last executing test programs: 9m52.470768064s ago: executing program 1 (id=3204): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) getdents64(r4, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x804410, &(0x7f0000000300)=ANY=[], 0x3, 0x2d3, &(0x7f00000006c0)="$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") r5 = socket$netlink(0x10, 0x3, 0xf) getsockopt$sock_buf(r5, 0x1, 0x1c, &(0x7f0000000300)=""/91, &(0x7f0000000140)=0x5b) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x40086) syz_open_dev$evdev(&(0x7f0000000540), 0x5, 0x22c01) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) 9m48.749124794s ago: executing program 1 (id=3211): fsopen(&(0x7f0000000080)='vfat\x00', 0x0) writev(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) setregid(0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x8, 0x7ff}}) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefcc, 0x7f7, 0x3, "35960300000006a7446d67a000", 0x7, 0x200005}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x1008) io_setup(0x3, &(0x7f0000000180)) ioprio_get$uid(0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r4, &(0x7f0000000180)='enable_event:sched:sched_process_fork', 0x25) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x80201, 0x100) 9m42.121221878s ago: executing program 1 (id=3219): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000200)={0x18, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000000}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) r6 = fsmount(r5, 0x0, 0x82) fchdir(r6) r7 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000001980)="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", 0x1d8, 0xfffffffffffffffe) keyctl$search(0xa, 0x0, &(0x7f0000001180)='cifs.idmap\x00', &(0x7f00000011c0)={'syz', 0x3}, r7) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000000500000002000000070000000000", @ANYRES32=0x1, @ANYBLOB="0000472e675fc5"], 0x50) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) 9m40.547034592s ago: executing program 1 (id=3221): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000200)={0x18, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000000}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) r6 = fsmount(r5, 0x0, 0x82) fchdir(r6) r7 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000001980)="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", 0x1d8, 0xfffffffffffffffe) keyctl$search(0xa, 0x0, &(0x7f0000001180)='cifs.idmap\x00', &(0x7f00000011c0)={'syz', 0x3}, r7) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000000500000002000000070000000000", @ANYRES32=0x1, @ANYBLOB="0000472e675fc5"], 0x50) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) 9m39.396360749s ago: executing program 1 (id=3224): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) getdents64(r4, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x804410, &(0x7f0000000300)=ANY=[], 0x3, 0x2d3, &(0x7f00000006c0)="$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") r5 = socket$netlink(0x10, 0x3, 0xf) getsockopt$sock_buf(r5, 0x1, 0x1c, &(0x7f0000000300)=""/91, &(0x7f0000000140)=0x5b) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) 9m38.276277611s ago: executing program 1 (id=3227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmsg(r3, 0x0, 0x2011) 9m25.260017056s ago: executing program 4 (id=3247): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x10, 0x3, '/dev/video#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffff, 0x1ff, 0x6, 0x7f, 0x5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000300)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed008276000000000001", 0x25}, {&(0x7f0000000780)="9942d6af00007f8f", 0x8}], 0x2}, 0x0) 9m24.46160331s ago: executing program 4 (id=3248): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000)={[{@test_dummy_encryption}, {@init_itable}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20c453, &(0x7f00000000c0)={[{@nobh}]}, 0x1, 0x55f, &(0x7f00000001c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbefa, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) close(r4) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000080)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x0) socket$unix(0x1, 0x1, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$XFS_IOC_AG_GEOMETRY(r6, 0xc080583d, &(0x7f0000000180)={0x1, 0x80, 0x9, 0x3, 0x1, 0x8, 0x3, 0x37}) open(&(0x7f0000000040)='.\x00', 0x101480, 0x24) 9m20.725911603s ago: executing program 32 (id=3227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmsg(r3, 0x0, 0x2011) 9m20.693812179s ago: executing program 4 (id=3251): r0 = socket(0x10, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000016400002"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x16481, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x388, 0x41d9fda7) close(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) r7 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x50203, 0x0) ppoll(&(0x7f0000000140)=[{r4, 0xc008}, {r6, 0x100}, {r7, 0x430}, {r3, 0x3070}], 0x4, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240), 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) 9m17.406597941s ago: executing program 4 (id=3256): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x1c\x00'}]}, 0x1c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0xf, 0xfff3}, {0xfff3, 0xffff}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x101000, 0x0) pipe2$watch_queue(&(0x7f0000000540), 0x80) 9m16.63494807s ago: executing program 4 (id=3257): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x10, 0x3, '/dev/video#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffff, 0x1ff, 0x6, 0x7f, 0x5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000300)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed008276000000000001", 0x25}, {&(0x7f0000000780)="9942d6af00007f8f", 0x8}], 0x2}, 0x0) 9m12.926545958s ago: executing program 4 (id=3262): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) capset(0x0, 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80340, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000003, 0x401d031, 0xffffffffffffffff, 0x0) r4 = getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mmap(0x0, 0x0, 0x3, 0x32, 0xffffffffffffffff, 0xffffd000) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb4894826645f8810000000806000608000604"], 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x1ff, 0x301) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='mand\x00', &(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f00000000c0)={0x20, 0x6, 0x301, 0x0, 0x0, 0x101, 0x0}) getpgid(r4) 8m57.716753179s ago: executing program 33 (id=3262): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) capset(0x0, 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80340, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000003, 0x401d031, 0xffffffffffffffff, 0x0) r4 = getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mmap(0x0, 0x0, 0x3, 0x32, 0xffffffffffffffff, 0xffffd000) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb4894826645f8810000000806000608000604"], 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x1ff, 0x301) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='mand\x00', &(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f00000000c0)={0x20, 0x6, 0x301, 0x0, 0x0, 0x101, 0x0}) getpgid(r4) 7m42.822112792s ago: executing program 6 (id=3392): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffff7, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfdfffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x3, 0x6, 0xfffa}, 0x3a, [0x20008000, 0x1, 0xf, 0x8, 0x7c, 0xfffffffe, 0xb5d, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x5, 0x0, 0x3, 0x400, 0x0, 0x7, 0x40, 0x1, 0x24, 0xd, 0x3fffffe, 0x0, 0xffffffff, 0xe665, 0x204, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x400003, 0xe, 0x4, 0x80008071, 0xffffb8f3, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x7, 0x81, 0x4, 0x3ff, 0x8, 0x0, 0x7, 0x9, 0x8, 0x4, 0x0, 0xfffffffc], [0xc0, 0x9, 0x8000012f, 0x8004, 0x5, 0x8, 0x129432e7, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x6, 0x2, 0x0, 0x45, 0x2f, 0x1782000, 0x313, 0x78, 0xea4, 0x5fa, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x3d, 0x1000005, 0x5bea93c3, 0xd, 0x4e0, 0x2, 0x4, 0x81b, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x4, 0xfe000000, 0xffff, 0x2, 0x4, 0x10009, 0x3, 0x9, 0x9, 0x9, 0x20003, 0xffffffff, 0x100bc45, 0x48c93690, 0x80, 0x3], [0x7, 0xc08, 0x4, 0x5, 0xfffffffd, 0x40, 0x31d, 0x9, 0x5, 0x7fff, 0x9, 0x10001, 0xb, 0x4, 0x5, 0x5, 0x3, 0x1ef, 0x0, 0x8, 0x86, 0x3, 0x1, 0x3e7, 0xb, 0x5, 0x0, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfb1, 0x1000, 0xa2, 0x7, 0x2000a9, 0x5, 0x7, 0xac8, 0xbf, 0x1, 0x3, 0x7ff, 0x12b, 0x6, 0x1, 0xa, 0x20, 0x2, 0x1c, 0x8867, 0x3, 0x2006, 0x80a2ed, 0x40000005, 0x25], [0x9, 0xbb33, 0x7, 0x8, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xcea, 0x6, 0x2, 0x57, 0x7, 0x3, 0x0, 0x10000, 0x4, 0x37f3, 0xffff, 0xa622, 0x1, 0x80000005, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x7f, 0xffffffff, 0x80000000, 0x5, 0x4, 0x4c8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0xfc, 0x40000047, 0xb2, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0x8a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1e, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x20, 0x12, 0x1}, 0x20}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7m42.469286366s ago: executing program 6 (id=3393): fsopen(&(0x7f0000000080)='vfat\x00', 0x0) writev(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) setregid(0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x8, 0x7ff}}) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefcc, 0x7f7, 0x3, "35960300000006a7446d67a000", 0x7, 0x200005}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_setup(0x3, &(0x7f0000000180)) ioprio_get$uid(0x3, 0x0) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r4, &(0x7f0000000180)='enable_event:sched:sched_process_fork', 0x25) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x80201, 0x100) 7m41.964767546s ago: executing program 6 (id=3396): r0 = open(0x0, 0x149040, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/slabinfo\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="050000001e0500"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000004001"], 0x48}}, 0x2400c808) close(r5) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) 7m39.220099231s ago: executing program 6 (id=3398): socket$packet(0x11, 0x2, 0x300) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000002480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f00000002c0)=0x20000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10002004}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x1, r0, 0x1, 0x4, 0x8, 0x8, 0x0, 0x1, 0x6}}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000180)=0x82, 0x4) socket(0x80000000000000a, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x25dfdbff, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb2b, 0x0, 0x200000, 0x0, 0x0, 0x21c, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x8007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x54c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x6bd7, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0xffffffff, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x3, 0xffffffff}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 7m35.888029631s ago: executing program 6 (id=3404): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fchdir(0xffffffffffffffff) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000001980)="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", 0x1d8, 0xfffffffffffffffe) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) 7m32.486380194s ago: executing program 6 (id=3412): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80340, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000003, 0x401d031, 0xffffffffffffffff, 0x0) r3 = getpid() mmap(0x0, 0x0, 0x3, 0x32, 0xffffffffffffffff, 0xffffd000) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x1ff, 0x301) r5 = fsopen(&(0x7f0000000240)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='mand\x00', &(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f00000000c0)={0x20, 0x6, 0x301, 0x0, 0x0, 0x101, 0x0}) getpgid(r3) 7m17.069102961s ago: executing program 34 (id=3412): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80340, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000003, 0x401d031, 0xffffffffffffffff, 0x0) r3 = getpid() mmap(0x0, 0x0, 0x3, 0x32, 0xffffffffffffffff, 0xffffd000) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x1ff, 0x301) r5 = fsopen(&(0x7f0000000240)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='mand\x00', &(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f00000000c0)={0x20, 0x6, 0x301, 0x0, 0x0, 0x101, 0x0}) getpgid(r3) 3m0.938481217s ago: executing program 3 (id=4112): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000100)={[{@abort}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000e00)={@ifindex, 0xffffffffffffffff, 0x2b, 0x20}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") mkdir(&(0x7f0000000180)='./bus\x00', 0x10c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0) 2m58.984228989s ago: executing program 3 (id=4118): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x148}], 0x1}}], 0x1, 0x2090) sendmmsg(0xffffffffffffffff, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)="c8b7df938dc9c0fcc8a7e84a57fa9059b9cfa4132462f9c45b583e8ce1f19a82364b01b4bc3436dcea3f3380b3269f2c986b7f8205fa231eac99a9de63cd1a85c820fc43c24662a22f18183bb042a742ac921efe546daedbd31cd4b5cda70186dd7ec449169ea58ebc3f3456774ea76202bc9969ea7026a8d7090c085a769e47294e4ea5b8ce3f6187e5ca87549e75b0b2980a21dc7b809da3f544d061ad96d06e0864906297353deefe8b52d519dd67f3f41dd7dd1cda0601b77e8415521d7dbb9893aeefbf94850960c84825a918b0", 0xd0}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000000f00)="88a69f5139292fe55d24310330d349370620dd2737877e864a0d6d86ec395b0c41689f2e0742c4d3282f151e6faf27deab0464cdf91d6a7b73cbec929aa85b3d4f5114785c23d6c325efab561ca5f90113281359edb7ccdea124d6ea38a34d046ed5a7fdfc137e465ae8b692cb06ce3d14da5dc3ba35cac41c2fb97fe2618ebdd40e", 0x82}, {&(0x7f0000002240)="321f349be984b668f593bf16c2f60e4b01783ed59dcd6a4105711458d2cf86696caad21a4387232f7ae8dbda478307058ab2ffec546f49907b7d4c54fe1fa76d99f5c80956c6769c810b895a00ab69f114794c1e3ee671204a47d3153305395d1e523e504927505590c078bc1a7d6e82b332bf141f662f26ad9ba4c11b87d5abbc3340ef989b3a8e666f8f82ca82aab6d33c953938b30b61c91cbc926b2a58d67d8198e458ed8f10ad8975356af9dab25f718147ae2a3e81187adaa46d247e3a8c437053bb01b855c6fb0ee0e7024fa61bd2af5aa1d918fcc93b3ffadf3a982efefa3b47727caafee6246ee147d676a5e2879e351f5ac51e6b62aaedb5cd03d16cb4f8bfaac498397b3dc22c063fbd87b2912647948430488fb45ca42096e08a6760c831b06d4582b7440f9123f3711a87b71a4a3a4614b2bf8dcdb84d985777893889120fb820ffe525acbf530869895f2caf84922e5a8aee6a0f887145b0d961bfa9c8f71788ccb8d2ee73676c2f68427b776f537afb9a8c97e055e35204ec09fd3f2c9a0b9f8b33ef0343ef22c99a7fe463550d074b626c1173f34fc49f1431460881ccd35b679f186dd10ac84e2f9aa370443a75938812c1b1888e57b0a79001965832e7cd8c85865081a16938fc81e72c26e686078692dad56ca4a2371a6b370268da843aa7ba9e498a7ae8a6317907b2d5114acf3d35522e4c8cb4e014c7d3f5f60c57b1293ec9956bed6abb25b5e2f90cf3eba7adc060b00dcb50480282b649e9c601bf0a400290a337e46af9be19d489e8693750a0be63313307b51db7726d4c6643f6f8ab22ce41310043728ffd414567f6e514c5e88b5614195b9ba893c8980949974f1eae80d27f7f90b251a094469561598e3dcd2bc143edd69b131595bbf776aa7583687228d8ea578f9f08ea949be49c1b087f430262968f639047eeb91c84a4cc6df66c749fb9b5b38e7e6546683df3a6ae722ea0d644256d82d8f3ba6b8bca23498a7dcc06fcda64d94f15b6bf620e7b272a476b097715f430c1d7c4c221156df5225c9fee4e580a5600713a1ce6e503c37730b5b4d3be23b212eb0ac2a05a7dc6aa88984566664086491ba3214bd9c9a4196d028f6ba448682536b40eab416ea8cf4098101af663d53110ebc2dffd88457ffd70decf1269f3fa61460593671d750ea0ab08aaac98a555a78da62b62625b550f840f34d1b02788bceb09002f615187159295d1a10e2dcfda5c1d399226047a53a1695f0af8121ad144b4dbe411d34d5e4eb4b4075e522d60d0020b2969025021bfc03062e0c8281bfa4cbce38241b53e970acc20ee90", 0x3b1}], 0x2}}], 0x2, 0x0) 2m54.459997244s ago: executing program 3 (id=4123): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x400}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1000006, 0x810, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f0000000300)={[{@iocharset={'iocharset', 0x3d, 'cp861'}}, {@shortname_mixed}, {@utf8}, {@fat=@errors_continue}, {@uni_xlate}, {@utf8no}, {@fat=@check_strict}, {@shortname_winnt}, {@fat=@allow_utime={'allow_utime', 0x3d, 0xf}}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@uni_xlate}, {@shortname_mixed}, {@utf8}, {@numtail}, {@utf8no}, {@rodir}]}, 0x1, 0x2a6, &(0x7f0000001140)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r4, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000040)=0x28) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x7, 0xffff, 0x0, 0x0, 0xe}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 2m50.48892583s ago: executing program 3 (id=4130): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB="000000000000feca3d107ffefd9bdadaadcec700", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x50) 2m48.483917361s ago: executing program 3 (id=4132): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='net_prio.prioidx\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84c42, 0x1fa) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000006d40)=[{{&(0x7f00000003c0)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000006200)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@rr={0x7, 0x7, 0x7, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x4, 0xdf, 0x1, 0x8}]}}}], 0x20}}], 0x1, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xffffffffffffffa1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x5) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) fsetxattr(r0, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000240)='\xf2K', 0x2, 0x0) 2m44.566800837s ago: executing program 3 (id=4136): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0214f6fffffffffff8070000000900000000000000080009000d000000", 0x24) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x2800000, &(0x7f0000000140)={[{@debug}, {@jqfmt_vfsv0}, {@test_dummy_encryption}, {@test_dummy_encryption}, {@noacl}, {@journal_dev={'journal_dev', 0x3d, 0x100}}, {@inlinecrypt}, {@usrquota}, {@bh}, {@orlov}]}, 0x1, 0xbdd, &(0x7f0000000bc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7) r3 = fcntl$dupfd(0xffffffffffffffff, 0xdb87d8872d65828e, r1) sendmsg$inet6(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002940)=[{0x0}, {0x0}], 0x2}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f00000001c0)=0x6, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711827000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m28.315705363s ago: executing program 35 (id=4136): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0214f6fffffffffff8070000000900000000000000080009000d000000", 0x24) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x2800000, &(0x7f0000000140)={[{@debug}, {@jqfmt_vfsv0}, {@test_dummy_encryption}, {@test_dummy_encryption}, {@noacl}, {@journal_dev={'journal_dev', 0x3d, 0x100}}, {@inlinecrypt}, {@usrquota}, {@bh}, {@orlov}]}, 0x1, 0xbdd, &(0x7f0000000bc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7) r3 = fcntl$dupfd(0xffffffffffffffff, 0xdb87d8872d65828e, r1) sendmsg$inet6(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002940)=[{0x0}, {0x0}], 0x2}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f00000001c0)=0x6, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711827000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.251847718s ago: executing program 0 (id=4515): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, 0x0, r4, 0x0, 0x6, 0xc) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x3, 0x5, 0x7ff}}, 0xfe68) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) 6.821274065s ago: executing program 8 (id=4528): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000280)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYBLOB="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", @ANYBLOB, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x1, 0x574, &(0x7f0000000980)="$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") r1 = syz_open_procfs(0x0, &(0x7f0000002240)='mounts\x00') lseek(r1, 0x10001, 0x0) 6.450108795s ago: executing program 8 (id=4529): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000006, 0x4, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x20001c, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES8, @ANYRESOCT], 0x1, 0x392, &(0x7f0000000340)="$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") socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x2dc1, 0x4, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000040)={0x200002, 0x200003, 0x6, 0x4, 0x7, 0x4}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x10000a0) setxattr$system_posix_acl(0x0, &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x880452, 0x0, 0xf8, 0x0, &(0x7f00000000c0)) open(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) 6.241974954s ago: executing program 5 (id=4533): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1200408, &(0x7f0000000180)={[{@delalloc}, {@lazytime}, {@errors_remount}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7a5, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x10, 0x100000001, 0x2}) 5.534909567s ago: executing program 0 (id=4536): epoll_create1(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = epoll_create1(0x80000) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x77359400}}, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x141, &(0x7f0000002040)={0x77359400}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)={0xe000200c}) 4.599481143s ago: executing program 8 (id=4538): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x4000000) 4.577449987s ago: executing program 0 (id=4539): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) socket$igmp6(0xa, 0x3, 0x2) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/ieee80211/phy1/reset\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0), 0x0) 4.576833598s ago: executing program 5 (id=4540): mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = syz_open_dev$rtc(&(0x7f00000006c0), 0x0, 0x20000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) memfd_create(0x0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) quotactl$Q_SYNC(0xffffffff80000102, 0x110e22ffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x14) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6a}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x1, 0x1100) openat$pidfd(0xffffffffffffff9c, 0x0, 0x12300, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000700)={0x33, 0x36, 0x1, 0x17, 0x8, 0xffff, 0x5, 0x51, 0x1}) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 4.389656623s ago: executing program 0 (id=4542): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000009d973ec5f18fb6ba25bfa35134f1ac8166b3890c15b91f5b889b123d67dd9a32cecc7f77f10fa999308a29f10bf118353a61ff9cf0bfc00a2970825a97100c0e434d9f93dac5ae9cd91c4e136a91ab89b372de3f52b353f1"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1}, 0x6d) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1f, 0xd, &(0x7f0000000500)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}], 0x0, 0x6, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x26e264ce0436c46c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r1, 0x105, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400), 0x0, 0x8, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 4.377852265s ago: executing program 8 (id=4543): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x50, 0x12, 0x301, 0x0, 0x0, {0x29, 0x0, 0x0, 0x1, {0x0, 0x0, [], [], 0x0, [0x0, 0x1]}, 0xf0ffffff}, [@INET_DIAG_REQ_BYTECODE={0x4, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048004}, 0x0) 4.29936644s ago: executing program 8 (id=4544): ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000140)={0xffffffff, 0x0, 0x1, 'queue1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) unshare(0x400) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000019200)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000019140)={@align=0x3, {0x8, 0x8, 0x3, 0x5}}, 0x6, 0x0, 0x0}) accept$unix(r3, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x1, 0x0) write(r5, &(0x7f0000000200)='0', 0x1) 3.721104049s ago: executing program 0 (id=4545): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000000d000)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r4, &(0x7f0000000100)='e:-_group/myevent _', 0x13) 3.61179136s ago: executing program 2 (id=4546): setxattr$incfs_metadata(&(0x7f00000003c0)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x3) 3.507571129s ago: executing program 5 (id=4547): setns(0xc9, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept$alg(r1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fee000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0xfffffffffffffe41) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r6, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) 2.604152189s ago: executing program 7 (id=4548): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000340)={@multicast2, @loopback, @remote}, 0xc) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 2.567459586s ago: executing program 0 (id=4549): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x80) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) geteuid() prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ca3000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f000094c000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) io_uring_setup(0x899, 0x0) 2.395579529s ago: executing program 2 (id=4550): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) 2.173825011s ago: executing program 7 (id=4551): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x101900, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000180)={0x4, "7bb9595931028deda525e19bdeffafde2500f6d15c9e31df9454310ad7c18e65", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000140)={"25628c1975c606000900", r1, 0xffffffffffffffff}) ppoll(&(0x7f0000000200)=[{r1, 0x1c}, {r2, 0x4084}], 0x2, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.170316631s ago: executing program 2 (id=4552): io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2804092, &(0x7f0000001500)=ANY=[], 0x55, 0x1c1, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x80000, 0x281) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x6) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) setrlimit(0x2, &(0x7f0000000000)={0x0, 0x2400003}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204032, 0xffffffffffffffff, 0xec776000) 1.470814563s ago: executing program 7 (id=4553): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x4000000) 1.284777648s ago: executing program 5 (id=4554): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup(r0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, 0x0, 0x30, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44050}, 0x40050) 1.284560558s ago: executing program 8 (id=4555): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x10, &(0x7f0000000040)=ANY=[], 0x1, 0x6c1, &(0x7f00000003c0)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x9) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4, @rand_addr=0x64010102}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x4a, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x14}}, 'veth1_to_bridge\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1) 1.275409359s ago: executing program 7 (id=4556): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) fsopen(0x0, 0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x2000410, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="25b6c403727541f6fc4cd1285cef", @ANYRES8, @ANYRES16, @ANYRES32], 0x1, 0x2ca, &(0x7f0000001140)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x2000, 0x6, 0x11, r1, 0x0) getresuid(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(r0, &(0x7f00000002c0)='0', 0x1) 1.217593671s ago: executing program 5 (id=4557): open$dir(&(0x7f00000000c0)='./file0/file0\x00', 0x410481, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@block_validity}, {}, {@noauto_da_alloc}, {@norecovery}, {@usrquota}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) rename(&(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='./file0/file0\x00') 1.115592879s ago: executing program 2 (id=4558): socket$nl_route(0x10, 0x3, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee01) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x2, 0x0, 0x0) 956.887419ms ago: executing program 2 (id=4559): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000000d000)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r4, &(0x7f0000000100)='e:-_group/myevent _', 0x13) 266.514079ms ago: executing program 2 (id=4560): fsopen(&(0x7f0000000440)='proc\x00', 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x1, 0x0) write$binfmt_aout(r1, 0x0, 0xff2e) close(r0) socket$inet_udp(0x2, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) 175.627767ms ago: executing program 5 (id=4561): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000100), 0x8) listen(r1, 0x5) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xd) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x0, 0x0, 0x3c, 0x3c}}}, 0x14) accept4(r1, 0x0, 0x0, 0x0) 175.477827ms ago: executing program 7 (id=4562): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 7 (id=4563): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x59d5}}}, 0xd) kernel console output (not intermixed with test programs): RAX: ffffffffffffffda RBX: 00007f2c270e0fa0 RCX: 00007f2c26e59159 [ 1266.186807][T19357] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001d [ 1266.194779][T19357] RBP: 00007f2c26ef006b R08: 0000000000000000 R09: 0000000000000000 [ 1266.202762][T19357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1266.210732][T19357] R13: 00007f2c270e1038 R14: 00007f2c270e0fa0 R15: 00007ffdb98d56e8 [ 1266.218720][T19357] [ 1266.588867][T19372] loop2: detected capacity change from 0 to 512 [ 1266.665462][T19372] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 1266.741177][T19372] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 1266.798120][T19372] EXT4-fs (loop2): 1 truncate cleaned up [ 1266.832532][T19372] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 1268.866903][T19411] loop2: detected capacity change from 0 to 128 [ 1269.203714][T19415] loop5: detected capacity change from 0 to 2048 [ 1269.322266][T19411] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1269.631187][T15702] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1271.691855][T19463] loop0: detected capacity change from 0 to 512 [ 1271.745350][T19467] loop7: detected capacity change from 0 to 512 [ 1271.767154][T19469] FAULT_INJECTION: forcing a failure. [ 1271.767154][T19469] name failslab, interval 1, probability 0, space 0, times 0 [ 1271.786381][T19463] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 1271.817819][T19463] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1271.867771][T19469] CPU: 0 PID: 19469 Comm: syz.2.3926 Not tainted syzkaller #0 [ 1271.875257][T19469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1271.885313][T19469] Call Trace: [ 1271.888598][T19469] [ 1271.891534][T19469] dump_stack_lvl+0x188/0x250 [ 1271.893166][T19467] EXT4-fs error (device loop7): ext4_orphan_get:1436: comm syz.7.3929: bad orphan inode 16 [ 1271.896218][T19469] ? show_regs_print_info+0x20/0x20 [ 1271.896244][T19469] ? load_image+0x410/0x410 [ 1271.896264][T19469] ? __might_sleep+0xf0/0xf0 [ 1271.920470][T19469] ? __lock_acquire+0x7b50/0x7b50 [ 1271.925508][T19469] ? pcpu_memcg_post_alloc_hook+0x11a/0x3b0 [ 1271.931416][T19469] should_fail+0x383/0x4b0 [ 1271.935840][T19469] should_failslab+0x5/0x20 [ 1271.940332][T19469] slab_pre_alloc_hook+0x51/0xc0 [ 1271.945257][T19469] ? __d_alloc+0x27/0x6d0 [ 1271.949572][T19469] kmem_cache_alloc+0x3d/0x280 [ 1271.954321][T19469] __d_alloc+0x27/0x6d0 [ 1271.958464][T19469] ? d_alloc_pseudo+0xe/0x70 [ 1271.963051][T19469] d_alloc_pseudo+0x19/0x70 [ 1271.967549][T19469] alloc_file_pseudo+0xe0/0x200 [ 1271.972390][T19469] ? alloc_empty_file_noaccount+0x80/0x80 [ 1271.978099][T19469] ? alloc_fd+0x59e/0x650 [ 1271.982411][T19469] sock_alloc_file+0xb3/0x240 [ 1271.987074][T19469] __sys_socket+0x11d/0x170 [ 1271.991564][T19469] __x64_sys_socket+0x76/0x80 [ 1271.996224][T19469] do_syscall_64+0x4c/0xa0 [ 1272.000638][T19469] ? clear_bhb_loop+0x30/0x80 [ 1272.005297][T19469] ? clear_bhb_loop+0x30/0x80 [ 1272.009969][T19469] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1272.015857][T19469] RIP: 0033:0x7f92ab4af159 [ 1272.020256][T19469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1272.039843][T19469] RSP: 002b:00007f92a9707028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1272.048239][T19469] RAX: ffffffffffffffda RBX: 00007f92ab736fa0 RCX: 00007f92ab4af159 [ 1272.056192][T19469] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001d [ 1272.064144][T19469] RBP: 00007f92ab54606b R08: 0000000000000000 R09: 0000000000000000 [ 1272.072095][T19469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1272.080048][T19469] R13: 00007f92ab737038 R14: 00007f92ab736fa0 R15: 00007ffe4fba44b8 [ 1272.088011][T19469] [ 1272.116608][T19467] ext4_test_bit(bit=15, block=18) = 1 [ 1272.121059][T19463] EXT4-fs (loop0): 1 truncate cleaned up [ 1272.121999][T19467] is_bad_inode(inode)=0 [ 1272.130918][T19463] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 1272.138450][T19467] NEXT_ORPHAN(inode)=83886080 [ 1272.199630][T19467] max_ino=32 [ 1272.214845][T19467] i_nlink=0 [ 1272.261169][T19467] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1272.303236][T19467] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1273.359120][T19502] loop0: detected capacity change from 0 to 128 [ 1274.000903][T19502] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1274.963678][T15702] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1275.050694][T19506] loop7: detected capacity change from 0 to 2048 [ 1275.533159][T19542] FAULT_INJECTION: forcing a failure. [ 1275.533159][T19542] name failslab, interval 1, probability 0, space 0, times 0 [ 1275.609730][T19542] CPU: 0 PID: 19542 Comm: syz.3.3944 Not tainted syzkaller #0 [ 1275.617219][T19542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1275.627278][T19542] Call Trace: [ 1275.630554][T19542] [ 1275.633486][T19542] dump_stack_lvl+0x188/0x250 [ 1275.638172][T19542] ? show_regs_print_info+0x20/0x20 [ 1275.643372][T19542] ? load_image+0x410/0x410 [ 1275.647886][T19542] ? __might_sleep+0xf0/0xf0 [ 1275.652477][T19542] ? __lock_acquire+0x7b50/0x7b50 [ 1275.657500][T19542] ? pcpu_memcg_post_alloc_hook+0x11a/0x3b0 [ 1275.663398][T19542] should_fail+0x383/0x4b0 [ 1275.667822][T19542] should_failslab+0x5/0x20 [ 1275.672327][T19542] slab_pre_alloc_hook+0x51/0xc0 [ 1275.677263][T19542] ? __d_alloc+0x27/0x6d0 [ 1275.681592][T19542] kmem_cache_alloc+0x3d/0x280 [ 1275.686357][T19542] __d_alloc+0x27/0x6d0 [ 1275.690511][T19542] ? d_alloc_pseudo+0xe/0x70 [ 1275.695106][T19542] d_alloc_pseudo+0x19/0x70 [ 1275.699611][T19542] alloc_file_pseudo+0xe0/0x200 [ 1275.704466][T19542] ? alloc_empty_file_noaccount+0x80/0x80 [ 1275.710189][T19542] ? alloc_fd+0x59e/0x650 [ 1275.714518][T19542] sock_alloc_file+0xb3/0x240 [ 1275.719199][T19542] __sys_socket+0x11d/0x170 [ 1275.723705][T19542] __x64_sys_socket+0x76/0x80 [ 1275.728384][T19542] do_syscall_64+0x4c/0xa0 [ 1275.732804][T19542] ? clear_bhb_loop+0x30/0x80 [ 1275.737477][T19542] ? clear_bhb_loop+0x30/0x80 [ 1275.742159][T19542] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1275.748063][T19542] RIP: 0033:0x7f178c5bf159 [ 1275.752486][T19542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1275.772091][T19542] RSP: 002b:00007f178a817028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1275.780513][T19542] RAX: ffffffffffffffda RBX: 00007f178c846fa0 RCX: 00007f178c5bf159 [ 1275.788487][T19542] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001d [ 1275.796462][T19542] RBP: 00007f178c65606b R08: 0000000000000000 R09: 0000000000000000 [ 1275.804438][T19542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1275.812410][T19542] R13: 00007f178c847038 R14: 00007f178c846fa0 R15: 00007ffceb0e3998 [ 1275.820398][T19542] [ 1276.519586][T19552] loop5: detected capacity change from 0 to 512 [ 1276.598736][T19552] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 1276.688957][T19552] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1277.046503][T19552] EXT4-fs (loop5): 1 truncate cleaned up [ 1277.117719][T19552] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 1278.567202][T19590] loop2: detected capacity change from 0 to 128 [ 1279.213674][T19590] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1279.378892][T15700] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1280.511380][T19622] loop2: detected capacity change from 0 to 2048 [ 1280.806045][T19631] FAULT_INJECTION: forcing a failure. [ 1280.806045][T19631] name failslab, interval 1, probability 0, space 0, times 0 [ 1280.862787][T19631] CPU: 0 PID: 19631 Comm: syz.7.3961 Not tainted syzkaller #0 [ 1280.870278][T19631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1280.880329][T19631] Call Trace: [ 1280.883629][T19631] [ 1280.886547][T19631] dump_stack_lvl+0x188/0x250 [ 1280.891220][T19631] ? show_regs_print_info+0x20/0x20 [ 1280.896407][T19631] ? load_image+0x410/0x410 [ 1280.900898][T19631] ? __might_sleep+0xf0/0xf0 [ 1280.905474][T19631] ? __lock_acquire+0x7b50/0x7b50 [ 1280.910496][T19631] ? pcpu_memcg_post_alloc_hook+0x11a/0x3b0 [ 1280.916382][T19631] should_fail+0x383/0x4b0 [ 1280.920793][T19631] should_failslab+0x5/0x20 [ 1280.925286][T19631] slab_pre_alloc_hook+0x51/0xc0 [ 1280.930227][T19631] ? __d_alloc+0x27/0x6d0 [ 1280.934547][T19631] kmem_cache_alloc+0x3d/0x280 [ 1280.939320][T19631] __d_alloc+0x27/0x6d0 [ 1280.943462][T19631] ? d_alloc_pseudo+0xe/0x70 [ 1280.948050][T19631] d_alloc_pseudo+0x19/0x70 [ 1280.952544][T19631] alloc_file_pseudo+0xe0/0x200 [ 1280.957385][T19631] ? alloc_empty_file_noaccount+0x80/0x80 [ 1280.963095][T19631] ? alloc_fd+0x59e/0x650 [ 1280.967413][T19631] sock_alloc_file+0xb3/0x240 [ 1280.972078][T19631] __sys_socket+0x11d/0x170 [ 1280.976599][T19631] __x64_sys_socket+0x76/0x80 [ 1280.981261][T19631] do_syscall_64+0x4c/0xa0 [ 1280.985661][T19631] ? clear_bhb_loop+0x30/0x80 [ 1280.990322][T19631] ? clear_bhb_loop+0x30/0x80 [ 1280.994993][T19631] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1281.000870][T19631] RIP: 0033:0x7fbdec573159 [ 1281.005275][T19631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1281.024874][T19631] RSP: 002b:00007fbdea7cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1281.033283][T19631] RAX: ffffffffffffffda RBX: 00007fbdec7fafa0 RCX: 00007fbdec573159 [ 1281.041244][T19631] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001d [ 1281.049201][T19631] RBP: 00007fbdec60a06b R08: 0000000000000000 R09: 0000000000000000 [ 1281.057159][T19631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1281.065138][T19631] R13: 00007fbdec7fb038 R14: 00007fbdec7fafa0 R15: 00007ffe4c6de1c8 [ 1281.073114][T19631] [ 1281.326078][T19648] loop2: detected capacity change from 0 to 512 [ 1281.474855][T19648] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 1281.498980][T19648] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 1281.551722][T19648] EXT4-fs (loop2): 1 truncate cleaned up [ 1281.564932][T19648] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 1282.001290][T19674] loop7: detected capacity change from 0 to 128 [ 1282.242732][T19674] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1282.742830][ T4256] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1282.762466][T19681] loop3: detected capacity change from 0 to 512 [ 1282.877941][T19681] EXT4-fs error (device loop3): ext4_orphan_get:1436: comm syz.3.3969: bad orphan inode 16 [ 1282.889957][T19681] ext4_test_bit(bit=15, block=18) = 1 [ 1282.900966][T19681] is_bad_inode(inode)=0 [ 1282.909774][T19681] NEXT_ORPHAN(inode)=83886080 [ 1282.915505][T19681] max_ino=32 [ 1282.918762][T19681] i_nlink=0 [ 1282.936587][T19681] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1282.948185][T19681] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1283.918305][T19714] loop3: detected capacity change from 0 to 2048 [ 1284.272382][T19720] FAULT_INJECTION: forcing a failure. [ 1284.272382][T19720] name failslab, interval 1, probability 0, space 0, times 0 [ 1284.387316][T19720] CPU: 1 PID: 19720 Comm: syz.0.3978 Not tainted syzkaller #0 [ 1284.394811][T19720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1284.404865][T19720] Call Trace: [ 1284.408146][T19720] [ 1284.411077][T19720] dump_stack_lvl+0x188/0x250 [ 1284.415762][T19720] ? show_regs_print_info+0x20/0x20 [ 1284.420959][T19720] ? load_image+0x410/0x410 [ 1284.425466][T19720] ? __might_sleep+0xf0/0xf0 [ 1284.430055][T19720] ? __lock_acquire+0x7b50/0x7b50 [ 1284.435083][T19720] ? pcpu_memcg_post_alloc_hook+0x11a/0x3b0 [ 1284.440984][T19720] should_fail+0x383/0x4b0 [ 1284.445408][T19720] should_failslab+0x5/0x20 [ 1284.449911][T19720] slab_pre_alloc_hook+0x51/0xc0 [ 1284.454849][T19720] ? __d_alloc+0x27/0x6d0 [ 1284.459180][T19720] kmem_cache_alloc+0x3d/0x280 [ 1284.463949][T19720] __d_alloc+0x27/0x6d0 [ 1284.468102][T19720] ? d_alloc_pseudo+0xe/0x70 [ 1284.472694][T19720] d_alloc_pseudo+0x19/0x70 [ 1284.477197][T19720] alloc_file_pseudo+0xe0/0x200 [ 1284.482051][T19720] ? alloc_empty_file_noaccount+0x80/0x80 [ 1284.487775][T19720] ? alloc_fd+0x59e/0x650 [ 1284.492105][T19720] sock_alloc_file+0xb3/0x240 [ 1284.496786][T19720] __sys_socket+0x11d/0x170 [ 1284.501294][T19720] __x64_sys_socket+0x76/0x80 [ 1284.505970][T19720] do_syscall_64+0x4c/0xa0 [ 1284.510400][T19720] ? clear_bhb_loop+0x30/0x80 [ 1284.515076][T19720] ? clear_bhb_loop+0x30/0x80 [ 1284.519852][T19720] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1284.525742][T19720] RIP: 0033:0x7f4aad88a159 [ 1284.530163][T19720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1284.549770][T19720] RSP: 002b:00007f4aabae2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1284.558184][T19720] RAX: ffffffffffffffda RBX: 00007f4aadb11fa0 RCX: 00007f4aad88a159 [ 1284.566154][T19720] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001d [ 1284.574124][T19720] RBP: 00007f4aad92106b R08: 0000000000000000 R09: 0000000000000000 [ 1284.582090][T19720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1284.590055][T19720] R13: 00007f4aadb12038 R14: 00007f4aadb11fa0 R15: 00007ffccc0bb4a8 [ 1284.598036][T19720] [ 1285.535020][T19748] loop3: detected capacity change from 0 to 128 [ 1285.573661][T19748] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1286.811319][T15616] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1287.058266][T19774] loop5: detected capacity change from 0 to 512 [ 1287.233068][T19774] EXT4-fs error (device loop5): ext4_orphan_get:1436: comm syz.5.3990: bad orphan inode 16 [ 1287.282672][T19774] ext4_test_bit(bit=15, block=18) = 1 [ 1287.288329][T19774] is_bad_inode(inode)=0 [ 1287.292484][T19774] NEXT_ORPHAN(inode)=83886080 [ 1287.302084][T19774] max_ino=32 [ 1287.305353][T19774] i_nlink=0 [ 1287.314991][T19774] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1287.326108][T19774] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1287.455885][T19796] tipc: Started in network mode [ 1287.465683][T19796] tipc: Node identity ac14140f, cluster identity 4711 [ 1287.468679][T19797] FAULT_INJECTION: forcing a failure. [ 1287.468679][T19797] name failslab, interval 1, probability 0, space 0, times 0 [ 1287.474167][T19796] tipc: Enabled bearer , priority 10 [ 1287.524769][T19797] CPU: 1 PID: 19797 Comm: syz.2.3993 Not tainted syzkaller #0 [ 1287.532249][T19797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1287.542306][T19797] Call Trace: [ 1287.545584][T19797] [ 1287.548527][T19797] dump_stack_lvl+0x188/0x250 [ 1287.553230][T19797] ? show_regs_print_info+0x20/0x20 [ 1287.558419][T19797] ? load_image+0x410/0x410 [ 1287.562915][T19797] ? __might_sleep+0xf0/0xf0 [ 1287.567504][T19797] ? __lock_acquire+0x7b50/0x7b50 [ 1287.572520][T19797] ? pcpu_memcg_post_alloc_hook+0x11a/0x3b0 [ 1287.578406][T19797] should_fail+0x383/0x4b0 [ 1287.582814][T19797] should_failslab+0x5/0x20 [ 1287.587299][T19797] slab_pre_alloc_hook+0x51/0xc0 [ 1287.592223][T19797] ? __d_alloc+0x27/0x6d0 [ 1287.596537][T19797] kmem_cache_alloc+0x3d/0x280 [ 1287.601286][T19797] __d_alloc+0x27/0x6d0 [ 1287.605424][T19797] ? d_alloc_pseudo+0xe/0x70 [ 1287.609999][T19797] d_alloc_pseudo+0x19/0x70 [ 1287.614485][T19797] alloc_file_pseudo+0xe0/0x200 [ 1287.619323][T19797] ? alloc_empty_file_noaccount+0x80/0x80 [ 1287.625034][T19797] ? alloc_fd+0x59e/0x650 [ 1287.629353][T19797] sock_alloc_file+0xb3/0x240 [ 1287.634019][T19797] __sys_socket+0x11d/0x170 [ 1287.638507][T19797] __x64_sys_socket+0x76/0x80 [ 1287.643170][T19797] do_syscall_64+0x4c/0xa0 [ 1287.647568][T19797] ? clear_bhb_loop+0x30/0x80 [ 1287.652231][T19797] ? clear_bhb_loop+0x30/0x80 [ 1287.656894][T19797] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1287.662776][T19797] RIP: 0033:0x7f92ab4af159 [ 1287.667176][T19797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1287.686766][T19797] RSP: 002b:00007f92a9707028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1287.695173][T19797] RAX: ffffffffffffffda RBX: 00007f92ab736fa0 RCX: 00007f92ab4af159 [ 1287.703131][T19797] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001d [ 1287.711083][T19797] RBP: 00007f92ab54606b R08: 0000000000000000 R09: 0000000000000000 [ 1287.719039][T19797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1287.727027][T19797] R13: 00007f92ab737038 R14: 00007f92ab736fa0 R15: 00007ffe4fba44b8 [ 1287.734993][T19797] [ 1287.932093][T19809] loop3: detected capacity change from 0 to 512 [ 1288.314597][T19809] EXT4-fs error (device loop3): ext4_orphan_get:1436: comm syz.3.3996: bad orphan inode 16 [ 1288.467056][ T4290] tipc: Node number set to 2886997007 [ 1288.531985][T19809] ext4_test_bit(bit=15, block=18) = 1 [ 1288.617581][T19809] is_bad_inode(inode)=0 [ 1288.621759][T19809] NEXT_ORPHAN(inode)=83886080 [ 1288.639388][T19809] max_ino=32 [ 1288.651386][T19809] i_nlink=0 [ 1288.687601][T19809] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1288.772963][T19809] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1289.074168][T19835] loop0: detected capacity change from 0 to 128 [ 1289.327997][T19835] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1289.755006][ T4256] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1290.870970][T19858] FAULT_INJECTION: forcing a failure. [ 1290.870970][T19858] name failslab, interval 1, probability 0, space 0, times 0 [ 1290.884555][T15617] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1290.896269][T19858] CPU: 0 PID: 19858 Comm: syz.0.4007 Not tainted syzkaller #0 [ 1290.903748][T19858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1290.913804][T19858] Call Trace: [ 1290.917085][T19858] [ 1290.920019][T19858] dump_stack_lvl+0x188/0x250 [ 1290.924703][T19858] ? show_regs_print_info+0x20/0x20 [ 1290.929906][T19858] ? load_image+0x410/0x410 [ 1290.934421][T19858] ? __might_sleep+0xf0/0xf0 [ 1290.939014][T19858] ? __lock_acquire+0x7b50/0x7b50 [ 1290.944044][T19858] ? pcpu_memcg_post_alloc_hook+0x11a/0x3b0 [ 1290.949949][T19858] should_fail+0x383/0x4b0 [ 1290.954378][T19858] should_failslab+0x5/0x20 [ 1290.958882][T19858] slab_pre_alloc_hook+0x51/0xc0 [ 1290.963823][T19858] ? __d_alloc+0x27/0x6d0 [ 1290.968144][T19858] kmem_cache_alloc+0x3d/0x280 [ 1290.972904][T19858] __d_alloc+0x27/0x6d0 [ 1290.977052][T19858] ? d_alloc_pseudo+0xe/0x70 [ 1290.981633][T19858] d_alloc_pseudo+0x19/0x70 [ 1290.986125][T19858] alloc_file_pseudo+0xe0/0x200 [ 1290.990964][T19858] ? alloc_empty_file_noaccount+0x80/0x80 [ 1290.996671][T19858] ? alloc_fd+0x59e/0x650 [ 1291.000985][T19858] sock_alloc_file+0xb3/0x240 [ 1291.005653][T19858] __sys_socket+0x11d/0x170 [ 1291.010147][T19858] __x64_sys_socket+0x76/0x80 [ 1291.014806][T19858] do_syscall_64+0x4c/0xa0 [ 1291.019208][T19858] ? clear_bhb_loop+0x30/0x80 [ 1291.023869][T19858] ? clear_bhb_loop+0x30/0x80 [ 1291.028531][T19858] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1291.034420][T19858] RIP: 0033:0x7f4aad88a159 [ 1291.038820][T19858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1291.058409][T19858] RSP: 002b:00007f4aabae2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1291.066811][T19858] RAX: ffffffffffffffda RBX: 00007f4aadb11fa0 RCX: 00007f4aad88a159 [ 1291.074770][T19858] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001d [ 1291.082724][T19858] RBP: 00007f4aad92106b R08: 0000000000000000 R09: 0000000000000000 [ 1291.090679][T19858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1291.098661][T19858] R13: 00007f4aadb12038 R14: 00007f4aadb11fa0 R15: 00007ffccc0bb4a8 [ 1291.106630][T19858] [ 1291.324957][T15617] usb 3-1: device descriptor read/64, error -71 [ 1291.440963][T19865] loop5: detected capacity change from 0 to 512 [ 1291.604870][T15617] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1291.717161][T19865] EXT4-fs error (device loop5): ext4_orphan_get:1436: comm syz.5.4009: bad orphan inode 16 [ 1291.824979][T15617] usb 3-1: device descriptor read/64, error -71 [ 1291.834039][T19865] ext4_test_bit(bit=15, block=18) = 1 [ 1291.900923][T19865] is_bad_inode(inode)=0 [ 1291.951831][T19865] NEXT_ORPHAN(inode)=83886080 [ 1291.958503][T15617] usb usb3-port1: attempt power cycle [ 1292.020579][T19865] max_ino=32 [ 1292.060498][T19865] i_nlink=0 [ 1292.148786][T19865] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1292.194936][T19865] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1292.395938][T15617] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1292.525059][T15617] usb 3-1: device descriptor read/8, error -71 [ 1292.815898][T15617] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1292.925322][T15617] usb 3-1: device descriptor read/8, error -71 [ 1293.067187][T15617] usb usb3-port1: unable to enumerate USB device [ 1293.171819][T19887] loop7: detected capacity change from 0 to 1024 [ 1293.234485][T19887] EXT4-fs (loop7): Mount option "dioread_nolock" incompatible with ext3 [ 1293.768826][T19891] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1293.791039][T19891] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1293.802235][T19897] netlink: 'syz.0.4018': attribute type 2 has an invalid length. [ 1294.147863][T19904] 9pnet: Insufficient options for proto=fd [ 1294.962748][T19909] loop2: detected capacity change from 0 to 512 [ 1295.186578][T19909] EXT4-fs error (device loop2): ext4_orphan_get:1436: comm syz.2.4020: bad orphan inode 16 [ 1295.263233][T19909] ext4_test_bit(bit=15, block=18) = 1 [ 1295.268928][T19909] is_bad_inode(inode)=0 [ 1295.273160][T19909] NEXT_ORPHAN(inode)=83886080 [ 1295.278308][T19909] max_ino=32 [ 1295.281587][T19909] i_nlink=0 [ 1295.295324][T19909] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1295.306689][T19909] ext4 filesystem being mounted at /263/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1295.340737][T19920] loop0: detected capacity change from 0 to 512 [ 1295.668734][T19920] EXT4-fs error (device loop0): ext4_orphan_get:1436: comm syz.0.4024: bad orphan inode 16 [ 1295.846671][T19920] ext4_test_bit(bit=15, block=18) = 1 [ 1295.970938][T19920] is_bad_inode(inode)=0 [ 1295.979900][T19920] NEXT_ORPHAN(inode)=83886080 [ 1295.986849][T19920] max_ino=32 [ 1295.990680][T19920] i_nlink=0 [ 1296.024494][T19920] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1296.083177][T19926] loop7: detected capacity change from 0 to 512 [ 1296.111611][T19920] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1296.146792][T19926] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 1296.190660][T19926] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 1296.242962][T19930] loop2: detected capacity change from 0 to 512 [ 1296.258222][T19926] EXT4-fs (loop7): 1 truncate cleaned up [ 1296.263872][T19926] EXT4-fs (loop7): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 1296.420720][T19935] loop5: detected capacity change from 0 to 128 [ 1296.472747][T19930] EXT4-fs error (device loop2): ext4_orphan_get:1436: comm syz.2.4027: bad orphan inode 16 [ 1296.512392][T19930] ext4_test_bit(bit=15, block=18) = 1 [ 1296.547444][T19930] is_bad_inode(inode)=0 [ 1296.551753][T19930] NEXT_ORPHAN(inode)=83886080 [ 1296.556540][T19930] max_ino=32 [ 1296.559788][T19930] i_nlink=0 [ 1296.565675][T19935] loop5: detected capacity change from 0 to 128 [ 1296.642803][T19930] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1296.765423][T19930] ext4 filesystem being mounted at /264/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1297.018972][ T13] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1297.354970][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 1297.551194][T19953] loop5: detected capacity change from 0 to 512 [ 1297.610755][ T13] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1297.630729][T19955] netlink: 'syz.7.4034': attribute type 2 has an invalid length. [ 1297.638983][ T13] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1297.675093][T19953] EXT4-fs error (device loop5): ext4_orphan_get:1436: comm syz.5.4033: bad orphan inode 16 [ 1297.740793][T19953] ext4_test_bit(bit=15, block=18) = 1 [ 1297.772188][T19953] is_bad_inode(inode)=0 [ 1297.792684][T19953] NEXT_ORPHAN(inode)=83886080 [ 1297.825327][T19953] max_ino=32 [ 1297.828539][T19953] i_nlink=0 [ 1298.046603][T19953] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1298.187618][T19953] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1298.294894][ T4290] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1298.525757][ T13] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1298.534704][ T4290] usb 3-1: device descriptor read/64, error -71 [ 1298.541071][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.549134][ T13] usb 1-1: Product: syz [ 1298.553302][ T13] usb 1-1: Manufacturer: syz [ 1298.557942][ T13] usb 1-1: SerialNumber: syz [ 1299.422448][T19971] tipc: Started in network mode [ 1299.427475][T19971] tipc: Node identity ac14140f, cluster identity 4711 [ 1299.438935][T19971] tipc: Enabled bearer , priority 10 [ 1299.461840][ T4290] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1300.077554][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.083898][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.090521][ T4290] usb 3-1: device descriptor read/64, error -71 [ 1300.144944][ T13] usb 1-1: 0:2 : does not exist [ 1300.226470][ T13] usb 1-1: USB disconnect, device number 74 [ 1300.242470][ T4290] usb usb3-port1: attempt power cycle [ 1300.452236][T10076] tipc: Node number set to 2886997007 [ 1300.466209][T19476] udevd[19476]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1300.684844][ T4290] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1300.718964][T19981] loop0: detected capacity change from 0 to 512 [ 1300.784876][ T4290] usb 3-1: device descriptor read/8, error -71 [ 1300.794267][T19981] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 1300.845013][T19981] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1300.888903][T19981] EXT4-fs (loop0): 1 truncate cleaned up [ 1300.907923][T19981] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 1301.441729][T19995] tipc: Enabling of bearer rejected, already enabled [ 1301.745074][T10076] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1302.784778][T10076] usb 6-1: Using ep0 maxpacket: 16 [ 1302.966612][T10076] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1303.059501][T20010] loop7: detected capacity change from 0 to 512 [ 1303.588183][T10076] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1303.662409][T20010] EXT4-fs error (device loop7): ext4_orphan_get:1436: comm syz.7.4049: bad orphan inode 16 [ 1303.673081][T20010] ext4_test_bit(bit=15, block=18) = 1 [ 1303.683167][T20010] is_bad_inode(inode)=0 [ 1303.781430][T20010] NEXT_ORPHAN(inode)=83886080 [ 1303.786594][T20010] max_ino=32 [ 1303.790330][T20010] i_nlink=0 [ 1303.801892][T20010] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1303.813497][T20010] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1304.024854][T10076] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1304.034259][T10076] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.044951][T10076] usb 6-1: Product: syz [ 1304.049133][T10076] usb 6-1: Manufacturer: syz [ 1304.061632][T10076] usb 6-1: SerialNumber: syz [ 1304.128458][T20024] loop2: detected capacity change from 0 to 256 [ 1304.309625][T20024] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x11190001, checksum : 0x1119abd0) [ 1304.320323][T20024] exFAT-fs (loop2): invalid boot region [ 1304.325977][T20024] exFAT-fs (loop2): failed to recognize exfat type [ 1305.175279][T10076] usb 6-1: 0:2 : does not exist [ 1305.220132][T10076] usb 6-1: USB disconnect, device number 2 [ 1306.080523][T20033] loop5: detected capacity change from 0 to 256 [ 1308.162181][T20038] loop2: detected capacity change from 0 to 2048 [ 1308.565554][T20038] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1308.596259][T20045] loop7: detected capacity change from 0 to 1024 [ 1309.955538][T20045] EXT4-fs (loop7): Mount option "dioread_nolock" incompatible with ext3 [ 1310.059812][T20055] loop0: detected capacity change from 0 to 512 [ 1310.067602][T20053] loop3: detected capacity change from 0 to 128 [ 1310.183933][T19476] udevd[19476]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1310.323058][T20055] EXT4-fs error (device loop0): ext4_orphan_get:1436: comm syz.0.4060: bad orphan inode 16 [ 1310.336141][T20055] ext4_test_bit(bit=15, block=18) = 1 [ 1310.341560][T20055] is_bad_inode(inode)=0 [ 1310.352201][T20055] NEXT_ORPHAN(inode)=83886080 [ 1310.358213][T20055] max_ino=32 [ 1310.361428][T20055] i_nlink=0 [ 1310.381962][T20055] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1310.422799][T20055] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1311.775003][T20065] 9pnet: Insufficient options for proto=fd [ 1312.410590][T20070] tipc: Enabling of bearer rejected, already enabled [ 1313.682438][T20085] bridge0: port 3(batadv1) entered blocking state [ 1313.718036][T20085] bridge0: port 3(batadv1) entered disabled state [ 1313.750319][T20085] device batadv1 entered promiscuous mode [ 1313.863066][T20092] loop3: detected capacity change from 0 to 256 [ 1313.962890][T20092] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x11190001, checksum : 0x1119abd0) [ 1313.973381][T20092] exFAT-fs (loop3): invalid boot region [ 1313.979059][T20092] exFAT-fs (loop3): failed to recognize exfat type [ 1314.034953][T15617] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1314.176520][T20092] loop3: detected capacity change from 0 to 128 [ 1314.210367][T20092] FAT-fs (loop3): bread failed, FSINFO block (sector = 2049) [ 1314.627987][T15616] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1314.637665][T15616] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1314.664712][T15617] usb 8-1: device descriptor read/64, error -71 [ 1315.573463][T20100] loop0: detected capacity change from 0 to 256 [ 1315.664906][T15617] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1315.698309][T20100] exFAT-fs (loop0): Invalid boot checksum (boot checksum : 0x11190001, checksum : 0x1119abd0) [ 1315.708683][T20100] exFAT-fs (loop0): invalid boot region [ 1315.714272][T20100] exFAT-fs (loop0): failed to recognize exfat type [ 1316.158363][T20099] loop5: detected capacity change from 0 to 256 [ 1316.375202][T20099] exfat: Deprecated parameter 'utf8' [ 1316.380582][T20099] exfat: Deprecated parameter 'utf8' [ 1317.324630][T15617] usb 8-1: device descriptor read/64, error -71 [ 1317.666823][T15617] usb usb8-port1: attempt power cycle [ 1317.706599][T20109] loop0: detected capacity change from 0 to 1024 [ 1317.716589][T20099] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1317.904501][T20109] EXT4-fs (loop0): Mount option "dioread_nolock" incompatible with ext3 [ 1318.114691][T20112] loop7: detected capacity change from 0 to 256 [ 1318.135541][T20114] loop3: detected capacity change from 0 to 1024 [ 1318.166562][T20112] exFAT-fs (loop7): Invalid boot checksum (boot checksum : 0x11190001, checksum : 0x1119abd0) [ 1318.176945][T20112] exFAT-fs (loop7): invalid boot region [ 1318.182488][T20112] exFAT-fs (loop7): failed to recognize exfat type [ 1319.179684][T20114] EXT4-fs (loop3): Mount option "dioread_nolock" incompatible with ext3 [ 1320.898431][T20122] 9pnet: Insufficient options for proto=fd [ 1321.334855][ T21] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1321.595071][ T21] usb 3-1: device descriptor read/64, error -71 [ 1322.271533][T20142] loop3: detected capacity change from 0 to 256 [ 1322.278312][ T21] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1322.301928][T20138] loop0: detected capacity change from 0 to 2048 [ 1323.539061][T20150] 9pnet: Insufficient options for proto=fd [ 1324.170748][T20138] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1324.185075][T20157] loop5: detected capacity change from 0 to 512 [ 1325.249368][T20164] device bridge1 entered promiscuous mode [ 1326.136655][T20157] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 1326.155264][T20157] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1326.702729][T20157] EXT4-fs (loop5): 1 truncate cleaned up [ 1326.716143][T20157] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 1326.753040][T20171] loop7: detected capacity change from 0 to 256 [ 1327.074102][T20172] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1327.166897][T20181] 9pnet: Insufficient options for proto=fd [ 1327.341052][T20172] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1328.226674][T20180] loop0: detected capacity change from 0 to 4096 [ 1328.977361][T20187] loop5: detected capacity change from 0 to 256 [ 1329.181064][T20180] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 1329.217134][T20187] exFAT-fs (loop5): Invalid boot checksum (boot checksum : 0x11190001, checksum : 0x1119abd0) [ 1329.227492][T20187] exFAT-fs (loop5): invalid boot region [ 1329.233078][T20187] exFAT-fs (loop5): failed to recognize exfat type [ 1329.383177][T20180] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1329.575317][T20187] loop5: detected capacity change from 0 to 128 [ 1329.617817][T20187] FAT-fs (loop5): bread failed, FSINFO block (sector = 2049) [ 1329.735061][T20180] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1330.154217][T20180] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 1330.154217][T20180] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1330.154217][T20180] [ 1330.175821][T20192] loop7: detected capacity change from 0 to 256 [ 1330.235926][T20180] EXT4-fs (loop0): inline encryption not supported [ 1330.270740][T20180] EXT4-fs (loop0): Ignoring removed bh option [ 1330.502603][T20180] EXT4-fs (loop0): Ignoring removed orlov option [ 1330.858934][T20197] 9pnet: Insufficient options for proto=fd [ 1331.215065][T20180] EXT4-fs: failed to create workqueue [ 1331.220467][T20180] EXT4-fs (loop0): mount failed [ 1332.973406][T20214] loop5: detected capacity change from 0 to 512 [ 1333.144876][T20214] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 1333.166197][T20214] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 1333.382681][T20214] EXT4-fs error (device loop5): ext4_orphan_get:1410: inode #13: comm syz.5.4096: iget: bad i_size value: 12154757448730 [ 1333.730473][T20214] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.4096: couldn't read orphan inode 13 (err -117) [ 1333.851172][T20225] device bridge1 entered promiscuous mode [ 1334.116600][T20214] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=á[]*:[,,errors=continue. Quota mode: writeback. [ 1334.653492][T20232] loop7: detected capacity change from 0 to 512 [ 1335.957980][T20241] device bridge1 entered promiscuous mode [ 1337.478253][T20247] device bridge2 entered promiscuous mode [ 1337.533948][T20232] fscrypt (loop7, inode 2): Error -61 getting encryption context [ 1338.043184][T20232] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -61 [ 1338.166628][T20232] EXT4-fs error (device loop7): ext4_orphan_get:1410: inode #13: comm syz.7.4098: iget: bad i_size value: 12154757448730 [ 1338.260586][T20232] EXT4-fs error (device loop7): ext4_orphan_get:1415: comm syz.7.4098: couldn't read orphan inode 13 (err -117) [ 1339.035697][T20255] loop3: detected capacity change from 0 to 256 [ 1339.156473][T20232] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=á[]*:[,,errors=continue. Quota mode: writeback. [ 1339.240947][T20250] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1339.281948][T20250] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1340.652285][T20255] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x11190001, checksum : 0x1119abd0) [ 1340.662684][T20255] exFAT-fs (loop3): invalid boot region [ 1340.668342][T20255] exFAT-fs (loop3): failed to recognize exfat type [ 1341.178114][T20261] loop2: detected capacity change from 0 to 512 [ 1341.291093][T20264] device bridge3 entered promiscuous mode [ 1341.860920][T20260] loop5: detected capacity change from 0 to 2048 [ 1341.931883][T20260] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1343.182980][T20261] EXT4-fs warning (device loop2): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop2. [ 1344.099404][T20282] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1345.190540][T20282] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1345.698856][T20276] loop0: detected capacity change from 0 to 4096 [ 1345.762619][T20291] loop7: detected capacity change from 0 to 2048 [ 1345.768860][T20290] loop2: detected capacity change from 0 to 2048 [ 1345.794930][T20276] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 1345.802819][T20293] loop3: detected capacity change from 0 to 512 [ 1345.814995][T20276] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1345.836327][T20276] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1346.229372][T20276] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 1346.229372][T20276] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1346.229372][T20276] [ 1346.451669][T20276] EXT4-fs (loop0): inline encryption not supported [ 1346.671956][T20276] EXT4-fs (loop0): Ignoring removed bh option [ 1346.694507][T20291] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1346.698120][T20276] EXT4-fs (loop0): Ignoring removed orlov option [ 1346.714063][T20293] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 1346.725182][T20276] EXT4-fs: failed to create workqueue [ 1346.732133][T20276] EXT4-fs (loop0): mount failed [ 1346.740098][T20303] loop2: detected capacity change from 0 to 256 [ 1346.846964][T20293] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1347.013110][T20306] loop5: detected capacity change from 0 to 2048 [ 1347.371558][T20303] 9pnet: Insufficient options for proto=fd [ 1347.578859][T20306] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1349.403351][T20324] device bridge4 entered promiscuous mode [ 1353.172027][T20348] loop3: detected capacity change from 0 to 256 [ 1353.943501][T20353] loop5: detected capacity change from 0 to 4096 [ 1355.159664][T20357] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4128'. [ 1355.186218][T20357] input: syz0 as /devices/virtual/input/input15 [ 1356.124539][T20362] loop0: detected capacity change from 0 to 128 [ 1356.145357][T20353] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 1356.156517][T20353] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1356.163398][T20353] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1356.194396][T20353] EXT4-fs (loop5): Mount option "noacl" will be removed by 3.5 [ 1356.194396][T20353] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1356.194396][T20353] [ 1356.194454][T20353] EXT4-fs (loop5): inline encryption not supported [ 1356.194475][T20353] EXT4-fs (loop5): Ignoring removed bh option [ 1356.194501][T20353] EXT4-fs (loop5): Ignoring removed orlov option [ 1356.231681][T20365] loop2: detected capacity change from 0 to 256 [ 1356.249791][T20362] loop0: detected capacity change from 0 to 128 [ 1356.265350][T20353] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a84e4018, mo2=0002] [ 1356.265492][T20353] System zones: 0-5 [ 1356.276389][T20353] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,test_dummy_encryption,test_dummy_encryption,noacl,journal_dev=0x0000000000000100,inlinecrypt,usrquota,bh,orlov,,errors=continue. Quota mode: writeback. [ 1356.978385][T20373] 9pnet: Insufficient options for proto=fd [ 1361.187891][T20381] loop0: detected capacity change from 0 to 2048 [ 1362.019392][T20385] device bridge2 entered promiscuous mode [ 1362.055172][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.055233][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.365914][T20387] loop3: detected capacity change from 0 to 4096 [ 1363.176410][T20387] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 1363.653779][T20387] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1363.723843][T20381] EXT4-fs warning (device loop0): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop0. [ 1363.747995][T20387] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1363.755260][T20387] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 1363.755260][T20387] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1363.755260][T20387] [ 1363.773117][T20387] EXT4-fs (loop3): inline encryption not supported [ 1363.800259][T20387] EXT4-fs (loop3): Ignoring removed bh option [ 1363.813683][T20387] EXT4-fs (loop3): Ignoring removed orlov option [ 1363.826220][T20397] loop2: detected capacity change from 0 to 2048 [ 1364.406393][T20387] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a84e4018, mo2=0002] [ 1364.537583][T20387] System zones: 0-5 [ 1364.611488][T20387] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,test_dummy_encryption,test_dummy_encryption,noacl,journal_dev=0x0000000000000100,inlinecrypt,usrquota,bh,orlov,,errors=continue. Quota mode: writeback. [ 1364.654190][T20397] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1365.269965][T20409] device bridge1 entered promiscuous mode [ 1367.905016][T20421] device bridge2 entered promiscuous mode [ 1370.941231][T20431] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1372.190630][T20431] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1372.977524][T20446] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1373.771673][T20451] loop7: detected capacity change from 0 to 512 [ 1374.190525][T20446] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1375.258666][T20451] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1375.291178][T20454] loop2: detected capacity change from 0 to 4096 [ 1375.321376][T20451] EXT4-fs error (device loop7): ext4_orphan_get:1410: inode #11: comm syz.7.4149: casefold flag without casefold feature [ 1375.344266][T20451] EXT4-fs error (device loop7): ext4_orphan_get:1415: comm syz.7.4149: couldn't read orphan inode 11 (err -117) [ 1375.360848][T20460] loop5: detected capacity change from 0 to 4096 [ 1375.385088][T20451] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,nogrpid,,errors=continue. Quota mode: none. [ 1375.471441][T20454] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 1375.538731][T20454] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1375.575067][T20460] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 1375.645515][T20454] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1375.652297][T20454] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 1375.652297][T20454] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1375.652297][T20454] [ 1375.673425][T20460] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1375.856697][T20454] EXT4-fs (loop2): inline encryption not supported [ 1375.863255][T20454] EXT4-fs (loop2): Ignoring removed bh option [ 1375.869401][T20454] EXT4-fs (loop2): Ignoring removed orlov option [ 1375.871801][T20460] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1375.902782][T20468] loop0: detected capacity change from 0 to 512 [ 1375.931787][T20460] EXT4-fs (loop5): Mount option "noacl" will be removed by 3.5 [ 1375.931787][T20460] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1375.931787][T20460] [ 1376.615630][T20460] EXT4-fs (loop5): inline encryption not supported [ 1376.626577][T20454] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a84e4018, mo2=0002] [ 1376.641521][T20468] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1376.671789][T20460] EXT4-fs (loop5): Ignoring removed bh option [ 1376.681952][T20454] System zones: 0-5 [ 1376.708381][T20468] EXT4-fs (loop0): 1 truncate cleaned up [ 1376.715046][T20460] EXT4-fs (loop5): Ignoring removed orlov option [ 1376.732384][T20454] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,test_dummy_encryption,test_dummy_encryption,noacl,journal_dev=0x0000000000000100,inlinecrypt,usrquota,bh,orlov,,errors=continue. Quota mode: writeback. [ 1376.768380][T20468] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 1376.798175][T20460] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a84e4018, mo2=0002] [ 1376.837604][T20460] System zones: 0-5 [ 1376.860382][T20460] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,test_dummy_encryption,test_dummy_encryption,noacl,journal_dev=0x0000000000000100,inlinecrypt,usrquota,bh,orlov,,errors=continue. Quota mode: writeback. [ 1377.284839][T20462] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 1378.344839][T15617] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1378.571047][T20478] loop2: detected capacity change from 0 to 2048 [ 1378.704351][T20480] loop7: detected capacity change from 0 to 2048 [ 1378.746769][T20478] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1379.063805][T20480] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1380.462256][T15617] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1380.544839][T15617] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1380.589766][T15617] usb 1-1: can't read configurations, error -71 [ 1381.255173][T20501] loop2: detected capacity change from 0 to 512 [ 1381.333510][T20503] input: syz0 as /devices/virtual/input/input16 [ 1381.403132][T20492] chnl_net:caif_netlink_parms(): no params data found [ 1381.409598][T20501] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 1381.483933][T20501] ext4 filesystem being mounted at /292/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1382.214851][T20492] bridge0: port 1(bridge_slave_0) entered blocking state [ 1382.252879][T20492] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.261264][T20492] device bridge_slave_0 entered promiscuous mode [ 1382.296016][T20492] bridge0: port 2(bridge_slave_1) entered blocking state [ 1382.314891][ T1336] Bluetooth: hci0: command 0x0409 tx timeout [ 1382.325557][T20492] bridge0: port 2(bridge_slave_1) entered disabled state [ 1382.356467][T20492] device bridge_slave_1 entered promiscuous mode [ 1382.423384][T20522] loop7: detected capacity change from 0 to 2048 [ 1382.472678][T20492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1382.534298][T20492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1382.638970][T20492] team0: Port device team_slave_0 added [ 1382.647021][T20492] team0: Port device team_slave_1 added [ 1384.127373][T20522] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1384.184183][T20536] loop2: detected capacity change from 0 to 512 [ 1384.493372][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 1384.531703][T20536] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 1384.685957][T20536] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 1384.694140][T20536] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #13: comm syz.2.4166: iget: bad i_size value: 12154757448730 [ 1384.754733][T20536] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.4166: couldn't read orphan inode 13 (err -117) [ 1384.808095][T20544] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1384.848762][T20536] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=á[]*:[,,errors=continue. Quota mode: writeback. [ 1384.918564][T20544] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1385.149312][T20492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1385.181550][T20492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1385.288014][T20492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1385.301339][T20492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1385.308539][T20492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1385.383685][T20492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1385.407716][T20554] loop7: detected capacity change from 0 to 1024 [ 1385.467655][T20554] EXT4-fs (loop7): Mount option "dioread_nolock" incompatible with ext3 [ 1385.529915][T20492] device hsr_slave_0 entered promiscuous mode [ 1385.545406][T20492] device hsr_slave_1 entered promiscuous mode [ 1385.575389][T20492] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1385.582950][T20492] Cannot create hsr debugfs directory [ 1385.847316][T20561] 9pnet: Insufficient options for proto=fd [ 1387.087251][ T4787] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.155005][ T1336] Bluetooth: hci0: command 0x040f tx timeout [ 1387.228052][ T4787] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.339927][ T4787] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.702687][ T4787] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.097336][T20570] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1388.105474][T20570] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1388.280932][ T4787] tipc: Disabling bearer [ 1388.286412][ T4787] tipc: Left network mode [ 1388.326270][T20492] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1388.363691][T20579] loop5: detected capacity change from 0 to 512 [ 1388.390976][T20492] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1388.421649][T20492] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1388.447619][T20492] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1388.922197][T20579] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 1389.108650][T20579] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 1389.141981][T20579] EXT4-fs error (device loop5): ext4_orphan_get:1410: inode #13: comm syz.5.4176: iget: bad i_size value: 12154757448730 [ 1389.195408][ T1336] Bluetooth: hci0: command 0x0419 tx timeout [ 1389.224551][T20579] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.4176: couldn't read orphan inode 13 (err -117) [ 1389.246726][T20579] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=á[]*:[,,errors=continue. Quota mode: writeback. [ 1389.424237][T20492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1389.527640][T20492] 8021q: adding VLAN 0 to HW filter on device team0 [ 1389.539272][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1389.555303][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1389.579461][T20602] loop0: detected capacity change from 0 to 512 [ 1389.595359][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1389.615540][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1389.644650][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.647033][T20602] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1389.651708][ T4332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1389.917358][T20602] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #11: comm syz.0.4180: casefold flag without casefold feature [ 1390.167052][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1390.198333][T20602] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.4180: couldn't read orphan inode 11 (err -117) [ 1390.323617][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1390.386816][T20602] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,nogrpid,,errors=continue. Quota mode: none. [ 1390.408587][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1390.455502][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 1390.462616][ T4332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1390.537185][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1390.670526][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1392.159119][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1392.170372][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1392.276781][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1392.502588][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1392.522811][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1392.540351][T20624] loop7: detected capacity change from 0 to 256 [ 1392.572174][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1392.720913][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1392.814097][T20630] 9pnet: Insufficient options for proto=fd [ 1393.167875][T20492] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1394.293832][T15700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1394.306103][T15700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1394.404066][T20648] loop0: detected capacity change from 0 to 1024 [ 1394.496444][T20648] EXT4-fs (loop0): Mount option "dioread_nolock" incompatible with ext3 [ 1394.555051][T20652] loop2: detected capacity change from 0 to 512 [ 1394.584899][T20188] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1394.803923][T20652] EXT4-fs error (device loop2): ext4_orphan_get:1436: comm syz.2.4190: bad orphan inode 16 [ 1394.825030][T20652] ext4_test_bit(bit=15, block=18) = 1 [ 1394.830434][T20652] is_bad_inode(inode)=0 [ 1394.835061][T20652] NEXT_ORPHAN(inode)=83886080 [ 1394.839746][T20652] max_ino=32 [ 1394.842941][T20652] i_nlink=0 [ 1394.848422][T20652] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1394.860378][T20652] ext4 filesystem being mounted at /297/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1394.885362][T20188] usb 8-1: device descriptor read/64, error -71 [ 1394.980341][T20666] 9pnet: Insufficient options for proto=fd [ 1395.564922][T20188] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1395.664555][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1395.682443][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1395.709065][T20492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1395.815639][T20188] usb 8-1: device descriptor read/64, error -71 [ 1395.956446][T20188] usb usb8-port1: attempt power cycle [ 1396.371368][ T4787] device hsr_slave_0 left promiscuous mode [ 1396.433660][ T4787] device hsr_slave_1 left promiscuous mode [ 1396.559661][T20686] loop5: detected capacity change from 0 to 256 [ 1396.576798][ T4787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1396.584262][ T4787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1396.588600][T20689] loop2: detected capacity change from 0 to 512 [ 1396.766185][ T4787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1396.774378][ T4787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1396.799119][ T4787] device bridge_slave_1 left promiscuous mode [ 1396.814768][ T4787] bridge0: port 2(bridge_slave_1) entered disabled state [ 1396.899259][T20697] 9pnet: Insufficient options for proto=fd [ 1397.545559][ T4787] device bridge_slave_0 left promiscuous mode [ 1397.561992][ T4787] bridge0: port 1(bridge_slave_0) entered disabled state [ 1397.605516][ T4787] device veth1_macvtap left promiscuous mode [ 1397.624803][ T4787] device veth0_macvtap left promiscuous mode [ 1397.641966][ T4787] device veth1_vlan left promiscuous mode [ 1397.658420][ T4787] device veth0_vlan left promiscuous mode [ 1397.716535][T20689] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 1397.754816][T20689] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 1397.771939][T20689] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #13: comm syz.2.4193: iget: bad i_size value: 12154757448730 [ 1397.838549][T20689] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.4193: couldn't read orphan inode 13 (err -117) [ 1397.884240][T20689] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=á[]*:[,,errors=continue. Quota mode: writeback. [ 1401.248433][T20722] FAULT_INJECTION: forcing a failure. [ 1401.248433][T20722] name failslab, interval 1, probability 0, space 0, times 0 [ 1401.313070][T20722] CPU: 0 PID: 20722 Comm: syz.5.4204 Not tainted syzkaller #0 [ 1401.320556][T20722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1401.330601][T20722] Call Trace: [ 1401.333868][T20722] [ 1401.336785][T20722] dump_stack_lvl+0x188/0x250 [ 1401.341455][T20722] ? show_regs_print_info+0x20/0x20 [ 1401.346638][T20722] ? load_image+0x410/0x410 [ 1401.351129][T20722] ? __lock_acquire+0x7b50/0x7b50 [ 1401.356145][T20722] should_fail+0x383/0x4b0 [ 1401.360559][T20722] should_failslab+0x5/0x20 [ 1401.365048][T20722] slab_pre_alloc_hook+0x51/0xc0 [ 1401.369974][T20722] ? __alloc_file+0x25/0x240 [ 1401.374549][T20722] kmem_cache_alloc+0x3d/0x280 [ 1401.379298][T20722] __alloc_file+0x25/0x240 [ 1401.383708][T20722] alloc_empty_file+0x90/0x180 [ 1401.388460][T20722] alloc_file+0x5c/0x510 [ 1401.392685][T20722] ? do_raw_spin_unlock+0x11d/0x230 [ 1401.397888][T20722] alloc_file_pseudo+0x180/0x200 [ 1401.402864][T20722] ? alloc_empty_file_noaccount+0x80/0x80 [ 1401.408572][T20722] ? alloc_fd+0x59e/0x650 [ 1401.412888][T20722] sock_alloc_file+0xb3/0x240 [ 1401.417554][T20722] __sys_socket+0x11d/0x170 [ 1401.422055][T20722] __x64_sys_socket+0x76/0x80 [ 1401.426721][T20722] do_syscall_64+0x4c/0xa0 [ 1401.431122][T20722] ? clear_bhb_loop+0x30/0x80 [ 1401.435786][T20722] ? clear_bhb_loop+0x30/0x80 [ 1401.440449][T20722] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1401.446327][T20722] RIP: 0033:0x7f2c26e59159 [ 1401.450739][T20722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1401.470374][T20722] RSP: 002b:00007f2c250b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1401.478774][T20722] RAX: ffffffffffffffda RBX: 00007f2c270e0fa0 RCX: 00007f2c26e59159 [ 1401.486729][T20722] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001d [ 1401.494684][T20722] RBP: 00007f2c26ef006b R08: 0000000000000000 R09: 0000000000000000 [ 1401.502638][T20722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1401.510596][T20722] R13: 00007f2c270e1038 R14: 00007f2c270e0fa0 R15: 00007ffdb98d56e8 [ 1401.518561][T20722] [ 1401.936781][T20729] loop2: detected capacity change from 0 to 512 [ 1401.949077][T20729] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1402.010623][T20729] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #11: comm syz.2.4205: casefold flag without casefold feature [ 1402.040173][T20729] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.4205: couldn't read orphan inode 11 (err -117) [ 1402.064536][T20729] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,nogrpid,,errors=continue. Quota mode: none. [ 1402.093648][ T4787] team0 (unregistering): Port device team_slave_1 removed [ 1402.107257][ T4787] team0 (unregistering): Port device team_slave_0 removed [ 1402.132843][ T4787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1402.191933][ T4787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1402.330261][ T4787] bond0 (unregistering): Released all slaves [ 1402.668109][T20731] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 1403.124755][T20751] loop7: detected capacity change from 0 to 256 [ 1405.165552][T20754] loop0: detected capacity change from 0 to 128 [ 1405.192689][T20751] exfat: Deprecated parameter 'utf8' [ 1405.198542][T20751] exfat: Deprecated parameter 'utf8' [ 1405.204198][T20751] exfat: Bad value for 'allow_utime' [ 1406.046639][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1406.058844][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1406.093833][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1406.103751][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1406.126375][T20492] device veth0_vlan entered promiscuous mode [ 1406.138555][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1406.152587][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1406.229542][T20754] loop0: detected capacity change from 0 to 128 [ 1406.243331][T20492] device veth1_vlan entered promiscuous mode [ 1406.280526][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1406.289251][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1406.297627][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1406.307085][T20763] loop5: detected capacity change from 0 to 1024 [ 1406.459451][T20768] loop2: detected capacity change from 0 to 512 [ 1406.701136][T20763] EXT4-fs (loop5): Mount option "dioread_nolock" incompatible with ext3 [ 1406.714822][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1406.762057][T20768] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 1406.774344][T20492] device veth0_macvtap entered promiscuous mode [ 1406.790272][T20492] device veth1_macvtap entered promiscuous mode [ 1406.815925][T20492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1406.826701][T20492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.836888][T20492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1406.847516][T20492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.862341][T20492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1406.897969][T20768] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1406.909152][T20492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.944679][T20492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1406.989947][T20492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.020811][T20492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1407.042721][T20492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.054215][T20492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1407.085222][T15346] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1407.801367][T15346] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1407.809585][T15346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1407.818186][T15346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1407.831677][T20492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1407.958294][T20492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.998418][T20492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1408.040543][T20492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1408.120382][T20762] 9pnet: Insufficient options for proto=fd [ 1408.138294][T20492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1408.148747][T20492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1408.158627][T20492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1408.169060][T20492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1408.178890][T20492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1408.189430][T20492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1408.200971][T20492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1408.246069][T20492] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.425284][T20492] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.434177][T20492] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.460635][T20492] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.535277][T20799] loop7: detected capacity change from 0 to 512 [ 1408.542141][T15702] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1408.915644][T15702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1409.118793][T20799] EXT4-fs error (device loop7): ext4_orphan_get:1436: comm syz.7.4215: bad orphan inode 16 [ 1409.169402][T20799] ext4_test_bit(bit=15, block=18) = 1 [ 1409.180357][ T4256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1409.205779][ T4256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1409.213212][T20799] is_bad_inode(inode)=0 [ 1409.265688][T20799] NEXT_ORPHAN(inode)=83886080 [ 1409.296368][T20799] max_ino=32 [ 1409.309856][ T4256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1409.325519][T20799] i_nlink=0 [ 1409.332925][ T4256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1409.353770][T20799] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1409.431990][T20799] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1410.082137][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1410.097225][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1410.192361][T20815] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4219'. [ 1410.233529][T20819] loop7: detected capacity change from 0 to 1024 [ 1410.297612][T20815] input: syz0 as /devices/virtual/input/input19 [ 1410.311957][T20824] loop2: detected capacity change from 0 to 128 [ 1410.516681][T20819] EXT4-fs (loop7): Mount option "dioread_nolock" incompatible with ext3 [ 1410.987046][T20824] loop2: detected capacity change from 0 to 128 [ 1411.739138][T20838] 9pnet: Insufficient options for proto=fd [ 1413.240608][T20848] loop2: detected capacity change from 0 to 256 [ 1414.109853][T20868] 9pnet: Insufficient options for proto=fd [ 1414.301281][T20876] loop0: detected capacity change from 0 to 128 [ 1415.210267][T20884] loop5: detected capacity change from 0 to 1024 [ 1415.349931][T20884] EXT4-fs (loop5): Mount option "dioread_nolock" incompatible with ext3 [ 1415.722738][T20892] tipc: Started in network mode [ 1415.727706][T20892] tipc: Node identity ac14140f, cluster identity 4711 [ 1415.734948][T20892] tipc: Enabled bearer , priority 10 [ 1416.173131][T20896] loop2: detected capacity change from 0 to 512 [ 1417.062107][ T21] tipc: Node number set to 2886997007 [ 1417.390847][T20910] 9pnet: Insufficient options for proto=fd [ 1419.162002][T20896] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 1420.157806][T20896] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 1420.189739][T20896] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #13: comm syz.2.4233: iget: bad i_size value: 12154757448730 [ 1421.154459][T20896] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.4233: couldn't read orphan inode 13 (err -117) [ 1421.536735][T20896] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=á[]*:[,,errors=continue. Quota mode: writeback. [ 1421.749454][T20925] loop8: detected capacity change from 0 to 512 [ 1422.160112][T20925] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1422.561923][T20925] EXT4-fs (loop8): 1 truncate cleaned up [ 1422.601977][T20925] EXT4-fs (loop8): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 1422.632439][T20934] loop0: detected capacity change from 0 to 256 [ 1423.095341][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.102007][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.152167][ T4662] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1426.650794][T20953] loop5: detected capacity change from 0 to 256 [ 1428.193439][T20953] exfat: Deprecated parameter 'utf8' [ 1428.199210][T20953] exfat: Deprecated parameter 'utf8' [ 1428.204925][T20953] exfat: Bad value for 'allow_utime' [ 1429.185007][T20956] loop0: detected capacity change from 0 to 1024 [ 1429.438699][T20956] EXT4-fs (loop0): Mount option "dioread_nolock" incompatible with ext3 [ 1430.000785][T20976] 9pnet: Insufficient options for proto=fd [ 1430.792518][T20980] loop2: detected capacity change from 0 to 512 [ 1430.918398][T20982] loop0: detected capacity change from 0 to 2048 [ 1430.975504][T20980] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 1430.998045][T20980] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 1431.011645][T20980] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #13: comm syz.2.4253: iget: bad i_size value: 12154757448730 [ 1431.085282][T20980] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.4253: couldn't read orphan inode 13 (err -117) [ 1431.099034][T20982] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1431.139626][T20993] loop7: detected capacity change from 0 to 16 [ 1431.153060][T20980] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=á[]*:[,,errors=continue. Quota mode: writeback. [ 1431.182633][T20993] erofs: (device loop7): mounted with root inode @ nid 36. [ 1431.196588][T20993] attempt to access beyond end of device [ 1431.196588][T20993] loop7: rw=524288, want=1342177304, limit=16 [ 1431.208645][T20993] attempt to access beyond end of device [ 1431.208645][T20993] loop7: rw=0, want=1342177280, limit=16 [ 1431.223480][ T25] audit: type=1800 audit(1790948423.617:6): pid=20993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4255" name="file1" dev="loop7" ino=86 res=0 errno=0 [ 1431.252082][T20993] attempt to access beyond end of device [ 1431.252082][T20993] loop7: rw=524288, want=1342179432, limit=16 [ 1431.264200][T20993] attempt to access beyond end of device [ 1431.264200][T20993] loop7: rw=524288, want=1342179832, limit=16 [ 1432.162113][T21011] loop0: detected capacity change from 0 to 256 [ 1432.505828][T21017] 9pnet: Insufficient options for proto=fd [ 1436.729048][T21058] loop8: detected capacity change from 0 to 16 [ 1436.814856][T21058] erofs: (device loop8): mounted with root inode @ nid 36. [ 1438.045613][T21058] attempt to access beyond end of device [ 1438.045613][T21058] loop8: rw=524288, want=1342177304, limit=16 [ 1438.058854][T21058] attempt to access beyond end of device [ 1438.058854][T21058] loop8: rw=0, want=1342177280, limit=16 [ 1438.073497][ T25] audit: type=1800 audit(1790948430.467:7): pid=21058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4268" name="file1" dev="loop8" ino=86 res=0 errno=0 [ 1438.773441][T21082] loop0: detected capacity change from 0 to 256 [ 1439.207721][T21082] exfat: Deprecated parameter 'utf8' [ 1439.213111][T21082] exfat: Deprecated parameter 'utf8' [ 1439.218795][T21082] exfat: Bad value for 'allow_utime' [ 1442.403391][T21124] loop7: detected capacity change from 0 to 512 [ 1442.476710][T21124] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1442.610799][T21124] EXT4-fs (loop7): 1 truncate cleaned up [ 1442.616589][T21124] EXT4-fs (loop7): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 1442.733309][T21127] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1442.762607][T21127] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1443.019929][T21140] loop2: detected capacity change from 0 to 256 [ 1443.375415][T21142] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4285'. [ 1444.165544][T21140] exfat: Deprecated parameter 'utf8' [ 1444.171122][T21140] exfat: Deprecated parameter 'utf8' [ 1444.176793][T21140] exfat: Bad value for 'allow_utime' [ 1445.144725][ T1336] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1445.312533][T21154] loop5: detected capacity change from 0 to 512 [ 1445.410885][T21154] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1445.484962][T21157] loop0: detected capacity change from 0 to 128 [ 1445.504953][T21160] input: syz0 as /devices/virtual/input/input21 [ 1445.514024][T21154] EXT4-fs (loop5): 1 truncate cleaned up [ 1445.578982][T21154] EXT4-fs (loop5): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 1445.674981][T21157] loop0: detected capacity change from 0 to 128 [ 1445.747019][ T1336] usb 8-1: device not accepting address 12, error -71 [ 1445.857761][T21178] loop8: detected capacity change from 0 to 16 [ 1445.921541][T21178] erofs: (device loop8): mounted with root inode @ nid 36. [ 1445.936776][ T4662] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1445.955426][T21171] attempt to access beyond end of device [ 1445.955426][T21171] loop8: rw=524288, want=1342177304, limit=16 [ 1445.967082][T21171] attempt to access beyond end of device [ 1445.967082][T21171] loop8: rw=0, want=1342177280, limit=16 [ 1445.979306][ T25] audit: type=1800 audit(1790948438.377:8): pid=21171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4291" name="file1" dev="loop8" ino=86 res=0 errno=0 [ 1446.630439][T21188] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1446.694950][T21188] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1446.903781][T21201] loop8: detected capacity change from 0 to 256 [ 1447.047655][T21201] exfat: Deprecated parameter 'utf8' [ 1447.053050][T21201] exfat: Deprecated parameter 'utf8' [ 1447.058685][T21201] exfat: Bad value for 'allow_utime' [ 1448.363578][T21214] loop8: detected capacity change from 0 to 256 [ 1450.193245][T21214] exfat: Deprecated parameter 'utf8' [ 1450.198707][T21214] exfat: Deprecated parameter 'utf8' [ 1450.204364][T21214] exfat: Bad value for 'allow_utime' [ 1451.140370][T21224] tipc: Enabling of bearer rejected, already enabled [ 1451.605826][ T4662] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1451.664751][ T4662] usb 6-1: unable to read config index 0 descriptor/start: -32 [ 1451.672378][ T4662] usb 6-1: chopping to 0 config(s) [ 1451.677608][ T4662] usb 6-1: can't read configurations, error -32 [ 1451.804310][T21229] loop8: detected capacity change from 0 to 1024 [ 1451.874763][ T4662] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1451.894856][T21229] EXT4-fs (loop8): Mount option "dioread_nolock" incompatible with ext3 [ 1452.054710][ T4662] usb 6-1: device descriptor read/64, error -32 [ 1452.250872][ T4662] usb usb6-port1: attempt power cycle [ 1452.658398][T21228] 9pnet: Insufficient options for proto=fd [ 1452.827158][ T4662] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1452.924707][ T4662] usb 6-1: device descriptor read/8, error -32 [ 1453.195521][ T4662] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1453.208212][T21247] loop8: detected capacity change from 0 to 512 [ 1453.284832][ T4662] usb 6-1: device descriptor read/8, error -71 [ 1453.304277][T21247] fscrypt (loop8, inode 2): Error -61 getting encryption context [ 1453.335404][T21247] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -61 [ 1453.504613][T21247] EXT4-fs error (device loop8): ext4_orphan_get:1410: inode #13: comm syz.8.4303: iget: bad i_size value: 12154757448730 [ 1453.772716][T21247] EXT4-fs error (device loop8): ext4_orphan_get:1415: comm syz.8.4303: couldn't read orphan inode 13 (err -117) [ 1453.982841][ T4662] usb usb6-port1: unable to enumerate USB device [ 1453.993301][T21247] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=á[]*:[,,errors=continue. Quota mode: writeback. [ 1455.722317][T21276] loop7: detected capacity change from 0 to 512 [ 1457.853086][T21276] fscrypt (loop7, inode 2): Error -61 getting encryption context [ 1457.864152][T21276] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -61 [ 1457.875119][T21276] EXT4-fs error (device loop7): ext4_orphan_get:1410: inode #13: comm syz.7.4313: iget: bad i_size value: 12154757448730 [ 1457.890107][T21294] loop8: detected capacity change from 0 to 1024 [ 1457.945235][T21276] EXT4-fs error (device loop7): ext4_orphan_get:1415: comm syz.7.4313: couldn't read orphan inode 13 (err -117) [ 1458.004922][ T26] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1458.175102][T21276] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=á[]*:[,,errors=continue. Quota mode: writeback. [ 1458.543744][ T26] usb 3-1: device descriptor read/64, error -71 [ 1459.133683][T21294] EXT4-fs (loop8): Mount option "dioread_nolock" incompatible with ext3 [ 1459.161696][T21306] loop2: detected capacity change from 0 to 512 [ 1459.701552][T21315] 9pnet: Insufficient options for proto=fd [ 1459.808644][T21306] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 1459.830388][T21306] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 1459.876733][T21306] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #13: comm syz.2.4319: iget: bad i_size value: 12154757448730 [ 1459.891597][T21306] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.4319: couldn't read orphan inode 13 (err -117) [ 1459.905568][T21306] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=á[]*:[,,errors=continue. Quota mode: writeback. [ 1460.265319][T21330] tipc: Started in network mode [ 1460.270272][T21330] tipc: Node identity ac14140f, cluster identity 4711 [ 1460.279312][T21330] tipc: Enabled bearer , priority 10 [ 1460.676692][T21331] loop0: detected capacity change from 0 to 16 [ 1460.989898][T21331] erofs: (device loop0): mounted with root inode @ nid 36. [ 1461.110868][T21331] attempt to access beyond end of device [ 1461.110868][T21331] loop0: rw=524288, want=1342177304, limit=16 [ 1461.136388][T21335] loop7: detected capacity change from 0 to 1024 [ 1461.373123][T21335] EXT4-fs (loop7): Mount option "dioread_nolock" incompatible with ext3 [ 1461.701119][T21331] attempt to access beyond end of device [ 1461.701119][T21331] loop0: rw=0, want=1342177280, limit=16 [ 1461.895331][ T4230] tipc: Node number set to 2886997007 [ 1461.903111][ T25] audit: type=1800 audit(1790948454.297:9): pid=21331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4322" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 1462.695645][T21353] 9pnet: Insufficient options for proto=fd [ 1463.777573][T21361] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4326'. [ 1466.442827][T21396] loop7: detected capacity change from 0 to 512 [ 1466.563357][T21396] fscrypt (loop7, inode 2): Error -61 getting encryption context [ 1466.576724][T21396] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -61 [ 1466.585629][T21396] EXT4-fs error (device loop7): ext4_orphan_get:1410: inode #13: comm syz.7.4333: iget: bad i_size value: 12154757448730 [ 1467.466904][T21396] EXT4-fs error (device loop7): ext4_orphan_get:1415: comm syz.7.4333: couldn't read orphan inode 13 (err -117) [ 1467.522540][T21396] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=á[]*:[,,errors=continue. Quota mode: writeback. [ 1467.677579][T21416] loop0: detected capacity change from 0 to 512 [ 1467.767955][T21416] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1468.057891][T21413] md/raid0:md0: remove inactive devices before converting to RAID0 [ 1468.116124][T21416] EXT4-fs (loop0): 1 truncate cleaned up [ 1468.186964][T21416] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 1468.570941][T21413] md: pers->run() failed ... [ 1470.107264][ T1336] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1470.306572][T21449] tipc: Enabling of bearer rejected, already enabled [ 1470.566199][ T4298] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1470.824880][ T4298] usb 3-1: device descriptor read/64, error -71 [ 1471.103755][T21464] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4346'. [ 1471.115188][ T4298] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1471.355482][T21471] loop5: detected capacity change from 0 to 16 [ 1471.364885][ T4298] usb 3-1: device descriptor read/64, error -71 [ 1471.393304][T21471] erofs: (device loop5): mounted with root inode @ nid 36. [ 1471.437966][T21471] attempt to access beyond end of device [ 1471.437966][T21471] loop5: rw=524288, want=1342177304, limit=16 [ 1471.464243][T21471] attempt to access beyond end of device [ 1471.464243][T21471] loop5: rw=0, want=1342177280, limit=16 [ 1471.485700][ T25] audit: type=1800 audit(1790948463.887:10): pid=21471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4347" name="file1" dev="loop5" ino=86 res=0 errno=0 [ 1471.504693][ T1336] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1471.505878][ T4298] usb usb3-port1: attempt power cycle [ 1471.574717][ T1336] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1471.582309][ T1336] usb 1-1: can't read configurations, error -71 [ 1472.672395][T21502] loop2: detected capacity change from 0 to 512 [ 1472.681758][T21499] loop7: detected capacity change from 0 to 16 [ 1472.694389][T21503] md: could not open device unknown-block(1,1). [ 1472.735421][T21503] md/raid0:md0: remove inactive devices before converting to RAID0 [ 1472.776009][T21504] loop8: detected capacity change from 0 to 2048 [ 1472.783481][T21502] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 1472.814947][T21499] erofs: (device loop7): mounted with root inode @ nid 36. [ 1472.826610][T21499] attempt to access beyond end of device [ 1472.826610][T21499] loop7: rw=524288, want=1342177304, limit=16 [ 1472.840042][T21499] attempt to access beyond end of device [ 1472.840042][T21499] loop7: rw=0, want=1342177280, limit=16 [ 1472.844229][T21502] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 1472.851757][ T25] audit: type=1800 audit(1790948465.257:11): pid=21499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4352" name="file1" dev="loop7" ino=86 res=0 errno=0 [ 1472.869691][T21502] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #13: comm syz.2.4351: iget: bad i_size value: 12154757448730 [ 1472.900856][T21499] attempt to access beyond end of device [ 1472.900856][T21499] loop7: rw=524288, want=1342179832, limit=16 [ 1472.934768][T21502] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.4351: couldn't read orphan inode 13 (err -117) [ 1472.955463][T21503] md: pers->run() failed ... [ 1472.982113][T21504] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1473.000790][T21502] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=á[]*:[,,errors=continue. Quota mode: writeback. [ 1473.252583][T21515] tipc: Enabling of bearer rejected, already enabled [ 1473.790834][T21535] md/raid:md0: not clean -- starting background reconstruction [ 1474.545730][T21546] loop2: detected capacity change from 0 to 512 [ 1474.571504][T21535] md/raid:md0: couldn't allocate thread. [ 1474.612847][T21550] loop7: detected capacity change from 0 to 512 [ 1474.702115][T21546] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1474.740237][T21546] EXT4-fs (loop2): 1 truncate cleaned up [ 1474.793106][T21546] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 1474.812459][T21550] fscrypt (loop7, inode 2): Error -61 getting encryption context [ 1474.847775][T21550] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -61 [ 1474.885480][T21535] md: pers->run() failed ... [ 1474.890735][T21550] EXT4-fs error (device loop7): ext4_orphan_get:1410: inode #13: comm syz.7.4362: iget: bad i_size value: 12154757448730 [ 1474.957916][T21550] EXT4-fs error (device loop7): ext4_orphan_get:1415: comm syz.7.4362: couldn't read orphan inode 13 (err -117) [ 1475.003584][T21550] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=á[]*:[,,errors=continue. Quota mode: writeback. [ 1475.334748][ T4231] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1476.934777][ T4231] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1477.004682][ T4231] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1477.012298][ T4231] usb 3-1: can't read configurations, error -71 [ 1477.169025][T21602] tipc: Enabling of bearer rejected, already enabled [ 1477.347132][T21607] loop5: detected capacity change from 0 to 1024 [ 1477.394874][T21607] EXT4-fs (loop5): Mount option "dioread_nolock" incompatible with ext3 [ 1477.827476][T21618] 9pnet: Insufficient options for proto=fd [ 1478.526882][T21621] loop2: detected capacity change from 0 to 1024 [ 1478.568244][T21623] loop5: detected capacity change from 0 to 512 [ 1478.654635][T21621] EXT4-fs (loop2): Mount option "dioread_nolock" incompatible with ext3 [ 1478.686473][T21623] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 1478.694272][T21623] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 1478.743934][T21623] EXT4-fs error (device loop5): ext4_orphan_get:1410: inode #13: comm syz.5.4372: iget: bad i_size value: 12154757448730 [ 1478.757163][T21623] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.4372: couldn't read orphan inode 13 (err -117) [ 1478.769472][T21623] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=á[]*:[,,errors=continue. Quota mode: writeback. [ 1479.053943][T21629] 9pnet: Insufficient options for proto=fd [ 1479.908996][T21634] loop2: detected capacity change from 0 to 1024 [ 1479.949499][T21634] EXT4-fs (loop2): Mount option "dioread_nolock" incompatible with ext3 [ 1480.276923][T21643] 9pnet: Insufficient options for proto=fd [ 1481.591258][T21652] loop7: detected capacity change from 0 to 2048 [ 1481.976749][T21652] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1482.486692][T21664] FAULT_INJECTION: forcing a failure. [ 1482.486692][T21664] name failslab, interval 1, probability 0, space 0, times 0 [ 1482.531946][T21664] CPU: 0 PID: 21664 Comm: syz.8.4381 Not tainted syzkaller #0 [ 1482.539433][T21664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1482.549489][T21664] Call Trace: [ 1482.552768][T21664] [ 1482.555695][T21664] dump_stack_lvl+0x188/0x250 [ 1482.560378][T21664] ? show_regs_print_info+0x20/0x20 [ 1482.565574][T21664] ? load_image+0x410/0x410 [ 1482.570077][T21664] ? __lock_acquire+0x7b50/0x7b50 [ 1482.575109][T21664] should_fail+0x383/0x4b0 [ 1482.579534][T21664] should_failslab+0x5/0x20 [ 1482.584039][T21664] slab_pre_alloc_hook+0x51/0xc0 [ 1482.588978][T21664] ? __alloc_file+0x25/0x240 [ 1482.593566][T21664] kmem_cache_alloc+0x3d/0x280 [ 1482.598336][T21664] __alloc_file+0x25/0x240 [ 1482.602761][T21664] alloc_empty_file+0x90/0x180 [ 1482.607531][T21664] alloc_file+0x5c/0x510 [ 1482.611780][T21664] ? do_raw_spin_unlock+0x11d/0x230 [ 1482.616986][T21664] alloc_file_pseudo+0x180/0x200 [ 1482.621937][T21664] ? alloc_empty_file_noaccount+0x80/0x80 [ 1482.627678][T21664] ? alloc_fd+0x59e/0x650 [ 1482.632022][T21664] sock_alloc_file+0xb3/0x240 [ 1482.636709][T21664] __sys_socket+0x11d/0x170 [ 1482.641218][T21664] __x64_sys_socket+0x76/0x80 [ 1482.645889][T21664] do_syscall_64+0x4c/0xa0 [ 1482.650294][T21664] ? clear_bhb_loop+0x30/0x80 [ 1482.654961][T21664] ? clear_bhb_loop+0x30/0x80 [ 1482.659627][T21664] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1482.665507][T21664] RIP: 0033:0x7fd8b189a159 [ 1482.669909][T21664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1482.689498][T21664] RSP: 002b:00007fd8afaf2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1482.697895][T21664] RAX: ffffffffffffffda RBX: 00007fd8b1b21fa0 RCX: 00007fd8b189a159 [ 1482.705850][T21664] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001d [ 1482.713802][T21664] RBP: 00007fd8b193106b R08: 0000000000000000 R09: 0000000000000000 [ 1482.721758][T21664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1482.729712][T21664] R13: 00007fd8b1b22038 R14: 00007fd8b1b21fa0 R15: 00007ffc5936b158 [ 1482.737674][T21664] [ 1482.772934][T21669] md: could not open device unknown-block(1,1). [ 1484.450263][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.465544][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.785410][T21685] loop0: detected capacity change from 0 to 256 [ 1484.927940][T21685] exfat: Deprecated parameter 'utf8' [ 1484.933300][T21685] exfat: Deprecated parameter 'utf8' [ 1484.938969][T21685] exfat: Bad value for 'allow_utime' [ 1487.617811][T21717] loop7: detected capacity change from 0 to 164 [ 1487.860777][T21728] FAULT_INJECTION: forcing a failure. [ 1487.860777][T21728] name failslab, interval 1, probability 0, space 0, times 0 [ 1487.881447][T21728] CPU: 1 PID: 21728 Comm: syz.7.4401 Not tainted syzkaller #0 [ 1487.888929][T21728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1487.898982][T21728] Call Trace: [ 1487.902257][T21728] [ 1487.905191][T21728] dump_stack_lvl+0x188/0x250 [ 1487.909876][T21728] ? show_regs_print_info+0x20/0x20 [ 1487.915078][T21728] ? load_image+0x410/0x410 [ 1487.919619][T21728] ? __lock_acquire+0x7b50/0x7b50 [ 1487.924655][T21728] should_fail+0x383/0x4b0 [ 1487.929094][T21728] should_failslab+0x5/0x20 [ 1487.933596][T21728] slab_pre_alloc_hook+0x51/0xc0 [ 1487.938536][T21728] ? sk_prot_alloc+0x57/0x210 [ 1487.943245][T21728] kmem_cache_alloc+0x3d/0x280 [ 1487.948020][T21728] sk_prot_alloc+0x57/0x210 [ 1487.952529][T21728] ? sk_alloc+0x1d/0x310 [ 1487.956774][T21728] sk_alloc+0x2f/0x310 [ 1487.960844][T21728] ? inet6_create+0x7a8/0x1130 [ 1487.965714][T21728] inet6_create+0x7c4/0x1130 [ 1487.970316][T21728] __sock_create+0x473/0x910 [ 1487.974916][T21728] __sys_socket+0xe2/0x170 [ 1487.979338][T21728] __x64_sys_socket+0x76/0x80 [ 1487.984018][T21728] do_syscall_64+0x4c/0xa0 [ 1487.988427][T21728] ? clear_bhb_loop+0x30/0x80 [ 1487.993097][T21728] ? clear_bhb_loop+0x30/0x80 [ 1487.997767][T21728] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1488.003651][T21728] RIP: 0033:0x7fbdec573159 [ 1488.008050][T21728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1488.027642][T21728] RSP: 002b:00007fbdea7cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1488.036046][T21728] RAX: ffffffffffffffda RBX: 00007fbdec7fafa0 RCX: 00007fbdec573159 [ 1488.044000][T21728] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 1488.051950][T21728] RBP: 00007fbdec60a06b R08: 0000000000000000 R09: 0000000000000000 [ 1488.059904][T21728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1488.067858][T21728] R13: 00007fbdec7fb038 R14: 00007fbdec7fafa0 R15: 00007ffe4c6de1c8 [ 1488.075822][T21728] [ 1491.012955][T21732] device-mapper: ioctl: unable to find target [ 1491.068233][T21746] loop5: detected capacity change from 0 to 1024 [ 1491.166850][T21746] EXT4-fs (loop5): Ignoring removed nobh option [ 1491.205101][T21746] EXT4-fs (loop5): Unrecognized mount option "fowner<00000000000000000000" or missing value [ 1491.283422][T21749] loop8: detected capacity change from 0 to 128 [ 1491.322697][T21749] FAT-fs (loop8): bogus number of FAT sectors [ 1491.331474][T21749] FAT-fs (loop8): Can't find a valid FAT filesystem [ 1491.673316][T21757] loop8: detected capacity change from 0 to 256 [ 1491.716733][ T25] audit: type=1326 audit(1790948484.117:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21758 comm="syz.7.4407" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdec573159 code=0x7ffc0000 [ 1491.742864][T21757] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1491.794668][ T25] audit: type=1326 audit(1790948484.117:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21758 comm="syz.7.4407" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdec573159 code=0x7ffc0000 [ 1491.821326][T21757] FAT-fs (loop8): Directory bread(block 64) failed [ 1491.845025][T21757] FAT-fs (loop8): Directory bread(block 65) failed [ 1491.864305][ T25] audit: type=1326 audit(1790948484.117:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21758 comm="syz.7.4407" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdec573159 code=0x7ffc0000 [ 1491.879720][T21757] FAT-fs (loop8): Directory bread(block 66) failed [ 1491.924401][ T25] audit: type=1326 audit(1790948484.117:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21758 comm="syz.7.4407" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdec573159 code=0x7ffc0000 [ 1491.941623][T21757] FAT-fs (loop8): Directory bread(block 67) failed [ 1491.975881][ T25] audit: type=1326 audit(1790948484.117:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21758 comm="syz.7.4407" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbdec573159 code=0x7ffc0000 [ 1492.025449][ T25] audit: type=1326 audit(1790948484.117:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21758 comm="syz.7.4407" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdec573159 code=0x7ffc0000 [ 1492.049847][T21757] FAT-fs (loop8): Directory bread(block 68) failed [ 1492.060538][T21757] FAT-fs (loop8): Directory bread(block 69) failed [ 1492.086962][T21757] FAT-fs (loop8): Directory bread(block 70) failed [ 1492.108786][ T25] audit: type=1326 audit(1790948484.117:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21758 comm="syz.7.4407" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdec573159 code=0x7ffc0000 [ 1492.124346][T21757] FAT-fs (loop8): Directory bread(block 71) failed [ 1492.133355][ T25] audit: type=1326 audit(1790948484.117:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21758 comm="syz.7.4407" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdec573159 code=0x7ffc0000 [ 1492.164200][T21757] FAT-fs (loop8): Directory bread(block 72) failed [ 1492.171003][T21757] FAT-fs (loop8): Directory bread(block 73) failed [ 1492.183126][ T25] audit: type=1326 audit(1790948484.117:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21758 comm="syz.7.4407" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdec573159 code=0x7ffc0000 [ 1492.227175][ T25] audit: type=1326 audit(1790948484.117:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21758 comm="syz.7.4407" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fbdec573159 code=0x7ffc0000 [ 1492.461636][T21774] loop5: detected capacity change from 0 to 1024 [ 1493.574661][T14733] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1494.614974][T14733] usb 8-1: Using ep0 maxpacket: 32 [ 1494.774973][T14733] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 1494.783776][T14733] usb 8-1: config 0 has no interface number 0 [ 1494.947266][T14733] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1494.964612][T14733] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.986743][T14733] usb 8-1: Product: syz [ 1494.992346][T14733] usb 8-1: Manufacturer: syz [ 1494.997491][T14733] usb 8-1: SerialNumber: syz [ 1495.004272][T14733] usb 8-1: config 0 descriptor?? [ 1495.065742][T14733] smsc95xx v2.0.0 [ 1495.066663][T21813] loop5: detected capacity change from 0 to 128 [ 1495.100276][T21813] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1495.132935][T21813] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1497.036903][T14733] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1497.100254][T14733] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1497.794805][T14733] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1497.815871][T14733] smsc95xx: probe of 8-1:0.67 failed with error -71 [ 1497.871196][T14733] usb 8-1: USB disconnect, device number 14 [ 1497.983385][T21846] binfmt_misc: register: failed to install interpreter file ./file2 [ 1498.397895][T21848] loop7: detected capacity change from 0 to 16 [ 1498.486273][T21848] erofs: (device loop7): mounted with root inode @ nid 36. [ 1498.747840][T21854] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4446'. [ 1498.958403][T21862] netlink: 'syz.5.4448': attribute type 4 has an invalid length. [ 1499.028518][T21869] program syz.2.4441 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1499.036581][T21871] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1499.049990][T21868] input: syz0 as /devices/virtual/input/input24 [ 1499.079584][T21871] loop5: detected capacity change from 0 to 512 [ 1501.583383][T21880] loop2: detected capacity change from 0 to 8192 [ 1501.757168][T21903] FAULT_INJECTION: forcing a failure. [ 1501.757168][T21903] name failslab, interval 1, probability 0, space 0, times 0 [ 1501.770313][T21903] CPU: 0 PID: 21903 Comm: syz.7.4461 Not tainted syzkaller #0 [ 1501.777779][T21903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1501.787841][T21903] Call Trace: [ 1501.791120][T21903] [ 1501.794047][T21903] dump_stack_lvl+0x188/0x250 [ 1501.798731][T21903] ? show_regs_print_info+0x20/0x20 [ 1501.803933][T21903] ? load_image+0x410/0x410 [ 1501.808451][T21903] should_fail+0x383/0x4b0 [ 1501.812879][T21903] should_failslab+0x5/0x20 [ 1501.817382][T21903] slab_pre_alloc_hook+0x51/0xc0 [ 1501.822320][T21903] ? inet_bind_bucket_create+0x2b/0x230 [ 1501.827967][T21903] kmem_cache_alloc+0x3d/0x280 [ 1501.832742][T21903] inet_bind_bucket_create+0x2b/0x230 [ 1501.838123][T21903] inet_csk_get_port+0xa0d/0x10d0 [ 1501.843170][T21903] ? inet_csk_update_fastreuse+0xaa0/0xaa0 [ 1501.848992][T21903] ? inet_csk_update_fastreuse+0xaa0/0xaa0 [ 1501.854811][T21903] inet_csk_listen_start+0x120/0x300 [ 1501.860110][T21903] inet_listen+0x2cd/0x580 [ 1501.864559][T21903] __sys_listen+0x19d/0x220 [ 1501.869072][T21903] __x64_sys_listen+0x56/0x60 [ 1501.873762][T21903] do_syscall_64+0x4c/0xa0 [ 1501.878184][T21903] ? clear_bhb_loop+0x30/0x80 [ 1501.882865][T21903] ? clear_bhb_loop+0x30/0x80 [ 1501.887549][T21903] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1501.893449][T21903] RIP: 0033:0x7fbdec573159 [ 1501.897893][T21903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1501.917504][T21903] RSP: 002b:00007fbdea7cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 1501.925924][T21903] RAX: ffffffffffffffda RBX: 00007fbdec7fafa0 RCX: 00007fbdec573159 [ 1501.933897][T21903] RDX: 0000000000000000 RSI: 0000000004000000 RDI: 0000000000000003 [ 1501.941868][T21903] RBP: 00007fbdec60a06b R08: 0000000000000000 R09: 0000000000000000 [ 1501.949866][T21903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1501.957840][T21903] R13: 00007fbdec7fb038 R14: 00007fbdec7fafa0 R15: 00007ffe4c6de1c8 [ 1501.965833][T21903] [ 1502.014132][T21880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4451'. [ 1503.434695][T14316] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 1503.456946][T21930] loop7: detected capacity change from 0 to 164 [ 1503.827905][T21940] rock: directory entry would overflow storage [ 1503.834489][T21940] rock: sig=0x4f50, size=4, remaining=3 [ 1503.840355][T21940] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 1504.424700][T14316] usb 9-1: not running at top speed; connect to a high speed hub [ 1504.504709][T14316] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1504.644799][T14733] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1504.829370][T21957] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[17136] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[21957] [ 1504.964944][T14733] usb 3-1: Using ep0 maxpacket: 32 [ 1505.114858][T14733] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1505.157404][T14733] usb 3-1: config 0 has no interface number 0 [ 1505.256093][T14733] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1505.370591][T14316] usb 9-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 1505.379733][T14316] usb 9-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 1505.388144][T14316] usb 9-1: Product: syz [ 1505.392305][T14316] usb 9-1: Manufacturer: syz [ 1505.443695][T14733] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1505.454719][T14316] usb 9-1: can't set config #1, error -71 [ 1505.464842][T14316] usb 9-1: USB disconnect, device number 3 [ 1505.550829][ T25] kauditd_printk_skb: 4 callbacks suppressed [ 1505.550877][ T25] audit: type=1326 audit(1790948497.947:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21959 comm="syz.8.4476" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd8b189a159 code=0x0 [ 1506.087828][T21964] input: syz1 as /devices/virtual/input/input25 [ 1507.866833][T14733] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1507.919175][T14733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.948732][T14733] usb 3-1: Product: syz [ 1507.969742][T14733] usb 3-1: Manufacturer: syz [ 1507.982508][T14733] usb 3-1: SerialNumber: syz [ 1508.012532][T14733] usb 3-1: config 0 descriptor?? [ 1508.034719][T14316] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1508.044810][T14733] usb 3-1: can't set config #0, error -71 [ 1508.053241][T14733] usb 3-1: USB disconnect, device number 93 [ 1508.218450][T21980] loop2: detected capacity change from 0 to 128 [ 1508.224732][T14316] usb 9-1: device descriptor read/64, error -71 [ 1508.494789][T14316] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1508.534255][T21982] loop2: detected capacity change from 0 to 8 [ 1508.542807][T21982] squashfs: Unknown parameter '00000000000000000007è á„ËÔ¸¥³Pc_ûøJ‘£Èè' [ 1509.204700][T21984] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4486'. [ 1509.309875][T21991] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4487'. [ 1510.020938][T21998] loop8: detected capacity change from 0 to 256 [ 1510.033941][T21999] loop7: detected capacity change from 0 to 512 [ 1510.052604][T21998] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1510.150094][T21998] FAT-fs (loop8): Directory bread(block 64) failed [ 1510.179242][T21999] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #2: comm syz.7.4480: missing EA_INODE flag [ 1510.196834][T21998] FAT-fs (loop8): Directory bread(block 65) failed [ 1510.203760][T21998] FAT-fs (loop8): Directory bread(block 66) failed [ 1510.210445][T21998] FAT-fs (loop8): Directory bread(block 67) failed [ 1510.217072][T21998] FAT-fs (loop8): Directory bread(block 68) failed [ 1510.223772][T21998] FAT-fs (loop8): Directory bread(block 69) failed [ 1510.231036][T21998] FAT-fs (loop8): Directory bread(block 70) failed [ 1510.235970][T21999] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.4480: error while reading EA inode 2 err=-117 [ 1510.237751][T21998] FAT-fs (loop8): Directory bread(block 71) failed [ 1510.256495][T21998] FAT-fs (loop8): Directory bread(block 72) failed [ 1510.263167][T21998] FAT-fs (loop8): Directory bread(block 73) failed [ 1510.277696][T21999] EXT4-fs (loop7): 1 orphan inode deleted [ 1510.283469][T21999] EXT4-fs (loop7): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 1511.018027][T22008] loop5: detected capacity change from 0 to 512 [ 1511.384831][T22008] EXT4-fs (loop5): Mount option "delalloc" incompatible with ext2 [ 1512.440514][T16764] Bluetooth: hci0: command 0x0407 tx timeout [ 1513.116723][T22029] loop2: detected capacity change from 0 to 16 [ 1513.571943][T22030] loop7: detected capacity change from 0 to 16 [ 1513.787373][T22029] erofs: (device loop2): mounted with root inode @ nid 36. [ 1513.809008][T22024] attempt to access beyond end of device [ 1513.809008][T22024] loop2: rw=0, want=40, limit=16 [ 1513.812075][T22030] erofs: (device loop7): mounted with root inode @ nid 36. [ 1513.828851][T22024] attempt to access beyond end of device [ 1513.828851][T22024] loop2: rw=524288, want=48, limit=16 [ 1513.839957][T22024] attempt to access beyond end of device [ 1513.839957][T22024] loop2: rw=524288, want=40, limit=16 [ 1514.029160][T22033] loop7: detected capacity change from 0 to 1024 [ 1514.094488][T22033] hfsplus: invalid length 32517 has been corrected to 255 [ 1514.166791][T22033] hfsplus: invalid length 32517 has been corrected to 255 [ 1514.204998][T22033] hfsplus: invalid length 32517 has been corrected to 255 [ 1514.252667][ T4787] hfsplus: b-tree write err: -5, ino 25 [ 1514.269474][ T4787] hfsplus: b-tree write err: -5, ino 4 [ 1514.283171][ T4787] hfsplus: b-tree write err: -5, ino 2 [ 1514.511837][ T4231] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 1514.517495][T22056] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input26 [ 1514.712330][T22067] loop8: detected capacity change from 0 to 256 [ 1515.806528][T22067] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1515.824967][ T4231] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 1515.844905][ T4231] usb 6-1: config 0 has no interface number 0 [ 1515.862096][T22067] FAT-fs (loop8): Filesystem has been set read-only [ 1515.865215][ T4231] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1515.902476][T22067] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1515.951953][T22067] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1515.990563][ T25] audit: type=1800 audit(1790948508.387:27): pid=22067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4508" name="file1" dev="loop8" ino=1048639 res=0 errno=0 [ 1516.014955][ T4231] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1516.036711][ T4231] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1516.055084][ T4231] usb 6-1: Manufacturer: syz [ 1516.060256][ T4231] usb 6-1: SerialNumber: syz [ 1516.083165][ T4231] usb 6-1: config 0 descriptor?? [ 1516.236058][T22083] loop2: detected capacity change from 0 to 512 [ 1516.296105][T22083] EXT4-fs (loop2): Ignoring removed nobh option [ 1516.342870][T22083] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.4510: invalid indirect mapped block 256 (level 2) [ 1516.360474][T22083] EXT4-fs (loop2): 2 truncates cleaned up [ 1517.356230][T22083] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 1517.405307][ T4231] usbtouchscreen: probe of 6-1:0.214 failed with error -71 [ 1517.432961][ T4231] usb 6-1: USB disconnect, device number 7 [ 1518.274819][T22082] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.4510: bg 0: block 5: invalid block bitmap [ 1518.292014][T22082] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 1518.304727][T22082] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1518.304727][T22082] [ 1518.314779][T22082] EXT4-fs (loop2): Total free blocks count 0 [ 1518.320758][T22082] EXT4-fs (loop2): Free/Dirty block details [ 1518.326889][T22082] EXT4-fs (loop2): free_blocks=0 [ 1518.331875][T22082] EXT4-fs (loop2): dirty_blocks=33 [ 1518.337022][T22082] EXT4-fs (loop2): Block reservation details [ 1518.342996][T22082] EXT4-fs (loop2): i_reserved_data_blocks=33 [ 1518.358518][T22101] loop5: detected capacity change from 0 to 512 [ 1518.444810][T22101] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1518.478440][T22101] EXT4-fs (loop5): 1 truncate cleaned up [ 1518.487900][T22101] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,auto_da_alloc,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,jqfmt=vfsv1,. Quota mode: none. [ 1518.595090][T22101] EXT4-fs error (device loop5): __ext4_expand_extra_isize:5893: inode #12: comm syz.5.4519: bad extra_isize 62 (inode size 256) [ 1519.260121][T22100] loop8: detected capacity change from 0 to 256 [ 1519.306588][T22100] FAT-fs (loop8): Unrecognized mount option "ÿÿshortname=winnt" or missing value [ 1519.363493][T22101] EXT4-fs (loop5): Remounting filesystem read-only [ 1519.384956][T22117] input: syz0 as /devices/virtual/input/input28 [ 1519.793989][T22136] loop7: detected capacity change from 0 to 128 [ 1519.936168][T22140] loop8: detected capacity change from 0 to 164 [ 1520.071091][T22136] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1520.122550][T22136] ext4 filesystem being mounted at /210/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1520.329927][T22148] loop8: detected capacity change from 0 to 512 [ 1520.420255][T22155] loop5: detected capacity change from 0 to 2048 [ 1521.164643][T22155] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,lazytime,errors=remount-ro,mb_optimize_scan=0x0000000000000001,. Quota mode: none. [ 1521.170142][T22159] FAULT_INJECTION: forcing a failure. [ 1521.170142][T22159] name failslab, interval 1, probability 0, space 0, times 0 [ 1521.213310][T22159] CPU: 0 PID: 22159 Comm: syz.0.4536 Not tainted syzkaller #0 [ 1521.220787][T22159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1521.230843][T22159] Call Trace: [ 1521.234123][T22159] [ 1521.237058][T22159] dump_stack_lvl+0x188/0x250 [ 1521.241750][T22159] ? show_regs_print_info+0x20/0x20 [ 1521.246966][T22159] ? load_image+0x410/0x410 [ 1521.251477][T22159] ? __lock_acquire+0x7b50/0x7b50 [ 1521.256513][T22159] should_fail+0x383/0x4b0 [ 1521.260941][T22159] should_failslab+0x5/0x20 [ 1521.265453][T22159] slab_pre_alloc_hook+0x51/0xc0 [ 1521.270396][T22159] kmem_cache_alloc_trace+0x47/0x290 [ 1521.275679][T22159] ? get_device_parent+0x2d6/0x3e0 [ 1521.280878][T22159] get_device_parent+0x2d6/0x3e0 [ 1521.285827][T22159] device_add+0x31b/0x1050 [ 1521.290252][T22159] wakeup_source_sysfs_add+0x1cf/0x2b0 [ 1521.295768][T22159] wakeup_source_register+0x15f/0x230 [ 1521.301196][T22159] ep_insert+0xe66/0x1990 [ 1521.305592][T22159] ? ep_loop_check+0x180/0x180 [ 1521.310370][T22159] ? bpf_lsm_capable+0x5/0x10 [ 1521.315046][T22159] ? security_capable+0x85/0xb0 [ 1521.319911][T22159] do_epoll_ctl+0x88b/0xeb0 [ 1521.324435][T22159] __x64_sys_epoll_ctl+0x162/0x1b0 [ 1521.329551][T22159] ? ep_modify+0xa80/0xa80 [ 1521.333975][T22159] ? lockdep_hardirqs_on+0x94/0x140 [ 1521.339177][T22159] do_syscall_64+0x4c/0xa0 [ 1521.343591][T22159] ? clear_bhb_loop+0x30/0x80 [ 1521.348268][T22159] ? clear_bhb_loop+0x30/0x80 [ 1521.352944][T22159] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1521.358846][T22159] RIP: 0033:0x7f4aad88a159 [ 1521.363260][T22159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1521.382863][T22159] RSP: 002b:00007f4aabae2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1521.391283][T22159] RAX: ffffffffffffffda RBX: 00007f4aadb11fa0 RCX: 00007f4aad88a159 [ 1521.399256][T22159] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000005 [ 1521.407229][T22159] RBP: 00007f4aad92106b R08: 0000000000000000 R09: 0000000000000000 [ 1521.415196][T22159] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 1521.423168][T22159] R13: 00007f4aadb12038 R14: 00007f4aadb11fa0 R15: 00007ffccc0bb4a8 [ 1521.431154][T22159] [ 1521.442044][ T25] audit: type=1326 audit(1790948513.837:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22146 comm="syz.8.4529" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b189a159 code=0x7ffc0000 [ 1521.526121][ T25] audit: type=1326 audit(1790948513.837:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22146 comm="syz.8.4529" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b189a159 code=0x7ffc0000 [ 1521.586686][ T25] audit: type=1326 audit(1790948513.867:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22146 comm="syz.8.4529" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd8b189a159 code=0x7ffc0000 [ 1521.620250][ T25] audit: type=1326 audit(1790948513.867:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22146 comm="syz.8.4529" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b189a159 code=0x7ffc0000 [ 1521.790142][T22155] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1521.868505][ T25] audit: type=1326 audit(1790948513.867:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22146 comm="syz.8.4529" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b189a159 code=0x7ffc0000 [ 1521.897102][T22155] EXT4-fs (loop5): Remounting filesystem read-only [ 1522.026228][ T25] audit: type=1326 audit(1790948513.867:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22146 comm="syz.8.4529" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fd8b189a159 code=0x7ffc0000 [ 1522.050604][ T25] audit: type=1326 audit(1790948513.867:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22146 comm="syz.8.4529" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b189a159 code=0x7ffc0000 [ 1522.094380][ T25] audit: type=1326 audit(1790948513.867:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22146 comm="syz.8.4529" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b189a159 code=0x7ffc0000 [ 1522.119260][ T25] audit: type=1326 audit(1790948513.867:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22146 comm="syz.8.4529" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fd8b189a159 code=0x7ffc0000 [ 1522.157794][ T25] audit: type=1326 audit(1790948513.867:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22146 comm="syz.8.4529" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b189a159 code=0x7ffc0000 [ 1522.214938][T22176] loop2: detected capacity change from 0 to 512 [ 1522.532551][T22176] EXT4-fs (loop2): 1 truncate cleaned up [ 1522.598057][T22176] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,,errors=continue. Quota mode: none. [ 1524.167000][T22202] netlink: 'syz.7.4548': attribute type 4 has an invalid length. [ 1524.505465][T22209] loop2: detected capacity change from 0 to 16 [ 1525.034200][T22209] erofs: (device loop2): mounted with root inode @ nid 36. [ 1525.101125][T22209] attempt to access beyond end of device [ 1525.101125][T22209] loop2: rw=524288, want=34359738368, limit=16 [ 1525.280000][T22209] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 24575 of nid 89 [ 1525.328266][T22209] erofs: (device loop2): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 1525.363591][T22209] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 20479 of nid 89 [ 1525.384764][T22209] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 1525.391759][T22220] loop7: detected capacity change from 0 to 256 [ 1525.404900][T22209] attempt to access beyond end of device [ 1525.404900][T22209] loop2: rw=524288, want=56, limit=16 [ 1525.473601][T22222] loop5: detected capacity change from 0 to 1024 [ 1525.503726][T22220] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1525.542790][T22220] FAT-fs (loop7): Filesystem has been set read-only [ 1525.598086][T22220] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1525.618703][T22222] EXT4-fs (loop5): Ignoring removed orlov option [ 1525.666047][T22223] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1526.335758][T22222] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,noauto_da_alloc,norecovery,usrquota,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: writeback. [ 1526.345701][T22223] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1526.580118][ T4203] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:200' [ 1526.590193][ T4203] CPU: 0 PID: 4203 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 1526.597746][ T4203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1526.607800][ T4203] Workqueue: hci2 hci_rx_work [ 1526.612571][ T4203] Call Trace: [ 1526.615847][ T4203] [ 1526.618777][ T4203] dump_stack_lvl+0x188/0x250 [ 1526.623457][ T4203] ? show_regs_print_info+0x20/0x20 [ 1526.628663][ T4203] ? load_image+0x410/0x410 [ 1526.633184][ T4203] sysfs_create_dir_ns+0x26a/0x290 [ 1526.638369][ T4203] ? sysfs_warn_dup+0xa0/0xa0 [ 1526.643049][ T4203] ? ret_from_fork+0x1f/0x30 [ 1526.647669][ T4203] ? do_raw_spin_unlock+0x11d/0x230 [ 1526.652878][ T4203] kobject_add_internal+0x5ba/0xcd0 [ 1526.658088][ T4203] kobject_add+0x160/0x230 [ 1526.662512][ T4203] ? kobject_init+0x1c0/0x1c0 [ 1526.667189][ T4203] ? __raw_spin_lock_init+0x41/0x100 [ 1526.672478][ T4203] ? get_device_parent+0x121/0x3e0 [ 1526.677598][ T4203] device_add+0x470/0x1050 [ 1526.681874][T22242] loop8: detected capacity change from 0 to 1024 [ 1526.682017][ T4203] hci_conn_add_sysfs+0xd1/0x1e0 [ 1526.693245][ T4203] hci_sync_conn_complete_evt+0x647/0x9d0 [ 1526.699010][ T4203] ? __rwlock_init+0x140/0x140 [ 1526.703777][ T4203] hci_event_packet+0x8cf/0x1310 [ 1526.708722][ T4203] ? _raw_spin_unlock+0x40/0x40 [ 1526.713578][ T4203] ? rcu_lock_release+0x20/0x20 [ 1526.718435][ T4203] ? hci_send_to_monitor+0x9c/0x4a0 [ 1526.723643][ T4203] hci_rx_work+0x255/0xa10 [ 1526.728121][ T4203] process_one_work+0x867/0xff0 [ 1526.733061][ T4203] ? worker_detach_from_pool+0x240/0x240 [ 1526.738693][ T4203] ? lockdep_hardirqs_off+0x70/0x100 [ 1526.743985][ T4203] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1526.749012][ T4203] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1526.754577][ T4203] ? wq_worker_running+0x97/0x170 [ 1526.759604][ T4203] worker_thread+0xad7/0x12a0 [ 1526.764306][ T4203] kthread+0x42e/0x520 [ 1526.768428][ T4203] ? rcu_lock_release+0x20/0x20 [ 1526.773276][ T4203] ? kthread_blkcg+0xd0/0xd0 [ 1526.777875][ T4203] ret_from_fork+0x1f/0x30 [ 1526.782309][ T4203] [ 1526.785841][ T4203] kobject_add_internal failed for hci2:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 1526.799419][ T4203] Bluetooth: hci2: failed to register connection device [ 1526.806635][ T4203] [ 1526.808956][ T4203] ====================================================== [ 1526.815960][ T4203] WARNING: possible circular locking dependency detected [ 1526.823015][ T4203] syzkaller #0 Not tainted [ 1526.827425][ T4203] ------------------------------------------------------ [ 1526.834418][ T4203] kworker/u5:7/4203 is trying to acquire lock: [ 1526.840547][ T4203] ffff8881421df120 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: sco_connect_cfm+0x70a/0xd00 [ 1526.851268][ T4203] [ 1526.851268][ T4203] but task is already holding lock: [ 1526.858607][ T4203] ffffffff8d593e48 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_sync_conn_complete_evt+0x45e/0x9d0 [ 1526.868862][ T4203] [ 1526.868862][ T4203] which lock already depends on the new lock. [ 1526.868862][ T4203] [ 1526.879242][ T4203] [ 1526.879242][ T4203] the existing dependency chain (in reverse order) is: [ 1526.888230][ T4203] [ 1526.888230][ T4203] -> #2 (hci_cb_list_lock){+.+.}-{3:3}: [ 1526.895936][ T4203] __mutex_lock_common+0x1e5/0x2400 [ 1526.901634][ T4203] mutex_lock_nested+0x17/0x20 [ 1526.906894][ T4203] hci_remote_features_evt+0x5d9/0xa10 [ 1526.912852][ T4203] hci_event_packet+0x600/0x1310 [ 1526.918290][ T4203] hci_rx_work+0x255/0xa10 [ 1526.923211][ T4203] process_one_work+0x867/0xff0 [ 1526.928572][ T4203] worker_thread+0xad7/0x12a0 [ 1526.933750][ T4203] kthread+0x42e/0x520 [ 1526.938315][ T4203] ret_from_fork+0x1f/0x30 [ 1526.943233][ T4203] [ 1526.943233][ T4203] -> #1 (&hdev->lock){+.+.}-{3:3}: [ 1526.950506][ T4203] __mutex_lock_common+0x1e5/0x2400 [ 1526.956207][ T4203] mutex_lock_nested+0x17/0x20 [ 1526.961467][ T4203] sco_sock_connect+0x189/0x940 [ 1526.966817][ T4203] __sys_connect+0x3cb/0x450 [ 1526.971905][ T4203] __x64_sys_connect+0x76/0x80 [ 1526.977169][ T4203] do_syscall_64+0x4c/0xa0 [ 1526.982088][ T4203] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1526.988481][ T4203] [ 1526.988481][ T4203] -> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}: [ 1526.997577][ T4203] __lock_acquire+0x2c66/0x7b50 [ 1527.002928][ T4203] lock_acquire+0x19e/0x400 [ 1527.007931][ T4203] lock_sock_nested+0x44/0x100 [ 1527.013195][ T4203] sco_connect_cfm+0x70a/0xd00 [ 1527.018459][ T4203] hci_sync_conn_complete_evt+0x4be/0x9d0 [ 1527.024679][ T4203] hci_event_packet+0x8cf/0x1310 [ 1527.030115][ T4203] hci_rx_work+0x255/0xa10 [ 1527.035028][ T4203] process_one_work+0x867/0xff0 [ 1527.040377][ T4203] worker_thread+0xad7/0x12a0 [ 1527.045549][ T4203] kthread+0x42e/0x520 [ 1527.050119][ T4203] ret_from_fork+0x1f/0x30 [ 1527.055037][ T4203] [ 1527.055037][ T4203] other info that might help us debug this: [ 1527.055037][ T4203] [ 1527.065240][ T4203] Chain exists of: [ 1527.065240][ T4203] sk_lock-AF_BLUETOOTH-BTPROTO_SCO --> &hdev->lock --> hci_cb_list_lock [ 1527.065240][ T4203] [ 1527.079458][ T4203] Possible unsafe locking scenario: [ 1527.079458][ T4203] [ 1527.086884][ T4203] CPU0 CPU1 [ 1527.092225][ T4203] ---- ---- [ 1527.097566][ T4203] lock(hci_cb_list_lock); [ 1527.102048][ T4203] lock(&hdev->lock); [ 1527.108618][ T4203] lock(hci_cb_list_lock); [ 1527.115618][ T4203] lock(sk_lock-AF_BLUETOOTH-BTPROTO_SCO); [ 1527.121487][ T4203] [ 1527.121487][ T4203] *** DEADLOCK *** [ 1527.121487][ T4203] [ 1527.129605][ T4203] 4 locks held by kworker/u5:7/4203: [ 1527.134869][ T4203] #0: ffff888078bfd938 ((wq_completion)hci2#2){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 1527.145113][ T4203] #1: ffffc9000302fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 1527.156391][ T4203] #2: ffff88805e35c478 (&hdev->lock){+.+.}-{3:3}, at: hci_sync_conn_complete_evt+0xb8/0x9d0 [ 1527.166543][ T4203] #3: ffffffff8d593e48 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_sync_conn_complete_evt+0x45e/0x9d0 [ 1527.177216][ T4203] [ 1527.177216][ T4203] stack backtrace: [ 1527.183077][ T4203] CPU: 0 PID: 4203 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 1527.190597][ T4203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1527.200630][ T4203] Workqueue: hci2 hci_rx_work [ 1527.205292][ T4203] Call Trace: [ 1527.208552][ T4203] [ 1527.211471][ T4203] dump_stack_lvl+0x188/0x250 [ 1527.216131][ T4203] ? load_image+0x410/0x410 [ 1527.220613][ T4203] ? show_regs_print_info+0x20/0x20 [ 1527.225793][ T4203] ? print_circular_bug+0x12b/0x1a0 [ 1527.230971][ T4203] check_noncircular+0x296/0x330 [ 1527.235887][ T4203] ? stack_trace_snprint+0xe0/0xe0 [ 1527.241053][ T4203] ? add_chain_block+0x9b0/0x9b0 [ 1527.245971][ T4203] ? lockdep_lock+0xf1/0x1f0 [ 1527.250545][ T4203] ? mark_lock+0x94/0x320 [ 1527.254852][ T4203] ? _find_first_zero_bit+0xd1/0xf0 [ 1527.260047][ T4203] __lock_acquire+0x2c66/0x7b50 [ 1527.264887][ T4203] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1527.270847][ T4203] ? verify_lock_unused+0x140/0x140 [ 1527.276023][ T4203] ? verify_lock_unused+0x140/0x140 [ 1527.281207][ T4203] ? asm_sysvec_call_function_single+0x16/0x20 [ 1527.287343][ T4203] lock_acquire+0x19e/0x400 [ 1527.291828][ T4203] ? sco_connect_cfm+0x70a/0xd00 [ 1527.296752][ T4203] ? sco_connect_cfm+0x6fa/0xd00 [ 1527.301668][ T4203] ? read_lock_is_recursive+0x10/0x10 [ 1527.307021][ T4203] ? __lock_acquire+0x7b50/0x7b50 [ 1527.312027][ T4203] ? do_raw_spin_lock+0x128/0x2f0 [ 1527.317035][ T4203] ? __rwlock_init+0x140/0x140 [ 1527.321783][ T4203] lock_sock_nested+0x44/0x100 [ 1527.326529][ T4203] ? sco_connect_cfm+0x70a/0xd00 [ 1527.331447][ T4203] sco_connect_cfm+0x70a/0xd00 [ 1527.336195][ T4203] ? sco_skb_put_cmsg+0xa0/0xa0 [ 1527.341025][ T4203] ? sco_skb_put_cmsg+0xa0/0xa0 [ 1527.345857][ T4203] hci_sync_conn_complete_evt+0x4be/0x9d0 [ 1527.351554][ T4203] ? __rwlock_init+0x140/0x140 [ 1527.356295][ T4203] hci_event_packet+0x8cf/0x1310 [ 1527.361216][ T4203] ? _raw_spin_unlock+0x40/0x40 [ 1527.366044][ T4203] ? rcu_lock_release+0x20/0x20 [ 1527.370879][ T4203] ? hci_send_to_monitor+0x9c/0x4a0 [ 1527.376064][ T4203] hci_rx_work+0x255/0xa10 [ 1527.380463][ T4203] process_one_work+0x867/0xff0 [ 1527.385299][ T4203] ? worker_detach_from_pool+0x240/0x240 [ 1527.390909][ T4203] ? lockdep_hardirqs_off+0x70/0x100 [ 1527.396177][ T4203] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1527.401182][ T4203] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1527.406708][ T4203] ? wq_worker_running+0x97/0x170 [ 1527.411710][ T4203] worker_thread+0xad7/0x12a0 [ 1527.416372][ T4203] kthread+0x42e/0x520 [ 1527.420418][ T4203] ? rcu_lock_release+0x20/0x20 [ 1527.425245][ T4203] ? kthread_blkcg+0xd0/0xd0 [ 1527.429812][ T4203] ret_from_fork+0x1f/0x30 [ 1527.434214][ T4203] [ 1528.152672][T22242] netlink: 'syz.8.4555': attribute type 8 has an invalid length. [ 1528.178117][ T4332] hfsplus: b-tree write err: -5, ino 25 [ 1528.183977][ T4332] hfsplus: b-tree write err: -5, ino 4 [ 1528.189809][ T4332] hfsplus: b-tree write err: -5, ino 2 [ 1528.634741][T18994] Bluetooth: hci2: command 0x0409 tx timeout [ 1530.714720][T14316] Bluetooth: hci2: command 0x0406 tx timeout