ 369.383555][ T8244] FAT-fs (loop6): Directory bread(block 64) failed [ 369.440552][ T8244] FAT-fs (loop6): Directory bread(block 65) failed [ 369.486312][ T8244] FAT-fs (loop6): Directory bread(block 66) failed [ 369.530713][ T8244] FAT-fs (loop6): Directory bread(block 67) failed [ 369.551404][ T8244] FAT-fs (loop6): Directory bread(block 68) failed [ 369.558041][ T8244] FAT-fs (loop6): Directory bread(block 69) failed [ 369.591424][ T8251] loop4: detected capacity change from 0 to 128 [ 369.613912][ T8244] FAT-fs (loop6): Directory bread(block 70) failed [ 369.648174][ T8249] binder: 8248:8249 ioctl c0285840 200000000000 returned -22 [ 369.704799][ T8244] FAT-fs (loop6): Directory bread(block 71) failed [ 369.857088][ T8251] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 369.919456][ T8244] FAT-fs (loop6): Directory bread(block 72) failed [ 370.092581][ T8244] FAT-fs (loop6): Directory bread(block 73) failed [ 370.430530][ T8251] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4195] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8251] [ 370.449451][ T8260] tipc: Enabling of bearer rejected, already enabled [ 370.563179][ T8251] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 371.616125][ T8282] loop4: detected capacity change from 0 to 24 [ 372.152193][ T8273] loop6: detected capacity change from 0 to 4096 [ 372.997745][ T8290] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 374.748396][ T8304] binder: 8303:8304 ioctl c0285840 200000000000 returned -22 [ 375.322267][ T8313] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 375.464100][ T8313] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 375.509070][ T8313] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 375.529790][ T8318] tipc: Started in network mode [ 375.534942][ T8318] tipc: Node identity 080211000001, cluster identity 4711 [ 375.544809][ T8318] tipc: Enabled bearer , priority 0 [ 376.665645][ T4236] tipc: Node number set to 134418688 [ 377.783359][ T8357] loop6: detected capacity change from 0 to 24 [ 378.026697][ T8365] loop0: detected capacity change from 0 to 128 [ 378.436573][ T8365] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 378.629915][ T8365] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4190] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8365] [ 378.670100][ T8378] device syzkaller0 entered promiscuous mode [ 378.874428][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.880935][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.449721][ T8365] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 384.953526][ T8443] loop1: detected capacity change from 0 to 128 [ 385.156061][ T8446] netlink: 'syz.4.1112': attribute type 46 has an invalid length. [ 385.652169][ T8443] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 385.694534][ T8451] loop4: detected capacity change from 0 to 65 [ 385.870630][ T8451] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 385.919458][ T8443] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4202] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8443] [ 385.992608][ T8460] loop6: detected capacity change from 0 to 128 [ 386.863577][ T8465] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 387.181705][ T8469] sd 0:0:1:0: device reset [ 388.408486][ T8460] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 388.419570][ T8460] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 391.837601][ T8499] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4202] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8499] [ 392.287507][ T8495] loop6: detected capacity change from 0 to 24 [ 392.552310][ T8495] romfs: read error for inode 0x8000 [ 394.642837][ T8540] binder: 8533:8540 ioctl c0285840 200000000000 returned -22 [ 396.082867][ T8557] device syzkaller0 left promiscuous mode [ 397.015499][ T8564] loop4: detected capacity change from 0 to 128 [ 397.095898][ T8564] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 397.174639][ T8561] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4202] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8561] [ 397.311780][ T8571] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4195] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8571] [ 397.415633][ T8571] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 398.437209][ T8593] hub 8-0:1.0: USB hub found [ 398.444107][ T8593] hub 8-0:1.0: 1 port detected [ 399.483190][ T8602] binder: 8594:8602 ioctl c0285840 200000000000 returned -22 [ 399.841547][ T8607] loop6: detected capacity change from 0 to 64 [ 400.282449][ T8618] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4197] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8618] [ 401.188578][ T8624] loop0: detected capacity change from 0 to 24 [ 401.281091][ T8624] romfs: read error for inode 0x8000 [ 402.954435][ T8634] loop1: detected capacity change from 0 to 128 [ 403.036140][ T8634] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 403.198537][ T8639] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4202] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8639] [ 403.251442][ T8637] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4190] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8637] [ 403.448103][ T8639] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 403.647123][ T8652] hub 8-0:1.0: USB hub found [ 403.653233][ T8652] hub 8-0:1.0: 1 port detected [ 404.959151][ T8659] blktrace: Concurrent blktraces are not allowed on loop6 [ 406.163094][ T8677] loop6: detected capacity change from 0 to 24 [ 406.285056][ T8677] romfs: read error for inode 0x8000 [ 406.500526][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 407.410183][ T8692] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4195] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8692] [ 407.848002][ T8694] loop6: detected capacity change from 0 to 512 [ 407.968591][ T8694] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 407.991664][ T8694] EXT4-fs (loop6): invalid journal inode [ 407.997402][ T8694] EXT4-fs (loop6): can't get journal size [ 408.061203][ T8694] EXT4-fs (loop6): 1 truncate cleaned up [ 408.068887][ T8694] EXT4-fs (loop6): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 410.637253][ T8723] loop6: detected capacity change from 0 to 65 [ 410.735231][ T8723] BFS-fs: bfs_fill_super(): NOTE: filesystem loop6 was created with 512 inodes, the real maximum is 511, mounting anyway [ 411.202047][ T8735] loop6: detected capacity change from 0 to 24 [ 411.274492][ T8735] romfs: read error for inode 0x8000 [ 412.376794][ T8747] loop6: detected capacity change from 0 to 4096 [ 412.444576][ T8752] blktrace: Concurrent blktraces are not allowed on loop6 [ 412.512865][ T8755] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 413.270916][ T8765] loop6: detected capacity change from 0 to 512 [ 413.333608][ T8765] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 413.378012][ T8765] EXT4-fs (loop6): invalid journal inode [ 413.394369][ T8765] EXT4-fs (loop6): can't get journal size [ 413.453664][ T8765] EXT4-fs (loop6): 1 truncate cleaned up [ 413.460614][ T8765] EXT4-fs (loop6): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 414.360671][ T8794] loop1: detected capacity change from 0 to 512 [ 415.069283][ T8810] loop0: detected capacity change from 0 to 128 [ 415.340674][ T6043] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 416.072733][ T8824] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4197] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8824] [ 416.253554][ T8825] loop4: detected capacity change from 0 to 24 [ 416.290582][ T8825] romfs: read error for inode 0x8000 [ 416.560755][ T6043] usb 2-1: config 0 has no interfaces? [ 416.640832][ T6043] usb 2-1: config 0 has no interfaces? [ 416.662081][ T8829] loop0: detected capacity change from 0 to 4096 [ 416.720614][ T6043] usb 2-1: config 0 has no interfaces? [ 416.726164][ T6043] usb 2-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 416.780774][ T6043] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.807512][ T8833] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 416.839468][ T6043] usb 2-1: config 0 descriptor?? [ 416.910232][ T8834] loop4: detected capacity change from 0 to 512 [ 417.029658][ T8834] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 417.040690][ T8834] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 417.084831][ T6045] usb 2-1: USB disconnect, device number 15 [ 417.569534][ T8834] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.1193: invalid indirect mapped block 83886080 (level 1) [ 417.770534][ T8834] EXT4-fs (loop4): Remounting filesystem read-only [ 417.781419][ T8834] EXT4-fs (loop4): 1 orphan inode deleted [ 418.050483][ T8834] EXT4-fs (loop4): 1 truncate cleaned up [ 418.056192][ T8834] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,errors=remount-ro,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000000040,block_validity,nodelalloc,quota,nolazytime,grpjquota=,mblk_io_submit,barrier=0x00000000000000ff,max_batch_time=0x00000. Quota mode: writeback. [ 418.078042][ T8853] Can't find a SQUASHFS superblock on nullb0 [ 418.288486][ T8834] EXT4-fs error (device loop4): ext4_empty_dir:3154: inode #2: block 13: comm syz.4.1193: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 418.383448][ T8863] blktrace: Concurrent blktraces are not allowed on loop2 [ 418.443786][ T8834] EXT4-fs (loop4): Remounting filesystem read-only [ 418.535932][ T8869] loop6: detected capacity change from 0 to 512 [ 418.540753][ T8834] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #2: comm syz.4.1193: directory missing '..' [ 419.063343][ T8876] 9pnet: Insufficient options for proto=fd [ 419.782806][ T8880] bad cache= option: no%e [ 419.782806][ T8880] [ 419.806578][ T8889] loop6: detected capacity change from 0 to 128 [ 419.820701][ T8880] CIFS: VFS: bad cache= option: no%e [ 421.418447][ T8898] loop4: detected capacity change from 0 to 512 [ 421.481825][ T8898] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 421.510757][ T8898] EXT4-fs (loop4): invalid journal inode [ 421.515243][ T8900] loop6: detected capacity change from 0 to 512 [ 421.516485][ T8898] EXT4-fs (loop4): can't get journal size [ 421.607739][ T8898] EXT4-fs (loop4): 1 truncate cleaned up [ 421.780528][ T8898] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 421.838341][ T8907] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4197] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8907] [ 422.274233][ T8915] netlink: 87 bytes leftover after parsing attributes in process `syz.3.1206'. [ 422.310878][ T8915] overlayfs: failed to clone upperpath [ 422.972783][ T8923] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[7121] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8923] [ 424.532923][ T8946] loop1: detected capacity change from 0 to 128 [ 424.656245][ T8950] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4190] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8950] [ 426.028776][ T8968] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4202] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8968] [ 426.214619][ T8972] loop1: detected capacity change from 0 to 512 [ 426.657618][ C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 426.669443][ C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 426.677886][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 426.685192][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 426.695265][ C0] RIP: 0010:fq_codel_enqueue+0xd71/0x1600 [ 426.701178][ C0] Code: 24 08 48 8b 44 24 20 80 3c 10 00 74 12 4c 89 ef e8 f4 d1 ab f9 48 ba 00 00 00 00 00 fc ff df 4d 8b 65 00 4c 89 e0 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 e7 e8 d1 d1 ab f9 48 ba 00 00 00 00 00 fc [ 426.720809][ C0] RSP: 0018:ffffc90000d37220 EFLAGS: 00010246 [ 426.726973][ C0] RAX: 0000000000000000 RBX: 1ffff920001a6e94 RCX: 1ffff1100ec3815a [ 426.734972][ C0] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 426.742966][ C0] RBP: ffffc90000d37370 R08: ffffffff901d6237 R09: 1ffffffff203ac46 [ 426.750965][ C0] R10: dffffc0000000000 R11: fffffbfff203ac47 R12: 0000000000000000 [ 426.758958][ C0] R13: ffff8880553e0000 R14: 0000000000000000 R15: 0000000000000000 [ 426.766950][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 426.775904][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 426.782506][ C0] CR2: 00007f84451bcff8 CR3: 0000000022c86000 CR4: 00000000003506f0 [ 426.790505][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 426.798501][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 426.806499][ C0] Call Trace: [ 426.809792][ C0] [ 426.812750][ C0] ? INET_ECN_set_ce+0x950/0x950 [ 426.817731][ C0] netem_dequeue+0xd4c/0x1410 [ 426.822434][ C0] ? verify_lock_unused+0x140/0x140 [ 426.827772][ C0] ? netem_enqueue+0x3800/0x3800 [ 426.832819][ C0] __qdisc_run+0x236/0x1490 [ 426.837405][ C0] __dev_queue_xmit+0xe3d/0x2f80 [ 426.842449][ C0] ? tipc_net+0x1d9/0x240 [ 426.846903][ C0] ? dev_queue_xmit+0x20/0x20 [ 426.851699][ C0] ? tipc_crypto_xmit+0x1df/0x26b0 [ 426.856925][ C0] ? rcu_lock_release+0x5/0x20 [ 426.861878][ C0] ? eth_header+0xa0/0x200 [ 426.866316][ C0] ? eth_header+0x117/0x200 [ 426.870926][ C0] ? llc_sysctl_exit+0x60/0x60 [ 426.875709][ C0] tipc_l2_send_msg+0x30a/0x3c0 [ 426.880582][ C0] tipc_bearer_xmit_skb+0x292/0x3c0 [ 426.885804][ C0] ? tipc_bearer_min_mtu+0x190/0x190 [ 426.891110][ C0] tipc_disc_timeout+0x57d/0x6d0 [ 426.896075][ C0] ? tipc_disc_create+0x920/0x920 [ 426.901136][ C0] ? tipc_disc_create+0x920/0x920 [ 426.906189][ C0] call_timer_fn+0x17b/0x540 [ 426.910885][ C0] ? tipc_disc_create+0x920/0x920 [ 426.915929][ C0] ? __run_timers+0x800/0x800 [ 426.920633][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 426.925963][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 426.931278][ C0] ? tipc_disc_create+0x920/0x920 [ 426.936333][ C0] __run_timers+0x53e/0x800 [ 426.940870][ C0] ? detach_timer+0x2b0/0x2b0 [ 426.945579][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 426.951598][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 426.956551][ C0] run_timer_softirq+0x63/0xf0 [ 426.961349][ C0] handle_softirqs+0x339/0x830 [ 426.966201][ C0] ? run_ksoftirqd+0xa4/0x100 [ 426.970917][ C0] ? do_softirq+0x210/0x210 [ 426.975442][ C0] ? run_ksoftirqd+0x81/0x100 [ 426.980187][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 426.985404][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 426.990715][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 426.995940][ C0] run_ksoftirqd+0xa4/0x100 [ 427.000466][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 427.005692][ C0] smpboot_thread_fn+0x4f6/0x970 [ 427.010746][ C0] kthread+0x436/0x520 [ 427.014842][ C0] ? cpu_report_death+0x180/0x180 [ 427.019897][ C0] ? kthread_blkcg+0xd0/0xd0 [ 427.024520][ C0] ret_from_fork+0x1f/0x30 [ 427.029048][ C0] [ 427.032094][ C0] Modules linked in: [ 427.036067][ C0] ---[ end trace 7a8fd3d710a5314d ]--- [ 427.041563][ C0] RIP: 0010:fq_codel_enqueue+0xd71/0x1600 [ 427.047312][ C0] Code: 24 08 48 8b 44 24 20 80 3c 10 00 74 12 4c 89 ef e8 f4 d1 ab f9 48 ba 00 00 00 00 00 fc ff df 4d 8b 65 00 4c 89 e0 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 e7 e8 d1 d1 ab f9 48 ba 00 00 00 00 00 fc [ 427.067085][ C0] RSP: 0018:ffffc90000d37220 EFLAGS: 00010246 [ 427.073203][ C0] RAX: 0000000000000000 RBX: 1ffff920001a6e94 RCX: 1ffff1100ec3815a [ 427.081252][ C0] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 427.089361][ C0] RBP: ffffc90000d37370 R08: ffffffff901d6237 R09: 1ffffffff203ac46 [ 427.097403][ C0] R10: dffffc0000000000 R11: fffffbfff203ac47 R12: 0000000000000000 [ 427.105431][ C0] R13: ffff8880553e0000 R14: 0000000000000000 R15: 0000000000000000 [ 427.113475][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 427.122448][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 427.129052][ C0] CR2: 00007f84451bcff8 CR3: 0000000022c86000 CR4: 00000000003506f0 [ 427.137094][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 427.145115][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 427.153150][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 427.160704][ C0] Kernel Offset: disabled [ 427.165031][ C0] Rebooting in 86400 seconds..