last executing test programs: 6m29.763015045s ago: executing program 2 (id=1494): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xc9, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r4, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r4, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0300000001000000010000000000acc500"], 0x50) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x0) 6m28.444198353s ago: executing program 2 (id=1498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x30, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8b91}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000082}, 0x20000054) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r8, 0x6, 0x2, &(0x7f0000000180)=0x6, 0x4) mmap(&(0x7f0000109000/0x3000)=nil, 0x3000, 0xc, 0x12, 0xffffffffffffffff, 0x11d30000) getpid() pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x10000000000001) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') pread64(r9, &(0x7f0000000180)=""/195, 0xc3, 0x100) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000380)={0x0, @broadcast, @dev}, &(0x7f00000003c0)=0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000004080300000000000000000008000000000000002f00000005000300880000000c0004800813034000000008050003003a0000000c00048008000140000001820600024000000000"], 0x4c}}, 0x0) 6m26.599958705s ago: executing program 2 (id=1507): syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000380)={0x14, &(0x7f0000000200)={0x0, 0x31, 0xca, {0xca, 0xe, "c5374ded60e7de2c124190ce41966eec43bbdcc2857cf202cfd848ae699d513abeb2d236d15a911a9b0ee9e39d2641fae6cc7bc92456b608e743c606169216d52b884e8daa0d1248005a6d724d7dc800e443f5cf58e8deef33c771bbc8663fe8e1d76342f50fe185d301ebd866477ccecccd34ad3c1990caec007a1b1ce977aa54069f5d83bdc7b42626afd7e40824ce756c78cbfff06840cc8ccad6158b17481df4c03bf670224a7426a8e6ecf41128b7394cb386172bd1a358b9455e8ff94849e5900459e3ee29"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3e42}}}, &(0x7f0000000680)={0x44, &(0x7f0000000400)=ANY=[@ANYBLOB="20036400000022c487089d955526bed5fbc6efe02e984afb4bd4ca067308f9ed0432d20519a6e0697fc0d09b09fa88319ae78c082e10ca6cf74d0205622043f6b8f6590a8bc4f3810dfee867eb4c90b54a476d0b778130fbe49421a3ed5e2a"], &(0x7f0000000480)={0x0, 0xa, 0x1, 0x17}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x79}, &(0x7f0000000500)={0x20, 0x81, 0x3, "ec69ee"}, &(0x7f0000000540)={0x20, 0x82, 0x1, "bb"}, &(0x7f0000000580)={0x20, 0x83, 0x2, "34f8"}, &(0x7f00000005c0)={0x20, 0x84, 0x1, "06"}, &(0x7f0000000640)={0x20, 0x85, 0x3, "850e7f"}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpriority(0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7fffffff, 0x80) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000080)=0x1000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48) setitimer(0x0, &(0x7f0000000000)={{0x0, 0xea60}, {0x77359400}}, 0x0) 6m24.65873865s ago: executing program 2 (id=1517): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x30, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8b91}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000082}, 0x20000054) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r8, 0x6, 0x2, &(0x7f0000000180)=0x6, 0x4) mmap(&(0x7f0000109000/0x3000)=nil, 0x3000, 0xc, 0x12, 0xffffffffffffffff, 0x11d30000) getpid() pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x10000000000001) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') pread64(r9, &(0x7f0000000180)=""/195, 0xc3, 0x100) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000380)={0x0, @broadcast, @dev}, &(0x7f00000003c0)=0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000004080300000000000000000008000000000000002f00000005000300880000000c0004800813034000000008050003003a0000000c00048008000140000001820600024000000000"], 0x4c}}, 0x0) 6m22.771565874s ago: executing program 2 (id=1531): sched_setscheduler(0x0, 0x2, 0x0) unshare(0x68040000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47ed2345653602648dcaaf", 0x3a, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x100000000, 0x1}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) 6m21.760105603s ago: executing program 2 (id=1533): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) mlockall(0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 6m6.00063382s ago: executing program 32 (id=1533): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) mlockall(0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 2m42.59387668s ago: executing program 5 (id=2380): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsopen(&(0x7f0000000080)='proc\x00', 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x7, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004ec0)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x54, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0x4, 0xd}, @TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)) 2m39.826459359s ago: executing program 5 (id=2390): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000100)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mknod$loop(&(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1) unlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semget(0x1, 0x5, 0x6b4) rename(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x64042, 0x49) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000280)=@secondary) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x103000, 0x0) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x25, 0x5, @val=@kprobe_multi=@syms={0x1, 0x2, &(0x7f0000000340)=[&(0x7f0000000180)='\x00', &(0x7f0000000300)='max_dir_size_kb'], 0x0, 0xa}}, 0x30) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x800e0000, {0x0, 0x0, 0x0, r6, {0x7, 0x8}, {0x0, 0xfff1}, {0x9, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000043}, 0x40004) ioctl$XFS_IOC_FREE_EOFBLOCKS(r4, 0x8080583a, &(0x7f00000000c0)={0xffff, 0x3, 0x136, 0x20e74bfb}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x18, 0x1) 2m37.819273626s ago: executing program 5 (id=2398): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000f01f00660000007f00000001"], 0x50) fcntl$setstatus(r0, 0x4, 0x4400) 2m36.715339667s ago: executing program 5 (id=2400): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002140)='$|', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="a37d3b31", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)='G)', 0x2}], 0x1}}], 0x3, 0x4040881) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x18000c6, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x0, 0x17d, &(0x7f0000001ac0)="$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") 2m29.340492557s ago: executing program 5 (id=2434): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYBLOB="10000000000000002800"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010000104", @ANYRES32=0x0, @ANYBLOB="030000000000000028"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m28.588701858s ago: executing program 5 (id=2436): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x211, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x85) fadvise64(r0, 0xe0ffff, 0xe10018, 0x3) 2m13.40649099s ago: executing program 33 (id=2436): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x211, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x85) fadvise64(r0, 0xe0ffff, 0xe10018, 0x3) 12.544466414s ago: executing program 0 (id=2890): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000640), 0xb, 0x60443) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000002c0)={0x0, 0x4, 0xf7, 0x5, 0x18, 0x3, 0xfffffc00}) 9.340142635s ago: executing program 0 (id=2899): syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3e42}}}, &(0x7f0000000680)={0x44, &(0x7f0000000400)=ANY=[@ANYBLOB="20036400000022c487089d955526bed5fbc6efe02e984afb4bd4ca067308f9ed0432d20519a6e0697fc0d09b09fa88319ae78c082e10ca6cf74d0205622043f6b8f6590a8bc4f3810dfee867eb4c90b54a476d0b778130fbe49421a3ed5e2a"], &(0x7f0000000480)={0x0, 0xa, 0x1, 0x17}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x79}, &(0x7f0000000500)={0x20, 0x81, 0x3, "ec69ee"}, &(0x7f0000000540)={0x20, 0x82, 0x1, "bb"}, &(0x7f0000000580)={0x20, 0x83, 0x2, "34f8"}, &(0x7f00000005c0)={0x20, 0x84, 0x1, "06"}, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpriority(0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7fffffff, 0x80) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000080)=0x1000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48) setitimer(0x0, &(0x7f0000000000)={{0x0, 0xea60}, {0x77359400}}, 0x0) 8.08446309s ago: executing program 1 (id=2903): r0 = epoll_create1(0x0) poll(&(0x7f0000000a80)=[{r0, 0x2021}], 0x1, 0xdb4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) shutdown(r1, 0x0) epoll_wait(r0, 0x0, 0x0, 0x101) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x2000200b}) 7.969419494s ago: executing program 0 (id=2904): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x80000028b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket(0x2, 0xa, 0x300) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_THP_DISABLE(0x29, 0x1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, 0x0, 0x0}, 0x94) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) fsmount(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, 0x0, 0x78) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000140)={[{@init_itable}, {@data_err_ignore}, {@stripe={'stripe', 0x3d, 0x40}}]}, 0x3, 0x445, &(0x7f0000001340)="$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") 7.375987771s ago: executing program 1 (id=2905): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) syz_usb_connect$uac2(0x3, 0x8e, &(0x7f0000001440)=ANY=[@ANYBLOB="1201b50a000000101e04003040000102030109027c000301068003080b01010108207f09040000000101200009240109000d1c007f072406050200000c24030300030901054e4806090401000001022000090401010101022000090501090004020205082501830005ff07090402000001022000090402010101022000"], &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x20002040) sendto$inet6(r0, 0x0, 0x97, 0x8000, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000016c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2800c844) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$RTC_AIE_ON(r2, 0x7001) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000100)={0x11, 0x27, 0x17, 0x12, 0x7, 0x3, 0x6, 0x8, 0x1}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newpolicy={0xbc, 0x13, 0x101, 0xfffffffd, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@remote, 0x100, 0xb, 0x400, 0x9, 0xa, 0x0, 0x0, 0x87}, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x8}, {0x2, 0x1, 0x400000000000, 0x100}, 0xfffffffe}, [@tmpl={0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x2004c080}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'erspan0\x00', @multicast}) write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r5 = shmget(0x0, 0xe000, 0x200, &(0x7f0000fef000/0xe000)=nil) shmctl$IPC_RMID(r5, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x3, @empty, 0x23}, 0x1c) sendmmsg$inet6(r6, 0x0, 0x1b, 0x200460c0) 6.911587364s ago: executing program 0 (id=2906): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) mbind(&(0x7f00003e1000/0x4000)=nil, 0x4000, 0x8003, &(0x7f0000000000)=0x6, 0x7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r0, &(0x7f0000000580)={0x2020}, 0xff6a) 6.196072564s ago: executing program 3 (id=2909): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x1}, &(0x7f0000000200)=0x8) unshare(0x28000600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/mcfilter6\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001700)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x54}, 0x1, 0x0, 0x0, 0x40080a5}, 0x20008040) ioctl$DVB_DVR_DMX_REQBUFS(r1, 0xc0086f3c, &(0x7f00000000c0)={0xc8, 0xac}) preadv(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0xbb21, 0x3) 5.464403325s ago: executing program 3 (id=2911): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xd, [0xc, 0xe, 0x5, 0x1, 0xa, 0xd, 0x3, 0xa, 0x4, 0xf, 0xc, 0x5, 0xa, 0x10, 0xe, 0x4], 0x0, [0x1, 0x2, 0x4, 0x5, 0x9, 0x3, 0x1, 0x6, 0x0, 0x81, 0x2, 0x1000, 0x4, 0xc, 0x0, 0x7], [0xfffd, 0xd, 0xd96c, 0x0, 0x2, 0x2, 0x3ff, 0x2, 0x9, 0x7, 0xfff, 0x891d, 0x4, 0xd, 0x8, 0x5]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0xfffffffffffffeb5, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0xd, 0x6, 0x8, 0x8, 0x2, 0x0, 0x21, 0x8, 0xff, 0x10, 0x4], 0x3, [0xc, 0x103, 0x4, 0x2002, 0x1, 0x4, 0x1853, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0x2, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x27, 0xf7ff, 0x2, 0xc, 0x6, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(0x0, r2) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f00000002c0)="05031c00d3fc14e5fd004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) r13 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r13, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r9, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 5.260204881s ago: executing program 4 (id=2912): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x9, 0x3, 0xc, 0x0, 0x8000, 0x7, 0xff, 0x1, 0x4, 0x56, 0x58, 0x1, 0x0, 0x1, 0x5, 0xf0, 0xd6, 0x7, 0x1, '\x00', 0x2, 0xdbe}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.238157792s ago: executing program 3 (id=2913): r0 = syz_open_dev$evdev(0x0, 0x2, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xf3a, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8, 0x0, 0xfffffffe}}) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x1, 0x0) write(r3, &(0x7f0000000380), 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "00207420100020000000000000000000000000000000175a21ed00"}) setns(0xc9, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x502}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 5.042933957s ago: executing program 3 (id=2914): syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3e42}}}, &(0x7f0000000680)={0x44, &(0x7f0000000400)=ANY=[@ANYBLOB="20036400000022c487089d955526bed5fbc6efe02e984afb4bd4ca067308f9ed0432d20519a6e0697fc0d09b09fa88319ae78c082e10ca6cf74d0205622043f6b8f6590a8bc4f3810dfee867eb4c90b54a476d0b778130fbe49421a3ed5e2a"], &(0x7f0000000480)={0x0, 0xa, 0x1, 0x17}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x79}, &(0x7f0000000500)={0x20, 0x81, 0x3, "ec69ee"}, &(0x7f0000000540)={0x20, 0x82, 0x1, "bb"}, &(0x7f0000000580)={0x20, 0x83, 0x2, "34f8"}, &(0x7f00000005c0)={0x20, 0x84, 0x1, "06"}, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpriority(0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7fffffff, 0x80) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000080)=0x1000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48) setitimer(0x0, &(0x7f0000000000)={{0x0, 0xea60}, {0x77359400}}, 0x0) 4.441806514s ago: executing program 6 (id=2917): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x80000028b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket(0x2, 0xa, 0x300) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_THP_DISABLE(0x29, 0x1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, 0x0, 0x0}, 0x94) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) fsmount(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, 0x0, 0x78) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000140)={[{@init_itable}, {@data_err_ignore}, {@stripe={'stripe', 0x3d, 0x40}}]}, 0x3, 0x445, &(0x7f0000001340)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") 4.438365914s ago: executing program 0 (id=2918): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, 0x0) r0 = io_uring_setup(0x25f3, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x1, 0x18b}) setpriority(0x0, 0xffffffffffffffff, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_enter(r0, 0x2000000, 0x2, 0xf, 0x0, 0x0) 3.1892326s ago: executing program 6 (id=2919): write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000005c0)={0xf, {"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", 0x1010}}, 0x1006) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=@newtaction={0x14, 0x30, 0xb}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) 3.15776239s ago: executing program 1 (id=2920): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000001c00)=r2) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 3.108721822s ago: executing program 4 (id=2921): fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r0 = fsopen(0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x9b2cd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace(0x4208, r1) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x400c8c0) r5 = fsmount(r0, 0x0, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x32, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x23e9bf76ba591ae7, r5, 0x8, &(0x7f0000000300)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x16983, r5, 0x3, &(0x7f0000000380)=[r5, r5, r5, r5, r5, r5, r4, r5], &(0x7f0000000480)=[{0x3, 0x1, 0x5, 0xc}, {0x3, 0x1, 0xe, 0x9}, {0x4, 0x2, 0x7, 0xc}], 0x10, 0x3}, 0x94) kcmp(r1, r1, 0x2, 0xffffffffffffffff, r6) open(0x0, 0xfb3bdc61155d168b, 0xa) mkdirat(r5, 0x0, 0xc1) lsetxattr$security_ima(0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x2, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, &(0x7f00000000c0)=',\xb3(,{\\)\x00') r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x200080d0) syz_mount_image$fuse(0x0, 0x0, 0x11000a0, 0x0, 0xfe, 0x0, 0x0) 2.919967788s ago: executing program 3 (id=2922): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa000, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2000000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x122d, &(0x7f0000001280)="$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") r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = fanotify_init(0x81, 0x40000) fanotify_mark(r1, 0x105, 0x800101b, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x970a40, 0x6ab858183a7ef6bf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pread64(0xffffffffffffffff, &(0x7f000001a100)=""/102353, 0x18fd1, 0xfffffffffffffff6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000140)=""/157, 0x9d}], 0x1, 0xa2, 0x1000000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 2.045094222s ago: executing program 6 (id=2923): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @empty, 0xffff}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="e400000000"], 0x100}, 0x0) 1.940573065s ago: executing program 4 (id=2924): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x0, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x1b, &(0x7f00000000c0)=0x70, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0xa0}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0) 1.41609385s ago: executing program 0 (id=2925): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000a20000/0x2000)=nil) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) close_range(r4, 0xffffffffffffffff, 0x2) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000340), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40002, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000002c0)={[{0x6, 0x4, 0x5, 0xd0, 0x2, 0x12, 0x7, 0xd, 0xb9, 0x3, 0xa, 0x9, 0x201}, {0x804, 0x1, 0x4, 0x44, 0x7, 0xf9, 0x2, 0x3, 0x1f, 0x3, 0x4, 0x7b, 0x206}, {0x6, 0x15, 0x2, 0x34, 0x58, 0x1, 0x3, 0x84, 0x0, 0x4, 0x4, 0x7, 0x2}], 0xfaffffff}) 857.190936ms ago: executing program 3 (id=2926): r0 = socket(0x10, 0x3, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) request_key(&(0x7f0000000240)='pkcs7_test\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000680)='\xf3\xcb\xd3\x1f\xd9A\xd4\xdet\x9e\xf1)\x00\xf9\xc4I7|\x1bB\x13\x812B\xb4\xad\xd4\xf8\x10\x01\xc1\xe0<.\xcd;\xce\xbf\xba\xd8\x85\xe0\xfe\t\b\xdfnP\xbf\xf1\x1a\x19\xff\x86@H\xa1\xed\xa3\x8d\x1b\xefE\xba\xc0[e\xdc\x15u\x03\xa8\x16\x0f\x9c{\xe0\xa8\x8d\x16?\x0f\xecYInt\xc3,\xf0\xee\xe1\xf9\xda\xb4\x0ey\xb3\xaa\xf1\x8fLN\x9f\xea\\\x01\'\xe4\x99\xed\x14\xb8o\xdet\x86\x1aX\xad\xc0\xa6F\xf0\xab8\xf0\xb4;=k\xa1>\n\x91\x11Qb[ch\x1fyb%[\x89Z\x9d\x91\x01Z\x80\xbb\x972\xbf\xdb\x8d\b,\xd7\xa3\x112W\xf7\xd5LM\x94o\xf4?\x12\xc3\xae\x92\x9ed\x94\xf9]\xc8\xfa\xf2$\xa8\xca\xb7`\xf0\xd7\x04qudz\xfa\x14\xdf\xc1\"[l\xee\x98\x87\xf4\xe8%z\xc3\xa2\x13\xe4S\xbbD]zO\x13\a\x1dq\xea\xec_\xd2(\xb6\x93_\x9dP\xbbT\x8f\xe6\x13C \aX\xbb\xfb\x98T\xc0\xb8\xae\xaf5q\x97\xf1\xcb=\x11\x99\x8br\x9b\x19\xdf\x9a\xe26 I`\xad\x86gNaK\xab\a\xde\xce\x86\xf2\xe2\xb3\x9f\xf7\xa6\xaf\x8c\xfax\x80\xdb\x17AT3Q\xb0h\xbe\xd5\xf4\xe3\xad\xc5\xbb\xfdf\xe4_NL \xe3\xd5\x8d\x03\r\xaa\x89\xbfs\xbc\x92_$\xb6\xd9\x9e/\xf0\xfb\xbe\'\xe3\x10\xa5\x7fA\xd1\x99\n\x80\xdb\x0e\xbc(\xc6\xd2\x8d\x1c\x1b\xfaW\xa7\xcd\xa5\x8e\r\x19v\xdb\xa4\xfb\xe9K\xdc%\xf7\xed\x17\x1a\xeb\x12M\xda\xd3\x7fD\x80\xf7X\x9c8\xc2%!J\xf8\x03/\"\xdd\xf1X:(\xc0\xc8?!::,\xa8/d\xa4\xba>\xea\x17~%\x8a(]U\xee\xdb\xf12\xc9\xfc\xa9\x1e\xe0s>\x16\x7f\xed\x15\x1bS\xf7\x99\xceO\xcb\xc5\x98\v\xab\xb8\xf8#\x9b\xf2\x97\xad\xb0\xb2Y\xf6\x85\xca\xb6g7\xb9c=T\x16\xc1\xbc\xfer\xb7\\\xd4[Q\x80N[`\x93\xf3\x10\xdaz\xdf\x85A\xa9\x98\xb6\x9f\x1c~\xb3\x80\xb6)\xfdEu\xde\xe8\xf4:2\x13\xec\x8cC\xe1\xb1\t\xb3<\xb60\x87\x80\x93<\xb8aI;\x03\xfe\x95\bn\xd7\xbf/\x89\xd3\xda\xf5\xfa\xcf\xdb\xfe\x12\x1b`\xab)F\x9e\xef27\xab\x9b\xadjQ\xa0\x95tF^\x81\xa8\xf4\xdc\x8bCD\x12\xba\xc6\xb3\x18^?\xf8\r', 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002", @ANYBLOB='\x00', @ANYRESDEC], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x2, 0x54, &(0x7f00000002c0)=[@in6={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffeffff}, @in6={0xa, 0x4e22, 0x6, @private2, 0x3}, @in6={0xa, 0x4e24, 0x7, @local, 0x2}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000380)={r4, 0x7, 0x2, 0x20d8a67d, 0x3, 0xba4}, 0x14) write$char_usb(r2, 0x0, 0x0) close_range(r2, r2, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) r6 = syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) ioctl$OCFS2_IOC_RESVSP64(r5, 0x4030582a, &(0x7f00000001c0)={0x1, 0x2, 0x61db, 0x1000, 0x2, 0x9}) tgkill(r6, r6, 0x9) syz_usb_control_io(r1, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x3ff}, 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f0000000340), 0x11000) writev(r8, &(0x7f0000000e00)=[{&(0x7f0000000a40)='^', 0x1}], 0x1) io_uring_register$IORING_REGISTER_IOWQ_AFF(r8, 0x11, &(0x7f0000000140)="2a7ec3e186d46f5c4512edf2c51f9f72067a0c37b17924240b0025a8dcf0f51707367e7c5e1a60a8bacb61f93d455ccd1132d0e2f39fb8a2897f5f6ab3c550b1687c3bf1953d44190b82208583506d26656e4efb0a", 0x55) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001a00010000000000000000000a0000000000b2"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000000c0)={r0, r9}) ioctl$sock_inet_SIOCSIFADDR(r9, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @multicast1}}) 771.758938ms ago: executing program 4 (id=2927): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0, 0x5000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/245, &(0x7f0000000780)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)={0x1, 0x0, [{0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX, @ANYRES16, @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$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") 664.915541ms ago: executing program 1 (id=2928): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB=':\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=0x0, @ANYBLOB="6f9c"], 0x20) 600.195693ms ago: executing program 6 (id=2929): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000200)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000003c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000200)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x1, @loopback, 0x3}, r3}}, 0x30) 520.182775ms ago: executing program 1 (id=2930): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) socket$kcm(0x11, 0x200000000000003, 0x300) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0x60000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) 413.717419ms ago: executing program 6 (id=2931): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0) 394.804529ms ago: executing program 4 (id=2932): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x6c0000, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002100)=0x40) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, 0x0, 0x0) pipe2$9p(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200040fe}, 0x40000) 234.537084ms ago: executing program 4 (id=2933): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f00000000c0)={0x1}) 202.201155ms ago: executing program 1 (id=2934): fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r0 = fsopen(0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x9b2cd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace(0x4208, r1) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x400c8c0) r5 = fsmount(r0, 0x0, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x32, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x23e9bf76ba591ae7, r5, 0x8, &(0x7f0000000300)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x16983, r5, 0x3, &(0x7f0000000380)=[r5, r5, r5, r5, r5, r5, r4, r5], &(0x7f0000000480)=[{0x3, 0x1, 0x5, 0xc}, {0x3, 0x1, 0xe, 0x9}, {0x4, 0x2, 0x7, 0xc}], 0x10, 0x3}, 0x94) kcmp(r1, r1, 0x2, 0xffffffffffffffff, r6) open(0x0, 0xfb3bdc61155d168b, 0xa) mkdirat(r5, 0x0, 0xc1) lsetxattr$security_ima(0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x2, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, &(0x7f00000000c0)=',\xb3(,{\\)\x00') r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x200080d0) syz_mount_image$fuse(0x0, 0x0, 0x11000a0, 0x0, 0xfe, 0x0, 0x0) 0s ago: executing program 6 (id=2935): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xd, [0xc, 0xe, 0x5, 0x1, 0xa, 0xd, 0x3, 0xa, 0x4, 0xf, 0xc, 0x5, 0xa, 0x10, 0xe, 0x4], 0x0, [0x1, 0x2, 0x4, 0x5, 0x9, 0x3, 0x1, 0x6, 0x0, 0x81, 0x2, 0x1000, 0x4, 0xc, 0x0, 0x7], [0xfffd, 0xd, 0xd96c, 0x0, 0x2, 0x2, 0x3ff, 0x2, 0x9, 0x7, 0xfff, 0x891d, 0x4, 0xd, 0x8, 0x5]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0xfffffffffffffeb5, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0xd, 0x6, 0x8, 0x8, 0x2, 0x0, 0x21, 0x8, 0xff, 0x10, 0x4], 0x3, [0xc, 0x103, 0x4, 0x2002, 0x1, 0x4, 0x1853, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0x2, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x27, 0xf7ff, 0x2, 0xc, 0x6, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(0x0, r2) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f00000002c0)="05031c00d3fc14e5fd004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) r13 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r13, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r9, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) kernel console output (not intermixed with test programs): 513.703502][T10588] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 513.712847][T10588] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 513.726162][T10588] Error parsing options; rc = [-22] [ 515.531389][T10617] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4190] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10617] [ 515.615628][ T4188] Bluetooth: Wrong link type (-22) [ 517.576431][T10641] loop3: detected capacity change from 0 to 1024 [ 518.524338][T10647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1903'. [ 518.747207][T10652] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 518.754840][T10652] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 518.762383][T10652] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 518.775658][T10652] Error parsing options; rc = [-22] [ 519.543661][T10657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1905'. [ 519.787678][T10657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1905'. [ 523.175161][T10696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1917'. [ 523.582537][T10708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1920'. [ 523.602497][T10708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1920'. [ 525.281050][T10747] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 525.932807][T10755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1932'. [ 526.310053][T10760] loop3: detected capacity change from 0 to 16 [ 526.319040][ T6222] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 526.376482][T10760] erofs: (device loop3): mounted with root inode @ nid 36. [ 526.957029][ T6222] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.999016][ T6222] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 528.135642][ T6222] usb 1-1: config 0 interface 0 has no altsetting 0 [ 528.195937][ T6222] usb 1-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 528.431554][ T6222] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.477910][ T6222] usb 1-1: config 0 descriptor?? [ 529.250682][ T6222] usb 1-1: can't set config #0, error -71 [ 529.258330][ T6222] usb 1-1: USB disconnect, device number 14 [ 531.935612][T10806] netem: change failed [ 534.262973][T10862] loop5: detected capacity change from 0 to 16 [ 535.111466][T10862] erofs: (device loop5): mounted with root inode @ nid 36. [ 537.932386][T10918] loop5: detected capacity change from 0 to 256 [ 537.994259][T10918] exfat: Unknown parameter 'ÿ' [ 538.015494][T10919] netem: change failed [ 540.977645][T10963] loop3: detected capacity change from 0 to 1024 [ 541.486611][T10963] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,abort,init_itable,data_err=ignore,abort,,errors=continue. Quota mode: none. [ 543.258994][ T4229] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 543.338147][T10998] netem: change failed [ 544.510931][ T4229] usb 4-1: device not accepting address 12, error -71 [ 544.567236][T11014] loop3: detected capacity change from 0 to 1024 [ 544.826093][T11014] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 545.619550][T11025] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2005'. [ 546.653459][T11035] loop3: detected capacity change from 0 to 512 [ 546.770350][T11035] EXT4-fs (loop3): Ignoring removed orlov option [ 546.801224][T11035] EXT4-fs (loop3): Ignoring removed oldalloc option [ 546.841134][T11035] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 546.914970][T11035] EXT4-fs (loop3): failed to initialize system zone (-117) [ 546.934760][T11035] EXT4-fs (loop3): mount failed [ 548.173937][T11053] ODEBUG: Out of memory. ODEBUG disabled [ 548.603456][T11057] loop5: detected capacity change from 0 to 1024 [ 549.283797][ T6047] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 549.462325][T11065] loop5: detected capacity change from 0 to 128 [ 549.503293][T11065] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 549.517842][T11065] System zones: 1-3, 19-19, 35-36 [ 549.538650][T11065] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 549.567583][T11065] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 549.613503][T11065] EXT4-fs warning (device loop5): verify_group_input:165: Last group not full [ 549.644148][ T6047] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.667558][ T6047] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 549.682891][ T6047] usb 1-1: config 0 interface 0 has no altsetting 0 [ 549.692908][ T6047] usb 1-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 549.708602][ T6047] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.734896][ T6047] usb 1-1: config 0 descriptor?? [ 549.875305][T11072] netem: change failed [ 550.130972][T11082] netem: change failed [ 550.275872][T11080] loop5: detected capacity change from 0 to 16 [ 550.944337][T11080] erofs: (device loop5): mounted with root inode @ nid 36. [ 551.964481][T11095] loop3: detected capacity change from 0 to 1024 [ 552.701350][ T6047] usbhid 1-1:0.0: can't add hid device: -71 [ 552.707579][ T6047] usbhid: probe of 1-1:0.0 failed with error -71 [ 552.716230][ T6047] usb 1-1: USB disconnect, device number 15 [ 556.265731][T11153] loop5: detected capacity change from 0 to 1024 [ 558.446536][T11180] x_tables: ip6_tables: NFQUEUE.2 target: invalid size 8 (kernel) != (user) 0 [ 559.392628][T11195] loop3: detected capacity change from 0 to 1024 [ 560.660252][T11219] loop5: detected capacity change from 0 to 512 [ 560.745353][T11219] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 560.914014][ T6047] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 561.304077][ T6047] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.331859][ T6047] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 561.379464][ T6047] usb 1-1: config 0 interface 0 has no altsetting 0 [ 561.389347][ T6047] usb 1-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 561.399617][ T6047] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.420941][ T6047] usb 1-1: config 0 descriptor?? [ 562.868499][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.879475][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.214668][ T6047] usbhid 1-1:0.0: can't add hid device: -71 [ 563.235326][ T6047] usbhid: probe of 1-1:0.0 failed with error -71 [ 563.268860][ T6047] usb 1-1: USB disconnect, device number 16 [ 563.592105][T11274] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 563.599689][T11274] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 563.607391][T11274] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 563.620661][T11274] Error parsing options; rc = [-22] [ 563.667400][T11276] loop5: detected capacity change from 0 to 128 [ 563.881378][T11276] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 564.261394][T11276] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 564.323320][T11276] EXT4-fs (loop5): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 564.641441][T11288] netem: change failed [ 565.357036][ T4376] Bluetooth: hci5: command 0x0406 tx timeout [ 566.641375][ T4376] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 567.173411][T11330] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 567.181048][T11330] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 567.188758][T11330] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 567.202110][T11330] Error parsing options; rc = [-22] [ 567.954237][ T4376] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.992234][ T4376] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 568.043785][ T4376] usb 1-1: config 0 interface 0 has no altsetting 0 [ 568.091812][ T4376] usb 1-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 568.101258][ T4376] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.195163][T11343] netem: change failed [ 568.962812][ T4376] usb 1-1: config 0 descriptor?? [ 569.014390][ T4376] usb 1-1: can't set config #0, error -71 [ 569.042610][ T4376] usb 1-1: USB disconnect, device number 17 [ 569.514065][ T6047] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 569.914045][ T6047] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 569.956164][ T6047] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 570.029285][ T6047] usb 4-1: config 0 interface 0 has no altsetting 0 [ 570.077635][ T6047] usb 4-1: New USB device found, idVendor=056a, idProduct=00fb, bcdDevice= 0.00 [ 570.105914][ T6047] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.170204][ T6047] usb 4-1: config 0 descriptor?? [ 570.635801][T11379] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 570.643336][T11379] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 570.650976][T11379] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 570.664126][T11379] Error parsing options; rc = [-22] [ 570.693960][ T6047] wacom 0003:056A:00FB.0005: item fetching failed at offset 4/6 [ 570.702035][ T6047] wacom 0003:056A:00FB.0005: parse failed [ 570.708140][ T6047] wacom: probe of 0003:056A:00FB.0005 failed with error -22 [ 570.914593][ T7] usb 4-1: USB disconnect, device number 14 [ 571.497749][T11391] netem: change failed [ 574.247130][T11434] loop3: detected capacity change from 0 to 128 [ 574.424113][T11434] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 574.569543][T11434] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 574.674163][T11434] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 575.310696][T11450] netem: change failed [ 578.001646][T11483] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 578.009260][T11483] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 578.016883][T11483] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 578.030143][T11483] Error parsing options; rc = [-22] [ 579.678440][T11500] netem: change failed [ 582.091778][T11550] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 582.099322][T11550] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 582.106931][T11550] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 582.120176][T11550] Error parsing options; rc = [-22] [ 583.000489][T11565] netem: change failed [ 584.006612][T11585] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2175'. [ 584.583899][ T4229] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 585.375109][T11599] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 585.382609][T11599] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 585.390205][T11599] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 585.403428][T11599] Error parsing options; rc = [-22] [ 585.790407][T11601] netem: change failed [ 586.514114][ T4229] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.537322][ T4229] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 586.550392][ T4229] usb 1-1: config 0 interface 0 has no altsetting 0 [ 586.557162][ T4229] usb 1-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 586.566666][ T4229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.588711][ T4229] usb 1-1: config 0 descriptor?? [ 586.841074][T11619] netem: change failed [ 587.857755][T11626] loop5: detected capacity change from 0 to 16 [ 588.299309][T11626] erofs: (device loop5): mounted with root inode @ nid 36. [ 588.525131][ T4229] usbhid 1-1:0.0: can't add hid device: -71 [ 588.720285][ T4229] usbhid: probe of 1-1:0.0 failed with error -71 [ 588.983048][ T4229] usb 1-1: USB disconnect, device number 18 [ 589.812149][T11650] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 589.819707][T11650] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 589.827378][T11650] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 589.840573][T11650] Error parsing options; rc = [-22] [ 590.399079][T11656] loop5: detected capacity change from 0 to 1024 [ 590.711515][T11655] netem: change failed [ 590.866313][T11656] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,abort,init_itable,data_err=ignore,abort,,errors=continue. Quota mode: none. [ 592.103808][ T4376] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 594.043832][ T4376] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 594.051484][ T4376] usb 6-1: can't read configurations, error -71 [ 594.142284][T11720] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 594.150000][T11720] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 594.157615][T11720] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 594.170854][T11720] Error parsing options; rc = [-22] [ 594.708047][T11724] netem: change failed [ 595.259200][T11727] ip_tables: iptables: counters copy to user failed while replacing table [ 596.202405][T11742] netlink: 'syz.0.2220': attribute type 4 has an invalid length. [ 598.980538][T11749] binder: 11748:11749 ioctl c00c620f 2000000001c0 returned -22 [ 600.526004][T11769] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 600.533587][T11769] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 600.541224][T11769] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 600.554596][T11769] Error parsing options; rc = [-22] [ 602.039008][T11794] netem: change failed [ 603.460589][T11816] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 603.460657][T11816] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 603.460694][T11816] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 603.460798][T11816] Error parsing options; rc = [-22] [ 603.671291][T11815] loop5: detected capacity change from 0 to 16 [ 604.263875][T11815] erofs: (device loop5): mounted with root inode @ nid 36. [ 606.118686][T11839] loop5: detected capacity change from 0 to 512 [ 606.195397][T11839] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 606.243238][T11839] EXT4-fs (loop5): 1 truncate cleaned up [ 606.260327][T11839] EXT4-fs (loop5): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 606.948266][T11853] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 606.955811][T11853] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 606.963444][T11853] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 606.976753][T11853] Error parsing options; rc = [-22] [ 607.930129][T11866] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2260'. [ 607.983276][T11866] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2260'. [ 608.290831][T11874] loop5: detected capacity change from 0 to 16 [ 608.346843][T11874] erofs: (device loop5): mounted with root inode @ nid 36. [ 610.270835][T11890] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 610.278490][T11890] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 610.286229][T11890] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 610.299395][T11890] Error parsing options; rc = [-22] [ 611.349640][T11900] netem: change failed [ 613.780139][T11926] loop3: detected capacity change from 0 to 512 [ 614.053882][T11926] EXT4-fs (loop3): inline encryption not supported [ 614.079071][T11926] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 614.210652][T11933] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 614.218419][T11933] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 614.226214][T11933] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 614.239416][T11933] Error parsing options; rc = [-22] [ 614.558681][T11926] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 614.754010][T11926] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2278: invalid indirect mapped block 2683928664 (level 1) [ 614.844053][T11926] EXT4-fs (loop3): 1 truncate cleaned up [ 614.904213][T11926] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,init_itable=0x0000000000000b8f,nodiscard,inlinecrypt,usrjquota=.sb=0x0000000000000007,nodiscard,jqfmt=vfsv0,noload,debug_want_extra_isize=0x0000000000000006,noload,,,errors=continue. Quota mode: writeback. [ 616.281764][T11960] loop3: detected capacity change from 0 to 4096 [ 616.346937][T11960] EXT4-fs (loop3): Test dummy encryption mode enabled [ 616.399778][T11960] EXT4-fs (loop3): Ignoring removed orlov option [ 616.418253][T11970] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 616.425819][T11970] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 616.433356][T11970] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 616.446663][T11970] Error parsing options; rc = [-22] [ 616.800468][T11960] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 617.135825][T11928] udevd[11928]: symlink '../../loop3' '/dev/disk/by-diskseq/373.tmp-b7:3' failed: Read-only file system [ 617.176636][ T26] audit: type=1800 audit(1791550849.218:8): pid=11960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2287" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 617.215126][T11928] udevd[11928]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 617.309934][T11928] udevd[11928]: symlink '../../loop3' '/dev/disk/by-diskseq/373.tmp-b7:3' failed: Read-only file system [ 617.328599][T11928] udevd[11928]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 617.552497][T11986] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 617.938651][T11928] udevd[11928]: symlink '../../loop3' '/dev/disk/by-diskseq/373.tmp-b7:3' failed: Read-only file system [ 618.188128][T11928] udevd[11928]: symlink '../../loop3' '/dev/disk/by-diskseq/373.tmp-b7:3' failed: Read-only file system [ 618.313413][T11995] loop5: detected capacity change from 0 to 512 [ 618.484392][T11995] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 618.494982][T11995] EXT4-fs (loop5): orphan cleanup on readonly fs [ 618.510041][T11995] Quota error (device loop5): v2_read_file_info: Free block number too big (0 >= 0). [ 618.585377][T12002] netem: change failed [ 619.022830][T11928] udevd[11928]: symlink '../../loop5' '/dev/disk/by-diskseq/375.tmp-b7:5' failed: Read-only file system [ 619.216226][T11928] udevd[11928]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 619.239746][T11995] EXT4-fs warning (device loop5): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 619.260699][T11995] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 619.269592][T11995] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2304: bg 0: block 40: padding at end of block bitmap is not set [ 619.291455][T11995] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 619.301920][T11995] EXT4-fs (loop5): 1 truncate cleaned up [ 619.349679][T11995] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 619.368381][T11928] udevd[11928]: symlink '../../loop5' '/dev/disk/by-diskseq/375.tmp-b7:5' failed: Read-only file system [ 619.427758][T11928] udevd[11928]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 619.726072][T12015] loop3: detected capacity change from 0 to 512 [ 619.865044][T12020] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 619.872566][T12020] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 619.880198][T12020] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 619.893443][T12020] Error parsing options; rc = [-22] [ 620.463877][T12015] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 620.705948][T12015] EXT4-fs (loop3): 1 truncate cleaned up [ 620.712231][T12015] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 623.459666][T12070] netem: change failed [ 624.236725][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.243064][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.828625][T12097] netlink: 'syz.4.2329': attribute type 4 has an invalid length. [ 627.754343][T12118] netem: change failed [ 628.649972][T12129] FAULT_INJECTION: forcing a failure. [ 628.649972][T12129] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 628.764394][T12132] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2332'. [ 629.373910][T12129] CPU: 0 PID: 12129 Comm: syz.0.2340 Not tainted syzkaller #0 [ 629.381443][T12129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 629.391545][T12129] Call Trace: [ 629.394835][T12129] [ 629.397782][T12129] dump_stack_lvl+0x188/0x250 [ 629.402495][T12129] ? show_regs_print_info+0x20/0x20 [ 629.407703][T12129] ? load_image+0x410/0x410 [ 629.412312][T12129] ? __lock_acquire+0x7d40/0x7d40 [ 629.417352][T12129] should_fail+0x383/0x4b0 [ 629.421785][T12129] strncpy_from_user+0x32/0x350 [ 629.426667][T12129] getname_flags+0xf2/0x4f0 [ 629.431257][T12129] __x64_sys_symlinkat+0x78/0xa0 [ 629.436313][T12129] do_syscall_64+0x4c/0xa0 [ 629.440760][T12129] ? clear_bhb_loop+0x30/0x80 [ 629.445464][T12129] ? clear_bhb_loop+0x30/0x80 [ 629.450163][T12129] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 629.456069][T12129] RIP: 0033:0x7fb52c87c1d9 [ 629.460496][T12129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 629.480107][T12129] RSP: 002b:00007fb52aab3028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 629.488548][T12129] RAX: ffffffffffffffda RBX: 00007fb52cb04090 RCX: 00007fb52c87c1d9 [ 629.496607][T12129] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 629.504590][T12129] RBP: 00007fb52c913888 R08: 0000000000000000 R09: 0000000000000000 [ 629.512661][T12129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 629.520785][T12129] R13: 00007fb52cb04128 R14: 00007fb52cb04090 R15: 00007fff52737328 [ 629.528785][T12129] [ 630.653505][T12148] loop3: detected capacity change from 0 to 16 [ 631.333155][T12148] erofs: (device loop3): mounted with root inode @ nid 36. [ 631.375226][T12149] udevd[12149]: symlink '../../loop3' '/dev/disk/by-diskseq/379.tmp-b7:3' failed: Read-only file system [ 631.444664][T12153] loop5: detected capacity change from 0 to 512 [ 631.494612][T12149] udevd[12149]: symlink '../../loop3' '/dev/disk/by-uuid/fcd48663-7311-483d-ab26-e63db9076faf.tmp-b7:3' failed: Read-only file system [ 631.583557][T12153] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 631.646184][T12156] udevd[12156]: symlink '../../loop5' '/dev/disk/by-diskseq/380.tmp-b7:5' failed: Read-only file system [ 631.696379][T12149] udevd[12149]: symlink '../../loop3' '/dev/disk/by-diskseq/379.tmp-b7:3' failed: Read-only file system [ 631.730921][T12153] EXT4-fs (loop5): 1 truncate cleaned up [ 631.744993][T12153] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 631.796526][T12156] udevd[12156]: symlink '../../loop5' '/dev/disk/by-label/\x86\x5b.tmp-b7:5' failed: Read-only file system [ 631.809573][T12149] udevd[12149]: symlink '../../loop3' '/dev/disk/by-diskseq/379.tmp-b7:3' failed: Read-only file system [ 631.866915][T12149] udevd[12149]: symlink '../../loop3' '/dev/disk/by-diskseq/379.tmp-b7:3' failed: Read-only file system [ 631.894159][T12163] loop3: detected capacity change from 0 to 128 [ 631.917111][T12156] udevd[12156]: symlink '../../loop5' '/dev/disk/by-diskseq/380.tmp-b7:5' failed: Read-only file system [ 632.000187][T12156] udevd[12156]: symlink '../../loop5' '/dev/disk/by-label/\x86\x5b.tmp-b7:5' failed: Read-only file system [ 632.038329][T12149] udevd[12149]: symlink '../../loop3' '/dev/disk/by-diskseq/382.tmp-b7:3' failed: Read-only file system [ 632.255279][T12165] netem: change failed [ 633.481340][T12176] loop5: detected capacity change from 0 to 256 [ 633.995668][T12192] loop5: detected capacity change from 0 to 2048 [ 634.415197][T12192] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 634.965932][T12198] syz.0.2362 uses obsolete (PF_INET,SOCK_PACKET) [ 635.259414][T12203] loop5: detected capacity change from 0 to 256 [ 636.600994][T12216] netem: change failed [ 637.223098][T12226] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2371'. [ 637.426533][T12230] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 637.434067][T12230] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 637.441605][T12230] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 637.454894][T12230] Error parsing options; rc = [-22] [ 639.261308][T12247] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2375'. [ 639.939989][T12260] netem: change failed [ 640.940964][T12284] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 640.948517][T12284] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 640.956316][T12284] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 640.969693][T12284] Error parsing options; rc = [-22] [ 641.679155][T12286] loop3: detected capacity change from 0 to 256 [ 641.825349][T12288] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2387'. [ 642.051236][T12286] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 642.495933][T12296] loop5: detected capacity change from 0 to 512 [ 642.874145][T12296] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 643.206864][T12296] EXT4-fs (loop5): 1 truncate cleaned up [ 643.287307][T12296] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 644.586276][T12322] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2399'. [ 644.652741][T12323] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 644.660480][T12323] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 644.668194][T12323] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 644.681377][T12323] Error parsing options; rc = [-22] [ 646.043895][T12336] netem: change failed [ 646.767628][T12343] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2404'. [ 647.037514][T12348] netlink: 'syz.3.2403': attribute type 4 has an invalid length. [ 647.053062][T12343] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2404'. [ 647.389557][T12360] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2411'. [ 647.766550][T12368] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 647.774124][T12368] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 647.781663][T12368] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 647.795042][T12368] Error parsing options; rc = [-22] [ 649.839361][T12383] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2418'. [ 649.878261][T12383] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2418'. [ 650.178396][T12399] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2424'. [ 650.940233][T12396] netlink: 'syz.0.2422': attribute type 4 has an invalid length. [ 651.036715][T12403] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 651.619448][T12414] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 651.627011][T12414] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 651.634611][T12414] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 651.647830][T12414] Error parsing options; rc = [-22] [ 652.657010][T12424] netem: change failed [ 653.342280][T12431] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2434'. [ 653.390037][T12431] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2434'. [ 654.255157][T12438] loop5: detected capacity change from 0 to 16 [ 654.487738][T12438] erofs: (device loop5): mounted with root inode @ nid 36. [ 654.629561][T12438] attempt to access beyond end of device [ 654.629561][T12438] loop5: rw=0, want=40, limit=16 [ 654.822830][T12447] netlink: 'syz.4.2437': attribute type 4 has an invalid length. [ 655.429216][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3911 @ nid 36 [ 655.429312][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3910 @ nid 36 [ 655.429336][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3909 @ nid 36 [ 655.429359][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3908 @ nid 36 [ 655.429382][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3907 @ nid 36 [ 655.429404][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3906 @ nid 36 [ 655.429426][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3905 @ nid 36 [ 655.429448][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3904 @ nid 36 [ 655.429471][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3903 @ nid 36 [ 655.429493][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3902 @ nid 36 [ 655.429515][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3901 @ nid 36 [ 655.429538][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3900 @ nid 36 [ 655.429560][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3899 @ nid 36 [ 655.429583][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3898 @ nid 36 [ 655.429605][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3897 @ nid 36 [ 655.429627][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3896 @ nid 36 [ 655.429650][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3895 @ nid 36 [ 655.429672][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3894 @ nid 36 [ 655.429694][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3893 @ nid 36 [ 655.429725][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3892 @ nid 36 [ 655.429748][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3891 @ nid 36 [ 655.429770][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3890 @ nid 36 [ 655.429792][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3889 @ nid 36 [ 655.429813][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3888 @ nid 36 [ 655.429837][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3887 @ nid 36 [ 655.429859][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3886 @ nid 36 [ 655.429881][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3885 @ nid 36 [ 655.429903][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3884 @ nid 36 [ 655.429926][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3883 @ nid 36 [ 655.429948][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3882 @ nid 36 [ 655.429970][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3881 @ nid 36 [ 655.429992][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3880 @ nid 36 [ 655.430014][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3879 @ nid 36 [ 655.430036][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3878 @ nid 36 [ 655.430057][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3877 @ nid 36 [ 655.430079][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3876 @ nid 36 [ 655.430101][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3875 @ nid 36 [ 655.430122][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3874 @ nid 36 [ 655.430144][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3873 @ nid 36 [ 655.430165][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3872 @ nid 36 [ 655.430188][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3871 @ nid 36 [ 655.430209][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3870 @ nid 36 [ 655.430231][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3869 @ nid 36 [ 655.430253][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3868 @ nid 36 [ 655.430276][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3867 @ nid 36 [ 655.430297][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3866 @ nid 36 [ 655.430320][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3865 @ nid 36 [ 655.430342][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3864 @ nid 36 [ 655.430365][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3863 @ nid 36 [ 655.430386][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3862 @ nid 36 [ 655.430408][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3861 @ nid 36 [ 655.430429][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3860 @ nid 36 [ 655.430452][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3859 @ nid 36 [ 655.430474][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3858 @ nid 36 [ 655.430495][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3857 @ nid 36 [ 655.430517][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3856 @ nid 36 [ 655.430540][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3855 @ nid 36 [ 655.430562][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3854 @ nid 36 [ 655.430583][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3853 @ nid 36 [ 655.430605][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3852 @ nid 36 [ 655.430628][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3851 @ nid 36 [ 655.430650][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3850 @ nid 36 [ 655.430671][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3849 @ nid 36 [ 655.430693][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3848 @ nid 36 [ 655.430723][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3847 @ nid 36 [ 655.430745][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3846 @ nid 36 [ 655.430766][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3845 @ nid 36 [ 655.430788][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3844 @ nid 36 [ 655.430811][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3843 @ nid 36 [ 655.430833][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3842 @ nid 36 [ 655.430855][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3841 @ nid 36 [ 655.430877][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3840 @ nid 36 [ 655.430900][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3839 @ nid 36 [ 655.430922][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3838 @ nid 36 [ 655.430944][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3837 @ nid 36 [ 655.430966][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3836 @ nid 36 [ 655.430989][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3835 @ nid 36 [ 655.431011][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3834 @ nid 36 [ 655.431033][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3833 @ nid 36 [ 655.431054][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3832 @ nid 36 [ 655.431077][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3831 @ nid 36 [ 655.431099][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3830 @ nid 36 [ 655.431120][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3829 @ nid 36 [ 655.431141][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3828 @ nid 36 [ 655.431164][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3827 @ nid 36 [ 655.431186][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3826 @ nid 36 [ 655.431207][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3825 @ nid 36 [ 655.431229][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3824 @ nid 36 [ 655.431252][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3823 @ nid 36 [ 655.431273][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3822 @ nid 36 [ 655.431295][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3821 @ nid 36 [ 655.431317][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3820 @ nid 36 [ 655.431339][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3819 @ nid 36 [ 655.431361][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3818 @ nid 36 [ 655.431399][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3817 @ nid 36 [ 655.431421][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3816 @ nid 36 [ 655.431444][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3815 @ nid 36 [ 655.431466][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3814 @ nid 36 [ 655.431488][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3813 @ nid 36 [ 655.431510][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3812 @ nid 36 [ 655.431533][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3811 @ nid 36 [ 655.431555][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3810 @ nid 36 [ 655.431577][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3809 @ nid 36 [ 655.431598][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3808 @ nid 36 [ 655.431621][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3807 @ nid 36 [ 655.431644][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3806 @ nid 36 [ 655.431665][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3805 @ nid 36 [ 655.431687][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3804 @ nid 36 [ 655.431717][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3803 @ nid 36 [ 655.431739][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3802 @ nid 36 [ 655.431761][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3801 @ nid 36 [ 655.431782][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3800 @ nid 36 [ 655.431805][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3799 @ nid 36 [ 655.431826][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3798 @ nid 36 [ 655.431849][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3797 @ nid 36 [ 655.431871][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3796 @ nid 36 [ 655.431893][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3795 @ nid 36 [ 655.431915][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3794 @ nid 36 [ 655.431937][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3793 @ nid 36 [ 655.431959][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3792 @ nid 36 [ 655.431982][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3791 @ nid 36 [ 655.432004][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3790 @ nid 36 [ 655.432025][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3789 @ nid 36 [ 655.432047][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3788 @ nid 36 [ 655.432069][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3787 @ nid 36 [ 655.432091][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3786 @ nid 36 [ 655.432113][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3785 @ nid 36 [ 655.432134][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3784 @ nid 36 [ 655.432157][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3783 @ nid 36 [ 655.432178][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3782 @ nid 36 [ 655.432199][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3781 @ nid 36 [ 655.432221][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3780 @ nid 36 [ 655.432243][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3779 @ nid 36 [ 655.432266][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3778 @ nid 36 [ 655.432287][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3777 @ nid 36 [ 655.432309][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3776 @ nid 36 [ 655.432345][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3775 @ nid 36 [ 655.432372][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3774 @ nid 36 [ 655.432400][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3773 @ nid 36 [ 655.432426][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3772 @ nid 36 [ 655.432449][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3771 @ nid 36 [ 655.432471][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3770 @ nid 36 [ 655.432493][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3769 @ nid 36 [ 655.432515][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3768 @ nid 36 [ 655.432539][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3767 @ nid 36 [ 655.432560][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3766 @ nid 36 [ 655.432582][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3765 @ nid 36 [ 655.432604][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3764 @ nid 36 [ 655.432628][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3763 @ nid 36 [ 655.432650][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3762 @ nid 36 [ 655.432672][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3761 @ nid 36 [ 655.432694][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3760 @ nid 36 [ 655.432724][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3759 @ nid 36 [ 655.432746][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3758 @ nid 36 [ 655.432767][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3757 @ nid 36 [ 655.432789][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3756 @ nid 36 [ 655.432812][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3755 @ nid 36 [ 655.432833][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3754 @ nid 36 [ 655.432855][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3753 @ nid 36 [ 655.432877][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3752 @ nid 36 [ 655.432900][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3751 @ nid 36 [ 655.432921][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3750 @ nid 36 [ 655.432943][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3749 @ nid 36 [ 655.432965][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3748 @ nid 36 [ 655.432987][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3747 @ nid 36 [ 655.433009][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3746 @ nid 36 [ 655.433031][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3745 @ nid 36 [ 655.433052][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3744 @ nid 36 [ 655.433075][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3743 @ nid 36 [ 655.433097][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3742 @ nid 36 [ 655.433119][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3741 @ nid 36 [ 655.433141][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3740 @ nid 36 [ 655.433163][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3739 @ nid 36 [ 655.433185][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3738 @ nid 36 [ 655.433206][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3737 @ nid 36 [ 655.433227][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3736 @ nid 36 [ 655.433250][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3735 @ nid 36 [ 655.433272][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3734 @ nid 36 [ 655.433293][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3733 @ nid 36 [ 655.433315][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3732 @ nid 36 [ 655.433337][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3731 @ nid 36 [ 655.433359][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3730 @ nid 36 [ 655.433380][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3729 @ nid 36 [ 655.433402][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3728 @ nid 36 [ 655.433425][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3727 @ nid 36 [ 655.433446][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3726 @ nid 36 [ 655.433468][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3725 @ nid 36 [ 655.433489][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3724 @ nid 36 [ 655.433512][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3723 @ nid 36 [ 655.433533][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3722 @ nid 36 [ 655.433555][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3721 @ nid 36 [ 655.433577][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3720 @ nid 36 [ 655.433600][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3719 @ nid 36 [ 655.433621][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3718 @ nid 36 [ 655.433643][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3717 @ nid 36 [ 655.433664][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3716 @ nid 36 [ 655.492817][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3715 @ nid 36 [ 655.492854][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3714 @ nid 36 [ 655.492877][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3713 @ nid 36 [ 655.492900][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3712 @ nid 36 [ 655.492923][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3711 @ nid 36 [ 655.492945][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3710 @ nid 36 [ 655.492968][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3709 @ nid 36 [ 655.492990][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3708 @ nid 36 [ 655.493013][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3707 @ nid 36 [ 655.493035][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3706 @ nid 36 [ 655.493057][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3705 @ nid 36 [ 655.493079][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3704 @ nid 36 [ 655.493101][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3703 @ nid 36 [ 655.493123][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3702 @ nid 36 [ 655.493145][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3701 @ nid 36 [ 655.493167][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3700 @ nid 36 [ 655.493189][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3699 @ nid 36 [ 655.493211][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3698 @ nid 36 [ 655.493232][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3697 @ nid 36 [ 655.493254][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3696 @ nid 36 [ 655.493277][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3695 @ nid 36 [ 655.493299][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3694 @ nid 36 [ 655.493320][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3693 @ nid 36 [ 655.493342][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3692 @ nid 36 [ 655.493365][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3691 @ nid 36 [ 655.493387][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3690 @ nid 36 [ 655.493408][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3689 @ nid 36 [ 655.493430][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3688 @ nid 36 [ 655.493453][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3687 @ nid 36 [ 655.493475][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3686 @ nid 36 [ 655.493496][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3685 @ nid 36 [ 655.493518][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3684 @ nid 36 [ 655.493541][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3683 @ nid 36 [ 655.493563][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3682 @ nid 36 [ 655.493584][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3681 @ nid 36 [ 655.493606][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3680 @ nid 36 [ 655.493629][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3679 @ nid 36 [ 655.493651][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3678 @ nid 36 [ 655.523088][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3677 @ nid 36 [ 655.523125][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3676 @ nid 36 [ 655.523153][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3675 @ nid 36 [ 655.523176][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3674 @ nid 36 [ 655.523199][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3673 @ nid 36 [ 655.523221][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3672 @ nid 36 [ 655.523245][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3671 @ nid 36 [ 655.523337][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3670 @ nid 36 [ 655.523361][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3669 @ nid 36 [ 655.523382][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3668 @ nid 36 [ 655.523406][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3667 @ nid 36 [ 655.523428][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3666 @ nid 36 [ 655.523449][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3665 @ nid 36 [ 655.523470][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3664 @ nid 36 [ 655.523493][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3663 @ nid 36 [ 655.523515][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3662 @ nid 36 [ 655.523537][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3661 @ nid 36 [ 655.523558][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3660 @ nid 36 [ 655.523581][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3659 @ nid 36 [ 655.523602][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3658 @ nid 36 [ 655.523624][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3657 @ nid 36 [ 655.523645][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3656 @ nid 36 [ 655.533301][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3655 @ nid 36 [ 655.533340][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3654 @ nid 36 [ 655.533365][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3653 @ nid 36 [ 655.533388][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3652 @ nid 36 [ 655.533414][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3651 @ nid 36 [ 655.533437][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3650 @ nid 36 [ 655.533459][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3649 @ nid 36 [ 655.533480][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3648 @ nid 36 [ 655.533502][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3647 @ nid 36 [ 655.533524][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3646 @ nid 36 [ 655.533544][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3645 @ nid 36 [ 655.533566][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3644 @ nid 36 [ 655.533587][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3643 @ nid 36 [ 655.533609][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3642 @ nid 36 [ 655.533631][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3641 @ nid 36 [ 655.533653][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3640 @ nid 36 [ 655.533783][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3639 @ nid 36 [ 655.533806][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3638 @ nid 36 [ 655.533828][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3637 @ nid 36 [ 655.533849][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3636 @ nid 36 [ 655.533871][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3635 @ nid 36 [ 655.533892][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3634 @ nid 36 [ 655.533914][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3633 @ nid 36 [ 655.533935][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3632 @ nid 36 [ 655.533958][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3631 @ nid 36 [ 655.533979][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3630 @ nid 36 [ 655.534001][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3629 @ nid 36 [ 655.534023][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3628 @ nid 36 [ 655.534045][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3627 @ nid 36 [ 655.534065][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3626 @ nid 36 [ 655.534086][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3625 @ nid 36 [ 655.534107][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3624 @ nid 36 [ 655.534128][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3623 @ nid 36 [ 655.534150][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3622 @ nid 36 [ 655.534171][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3621 @ nid 36 [ 655.534193][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3620 @ nid 36 [ 655.534216][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3619 @ nid 36 [ 655.534238][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3618 @ nid 36 [ 655.534259][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3617 @ nid 36 [ 655.534280][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3616 @ nid 36 [ 655.534302][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3615 @ nid 36 [ 655.534323][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3614 @ nid 36 [ 655.548793][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3613 @ nid 36 [ 655.548823][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3612 @ nid 36 [ 655.548848][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3611 @ nid 36 [ 655.548870][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3610 @ nid 36 [ 655.548890][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3609 @ nid 36 [ 655.548912][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3608 @ nid 36 [ 655.548936][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3607 @ nid 36 [ 655.548959][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3606 @ nid 36 [ 655.548981][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3605 @ nid 36 [ 655.549003][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3604 @ nid 36 [ 655.549026][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3603 @ nid 36 [ 655.549048][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3602 @ nid 36 [ 655.549069][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3601 @ nid 36 [ 655.549090][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3600 @ nid 36 [ 655.549112][T12448] erofs: (device loop5): z_erofs_readahead: readahead error at page 3599 @ nid 36 [ 656.390846][T12461] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 656.390911][T12461] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 656.390947][T12461] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 656.391037][T12461] Error parsing options; rc = [-22] [ 658.111959][T12469] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2446'. [ 658.112083][T12469] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2446'. [ 658.272854][T12471] netem: change failed [ 660.247336][T12490] netlink: 'syz.1.2452': attribute type 4 has an invalid length. [ 662.352558][T12503] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2457'. [ 664.228547][T12503] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2457'. [ 665.166737][T12518] netem: change failed [ 665.735556][T12520] loop3: detected capacity change from 0 to 164 [ 666.427011][T12530] netlink: 'syz.1.2463': attribute type 4 has an invalid length. [ 667.534392][T12527] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 667.598194][T12547] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2470'. [ 667.621769][T12547] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2470'. [ 668.272600][T12553] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 668.280205][T12553] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 668.288044][T12553] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 668.301238][T12553] Error parsing options; rc = [-22] [ 668.693909][T12563] netem: change failed [ 669.643127][T12580] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2481'. [ 669.714386][T12580] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2481'. [ 670.341736][T12599] loop3: detected capacity change from 0 to 256 [ 670.697612][T12599] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 670.767688][T12599] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 670.788031][T12599] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 671.068597][T12581] chnl_net:caif_netlink_parms(): no params data found [ 671.196153][T12619] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2496'. [ 671.240287][T12621] loop3: detected capacity change from 0 to 256 [ 671.247138][T12619] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2496'. [ 671.370230][T12581] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.434041][T12581] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.457453][T12581] device bridge_slave_0 entered promiscuous mode [ 671.468635][T12581] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.497117][T12581] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.515614][T12581] device bridge_slave_1 entered promiscuous mode [ 671.604822][T12581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 671.664237][T12542] Bluetooth: hci4: command 0x0409 tx timeout [ 671.924629][T12639] loop3: detected capacity change from 0 to 16 [ 671.951410][T12639] erofs: (device loop3): mounted with root inode @ nid 36. [ 672.494867][T12581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.698703][T12581] team0: Port device team_slave_0 added [ 672.734329][T12581] team0: Port device team_slave_1 added [ 672.879023][T12581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.005713][T12581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 673.468046][T12581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.611080][T12581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.633829][T12581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 673.784420][T12581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.980599][T12581] device hsr_slave_0 entered promiscuous mode [ 674.035983][T12581] device hsr_slave_1 entered promiscuous mode [ 674.063750][T12543] Bluetooth: hci4: command 0x041b tx timeout [ 674.072359][T12581] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 674.084552][T12581] Cannot create hsr debugfs directory [ 674.445728][T12581] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 674.474921][T12581] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 674.504827][T12581] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 674.535531][T12581] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 674.774361][T12666] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2508'. [ 674.804329][T12666] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2508'. [ 674.916324][T12581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.970488][T12217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 674.984542][T12217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 675.007021][T12581] 8021q: adding VLAN 0 to HW filter on device team0 [ 675.130642][ T7384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 675.226355][ T7384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 675.411738][ T7384] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.418944][ T7384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.918925][ T7384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 675.927482][ T7384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 675.946611][ T7384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 675.982211][ T7384] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.989449][ T7384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 676.029934][ T7384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 676.143882][T12534] Bluetooth: hci4: command 0x040f tx timeout [ 676.179519][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 676.204739][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 676.232856][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 676.288009][T12693] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 676.295570][T12693] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 676.303111][T12693] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 676.316432][T12693] Error parsing options; rc = [-22] [ 676.502193][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 676.829982][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 676.909390][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 677.102275][ T7388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 677.143516][ T7388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 677.179400][T12581] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 677.226905][T12581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 677.269998][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 677.293299][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 677.732787][ T7384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 677.749566][ T7384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 677.766406][T12581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 677.890783][T12711] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2521'. [ 677.934138][T12711] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2521'. [ 678.224481][ T6222] Bluetooth: hci4: command 0x0419 tx timeout [ 679.461220][T12217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 679.515425][T12217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 680.086159][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 680.109268][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 680.165635][T12734] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 680.173163][T12734] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 680.180750][T12734] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 680.194057][T12734] Error parsing options; rc = [-22] [ 680.303346][T12581] device veth0_vlan entered promiscuous mode [ 680.344042][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 680.407924][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 680.552295][T12581] device veth1_vlan entered promiscuous mode [ 680.919070][T12581] device veth0_macvtap entered promiscuous mode [ 680.944867][T12217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 680.973428][T12217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 680.990423][T12217] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 681.000916][T12737] netem: change failed [ 681.008561][T12581] device veth1_macvtap entered promiscuous mode [ 681.157898][T12581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 681.169680][T12581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.182061][T12581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 681.196431][ T7388] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 681.246749][T12749] loop3: detected capacity change from 0 to 1024 [ 681.246768][ T7388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 681.314034][T12749] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 681.329142][ T7388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 681.332054][T12749] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 681.525019][T12581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 681.538045][T12581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.549568][T12581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 681.558217][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 681.585543][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 681.606034][T12749] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz.3.2530: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 681.625280][T12749] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.2530: couldn't read orphan inode 11 (err -117) [ 681.638355][T12749] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,noload,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 681.659671][T12581] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.690880][T12749] EXT4-fs (loop3): shut down requested (0) [ 681.700785][T12581] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.753866][T12757] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 681.779190][T12581] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.818921][T12581] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.938414][T12763] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2534'. [ 682.014975][T12763] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2534'. [ 682.125987][T12766] loop3: detected capacity change from 0 to 512 [ 682.182057][ T7388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.193934][ T7388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.232742][ T7388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 682.337326][T12766] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 682.356377][ T7388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.383216][T12766] FAT-fs (loop3): Filesystem has been set read-only [ 682.397891][ T7388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.632158][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 683.422264][T12793] netlink: 'syz.6.2476': attribute type 4 has an invalid length. [ 683.563135][T12795] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 684.171365][T12805] loop3: detected capacity change from 0 to 8 [ 684.361565][T12810] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2545'. [ 684.404058][T12810] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2545'. [ 684.804532][T12742] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 685.083816][T12742] usb 1-1: Using ep0 maxpacket: 16 [ 685.180056][T12817] netem: change failed [ 685.267258][T12742] usb 1-1: unable to get BOS descriptor or descriptor too short [ 685.343934][ T4228] Bluetooth: hci4: command 0x0407 tx timeout [ 685.376163][T12742] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 685.735166][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.742720][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.497145][ T26] audit: type=1804 audit(1791550918.538:9): pid=12834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2552" name="bus" dev="ramfs" ino=61712 res=1 errno=0 [ 686.553887][T12742] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 686.569158][T12742] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.578900][ T26] audit: type=1804 audit(1791550918.558:10): pid=12834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2552" name="bus" dev="ramfs" ino=61712 res=1 errno=0 [ 686.593253][T12742] usb 1-1: Product: syz [ 686.613799][T12742] usb 1-1: Manufacturer: syz [ 686.628446][T12742] usb 1-1: SerialNumber: syz [ 686.927029][T12742] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 687.097009][T12742] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 687.209908][T12838] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 687.217496][T12838] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 687.225494][T12838] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 687.238973][T12838] Error parsing options; rc = [-22] [ 688.059394][T12742] usb 1-1: 2:1 : can't get High Capability descriptor [ 688.221583][T12742] usb 1-1: USB disconnect, device number 19 [ 688.406418][T12846] netlink: 'syz.6.2554': attribute type 4 has an invalid length. [ 689.344927][T12853] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2558'. [ 689.384358][T12853] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2558'. [ 690.004997][T12872] loop3: detected capacity change from 0 to 512 [ 691.104968][T12872] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 691.113196][T12872] System zones: 0-7 [ 691.238076][T12872] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 691.483072][T12894] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2569'. [ 692.954361][T12920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2580'. [ 693.301055][T12925] netem: change failed [ 693.499753][T12928] loop3: detected capacity change from 0 to 256 [ 693.724024][T12934] loop6: detected capacity change from 0 to 512 [ 693.870377][T12934] EXT4-fs (loop6): mounted filesystem without journal. Opts: block_validity,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 693.918618][T12934] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 695.419434][T12980] loop6: detected capacity change from 0 to 1024 [ 695.531652][T12983] loop3: detected capacity change from 0 to 512 [ 695.563956][T12217] hfsplus: b-tree write err: -5, ino 25 [ 695.570230][T12217] hfsplus: b-tree write err: -5, ino 4 [ 695.641002][T12217] hfsplus: b-tree write err: -5, ino 2 [ 695.665934][T12983] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.2602: iget: bad i_size value: 38620345925642 [ 695.687919][T12217] hfsplus: b-tree write err: -5, ino 26 [ 695.725965][T12983] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.2602: couldn't read orphan inode 15 (err -117) [ 695.744402][T12983] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 695.763071][T12961] chnl_net:caif_netlink_parms(): no params data found [ 695.937663][T12983] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.2602: bg 0: block 5: invalid block bitmap [ 695.987359][T12983] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 300 with error 28 [ 696.022194][T12983] EXT4-fs (loop3): This should not happen!! Data will be lost [ 696.022194][T12983] [ 696.106337][T12983] EXT4-fs (loop3): Total free blocks count 0 [ 696.161418][T12983] EXT4-fs (loop3): Free/Dirty block details [ 696.203962][T12983] EXT4-fs (loop3): free_blocks=0 [ 696.209060][T12983] EXT4-fs (loop3): dirty_blocks=300 [ 696.214377][T12983] EXT4-fs (loop3): Block reservation details [ 696.220784][T12983] EXT4-fs (loop3): i_reserved_data_blocks=300 [ 696.245536][T12961] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.252872][T12961] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.662594][T12961] device bridge_slave_0 entered promiscuous mode [ 696.866667][T12961] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.923793][T12961] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.973029][T12961] device bridge_slave_1 entered promiscuous mode [ 697.059875][T12961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 697.072714][T12961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 697.153955][T12543] Bluetooth: hci1: command 0x0409 tx timeout [ 697.186501][T13009] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2605'. [ 697.244718][T12961] team0: Port device team_slave_0 added [ 697.311798][T12961] team0: Port device team_slave_1 added [ 697.354293][T13011] loop3: detected capacity change from 0 to 512 [ 697.381409][T13013] loop6: detected capacity change from 0 to 256 [ 697.390427][T12961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 697.397801][T12961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 697.441160][T13011] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 697.453830][T12961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 697.495720][T12961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 697.535560][T13011] EXT4-fs (loop3): 1 truncate cleaned up [ 697.541283][T13011] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 697.611592][T12961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 697.713791][T12961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 697.828619][T12961] device hsr_slave_0 entered promiscuous mode [ 697.885708][T12961] device hsr_slave_1 entered promiscuous mode [ 697.892556][T12961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 697.901024][T12961] Cannot create hsr debugfs directory [ 698.074213][ T26] audit: type=1800 audit(1791550930.058:11): pid=13019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2607" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 699.122465][T13033] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 699.130110][T13033] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 699.137915][T13033] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 699.151286][T13033] Error parsing options; rc = [-22] [ 699.183817][ T6222] Bluetooth: hci1: command 0x041b tx timeout [ 700.726326][T13049] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2618'. [ 700.768070][T13049] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2618'. [ 700.874611][T12961] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 700.996616][T12961] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 701.017726][T13061] loop3: detected capacity change from 0 to 1024 [ 701.034020][T12961] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 701.099338][T12961] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 701.225373][T13066] loop6: detected capacity change from 0 to 1024 [ 701.253364][T12217] hfsplus: b-tree write err: -5, ino 25 [ 701.263467][T12217] hfsplus: b-tree write err: -5, ino 4 [ 701.263962][ T6111] Bluetooth: hci1: command 0x040f tx timeout [ 701.283970][T12217] hfsplus: b-tree write err: -5, ino 2 [ 701.574182][T12961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 701.617730][ T7388] hfsplus: b-tree write err: -5, ino 8 [ 701.745360][T12217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 701.843541][T12217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 701.889684][T12961] 8021q: adding VLAN 0 to HW filter on device team0 [ 702.118970][T12217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 702.179830][T12217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 702.195380][T13077] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 702.202877][T13077] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 702.210545][T13077] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 702.223942][T13077] Error parsing options; rc = [-22] [ 702.597181][T12217] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.604386][T12217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.793762][T12217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 702.954264][T12217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 703.259530][T12217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 703.320353][T12217] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.327556][T12217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 703.343857][ T4228] Bluetooth: hci1: command 0x0419 tx timeout [ 703.404156][T12217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 703.461339][T12217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 703.617152][T12217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 703.667538][T12217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 703.716357][T12217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 703.785397][T12217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 703.847965][T12217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 704.024519][T12217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 705.046773][T12217] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 705.117838][T12961] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 705.228087][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 705.246832][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 705.451857][ T26] audit: type=1804 audit(1791550937.488:12): pid=13113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2633" name="bus" dev="ramfs" ino=62347 res=1 errno=0 [ 705.592304][ T26] audit: type=1804 audit(1791550937.518:13): pid=13113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2633" name="bus" dev="ramfs" ino=62347 res=1 errno=0 [ 706.029436][ T7388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 706.092183][T13121] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 706.099825][T13121] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 706.107510][T13121] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 706.120947][T13121] Error parsing options; rc = [-22] [ 706.826421][ T7388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 706.945917][T12961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 707.054504][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 707.076875][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 707.255373][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 707.428024][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 707.439362][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 707.914441][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 708.004727][T12961] device veth0_vlan entered promiscuous mode [ 708.099360][T12961] device veth1_vlan entered promiscuous mode [ 709.481684][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 710.464762][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 710.495406][T12961] device veth0_macvtap entered promiscuous mode [ 710.600550][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 710.619015][T12961] device veth1_macvtap entered promiscuous mode [ 710.895908][T13159] Device name cannot be null; rc = [-22] [ 711.699516][T12961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.744459][T12961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.754533][T12961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.771998][T12961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.795378][T12961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 711.813637][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 711.823432][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 711.859311][T12961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.098063][T12961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.213945][T12961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.312364][T13170] loop3: detected capacity change from 0 to 512 [ 712.329941][T12961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.535972][T12961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 712.569774][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 712.592648][T13170] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 712.662659][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 712.673109][T13170] EXT4-fs (loop3): 1 truncate cleaned up [ 712.712997][T13170] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 712.775491][T12961] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.793786][T12961] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.822904][T12961] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.504232][ T26] audit: type=1800 audit(1791550945.168:14): pid=13180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2650" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 713.663947][T12961] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.879558][ T4290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.948173][ T4290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.986594][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 714.009020][ T4290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.027492][ T4290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.052022][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 716.032549][T13221] loop6: detected capacity change from 0 to 512 [ 716.041810][T13222] netem: change failed [ 717.074312][T13221] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 717.136199][T13232] netem: change failed [ 718.059884][T13221] EXT4-fs (loop6): 1 truncate cleaned up [ 718.152164][T13221] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 719.255562][T13191] Bluetooth: hci6: command 0x0409 tx timeout [ 720.396426][T13228] chnl_net:caif_netlink_parms(): no params data found [ 720.744450][T13228] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.775981][T13228] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.818612][T13228] device bridge_slave_0 entered promiscuous mode [ 720.891262][T13228] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.903437][T13228] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.922649][T13228] device bridge_slave_1 entered promiscuous mode [ 721.053568][T13228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 721.090242][T13228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 721.208973][T13228] team0: Port device team_slave_0 added [ 721.259068][T13228] team0: Port device team_slave_1 added [ 721.273879][T13191] Bluetooth: hci6: command 0x041b tx timeout [ 721.330248][T13228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 721.353822][T13228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.420520][T13228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 721.476053][ T7382] device hsr_slave_0 left promiscuous mode [ 721.486007][ T7382] device hsr_slave_1 left promiscuous mode [ 721.565837][ T7382] bond3 (unregistering): Released all slaves [ 721.603630][T13277] loop6: detected capacity change from 0 to 1024 [ 721.607846][ T7382] bond2 (unregistering): Released all slaves [ 721.651414][ T7382] bond1 (unregistering): Released all slaves [ 722.130959][T13284] ip_tables: iptables: counters copy to user failed while replacing table [ 722.170425][T13284] 9pnet: p9_fd_create_tcp (13284): problem connecting socket to 127.0.0.1 [ 722.202427][T13287] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2678'. [ 722.916778][ T7382] bond0 (unregistering): Released all slaves [ 723.041180][T13228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.112318][T13228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 723.354114][T13191] Bluetooth: hci6: command 0x040f tx timeout [ 723.548082][T13228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.752117][T13301] loop3: detected capacity change from 0 to 512 [ 724.011576][T13301] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 724.052378][T13301] ext4 filesystem being mounted at /507/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 724.082468][T13228] device hsr_slave_0 entered promiscuous mode [ 724.125225][T13228] device hsr_slave_1 entered promiscuous mode [ 724.157258][T13228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 724.174286][T13228] Cannot create hsr debugfs directory [ 724.961688][T13228] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 725.007369][T13228] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 725.048255][T13228] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 725.086174][T13228] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 725.294415][T13228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 725.342955][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 725.358415][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 725.409390][T13228] 8021q: adding VLAN 0 to HW filter on device team0 [ 725.433888][T13191] Bluetooth: hci6: command 0x0419 tx timeout [ 725.444937][T12217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 725.470536][T12217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 725.497736][T12217] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.504933][T12217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.534045][T12217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 725.555908][T12217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 725.574717][T12217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 725.594154][T12217] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.601340][T12217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 725.626619][T12796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 725.666523][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 725.716014][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 725.754039][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 725.783301][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 725.816921][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 725.863156][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 725.892974][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 725.933261][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 725.964769][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 725.985110][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 726.014010][ T7] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 726.024670][T13228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 727.133852][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 727.148407][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 727.158682][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 727.193049][T13228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 727.234782][T13343] loop6: detected capacity change from 0 to 8192 [ 727.253824][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 727.290311][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 727.323749][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 727.347595][ T26] audit: type=1800 audit(1791550959.388:15): pid=13343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2693" name="file1" dev="loop6" ino=1048693 res=0 errno=0 [ 727.403840][ T7] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 727.444657][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.493532][ T7] usb 4-1: config 0 descriptor?? [ 727.952892][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 727.980215][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 728.059507][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 728.072279][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 728.080012][ T7] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 728.092943][ T7] microsoft 0003:045E:07DA.0006: ignoring exceeding usage max [ 728.138245][T13228] device veth0_vlan entered promiscuous mode [ 728.155242][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 728.176968][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 728.217600][ T7] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0006/input/input21 [ 728.224054][T13228] device veth1_vlan entered promiscuous mode [ 728.266807][T13326] udc-core: couldn't find an available UDC or it's busy [ 728.284599][T13326] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 728.322740][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 728.345903][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 728.398837][ T7] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 728.411135][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 728.459986][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 728.466414][ T7] usb 4-1: USB disconnect, device number 15 [ 728.516945][T13228] device veth0_macvtap entered promiscuous mode [ 728.567747][T13228] device veth1_macvtap entered promiscuous mode [ 728.667970][T13228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.675515][T13379] fido_id[13379]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 728.719074][T13228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.765858][T13228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.788625][T13228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.811089][T13228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.838325][T13228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.945737][T13228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 729.150430][T13342] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 729.170546][T13342] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 729.225106][T13342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 729.388437][T13342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 729.642662][T13228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.845960][T13228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.007334][T13228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.017898][T13228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.027807][T13228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.039624][T13228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.134124][T13228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 730.156464][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 730.207434][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 730.269196][T13228] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.293758][T13228] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.334232][T13228] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.373725][T13228] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.643616][ T4288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.672724][ T4288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.700417][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 730.841645][T13289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.874137][T13289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.913321][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 731.069087][T13405] loop3: detected capacity change from 0 to 256 [ 731.114306][T13405] exfat: Unknown parameter ' ' [ 731.476954][T13412] Device name cannot be null; rc = [-22] [ 733.506027][T13438] loop4: detected capacity change from 0 to 128 [ 734.154749][T13448] loop6: detected capacity change from 0 to 16 [ 734.216707][T13448] erofs: (device loop6): mounted with root inode @ nid 36. [ 734.247371][T13448] attempt to access beyond end of device [ 734.247371][T13448] loop6: rw=0, want=40, limit=16 [ 734.285541][T13448] attempt to access beyond end of device [ 734.285541][T13448] loop6: rw=524288, want=48, limit=16 [ 734.297420][T13448] attempt to access beyond end of device [ 734.297420][T13448] loop6: rw=524288, want=40, limit=16 [ 734.850309][T13451] Device name cannot be null; rc = [-22] [ 737.916657][T13488] netem: change failed [ 738.715169][ T7382] device hsr_slave_0 left promiscuous mode [ 738.760605][ T7382] device hsr_slave_1 left promiscuous mode [ 738.864472][ T7382] bond4 (unregistering): Released all slaves [ 738.952602][ T7382] bond3 (unregistering): Released all slaves [ 739.006373][T13492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2736'. [ 739.038320][ T7382] bond2 (unregistering): Released all slaves [ 739.229644][T13497] loop6: detected capacity change from 0 to 256 [ 739.253042][ T7382] bond1 (unregistering): (slave lo): Releasing backup interface [ 739.305208][ T7382] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 739.355627][ T7382] bond1 (unregistering): Released all slaves [ 739.403551][T13497] FAT-fs (loop6): Directory bread(block 64) failed [ 739.435489][T13497] FAT-fs (loop6): Directory bread(block 65) failed [ 739.469522][T13497] FAT-fs (loop6): Directory bread(block 66) failed [ 739.476235][T13497] FAT-fs (loop6): Directory bread(block 67) failed [ 739.482872][T13497] FAT-fs (loop6): Directory bread(block 68) failed [ 739.489500][T13497] FAT-fs (loop6): Directory bread(block 69) failed [ 739.496341][T13497] FAT-fs (loop6): Directory bread(block 70) failed [ 739.502996][T13497] FAT-fs (loop6): Directory bread(block 71) failed [ 739.533919][T13497] FAT-fs (loop6): Directory bread(block 72) failed [ 739.540525][T13497] FAT-fs (loop6): Directory bread(block 73) failed [ 739.585354][T13500] loop3: detected capacity change from 0 to 256 [ 739.620810][T13500] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 739.658460][T13500] FAT-fs (loop3): Filesystem has been set read-only [ 739.682249][T13500] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 739.709094][T13500] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 739.856662][T13508] loop3: detected capacity change from 0 to 1024 [ 740.114748][ T7382] bond0 (unregistering): Released all slaves [ 740.206318][T13498] netlink: 'syz.0.2738': attribute type 4 has an invalid length. [ 741.127441][T13516] loop6: detected capacity change from 0 to 1024 [ 741.201455][T13516] EXT4-fs (loop6): mounted filesystem without journal. Opts: discard,abort,init_itable,data_err=ignore,abort,,errors=continue. Quota mode: none. [ 741.673314][T13529] netem: change failed [ 742.274111][T13189] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 742.674035][T13189] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.723894][T13189] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 742.787653][T13189] usb 7-1: config 0 interface 0 has no altsetting 0 [ 742.976176][T13189] usb 7-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 742.986037][T13189] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.000729][T13189] usb 7-1: config 0 descriptor?? [ 744.933828][T13189] usbhid 7-1:0.0: can't add hid device: -71 [ 744.939999][T13189] usbhid: probe of 7-1:0.0 failed with error -71 [ 744.961766][T13189] usb 7-1: USB disconnect, device number 2 [ 745.365168][T13559] netem: change failed [ 745.490415][T13568] netlink: 'syz.6.2758': attribute type 4 has an invalid length. [ 746.119831][T13563] loop4: detected capacity change from 0 to 256 [ 746.366606][T13574] loop3: detected capacity change from 0 to 1764 [ 746.621035][T13580] netlink: 'syz.1.2771': attribute type 4 has an invalid length. [ 746.760031][T13581] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 747.106236][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.113102][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.291959][T13583] loop6: detected capacity change from 0 to 512 [ 747.529796][T13583] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fffff00) [ 747.568149][T13583] FAT-fs (loop6): Filesystem has been set read-only [ 747.588737][T13590] loop3: detected capacity change from 0 to 128 [ 747.686736][T13590] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 750.063846][ T6222] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 752.410032][T13626] loop6: detected capacity change from 0 to 2048 [ 752.742620][T13634] netlink: 'syz.1.2776': attribute type 4 has an invalid length. [ 753.623422][T13626] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 753.926270][T13640] loop3: detected capacity change from 0 to 256 [ 754.693809][ T4376] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 754.741896][T13657] loop3: detected capacity change from 0 to 1024 [ 754.864726][T13657] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,abort,init_itable,data_err=ignore,abort,,errors=continue. Quota mode: none. [ 754.933708][ T4376] usb 7-1: Using ep0 maxpacket: 16 [ 755.278075][ T4376] usb 7-1: unable to get BOS descriptor or descriptor too short [ 755.844087][ T4376] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 756.005371][T12741] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 756.094758][ T4376] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 756.113707][ T4376] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.136309][ T4376] usb 7-1: Product: syz [ 756.141208][ T4376] usb 7-1: Manufacturer: syz [ 756.176528][ T4376] usb 7-1: SerialNumber: syz [ 757.504991][T13682] loop4: detected capacity change from 0 to 8 [ 757.859369][ T4376] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 757.914789][T12741] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 757.922657][T12741] usb 4-1: can't read configurations, error -71 [ 757.925455][T13681] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 757.933173][ T4376] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 758.024755][ T4376] usb 7-1: USB disconnect, device number 3 [ 758.865289][T13708] netlink: 'syz.3.2789': attribute type 4 has an invalid length. [ 761.603909][T12740] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 761.616357][T13735] loop4: detected capacity change from 0 to 1024 [ 762.873274][T13746] Error parsing options; rc = [-22] [ 763.786541][T12740] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 763.794502][T12740] usb 1-1: can't read configurations, error -71 [ 763.909140][T13753] netlink: 'syz.3.2808': attribute type 4 has an invalid length. [ 766.208847][T13792] loop6: detected capacity change from 0 to 512 [ 766.496800][T13792] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 766.527836][T13798] Error parsing options; rc = [-22] [ 766.623241][T13792] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.2820: invalid indirect mapped block 256 (level 1) [ 766.990035][T13792] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.2820: invalid indirect mapped block 2683928664 (level 1) [ 767.286841][T13792] EXT4-fs (loop6): 1 truncate cleaned up [ 767.292558][T13792] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 768.033937][T12543] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 768.524884][T12543] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.566232][T12543] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 768.630067][T12543] usb 7-1: config 0 interface 0 has no altsetting 0 [ 768.656000][T12543] usb 7-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 768.694102][T12543] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.755270][T12543] usb 7-1: config 0 descriptor?? [ 769.970127][T13824] loop3: detected capacity change from 0 to 1024 [ 770.403930][T12543] usbhid 7-1:0.0: can't add hid device: -71 [ 770.410394][T12543] usbhid: probe of 7-1:0.0 failed with error -71 [ 770.736503][T12543] usb 7-1: USB disconnect, device number 4 [ 770.868409][T13834] Error parsing options; rc = [-22] [ 772.200834][T13840] loop4: detected capacity change from 0 to 512 [ 772.361566][T13840] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 772.389422][T13840] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 772.404162][T13849] loop3: detected capacity change from 0 to 1024 [ 772.432672][T13840] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 772.459066][T13849] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 773.693833][T13840] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 773.704953][T13849] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,mblk_io_submit,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nobarrier,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 773.874074][T13840] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 773.883111][T13840] EXT4-fs (loop4): orphan cleanup on readonly fs [ 773.956190][T13840] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2835: bg 0: block 34: padding at end of block bitmap is not set [ 774.104134][T13840] Quota error (device loop4): write_blk: dquota write failed [ 774.146552][T13840] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 774.156538][T13840] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.2835: Failed to acquire dquot type 1 [ 774.201502][T13840] EXT4-fs (loop4): 1 truncate cleaned up [ 774.425870][T13840] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,bsddf,stripe=0x0000000000000006,acl,max_dir_size_kb=0x0000000000000001,noblock_validity,usrjquota=,jqfmt=vfsv0,inode_readahead_blks=0x0000000000001000,minixdf,nouid32,nodiscard,abort,errors=continue,lazytime,,errors=continue. Quota mode: writeback. [ 775.521721][T13877] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 775.529276][T13877] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 775.536880][T13877] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 775.550216][T13877] Error parsing options; rc = [-22] [ 779.172252][T13924] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 779.179971][T13924] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 779.187977][T13924] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 779.201340][T13924] Error parsing options; rc = [-22] [ 779.293991][T13191] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 779.744435][T13191] usb 7-1: config index 0 descriptor too short (expected 69, got 51) [ 779.752993][T13191] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 779.836134][T13191] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 780.064144][T13191] usb 7-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 780.082193][T13191] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.100602][T13191] usb 7-1: Product: syz [ 780.113506][T13930] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2861'. [ 780.121082][T13191] usb 7-1: Manufacturer: syz [ 780.137878][T13191] usb 7-1: SerialNumber: syz [ 780.164694][T13930] device syzkaller1 entered promiscuous mode [ 782.546675][T13955] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 782.554225][T13955] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 782.562174][T13955] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 782.575568][T13955] Error parsing options; rc = [-22] [ 782.785941][T13191] usb 7-1: cannot find UAC_HEADER [ 782.804389][T13191] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 782.814343][T13191] usb 7-1: USB disconnect, device number 5 [ 783.466311][T13226] udevd[13226]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 783.878282][T12741] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 784.009214][T13978] loop6: detected capacity change from 0 to 128 [ 784.153732][T12741] usb 2-1: Using ep0 maxpacket: 16 [ 784.283926][T12741] usb 2-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 784.373030][T12741] usb 2-1: config 1 interface 0 has no altsetting 0 [ 784.394056][ T6033] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 785.233998][T12741] usb 2-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice= 0.40 [ 785.267262][T12741] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.304830][T12741] usb 2-1: Product: syz [ 785.328156][T12741] usb 2-1: Manufacturer: syz [ 785.332829][T12741] usb 2-1: SerialNumber: syz [ 785.417374][T12741] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input24 [ 785.463948][ T6033] usb 1-1: unable to get BOS descriptor or descriptor too short [ 785.554030][ T6033] usb 1-1: config index 0 descriptor too short (expected 40744, got 96) [ 785.583174][ T6033] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 785.624045][ T3543] bcm5974 2-1:1.0: could not read from device [ 785.661545][ T6033] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 785.729835][ T6033] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 226, using maximum allowed: 30 [ 785.773773][ T6033] usb 1-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xBA, skipping [ 785.836101][ T6033] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 785.876564][ T6033] usb 1-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 226 [ 785.986768][T12741] usb 2-1: USB disconnect, device number 4 [ 785.999765][ T3543] bcm5974 2-1:1.0: could not read from device [ 786.026280][ T3543] bcm5974 2-1:1.0: could not read from device [ 786.050254][T13995] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2880'. [ 786.124132][ T6033] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 786.153864][ T6033] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.202748][ T6033] usb 1-1: Product: syz [ 786.212000][ T6033] usb 1-1: Manufacturer: syz [ 786.232302][ T6033] usb 1-1: SerialNumber: syz [ 787.493870][ T6033] usb 1-1: 1:1: cannot set freq 48000 to ep 0x1 [ 787.703804][T14009] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 787.711371][T14009] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 787.719140][T14009] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 787.732469][T14009] Error parsing options; rc = [-22] [ 788.456413][ T6033] usb 1-1: USB disconnect, device number 22 [ 788.764913][T14018] udevd[14018]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 789.933794][ T6033] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 790.664252][ T6033] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 790.746631][ T6033] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.214637][ T6033] usb 1-1: config 0 descriptor?? [ 791.774389][ T6033] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 791.805082][T14060] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 791.812597][T14060] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 791.820255][T14060] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 791.833527][T14060] Error parsing options; rc = [-22] [ 792.076265][ T6033] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 792.184240][ T6033] [drm:udl_init] *ERROR* Selecting channel failed [ 792.498238][ T6033] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 792.506148][ T6033] [drm] Initialized udl on minor 2 [ 792.523918][ T6033] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 792.775463][ T6033] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 792.836280][ T6033] usb 1-1: USB disconnect, device number 23 [ 792.850046][T12740] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 792.932922][T12740] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 792.974223][T12740] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 793.415628][T12740] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 793.794038][T12740] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 793.807844][T12740] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.841877][T12740] usb 5-1: config 0 descriptor?? [ 793.857735][T14079] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 795.182668][T12740] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 795.194971][T12740] [drm] Initialized udl on minor 2 [ 795.243969][T12740] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 795.252639][T12740] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 795.343920][T12740] usb 5-1: USB disconnect, device number 2 [ 795.382844][ T6033] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 795.411978][ T6033] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 795.463911][ T6033] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 795.480322][T13191] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 795.750877][T14096] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 795.758435][T14096] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 795.766015][T14096] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 795.779663][T14096] Error parsing options; rc = [-22] [ 795.813881][T13191] usb 2-1: Using ep0 maxpacket: 16 [ 795.994219][T13191] usb 2-1: unable to get BOS descriptor or descriptor too short [ 796.114769][T13191] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 796.176670][T13191] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 796.711539][T14104] device syzkaller0 entered promiscuous mode [ 796.753993][T13191] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 796.785480][T13191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.823726][T13191] usb 2-1: Product: syz [ 796.839577][T13191] usb 2-1: Manufacturer: syz [ 796.873684][T13191] usb 2-1: SerialNumber: syz [ 796.940147][T14109] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 797.223452][T14088] device erspan0 entered promiscuous mode [ 797.474107][T13191] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 797.493999][T13191] usb 2-1: unit 1 not found! [ 797.733995][T13191] usb 2-1: USB disconnect, device number 5 [ 798.989124][T14131] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2919'. [ 799.034035][T14132] device syzkaller0 entered promiscuous mode [ 799.292445][T14138] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 799.300065][T14138] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 799.307750][T14138] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 799.321391][T14138] Error parsing options; rc = [-22] [ 801.466361][T14159] loop4: detected capacity change from 0 to 256 [ 801.594355][T14159] exfat: Bad value for 'uid' [ 801.683712][ T6033] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 802.081946][T14180] device syzkaller0 entered promiscuous mode [ 802.145014][ T27] INFO: task syz.5.2436:12448 blocked for more than 143 seconds. [ 802.171273][T14181] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 802.178793][T14181] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 802.186488][T14181] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 802.199677][T14181] Error parsing options; rc = [-22] [ 802.247267][ T27] Not tainted syzkaller #0 [ 802.313211][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 802.918459][ T27] task:syz.5.2436 state:D stack:26800 pid:12448 ppid: 9455 flags:0x00004004 [ 802.928064][ T6033] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 802.946993][ T6033] usb 4-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 802.988216][ T27] Call Trace: [ 802.988295][ T6033] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 803.002343][ T27] [ 803.012366][ T27] __schedule+0x11c3/0x4350 [ 803.030592][ T6033] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 803.043583][ T27] ? release_firmware_map_entry+0x190/0x190 [ 803.044152][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 803.099040][ T27] ? blk_check_plugged+0x250/0x250 [ 803.124385][ T27] ? lock_chain_count+0x20/0x20 [ 803.156471][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 803.164425][ T27] schedule+0x11b/0x1e0 [ 803.181828][ T27] io_schedule+0x7c/0xd0 [ 803.186695][ T27] wait_on_page_bit_common+0x8bf/0xeb0 [ 803.192480][ T27] ? wait_on_page_bit+0x50/0x50 [ 803.194763][ T6033] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 803.208850][ T27] ? rcu_lock_release+0x20/0x20 [ 803.218981][ T27] ? bio_add_page+0x2d6/0x460 [ 803.226839][ T6033] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 803.236179][ T27] z_erofs_runqueue+0x775/0x1a70 [ 803.254015][ T6033] usb 4-1: Product: syz [ 803.268516][ T27] ? z_erofs_do_read_page+0x2680/0x2680 [ 803.268533][ T6033] usb 4-1: Manufacturer: syz [ 803.309287][ T27] ? send_mds_reconnect+0x1a00/0x1a00 [ 803.325000][ T6033] cdc_wdm 4-1:1.0: skipping garbage [ 803.330298][ T6033] cdc_wdm 4-1:1.0: skipping garbage [ 803.338144][ T27] z_erofs_readahead+0xbc7/0x1140 [ 803.350977][ T6033] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 803.356513][ T27] ? z_erofs_readpage+0x740/0x740 [ 803.381945][ T27] ? local_lock_release+0x97/0x170 [ 803.408870][ T27] read_pages+0x172/0x920 [ 803.432844][ T27] ? page_cache_ra_unbounded+0x8f0/0x8f0 [ 803.470318][ T27] ? add_to_page_cache_lru+0x2ad/0x4a0 [ 803.482027][ T27] page_cache_ra_unbounded+0x7f4/0x8f0 [ 803.490422][ T27] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 803.503538][ T27] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 803.543708][ T27] force_page_cache_ra+0x3e5/0x440 [ 803.575969][ T27] generic_fadvise+0x52b/0x7e0 [ 803.596967][ T27] ? dump_task+0x610/0x610 [ 803.602795][ T27] ? __fdget+0x18b/0x210 [ 803.611253][ T27] __x64_sys_fadvise64+0x139/0x180 [ 803.622105][ T27] do_syscall_64+0x4c/0xa0 [ 803.629092][ T27] ? clear_bhb_loop+0x30/0x80 [ 803.639543][ T27] ? clear_bhb_loop+0x30/0x80 [ 803.648962][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 803.670040][ T27] RIP: 0033:0x7f10ca8211d9 [ 803.693111][ T27] RSP: 002b:00007f10c8a58028 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 803.708583][ T27] RAX: ffffffffffffffda RBX: 00007f10caaa9090 RCX: 00007f10ca8211d9 [ 803.719378][ T27] RDX: 0000000000e10018 RSI: 0000000000e0ffff RDI: 0000000000000004 [ 803.732460][ T27] RBP: 00007f10ca8b8888 R08: 0000000000000000 R09: 0000000000000000 [ 803.742251][ T27] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 803.757501][ T27] R13: 00007f10caaa9128 R14: 00007f10caaa9090 R15: 00007ffd0a48b208 [ 803.769412][ T27] [ 803.869286][ T27] [ 803.869286][ T27] Showing all locks held in the system: [ 803.913225][ T27] 1 lock held by khungtaskd/27: [ 803.941012][ T27] #0: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 803.990051][ T27] 2 locks held by getty/3943: [ 804.011756][ T27] #0: ffff88802cfee098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 804.051082][ T27] #1: ffffc900025e62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x594/0x1a50 [ 804.079351][ T27] 3 locks held by kworker/u4:6/4287: [ 804.091776][ T27] #0: ffff8880b8e3a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x98/0x130 [ 804.109922][ T27] #1: ffff8880b8e27888 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x517/0x810 [ 804.140166][ T27] #2: ffff8880b8e280d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 804.157251][ T27] 3 locks held by kworker/u4:8/4290: [ 804.162683][ T27] #0: ffff888017879138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 804.181682][ T27] #1: ffffc9000476fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 804.192307][ T27] #2: ffffffff8e24d5c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 804.208305][ T27] 1 lock held by syz.5.2436/12448: [ 804.215220][ T27] #0: ffff88805f03c860 (mapping.invalidate_lock#5){.+.+}-{3:3}, at: page_cache_ra_unbounded+0x19a/0x8f0 [ 804.250601][T13191] usb 4-1: USB disconnect, device number 18 [ 804.259083][ T27] 2 locks held by kworker/0:4/12740: [ 804.280742][ T27] #0: ffff888017872138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 804.326614][ T27] #1: ffffc90003a17d00 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 804.406574][ T27] 3 locks held by kworker/1:10/13191: [ 804.419943][ T27] #0: ffff88801ca9b938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 804.459404][ T27] #1: ffffc9000365fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 804.482274][ T27] #2: ffff888148135220 (&dev->mutex){....}-{3:3}, at: local_lock_acquire+0x0/0x70 [ 804.561582][ T27] 3 locks held by syz.1.2859/13950: [ 804.572688][ T27] 1 lock held by syz.0.2925/14161: [ 804.590546][ T27] 2 locks held by syz.6.2935/14179: [ 804.606245][ T27] #0: ffffffff8e24d5c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 804.630298][ T27] #1: ffffffff8d123a28 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2d1/0x750 [ 804.656927][ T27] [ 804.664668][ T27] ============================================= [ 804.664668][ T27] [ 804.683532][ T27] NMI backtrace for cpu 1 [ 804.687929][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 804.695159][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 804.705246][ T27] Call Trace: [ 804.708563][ T27] [ 804.711523][ T27] dump_stack_lvl+0x188/0x250 [ 804.716239][ T27] ? show_regs_print_info+0x20/0x20 [ 804.721470][ T27] ? load_image+0x410/0x410 [ 804.725998][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 804.731417][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 804.736644][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 804.741633][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 804.747827][ T27] ? _printk+0xda/0x130 [ 804.752014][ T27] ? load_image+0x410/0x410 [ 804.756552][ T27] ? load_image+0x410/0x410 [ 804.761088][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 804.767259][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 804.773291][ T27] watchdog+0xe1b/0xe60 [ 804.777464][ T27] kthread+0x42e/0x520 [ 804.781585][ T27] ? hungtask_pm_notify+0x40/0x40 [ 804.786643][ T27] ? kthread_blkcg+0xd0/0xd0 [ 804.791281][ T27] ret_from_fork+0x1f/0x30 [ 804.795746][ T27] [ 804.799414][ T27] Sending NMI from CPU 1 to CPUs 0: [ 804.804896][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0xb/0x10 [ 804.822912][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 804.829806][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 804.837028][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 804.847346][ T27] Call Trace: [ 804.850691][ T27] [ 804.853663][ T27] dump_stack_lvl+0x188/0x250 [ 804.858480][ T27] ? show_regs_print_info+0x20/0x20 [ 804.863729][ T27] ? load_image+0x410/0x410 [ 804.868290][ T27] panic+0x2f8/0x850 [ 804.872233][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 804.877998][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 804.882581][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 804.888282][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 804.894606][ T27] watchdog+0xe5a/0xe60 [ 804.898962][ T27] kthread+0x42e/0x520 [ 804.903163][ T27] ? hungtask_pm_notify+0x40/0x40 [ 804.908242][ T27] ? kthread_blkcg+0xd0/0xd0 [ 804.912887][ T27] ret_from_fork+0x1f/0x30 [ 804.917353][ T27] [ 804.920661][ T27] Kernel Offset: disabled [ 804.925020][ T27] Rebooting in 86400 seconds..