last executing test programs: 24.826152772s ago: executing program 1 (id=1131): syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2281) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000340)={0x0, 0x0, 0x400000001ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) 23.882027394s ago: executing program 1 (id=1139): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x2, @empty, 0xa098}, {0xa, 0x4e20, 0xfffffffe, @mcast2, 0x1}, r1, 0x6}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) close(0x3) 23.590352123s ago: executing program 1 (id=1142): syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x8000c6, &(0x7f0000000180)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0x110) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f00000003c0)='./file2\x00', 0x60302, 0x7) 23.246679115s ago: executing program 1 (id=1143): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) 23.049687931s ago: executing program 1 (id=1144): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) close_range(r0, r2, 0x0) 22.660793574s ago: executing program 1 (id=1148): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8800) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioprio_set$uid(0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10, 0x0}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x7, @remote, 0x9}, @in6={0xa, 0x4e20, 0x7, @mcast1, 0xfff}, @in6={0xa, 0x4e24, 0x10000, @local, 0x1ff}, @in6={0xa, 0x4e24, 0xd61, @empty, 0x8}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e21, 0x3, @remote, 0xcc4}, @in6={0xa, 0x4e20, 0xa5e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}], 0xb8) syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') 22.302156586s ago: executing program 32 (id=1148): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8800) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioprio_set$uid(0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10, 0x0}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x7, @remote, 0x9}, @in6={0xa, 0x4e20, 0x7, @mcast1, 0xfff}, @in6={0xa, 0x4e24, 0x10000, @local, 0x1ff}, @in6={0xa, 0x4e24, 0xd61, @empty, 0x8}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e21, 0x3, @remote, 0xcc4}, @in6={0xa, 0x4e20, 0xa5e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}], 0xb8) syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') 4.805977449s ago: executing program 2 (id=1254): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000003500010326bd7000fcffffff06"], 0x14}, 0x1, 0x0, 0x0, 0x41882}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)=@newspdinfo={0x24, 0x24, 0x9185f936229eeeb, 0x70bd26, 0x25dfdbfe, 0x9, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x14940) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000200)="240000001a005f0400f9f4070009040180202000000000000000000008001f0000000000", 0x24) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x4, 0x2}, &(0x7f0000000a00)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000a80)={r5, 0x7f}, 0x8) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r8, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) bind$alg(r6, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r9 = accept$alg(r6, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000000900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d03d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f753530ada6598a1bf4c727f30db4778beff4805370a5cebf05e199368871b2751c242633419d13a6b05a390d21ab1d44be1254385b3d882c646f9762bf3480e05e98c9cc655adb7caa279e66709794e3b93cda0b9a14794e6d020cc68ea70e71a083e1a2b375591203ce218e8d244cf32f5dd7af0ee1ed032d3b59e4d571366", 0xf1}, {&(0x7f0000000000)="ef7791000dc7777cb951ca638ea0e1b5d280548c882aa59a68cd17c0e7f23d6d56a03be6caa272b3505e304463179c4d7768d9c3e5c21f3a9963ffde6682e5ecfe30b771e51c8d", 0x47}], 0x2, 0x0, 0x0, 0x806}], 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x0, 0x7, 0x2, 0x6, 0xffffffffffffffff}, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f00000000c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) recvmmsg(r9, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)=""/64, 0x40}, {&(0x7f0000000440)=""/243, 0xf3}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/32, 0x20}], 0x1}, 0x1}, {{&(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000200)=""/30, 0x1e}, {&(0x7f0000000540)=""/171, 0xab}, {&(0x7f0000000680)=""/162, 0xa2}, {&(0x7f0000000380)}, {&(0x7f0000000840)=""/138, 0x8a}, {&(0x7f0000000940)=""/143, 0x8f}, {&(0x7f0000000740)=""/118, 0x76}, {&(0x7f00000003c0)=""/11, 0xb}], 0x8}, 0x4}], 0x3, 0x2101, 0x0) 4.322243446s ago: executing program 4 (id=1258): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@nomblk_io_submit}, {@noload}, {@abort}, {@auto_da_alloc}]}, 0xff, 0x459, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x8d) ioctl(0xffffffffffffffff, 0x8916, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) shmctl$IPC_SET(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe3aa6ea) 4.253363248s ago: executing program 2 (id=1260): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e1a00"], 0xf) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl(0xffffffffffffffff, 0x8b22, 0x0) 3.517641232s ago: executing program 0 (id=1264): mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0x110) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f00000003c0)='./file2\x00', 0x60302, 0x7) 3.078434117s ago: executing program 4 (id=1265): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44080) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.077544557s ago: executing program 2 (id=1266): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2.911863333s ago: executing program 0 (id=1268): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000003500010326bd7000fcffffff06"], 0x14}, 0x1, 0x0, 0x0, 0x41882}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)=@newspdinfo={0x24, 0x24, 0x9185f936229eeeb, 0x70bd26, 0x25dfdbfe, 0x9, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x14940) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000200)="240000001a005f0400f9f4070009040180202000000000000000000008001f0000000000", 0x24) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x4, 0x2}, &(0x7f0000000a00)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000a80)={r5, 0x7f}, 0x8) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r8, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) bind$alg(r6, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r9 = accept$alg(r6, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000000900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d03d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f753530ada6598a1bf4c727f30db4778beff4805370a5cebf05e199368871b2751c242633419d13a6b05a390d21ab1d44be1254385b3d882c646f9762bf3480e05e98c9cc655adb7caa279e66709794e3b93cda0b9a14794e6d020cc68ea70e71a083e1a2b375591203ce218e8d244cf32f5dd7af0ee1ed032d3b59e4d571366", 0xf1}, {&(0x7f0000000000)="ef7791000dc7777cb951ca638ea0e1b5d280548c882aa59a68cd17c0e7f23d6d56a03be6caa272b3505e304463179c4d7768d9c3e5c21f3a9963ffde6682e5ecfe30b771e51c8d", 0x47}], 0x2, 0x0, 0x0, 0x806}], 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x0, 0x7, 0x2, 0x6, 0xffffffffffffffff}, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f00000000c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) recvmmsg(r9, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)=""/64, 0x40}, {&(0x7f0000000440)=""/243, 0xf3}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/32, 0x20}], 0x1}, 0x1}, {{&(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000200)=""/30, 0x1e}, {&(0x7f0000000540)=""/171, 0xab}, {&(0x7f0000000680)=""/162, 0xa2}, {&(0x7f0000000380)}, {&(0x7f0000000840)=""/138, 0x8a}, {&(0x7f0000000940)=""/143, 0x8f}, {&(0x7f0000000740)=""/118, 0x76}, {&(0x7f00000003c0)=""/11, 0xb}], 0x8}, 0x4}], 0x3, 0x2101, 0x0) 2.69012892s ago: executing program 3 (id=1269): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0xa, 0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) 2.595039413s ago: executing program 4 (id=1270): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) close_range(r0, r2, 0x0) 2.574545214s ago: executing program 3 (id=1271): r0 = socket$inet6(0xa, 0x1, 0x100) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000d00070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100090808004149004001040800", 0x58}], 0x1) listen(r0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000200)) fchmod(r2, 0x80) r3 = io_uring_setup(0x4ae8, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0x12, 0x20002f3}) syz_emit_ethernet(0xbe, &(0x7f0000000b80)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa170800450000b000000000fd019078acac1414aa0304907803240000450000000000000003320000ac1414bbad14000000fb520009789607675ca6386e000000000000001de584b72d44c6bee706d30bd224f80607cfa11cab1a0010c600000000000000000000000000000a67807fe97612fe86001273bc2300ad9d19a30000000000000000060cc8f46976e79e56c7a95e860c0000000201067f36c5250000"], 0x0) mremap(&(0x7f0000c58000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000d62000/0x3000)=nil) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000000)=0x102) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x81, 0x88f8, 0x46, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x80, 0xfffffff9, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl2\x00', r5, 0x825d795ed73addf8, 0x6, 0x10, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8000, 0x80, 0x10001, 0xa8}}) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6) r6 = socket(0x10, 0x80002, 0x0) sendmsg(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)="24000000180003041dfffd946f610500020100000005fe060c10882108000f00fef3c00e", 0x24}], 0x1}, 0x4) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000000)={0x8080000, 0x1d000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000080)={0x8000000, 0x3000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r7, 0x4010ae68, &(0x7f0000000600)={0xdddd0000, 0x10000}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000005c0)={0x0, 0x12, 0x1}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x4d4, 0x1b4, 0x0, 0x27c, 0xec, 0x0, 0x40c, 0x40c, 0x40c, 0x40c, 0x40c, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffff00], 'veth1\x00', 'veth1_vlan\x00', {}, {}, 0x62, 0x7}, 0x0, 0xc8, 0xec, 0x0, {0x0, 0x3a010000}, [@inet=@rpfilter={{0x24}, {0x3}}]}, @HL={0x24}}, {{@ipv6={@private1, @dev={0xfe, 0x80, '\x00', 0x2a}, [0xff], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x1b4}}, {{@ipv6={@local, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff], [], 'veth0_to_team\x00', 'bond0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@private2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, [0xffffff00, 0xffffff00, 0xff, 0xff], [0x0, 0xff, 0xff, 0xffffff00], 'virt_wifi0\x00', 'dvmrp0\x00', {0xff}, {0xff}, 0x87, 0x8, 0x0, 0x8}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x0, 0x0, 0x2}}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'geneve0\x00'}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x530) 2.439521398s ago: executing program 2 (id=1272): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000680)={r4, 0x1ff, 0x0, 0x1, 0x3, [], [0x800020, 0x0, 0x0, 0x2], [0x0, 0x2, 0x1], [0x0, 0x0, 0xfffffffffefffff8, 0x9]}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.328215782s ago: executing program 0 (id=1273): ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_open_dev$radio(0x0, 0x1, 0x2) r1 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) syz_open_procfs(0x0, 0x0) read$FUSE(r3, 0x0, 0x0) 2.263205674s ago: executing program 2 (id=1274): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@nomblk_io_submit}, {@noload}, {@abort}, {@auto_da_alloc}]}, 0xff, 0x459, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x8d) ioctl(0xffffffffffffffff, 0x8916, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) shmctl$IPC_SET(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe3aa6ea) 2.175505317s ago: executing program 4 (id=1275): socket$pptp(0x18, 0x1, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000380)={0x0, 0x1, 0xbe}) close_range(r1, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_print_times', 0x2641, 0x40) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r4], 0x38}}, 0x10) r6 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r6, 0x300, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20000001) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000480)=0x14) r8 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2005c080) sendmsg$inet(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)}, 0x0) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0), 0x240, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r10, &(0x7f0000000580)=0x8000000000000499, 0x12) r11 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x1f, &(0x7f0000000740)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @tail_call, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], &(0x7f00000003c0)='GPL\x00', 0x8, 0x19, &(0x7f0000000400)=""/25, 0x41100, 0x0, '\x00', r7, @fallback=0x27, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa, &(0x7f0000000580)=[r10, 0xffffffffffffffff, r11, 0x1], &(0x7f00000005c0)=[{0x2, 0x1, 0x3, 0x4}, {0x0, 0x1, 0xd}, {0x4, 0x3, 0x6, 0x6}, {0x3, 0x7, 0xa, 0x6}, {0x5, 0x2, 0x4, 0x1}, {0x5, 0x1, 0x8, 0x5}, {0x5, 0x5, 0x0, 0x6}, {0x3, 0x5, 0x5, 0x2}, {0x1, 0x2, 0x1, 0x7}, {0x1, 0x3, 0x9, 0x9}], 0x10, 0xfffffffb}, 0x94) setsockopt$inet_udp_encap(r0, 0x11, 0x68, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) 1.311652506s ago: executing program 3 (id=1276): syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x8000c6, &(0x7f0000000180)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x110) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f00000003c0)='./file2\x00', 0x60302, 0x7) 1.146221821s ago: executing program 0 (id=1277): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x4) 1.021707935s ago: executing program 3 (id=1278): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 497.238933ms ago: executing program 0 (id=1279): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, 0x0, 0xd0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') shmget$private(0x0, 0x3000, 0x800, &(0x7f0000f9a000/0x3000)=nil) socket$inet_sctp(0x2, 0x1, 0x84) mq_notify(r5, &(0x7f0000000180)={0x0, 0x22, 0x4, @thr={0x0, 0x0}}) 442.799155ms ago: executing program 3 (id=1280): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', 0x3208c00, &(0x7f0000000340)=ANY=[], 0x1, 0xab6, &(0x7f0000000ec0)="$eJzs3U2MG1cBAOBn73qTTVLilIQuSWkTftry091ms4SfCJqqERJRU3GrVHGJ0rREpOEnlaBVJZJc6I1WVbhCEaciUQFCai8o6olLJRqJS0+FAweiIFXiAKWJ0drveccvdsfOZtf2+vukt88z79nvzezMeDwz770ATKxq8+/S0lwlhItvvHzkn/f8Y3Z5zoPtHPXm3+k0WQmh1oo650fvTrXia+89f6JbXAmLzb9pOjx6tf3erSGEc2FvuBTqYffFyy+9tfjIsfNHL+x7+9VDV9Zk4QEAYMJ869KhpV1/+8ueHe+/dtfhsKk9P52f1+P0ttA67z8cT/zT+X81dE5XCqFoJss3HUM1yzfVJV+xnFqWb7pH+TPZ59ba6Xs68m0qKX+qMK/bcsM4S9txPcyE+Y7panV+vvWbPDR/189U5s+cOv3k2SFVFLjl/n13CGGvMGhoNBo/aa7AEaiLINxsaGwf9hEIoCW/X3iDc/mVhdVpf9p0f+Vffaja/f1wC6z39q/88Sr/1+cdcbh1NurWlJYr7Ufb4nR+HyF/fmnQ/T99Xn4/otZnPXvdRxiX+wu96jm1zvW4Wb3qn28XG9XX4p2ytB6+nqUX95/8fzou/2Ogu/+s1/X/V2aHfq1zOexd3/Jua6/otSxnrT9/kFAb47pPYGgM5agDjIOV5+ZaGlFKz5/ry9M3laRvLkmfLUnfUpK+tSQdJtkfnvlZeLGy8js//00/6PWwdJ0tnfh+ZMD65NcjBy0/f+53UKstP3+eGEbZ68cfO/nlJx6/3Hr+v9Le/q/H7T39RKvHfetSzJCuF+bX1dvP/tc7y6n2yHd7Vp/bbsjfaJW4szNfZefK54TCceaGeswV3/WDG+rTzndn5+fXs3yzMWzO6pufn2zJ3pfOP9JxNa2v6Wx5a9lyzGT1SMeVHTHO6wE3I22P9VCpdnv+P22fc6FWefLU6ZMPxOm0nf55qrZpef7+4of+Zn3qDqzOyv7eff9P319zobP9z7b2/Fq1eFzYvjK/Ujwu1LP5i63J9m3yNP9AnE7fc9+Zmm3Onz/xvdNP3OqFhwl39tnnvnv89OmTP9wwLw6HVX7O7FislnTkHJX69PPig8ZIVMOLfl6UHTk26pODMDkWnnn6+wtnn33u/lNPH3/q5FMnzxw4ePDA4uLBrxxYWmie1y8Uz+6BjWTlS3/YNQEAAAAAAAAAAAD69aOjRy7/9c0vvdNq/7/S/i+1/09P/qb2/y9k7f/zdvKpVUBqB7ijS3pz3L3XO+sxk+WrxfDRrL47s3J2Ze/7WIzb4/jF9v+pvX3er2uqzx3Z/Lz/3pRvLpuf95cyk/VB0h4vMDbY/2ScvhDjXwUYosps99kx/tD+rX/7Qjt/6p9CvxTjKf3f0taQ+jFJ7b979euUjv871qGO3Hrr0Zxw2MsIdPevkR//s3Am3jvf1PDrGRqN4ddh9eHD17OwwUKjYRQPYDQMe/zPdN0zxWf+9M3NyyFlu/pQ5/Ey778UVmPUx59U/sYa/7M9/l1fx78uvat39PPc/+gK//3FlXcKxYbd/R5/8+VP/UDvLC+z6P1Yflr+e0N/5TdeycrPbwj16X9Z+Vv6LP+G5b+zrKTuIxl+EMtPq+2+T/VbfqvGlWpnPfLrxun+X37dOLmWLX/q23Pg5b/JgRqvx/JhkvUeZ7bfEWxHU7fxf6dHcPzfXvLnML4Yp9OBMD3nkH8jD1r/9HxF+h7YlX1+peT7bVzGKe5l0sf//WqMy/aHNP5v2h7rXaarhelal3U77tsKbDTvjvz9vzEL50agDoOGn45AHSYijMYY2MXQaDSG2pF3eeFb1qUek2rYvbgP++7zsMsf9vovk4//m5/D5+P/VrMfEPn4v/n78/F/8/R8fL08fUsspJLlS/Lxf/P0O7LPza9gz5Wkf7wkfXdJ+p6V9Nks/RvFevZ6/ydK0veVpN9Vkn53SfrtJelTJemfLkn/TEn6PSXp95Wkf7YkfaNrtkcp7FSTtvwwyfL2efZ/mBzp/k+v/X9nSTowvn7+2v6HH//9t+ut9v8z7d9r6T7e4Thdi7+dfxyn8/veoTC9nPZmnP57lj7q1ztgkuT9Z+Tf7/eWpAPjKz3nZf+GCVTp3mNPfr+tV79Vvc7zGS+fi/HnY/yFGN8f4/kYL8R4f4wX16l+rI2Hf/fHQy9WVn7vb8/S+32ePG8PlPcTdaDP+uTXBwZ9nj3vx29Qqy3/JpuDAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADE21+Xdpaa4SwsU3Xj7y2LFTC8tzHmznqDf/Themau33hfBAjKdi/Mv44tp7z58oxtdjXAmLoRIq7fnh0avtkraGEM6FveFSqIfdFy+/9NbiI8fOH72w7+1XD11ZuzUAAAAAG9//AwAA//+1ERnn") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x0) read(r0, &(0x7f0000001400)=""/4096, 0x1000) 369.998877ms ago: executing program 2 (id=1281): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000003500010326bd7000fcffffff06"], 0x14}, 0x1, 0x0, 0x0, 0x41882}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)=@newspdinfo={0x24, 0x24, 0x9185f936229eeeb, 0x70bd26, 0x25dfdbfe, 0x9, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x14940) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000200)="240000001a005f0400f9f4070009040180202000000000000000000008001f0000000000", 0x24) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x4, 0x2}, &(0x7f0000000a00)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000a80)={r5, 0x7f}, 0x8) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r8, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) bind$alg(r6, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r9 = accept$alg(r6, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000000900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d03d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f753530ada6598a1bf4c727f30db4778beff4805370a5cebf05e199368871b2751c242633419d13a6b05a390d21ab1d44be1254385b3d882c646f9762bf3480e05e98c9cc655adb7caa279e66709794e3b93cda0b9a14794e6d020cc68ea70e71a083e1a2b375591203ce218e8d244cf32f5dd7af0ee1ed032d3b59e4d571366", 0xf1}, {&(0x7f0000000000)="ef7791000dc7777cb951ca638ea0e1b5d280548c882aa59a68cd17c0e7f23d6d56a03be6caa272b3505e304463179c4d7768d9c3e5c21f3a9963ffde6682e5ecfe30b771e51c8d", 0x47}], 0x2, 0x0, 0x0, 0x806}], 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x0, 0x7, 0x2, 0x6, 0xffffffffffffffff}, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f00000000c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) recvmmsg(r9, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)=""/64, 0x40}, {&(0x7f0000000440)=""/243, 0xf3}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/32, 0x20}], 0x1}, 0x1}, {{&(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000200)=""/30, 0x1e}, {&(0x7f0000000540)=""/171, 0xab}, {&(0x7f0000000680)=""/162, 0xa2}, {&(0x7f0000000380)}, {&(0x7f0000000840)=""/138, 0x8a}, {&(0x7f0000000940)=""/143, 0x8f}, {&(0x7f0000000740)=""/118, 0x76}, {&(0x7f00000003c0)=""/11, 0xb}], 0x8}, 0x4}], 0x3, 0x2101, 0x0) 340.644478ms ago: executing program 4 (id=1282): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000680)={r4, 0x1ff, 0x0, 0x1, 0x3, [], [0x800020, 0x0, 0x0, 0x2], [0x0, 0x2, 0x1], [0x0, 0x0, 0xfffffffffefffff8, 0x9]}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 240.048222ms ago: executing program 0 (id=1283): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f0000000380)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@test_dummy_encryption_v1}, {@nodioread_nolock}, {@noblock_validity}]}, 0x2, 0x4a3, &(0x7f00000004c0)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000880)='mountinfo\x00') ppoll(&(0x7f0000000840)=[{r0, 0x8000}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x10930f4, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) 18.206398ms ago: executing program 4 (id=1284): sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x14, 0x0, 0x20d, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/236, 0xec}], 0x1, 0xfc, 0xfffff001) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040), 0x10, &(0x7f0000000480)=""/230}}], 0x2, 0x0, 0x0) 0s ago: executing program 3 (id=1285): socket$inet6(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): T5768] veth1_macvtap: entered promiscuous mode [ 78.825203][ T5769] veth0_vlan: entered promiscuous mode [ 78.841309][ T5769] veth1_vlan: entered promiscuous mode [ 78.861453][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.903693][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.918664][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.941252][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.954343][ T5769] veth0_macvtap: entered promiscuous mode [ 78.962773][ T5778] Bluetooth: hci0: command tx timeout [ 78.962827][ T5780] Bluetooth: hci1: command tx timeout [ 78.969231][ T5778] Bluetooth: hci2: command tx timeout [ 78.977559][ T5780] Bluetooth: hci3: command tx timeout [ 79.001363][ T5768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.010608][ T5768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.019711][ T5768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.029242][ T5768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.050729][ T5769] veth1_macvtap: entered promiscuous mode [ 79.100675][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.112059][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.123677][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.184203][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.197715][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.210012][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.231089][ T5769] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.240384][ T5769] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.249374][ T5769] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.258180][ T5769] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.270337][ T5770] veth0_vlan: entered promiscuous mode [ 79.296605][ T5770] veth1_vlan: entered promiscuous mode [ 79.337167][ T5771] veth0_vlan: entered promiscuous mode [ 79.357848][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.368695][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.420821][ T3414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.430380][ T3414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.465598][ T5771] veth1_vlan: entered promiscuous mode [ 79.514154][ T5770] veth0_macvtap: entered promiscuous mode [ 79.555843][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.564380][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.597472][ T5770] veth1_macvtap: entered promiscuous mode [ 79.656792][ T3901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.670689][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.692789][ T3901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.705841][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.717467][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.728693][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.752156][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.776723][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.788692][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.799699][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.811220][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.822751][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.837922][ T5771] veth0_macvtap: entered promiscuous mode [ 79.868101][ T5770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.877601][ T5770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.886977][ T5770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.896147][ T5770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.912369][ T5771] veth1_macvtap: entered promiscuous mode [ 80.008536][ T5838] Zero length message leads to an empty skb [ 80.029177][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.045315][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.060410][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.074003][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.088757][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.108093][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.126387][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.180614][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.201592][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.229083][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.240741][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.250716][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.261685][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.274163][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.747504][ T5771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.822968][ T5771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.832148][ T5771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.846604][ T5771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.930879][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.950901][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.017645][ T3901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.029590][ T3901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.038869][ T5780] Bluetooth: hci3: command tx timeout [ 81.046016][ T5780] Bluetooth: hci2: command tx timeout [ 81.046824][ T5775] Bluetooth: hci1: command tx timeout [ 81.051734][ T5780] Bluetooth: hci0: command tx timeout [ 81.166240][ T3931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.198383][ T3931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.255310][ T5840] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 81.273520][ T3931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.285565][ T3931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.464958][ T5848] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6'. [ 81.486332][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 81.507157][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 81.527900][ T5840] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 81.546900][ T5840] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 81.557138][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.572459][ T5840] usb 2-1: config 0 descriptor?? [ 81.581588][ T5844] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 81.592870][ T5844] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 81.781412][ T5856] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.955739][ T5861] syz_tun: entered allmulticast mode [ 81.971349][ T5860] syz_tun: left allmulticast mode [ 82.063587][ T5840] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 82.080455][ T5863] syz.2.10[5863]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 82.123091][ T5863] loop2: detected capacity change from 0 to 256 [ 82.124467][ T5840] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0001/input/input5 [ 82.203871][ T5863] ======================================================= [ 82.203871][ T5863] WARNING: The mand mount option has been deprecated and [ 82.203871][ T5863] and is ignored by this kernel. Remove the mand [ 82.203871][ T5863] option from the mount to silence this warning. [ 82.203871][ T5863] ======================================================= [ 82.553369][ T5840] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.20 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 82.561401][ T5863] FAT-fs (loop2): Directory bread(block 64) failed [ 82.583547][ T5863] FAT-fs (loop2): Directory bread(block 65) failed [ 82.630556][ T5863] FAT-fs (loop2): Directory bread(block 66) failed [ 82.691740][ T5863] FAT-fs (loop2): Directory bread(block 67) failed [ 82.717329][ T5840] usb 2-1: USB disconnect, device number 2 [ 82.726303][ T5863] FAT-fs (loop2): Directory bread(block 68) failed [ 82.762819][ T5863] FAT-fs (loop2): Directory bread(block 69) failed [ 82.797838][ T5863] FAT-fs (loop2): Directory bread(block 70) failed [ 82.839057][ T5863] FAT-fs (loop2): Directory bread(block 71) failed [ 82.871341][ T5863] FAT-fs (loop2): Directory bread(block 72) failed [ 82.903787][ T5863] FAT-fs (loop2): Directory bread(block 73) failed [ 82.921239][ T5867] fido_id[5867]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 83.135389][ T5775] Bluetooth: hci2: command tx timeout [ 83.142374][ T5778] Bluetooth: hci0: command tx timeout [ 83.148269][ T5778] Bluetooth: hci3: command tx timeout [ 83.154025][ T5780] Bluetooth: hci1: command tx timeout [ 83.736473][ T5883] loop1: detected capacity change from 0 to 256 [ 83.763529][ T5883] exfat: Unknown parameter 'ÿÿ' [ 83.849227][ T5883] overlayfs: failed to resolve './file1': -2 [ 84.852133][ T5896] loop1: detected capacity change from 0 to 32768 [ 84.917581][ T5896] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.19 (5896) [ 85.899708][ T5896] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 85.911770][ T5896] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 85.929335][ T5896] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 85.988437][ T5896] BTRFS info (device loop1): trying to use backup root at mount time [ 86.031994][ T5896] BTRFS info (device loop1): setting nodatacow, compression disabled [ 86.097460][ T5896] BTRFS info (device loop1): enabling disk space caching [ 86.151243][ T5896] BTRFS info (device loop1): max_inline at 4096 [ 86.202609][ T5896] BTRFS error (device loop1): cannot disable free space tree [ 86.310630][ T5896] BTRFS error (device loop1): open_ctree failed: -22 [ 86.694137][ T5912] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.950087][ T1212] cfg80211: failed to load regulatory.db [ 88.060751][ T5924] loop3: detected capacity change from 0 to 256 [ 88.241879][ T5924] exfat: Unknown parameter 'ÿÿ' [ 88.426042][ T5924] overlayfs: failed to resolve './file1': -2 [ 88.489903][ T5926] loop1: detected capacity change from 0 to 256 [ 88.585396][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 89.102575][ T5931] ubi31: attaching mtd0 [ 89.122633][ T5931] ubi31: scanning is finished [ 89.127781][ T5931] ubi31: empty MTD device detected [ 90.180570][ T5931] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 90.369251][ T5926] FAT-fs (loop1): Directory bread(block 64) failed [ 90.384775][ T5926] FAT-fs (loop1): Directory bread(block 65) failed [ 90.391605][ T5926] FAT-fs (loop1): Directory bread(block 66) failed [ 90.404691][ T5926] FAT-fs (loop1): Directory bread(block 67) failed [ 90.411589][ T5926] FAT-fs (loop1): Directory bread(block 68) failed [ 90.457411][ T5926] FAT-fs (loop1): Directory bread(block 69) failed [ 90.464269][ T5926] FAT-fs (loop1): Directory bread(block 70) failed [ 90.565356][ T5926] FAT-fs (loop1): Directory bread(block 71) failed [ 90.572740][ T5926] FAT-fs (loop1): Directory bread(block 72) failed [ 90.586008][ T5941] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock [ 90.611310][ T5926] FAT-fs (loop1): Directory bread(block 73) failed [ 90.990334][ T28] audit: type=1800 audit(1775155219.894:2): pid=5942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.32" name="bus" dev="overlay" ino=84 res=0 errno=0 [ 93.867735][ T5965] genirq: Flags mismatch irq 4. 00000000 (pcmmio) vs. 00000000 (ttyS0) [ 93.948843][ T5966] binder: 5958:5966 ioctl b704 0 returned -22 [ 94.154211][ T5970] loop3: detected capacity change from 0 to 256 [ 94.180765][ T5970] exfat: Unknown parameter 'ÿÿ' [ 94.257938][ T5970] overlayfs: failed to resolve './file1': -2 [ 94.333527][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.342056][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.318840][ T5975] ubi31: attaching mtd0 [ 95.341393][ T5975] ubi31: scanning is finished [ 96.177108][ T5975] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 97.757243][ T5960] bridge_slave_0: left allmulticast mode [ 97.766750][ T5960] bridge_slave_0: left promiscuous mode [ 97.787841][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.880667][ T5960] bridge_slave_1: left allmulticast mode [ 97.886506][ T5960] bridge_slave_1: left promiscuous mode [ 97.892443][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.989721][ T5960] bond0: (slave bond_slave_0): Releasing backup interface [ 98.042293][ T5960] bond0: (slave bond_slave_1): Releasing backup interface [ 98.126771][ T5989] loop3: detected capacity change from 0 to 256 [ 98.146249][ T5960] team0: Port device team_slave_0 removed [ 98.170352][ T5989] FAT-fs (loop3): Directory bread(block 64) failed [ 98.180381][ T5989] FAT-fs (loop3): Directory bread(block 65) failed [ 98.190263][ T5989] FAT-fs (loop3): Directory bread(block 66) failed [ 98.199482][ T5989] FAT-fs (loop3): Directory bread(block 67) failed [ 98.219940][ T5989] FAT-fs (loop3): Directory bread(block 68) failed [ 98.228239][ T5960] team0: Port device team_slave_1 removed [ 98.239938][ T5989] FAT-fs (loop3): Directory bread(block 69) failed [ 98.249854][ T5989] FAT-fs (loop3): Directory bread(block 70) failed [ 98.255705][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.257808][ T5989] FAT-fs (loop3): Directory bread(block 71) failed [ 98.271686][ T5989] FAT-fs (loop3): Directory bread(block 72) failed [ 98.278341][ T5989] FAT-fs (loop3): Directory bread(block 73) failed [ 98.291415][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.471210][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.513280][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.790711][ T5960] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.804840][ T5960] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.819446][ T5960] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.828852][ T5960] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.928457][ T5968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40'. [ 100.091289][ T5968] hsr_slave_1 (unregistering): left promiscuous mode [ 100.133180][ T6000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.49'. [ 101.412739][ T5776] libceph: connect (1)[c::]:6789 error -101 [ 101.702403][ T5776] libceph: mon0 (1)[c::]:6789 connect error [ 101.898518][ T6010] ceph: No mds server is up or the cluster is laggy [ 102.300911][ T6028] netlink: 'syz.2.55': attribute type 6 has an invalid length. [ 103.367863][ T6035] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock [ 103.794151][ T6040] netlink: 48 bytes leftover after parsing attributes in process `syz.0.60'. [ 103.809237][ T6042] loop2: detected capacity change from 0 to 256 [ 103.824045][ T6042] exfat: Unknown parameter 'ÿÿ' [ 103.840537][ T6042] overlayfs: failed to resolve './bus': -2 [ 103.853951][ T6040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.60'. [ 104.170047][ T6040] hsr_slave_1 (unregistering): left promiscuous mode [ 104.175569][ T5776] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 104.574362][ T5776] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.591728][ T5776] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.603046][ T5776] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 104.612976][ T5776] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.629431][ T5776] usb 4-1: config 0 descriptor?? [ 105.058398][ T5776] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 105.074119][ T5776] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0002/input/input6 [ 105.211377][ T5776] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 105.272351][ T6044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.286309][ T6044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.303190][ T5809] usb 4-1: USB disconnect, device number 2 [ 105.349901][ T6059] fido_id[6059]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 106.920436][ T6074] netlink: 'syz.3.70': attribute type 6 has an invalid length. [ 107.043371][ T6076] loop1: detected capacity change from 0 to 256 [ 107.066790][ T6076] exfat: Unknown parameter 'ÿÿ' [ 107.126694][ T5784] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 107.143651][ T6076] overlayfs: failed to resolve './bus': -2 [ 107.959492][ T6085] netlink: 48 bytes leftover after parsing attributes in process `syz.1.75'. [ 108.041438][ T6085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.75'. [ 108.773204][ T6096] netlink: 56 bytes leftover after parsing attributes in process `syz.1.78'. [ 108.794379][ T6096] syz.1.78 uses obsolete (PF_INET,SOCK_PACKET) [ 108.814067][ T6096] tipc: Started in network mode [ 108.819217][ T6096] tipc: Node identity ac14140f, cluster identity 4711 [ 108.827076][ T6096] tipc: New replicast peer: 255.255.255.255 [ 108.838185][ T6096] tipc: Enabled bearer , priority 10 [ 109.180220][ T6104] overlayfs: failed to resolve './file0': -2 [ 109.830645][ T5776] tipc: Node number set to 2886997007 [ 110.175114][ T6121] netlink: 48 bytes leftover after parsing attributes in process `syz.2.86'. [ 110.185476][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.86'. [ 110.411507][ T6121] hsr_slave_1 (unregistering): left promiscuous mode [ 111.909276][ T6139] overlayfs: failed to resolve './file0': -2 [ 112.090091][ T6145] netlink: 56 bytes leftover after parsing attributes in process `syz.1.93'. [ 112.575335][ T6157] netlink: 48 bytes leftover after parsing attributes in process `syz.3.97'. [ 112.615785][ T6157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.97'. [ 112.741042][ T6157] hsr_slave_1 (unregistering): left promiscuous mode [ 113.535985][ T6172] overlayfs: failed to resolve './file0': -2 [ 113.585522][ T6174] netlink: 56 bytes leftover after parsing attributes in process `syz.0.102'. [ 115.185795][ T6196] netlink: 48 bytes leftover after parsing attributes in process `syz.3.109'. [ 115.233710][ T6201] loop1: detected capacity change from 0 to 256 [ 115.259919][ T6202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.109'. [ 115.270844][ T6201] exfat: Unknown parameter 'ÿÿ' [ 115.327642][ T6201] overlayfs: failed to resolve './bus': -2 [ 116.038132][ T6207] netlink: 56 bytes leftover after parsing attributes in process `syz.1.112'. [ 117.162538][ T6226] loop1: detected capacity change from 0 to 256 [ 117.173678][ T6226] exfat: Unknown parameter 'ÿÿ' [ 117.208542][ T6226] overlayfs: failed to resolve './bus': -2 [ 118.023806][ T6242] netlink: 48 bytes leftover after parsing attributes in process `syz.1.125'. [ 118.089616][ T6246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.125'. [ 118.563785][ T6260] loop2: detected capacity change from 0 to 256 [ 118.585458][ T6260] exfat: Unknown parameter 'ÿÿ' [ 118.645655][ T6260] overlayfs: failed to resolve './bus': -2 [ 119.049749][ T2178] libceph: connect (1)[c::]:6789 error -101 [ 119.182829][ T2178] libceph: mon0 (1)[c::]:6789 connect error [ 119.416150][ T6264] ceph: No mds server is up or the cluster is laggy [ 120.072798][ T6275] ubi31: attaching mtd0 [ 120.090567][ T6275] ubi31: scanning is finished [ 120.921628][ T6275] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 121.025067][ T6278] loop1: detected capacity change from 0 to 512 [ 121.701019][ T6278] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 121.998753][ T6278] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.050957][ T6283] netlink: 56 bytes leftover after parsing attributes in process `syz.3.135'. [ 122.626136][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.553242][ T6302] ubi31: attaching mtd0 [ 123.568355][ T6302] ubi31: scanning is finished [ 124.348465][ T6302] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 125.449842][ T6314] loop1: detected capacity change from 0 to 256 [ 125.460395][ T6314] exfat: Unknown parameter 'ÿÿ' [ 125.529267][ T5784] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 125.563036][ T6314] overlayfs: failed to resolve './file1': -2 [ 125.803868][ T6319] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock [ 126.706827][ T6328] netlink: 48 bytes leftover after parsing attributes in process `syz.3.141'. [ 126.774286][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.141'. [ 127.325141][ T6334] ubi31: attaching mtd0 [ 127.338998][ T6334] ubi31: scanning is finished [ 128.184013][ T6334] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 128.997783][ T6351] loop0: detected capacity change from 0 to 256 [ 129.006546][ T6351] exfat: Unknown parameter 'ÿÿ' [ 129.023318][ T6351] overlayfs: failed to resolve './file1': -2 [ 131.304860][ T6370] ubi31: attaching mtd0 [ 131.709353][ T6370] ubi31: scanning is finished [ 132.170065][ T6370] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 132.446791][ T6378] netlink: 48 bytes leftover after parsing attributes in process `syz.3.164'. [ 132.530840][ T6381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.164'. [ 132.551451][ T6382] loop0: detected capacity change from 0 to 256 [ 132.572627][ T6382] exfat: Unknown parameter 'ÿÿ' [ 132.650635][ T6382] overlayfs: failed to resolve './file1': -2 [ 133.226838][ T6393] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock [ 133.430391][ T6399] loop3: detected capacity change from 0 to 256 [ 133.925554][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.932141][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.957874][ T28] audit: type=1800 audit(1775155262.874:3): pid=6397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.168" name="bus" dev="overlay" ino=227 res=0 errno=0 [ 134.099378][ T6399] FAT-fs (loop3): Directory bread(block 64) failed [ 134.120082][ T6399] FAT-fs (loop3): Directory bread(block 65) failed [ 134.145186][ T6399] FAT-fs (loop3): Directory bread(block 66) failed [ 134.152334][ T6399] FAT-fs (loop3): Directory bread(block 67) failed [ 134.191669][ T6399] FAT-fs (loop3): Directory bread(block 68) failed [ 134.682217][ T6404] ubi31: attaching mtd0 [ 134.698596][ T6404] ubi31: scanning is finished [ 135.539055][ T6399] FAT-fs (loop3): Directory bread(block 69) failed [ 135.561559][ T6404] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 135.662197][ T6399] FAT-fs (loop3): Directory bread(block 70) failed [ 135.674883][ T6399] FAT-fs (loop3): Directory bread(block 71) failed [ 135.685433][ T6399] FAT-fs (loop3): Directory bread(block 72) failed [ 135.703355][ T6399] FAT-fs (loop3): Directory bread(block 73) failed [ 136.378949][ T6418] loop2: detected capacity change from 0 to 256 [ 136.425797][ T6418] exfat: Unknown parameter 'ÿÿ' [ 136.484672][ T5784] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 136.824797][ T2178] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 137.024633][ T2178] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.142599][ T2178] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 137.381129][ T2178] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.669828][ T2178] usb 2-1: config 0 descriptor?? [ 137.871960][ T6438] netlink: 76 bytes leftover after parsing attributes in process `syz.0.179'. [ 138.424566][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 138.533776][ T6442] ubi31: attaching mtd0 [ 138.550811][ T6442] ubi31: scanning is finished [ 139.554538][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 139.594551][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 139.604718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 139.784641][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 140.098256][ T6442] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 140.331296][ T2178] usbhid 2-1:0.0: can't add hid device: -71 [ 140.371541][ T2178] usbhid: probe of 2-1:0.0 failed with error -71 [ 140.453131][ T2178] usb 2-1: USB disconnect, device number 3 [ 140.503541][ T6448] loop2: detected capacity change from 0 to 512 [ 140.540660][ T6448] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 140.947003][ T6448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.513097][ T6456] loop3: detected capacity change from 0 to 256 [ 142.052582][ T6456] FAT-fs (loop3): Directory bread(block 64) failed [ 142.094654][ T6456] FAT-fs (loop3): Directory bread(block 65) failed [ 142.101821][ T6456] FAT-fs (loop3): Directory bread(block 66) failed [ 142.110229][ T6456] FAT-fs (loop3): Directory bread(block 67) failed [ 142.117735][ T6456] FAT-fs (loop3): Directory bread(block 68) failed [ 142.125472][ T6456] FAT-fs (loop3): Directory bread(block 69) failed [ 142.132303][ T6456] FAT-fs (loop3): Directory bread(block 70) failed [ 142.140954][ T6456] FAT-fs (loop3): Directory bread(block 71) failed [ 142.142118][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.152570][ T6456] FAT-fs (loop3): Directory bread(block 72) failed [ 142.179643][ T6456] FAT-fs (loop3): Directory bread(block 73) failed [ 142.231227][ T6461] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock [ 143.365922][ T6479] netlink: 76 bytes leftover after parsing attributes in process `syz.3.188'. [ 143.933341][ T6483] ubi31: attaching mtd0 [ 143.950486][ T6483] ubi31: scanning is finished [ 144.819122][ T6483] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 145.660441][ T6493] loop2: detected capacity change from 0 to 4096 [ 145.711790][ T6493] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 145.764883][ T5840] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 145.918391][ T6493] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 145.936311][ T6493] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 145.967151][ T5840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.006312][ T5840] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 146.031938][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.062487][ T5840] usb 4-1: config 0 descriptor?? [ 146.068488][ T1085] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22. [ 146.083064][ T6493] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 146.114762][ T6493] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 146.122750][ T6493] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 146.150061][ T49] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22. [ 146.281217][ T6497] loop0: detected capacity change from 0 to 256 [ 146.340249][ T6497] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 146.387482][ T6503] loop1: detected capacity change from 0 to 256 [ 146.433027][ T6503] FAT-fs (loop1): Directory bread(block 64) failed [ 146.440093][ T6503] FAT-fs (loop1): Directory bread(block 65) failed [ 146.448566][ T6503] FAT-fs (loop1): Directory bread(block 66) failed [ 146.458612][ T6503] FAT-fs (loop1): Directory bread(block 67) failed [ 146.466013][ T6503] FAT-fs (loop1): Directory bread(block 68) failed [ 146.472669][ T6503] FAT-fs (loop1): Directory bread(block 69) failed [ 146.479714][ T6503] FAT-fs (loop1): Directory bread(block 70) failed [ 146.486633][ T6503] FAT-fs (loop1): Directory bread(block 71) failed [ 146.493527][ T6503] FAT-fs (loop1): Directory bread(block 72) failed [ 146.502717][ T6503] FAT-fs (loop1): Directory bread(block 73) failed [ 146.519272][ T6491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.561405][ T6491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.996959][ T6511] ubi31: attaching mtd0 [ 148.007657][ T6511] ubi31: scanning is finished [ 148.994563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 149.114634][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 149.154535][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 149.204541][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 149.326484][ T6511] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 149.515927][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 149.531764][ T5840] usbhid 4-1:0.0: can't add hid device: -71 [ 149.549887][ T5840] usbhid: probe of 4-1:0.0 failed with error -71 [ 149.589864][ T5840] usb 4-1: USB disconnect, device number 3 [ 149.734696][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 149.753272][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.772449][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.787403][ T23] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 149.800513][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.815041][ T23] usb 1-1: config 0 descriptor?? [ 149.839148][ T23] hub 1-1:0.0: USB hub found [ 150.070905][ T23] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 150.297299][ T6534] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock [ 150.500554][ T23] hid-generic 0003:046D:C31C.0003: item fetching failed at offset 0/1 [ 150.533772][ T23] hid-generic: probe of 0003:046D:C31C.0003 failed with error -22 [ 150.656385][ T6536] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 150.875076][ T5811] usb 1-1: USB disconnect, device number 2 [ 151.438773][ T6547] loop0: detected capacity change from 0 to 256 [ 151.487265][ T6547] FAT-fs (loop0): Directory bread(block 64) failed [ 151.998187][ T6550] ubi31: attaching mtd0 [ 152.010045][ T6550] ubi31: scanning is finished [ 152.744727][ T6547] FAT-fs (loop0): Directory bread(block 65) failed [ 152.751942][ T6547] FAT-fs (loop0): Directory bread(block 66) failed [ 152.834698][ T6547] FAT-fs (loop0): Directory bread(block 67) failed [ 152.843621][ T6550] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 152.920523][ T6547] FAT-fs (loop0): Directory bread(block 68) failed [ 152.949996][ T6547] FAT-fs (loop0): Directory bread(block 69) failed [ 152.968286][ T6547] FAT-fs (loop0): Directory bread(block 70) failed [ 153.004823][ T6547] FAT-fs (loop0): Directory bread(block 71) failed [ 153.011727][ T6547] FAT-fs (loop0): Directory bread(block 72) failed [ 153.049651][ T6547] FAT-fs (loop0): Directory bread(block 73) failed [ 153.074738][ T5809] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 153.367086][ T5809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.394766][ T5809] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 153.873376][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.886418][ T5809] usb 2-1: config 0 descriptor?? [ 154.306867][ T5809] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 154.354624][ T5809] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0004/input/input7 [ 154.502775][ T5809] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 154.526208][ T6554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.570344][ T6554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.720922][ C0] Mem-Info: [ 154.725541][ C0] active_anon:8122 inactive_anon:0 isolated_anon:13 [ 154.725541][ C0] active_file:17634 inactive_file:39981 isolated_file:0 [ 154.725541][ C0] unevictable:769 dirty:248 writeback:0 [ 154.725541][ C0] slab_reclaimable:10556 slab_unreclaimable:90917 [ 154.725541][ C0] mapped:24676 shmem:3597 pagetables:584 [ 154.725541][ C0] sec_pagetables:0 bounce:0 [ 154.725541][ C0] kernel_misc_reclaimable:0 [ 154.725541][ C0] free:1340569 free_pcp:15881 free_cma:0 [ 154.785729][ C0] Node 0 active_anon:29888kB inactive_anon:0kB active_file:70288kB inactive_file:159720kB unevictable:1536kB isolated(anon):52kB isolated(file):0kB mapped:98416kB dirty:880kB writeback:0kB shmem:10752kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10804kB pagetables:2336kB sec_pagetables:0kB all_unreclaimable? no [ 154.833222][ C0] Node 1 active_anon:0kB inactive_anon:0kB active_file:248kB inactive_file:204kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:188kB dirty:112kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 154.874766][ C0] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 154.908457][ C0] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 154.915769][ C0] Node 0 DMA32 free:1473228kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:24072kB inactive_anon:0kB active_file:70288kB inactive_file:158888kB unevictable:1536kB writepending:912kB present:3129332kB managed:2586956kB mlocked:0kB bounce:0kB free_pcp:30872kB local_pcp:19156kB free_cma:0kB [ 154.956841][ C0] lowmem_reserve[]: 0 0 0 0 0 [ 154.964231][ C0] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 154.998558][ C0] lowmem_reserve[]: 0 0 0 0 0 [ 155.004374][ C0] Node 1 Normal free:3873740kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:248kB inactive_file:204kB unevictable:1536kB writepending:112kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:41332kB local_pcp:18488kB free_cma:0kB [ 155.038678][ C0] lowmem_reserve[]: 0 0 0 0 0 [ 155.044235][ C0] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 155.059673][ C0] Node 0 DMA32: 1083*4kB (UME) 1472*8kB (UME) 1176*16kB (UME) 581*32kB (UME) 367*64kB (UME) 76*128kB (UME) 8*256kB (UM) 2*512kB (M) 1*1024kB (M) 3*2048kB (UME) 336*4096kB (UM) = 1473228kB [ 155.080868][ C0] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 155.093101][ C0] Node 1 Normal: 249*4kB (UME) 57*8kB (UME) 46*16kB (UME) 58*32kB (UME) 24*64kB (UME) 8*128kB (UME) 2*256kB (UE) 2*512kB (UE) 1*1024kB (U) 1*2048kB (E) 943*4096kB (M) = 3873740kB [ 155.112268][ C0] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 155.122732][ C0] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 155.133863][ C0] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 155.151442][ C0] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 155.164972][ C0] 59015 total pagecache pages [ 155.172254][ C0] 0 pages in swap cache [ 155.192817][ C0] Free swap = 124996kB [ 155.202959][ C0] Total swap = 124996kB [ 155.212383][ C0] 2097051 pages RAM [ 155.222833][ C0] 0 pages HighMem/MovableOnly [ 155.236689][ C0] 416926 pages reserved [ 155.242008][ C0] 0 pages cma reserved [ 155.494058][ T6584] loop3: detected capacity change from 0 to 512 [ 155.516236][ T6584] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 155.962228][ T6584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.058802][ T5811] usb 2-1: USB disconnect, device number 4 [ 156.665398][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.835425][ T6595] overlayfs: failed to resolve './file1': -2 [ 157.256755][ T6603] loop3: detected capacity change from 0 to 256 [ 157.442494][ T6603] FAT-fs (loop3): Directory bread(block 64) failed [ 157.459554][ T6603] FAT-fs (loop3): Directory bread(block 65) failed [ 157.466664][ T6603] FAT-fs (loop3): Directory bread(block 66) failed [ 157.473290][ T6603] FAT-fs (loop3): Directory bread(block 67) failed [ 157.494753][ T6603] FAT-fs (loop3): Directory bread(block 68) failed [ 157.512199][ T6603] FAT-fs (loop3): Directory bread(block 69) failed [ 157.574839][ T6603] FAT-fs (loop3): Directory bread(block 70) failed [ 157.583963][ T6603] FAT-fs (loop3): Directory bread(block 71) failed [ 157.597275][ T6603] FAT-fs (loop3): Directory bread(block 72) failed [ 157.604469][ T6603] FAT-fs (loop3): Directory bread(block 73) failed [ 158.529966][ T6615] capability: warning: `syz.0.225' uses 32-bit capabilities (legacy support in use) [ 158.960052][ T6627] loop2: detected capacity change from 0 to 4096 [ 159.264906][ T6636] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.424727][ T28] audit: type=1800 audit(1775155288.304:4): pid=6627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.228" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 159.619314][ T23] libceph: connect (1)[c::]:6789 error -101 [ 159.626730][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 159.656988][ T6640] overlayfs: failed to resolve './file1': -2 [ 159.776228][ T6644] loop2: detected capacity change from 0 to 256 [ 159.831982][ T6634] ceph: No mds server is up or the cluster is laggy [ 159.941443][ T6644] FAT-fs (loop2): Directory bread(block 64) failed [ 160.000135][ T6644] FAT-fs (loop2): Directory bread(block 65) failed [ 160.142457][ T6644] FAT-fs (loop2): Directory bread(block 66) failed [ 160.288328][ T6644] FAT-fs (loop2): Directory bread(block 67) failed [ 160.327940][ T6644] FAT-fs (loop2): Directory bread(block 68) failed [ 160.337693][ T6644] FAT-fs (loop2): Directory bread(block 69) failed [ 160.344880][ T6644] FAT-fs (loop2): Directory bread(block 70) failed [ 160.351882][ T6644] FAT-fs (loop2): Directory bread(block 71) failed [ 160.379969][ T6644] FAT-fs (loop2): Directory bread(block 72) failed [ 160.388272][ T6644] FAT-fs (loop2): Directory bread(block 73) failed [ 161.251369][ T3414] Bluetooth: hci4: Frame reassembly failed (-84) [ 162.041150][ T6672] ubi31: attaching mtd0 [ 162.055483][ T6672] ubi31: scanning is finished [ 162.784224][ T6672] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 163.274819][ T5780] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 163.503420][ T6681] overlayfs: failed to resolve './file1': -2 [ 163.945021][ T6684] loop3: detected capacity change from 0 to 256 [ 164.085453][ T6684] FAT-fs (loop3): Directory bread(block 64) failed [ 164.092249][ T6684] FAT-fs (loop3): Directory bread(block 65) failed [ 164.159480][ T6684] FAT-fs (loop3): Directory bread(block 66) failed [ 164.182411][ T6684] FAT-fs (loop3): Directory bread(block 67) failed [ 164.193078][ T6684] FAT-fs (loop3): Directory bread(block 68) failed [ 164.200401][ T6684] FAT-fs (loop3): Directory bread(block 69) failed [ 164.207245][ T6684] FAT-fs (loop3): Directory bread(block 70) failed [ 164.214650][ T6684] FAT-fs (loop3): Directory bread(block 71) failed [ 164.221555][ T6684] FAT-fs (loop3): Directory bread(block 72) failed [ 164.228664][ T6684] FAT-fs (loop3): Directory bread(block 73) failed [ 165.313149][ T6701] loop3: detected capacity change from 0 to 1024 [ 165.329852][ T6706] loop2: detected capacity change from 0 to 256 [ 165.338566][ T6701] EXT4-fs: Ignoring removed bh option [ 165.355833][ T6701] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 165.373941][ T6706] exfat: Unknown parameter 'ÿÿ' [ 165.420856][ T6701] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.426025][ T6706] overlayfs: missing 'lowerdir' [ 165.538864][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.836020][ T6717] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 166.367010][ T6721] overlayfs: failed to resolve './file1': -2 [ 167.210661][ T6740] pim6reg1: entered promiscuous mode [ 167.218651][ T6740] pim6reg1: entered allmulticast mode [ 167.298558][ T6742] overlayfs: failed to resolve './file0': -2 [ 169.035957][ T28] audit: type=1800 audit(1775155297.954:5): pid=6753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.268" name="bus" dev="overlay" ino=384 res=0 errno=0 [ 169.342131][ T6772] loop2: detected capacity change from 0 to 256 [ 169.375459][ T6772] exfat: Unknown parameter 'ÿÿ' [ 169.907829][ T6772] overlayfs: missing 'lowerdir' [ 170.873108][ T6781] ubi31: attaching mtd0 [ 170.887562][ T6781] ubi31: scanning is finished [ 171.647533][ T6781] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 171.788176][ T6786] loop1: detected capacity change from 0 to 256 [ 171.940364][ T6786] FAT-fs (loop1): Directory bread(block 64) failed [ 171.956467][ T6786] FAT-fs (loop1): Directory bread(block 65) failed [ 171.963567][ T6786] FAT-fs (loop1): Directory bread(block 66) failed [ 171.970550][ T6786] FAT-fs (loop1): Directory bread(block 67) failed [ 171.984316][ T6786] FAT-fs (loop1): Directory bread(block 68) failed [ 172.003355][ T6786] FAT-fs (loop1): Directory bread(block 69) failed [ 172.023514][ T6786] FAT-fs (loop1): Directory bread(block 70) failed [ 172.052429][ T6786] FAT-fs (loop1): Directory bread(block 71) failed [ 172.069623][ T6786] FAT-fs (loop1): Directory bread(block 72) failed [ 172.090370][ T6786] FAT-fs (loop1): Directory bread(block 73) failed [ 172.950478][ T6803] overlayfs: failed to clone upperpath [ 173.579320][ T6807] ubi31: attaching mtd0 [ 173.592595][ T6807] ubi31: scanning is finished [ 174.337472][ T6807] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 174.490455][ T6813] overlayfs: failed to resolve './file0': -2 [ 174.990424][ T6820] netlink: 56 bytes leftover after parsing attributes in process `syz.3.289'. [ 175.161151][ T6824] tipc: Started in network mode [ 175.170516][ T6824] tipc: Node identity ac14140f, cluster identity 4711 [ 175.265851][ T6824] tipc: New replicast peer: 255.255.255.255 [ 175.301599][ T6824] tipc: Enabled bearer , priority 10 [ 176.271825][ T6842] loop1: detected capacity change from 0 to 256 [ 176.285317][ T5811] tipc: Node number set to 2886997007 [ 176.311942][ T6842] FAT-fs (loop1): Directory bread(block 64) failed [ 176.324348][ T6842] FAT-fs (loop1): Directory bread(block 65) failed [ 176.334161][ T6842] FAT-fs (loop1): Directory bread(block 66) failed [ 176.347084][ T6842] FAT-fs (loop1): Directory bread(block 67) failed [ 176.353766][ T6842] FAT-fs (loop1): Directory bread(block 68) failed [ 176.362037][ T6842] FAT-fs (loop1): Directory bread(block 69) failed [ 176.373366][ T6842] FAT-fs (loop1): Directory bread(block 70) failed [ 176.381917][ T6842] FAT-fs (loop1): Directory bread(block 71) failed [ 176.439264][ T6842] FAT-fs (loop1): Directory bread(block 72) failed [ 176.463719][ T6842] FAT-fs (loop1): Directory bread(block 73) failed [ 176.504118][ T6842] syz.1.295: attempt to access beyond end of device [ 176.504118][ T6842] loop1: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 176.509118][ T6847] wlan1 speed is unknown, defaulting to 1000 [ 176.526152][ T6842] syz.1.295: attempt to access beyond end of device [ 176.526152][ T6842] loop1: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 176.539995][ T6847] wlan1 speed is unknown, defaulting to 1000 [ 176.578163][ T6847] wlan1 speed is unknown, defaulting to 1000 [ 176.585267][ T28] audit: type=1800 audit(1775155305.504:6): pid=6842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.295" name="file0" dev="loop1" ino=1048605 res=0 errno=0 [ 176.634171][ T6847] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 176.673143][ T6848] syz.1.295: attempt to access beyond end of device [ 176.673143][ T6848] loop1: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 176.688939][ T6847] infiniband óyz2: RDMA CMA: cma_listen_on_dev, error -98 [ 176.703930][ T6851] overlayfs: failed to resolve './file0': -2 [ 176.770244][ T11] Bluetooth: hci4: Frame reassembly failed (-84) [ 176.782202][ T6847] wlan1 speed is unknown, defaulting to 1000 [ 176.818711][ T6847] wlan1 speed is unknown, defaulting to 1000 [ 176.827045][ T6847] wlan1 speed is unknown, defaulting to 1000 [ 176.845449][ T6847] wlan1 speed is unknown, defaulting to 1000 [ 176.870026][ T6855] overlayfs: failed to resolve './file1': -2 [ 176.988782][ T6859] netlink: 56 bytes leftover after parsing attributes in process `syz.3.301'. [ 177.068373][ T6862] binder: 6860:6862 ioctl 4018620d 0 returned -22 [ 177.123713][ T6864] tipc: Enabling of bearer rejected, already enabled [ 177.340214][ T6869] binder: 6860:6869 ioctl b704 0 returned -22 [ 178.219307][ T6885] loop1: detected capacity change from 0 to 512 [ 178.235240][ T6885] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 179.590744][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 179.600531][ T5780] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 180.581441][ T6885] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.019299][ T6894] overlayfs: failed to resolve './file0': -2 [ 181.151196][ T6897] kvm: MONITOR instruction emulated as NOP! [ 181.261897][ T6901] overlayfs: failed to resolve './file1': -2 [ 181.396849][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.052631][ T6913] binder: 6912:6913 ioctl 4018620d 0 returned -22 [ 182.200698][ T6918] binder: 6912:6918 ioctl b704 0 returned -22 [ 182.781025][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.316'. [ 182.999009][ T6926] loop1: detected capacity change from 0 to 512 [ 183.046318][ T6926] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 183.253730][ T6928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.317'. [ 183.266957][ T6926] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.891571][ T6934] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 183.935826][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.211599][ T6946] loop0: detected capacity change from 0 to 512 [ 185.284924][ T6956] ubi31: attaching mtd0 [ 185.290109][ T6956] ubi31: scanning is finished [ 185.505706][ T6956] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 185.513302][ T6956] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 185.520967][ T6956] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 185.528404][ T6956] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 185.536135][ T6956] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 185.543011][ T6956] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 185.551307][ T6956] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 661447168 [ 185.561753][ T6956] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 185.634720][ T6963] ubi31: background thread "ubi_bgt31d" started, PID 6963 [ 185.805333][ T6966] overlayfs: failed to clone upperpath [ 186.164907][ T5840] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 186.405068][ T5840] usb 2-1: unable to get BOS descriptor or descriptor too short [ 186.419086][ T5840] usb 2-1: config 1 has an invalid interface number: 33 but max is 2 [ 186.431879][ T5840] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.450037][ T5840] usb 2-1: config 1 has no interface number 2 [ 186.468774][ T5840] usb 2-1: string descriptor 0 read error: -22 [ 186.477237][ T5840] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 186.508354][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.574672][ T5840] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 188.135689][ T5840] usb 2-1: USB disconnect, device number 5 [ 188.310711][ T6997] binder: 6996:6997 ioctl 4018620d 0 returned -22 [ 188.581887][ T7002] binder: 6996:7002 ioctl b704 0 returned -22 [ 190.085329][ T5978] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 190.303929][ T5978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.329936][ T5978] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 190.345152][ T5978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.356187][ T5978] usb 3-1: config 0 descriptor?? [ 191.305034][ T7021] ubi: mtd0 is already attached to ubi31 [ 191.613469][ T5978] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 191.675021][ T5978] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0005/input/input8 [ 191.782099][ T7025] process 'syz.3.352' launched './file0' with NULL argv: empty string added [ 191.814199][ T7013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.848787][ T7013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.857635][ T5978] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 192.280073][ T1212] usb 3-1: USB disconnect, device number 2 [ 192.770673][ T7032] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.778784][ T7032] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.744146][ T7053] ubi: mtd0 is already attached to ubi31 [ 194.932499][ T7032] bridge_slave_0: left allmulticast mode [ 194.941273][ T7032] bridge_slave_0: left promiscuous mode [ 194.955745][ T7032] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.056366][ T7032] bridge_slave_1: left allmulticast mode [ 195.067084][ T7032] bridge_slave_1: left promiscuous mode [ 195.082761][ T7032] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.161896][ T7032] bond0: (slave bond_slave_0): Releasing backup interface [ 195.201050][ T7032] bond0: (slave bond_slave_1): Releasing backup interface [ 195.278012][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.287248][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.339698][ T7032] team0: Port device team_slave_0 removed [ 195.390444][ T7032] team0: Port device team_slave_1 removed [ 195.406764][ T7032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.432077][ T7032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.479793][ T7032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.504813][ T7032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.144217][ T7032] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.157035][ T7032] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.168049][ T7032] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.181616][ T7032] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.455487][ T7065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.574746][ T23] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 196.777160][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.788832][ T23] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 196.798100][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.814041][ T23] usb 2-1: config 0 descriptor?? [ 197.230738][ T23] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 197.243107][ T23] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0006/input/input9 [ 197.359386][ T23] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 197.361451][ T5085] Bluetooth: hci3: command 0x0406 tx timeout [ 197.372186][ T5777] Bluetooth: hci0: command 0x0406 tx timeout [ 197.386826][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 197.625937][ T7069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.782667][ T7069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.320688][ T788] usb 2-1: USB disconnect, device number 6 [ 199.189788][ T7101] binder: 7100:7101 ioctl 4018620d 0 returned -22 [ 200.132678][ T7101] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.140723][ T7101] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.836267][ T7101] bridge_slave_0: left allmulticast mode [ 200.842125][ T7101] bridge_slave_0: left promiscuous mode [ 200.848735][ T7101] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.886512][ T7101] bridge_slave_1: left allmulticast mode [ 200.892236][ T7101] bridge_slave_1: left promiscuous mode [ 200.898880][ T7101] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.928678][ T7101] bond0: (slave bond_slave_0): Releasing backup interface [ 200.956763][ T7101] bond0: (slave bond_slave_1): Releasing backup interface [ 201.002305][ T7101] team0: Port device team_slave_0 removed [ 201.053031][ T7101] team0: Port device team_slave_1 removed [ 201.075358][ T7101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.110589][ T7101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.159320][ T7101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.577565][ T7101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.670498][ T7133] overlayfs: failed to resolve './file0': -2 [ 201.954396][ T7141] netlink: 56 bytes leftover after parsing attributes in process `syz.3.386'. [ 202.145624][ T7101] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.155643][ T7101] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.165552][ T7101] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.175041][ T7101] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.356094][ T7147] tipc: Enabling of bearer rejected, already enabled [ 202.374269][ T23] wlan1 speed is unknown, defaulting to 1000 [ 202.442955][ T144] Bluetooth: hci4: Frame reassembly failed (-84) [ 203.713721][ T7174] netlink: 56 bytes leftover after parsing attributes in process `syz.3.397'. [ 203.775017][ T7181] netlink: 76 bytes leftover after parsing attributes in process `syz.0.396'. [ 203.823688][ T7183] tipc: Enabling of bearer rejected, already enabled [ 204.545176][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 204.729208][ T5775] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 204.907822][ T7207] binder: 7205:7207 ioctl 4018620d 0 returned -22 [ 205.603274][ T7222] netlink: 76 bytes leftover after parsing attributes in process `syz.0.408'. [ 205.730532][ T7225] netlink: 56 bytes leftover after parsing attributes in process `syz.2.409'. [ 205.873532][ T7225] tipc: Started in network mode [ 205.885973][ T7225] tipc: Node identity ac14140f, cluster identity 4711 [ 205.906220][ T7225] tipc: New replicast peer: 255.255.255.255 [ 205.913141][ T7225] tipc: Enabled bearer , priority 10 [ 206.924966][ T7249] overlayfs: failed to clone upperpath [ 207.754743][ T7254] ubi: mtd0 is already attached to ubi31 [ 208.101415][ T9] tipc: Node number set to 2886997007 [ 208.285698][ T7259] netlink: 56 bytes leftover after parsing attributes in process `syz.2.423'. [ 208.354184][ T7259] tipc: Enabling of bearer rejected, already enabled [ 208.545601][ T7268] netlink: 76 bytes leftover after parsing attributes in process `syz.3.426'. [ 209.335635][ T7274] ubi: mtd0 is already attached to ubi31 [ 210.174450][ T28] audit: type=1800 audit(1775155339.084:7): pid=7286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.430" name="bus" dev="overlay" ino=589 res=0 errno=0 [ 210.887648][ T7299] netlink: 56 bytes leftover after parsing attributes in process `syz.3.436'. [ 210.987289][ T7309] netlink: 76 bytes leftover after parsing attributes in process `syz.1.437'. [ 211.008631][ T7308] tipc: Enabling of bearer rejected, already enabled [ 212.777080][ T7340] netlink: 56 bytes leftover after parsing attributes in process `syz.2.447'. [ 212.922692][ T7340] tipc: Enabling of bearer rejected, already enabled [ 213.202079][ T7342] loop0: detected capacity change from 0 to 4096 [ 213.484961][ T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 213.616230][ T7353] loop1: detected capacity change from 0 to 512 [ 213.676616][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 214.025360][ T7353] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 215.328891][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 215.427115][ T9] usb 3-1: config 2 has an invalid interface number: 154 but max is 0 [ 215.435914][ T9] usb 3-1: config 2 has no interface number 0 [ 215.442468][ T9] usb 3-1: config 2 interface 154 has no altsetting 0 [ 215.452379][ T9] usb 3-1: New USB device found, idVendor=0af0, idProduct=d155, bcdDevice=b3.8f [ 215.462559][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.470831][ T9] usb 3-1: Product: syz [ 215.475277][ T9] usb 3-1: Manufacturer: syz [ 215.479930][ T9] usb 3-1: SerialNumber: syz [ 215.583191][ T7353] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.761563][ T9] usb 3-1: USB disconnect, device number 3 [ 215.897260][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.273629][ T7368] netlink: 56 bytes leftover after parsing attributes in process `syz.0.457'. [ 216.409113][ T7368] tipc: Started in network mode [ 216.471004][ T7368] tipc: Node identity ac14140f, cluster identity 4711 [ 216.519299][ T7368] tipc: New replicast peer: 255.255.255.255 [ 216.586916][ T7368] tipc: Enabled bearer , priority 10 [ 217.629897][ T7382] netlink: 156 bytes leftover after parsing attributes in process `syz.0.463'. [ 217.930265][ T23] tipc: Node number set to 2886997007 [ 218.984414][ T7400] netlink: 56 bytes leftover after parsing attributes in process `syz.1.471'. [ 219.246925][ T7400] tipc: Enabling of bearer rejected, already enabled [ 220.066681][ T7414] ubi: mtd0 is already attached to ubi31 [ 222.738636][ T7440] ubi: mtd0 is already attached to ubi31 [ 223.333601][ T7447] loop1: detected capacity change from 0 to 512 [ 223.346194][ T7447] EXT4-fs: Ignoring removed bh option [ 223.364746][ T7447] EXT4-fs: inline encryption not supported [ 223.406878][ T7447] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.475: missing EA_INODE flag [ 223.428898][ T7447] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.475: error while reading EA inode 11 err=-117 [ 223.449150][ T7447] EXT4-fs (loop1): 1 orphan inode deleted [ 223.460381][ T7447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.482765][ T7447] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.963350][ T7468] netlink: 76 bytes leftover after parsing attributes in process `syz.1.489'. [ 224.852438][ T7486] loop1: detected capacity change from 0 to 16 [ 224.881013][ T7486] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 225.814805][ T788] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 225.988784][ T7495] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock [ 226.035118][ T788] usb 1-1: Using ep0 maxpacket: 16 [ 226.088744][ T788] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.258456][ T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.425633][ T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.519004][ T788] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 226.729852][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.734259][ T7498] ubi: mtd0 is already attached to ubi31 [ 227.209833][ T788] usb 1-1: config 0 descriptor?? [ 227.837632][ T788] hid-picolcd 0003:04D8:F002.0007: unbalanced collection at end of report description [ 227.866352][ T788] hid-picolcd 0003:04D8:F002.0007: device report parse failed [ 227.886659][ T788] hid-picolcd: probe of 0003:04D8:F002.0007 failed with error -22 [ 228.046319][ T788] usb 1-1: USB disconnect, device number 3 [ 229.524784][ T7513] ubi: mtd0 is already attached to ubi31 [ 229.965267][ T7536] netlink: 28 bytes leftover after parsing attributes in process `syz.3.514'. [ 229.974425][ T7536] netlink: 'syz.3.514': attribute type 7 has an invalid length. [ 229.982816][ T7536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.514'. [ 230.354810][ T23] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 230.561566][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.576152][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 230.588011][ T23] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 230.611889][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.633893][ T23] usb 1-1: config 0 descriptor?? [ 230.654980][ T23] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 230.672657][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 230.699405][ T23] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 230.735908][ T23] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 230.750951][ T23] usb 1-1: media controller created [ 230.775789][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 230.806925][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 230.878026][ T23] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 231.012675][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 231.055722][ T23] dvb-usb: schedule remote query interval to 150 msecs. [ 231.063148][ T23] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 231.227170][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 231.236544][ T23] dvb-usb: error while querying for an remote control event. [ 231.416340][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 231.422166][ T23] dvb-usb: error while querying for an remote control event. [ 231.491949][ T7559] loop2: detected capacity change from 0 to 1024 [ 231.545464][ T7559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.602072][ T7561] 9pnet_fd: Insufficient options for proto=fd [ 231.627244][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 231.648902][ T23] dvb-usb: error while querying for an remote control event. [ 231.663288][ T7538] dvb-usb: bulk message failed: -22 (4/0) [ 231.722900][ T9] usb 1-1: USB disconnect, device number 4 [ 231.741780][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.870038][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 233.274990][ T788] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 233.329964][ T7602] tipc: Enabled bearer , priority 0 [ 233.347667][ T7602] tipc: Disabling bearer [ 233.476375][ T788] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.517778][ T788] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 233.537697][ T788] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 233.564908][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.567767][ T7611] syz_tun: entered allmulticast mode [ 233.594033][ T788] usb 1-1: Product: syz [ 233.600414][ T788] usb 1-1: Manufacturer: syz [ 233.616542][ T788] usb 1-1: SerialNumber: syz [ 233.623073][ T7609] syz_tun: left allmulticast mode [ 233.659811][ T788] cdc_mbim 1-1:1.0: skipping garbage [ 233.904088][ T7589] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 234.095920][ T7625] loop1: detected capacity change from 0 to 128 [ 234.144751][ T7625] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 234.161300][ T7625] ext4 filesystem being mounted at /127/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 234.181805][ T7625] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.547: No space for directory leaf checksum. Please run e2fsck -D. [ 234.198690][ T7625] EXT4-fs error (device loop1): htree_dirblock_to_tree:1083: inode #2: comm syz.1.547: Directory block failed checksum [ 234.266759][ T5768] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 234.366286][ T7632] binder: 7631:7632 ioctl 4018620d 0 returned -22 [ 234.535752][ T7589] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 234.571328][ T788] cdc_mbim 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 234.639421][ T788] cdc_mbim 1-1:1.0: setting rx_max = 2048 [ 234.818182][ T788] cdc_mbim 1-1:1.0: setting tx_max = 184 [ 235.090259][ T788] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 235.121682][ T788] wwan wwan0: port wwan0mbim0 attached [ 235.242446][ T7632] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.250107][ T7632] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.488604][ T7632] bridge_slave_0: left allmulticast mode [ 235.494818][ T7632] bridge_slave_0: left promiscuous mode [ 235.500863][ T7632] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.536674][ T7632] bridge_slave_1: left allmulticast mode [ 235.542742][ T7632] bridge_slave_1: left promiscuous mode [ 235.548788][ T7632] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.582134][ T7632] bond0: (slave bond_slave_0): Releasing backup interface [ 235.612804][ T7632] bond0: (slave bond_slave_1): Releasing backup interface [ 235.653208][ T7632] team0: Port device team_slave_0 removed [ 235.687343][ T7632] team0: Port device team_slave_1 removed [ 235.702940][ T7632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.724036][ T7632] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.747731][ T7632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.770476][ T7632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.021372][ T7632] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.031496][ T7632] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.041390][ T7632] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.050829][ T7632] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.210041][ T788] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 8e:1d:00:54:c0:7d [ 236.258457][ T788] usb 1-1: USB disconnect, device number 5 [ 236.282907][ T788] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 236.418969][ T788] wwan wwan0: port wwan0mbim0 disconnected [ 236.596711][ T7652] loop0: detected capacity change from 0 to 512 [ 236.659169][ T7652] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 236.675970][ T7652] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 237.068548][ T7664] binder: 7663:7664 ioctl 4018620d 0 returned -22 [ 238.255078][ T7689] loop2: detected capacity change from 0 to 4096 [ 238.323753][ T7689] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 238.488230][ T7694] loop1: detected capacity change from 0 to 256 [ 238.526032][ T7694] exfat: Unknown parameter 'ÿÿ' [ 238.597850][ T7694] overlayfs: missing 'workdir' [ 238.834439][ T7704] overlayfs: failed to clone upperpath [ 239.553432][ T7721] overlayfs: failed to resolve './file0': -2 [ 240.410984][ T7741] loop0: detected capacity change from 0 to 1024 [ 240.577309][ T28] audit: type=1800 audit(1775155369.484:8): pid=7741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.591" name="file2" dev="loop0" ino=22 res=0 errno=0 [ 240.673932][ T7748] loop2: detected capacity change from 0 to 256 [ 240.683469][ T7746] loop1: detected capacity change from 0 to 4096 [ 240.702180][ T7748] exfat: Unknown parameter 'ÿÿ' [ 240.735643][ T7748] overlayfs: missing 'workdir' [ 240.846652][ T1085] hfsplus: b-tree write err: -5, ino 25 [ 240.867937][ T1085] hfsplus: b-tree write err: -5, ino 4 [ 240.874040][ T1085] hfsplus: b-tree write err: -5, ino 2 [ 240.910526][ T1085] hfsplus: b-tree write err: -5, ino 22 [ 241.634054][ T7772] loop0: detected capacity change from 0 to 256 [ 241.650254][ T7772] exfat: Unknown parameter 'ÿÿ' [ 241.721295][ T7772] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 241.745645][ T7772] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 242.697740][ T7787] binder: 7786:7787 ioctl c0306201 0 returned -14 [ 243.029714][ T7789] loop2: detected capacity change from 0 to 4096 [ 244.387713][ T788] libceph: connect (1)[c::]:6789 error -101 [ 244.394034][ T788] libceph: mon0 (1)[c::]:6789 connect error [ 244.726822][ T28] audit: type=1800 audit(1775155373.644:9): pid=7817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.617" name="bus" dev="overlay" ino=778 res=0 errno=0 [ 244.785067][ T788] libceph: connect (1)[c::]:6789 error -101 [ 244.936702][ T788] libceph: mon0 (1)[c::]:6789 connect error [ 245.047313][ T7810] ceph: No mds server is up or the cluster is laggy [ 245.103765][ T7800] ªªªªªª: renamed from vlan0 [ 245.308873][ T7826] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 245.520003][ T7833] overlayfs: failed to resolve './file0': -2 [ 247.375393][ T7884] binder: 7882:7884 ioctl 4018620d 0 returned -22 [ 247.530553][ T7886] binder: 7882:7886 ioctl b704 0 returned -22 [ 247.740452][ T7892] tipc: Enabling of bearer rejected, already enabled [ 249.863736][ T5775] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 249.873364][ T5775] Bluetooth: hci2: Injecting HCI hardware error event [ 249.885948][ T5775] Bluetooth: hci2: hardware error 0x00 [ 250.127478][ T7951] binder: 7950:7951 ioctl 4018620d 0 returned -22 [ 250.300807][ T7957] binder: 7950:7957 ioctl b704 0 returned -22 [ 251.994959][ T5775] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 252.695181][ T8001] binder: 8000:8001 ioctl 4018620d 0 returned -22 [ 252.770211][ T8008] binder: 8000:8008 ioctl b704 0 returned -22 [ 252.778405][ T23] libceph: connect (1)[c::]:6789 error -101 [ 252.784941][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 252.804041][ T8007] tipc: Enabling of bearer rejected, failed to enable media [ 253.057448][ T23] libceph: connect (1)[c::]:6789 error -101 [ 253.077635][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 253.951097][ T23] libceph: connect (1)[c::]:6789 error -101 [ 253.980285][ T8005] ceph: No mds server is up or the cluster is laggy [ 254.751995][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 255.190851][ T8042] tipc: Enabling of bearer rejected, failed to enable media [ 255.212349][ T8035] loop0: detected capacity change from 0 to 4096 [ 255.354213][ T8046] netlink: 56 bytes leftover after parsing attributes in process `syz.1.700'. [ 255.393543][ T8035] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 255.475512][ T8048] tipc: Enabling of bearer rejected, already enabled [ 255.547408][ T28] audit: type=1800 audit(1775155384.464:10): pid=8051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.701" name="bus" dev="overlay" ino=988 res=0 errno=0 [ 256.719435][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.296437][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.570921][ T8067] tipc: Enabling of bearer rejected, failed to enable media [ 257.945609][ T8080] netlink: 56 bytes leftover after parsing attributes in process `syz.2.714'. [ 258.076890][ T8086] tipc: Enabling of bearer rejected, already enabled [ 258.303031][ T8100] tipc: Enabling of bearer rejected, failed to enable media [ 258.752855][ T8114] binder: 8113:8114 ioctl 4018620d 0 returned -22 [ 258.829136][ T8116] binder: 8113:8116 ioctl b704 0 returned -22 [ 258.911457][ T8120] tipc: Enabling of bearer rejected, already enabled [ 258.921523][ T8122] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock [ 260.372237][ T28] audit: type=1800 audit(1775155389.284:11): pid=8137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.733" name="bus" dev="overlay" ino=922 res=0 errno=0 [ 260.796235][ T8149] tipc: Enabling of bearer rejected, already enabled [ 261.121298][ T8157] binder: 8156:8157 ioctl 4018620d 0 returned -22 [ 261.196660][ T8163] binder: 8156:8163 ioctl b704 0 returned -22 [ 261.241509][ T8165] overlayfs: failed to clone upperpath [ 262.184622][ T788] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 262.378825][ T788] usb 1-1: Using ep0 maxpacket: 16 [ 262.400483][ T788] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.477607][ T5775] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 262.579021][ T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 262.594330][ T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 262.615417][ T788] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 262.625523][ T788] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 262.641103][ T788] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 262.664775][ T788] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 262.672834][ T788] usb 1-1: Manufacturer: syz [ 262.687820][ T788] usb 1-1: config 0 descriptor?? [ 263.035085][ T788] rc_core: IR keymap rc-hauppauge not found [ 263.041169][ T788] Registered IR keymap rc-empty [ 263.062489][ T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.104794][ T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.116228][ T8158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.140387][ T8182] tipc: Enabling of bearer rejected, already enabled [ 263.142589][ T8158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.168387][ T788] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 263.221178][ T788] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input11 [ 263.263058][ T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.315058][ T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.369511][ T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.414671][ T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.450527][ T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.494670][ T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.544982][ T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.551626][ T8191] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 263.574714][ T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.614641][ T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.651211][ T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.686227][ T788] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 263.710866][ T788] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 263.730057][ T788] usb 1-1: USB disconnect, device number 6 [ 264.491139][ T8202] ubi: mtd0 is already attached to ubi31 [ 264.700848][ T8204] binder: 8203:8204 ioctl 4018620d 0 returned -22 [ 264.843665][ T8208] binder: 8203:8208 ioctl b704 0 returned -22 [ 265.679603][ T8211] netlink: 56 bytes leftover after parsing attributes in process `syz.3.758'. [ 265.788346][ T5775] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 265.795948][ T8211] tipc: Enabling of bearer rejected, already enabled [ 265.883193][ T8215] loop0: detected capacity change from 0 to 4096 [ 265.973231][ T8215] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 266.281264][ T8229] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 266.564689][ T5775] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 266.573421][ T5775] Bluetooth: hci1: Injecting HCI hardware error event [ 266.582071][ T51] Bluetooth: hci1: hardware error 0x00 [ 266.589808][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 267.474549][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 267.644840][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 267.695780][ T23] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 267.703794][ T23] usb 1-1: can't read configurations, error -71 [ 267.926854][ T8239] binder: 8238:8239 ioctl 4018620d 0 returned -22 [ 268.164107][ T8244] binder: 8238:8244 ioctl b704 0 returned -22 [ 268.654608][ T51] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 268.800544][ T8246] netlink: 56 bytes leftover after parsing attributes in process `syz.0.770'. [ 268.926462][ T8246] tipc: Enabling of bearer rejected, already enabled [ 270.457129][ T8269] ubi: mtd0 is already attached to ubi31 [ 270.840276][ T8277] netlink: 56 bytes leftover after parsing attributes in process `syz.0.780'. [ 270.962314][ T8277] tipc: Enabling of bearer rejected, already enabled [ 271.308616][ T8288] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock [ 272.294636][ T788] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 272.564605][ T788] usb 3-1: Using ep0 maxpacket: 8 [ 272.584683][ T788] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 272.604146][ T788] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 272.630429][ T788] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 272.657415][ T788] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 272.684334][ T788] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 272.716976][ T788] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 272.738890][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.037628][ T788] usb 3-1: usb_control_msg returned -32 [ 273.058385][ T788] usbtmc 3-1:16.0: can't read capabilities [ 273.232501][ T8318] netlink: 56 bytes leftover after parsing attributes in process `syz.1.792'. [ 273.439870][ T8318] tipc: Enabling of bearer rejected, already enabled [ 274.231378][ T5776] usb 3-1: USB disconnect, device number 4 [ 274.312756][ T8324] loop0: detected capacity change from 0 to 4096 [ 275.344581][ T23] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 275.404561][ T1212] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 275.551486][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.573926][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 275.587419][ T23] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 275.607903][ T1212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.637267][ T1212] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 275.648463][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.661554][ T1212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.674165][ T23] usb 1-1: config 0 descriptor?? [ 275.689556][ T23] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 275.810724][ T1212] usb 2-1: config 0 descriptor?? [ 276.481552][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 276.530509][ T23] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 276.552510][ T23] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 276.576226][ T23] usb 1-1: media controller created [ 276.584131][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 276.615764][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 276.649455][ T23] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 276.689421][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input12 [ 276.712855][ T23] dvb-usb: schedule remote query interval to 150 msecs. [ 276.731734][ T23] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 276.777462][ T23] usb 1-1: USB disconnect, device number 9 [ 276.862491][ T23] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 276.909744][ T1212] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 276.933336][ T1212] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0008/input/input13 [ 277.069153][ T1212] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 277.109745][ T8339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.146578][ T8339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.277861][ C1] Mem-Info: [ 277.281163][ C1] active_anon:22087 inactive_anon:8 isolated_anon:0 [ 277.281163][ C1] active_file:17651 inactive_file:40050 isolated_file:0 [ 277.281163][ C1] unevictable:768 dirty:245 writeback:0 [ 277.281163][ C1] slab_reclaimable:10912 slab_unreclaimable:90730 [ 277.281163][ C1] mapped:25899 shmem:16697 pagetables:595 [ 277.281163][ C1] sec_pagetables:0 bounce:0 [ 277.281163][ C1] kernel_misc_reclaimable:0 [ 277.281163][ C1] free:1325181 free_pcp:18625 free_cma:0 [ 277.328843][ C1] Node 0 active_anon:84648kB inactive_anon:32kB active_file:70340kB inactive_file:159996kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:103384kB dirty:904kB writeback:0kB shmem:62152kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10864kB pagetables:2380kB sec_pagetables:0kB all_unreclaimable? no [ 277.361755][ C1] Node 1 active_anon:0kB inactive_anon:0kB active_file:264kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:212kB dirty:76kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 277.392931][ C1] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 277.421266][ C1] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 277.427177][ C1] Node 0 DMA32 free:1419872kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:81708kB inactive_anon:32kB active_file:70340kB inactive_file:159164kB unevictable:1536kB writepending:904kB present:3129332kB managed:2586956kB mlocked:0kB bounce:0kB free_pcp:31036kB local_pcp:10208kB free_cma:0kB [ 277.458364][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 277.463153][ C1] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 277.490496][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 277.495354][ C1] Node 1 Normal free:3872084kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:264kB inactive_file:204kB unevictable:1536kB writepending:76kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:43016kB local_pcp:20256kB free_cma:0kB [ 277.525654][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 277.530429][ C1] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 277.543516][ C1] Node 0 DMA32: 2396*4kB (UME) 765*8kB (UME) 781*16kB (UME) 457*32kB (UME) 176*64kB (UME) 42*128kB (UME) 74*256kB (UME) 39*512kB (ME) 20*1024kB (UM) 8*2048kB (M) 315*4096kB (UM) = 1425480kB [ 277.562594][ C1] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 277.574449][ C1] Node 1 Normal: 264*4kB (UME) 71*8kB (UME) 51*16kB (UME) 78*32kB (UME) 35*64kB (UME) 13*128kB (UME) 11*256kB (UME) 8*512kB (UME) 2*1024kB (UM) 2*2048kB (ME) 940*4096kB (M) = 3872136kB [ 277.592923][ C1] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 277.602624][ C1] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 277.612068][ C1] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 277.622341][ C1] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 277.631935][ C1] 70001 total pagecache pages [ 277.637144][ C1] 8 pages in swap cache [ 277.641722][ C1] Free swap = 124704kB [ 277.646113][ C1] Total swap = 124996kB [ 277.650672][ C1] 2097051 pages RAM [ 277.654952][ C1] 0 pages HighMem/MovableOnly [ 277.659722][ C1] 416926 pages reserved [ 277.664457][ C1] 0 pages cma reserved [ 277.777953][ T8355] loop0: detected capacity change from 0 to 4096 [ 277.902607][ T8357] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 278.000713][ T1212] usb 2-1: USB disconnect, device number 7 [ 278.309443][ T8365] loop0: detected capacity change from 0 to 4096 [ 278.354088][ T8365] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 278.851626][ T8372] ubi: mtd0 is already attached to ubi31 [ 279.367560][ T8382] random: crng reseeded on system resumption [ 280.325722][ T8385] loop0: detected capacity change from 0 to 4096 [ 280.906439][ T8393] loop0: detected capacity change from 0 to 4096 [ 281.085165][ T8393] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 281.401583][ T8403] loop0: detected capacity change from 0 to 64 [ 281.464781][ T23] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 281.666703][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.715370][ T23] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 281.765491][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.803947][ T23] usb 2-1: config 0 descriptor?? [ 282.153314][ T8410] tipc: Enabling of bearer rejected, failed to enable media [ 282.367101][ T23] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 282.395709][ T23] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0009/input/input14 [ 282.532177][ T23] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 282.559627][ T8401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.612947][ T8401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.733259][ C1] Mem-Info: [ 282.736430][ C1] active_anon:23122 inactive_anon:8 isolated_anon:0 [ 282.736430][ C1] active_file:17651 inactive_file:40052 isolated_file:0 [ 282.736430][ C1] unevictable:768 dirty:93 writeback:0 [ 282.736430][ C1] slab_reclaimable:10944 slab_unreclaimable:90833 [ 282.736430][ C1] mapped:34572 shmem:18588 pagetables:651 [ 282.736430][ C1] sec_pagetables:0 bounce:0 [ 282.736430][ C1] kernel_misc_reclaimable:0 [ 282.736430][ C1] free:1325010 free_pcp:17578 free_cma:0 [ 282.782179][ C1] Node 0 active_anon:92488kB inactive_anon:32kB active_file:70340kB inactive_file:160004kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138024kB dirty:360kB writeback:0kB shmem:72816kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10952kB pagetables:2604kB sec_pagetables:0kB all_unreclaimable? no [ 282.814593][ C1] Node 1 active_anon:0kB inactive_anon:0kB active_file:264kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:264kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 282.845302][ C1] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 282.872535][ C1] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 282.878297][ C1] Node 0 DMA32 free:1412288kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:92508kB inactive_anon:32kB active_file:70340kB inactive_file:159172kB unevictable:1536kB writepending:368kB present:3129332kB managed:2586956kB mlocked:0kB bounce:0kB free_pcp:27552kB local_pcp:10340kB free_cma:0kB [ 282.908972][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 282.913659][ C1] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 282.940535][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 282.945333][ C1] Node 1 Normal free:3872592kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:264kB inactive_file:204kB unevictable:1536kB writepending:12kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:42508kB local_pcp:20000kB free_cma:0kB [ 282.975317][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 282.980100][ C1] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 282.992681][ C1] Node 0 DMA32: 892*4kB (UE) 748*8kB (UME) 449*16kB (U) 89*32kB (UM) 90*64kB (UME) 75*128kB (UME) 66*256kB (UME) 29*512kB (ME) 12*1024kB (M) 7*2048kB (UM) 322*4096kB (M) = 1412224kB [ 283.011037][ C1] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 283.022496][ C1] Node 1 Normal: 265*4kB (UME) 70*8kB (UME) 51*16kB (UME) 82*32kB (UME) 39*64kB (UME) 14*128kB (UME) 11*256kB (UME) 8*512kB (UME) 2*1024kB (UM) 2*2048kB (ME) 940*4096kB (M) = 3872644kB [ 283.040984][ C1] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 283.050727][ C1] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 283.060117][ C1] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 283.069669][ C1] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 283.080226][ C1] 76308 total pagecache pages [ 283.085083][ C1] 8 pages in swap cache [ 283.089243][ C1] Free swap = 124704kB [ 283.093387][ C1] Total swap = 124996kB [ 283.097743][ C1] 2097051 pages RAM [ 283.101658][ C1] 0 pages HighMem/MovableOnly [ 283.106547][ C1] 416926 pages reserved [ 283.110733][ C1] 0 pages cma reserved [ 284.319855][ T5776] usb 2-1: USB disconnect, device number 8 [ 284.359822][ T28] audit: type=1326 audit(1775155413.254:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8421 comm="syz.2.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4157b9c819 code=0x7ffc0000 [ 284.422079][ T28] audit: type=1326 audit(1775155413.254:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8421 comm="syz.2.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4157b9c819 code=0x7ffc0000 [ 285.288417][ T28] audit: type=1326 audit(1775155413.254:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8421 comm="syz.2.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4157b9c819 code=0x7ffc0000 [ 285.344569][ T28] audit: type=1326 audit(1775155413.254:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8421 comm="syz.2.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4157b9c819 code=0x7ffc0000 [ 285.406989][ T28] audit: type=1326 audit(1775155413.254:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8421 comm="syz.2.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f4157b9c819 code=0x7ffc0000 [ 285.459238][ T28] audit: type=1326 audit(1775155413.304:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8421 comm="syz.2.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4157b5d04e code=0x7ffc0000 [ 285.574543][ T28] audit: type=1326 audit(1775155413.304:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8421 comm="syz.2.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4157b5d04e code=0x7ffc0000 [ 285.636850][ T28] audit: type=1326 audit(1775155413.314:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8421 comm="syz.2.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4157b5d04e code=0x7ffc0000 [ 285.659415][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.721461][ T28] audit: type=1326 audit(1775155413.314:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8421 comm="syz.2.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4157b5d04e code=0x7ffc0000 [ 285.743940][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.825909][ T28] audit: type=1326 audit(1775155413.314:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8421 comm="syz.2.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4157b5d04e code=0x7ffc0000 [ 286.029699][ T8445] netlink: 76 bytes leftover after parsing attributes in process `syz.2.839'. [ 288.504035][ T8453] ubi: mtd0 is already attached to ubi31 [ 289.125263][ T8477] cgroup: Unknown subsys name 'uid' [ 290.982878][ T8497] loop7: detected capacity change from 0 to 16384 [ 291.034644][ T8497] loop7: detected capacity change from 16384 to 0 [ 291.602365][ T8507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.859'. [ 292.341724][ T8508] ubi: mtd0 is already attached to ubi31 [ 293.589938][ T8533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.868'. [ 294.464695][ T8557] loop2: detected capacity change from 0 to 512 [ 294.478764][ T8557] EXT4-fs: Ignoring removed nomblk_io_submit option [ 294.873337][ T8557] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 295.199678][ T8557] EXT4-fs (loop2): 1 truncate cleaned up [ 295.226632][ T8557] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.083135][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.905074][ T8608] netlink: 76 bytes leftover after parsing attributes in process `syz.0.891'. [ 297.377133][ T8617] overlayfs: missing 'lowerdir' [ 297.422741][ T5776] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 297.594597][ T5776] usb 1-1: device descriptor read/64, error -71 [ 297.885100][ T5776] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 297.897727][ T8630] netlink: 76 bytes leftover after parsing attributes in process `syz.3.900'. [ 298.072643][ T5776] usb 1-1: device descriptor read/64, error -71 [ 298.296281][ T5776] usb usb1-port1: attempt power cycle [ 298.771157][ T8638] overlayfs: failed to clone upperpath [ 298.805095][ T5776] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 298.856037][ T5776] usb 1-1: device descriptor read/8, error -71 [ 299.023469][ T8643] loop1: detected capacity change from 0 to 4096 [ 299.050560][ T8643] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 299.134624][ T5776] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 299.210573][ T5776] usb 1-1: device descriptor read/8, error -71 [ 299.378063][ T5776] usb usb1-port1: unable to enumerate USB device [ 300.428259][ T8665] loop0: detected capacity change from 0 to 512 [ 300.454692][ T8665] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 300.523444][ T8665] EXT4-fs error (device loop0): ext4_orphan_get:1398: inode #15: comm syz.0.911: iget: bad i_size value: 38620345925642 [ 300.589807][ T8665] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.911: couldn't read orphan inode 15 (err -117) [ 300.678754][ T8665] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.722488][ T8674] loop2: detected capacity change from 0 to 512 [ 300.736238][ T8674] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 300.865619][ T8674] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.531278][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.541788][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.124784][ T8706] overlayfs: missing 'workdir' [ 302.142126][ T8701] delete_channel: no stack [ 302.619450][ T8711] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 302.620764][ T8713] loop1: detected capacity change from 0 to 1024 [ 302.639206][ T8713] EXT4-fs: inline encryption not supported [ 302.693164][ T5875] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 303.204976][ T8736] overlayfs: missing 'workdir' [ 303.774114][ T8742] netlink: 40 bytes leftover after parsing attributes in process `syz.0.939'. [ 303.784589][ T8742] nbd: must specify at least one socket [ 307.876800][ T8794] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 308.805476][ T788] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 309.037366][ T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.060243][ T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.088742][ T788] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 309.107135][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.121820][ T788] usb 1-1: config 0 descriptor?? [ 309.577097][ T788] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 309.724978][ T788] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 309.839515][ T788] cp2112 0003:10C4:EA90.000A: error requesting version [ 309.873143][ T788] cp2112: probe of 0003:10C4:EA90.000A failed with error -32 [ 309.881050][ T8835] netlink: 76 bytes leftover after parsing attributes in process `syz.3.968'. [ 311.389893][ T8855] loop2: detected capacity change from 0 to 512 [ 311.404217][ T8855] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 311.583458][ T8855] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.144115][ T2178] usb 1-1: USB disconnect, device number 14 [ 312.295593][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.381847][ T8871] netlink: 76 bytes leftover after parsing attributes in process `syz.3.979'. [ 312.733608][ T8886] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 312.741668][ T8882] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock [ 312.875671][ T8892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.986'. [ 314.123889][ T8913] loop0: detected capacity change from 0 to 8 [ 314.148145][ T8912] overlayfs: failed to clone upperpath [ 314.401815][ T8922] netlink: 108 bytes leftover after parsing attributes in process `syz.2.998'. [ 314.421314][ T8920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.997'. [ 315.948238][ T8954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1009'. [ 316.113626][ T8961] loop0: detected capacity change from 0 to 4096 [ 316.126867][ T8961] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 316.344295][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 316.344311][ T28] audit: type=1326 audit(1775155445.254:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8964 comm="syz.0.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197019c819 code=0x7ffc0000 [ 316.396021][ T28] audit: type=1326 audit(1775155445.254:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8964 comm="syz.0.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197019c819 code=0x7ffc0000 [ 316.424066][ T28] audit: type=1326 audit(1775155445.254:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8964 comm="syz.0.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197019c819 code=0x7ffc0000 [ 316.447406][ T28] audit: type=1326 audit(1775155445.254:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8964 comm="syz.0.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197019c819 code=0x7ffc0000 [ 316.474744][ T28] audit: type=1326 audit(1775155445.254:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8964 comm="syz.0.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f197019c819 code=0x7ffc0000 [ 316.498886][ T28] audit: type=1326 audit(1775155445.254:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8964 comm="syz.0.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197019c819 code=0x7ffc0000 [ 316.522271][ T28] audit: type=1326 audit(1775155445.254:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8964 comm="syz.0.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197019c819 code=0x7ffc0000 [ 316.545663][ T28] audit: type=1326 audit(1775155445.254:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8964 comm="syz.0.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f197019c819 code=0x7ffc0000 [ 316.578476][ T28] audit: type=1326 audit(1775155445.254:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8964 comm="syz.0.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f197019c819 code=0x7ffc0000 [ 318.124075][ T9019] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 318.159891][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.166901][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.566717][ T9045] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 319.575668][ T9045] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 320.576130][ T9048] 9pnet_fd: Insufficient options for proto=fd [ 321.195792][ T9069] loop0: detected capacity change from 0 to 16 [ 321.232061][ T9069] erofs: (device loop0): mounted with root inode @ nid 36. [ 321.256849][ T1212] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 321.318399][ T28] audit: type=1800 audit(1775155450.224:61): pid=9069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1054" name="file2" dev="overlay" ino=89 res=0 errno=0 [ 321.449749][ T2178] libceph: connect (1)[c::]:6789 error -101 [ 321.458768][ T2178] libceph: mon0 (1)[c::]:6789 connect error [ 321.467983][ T1212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.490876][ T2178] libceph: connect (1)[c::]:6789 error -101 [ 321.497426][ T1212] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 321.507200][ T2178] libceph: mon0 (1)[c::]:6789 connect error [ 321.513392][ T1212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.525394][ T1212] usb 2-1: config 0 descriptor?? [ 321.544120][ T9071] ceph: No mds server is up or the cluster is laggy [ 323.225765][ T1212] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 323.274699][ T1212] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000B/input/input15 [ 323.415889][ T9066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.459874][ T9066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.515699][ T1212] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 323.730363][ T5776] usb 2-1: USB disconnect, device number 9 [ 323.758121][ T9088] fido_id[9088]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 325.081264][ T9102] binder: 9100:9102 unknown command 0 [ 325.103206][ T9102] binder: 9100:9102 ioctl c0306201 200000000080 returned -22 [ 326.211038][ T9120] overlayfs: failed to resolve './bus': -2 [ 326.755088][ T1212] libceph: connect (1)[c::]:6789 error -101 [ 326.783079][ T1212] libceph: mon0 (1)[c::]:6789 connect error [ 326.820440][ T9132] ceph: No mds server is up or the cluster is laggy [ 327.365684][ T9150] virtio-fs: tag <./cgroup> not found [ 328.942435][ T9156] ubi: mtd0 is already attached to ubi31 [ 331.193334][ T9177] loop1: detected capacity change from 0 to 4096 [ 332.811859][ T9189] ubi: mtd0 is already attached to ubi31 [ 333.780794][ T9194] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 335.293730][ T9210] netlink: 'syz.3.1096': attribute type 12 has an invalid length. [ 336.070730][ T9216] ubi: mtd0 is already attached to ubi31 [ 338.471117][ T28] audit: type=1326 audit(1775155467.384:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9244 comm="syz.0.1098" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f197019c819 code=0x0 [ 340.652476][ T9272] tipc: Enabling of bearer rejected, failed to enable media [ 341.492033][ T9289] tipc: Enabling of bearer rejected, already enabled [ 342.687286][ T9316] loop2: detected capacity change from 0 to 512 [ 342.707166][ T9316] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 342.737181][ T9316] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 342.769778][ T9316] EXT4-fs (loop2): 1 truncate cleaned up [ 342.781059][ T9316] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.889313][ T9316] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 342.913590][ T9316] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 342.964298][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.111094][ T9322] tipc: Enabling of bearer rejected, already enabled [ 343.485399][ T9331] tipc: Enabling of bearer rejected, failed to enable media [ 343.729169][ T9330] lo speed is unknown, defaulting to 1000 [ 343.748610][ T9330] lo speed is unknown, defaulting to 1000 [ 343.776571][ T9330] lo speed is unknown, defaulting to 1000 [ 343.822154][ T9330] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 343.865228][ T9330] lo speed is unknown, defaulting to 1000 [ 343.872661][ T9330] lo speed is unknown, defaulting to 1000 [ 343.886851][ T9330] lo speed is unknown, defaulting to 1000 [ 343.893749][ T9330] lo speed is unknown, defaulting to 1000 [ 344.579169][ T9359] loop1: detected capacity change from 0 to 16 [ 344.638772][ T9359] erofs: (device loop1): mounted with root inode @ nid 36. [ 344.683366][ T9360] tipc: Enabling of bearer rejected, already enabled [ 346.061385][ T9388] tipc: Enabling of bearer rejected, already enabled [ 346.318581][ T11] tipc: Disabling bearer [ 346.339603][ T11] tipc: Left network mode [ 346.558109][ T9403] tipc: Enabling of bearer rejected, failed to enable media [ 346.787384][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 346.800371][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 346.812851][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 346.825224][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 346.932941][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 346.968890][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 347.285410][ T9418] overlayfs: failed to resolve './bus': -2 [ 347.549583][ T9402] wlan1 speed is unknown, defaulting to 1000 [ 347.567996][ T9402] lo speed is unknown, defaulting to 1000 [ 347.825931][ T9441] loop2: detected capacity change from 0 to 512 [ 347.833869][ T9441] EXT4-fs: Ignoring removed nomblk_io_submit option [ 347.881255][ T9441] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 347.979896][ T9441] EXT4-fs (loop2): 1 truncate cleaned up [ 348.010123][ T9441] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.054532][ T9442] tipc: Enabling of bearer rejected, already enabled [ 348.899991][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.024183][ T9461] binder: 9460:9461 ioctl 4018620d 0 returned -22 [ 349.126784][ T5775] Bluetooth: hci1: command tx timeout [ 349.283125][ T9468] binder: 9460:9468 ioctl b704 0 returned -22 [ 349.816577][ T9470] fuse: Bad value for 'fd' [ 349.835990][ T9402] chnl_net:caif_netlink_parms(): no params data found [ 350.083988][ T9478] tipc: Enabling of bearer rejected, failed to enable media [ 350.181129][ T9488] loop0: detected capacity change from 0 to 512 [ 350.222507][ T9488] EXT4-fs: Ignoring removed nomblk_io_submit option [ 350.230919][ T9488] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 350.268399][ T9489] tipc: Enabling of bearer rejected, already enabled [ 350.284004][ T9488] EXT4-fs (loop0): 1 truncate cleaned up [ 350.333177][ T9488] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.461717][ T11] hsr_slave_0: left promiscuous mode [ 351.212844][ T5775] Bluetooth: hci1: command tx timeout [ 351.224270][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.382476][ T5776] libceph: connect (1)[c::]:6789 error -101 [ 351.389458][ T5776] libceph: mon0 (1)[c::]:6789 connect error [ 351.567893][ T9514] ceph: No mds server is up or the cluster is laggy [ 352.886493][ T11] bond0 (unregistering): Released all slaves [ 353.067770][ T9402] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.116244][ T9402] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.146860][ T9402] bridge_slave_0: entered allmulticast mode [ 353.159942][ T9402] bridge_slave_0: entered promiscuous mode [ 353.204048][ T9402] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.224264][ T9402] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.256491][ T9402] bridge_slave_1: entered allmulticast mode [ 353.274684][ T5775] Bluetooth: hci1: command tx timeout [ 353.280773][ T9402] bridge_slave_1: entered promiscuous mode [ 353.345941][ T9549] tipc: Enabling of bearer rejected, already enabled [ 353.378942][ T9402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.450128][ T9402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.573514][ T9402] team0: Port device team_slave_0 added [ 353.667209][ T9402] team0: Port device team_slave_1 added [ 353.810671][ T9402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.857125][ T9402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.895875][ T9566] binder: 9565:9566 ioctl 4018620d 0 returned -22 [ 353.946921][ T9402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.989197][ T9402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.150522][ T9571] binder: 9565:9571 ioctl b704 0 returned -22 [ 354.287004][ T9402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.595862][ T9402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.704504][ T9574] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 354.869947][ T9402] hsr_slave_0: entered promiscuous mode [ 354.910920][ T9402] hsr_slave_1: entered promiscuous mode [ 354.919873][ T9402] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 354.929269][ T9402] Cannot create hsr debugfs directory [ 355.284809][ T5776] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 355.320023][ T9592] tipc: Enabling of bearer rejected, already enabled [ 355.350026][ T9402] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 355.364992][ T5775] Bluetooth: hci1: command tx timeout [ 355.365894][ T9402] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 355.387863][ T9402] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 355.401743][ T9402] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 355.499745][ T5776] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 355.524815][ T5776] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.553916][ T5776] usb 1-1: config 0 descriptor?? [ 355.575933][ T9598] fuse: Bad value for 'fd' [ 355.582503][ T5776] cp210x 1-1:0.0: cp210x converter detected [ 355.634151][ T9402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.692629][ T9402] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.713931][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.721555][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.783018][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.790270][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.891362][ T9402] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 355.904935][ T9402] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 356.035760][ T5776] usb 1-1: cp210x converter now attached to ttyUSB0 [ 356.209225][ T5776] usb 1-1: USB disconnect, device number 15 [ 356.232213][ T5776] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 356.309579][ T5776] cp210x 1-1:0.0: device disconnected [ 356.385872][ T9402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.450478][ T9632] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 356.674832][ T9640] tipc: Enabling of bearer rejected, already enabled [ 357.102710][ T9402] veth0_vlan: entered promiscuous mode [ 357.148557][ T9402] veth1_vlan: entered promiscuous mode [ 357.239591][ T9402] veth0_macvtap: entered promiscuous mode [ 357.283454][ T9664] loop2: detected capacity change from 0 to 1024 [ 357.293501][ T9402] veth1_macvtap: entered promiscuous mode [ 357.318463][ T9664] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 357.352689][ T9402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.361602][ T9664] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 357.378822][ T9402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.390258][ T9664] EXT4-fs error (device loop2): ext4_get_journal_inode:5816: comm syz.2.1210: inode #4294967295: comm syz.2.1210: iget: illegal inode # [ 357.436796][ T9664] EXT4-fs (loop2): no journal found [ 357.442252][ T9664] EXT4-fs (loop2): can't get journal size [ 357.460403][ T9664] EXT4-fs (loop2): failed to initialize system zone (-22) [ 357.469942][ T9402] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.485615][ T9664] EXT4-fs (loop2): mount failed [ 357.491161][ T9402] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.523053][ T9402] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.535101][ T9402] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.798723][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.811826][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.931435][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.949199][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.092451][ T9687] loop2: detected capacity change from 0 to 16 [ 358.133757][ T9687] erofs: (device loop2): mounted with root inode @ nid 36. [ 358.235237][ T9695] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 358.407545][ T9705] loop2: detected capacity change from 0 to 512 [ 358.430897][ T9705] EXT4-fs: Ignoring removed nomblk_io_submit option [ 358.457511][ T9705] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 358.493846][ T9705] EXT4-fs (loop2): 1 truncate cleaned up [ 358.522874][ T9705] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.461663][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.873391][ T9744] loop2: detected capacity change from 0 to 16 [ 359.930995][ T9744] erofs: (device loop2): mounted with root inode @ nid 36. [ 360.188383][ T9756] loop2: detected capacity change from 0 to 512 [ 360.222141][ T9756] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 360.327264][ T9756] EXT4-fs (loop2): 1 truncate cleaned up [ 360.349171][ T9756] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.003834][ T9756] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 361.094873][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.486902][ T9782] overlayfs: failed to resolve './file0': -2 [ 361.680975][ T9790] tipc: Enabling of bearer rejected, already enabled [ 361.708150][ T9786] loop0: detected capacity change from 0 to 4096 [ 361.729112][ T9786] EXT4-fs: inline encryption not supported [ 361.807626][ T9795] loop2: detected capacity change from 0 to 512 [ 361.839156][ T9795] EXT4-fs: Ignoring removed nomblk_io_submit option [ 361.888505][ T9795] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 361.964342][ T9795] EXT4-fs (loop2): 1 truncate cleaned up [ 362.014275][ T9795] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.042730][ T9802] loop4: detected capacity change from 0 to 4096 [ 362.085759][ T9802] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 362.358057][ T9786] EXT4-fs (loop0): Test dummy encryption mode enabled [ 362.650729][ T9786] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8843c018, mo2=0003] [ 362.733691][ T9786] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.946178][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.157792][ T9786] fscrypt (loop0): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 363.221608][ T9819] fscrypt (loop0): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 363.315265][ T9838] overlayfs: failed to resolve './file0': -2 [ 363.444341][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.453848][ T9844] tipc: Enabling of bearer rejected, already enabled [ 363.879273][ T9859] loop4: detected capacity change from 0 to 512 [ 363.913867][ T9859] EXT4-fs: Ignoring removed nomblk_io_submit option [ 363.961583][ T9859] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 363.987142][ T5775] Bluetooth: hci3: unexpected event for opcode 0x2aba [ 364.003709][ T9859] EXT4-fs (loop4): 1 truncate cleaned up [ 364.059094][ T9859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.269394][ T9872] Driver unsupported XDP return value 0 on prog (id 77) dev N/A, expect packet loss! [ 364.930125][ T9879] overlayfs: failed to resolve './file0': -2 [ 365.021514][ T9402] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.386361][ T9895] netlink: 'syz.3.1269': attribute type 12 has an invalid length. [ 365.452492][ T9897] tipc: Enabling of bearer rejected, already enabled [ 366.098788][ T9916] loop2: detected capacity change from 0 to 512 [ 366.285167][ T9916] EXT4-fs: Ignoring removed nomblk_io_submit option [ 366.482708][ T9916] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 366.722884][ T9916] EXT4-fs (loop2): 1 truncate cleaned up [ 366.752196][ T9916] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.693971][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.964581][ T9949] loop0: detected capacity change from 0 to 512 [ 367.982564][ T9949] EXT4-fs: Ignoring removed nobh option [ 368.004561][ T5775] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 368.015949][ T5775] Bluetooth: hci3: Injecting HCI hardware error event [ 368.026326][ T51] Bluetooth: hci3: hardware error 0x00 [ 368.043889][ T9949] EXT4-fs (loop0): Test dummy encryption mode enabled [ 368.107870][ T9952] tipc: Enabling of bearer rejected, already enabled [ 368.182748][ T9949] ------------[ cut here ]------------ [ 368.189537][ T9949] EA inode 11 i_nlink=1026 [ 368.208697][ T9949] WARNING: CPU: 0 PID: 9949 at fs/ext4/xattr.c:1059 ext4_xattr_inode_update_ref+0x53c/0x590 [ 368.223955][ T9949] Modules linked in: [ 368.228181][ T9949] CPU: 0 PID: 9949 Comm: syz.0.1283 Not tainted syzkaller #0 [ 368.236233][ T9949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 368.246637][ T9949] RIP: 0010:ext4_xattr_inode_update_ref+0x53c/0x590 [ 368.253381][ T9949] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 85 d5 98 ff 49 8b 37 48 c7 c7 a0 d6 de 8a 89 da e8 94 51 0a ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 ab fe ff ff e8 6e 7d 3f 08 [ 368.273445][ T9949] RSP: 0018:ffffc900054171a0 EFLAGS: 00010246 [ 368.279915][ T9949] RAX: e4b18732d40f7400 RBX: 0000000000000402 RCX: 0000000000080000 [ 368.288172][ T9949] RDX: ffffc9000bb79000 RSI: 00000000000323f7 RDI: 00000000000323f8 [ 368.296329][ T9949] RBP: ffffc90005417298 R08: ffff8880b8f28c13 R09: 1ffff110171e5182 [ 368.305195][ T9949] R10: dffffc0000000000 R11: ffffed10171e5183 R12: dffffc0000000000 [ 368.313665][ T9949] R13: ffff888047c50ea8 R14: ffff888047c50cb0 R15: ffff888047c50d00 [ 368.321867][ T9949] FS: 00007f1970f776c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 368.331693][ T9949] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 368.339158][ T9949] CR2: 00007fd9b5c04e9c CR3: 000000002e2ec000 CR4: 00000000003506f0 [ 368.347931][ T9949] Call Trace: [ 368.351289][ T9949] [ 368.354271][ T9949] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 368.360418][ T9949] ? ext4_xattr_inode_iget+0x3df/0x600 [ 368.366949][ T9949] ext4_xattr_set_entry+0xcda/0x1e90 [ 368.372431][ T9949] ext4_xattr_ibody_set+0x254/0x6a0 [ 368.379233][ T9949] ext4_expand_extra_isize_ea+0x1398/0x1e80 [ 368.385732][ T9949] __ext4_expand_extra_isize+0x306/0x400 [ 368.391694][ T9949] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 368.397635][ T9949] ext4_evict_inode+0x7f3/0xea0 [ 368.402753][ T9949] ? _raw_spin_unlock+0x28/0x40 [ 368.407859][ T9949] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 368.414185][ T9949] ? do_raw_spin_unlock+0x121/0x230 [ 368.420351][ T9949] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 368.426749][ T9949] evict+0x4ca/0x8d0 [ 368.430895][ T9949] ? proc_nr_inodes+0x230/0x230 [ 368.435968][ T9949] ? do_raw_spin_unlock+0x121/0x230 [ 368.441338][ T9949] ? _raw_spin_unlock+0x28/0x40 [ 368.446449][ T9949] ? iput+0x706/0x920 [ 368.450497][ T9949] ext4_orphan_cleanup+0xbec/0x1420 [ 368.456152][ T9949] ? ext4_orphan_del+0xbf0/0xbf0 [ 368.461173][ T9949] ? ext4_register_li_request+0x183/0x940 [ 368.467057][ T9949] ? errseq_check_and_advance+0x66/0x120 [ 368.472912][ T9949] ext4_fill_super+0x5ed0/0x6790 [ 368.478052][ T9949] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 368.484518][ T9949] ? __might_sleep+0xe0/0xe0 [ 368.489163][ T9949] ? read_lock_is_recursive+0x20/0x20 [ 368.494657][ T9949] ? snprintf+0xe9/0x140 [ 368.498971][ T9949] ? down_read_killable+0x340/0x340 [ 368.504486][ T9949] ? setup_bdev_super+0x56b/0x660 [ 368.510121][ T9949] get_tree_bdev+0x3f3/0x520 [ 368.514922][ T9949] ? vfs_parse_fs_string+0x170/0x170 [ 368.520460][ T9949] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 368.527444][ T9949] ? setup_bdev_super+0x660/0x660 [ 368.532733][ T9949] ? apparmor_capable+0x137/0x1a0 [ 368.537910][ T9949] ? bpf_lsm_capable+0x9/0x10 [ 368.543010][ T9949] ? security_capable+0x89/0xb0 [ 368.548203][ T9949] vfs_get_tree+0x8c/0x280 [ 368.552771][ T9949] do_new_mount+0x24b/0xa40 [ 368.557578][ T9949] __se_sys_mount+0x2e7/0x3d0 [ 368.562400][ T9949] ? __x64_sys_mount+0xc0/0xc0 [ 368.567406][ T9949] ? lockdep_hardirqs_on+0x98/0x150 [ 368.573009][ T9949] ? __x64_sys_mount+0x20/0xc0 [ 368.577896][ T9949] do_syscall_64+0x55/0xa0 [ 368.582471][ T9949] ? clear_bhb_loop+0x40/0x90 [ 368.587522][ T9949] ? clear_bhb_loop+0x40/0x90 [ 368.592363][ T9949] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 368.598560][ T9949] RIP: 0033:0x7f197019da8a [ 368.603300][ T9949] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.623444][ T9949] RSP: 002b:00007f1970f76e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 368.632171][ T9949] RAX: ffffffffffffffda RBX: 00007f1970f76ee0 RCX: 00007f197019da8a [ 368.641320][ T9949] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f1970f76ea0 [ 368.650158][ T9949] RBP: 0000200000000180 R08: 00007f1970f76ee0 R09: 0000000000800718 [ 368.658424][ T9949] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 368.666592][ T9949] R13: 00007f1970f76ea0 R14: 00000000000004a3 R15: 0000200000000380 [ 368.674924][ T9949] [ 368.677998][ T9949] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 368.685504][ T9949] CPU: 0 PID: 9949 Comm: syz.0.1283 Not tainted syzkaller #0 [ 368.693162][ T9949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 368.703557][ T9949] Call Trace: [ 368.706964][ T9949] [ 368.709950][ T9949] dump_stack_lvl+0x18c/0x250 [ 368.714793][ T9949] ? show_regs_print_info+0x20/0x20 [ 368.721115][ T9949] ? load_image+0x400/0x400 [ 368.726152][ T9949] panic+0x2dc/0x730 [ 368.730234][ T9949] ? bpf_jit_dump+0xd0/0xd0 [ 368.735076][ T9949] __warn+0x2e0/0x470 [ 368.739449][ T9949] ? ext4_xattr_inode_update_ref+0x53c/0x590 [ 368.745452][ T9949] ? ext4_xattr_inode_update_ref+0x53c/0x590 [ 368.751568][ T9949] report_bug+0x2be/0x4f0 [ 368.755902][ T9949] ? ext4_xattr_inode_update_ref+0x53c/0x590 [ 368.762162][ T9949] ? ext4_xattr_inode_update_ref+0x53c/0x590 [ 368.768435][ T9949] ? ext4_xattr_inode_update_ref+0x53e/0x590 [ 368.774529][ T9949] handle_bug+0xcf/0x120 [ 368.778876][ T9949] exc_invalid_op+0x1a/0x50 [ 368.783395][ T9949] asm_exc_invalid_op+0x1a/0x20 [ 368.788348][ T9949] RIP: 0010:ext4_xattr_inode_update_ref+0x53c/0x590 [ 368.795038][ T9949] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 85 d5 98 ff 49 8b 37 48 c7 c7 a0 d6 de 8a 89 da e8 94 51 0a ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 ab fe ff ff e8 6e 7d 3f 08 [ 368.814840][ T9949] RSP: 0018:ffffc900054171a0 EFLAGS: 00010246 [ 368.820981][ T9949] RAX: e4b18732d40f7400 RBX: 0000000000000402 RCX: 0000000000080000 [ 368.828993][ T9949] RDX: ffffc9000bb79000 RSI: 00000000000323f7 RDI: 00000000000323f8 [ 368.837084][ T9949] RBP: ffffc90005417298 R08: ffff8880b8f28c13 R09: 1ffff110171e5182 [ 368.845090][ T9949] R10: dffffc0000000000 R11: ffffed10171e5183 R12: dffffc0000000000 [ 368.853414][ T9949] R13: ffff888047c50ea8 R14: ffff888047c50cb0 R15: ffff888047c50d00 [ 368.861956][ T9949] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 368.867609][ T9949] ? ext4_xattr_inode_iget+0x3df/0x600 [ 368.873080][ T9949] ext4_xattr_set_entry+0xcda/0x1e90 [ 368.880150][ T9949] ext4_xattr_ibody_set+0x254/0x6a0 [ 368.886345][ T9949] ext4_expand_extra_isize_ea+0x1398/0x1e80 [ 368.893993][ T9949] __ext4_expand_extra_isize+0x306/0x400 [ 368.901452][ T9949] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 368.907644][ T9949] ext4_evict_inode+0x7f3/0xea0 [ 368.913490][ T9949] ? _raw_spin_unlock+0x28/0x40 [ 368.919055][ T9949] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 368.925278][ T9949] ? do_raw_spin_unlock+0x121/0x230 [ 368.930631][ T9949] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 368.936661][ T9949] evict+0x4ca/0x8d0 [ 368.940653][ T9949] ? proc_nr_inodes+0x230/0x230 [ 368.945820][ T9949] ? do_raw_spin_unlock+0x121/0x230 [ 368.951064][ T9949] ? _raw_spin_unlock+0x28/0x40 [ 368.956070][ T9949] ? iput+0x706/0x920 [ 368.960066][ T9949] ext4_orphan_cleanup+0xbec/0x1420 [ 368.965308][ T9949] ? ext4_orphan_del+0xbf0/0xbf0 [ 368.970296][ T9949] ? ext4_register_li_request+0x183/0x940 [ 368.976036][ T9949] ? errseq_check_and_advance+0x66/0x120 [ 368.981672][ T9949] ext4_fill_super+0x5ed0/0x6790 [ 368.987107][ T9949] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 368.993470][ T9949] ? __might_sleep+0xe0/0xe0 [ 368.998221][ T9949] ? read_lock_is_recursive+0x20/0x20 [ 369.003739][ T9949] ? snprintf+0xe9/0x140 [ 369.008010][ T9949] ? down_read_killable+0x340/0x340 [ 369.013316][ T9949] ? setup_bdev_super+0x56b/0x660 [ 369.018597][ T9949] get_tree_bdev+0x3f3/0x520 [ 369.024530][ T9949] ? vfs_parse_fs_string+0x170/0x170 [ 369.030387][ T9949] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 369.036771][ T9949] ? setup_bdev_super+0x660/0x660 [ 369.041847][ T9949] ? apparmor_capable+0x137/0x1a0 [ 369.046909][ T9949] ? bpf_lsm_capable+0x9/0x10 [ 369.051600][ T9949] ? security_capable+0x89/0xb0 [ 369.056572][ T9949] vfs_get_tree+0x8c/0x280 [ 369.061006][ T9949] do_new_mount+0x24b/0xa40 [ 369.065602][ T9949] __se_sys_mount+0x2e7/0x3d0 [ 369.070475][ T9949] ? __x64_sys_mount+0xc0/0xc0 [ 369.075462][ T9949] ? lockdep_hardirqs_on+0x98/0x150 [ 369.081296][ T9949] ? __x64_sys_mount+0x20/0xc0 [ 369.086099][ T9949] do_syscall_64+0x55/0xa0 [ 369.090803][ T9949] ? clear_bhb_loop+0x40/0x90 [ 369.095570][ T9949] ? clear_bhb_loop+0x40/0x90 [ 369.100334][ T9949] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 369.106661][ T9949] RIP: 0033:0x7f197019da8a [ 369.111260][ T9949] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.131518][ T9949] RSP: 002b:00007f1970f76e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 369.140931][ T9949] RAX: ffffffffffffffda RBX: 00007f1970f76ee0 RCX: 00007f197019da8a [ 369.149802][ T9949] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f1970f76ea0 [ 369.157860][ T9949] RBP: 0000200000000180 R08: 00007f1970f76ee0 R09: 0000000000800718 [ 369.166014][ T9949] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 369.174344][ T9949] R13: 00007f1970f76ea0 R14: 00000000000004a3 R15: 0000200000000380 [ 369.182765][ T9949] [ 369.188760][ T9949] Kernel Offset: disabled [ 369.193758][ T9949] Rebooting in 86400 seconds..