last executing test programs: 12m17.586641081s ago: executing program 32 (id=144): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f000"], 0x0) io_setup(0x8, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x8, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ff9000/0x4000)=nil) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000332000/0x4000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00001d7000/0x13000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000053000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) openat$nullb(0xffffffffffffff9c, 0x0, 0x161a02, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x840) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 9m12.692756497s ago: executing program 33 (id=366): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRESOCT], 0xfb, 0x6b0, &(0x7f00000001c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x3000000, &(0x7f0000000600), 0x4, 0x524, &(0x7f0000001900)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x2d, 0x1001, r3, 0x0) fanotify_mark(r4, 0x22, 0x40001017, r3, 0x0) 7m26.599355086s ago: executing program 4 (id=522): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0xe8) syncfs(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa017e000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file0\x00', 0x380cc52, &(0x7f00000000c0)={[{}, {@sbsector={'sbsector', 0x3d, 0xf}}, {@nocompress}, {@mode={'mode', 0x3d, 0x4}}, {@nojoliet}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@cruft}, {@unhide}, {@dmode={'dmode', 0x3d, 0xffffffffffff9607}}, {@map_off}, {}, {@iocharset={'iocharset', 0x3d, 'cp857'}}], [{@uid_eq}], 0x2c}, 0x3, 0x9bf, &(0x7f0000001640)="$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") 7m23.920246749s ago: executing program 4 (id=524): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00"], 0x38}}, 0x20044804) 7m11.644155117s ago: executing program 4 (id=543): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x204001, &(0x7f0000000040), 0x1, 0xbb0, &(0x7f0000000bc0)="$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") syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80342, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) read$FUSE(r4, &(0x7f0000000a80)={0x2020}, 0x2020) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 7m8.56369169s ago: executing program 4 (id=545): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x204001, &(0x7f0000000040), 0x1, 0xbb0, &(0x7f0000000bc0)="$eJzs3M1vVFUbAPDn3k6/aF9a3rx5FWJiE4MajUOhBBNW4NqoiSxcUtspaTp82NbENiwK7tWFMS5IDH+CiXvZuDJxgQvFv4AYiSG6ARZj7nyUkekMpczMhfL7JWfuOXNm7vM8c2HuucncBvDMmsoe0oj9EXE6iZioP59GxFC1NxKxUXvd3dsX57KWRKXy/p9JJBFx5/bFuca+kvp2rD4YiYjrbyXx309b466srS/Nlsul5fr40OrZC4dW1tbfWDw7e6Z0pnTu6MybR2eOzcx0sdabFz78+oWf33n58tXPpt/9au+PSZyI8fpccx3dMhVTm59JZrC+LUTEbLeD5WSgXk9znUkhx4QAAOgobVrD/T8mYiDuL94m4odfck0OAAAA6IrKQEQFAAAA2OUS1/8AAACwyzV+B3Dn9sW5Rsv3Fwn9detkREzW6m/c31ybKcRGdTtSvW93z19JNN/WmtTe9timskjf/VTKWvToPuRONi5FxPNbHf+kWv9k9S7u1vrTiJjuQvypB8ZPU/0nuhA/7/oBeDZdO1k7kbWe/9LN9U9scf4rbHHu2om8z3+N9d/dlvXf/foH2qz/3ttmjAP3Xrvebq55/ffB57/NZ/Gz7WMV9QhuXYo4UNiq/mSz/qRN/ae3GWNs7uaVdnNZ/Vm9jdbv+itXIw5WV3Ot9Tcknf4+0aGFxXJpuva4xf7XjnWO33z8s5bFb1wL9EN2/PfEzo7/hW3GmHzuj/3t5h5ef/r7UHKq2huqP/PJ7Orq8uGIoeTt1uePdM6l8ZrGPrL6X32p8///rerPvhM26p9D9q/nUn2bjS8/EHPs4JFvd15/b2X1z+/w+H+xzRjffH/lo3ZzedcPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNMhjYjxSNLiZj9Ni8WIsYj4X+xJy+dXVl9fOP/xuflsLmIyBtOFxXJpOiImauMkGx+u9u+PjzwwnomIfRHx5cRodVycO1+ez7t4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANo1FxHgkaTEi0oj4eyJNi8W8swIAAAC6bjLvBAAAAICec/0PAAAAu1/L9X/hX6ORfuYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADArrTvxWs3kojYOD5abZmh+txgrpkBvZbu+J2VSlcTAfpuIO8EgNwUmvqVinM6PEtc4wPJQ+ZH2s4Mdz0XAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5cr+y/diOJiI3jo9WWGarPDeaaGdBrad4JALkZ6DSZ9C8PoP8KeScA5MY1PlBb6t+r1LTOj7R95/AjRGm/FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeDuPVlqTFiEir/TQtFiP+ExGTMZgsLJZL0xGxNyJ+nRgczsaH804aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACArltZW1+aLZdLyzo77dw7FfEEpKHzZHVGo+chhntZRd7fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5GFlbX1ptlwuLa/knQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQt5W19aXZcrm03MNO3jUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCffwIAAP//ZLcP0g==") syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80342, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) read$FUSE(r4, &(0x7f0000000a80)={0x2020}, 0x2020) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r5, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) 7m6.537620031s ago: executing program 4 (id=547): socket$netlink(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc41a, &(0x7f0000000180)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x2, 0x3a) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000280)={@broadcast, @remote}, 0xc) ioctl$NILFS_IOCTL_GET_SUINFO(0xffffffffffffffff, 0x80186e84, &(0x7f0000000080)={&(0x7f0000000000)=[{0x785772b1, 0x3, 0x1}], 0x1, 0x10, 0x5, 0x13}) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r4, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000300)=ANY=[@ANYBLOB='\f\x00'], 0x8) 6m56.875846931s ago: executing program 34 (id=539): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000100)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") r0 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x3b, 0x1, @tid=r0}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_INFO(0x0, 0x3, 0x3, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) gettid() rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000000)='./file1\x00') 6m54.504170619s ago: executing program 4 (id=562): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4000191}, 0x48080) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r6, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) wait4(r0, 0x0, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xfffffffb}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb8462d3589f97197f90be6e423cefcfffffff9f6a3185cec98e950cfed000000bf14c31ed76ad59300"}, 0x48, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000100)={{0x1, 0x7}, {0xe2, 0xba}, 0xffff74fb, 0xc, 0xe}) 6m53.286462884s ago: executing program 35 (id=562): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4000191}, 0x48080) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r6, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) wait4(r0, 0x0, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xfffffffb}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb8462d3589f97197f90be6e423cefcfffffff9f6a3185cec98e950cfed000000bf14c31ed76ad59300"}, 0x48, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000100)={{0x1, 0x7}, {0xe2, 0xba}, 0xffff74fb, 0xc, 0xe}) 6m20.83333591s ago: executing program 3 (id=601): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 6m15.755293086s ago: executing program 3 (id=607): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc41a, &(0x7f0000000180)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000480)="$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") syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x10048, &(0x7f00000009c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x67, 0xc54, &(0x7f0000002500)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rmdir(0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000040)={0x0, 0xea60}, 0x10) read(r4, 0x0, 0x0) getsockopt$bt_BT_POWER(r4, 0x112, 0x9, 0x0, &(0x7f00000005c0)) 6m11.637917992s ago: executing program 3 (id=613): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r5 = syz_open_pts(r0, 0x0) r6 = dup3(r5, r0, 0x0) read$FUSE(r6, 0x0, 0x0) 6m7.997343357s ago: executing program 3 (id=615): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000100)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") r0 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x3b, 0x1, @tid=r0}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_INFO(0x0, 0x3, 0x3, 0x0) r4 = semget(0x1, 0x5, 0x6b4) semctl$IPC_RMID(r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_ZCRX_IFQ(0xffffffffffffffff, 0x20, 0x0, 0x1) r5 = gettid() rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000000)='./file1\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x64042, 0x49) sched_setattr(r5, &(0x7f00000001c0)={0x38, 0x0, 0x10000008, 0xfffffffa, 0x1, 0x4, 0x5, 0x5, 0x2, 0x9}, 0x0) write$P9_RREADLINK(r6, &(0x7f0000000000)={0x6549bfc8e202b0dd, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 5m56.511840106s ago: executing program 3 (id=624): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4000191}, 0x48080) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r6, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) wait4(r0, 0x0, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, 0x0) syz_clone(0x24b94000, &(0x7f0000000240)="810ae205c396549a6f29d66f654a34b5cf483f295c7b701adefa2fe074dc4bcbcfb2db39dc68d779ff7e43653899d1fb617b588283b2dd4de9e10da758cd3c7945c3435fcd74", 0x46, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000440)) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000100)={{0x1, 0x7}, {0xe2, 0xba}, 0xffff74fb, 0xc, 0xe}) 5m54.081807849s ago: executing program 3 (id=626): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x1f0, 0x18, "", [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x0, 0x7, 0x0, {0x9, 0x21, 0x5, 0xfd, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xb3, 0xd, 0xf3}}}}}]}}]}}, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0xc, &(0x7f0000000300), 0x2, 0x56c, &(0x7f0000000d40)="$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") ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x48000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_control_io(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) semop(0x0, &(0x7f0000000100), 0x1f) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x62, &(0x7f00000000c0)=ANY=[], 0x0) 5m38.070289793s ago: executing program 36 (id=626): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x1f0, 0x18, "", [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x0, 0x7, 0x0, {0x9, 0x21, 0x5, 0xfd, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xb3, 0xd, 0xf3}}}}}]}}]}}, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0xc, &(0x7f0000000300), 0x2, 0x56c, &(0x7f0000000d40)="$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") ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x48000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_control_io(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) semop(0x0, &(0x7f0000000100), 0x1f) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x62, &(0x7f00000000c0)=ANY=[], 0x0) 4m40.633309956s ago: executing program 9 (id=638): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0xff) 4m40.399339176s ago: executing program 9 (id=691): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/ignore-gfp-wait\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='N\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/task-filter\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='Y\x00', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='10000\x00', 0x5) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./debug/failslab/verbose\x00', 0x2, 0x0) write(r3, &(0x7f00000002c0)='0\x00', 0x1) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/failslab/probability\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='5\x00', 0x1) close(r4) r5 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='1\x00', 0x1) close(r5) r6 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000500)={0x2, 0x0, 0x3, 0x14}) ioctl$DVB_DEMUX_DMX_START(r6, 0x6f29) ioctl$DVB_DEMUX_DMX_STOP(r6, 0x6f2a) ioctl$DVB_DEMUX_DMX_START(r6, 0x6f29) 4m39.304031809s ago: executing program 9 (id=693): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, 0x0, 0x0) connect$bt_l2cap(r3, &(0x7f0000000240)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) 4m36.212728976s ago: executing program 9 (id=695): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) tkill(0x0, 0x13) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x7) tkill(0x0, 0x12) 4m30.551638613s ago: executing program 9 (id=698): socket$netlink(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc41a, &(0x7f0000000180)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 4m13.986596851s ago: executing program 37 (id=698): socket$netlink(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc41a, &(0x7f0000000180)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 2m15.250186009s ago: executing program 2 (id=831): recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x0, 0x800000000000, 0x4, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0x4, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r5 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0x200a0204) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x3}) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000840), 0x1, 0x782, &(0x7f0000000880)="$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") 2m13.684987166s ago: executing program 2 (id=832): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) dup3(0xffffffffffffffff, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1\x00', 0x1c0) rmdir(&(0x7f0000000000)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1\x00') 2m10.500609214s ago: executing program 2 (id=836): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000800)={'#! ', './tracing'}, 0xd) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 2m6.367046852s ago: executing program 2 (id=840): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) socket$netlink(0x10, 0x3, 0x4) r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={r2}, 0xc) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x3}, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0xff) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r5, 0x0, 0xff2e) syz_open_pts(r5, 0x80) dup3(r0, r5, 0x80000) 2m2.079528982s ago: executing program 2 (id=844): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x7}}, 0x18) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x1, 0x3a1a41) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) ioctl$FIBMAP(0xffffffffffffffff, 0x5393, &(0x7f0000000100)=0x3) 2m0.468702278s ago: executing program 2 (id=845): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) tkill(r0, 0x12) 1m44.915211797s ago: executing program 38 (id=845): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) tkill(r0, 0x12) 1m22.687819851s ago: executing program 7 (id=976): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x70) ftruncate(r0, 0x6000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000a80)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40082, 0x17) write(r1, &(0x7f0000000000)='3', 0x4e) syz_emit_ethernet(0x19, &(0x7f0000000300)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @link_local, @val={@val={0x88a8, 0x6, 0x1}, {0x8100, 0x4, 0x0, 0x4}}, {@x25={0x805, {0x2, 0x9, 0x1b}}}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1\x00', 0x1, 0x25c) 1m20.976278692s ago: executing program 7 (id=979): getpeername$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000180)=0x6e) io_setup(0x3, &(0x7f0000000180)) 1m20.682178264s ago: executing program 7 (id=981): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) socket(0x840000000002, 0x3, 0xff) getuid() stat(0x0, &(0x7f0000000280)) socket(0x28, 0x3, 0x0) setresgid(0x0, 0x0, 0x0) 1m19.222908577s ago: executing program 7 (id=989): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x101001a, 0x0, 0xfb, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chroot(&(0x7f0000000100)='./file0\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = getpid() openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x1) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 1m18.535157234s ago: executing program 7 (id=990): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000456000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m18.173846423s ago: executing program 7 (id=993): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000001c00), 0x12) 1m3.101017264s ago: executing program 39 (id=993): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000001c00), 0x12) 27.381947192s ago: executing program 5 (id=1109): socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x7a) socket$tipc(0x1e, 0x2, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x180, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='schedstat\x00') openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB='\a'], 0x0) 25.57985264s ago: executing program 5 (id=1113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setpriority(0x2, r1, 0x5) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/key-users\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000080)={0x2020}, 0x2020) 24.054649742s ago: executing program 5 (id=1114): socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_gettime(0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000002000)='./sys\x00', &(0x7f0000002040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0) read(r2, &(0x7f0000000c80)=""/265, 0x109) 18.019963566s ago: executing program 8 (id=1127): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x1000, 0x0, 0xffed, 0xa001}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x18f042, 0x124) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000008c0), 0x4) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x200) remap_file_pages(&(0x7f00008da000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x24010) pwrite64(r1, &(0x7f0000000000)="ff", 0x58200, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x4}, 'port1\x00', 0x89, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x200000, 0x0, 0x4875c99660ff2b28}) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x18c) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)=0x10) truncate(0x0, 0x8da6) socket$inet6(0xa, 0x802, 0x0) 16.990892088s ago: executing program 5 (id=1129): setns(0xc9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) lstat(0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'bond0\x00', @random='\x00\x00\x00\x00\x00 '}) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'sh\x00', 0x3b, 0x660f537e, 0x7f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000440)={{0x84, @multicast2, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x3, 0x1, 0x1}}, 0x44) 16.452126726s ago: executing program 8 (id=1130): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) socket$kcm(0x10, 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x108) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa6d9d000) socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 13.13597766s ago: executing program 6 (id=1135): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, 0x0) 11.986078726s ago: executing program 5 (id=1136): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0xbc6c, 0x4936, 0xc2, 0x1, r1, 0x6}, 0x50) connect$netlink(r1, &(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 11.671921129s ago: executing program 6 (id=1137): connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xbe, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) tkill(r2, 0xb) fsopen(&(0x7f0000000080)='binder\x00', 0x0) 10.540407211s ago: executing program 0 (id=1139): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) wait4(r3, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r3, 0x350, 0x10000) ptrace$pokeuser(0x6, r3, 0x388, 0xffff7fffffffff7f) 9.473417816s ago: executing program 6 (id=1140): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) timerfd_settime(0xffffffffffffffff, 0x2, 0x0, 0x0) 9.40019973s ago: executing program 8 (id=1141): bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@map, 0x4, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 7.054940159s ago: executing program 8 (id=1142): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000bc"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.01587172s ago: executing program 6 (id=1143): socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x41341) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x3291, 0x1000, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000940)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x2100, 0x1e5, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8026, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0x240, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x301}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 6.845768011s ago: executing program 1 (id=1144): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000011c0)="b9feddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) fcntl$setown(r1, 0x8, r0) openat$fault_inject(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 6.633497897s ago: executing program 0 (id=1145): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000980)=0x4000) 5.05438583s ago: executing program 1 (id=1146): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a807c8c6394", 0xf}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.75983255s ago: executing program 8 (id=1147): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406a05125000000000000109022400010000e80b0904000001030002000921fd7f000122e30109058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x862b01) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xe, {[@local=@item_4={0x3, 0x2, 0x2, "00c15100"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.752968891s ago: executing program 0 (id=1148): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x9, 0x3, 0x7, 0x0, 0x0, 0x81, 0xe1, 0x9, 0x1, 0x6, 0x9d, 0x80, 0x0, 0x3, 0x1000, 0x5, 0x0, 0xf, 0x40, '\x00', 0x4, 0xfffffffffffffff8}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) preadv(r0, &(0x7f0000001500)=[{&(0x7f0000000080)=""/4080, 0xff0}], 0x1, 0x1, 0x9) 4.48964207s ago: executing program 6 (id=1149): socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa35, 0x2, 0x1000002, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8197, 0x200, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 4.043601893s ago: executing program 0 (id=1150): unshare(0x20000600) userfaultfd(0x80001) epoll_create(0x8) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x3, 0xc95a, 0xfffffff3, 0x9, 0x6, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x80005, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x10000e, 0x40, 0x71, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x193, 0xffff, 0x12f, 0x2ea9c1f6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x43, 0x100, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x6, 0x5, 0x6, 0x4, 0xfb, 0x1, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x5, 0x8000, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x8, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x3, 0xb, 0x4, 0x5, 0x1005, 0xfffffffe, 0x1f0, 0xfffffffd, 0xfffffffe, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0xfffffffe, 0xcc52, 0xc, 0xfff, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3ff, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0x8, 0x5, 0x1, 0x6, 0x5, 0x0, 0xd2, 0x2, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x0, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0xc5a, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x400007f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x5, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x7, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.345568872s ago: executing program 6 (id=1151): r0 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x2) ioctl$BLKPG(r0, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x10000, 0x1}}) ioctl$BLKPG(r0, 0x1269, 0x0) 3.3367474s ago: executing program 1 (id=1152): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='wwnn=0x1000000010000001,', 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='wwnn=0x2000000010000001,wwpn=0x2000000010000002,lpwwnn=0x1000000010000001,lpwwpn=0x1000000010000002,roles=', 0x6a) 2.967820381s ago: executing program 0 (id=1153): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file1\x00', 0x7f7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000003c0)='.\x00', 0x5db) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x109000, 0x4a) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x641, 0x3b, r3, 0x0) fallocate(r1, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x13, r1, 0x2000) 2.764145211s ago: executing program 1 (id=1154): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r3, 0x0, 0x0, 0x1000f4) sendfile(r3, r3, 0x0, 0x400000007ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r4, 0x100000000000011, 0x2000, 0x2f93) 956.517559ms ago: executing program 8 (id=1155): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80000) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x26, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200"], 0x48) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 707.931028ms ago: executing program 1 (id=1156): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f0000000100)=0x4) 269.041961ms ago: executing program 1 (id=1157): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008080) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='source\x00', &(0x7f0000000100)='127.0.0.1:/export\x00', 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='e:my_read_msr1 msr/read_msr', 0x1b) write(r2, &(0x7f0000000140)='e:my_read_msr2 msr/read_msr', 0x1b) pread64(0xffffffffffffffff, 0x0, 0x0, 0x6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write(r3, &(0x7f0000000240), 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)='1', 0x1) 254.027431ms ago: executing program 5 (id=1158): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xc0}}, 0x40080) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000080)={0x3}) syz_clone3(&(0x7f0000000080)={0x190821400, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) bind$inet(r4, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) listen(r4, 0x5) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) write(r6, &(0x7f0000000400)='PASV\r\n', 0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x50, 0x1, 0x2, 0x5, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x2, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) r8 = accept4(r4, 0x0, 0x0, 0x0) write(r8, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)', 0x2c) r9 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r9, &(0x7f0000000700)={0x2, 0x1388, @loopback}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) readv(r9, &(0x7f0000002ac0)=[{&(0x7f0000000140)=""/191, 0xbf}, {&(0x7f0000000740)=""/204, 0xcc}, {0x0}, {&(0x7f0000001a40)=""/92, 0x5c}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 0s ago: executing program 0 (id=1159): getxattr(0x0, &(0x7f0000000300), 0x0, 0x0) kernel console output (not intermixed with test programs): ode [ 539.210641][ T8553] hsr_slave_1: entered promiscuous mode [ 539.407919][ T6269] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.545280][ T5272] 8021q: adding VLAN 0 to HW filter on device eth12 [ 539.741746][ T6269] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.877134][ T6269] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.461611][ T5713] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 541.502845][ T8600] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.503344][ T8600] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.503506][ T8600] bridge_slave_0: entered allmulticast mode [ 541.516020][ T8600] bridge_slave_0: entered promiscuous mode [ 541.552864][ T8600] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.552977][ T8600] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.553158][ T8600] bridge_slave_1: entered allmulticast mode [ 541.559343][ T8600] bridge_slave_1: entered promiscuous mode [ 541.611991][ T5713] usb 4-1: New USB device found: idVendor=056a, idProduct=00b3, bcdDevice=0.00 [ 541.613124][ T5713] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 541.613169][ T5713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11 [ 541.613199][ T5713] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 541.613244][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.622190][ T5713] usb 4-1: config 0 descriptor?? [ 541.922052][ T8721] loop3: detected capacity change from 0 to 512 [ 541.975362][ T8721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.975477][ T8721] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 543.048819][ T8600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.052609][ T8600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.136403][ T8741] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5612] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[8741] [ 543.139882][ T8741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.140489][ T8741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.601155][ T8600] team0: Port device team_slave_0 added [ 543.642474][ T8600] team0: Port device team_slave_1 added [ 543.852973][ T8600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.852993][ T8600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.853023][ T8600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.913751][ T8600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.913771][ T8600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.913800][ T8600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.184393][ T8749] loop6: detected capacity change from 0 to 1024 [ 544.200600][ T8749] hfsplus: failed to load extents file [ 544.396009][ T8600] hsr_slave_0: entered promiscuous mode [ 544.397680][ T8600] hsr_slave_1: entered promiscuous mode [ 544.398843][ T8600] debugfs: 'hsr0' already exists in 'hsr' [ 544.398865][ T8600] Cannot create hsr debugfs directory [ 545.116906][ T5713] usbhid 4-1:0.0: can't add hid device: -71 [ 545.117464][ T5713] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 545.121979][ T5713] usb 4-1: USB disconnect, device number 6 [ 545.164842][ T6269] bridge_slave_1: left allmulticast mode [ 545.164872][ T6269] bridge_slave_1: left promiscuous mode [ 545.165094][ T6269] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.226036][ T5612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.311141][ T6269] bridge_slave_0: left allmulticast mode [ 545.311170][ T6269] bridge_slave_0: left promiscuous mode [ 545.335583][ T6269] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.889414][ T8758] loop3: detected capacity change from 0 to 1764 [ 545.905929][ T8758] iso9660: Bad value for 'dmode' [ 548.116608][ T6269] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.145627][ T6269] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.164732][ T6269] bond0 (unregistering): Released all slaves [ 548.735204][ T8553] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 548.814141][ T8553] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 548.848528][ T8553] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 548.882103][ T8553] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 549.008805][ T8553] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 549.034103][ T8553] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 549.264463][ T8553] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 549.305387][ T8553] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 551.142452][ T6269] hsr_slave_0: left promiscuous mode [ 551.172751][ T6269] hsr_slave_1: left promiscuous mode [ 551.178579][ T6269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.178603][ T6269] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.210169][ T6269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 551.210196][ T6269] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.409729][ T6269] veth1_macvtap: left promiscuous mode [ 551.409779][ T6269] veth0_macvtap: left promiscuous mode [ 551.409881][ T6269] veth1_vlan: left promiscuous mode [ 551.409933][ T6269] veth0_vlan: left promiscuous mode [ 551.575409][ T8800] loop6: detected capacity change from 0 to 128 [ 552.281531][ T8800] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 555.497206][ T6269] team0 (unregistering): Port device team_slave_1 removed [ 555.587182][ T6269] team0 (unregistering): Port device team_slave_0 removed [ 555.960596][ T8823] loop3: detected capacity change from 0 to 1024 [ 556.112915][ T8823] hfsplus: failed to load extents file [ 557.336054][ T5272] 8021q: adding VLAN 0 to HW filter on device eth13 [ 557.503687][ T5741] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 557.793312][ T5741] usb 2-1: New USB device found: idVendor=056a, idProduct=00b3, bcdDevice=0.00 [ 557.807422][ T5741] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 557.807658][ T5741] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11 [ 557.807744][ T5741] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 557.807858][ T5741] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.929128][ T5741] usb 2-1: config 0 descriptor?? [ 558.331534][ T8828] loop1: detected capacity change from 0 to 512 [ 558.428831][ T8828] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 558.428972][ T8828] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 558.905295][ T8600] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 559.001963][ T8852] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5610] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[8852] [ 559.007534][ T8852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.009597][ T8852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.752363][ T8600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 559.754340][ T8600] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 559.845959][ T8600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 559.886798][ T8600] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 559.946919][ T8600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 559.972548][ T8553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.979362][ T8600] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 560.022129][ T8600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 560.113623][ T8553] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.204093][ T6264] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.204170][ T6264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.258429][ T6264] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.258552][ T6264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.813023][ T5741] usbhid 2-1:0.0: can't add hid device: -71 [ 560.813138][ T5741] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 560.855091][ T5741] usb 2-1: USB disconnect, device number 9 [ 560.887442][ T5610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.037473][ T8600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.171072][ T8600] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.224727][ T6234] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.224804][ T6234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.295290][ T6234] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.295369][ T6234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.055474][ T8882] loop6: detected capacity change from 0 to 512 [ 562.117179][ T8882] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 562.219876][ T8882] EXT4-fs error (device loop6) in ext4_process_orphan:346: Out of memory [ 562.219899][ T8882] loop6: lost filesystem error report for type 5 error -12 [ 562.221360][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 562.221383][ C0] EXT4-fs (loop6): initial error at time 1791282401: ext4_process_orphan:346 [ 562.221409][ C0] EXT4-fs (loop6): last error at time 1791282401: ext4_process_orphan:346 [ 562.223790][ T8882] EXT4-fs (loop6): 1 truncate cleaned up [ 562.355322][ T8882] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 563.063036][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.063101][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.316126][ T7652] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.662873][ T5840] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 563.704917][ T5272] 8021q: adding VLAN 0 to HW filter on device eth14 [ 563.881995][ T8902] loop3: detected capacity change from 0 to 512 [ 563.946265][ T8902] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 563.952771][ T8902] EXT4-fs error (device loop3) in ext4_process_orphan:346: Out of memory [ 563.952803][ T8902] loop3: lost filesystem error report for type 5 error -12 [ 563.954650][ T8902] EXT4-fs (loop3): 1 truncate cleaned up [ 564.075754][ T8902] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.118020][ T8553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.222609][ T8845] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 565.240427][ T8845] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 565.562840][ T8600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.782465][ T8931] loop6: detected capacity change from 0 to 512 [ 565.828916][ T8931] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 565.845549][ T8931] EXT4-fs error (device loop6) in ext4_process_orphan:346: Out of memory [ 565.845578][ T8931] loop6: lost filesystem error report for type 5 error -12 [ 565.851595][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 565.851632][ C1] EXT4-fs (loop6): initial error at time 1791282405: ext4_process_orphan:346 [ 565.851657][ C1] EXT4-fs (loop6): last error at time 1791282405: ext4_process_orphan:346 [ 565.918586][ T8931] EXT4-fs (loop6): 1 truncate cleaned up [ 565.947875][ T8931] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.818389][ T7652] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.485729][ T8949] loop6: detected capacity change from 0 to 4096 [ 567.528666][ T5612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.577491][ T8949] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 569.527816][ T8553] veth0_vlan: entered promiscuous mode [ 571.201121][ T8553] veth1_vlan: entered promiscuous mode [ 571.303667][ T5272] 8021q: adding VLAN 0 to HW filter on device eth15 [ 571.438997][ T7652] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.535526][ T8553] veth0_macvtap: entered promiscuous mode [ 571.618789][ T8553] veth1_macvtap: entered promiscuous mode [ 571.633430][ T8600] veth0_vlan: entered promiscuous mode [ 571.651645][ T8600] veth1_vlan: entered promiscuous mode [ 571.758416][ T8553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 571.758914][ T8600] veth0_macvtap: entered promiscuous mode [ 571.814649][ T8553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 571.817392][ T8600] veth1_macvtap: entered promiscuous mode [ 571.885358][ T6234] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.885434][ T6234] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.885493][ T6234] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.052635][ T8600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 572.053835][ T6260] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.147290][ T8600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.303692][ T6145] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.332009][ T6260] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.576963][ T6260] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.577005][ T6260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.577017][ T6260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.756837][ T6234] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.496180][ T6145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.496210][ T6145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.579561][ T6242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.579587][ T6242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.406483][ T6234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.406510][ T6234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.711951][ T9007] loop8: detected capacity change from 0 to 128 [ 578.363885][ T9007] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 579.244120][ T5272] 8021q: adding VLAN 0 to HW filter on device eth16 [ 579.432796][ T5713] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 579.487134][ T9017] loop3: detected capacity change from 0 to 512 [ 579.514126][ T9017] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 579.566685][ T9017] EXT4-fs (loop3): 1 truncate cleaned up [ 579.583007][ T9017] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 579.599212][ T5713] usb 2-1: New USB device found: idVendor=2a39, idProduct=3fd4, bcdDevice=0.40 [ 579.611043][ T5713] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 579.611115][ T5713] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 579.643218][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.643249][ T5713] usb 2-1: Product: syz [ 579.643266][ T5713] usb 2-1: Manufacturer: syz [ 579.643282][ T5713] usb 2-1: SerialNumber: syz [ 582.120754][ T33] audit: type=1800 audit(1791282421.712:29): pid=9017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.615" name="file1" dev="loop3" ino=13 res=0 errno=-22 [ 582.133333][ T9017] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.615: invalid indirect mapped block 4294967295 (level 1) [ 582.139207][ T9017] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.615: invalid indirect mapped block 65535 (level 2) [ 582.224124][ T9033] loop1: detected capacity change from 0 to 128 [ 582.345011][ T9033] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 582.348728][ T9033] ext4 filesystem being mounted at /138/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 582.530216][ T5713] usb 2-1: can't set config #1, error -71 [ 582.541632][ T5713] usb 2-1: USB disconnect, device number 11 [ 582.770305][ T5612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.358465][ T5610] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 585.819349][ T9060] loop6: detected capacity change from 0 to 512 [ 585.861552][ T9060] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 585.869604][ T9059] loop1: detected capacity change from 0 to 4096 [ 585.886590][ T9060] EXT4-fs error (device loop6) in ext4_process_orphan:346: Out of memory [ 585.886620][ T9060] loop6: lost filesystem error report for type 5 error -12 [ 585.896665][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 585.896693][ C1] EXT4-fs (loop6): initial error at time 1791282425: ext4_process_orphan:346 [ 585.896722][ C1] EXT4-fs (loop6): last error at time 1791282425: ext4_process_orphan:346 [ 585.940882][ T9060] EXT4-fs (loop6): 1 truncate cleaned up [ 585.968493][ T9060] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 585.994367][ T9059] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 587.692606][ T7652] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.119523][ T9076] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 590.932291][ T5610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.817097][ T9090] loop7: detected capacity change from 0 to 512 [ 591.890342][ T9090] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 591.891156][ T9090] EXT4-fs error (device loop7) in ext4_process_orphan:346: Out of memory [ 591.891180][ T9090] loop7: lost filesystem error report for type 5 error -12 [ 591.891341][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 591.891363][ C1] EXT4-fs (loop7): initial error at time 1791282431: ext4_process_orphan:346 [ 591.891390][ C1] EXT4-fs (loop7): last error at time 1791282431: ext4_process_orphan:346 [ 591.986050][ T9090] EXT4-fs (loop7): 1 truncate cleaned up [ 592.006478][ T9090] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 594.650329][ T8553] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.937133][ T9103] loop7: detected capacity change from 0 to 128 [ 594.981878][ T992] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 594.985643][ T9103] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 594.990055][ T9103] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 595.322321][ T992] usb 4-1: New USB device found: idVendor=056a, idProduct=00b3, bcdDevice=0.00 [ 595.323677][ T992] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 595.323721][ T992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11 [ 595.323845][ T992] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 595.323963][ T992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.955814][ T992] usb 4-1: config 0 descriptor?? [ 595.991640][ T8553] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 596.189318][ T9099] loop3: detected capacity change from 0 to 512 [ 596.287981][ T9099] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 596.288128][ T9099] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 596.988383][ T9120] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5612] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[9120] [ 596.990182][ T9120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.990650][ T9120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.307985][ T9130] loop6: detected capacity change from 0 to 4096 [ 599.364586][ T9130] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 599.985112][ T9122] fuse: Unknown parameter '00000000000000000000' [ 600.938380][ T9130] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 601.072555][ T992] usbhid 4-1:0.0: can't add hid device: -71 [ 601.072678][ T992] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 601.107915][ T992] usb 4-1: USB disconnect, device number 7 [ 602.289718][ T4927] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 602.303308][ T4927] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 602.314844][ T4927] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 602.332041][ T4927] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 602.333211][ T4927] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 602.420280][ T7652] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.431454][ T8518] Bluetooth: hci5: command tx timeout [ 604.687210][ T9163] loop6: detected capacity change from 0 to 4096 [ 604.773564][ T9163] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 606.511730][ T8518] Bluetooth: hci5: command tx timeout [ 606.858285][ T5612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.615688][ T9176] EXT4-fs: error -4 creating inode table initialization thread [ 607.615712][ T9176] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 607.788290][ T7652] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.843273][ T6269] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.594956][ T8518] Bluetooth: hci5: command tx timeout [ 609.003125][ T6269] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.120951][ T6269] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.264471][ T6269] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.389090][ T9197] Bluetooth: MGMT ver 1.23 [ 611.334818][ T8518] Bluetooth: hci5: command tx timeout [ 611.967960][ T6269] bridge_slave_1: left allmulticast mode [ 611.967990][ T6269] bridge_slave_1: left promiscuous mode [ 611.968230][ T6269] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.003517][ T6269] bridge_slave_0: left allmulticast mode [ 612.003548][ T6269] bridge_slave_0: left promiscuous mode [ 612.003775][ T6269] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.190104][ T9218] loop7: detected capacity change from 0 to 4096 [ 612.272992][ T9218] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 614.468433][ T9232] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 614.654010][ T6269] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 614.675157][ T6269] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 614.699738][ T6269] bond0 (unregistering): Released all slaves [ 614.844432][ T32] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 615.011344][ T32] usb 9-1: Using ep0 maxpacket: 32 [ 615.012645][ T32] usb 9-1: New USB device found: idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 615.013248][ T32] usb 9-1: config 0 has no interfaces? [ 615.020098][ T32] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.020128][ T32] usb 9-1: Product: syz [ 615.020145][ T32] usb 9-1: Manufacturer: syz [ 615.020162][ T32] usb 9-1: SerialNumber: syz [ 615.076057][ T32] usb 9-1: config 0 descriptor?? [ 615.715478][ T6269] hsr_slave_0: left promiscuous mode [ 615.730351][ T6269] hsr_slave_1: left promiscuous mode [ 615.739922][ T6269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 615.739947][ T6269] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.757139][ T6269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 615.757157][ T6269] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.825174][ T6269] veth1_macvtap: left promiscuous mode [ 615.825207][ T6269] veth0_macvtap: left promiscuous mode [ 615.825293][ T6269] veth1_vlan: left promiscuous mode [ 615.825365][ T6269] veth0_vlan: left promiscuous mode [ 616.721732][ T9248] loop6: detected capacity change from 0 to 1764 [ 616.722493][ T9248] iso9660: Bad value for 'dmode' [ 617.533727][ T5742] usb 9-1: USB disconnect, device number 2 [ 617.817804][ T8553] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.106933][ T6269] team0 (unregistering): Port device team_slave_1 removed [ 618.170256][ T6269] team0 (unregistering): Port device team_slave_0 removed [ 620.328160][ T9265] loop7: detected capacity change from 0 to 512 [ 620.982202][ T9265] EXT4-fs (loop7): Test dummy encryption mode enabled [ 621.177116][ T9265] EXT4-fs error (device loop7): ext4_orphan_get:1403: inode #11: comm syz.7.652: casefold flag without casefold feature [ 621.177152][ T9265] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 621.177654][ T9265] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.652: couldn't read orphan inode 11 (err -117) [ 621.177678][ T9265] loop7: lost filesystem error report for type 5 error -117 [ 621.219659][ T9265] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 623.059080][ T8553] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.272650][ T5272] 8021q: adding VLAN 0 to HW filter on device eth17 [ 623.299532][ T9149] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.299751][ T9149] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.299873][ T9149] bridge_slave_0: entered allmulticast mode [ 623.327640][ T9149] bridge_slave_0: entered promiscuous mode [ 623.339948][ T9149] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.341228][ T9149] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.355712][ T9149] bridge_slave_1: entered allmulticast mode [ 623.374072][ T9149] bridge_slave_1: entered promiscuous mode [ 624.319184][ T9149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.326148][ T9149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 624.424661][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.424724][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.514287][ T9288] loop1: detected capacity change from 0 to 512 [ 624.541749][ T9288] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 624.554494][ T9288] EXT4-fs error (device loop1) in ext4_process_orphan:346: Out of memory [ 624.554523][ T9288] loop1: lost filesystem error report for type 5 error -12 [ 624.563494][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 624.563520][ C1] EXT4-fs (loop1): initial error at time 1791282464: ext4_process_orphan:346 [ 624.563546][ C1] EXT4-fs (loop1): last error at time 1791282464: ext4_process_orphan:346 [ 624.599369][ T9288] EXT4-fs (loop1): 1 truncate cleaned up [ 624.599777][ T9149] team0: Port device team_slave_0 added [ 624.614734][ T9288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 624.661775][ T9149] team0: Port device team_slave_1 added [ 625.451387][ T992] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 625.504157][ T9149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 625.504177][ T9149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.504203][ T9149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 625.589044][ T9149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 625.589079][ T9149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.589109][ T9149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 625.658423][ T5610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.670253][ T992] usb 7-1: New USB device found: idVendor=056a, idProduct=00b3, bcdDevice=0.00 [ 625.688485][ T992] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 625.688536][ T992] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11 [ 625.688567][ T992] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 625.688612][ T992] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.755584][ T992] usb 7-1: config 0 descriptor?? [ 625.856165][ T9149] hsr_slave_0: entered promiscuous mode [ 625.857467][ T9149] hsr_slave_1: entered promiscuous mode [ 625.858357][ T9149] debugfs: 'hsr0' already exists in 'hsr' [ 625.858379][ T9149] Cannot create hsr debugfs directory [ 626.002622][ T9298] loop8: detected capacity change from 0 to 512 [ 626.041196][ T9298] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 626.044245][ T9290] loop6: detected capacity change from 0 to 512 [ 626.119175][ T9298] EXT4-fs (loop8): 1 truncate cleaned up [ 626.130749][ T9299] loop1: detected capacity change from 0 to 512 [ 626.143248][ T9298] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 626.202650][ T9299] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 626.206120][ T9299] EXT4-fs error (device loop1) in ext4_process_orphan:346: Out of memory [ 626.206146][ T9299] loop1: lost filesystem error report for type 5 error -12 [ 626.214785][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 626.214817][ C1] EXT4-fs (loop1): initial error at time 1791282465: ext4_process_orphan:346 [ 626.214845][ C1] EXT4-fs (loop1): last error at time 1791282465: ext4_process_orphan:346 [ 626.218771][ T9290] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.218885][ T9290] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 626.236487][ T9299] EXT4-fs (loop1): 1 truncate cleaned up [ 626.308242][ T9299] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.994245][ T9312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.996544][ T9312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.031451][ T33] audit: type=1800 audit(1791282466.482:30): pid=9311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.661" name="file1" dev="loop8" ino=13 res=0 errno=-22 [ 627.151294][ T9311] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.661: invalid indirect mapped block 4294967295 (level 1) [ 627.154891][ T9311] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.661: invalid indirect mapped block 65535 (level 2) [ 627.457438][ T8600] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.628488][ T992] usbhid 7-1:0.0: can't add hid device: -71 [ 628.628593][ T992] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 628.649327][ T7652] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.831373][ T9269] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 628.851410][ T9269] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 629.164983][ T992] usb 7-1: USB disconnect, device number 2 [ 629.248743][ T5272] 8021q: adding VLAN 0 to HW filter on device eth18 [ 634.899606][ T9149] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 634.940586][ T9149] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 634.954139][ T9149] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 634.987057][ T9149] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 634.997673][ T9149] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 635.018666][ T9149] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 635.026812][ T9149] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 635.073343][ T5610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.086904][ T9149] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 637.057292][ T9149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.148663][ T9149] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.198907][ T6269] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.199030][ T6269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.300779][ T6269] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.300906][ T6269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.500885][ T5272] 8021q: adding VLAN 0 to HW filter on device eth19 [ 638.757602][ T9381] loop8: detected capacity change from 0 to 512 [ 638.792163][ T9381] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 638.792907][ T9381] EXT4-fs error (device loop8) in ext4_process_orphan:346: Out of memory [ 638.792932][ T9381] loop8: lost filesystem error report for type 5 error -12 [ 638.802043][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 638.802066][ C1] EXT4-fs (loop8): initial error at time 1791282478: ext4_process_orphan:346 [ 638.802098][ C1] EXT4-fs (loop8): last error at time 1791282478: ext4_process_orphan:346 [ 638.849445][ T9381] EXT4-fs (loop8): 1 truncate cleaned up [ 638.896509][ T9381] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 639.834149][ T8600] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.422681][ T9417] netlink: 220 bytes leftover after parsing attributes in process `syz.7.666'. [ 642.745320][ T9416] loop6: detected capacity change from 0 to 764 [ 642.936598][ T9416] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 644.666233][ T9149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 646.230592][ T9436] loop1: detected capacity change from 0 to 2048 [ 646.284383][ T9436] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 648.227462][ T4927] Bluetooth: hci0: command 0x0406 tx timeout [ 648.509680][ T5272] 8021q: adding VLAN 0 to HW filter on device eth20 [ 648.681133][ T9149] veth0_vlan: entered promiscuous mode [ 648.711006][ T9149] veth1_vlan: entered promiscuous mode [ 648.819306][ T9149] veth0_macvtap: entered promiscuous mode [ 648.851767][ T9149] veth1_macvtap: entered promiscuous mode [ 648.891398][ T9453] loop1: detected capacity change from 0 to 4096 [ 648.939358][ T9453] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 648.993144][ T9149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.059026][ T9149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.121634][ T6145] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.122050][ T6145] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.122099][ T6145] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.122136][ T6145] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.474605][ T6234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.474628][ T6234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.390982][ T9459] EXT4-fs: error -4 creating inode table initialization thread [ 650.391010][ T9459] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 650.499827][ T6265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.499855][ T6265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.570817][ T5610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.255684][ T9465] loop7: detected capacity change from 0 to 1024 [ 652.256817][ T9465] EXT4-fs: Ignoring removed orlov option [ 652.256903][ T9465] ext4: Unknown parameter 'noacl' [ 652.451436][ T8518] Bluetooth: hci3: command 0x0406 tx timeout [ 652.459571][ T9473] loop1: detected capacity change from 0 to 128 [ 652.580134][ T9473] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 652.593510][ T9473] ext4 filesystem being mounted at /155/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 652.706085][ T9480] netlink: 20 bytes leftover after parsing attributes in process `syz.7.675'. [ 654.245568][ T5610] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 655.564077][ T4927] Bluetooth: hci1: command 0x0406 tx timeout [ 658.746143][ T9521] loop7: detected capacity change from 0 to 128 [ 658.821750][ T9521] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 658.837217][ T9521] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 661.243648][ T8553] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 663.048531][ T9546] loop7: detected capacity change from 0 to 2048 [ 663.107730][ T9546] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 669.288775][ T9594] loop6: detected capacity change from 0 to 2048 [ 670.367849][ T9594] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 670.367934][ T9594] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 671.096884][ T7652] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 672.852040][ T9611] loop6: detected capacity change from 0 to 1024 [ 672.864825][ T9611] EXT4-fs: Ignoring removed orlov option [ 672.864897][ T9611] ext4: Unknown parameter 'noacl' [ 674.201525][ T9616] netlink: 20 bytes leftover after parsing attributes in process `syz.6.702'. [ 677.725973][ T9629] loop6: detected capacity change from 0 to 1024 [ 677.742492][ T9629] EXT4-fs: Ignoring removed orlov option [ 677.742582][ T9629] ext4: Unknown parameter 'noacl' [ 678.160541][ T9634] netlink: 20 bytes leftover after parsing attributes in process `syz.6.710'. [ 680.826551][ T9643] loop9: detected capacity change from 0 to 512 [ 680.917431][ T9643] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 680.930690][ T9643] EXT4-fs error (device loop9) in ext4_process_orphan:346: Out of memory [ 680.930721][ T9643] loop9: lost filesystem error report for type 5 error -12 [ 680.931308][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 680.931330][ C1] EXT4-fs (loop9): initial error at time 1791282520: ext4_process_orphan:346 [ 680.931356][ C1] EXT4-fs (loop9): last error at time 1791282520: ext4_process_orphan:346 [ 680.944172][ T9643] EXT4-fs (loop9): 1 truncate cleaned up [ 680.965559][ T9643] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 682.022614][ T9645] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 682.045655][ T9645] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 685.651613][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 687.214020][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.214166][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.425956][ T10] usb 7-1: device descriptor read/all, error -71 [ 687.498475][ T9708] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 687.590149][ T4927] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 687.603330][ T4927] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 687.604192][ T4927] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 687.605482][ T4927] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 687.606870][ T4927] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 687.773469][ T9716] loop1: detected capacity change from 0 to 512 [ 687.791889][ T9716] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 687.831141][ T9716] EXT4-fs (loop1): 1 truncate cleaned up [ 687.848616][ T9716] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 689.415686][ T9718] loop6: detected capacity change from 0 to 2048 [ 689.527638][ T9718] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 689.653641][ T33] audit: type=1800 audit(1791282529.262:31): pid=9728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.721" name="file1" dev="loop1" ino=13 res=0 errno=-22 [ 689.689904][ T9728] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.721: invalid indirect mapped block 4294967295 (level 1) [ 689.691767][ T9728] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.721: invalid indirect mapped block 65535 (level 2) [ 689.713295][ T4927] Bluetooth: hci4: command tx timeout [ 690.039081][ T5610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.108525][ T9743] loop6: detected capacity change from 0 to 512 [ 691.158115][ T9654] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.180586][ T9743] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 691.181055][ T9743] EXT4-fs error (device loop6) in ext4_process_orphan:346: Out of memory [ 691.181077][ T9743] loop6: lost filesystem error report for type 5 error -12 [ 691.191334][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 691.191391][ C1] EXT4-fs (loop6): initial error at time 1791282530: ext4_process_orphan:346 [ 691.191449][ C1] EXT4-fs (loop6): last error at time 1791282530: ext4_process_orphan:346 [ 691.213887][ T9743] EXT4-fs (loop6): 1 truncate cleaned up [ 692.107769][ T4927] Bluetooth: hci4: command tx timeout [ 692.130017][ T9743] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 692.753920][ T9721] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 692.840291][ T9721] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 693.023615][ T7652] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.809888][ T4927] Bluetooth: hci4: command tx timeout [ 694.926156][ T208] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.387892][ T208] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.977870][ T4927] Bluetooth: hci4: command tx timeout [ 697.272790][ T208] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.424829][ T9772] loop8: detected capacity change from 0 to 1024 [ 697.443421][ T9772] EXT4-fs: Ignoring removed orlov option [ 697.443509][ T9772] ext4: Unknown parameter 'noacl' [ 697.838600][ T9776] netlink: 20 bytes leftover after parsing attributes in process `syz.8.724'. [ 698.686877][ T208] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.791405][ T9780] loop8: detected capacity change from 0 to 2048 [ 698.879816][ T9780] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 700.414978][ T9795] loop7: detected capacity change from 0 to 512 [ 700.458209][ T9795] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 700.459078][ T9795] EXT4-fs error (device loop7) in ext4_process_orphan:346: Out of memory [ 700.459107][ T9795] loop7: lost filesystem error report for type 5 error -12 [ 700.467750][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 700.467779][ C1] EXT4-fs (loop7): initial error at time 1791282540: ext4_process_orphan:346 [ 700.467807][ C1] EXT4-fs (loop7): last error at time 1791282540: ext4_process_orphan:346 [ 700.525308][ T9795] EXT4-fs (loop7): 1 truncate cleaned up [ 700.545173][ T9795] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 700.871612][ T9797] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 700.897932][ T9797] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 700.920549][ T9800] loop1: detected capacity change from 0 to 128 [ 700.944319][ T9800] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 701.721066][ T33] audit: type=1800 audit(1791282541.322:32): pid=9800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.732" name="file1" dev="loop1" ino=94 res=0 errno=-4 [ 701.992563][ T208] bridge_slave_1: left allmulticast mode [ 701.992593][ T208] bridge_slave_1: left promiscuous mode [ 701.992808][ T208] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.056792][ T208] bridge_slave_0: left allmulticast mode [ 702.056827][ T208] bridge_slave_0: left promiscuous mode [ 702.057043][ T208] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.683262][ T208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 703.690536][ T208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 703.714966][ T208] bond0 (unregistering): Released all slaves [ 703.720132][ T9819] loop1: detected capacity change from 0 to 4096 [ 703.769786][ T9819] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 705.288878][ T8553] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.893438][ T9826] EXT4-fs: error -4 creating inode table initialization thread [ 705.893479][ T9826] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 706.173230][ T5610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.545980][ T9711] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.548931][ T9711] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.549107][ T9711] bridge_slave_0: entered allmulticast mode [ 707.560719][ T9711] bridge_slave_0: entered promiscuous mode [ 707.585512][ T9711] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.585623][ T9711] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.585765][ T9711] bridge_slave_1: entered allmulticast mode [ 708.022581][ T9711] bridge_slave_1: entered promiscuous mode [ 711.597146][ T208] hsr_slave_0: left promiscuous mode [ 711.599399][ T208] hsr_slave_1: left promiscuous mode [ 711.600572][ T208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 711.600595][ T208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 711.610545][ T208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 711.610573][ T208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 711.668989][ T208] veth1_macvtap: left promiscuous mode [ 711.669039][ T208] veth0_macvtap: left promiscuous mode [ 711.669152][ T208] veth1_vlan: left promiscuous mode [ 711.669255][ T208] veth0_vlan: left promiscuous mode [ 713.363379][ T5741] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 713.566880][ T5741] usb 8-1: New USB device found: idVendor=056a, idProduct=00b3, bcdDevice=0.00 [ 713.578669][ T5741] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 713.578718][ T5741] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11 [ 713.578748][ T5741] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 713.578794][ T5741] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.633425][ T5741] usb 8-1: config 0 descriptor?? [ 715.500112][ T9864] loop7: detected capacity change from 0 to 512 [ 716.357841][ T9864] EXT4-fs warning (device loop7): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop7. [ 716.530009][ T5741] usbhid 8-1:0.0: can't add hid device: -71 [ 716.530126][ T5741] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 716.573383][ T5741] usb 8-1: USB disconnect, device number 2 [ 717.040503][ T208] team0 (unregistering): Port device team_slave_1 removed [ 717.306339][ T9892] loop7: detected capacity change from 0 to 2048 [ 717.448222][ T9892] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 717.448708][ T9892] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 717.903497][ T8553] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 717.993842][ T208] team0 (unregistering): Port device team_slave_0 removed [ 718.030546][ T9898] loop1: detected capacity change from 0 to 512 [ 718.069524][ T9898] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 718.136509][ T9898] EXT4-fs (loop1): 1 truncate cleaned up [ 718.146362][ T9898] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 718.575468][ T9903] loop8: detected capacity change from 0 to 2048 [ 719.188491][ T33] audit: type=1800 audit(1791282558.782:33): pid=9906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.744" name="file1" dev="loop1" ino=13 res=0 errno=-22 [ 719.395011][ T9906] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.744: invalid indirect mapped block 4294967295 (level 1) [ 719.395559][ T9906] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.744: invalid indirect mapped block 65535 (level 2) [ 719.467420][ T9903] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 719.467524][ T9903] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 719.745349][ T8600] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.807448][ T5610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.809326][ T9910] 9p: Bad value for 'rfdno' [ 720.138093][ T9711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.161811][ T9711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.203388][ T9915] loop1: detected capacity change from 0 to 4096 [ 720.221664][ T9915] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 720.308726][ T9921] 9p: Bad value for 'rfdno' [ 720.365492][ T9711] team0: Port device team_slave_0 added [ 720.383393][ T9711] team0: Port device team_slave_1 added [ 720.409483][ T9918] loop7: detected capacity change from 0 to 4096 [ 721.395886][ T9932] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 722.029729][ T9711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.044969][ T9711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.045019][ T9711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.047750][ T5610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.090352][ T9918] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 722.190611][ T9711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.190668][ T9711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.190714][ T9711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 725.186542][ T9711] hsr_slave_0: entered promiscuous mode [ 725.203722][ T9711] hsr_slave_1: entered promiscuous mode [ 725.218941][ T9711] debugfs: 'hsr0' already exists in 'hsr' [ 725.218974][ T9711] Cannot create hsr debugfs directory [ 725.290350][ T9937] loop1: detected capacity change from 0 to 4096 [ 725.393333][ T9937] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 725.429354][ T8553] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.418044][ T9953] EXT4-fs: error -4 creating inode table initialization thread [ 727.418086][ T9953] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 727.707054][ T5610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.914352][ T9966] loop8: detected capacity change from 0 to 1764 [ 729.934619][ T9966] iso9660: Bad value for 'dmode' [ 735.840806][ T9995] netlink: 16 bytes leftover after parsing attributes in process `syz.7.762'. [ 737.492692][T10001] loop6: detected capacity change from 0 to 128 [ 737.532963][T10001] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 739.066709][T10001] ext4 filesystem being mounted at /76/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 739.337115][ T7652] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 739.713180][ T9711] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 739.744656][ T9711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 739.757260][ T9711] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 739.774074][ T9711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 739.776807][ T9711] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 739.831430][ T9711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 739.832412][ T9711] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 739.859833][ T9711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 740.133126][ T9711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.260082][ T9711] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.418093][ T6145] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.418214][ T6145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.502901][ T6269] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.503043][ T6269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 742.009033][T10035] ERROR: Out of memory at tomoyo_realpath_from_path. [ 742.146032][ T5272] 8021q: adding VLAN 0 to HW filter on device eth21 [ 747.355949][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.356019][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.996552][ T8518] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 748.011432][ T8518] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 748.013286][ T8518] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 748.017271][ T8518] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 748.100538][ T8518] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 751.186950][T10083] loop1: detected capacity change from 0 to 1764 [ 751.777983][ T4927] Bluetooth: hci5: command tx timeout [ 751.825010][T10083] iso9660: Bad value for 'dmode' [ 754.955395][ T4927] Bluetooth: hci5: command tx timeout [ 755.538680][ T5272] 8021q: adding VLAN 0 to HW filter on device eth22 [ 756.973967][T10118] loop8: detected capacity change from 0 to 512 [ 756.982823][ T4927] Bluetooth: hci5: command tx timeout [ 757.040855][T10118] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 757.099804][T10118] EXT4-fs (loop8): 1 truncate cleaned up [ 757.140307][T10118] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 757.598903][ T33] audit: type=1800 audit(1791282597.102:34): pid=10126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.781" name="file1" dev="loop8" ino=13 res=0 errno=-22 [ 757.652825][T10126] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.781: invalid indirect mapped block 4294967295 (level 1) [ 757.876377][T10126] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.781: invalid indirect mapped block 65535 (level 2) [ 758.146548][ T8600] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.457245][ T6145] bridge_slave_1: left allmulticast mode [ 758.457280][ T6145] bridge_slave_1: left promiscuous mode [ 758.457507][ T6145] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.510879][ T6145] bridge_slave_0: left allmulticast mode [ 758.510902][ T6145] bridge_slave_0: left promiscuous mode [ 758.511077][ T6145] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.829460][T10139] loop1: detected capacity change from 0 to 1024 [ 758.830457][T10139] EXT4-fs: Ignoring removed bh option [ 758.858827][T10139] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 758.858925][T10139] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 758.859471][T10139] EXT4-fs error (device loop1): ext4_get_journal_inode:5927: inode #32: comm syz.1.784: iget: special inode unallocated [ 758.859501][T10139] loop1: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 758.859741][T10139] EXT4-fs (loop1): Remounting filesystem read-only [ 758.859815][T10139] EXT4-fs (loop1): no journal found [ 759.123588][T10142] loop7: detected capacity change from 0 to 2048 [ 759.161543][ T4927] Bluetooth: hci5: command tx timeout [ 759.634523][T10142] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 759.634649][T10142] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 760.010794][ T8553] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.808392][T10158] loop1: detected capacity change from 0 to 2048 [ 763.258711][T10158] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 763.258794][T10158] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 763.324924][T10153] loop7: detected capacity change from 0 to 4096 [ 763.573119][T10153] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 763.592071][ T5610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.529868][ T6145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 765.565442][ T6145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 765.617834][ T6145] bond0 (unregistering): Released all slaves [ 765.893520][ T8553] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.050597][T10176] loop8: detected capacity change from 0 to 512 [ 766.065096][ T5272] 8021q: adding VLAN 0 to HW filter on device eth23 [ 767.050309][T10176] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 767.076704][T10176] EXT4-fs error (device loop8) in ext4_process_orphan:346: Out of memory [ 767.076728][T10176] loop8: lost filesystem error report for type 5 error -12 [ 767.081329][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 767.081406][ C1] EXT4-fs (loop8): initial error at time 1791282606: ext4_process_orphan:346 [ 767.081585][ C1] EXT4-fs (loop8): last error at time 1791282606: ext4_process_orphan:346 [ 767.085569][T10176] EXT4-fs (loop8): 1 truncate cleaned up [ 767.108574][T10176] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 767.401796][ T6145] hsr_slave_0: left promiscuous mode [ 767.404242][ T6145] hsr_slave_1: left promiscuous mode [ 767.409652][ T6145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 767.432791][ T6145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 768.494120][ T6145] team0 (unregistering): Port device team_slave_1 removed [ 768.566300][ T6145] team0 (unregistering): Port device team_slave_0 removed [ 769.604969][T10187] loop7: detected capacity change from 0 to 512 [ 770.453819][T10187] EXT4-fs (loop7): Test dummy encryption mode enabled [ 770.474157][T10187] EXT4-fs error (device loop7): ext4_orphan_get:1403: inode #11: comm syz.7.802: casefold flag without casefold feature [ 770.474193][T10187] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 770.490577][T10187] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.802: couldn't read orphan inode 11 (err -117) [ 770.490614][T10187] loop7: lost filesystem error report for type 5 error -117 [ 770.491331][ C0] EXT4-fs (loop7): error count since last fsck: 2 [ 770.491407][ C0] EXT4-fs (loop7): initial error at time 1791282610: ext4_orphan_get:1403: inode 11 [ 770.491499][ C0] EXT4-fs (loop7): last error at time 1791282610: ext4_orphan_get:1408 [ 770.551064][T10187] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 770.752183][ T8553] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.830480][ T8600] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.858635][T10064] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.858824][T10064] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.858959][T10064] bridge_slave_0: entered allmulticast mode [ 772.860847][T10064] bridge_slave_0: entered promiscuous mode [ 772.894553][T10064] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.894733][T10064] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.894871][T10064] bridge_slave_1: entered allmulticast mode [ 772.896670][T10064] bridge_slave_1: entered promiscuous mode [ 773.173954][T10064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.198921][T10064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 773.420671][T10064] team0: Port device team_slave_0 added [ 773.489957][T10064] team0: Port device team_slave_1 added [ 773.782305][T10064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 773.782325][T10064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.782356][T10064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 773.838753][T10064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 773.838769][T10064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.838791][T10064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 774.309488][T10064] hsr_slave_0: entered promiscuous mode [ 774.316956][T10064] hsr_slave_1: entered promiscuous mode [ 774.332867][T10064] debugfs: 'hsr0' already exists in 'hsr' [ 774.332887][T10064] Cannot create hsr debugfs directory [ 775.083346][T10220] loop7: detected capacity change from 0 to 1024 [ 775.118547][T10220] EXT4-fs: Ignoring removed bh option [ 775.136327][T10220] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 775.136423][T10220] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 775.152085][T10220] EXT4-fs error (device loop7): ext4_get_journal_inode:5927: inode #32: comm syz.7.803: iget: special inode unallocated [ 775.152170][T10220] loop7: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 775.168925][T10220] EXT4-fs (loop7): Remounting filesystem read-only [ 775.169155][T10220] EXT4-fs (loop7): no journal found [ 775.671611][T10225] loop6: detected capacity change from 0 to 2048 [ 775.815014][T10225] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 775.815460][T10225] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 777.772599][ T7652] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.286944][ T5272] 8021q: adding VLAN 0 to HW filter on device eth24 [ 780.457815][T10244] loop7: detected capacity change from 0 to 4096 [ 780.506800][T10244] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 780.595103][T10238] fuse: Bad value for 'fd' [ 782.225609][T10244] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 782.888822][ T8553] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.050416][T10064] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 783.108839][T10064] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 783.109554][T10064] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 783.169094][T10064] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 783.183784][T10064] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 783.214788][T10064] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 783.236779][T10064] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 783.269665][T10064] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 783.927873][T10273] loop7: detected capacity change from 0 to 512 [ 784.771679][T10273] EXT4-fs (loop7): Test dummy encryption mode enabled [ 784.796659][T10273] EXT4-fs error (device loop7): ext4_orphan_get:1403: inode #11: comm syz.7.813: casefold flag without casefold feature [ 784.796686][T10273] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 784.797223][T10273] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.813: couldn't read orphan inode 11 (err -117) [ 784.797256][T10273] loop7: lost filesystem error report for type 5 error -117 [ 784.798904][T10273] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 784.998291][ T8553] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.349188][T10064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.419881][T10064] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.466271][ T6269] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.466387][ T6269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 785.530503][ T6262] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.530617][ T6262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 786.955362][T10284] loop1: detected capacity change from 0 to 1024 [ 786.967849][T10284] EXT4-fs: Ignoring removed bh option [ 786.983936][T10284] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 786.984038][T10284] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 786.986356][T10284] EXT4-fs error (device loop1): ext4_get_journal_inode:5927: inode #32: comm syz.1.811: iget: special inode unallocated [ 786.986387][T10284] loop1: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 786.986652][T10284] EXT4-fs (loop1): Remounting filesystem read-only [ 786.986727][T10284] EXT4-fs (loop1): no journal found [ 789.810457][T10300] loop8: detected capacity change from 0 to 4096 [ 790.268043][T10309] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 790.852985][T10316] loop1: detected capacity change from 0 to 2048 [ 790.920528][T10316] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 791.903267][T10064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 793.211166][T10064] veth0_vlan: entered promiscuous mode [ 793.288531][T10064] veth1_vlan: entered promiscuous mode [ 793.516196][T10064] veth0_macvtap: entered promiscuous mode [ 793.561063][T10064] veth1_macvtap: entered promiscuous mode [ 793.769974][T10064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 793.819006][T10064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 793.874513][ T6259] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.877582][ T6240] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.877631][ T6240] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.877668][ T6240] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.414523][ T6265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.414542][ T6265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.128540][ T6247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.128566][ T6247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.950409][T10354] loop8: detected capacity change from 0 to 512 [ 797.803808][T10354] EXT4-fs (loop8): Test dummy encryption mode enabled [ 797.834443][T10354] EXT4-fs error (device loop8): ext4_orphan_get:1403: inode #11: comm syz.8.825: casefold flag without casefold feature [ 797.834471][T10354] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 797.834983][T10354] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.825: couldn't read orphan inode 11 (err -117) [ 797.835006][T10354] loop8: lost filesystem error report for type 5 error -117 [ 797.840309][T10354] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 798.032082][ T8600] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 798.166286][T10360] loop6: detected capacity change from 0 to 1024 [ 798.181429][T10360] EXT4-fs: Ignoring removed orlov option [ 798.181516][T10360] ext4: Unknown parameter 'noacl' [ 798.584941][T10367] netlink: 20 bytes leftover after parsing attributes in process `syz.6.827'. [ 804.705203][T10398] loop2: detected capacity change from 0 to 2048 [ 805.128010][T10398] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 805.128118][T10398] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 805.453084][T10064] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 806.592571][T10403] loop8: detected capacity change from 0 to 1024 [ 806.608427][T10403] EXT4-fs: quotafile must be on filesystem root [ 807.535651][T10419] loop7: detected capacity change from 0 to 2048 [ 807.976626][T10419] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 807.976700][T10419] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 808.312011][ T8553] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.743837][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.743906][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.845205][T10427] loop7: detected capacity change from 0 to 4096 [ 808.880189][T10427] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 809.099015][T10431] loop6: detected capacity change from 0 to 512 [ 809.312661][T10431] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 809.331537][T10431] EXT4-fs error (device loop6) in ext4_process_orphan:346: Out of memory [ 809.331564][T10431] loop6: lost filesystem error report for type 5 error -12 [ 809.342320][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 809.342343][ C0] EXT4-fs (loop6): initial error at time 1791282648: ext4_process_orphan:346 [ 809.342368][ C0] EXT4-fs (loop6): last error at time 1791282648: ext4_process_orphan:346 [ 809.364964][T10431] EXT4-fs (loop6): 1 truncate cleaned up [ 809.417869][T10431] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 809.819266][T10439] loop8: detected capacity change from 0 to 1024 [ 809.835672][T10439] EXT4-fs: Ignoring removed bh option [ 810.576375][T10439] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 810.576488][T10439] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 810.578417][T10439] EXT4-fs error (device loop8): ext4_get_journal_inode:5927: inode #32: comm syz.8.837: iget: special inode unallocated [ 810.578452][T10439] loop8: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 810.581275][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 810.581327][ C0] EXT4-fs (loop8): initial error at time 1791282650: ext4_get_journal_inode:5927: inode 32 [ 810.581360][ C0] EXT4-fs (loop8): last error at time 1791282650: ext4_get_journal_inode:5927: inode 32 [ 810.581467][T10439] EXT4-fs (loop8): Remounting filesystem read-only [ 810.581803][T10439] EXT4-fs (loop8): no journal found [ 810.633208][T10445] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 810.869745][ T8553] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.031115][T10439] loop8: detected capacity change from 0 to 256 [ 812.576743][T10400] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 812.702362][T10400] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 815.963748][ T7652] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 817.541394][T10467] loop8: detected capacity change from 0 to 512 [ 817.560582][T10467] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 818.639573][T10467] EXT4-fs (loop8): 1 truncate cleaned up [ 818.640899][T10467] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 819.180786][ T33] audit: type=1800 audit(1791282658.682:35): pid=10477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.841" name="file1" dev="loop8" ino=13 res=0 errno=-22 [ 819.389970][T10477] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.841: invalid indirect mapped block 4294967295 (level 1) [ 819.407428][T10477] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.841: invalid indirect mapped block 65535 (level 2) [ 819.557081][ T8600] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.594637][T10479] loop6: detected capacity change from 0 to 512 [ 819.620562][T10479] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 819.648200][T10479] EXT4-fs (loop6): 1 truncate cleaned up [ 819.649421][T10479] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 820.167367][ T33] audit: type=1800 audit(1791282659.682:36): pid=10482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.843" name="file1" dev="loop6" ino=13 res=0 errno=-22 [ 820.511953][T10482] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.843: invalid indirect mapped block 4294967295 (level 1) [ 820.514246][T10482] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.843: invalid indirect mapped block 65535 (level 2) [ 820.702088][ T7652] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.205696][T10491] loop1: detected capacity change from 0 to 512 [ 821.422936][T10491] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 821.429648][T10491] EXT4-fs error (device loop1) in ext4_process_orphan:346: Out of memory [ 821.429719][T10491] loop1: lost filesystem error report for type 5 error -12 [ 821.441266][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 821.441328][ C0] EXT4-fs (loop1): initial error at time 1791282661: ext4_process_orphan:346 [ 821.441391][ C0] EXT4-fs (loop1): last error at time 1791282661: ext4_process_orphan:346 [ 821.961693][T10491] EXT4-fs (loop1): 1 truncate cleaned up [ 821.965405][T10491] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 822.312521][T10500] loop8: detected capacity change from 0 to 128 [ 822.406757][T10500] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 822.406787][T10500] FAT-fs (loop8): data area starts beyond volume (36 > 11) [ 822.406800][T10500] FAT-fs (loop8): Can't find a valid FAT filesystem [ 822.766874][T10501] loop7: detected capacity change from 0 to 1024 [ 822.790482][T10501] EXT4-fs: Ignoring removed orlov option [ 822.790544][T10501] ext4: Unknown parameter 'noacl' [ 823.658969][T10510] netlink: 20 bytes leftover after parsing attributes in process `syz.7.842'. [ 824.501331][T10470] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 824.631835][T10470] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 824.735448][T10517] netlink: 52 bytes leftover after parsing attributes in process `syz.8.852'. [ 825.612705][T10519] loop7: detected capacity change from 0 to 512 [ 825.642587][T10519] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 825.724442][T10519] EXT4-fs (loop7): 1 truncate cleaned up [ 825.758215][T10519] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 827.896803][ T33] audit: type=1800 audit(1791282667.392:37): pid=10529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.853" name="file1" dev="loop7" ino=13 res=0 errno=-22 [ 828.137276][T10529] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.853: invalid indirect mapped block 4294967295 (level 1) [ 828.139194][T10529] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.853: invalid indirect mapped block 65535 (level 2) [ 828.401065][ T8553] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 831.240523][T10541] loop7: detected capacity change from 0 to 1024 [ 832.046977][ T5610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 834.177767][T10563] loop1: detected capacity change from 0 to 512 [ 834.218661][T10563] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 834.267830][T10563] EXT4-fs (loop1): 1 truncate cleaned up [ 834.319717][T10563] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 834.883866][ T33] audit: type=1800 audit(1791282674.382:38): pid=10572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.860" name="file1" dev="loop1" ino=13 res=0 errno=-22 [ 835.107380][T10572] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.860: invalid indirect mapped block 4294967295 (level 1) [ 835.108709][T10572] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.860: invalid indirect mapped block 65535 (level 2) [ 835.256235][ T5610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 835.786025][ T8518] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 835.804651][ T8518] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 835.806224][ T8518] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 835.807906][ T8518] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 835.808860][ T8518] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 835.845014][ T992] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 836.034201][ T992] usb 2-1: New USB device found: idVendor=056a, idProduct=00b3, bcdDevice=0.00 [ 836.035314][ T992] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 836.035346][ T992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11 [ 836.035366][ T992] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 836.035396][ T992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.096295][ T992] usb 2-1: config 0 descriptor?? [ 836.326653][T10577] loop1: detected capacity change from 0 to 512 [ 836.410200][T10577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 836.410311][T10577] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 836.760044][T10595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 836.764028][T10595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 837.942971][ T4927] Bluetooth: hci4: command tx timeout [ 838.125757][ T33] audit: type=1326 audit(1791282677.732:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10603 comm="syz.8.867" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbb99e199 code=0x7ffc0000 [ 838.153907][ T33] audit: type=1326 audit(1791282677.762:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10603 comm="syz.8.867" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbb99e199 code=0x7ffc0000 [ 838.203843][ T33] audit: type=1326 audit(1791282677.812:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10603 comm="syz.8.867" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbb99e199 code=0x7ffc0000 [ 838.209074][ T33] audit: type=1326 audit(1791282677.812:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10603 comm="syz.8.867" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbb99e199 code=0x7ffc0000 [ 838.231383][ T33] audit: type=1326 audit(1791282677.822:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10603 comm="syz.8.867" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fdfbb99e199 code=0x7ffc0000 [ 838.289107][ T33] audit: type=1326 audit(1791282677.872:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10603 comm="syz.8.867" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbb99e199 code=0x7ffc0000 [ 838.289336][ T33] audit: type=1326 audit(1791282677.872:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10603 comm="syz.8.867" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdfbb99df02 code=0x7ffc0000 [ 838.357274][ T33] audit: type=1326 audit(1791282677.962:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10603 comm="syz.8.867" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fdfbb99df97 code=0x7ffc0000 [ 838.357812][ T33] audit: type=1326 audit(1791282677.962:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10603 comm="syz.8.867" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fdfbb95ae91 code=0x7ffc0000 [ 838.694018][ T992] usbhid 2-1:0.0: can't add hid device: -71 [ 838.694098][ T992] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 838.697546][ T992] usb 2-1: USB disconnect, device number 12 [ 838.800005][ T5610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 838.926818][ T6259] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.569438][ T6259] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.794237][T10633] loop6: detected capacity change from 0 to 16 [ 839.843922][T10633] erofs (device loop6): invalid ishare xattr prefix id 0 [ 840.064967][ T4927] Bluetooth: hci4: command tx timeout [ 841.403184][T10637] FAULT_INJECTION: forcing a failure. [ 841.403184][T10637] name fail_futex, interval 1, probability 0, space 0, times 1 [ 841.403245][T10637] CPU: 0 UID: 0 PID: 10637 Comm: syz.1.874 Not tainted syzkaller #0 PREEMPT(full) [ 841.403278][T10637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 841.403303][T10637] Call Trace: [ 841.403404][T10637] [ 841.403457][T10637] dump_stack_lvl+0xe8/0x150 [ 841.403585][T10637] should_fail_ex+0x3eb/0x540 [ 841.403692][T10637] get_futex_key+0x1b4/0x1580 [ 841.403724][T10637] ? kfree+0x4d/0x650 [ 841.403809][T10637] ? import_iovec+0x73/0xa0 [ 841.403881][T10637] ? __pfx_get_futex_key+0x10/0x10 [ 841.403902][T10637] ? ___sys_sendmsg+0x2b5/0x360 [ 841.403970][T10637] ? __lock_acquire+0x747/0x2de0 [ 841.404008][T10637] futex_wake+0x119/0x5f0 [ 841.404038][T10637] ? __pfx_futex_wake+0x10/0x10 [ 841.404077][T10637] do_futex+0x458/0x4e0 [ 841.404105][T10637] ? __pfx_do_futex+0x10/0x10 [ 841.404136][T10637] __se_sys_futex+0x3a8/0x450 [ 841.404166][T10637] ? __pfx___se_sys_futex+0x10/0x10 [ 841.404197][T10637] ? __x64_sys_futex+0x21/0xf0 [ 841.404223][T10637] do_syscall_64+0x166/0x520 [ 841.404342][T10637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.404394][T10637] ? clear_bhb_loop+0x70/0xc0 [ 841.404421][T10637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.404454][T10637] RIP: 0033:0x7fa16219e199 [ 841.404507][T10637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 841.404529][T10637] RSP: 002b:00007fa16303e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 841.404585][T10637] RAX: ffffffffffffffda RBX: 00007fa162425fa8 RCX: 00007fa16219e199 [ 841.404604][T10637] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa162425fac [ 841.404620][T10637] RBP: 00007fa162425fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 841.404644][T10637] R10: 0000000000000039 R11: 0000000000000246 R12: 0000000000000000 [ 841.404659][T10637] R13: 00007fa162426038 R14: 00007ffc99503400 R15: 00007ffc995034e8 [ 841.404696][T10637] [ 841.636829][ T6259] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.031064][ T6259] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.101255][ T4927] Bluetooth: hci4: command tx timeout [ 843.240865][T10650] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 843.897235][ T6259] bridge_slave_1: left allmulticast mode [ 843.897265][ T6259] bridge_slave_1: left promiscuous mode [ 843.897500][ T6259] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.945559][ T6259] bridge_slave_0: left allmulticast mode [ 843.945590][ T6259] bridge_slave_0: left promiscuous mode [ 843.945819][ T6259] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.181749][ T4927] Bluetooth: hci4: command tx timeout [ 844.251125][T10690] mmap: syz.7.887 (10690) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 844.976961][T10702] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 845.333343][ T6259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 845.338177][ T6259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 845.339863][ T6259] bond0 (unregistering): Released all slaves [ 846.035873][T10578] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.036104][T10578] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.036784][T10578] bridge_slave_0: entered allmulticast mode [ 846.068193][T10578] bridge_slave_0: entered promiscuous mode [ 846.300465][T10578] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.300577][T10578] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.300770][T10578] bridge_slave_1: entered allmulticast mode [ 846.336574][T10578] bridge_slave_1: entered promiscuous mode [ 846.499816][T10578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 846.535300][ T6259] hsr_slave_0: left promiscuous mode [ 846.540094][ T6259] hsr_slave_1: left promiscuous mode [ 846.551683][ T6259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 846.551754][ T6259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 846.571865][ T6259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 846.571889][ T6259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 846.619530][ T6259] veth1_macvtap: left promiscuous mode [ 846.619582][ T6259] veth0_macvtap: left promiscuous mode [ 846.619684][ T6259] veth1_vlan: left promiscuous mode [ 846.619754][ T6259] veth0_vlan: left promiscuous mode [ 846.920495][T10771] netlink: 8 bytes leftover after parsing attributes in process `syz.8.907'. [ 846.920535][T10771] netlink: 8 bytes leftover after parsing attributes in process `syz.8.907'. [ 846.945052][T10772] capability: warning: `syz.7.908' uses deprecated v2 capabilities in a way that may be insecure [ 847.116103][ T6259] team0 (unregistering): Port device team_slave_1 removed [ 847.151345][ T6259] team0 (unregistering): Port device team_slave_0 removed [ 847.372245][T10578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 847.596440][T10578] team0: Port device team_slave_0 added [ 847.627809][T10578] team0: Port device team_slave_1 added [ 847.668752][T10578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 847.668773][T10578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 847.668802][T10578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 847.670855][T10578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 847.670873][T10578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 847.670900][T10578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 847.813077][T10578] hsr_slave_0: entered promiscuous mode [ 847.814315][T10578] hsr_slave_1: entered promiscuous mode [ 847.815068][T10578] debugfs: 'hsr0' already exists in 'hsr' [ 847.815088][T10578] Cannot create hsr debugfs directory [ 847.909597][T10789] loop7: detected capacity change from 0 to 512 [ 847.912643][T10790] loop8: detected capacity change from 0 to 128 [ 848.725889][T10807] overlayfs: failed to resolve './file1': -2 [ 849.327989][T10824] kvm: pic: single mode not supported [ 849.328145][T10824] kvm: pic: level sensitive irq not supported [ 849.836036][T10842] loop8: detected capacity change from 0 to 256 [ 850.008966][T10578] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 850.033018][T10578] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 850.037665][T10578] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 850.099751][T10578] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 850.115155][T10578] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 850.143788][T10578] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 850.156005][T10578] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 850.174987][T10578] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 850.389001][T10862] smpboot: CPU 1 is now offline [ 850.505168][T10578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.566945][T10578] 8021q: adding VLAN 0 to HW filter on device team0 [ 850.593076][ T6233] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.593151][ T6233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 850.628767][ T6265] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.628843][ T6265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 851.202299][T10871] loop8: detected capacity change from 0 to 512 [ 851.203127][T10871] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 852.167905][T10898] loop8: detected capacity change from 0 to 16 [ 852.293891][T10898] erofs (device loop8): invalid ishare xattr prefix id 0 [ 852.920483][T10918] sysctl could not get directory: /fs -12 [ 853.165120][T10578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 854.229920][T10963] erspan0: entered promiscuous mode [ 854.256982][T10963] netlink: 8 bytes leftover after parsing attributes in process `syz.6.960'. [ 854.257076][T10963] erspan0: left promiscuous mode [ 854.556815][T10578] veth0_vlan: entered promiscuous mode [ 854.620697][T10578] veth1_vlan: entered promiscuous mode [ 854.789375][T10578] veth0_macvtap: entered promiscuous mode [ 854.838597][T10578] veth1_macvtap: entered promiscuous mode [ 854.918919][T10578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 854.969627][T10578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 855.012998][ T6233] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.028709][ T6145] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.029347][ T6145] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.029376][ T6145] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.471104][ T6265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.471123][ T6265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.644948][ T6233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.644965][ T6233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 856.487524][T11013] loop5: detected capacity change from 0 to 1024 [ 856.510831][T11013] EXT4-fs: Ignoring removed bh option [ 856.541003][T11013] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 856.541077][T11013] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 856.565604][T11013] EXT4-fs error (device loop5): ext4_get_journal_inode:5927: inode #32: comm syz.5.862: iget: special inode unallocated [ 856.565629][T11013] loop5: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 856.567062][T11013] EXT4-fs (loop5): Remounting filesystem read-only [ 856.567141][T11013] EXT4-fs (loop5): no journal found [ 858.534674][T11033] overlayfs: failed to get inode (-116) [ 858.545776][T11033] overlayfs: failed to get inode (-116) [ 860.244909][T11069] kvm: vcpu 0: requested 39424 ns lapic timer period limited to 200000 ns [ 860.245104][T11069] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 861.650223][T11099] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 862.444065][ T5742] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 862.489861][T11119] process 'syz.5.1002' launched '/dev/fd/4' with NULL argv: empty string added [ 862.648745][ T5742] usb 7-1: Using ep0 maxpacket: 32 [ 862.666038][ T5742] usb 7-1: unable to get BOS descriptor or descriptor too short [ 862.666075][ T5742] usb 7-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 862.668661][ T5742] usb 7-1: config 14 has an invalid interface number: 57 but max is 0 [ 862.668681][ T5742] usb 7-1: config 14 has no interface number 0 [ 862.668703][ T5742] usb 7-1: config 14 interface 57 has no altsetting 0 [ 862.720819][ T5742] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.720842][ T5742] usb 7-1: Product: syz [ 862.720853][ T5742] usb 7-1: Manufacturer: syz [ 862.720863][ T5742] usb 7-1: SerialNumber: syz [ 864.823616][ T5742] legousbtower 7-1:14.57: interrupt endpoints not found [ 864.848352][ T5742] usb 7-1: USB disconnect, device number 5 [ 869.264987][T11144] mmap: syz.5.1005 (11144): VmData 37593088 exceed data ulimit 14. Update limits or use boot option ignore_rlimit_data. [ 870.184868][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.184913][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.282614][T11167] overlayfs: statfs failed on './file0' [ 876.434231][ T5742] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 876.602592][ T5742] usb 2-1: Using ep0 maxpacket: 8 [ 876.608964][ T5742] usb 2-1: New USB device found: idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 876.609856][ T5742] usb 2-1: config 0 has no interfaces? [ 876.609880][ T5742] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.674612][ T5742] usb 2-1: config 0 descriptor?? [ 876.807246][ T8518] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 876.829048][ T8518] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 876.830258][ T8518] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 876.830901][ T8518] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 876.841782][ T8518] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 876.922681][ T992] usb 2-1: USB disconnect, device number 13 [ 877.077339][T11262] Config c/1 of g1 needs at least one function. [ 877.129313][T11262] udc dummy_udc.0: failed to start g1: -22 [ 877.129336][T11262] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 877.250714][T11262] UDC core: g1: couldn't find an available UDC or it's busy [ 877.761812][ T5742] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 879.378114][ T4927] Bluetooth: hci5: command tx timeout [ 879.393202][ T5742] usb 6-1: Using ep0 maxpacket: 32 [ 879.398929][ T5742] usb 6-1: unable to get BOS descriptor or descriptor too short [ 879.398987][ T5742] usb 6-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 879.412044][ T5742] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 879.412065][ T5742] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 879.412081][ T5742] usb 6-1: config 14 has no interface number 0 [ 879.412093][ T5742] usb 6-1: config 14 has no interface number 1 [ 879.412128][ T5742] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 879.412167][ T5742] usb 6-1: config 14 interface 57 has no altsetting 0 [ 879.412186][ T5742] usb 6-1: config 14 interface 228 has no altsetting 0 [ 879.433805][ T5742] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.433829][ T5742] usb 6-1: Product: syz [ 879.433841][ T5742] usb 6-1: Manufacturer: syz [ 879.433852][ T5742] usb 6-1: SerialNumber: syz [ 879.840919][ T5742] legousbtower 6-1:14.57: interrupt endpoints not found [ 879.854380][ T5742] legousbtower 6-1:14.228: interrupt endpoints not found [ 879.895163][ T5742] usb 6-1: USB disconnect, device number 2 [ 879.940894][ T6241] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.011305][ T5721] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 880.197212][ T5721] usb 7-1: unable to get BOS descriptor or descriptor too short [ 880.197258][ T5721] usb 7-1: New USB device found: idVendor=09c4, idProduct=0011, bcdDevice=6.38 [ 880.212466][ T5721] usb 7-1: config 114 has an invalid interface number: 240 but max is 0 [ 880.212491][ T5721] usb 7-1: config 114 has no interface number 0 [ 880.212566][ T5721] usb 7-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 880.212586][ T5721] usb 7-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 880.212606][ T5721] usb 7-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 880.212625][ T5721] usb 7-1: config 114 interface 240 has no altsetting 0 [ 880.214165][ T8777] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 880.241499][ T5721] usb 7-1: string descriptor 0 read error: -22 [ 880.241605][ T5721] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.286436][T11288] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 880.286571][T11288] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 880.340000][ T5721] ir_usb 7-1:114.240: IR Dongle converter detected [ 880.361565][ T8777] usb 2-1: Using ep0 maxpacket: 16 [ 880.363816][ T8777] usb 2-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 880.366452][ T8777] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 880.366472][ T8777] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 880.412543][ T8777] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.412567][ T8777] usb 2-1: Product: syz [ 880.412586][ T8777] usb 2-1: Manufacturer: syz [ 880.412617][ T8777] usb 2-1: SerialNumber: syz [ 880.515095][ T8777] usb 2-1: 0:2 : does not exist [ 880.520407][ T5721] usb 7-1: IRDA class descriptor not found, device not bound [ 880.658239][ T8777] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 880.876984][ T8777] usb 2-1: USB disconnect, device number 14 [ 880.912715][ T6241] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.919545][ T5721] usb 7-1: USB disconnect, device number 6 [ 881.327289][T11293] udevd[11293]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 881.383386][ T4927] Bluetooth: hci5: command tx timeout [ 881.414785][ T6241] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.137569][ T6241] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.579097][ T4927] Bluetooth: hci5: command tx timeout [ 884.012819][T11330] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1048'. [ 884.171829][ T8777] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 884.324673][ T8777] usb 7-1: New USB device found: idVendor=1235, idProduct=8012, bcdDevice=0.40 [ 884.341080][ T8777] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 884.370075][ T8777] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.370098][ T8777] usb 7-1: Product: syz [ 884.370108][ T8777] usb 7-1: Manufacturer: syz [ 884.370120][ T8777] usb 7-1: SerialNumber: syz [ 884.912099][ T8777] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 884.958027][ T8777] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 884.978668][ T6241] bridge_slave_1: left allmulticast mode [ 884.978693][ T6241] bridge_slave_1: left promiscuous mode [ 884.978866][ T6241] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.018290][ T6241] bridge_slave_0: left allmulticast mode [ 885.018310][ T6241] bridge_slave_0: left promiscuous mode [ 885.018455][ T6241] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.621428][ T4927] Bluetooth: hci5: command tx timeout [ 886.999635][ T8777] usb 7-1: USB disconnect, device number 7 [ 887.178963][T11293] udevd[11293]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 889.400108][ T33] kauditd_printk_skb: 149 callbacks suppressed [ 889.400124][ T33] audit: type=1800 audit(1791282729.002:197): pid=11358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1057" name="syzkaller0" dev="sda1" ino=2065 res=0 errno=-22 [ 889.547926][ T6241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 889.612354][ T6241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 889.651709][ T6241] bond0 (unregistering): Released all slaves [ 892.760021][ T6241] hsr_slave_0: left promiscuous mode [ 892.777001][ T6241] hsr_slave_1: left promiscuous mode [ 892.777715][ T6241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 892.777733][ T6241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 892.807463][ T6241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 892.807481][ T6241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 893.243268][ T6241] veth1_macvtap: left promiscuous mode [ 893.260154][ T6241] veth0_macvtap: left promiscuous mode [ 893.260246][ T6241] veth1_vlan: left promiscuous mode [ 893.260296][ T6241] veth0_vlan: left promiscuous mode [ 893.330648][ T6238] IPVS: starting estimator thread 0... [ 893.422471][T11393] IPVS: using max 37 ests per chain, 88800 per kthread [ 893.776976][T11401] file system registered [ 894.642547][ T8777] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 894.796620][ T8777] usb 2-1: New USB device found: idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 894.813418][ T8777] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 894.813443][ T8777] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 894.813460][ T8777] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 894.813479][ T8777] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 894.917075][ T8777] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.917097][ T8777] usb 2-1: Product: syz [ 894.917107][ T8777] usb 2-1: Manufacturer: syz [ 894.917118][ T8777] usb 2-1: SerialNumber: syz [ 896.328764][ T8777] usb 2-1: config 0 descriptor?? [ 898.040955][ T6241] team0 (unregistering): Port device team_slave_1 removed [ 898.156698][ T6241] team0 (unregistering): Port device team_slave_0 removed [ 899.027300][ T8777] adutux 2-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 899.057734][ T8777] usb 2-1: USB disconnect, device number 15 [ 900.794559][ T8777] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 900.942594][ T8777] usb 2-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 900.943737][ T8777] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 900.943756][ T8777] usb 2-1: config 0 has no interface number 0 [ 900.943784][ T8777] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 900.975869][ T8777] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.975890][ T8777] usb 2-1: Product: syz [ 900.975901][ T8777] usb 2-1: Manufacturer: syz [ 900.975911][ T8777] usb 2-1: SerialNumber: syz [ 901.054338][T11260] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.054414][T11260] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.054537][T11260] bridge_slave_0: entered allmulticast mode [ 901.084925][ T8777] usb 2-1: config 0 descriptor?? [ 901.096783][T11260] bridge_slave_0: entered promiscuous mode [ 901.143984][T11260] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.144059][T11260] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.144211][T11260] bridge_slave_1: entered allmulticast mode [ 901.175174][T11260] bridge_slave_1: entered promiscuous mode [ 901.250795][ T8777] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 901.393739][ T8777] usb 2-1: USB disconnect, device number 16 [ 901.418963][ T8777] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 901.464357][T11260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 901.498532][T11260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 901.680982][T11260] team0: Port device team_slave_0 added [ 901.710314][T11260] team0: Port device team_slave_1 added [ 901.871863][T11260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 901.871878][T11260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 901.910055][T11260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 901.932988][T11260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 901.933002][T11260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 901.933023][T11260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 902.269778][T11260] hsr_slave_0: entered promiscuous mode [ 902.284532][T11260] hsr_slave_1: entered promiscuous mode [ 903.751281][ T5840] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 904.005351][ T5840] usb 2-1: Using ep0 maxpacket: 32 [ 904.020949][ T5840] usb 2-1: unable to get BOS descriptor or descriptor too short [ 904.020987][ T5840] usb 2-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 904.041118][ T5840] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 904.041200][ T5840] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 904.041216][ T5840] usb 2-1: config 14 has no interface number 0 [ 904.041228][ T5840] usb 2-1: config 14 has no interface number 1 [ 904.041274][ T5840] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 904.041292][ T5840] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 904.041312][ T5840] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 904.041331][ T5840] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 904.041359][ T5840] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 904.041378][ T5840] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 904.041398][ T5840] usb 2-1: config 14 interface 57 has no altsetting 0 [ 904.041412][ T5840] usb 2-1: config 14 interface 228 has no altsetting 0 [ 904.047304][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.047324][ T5840] usb 2-1: Product: syz [ 904.047335][ T5840] usb 2-1: Manufacturer: syz [ 904.047346][ T5840] usb 2-1: SerialNumber: syz [ 904.728541][ T5840] legousbtower 2-1:14.57: interrupt endpoints not found [ 905.117024][T11495] program syz.8.1089 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 905.134658][ T5840] legousbtower 2-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 905.181907][ T5840] legousbtower 2-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 906.835313][ T8777] usb 2-1: USB disconnect, device number 17 [ 906.897477][ T8777] legousbtower 2-1:14.228: LEGO USB Tower #-160 now disconnected [ 907.852280][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 909.840849][T11534] netlink: 7 bytes leftover after parsing attributes in process `syz.8.1098'. [ 910.068325][T11260] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 910.100755][T11260] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 910.120750][T11260] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 910.145634][T11260] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 910.150992][T11260] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 910.195440][T11260] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 910.217400][T11260] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 910.221088][T11539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1100'. [ 910.251081][T11260] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 910.775374][T11551] syz_tun: entered allmulticast mode [ 911.044973][T11260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 911.205888][T11260] 8021q: adding VLAN 0 to HW filter on device team0 [ 911.247521][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.247597][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 911.299377][ T6266] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.299452][ T6266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 911.507212][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1104'. [ 912.148419][T11586] tipc: New replicast peer: 172.20.20.187 [ 912.149073][T11586] tipc: Enabled bearer , priority 10 [ 912.181604][ T8777] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 912.336059][ T8777] usb 6-1: Using ep0 maxpacket: 16 [ 912.345560][ T8777] usb 6-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 912.348506][ T8777] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 912.348526][ T8777] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 912.383959][ T8777] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.383980][ T8777] usb 6-1: Product: syz [ 912.383990][ T8777] usb 6-1: Manufacturer: syz [ 912.384002][ T8777] usb 6-1: SerialNumber: syz [ 912.458726][ T8777] usb 6-1: 0:2 : does not exist [ 912.643199][ T8777] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 912.722871][ T5742] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 912.843477][ T8777] usb 6-1: USB disconnect, device number 3 [ 912.874359][ T5742] usb 2-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 912.879521][ T5742] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 912.879554][ T5742] usb 2-1: config 0 has no interface number 0 [ 912.879583][ T5742] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 912.935547][ T5742] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.935569][ T5742] usb 2-1: Product: syz [ 912.935581][ T5742] usb 2-1: Manufacturer: syz [ 912.935593][ T5742] usb 2-1: SerialNumber: syz [ 912.989179][ T5742] usb 2-1: config 0 descriptor?? [ 913.024921][ T5742] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 913.207412][T11293] udevd[11293]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 913.264906][ T5840] tipc: Node number set to 3312322036 [ 913.573526][T11604] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 913.588114][ T6265] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 913.598408][ T225] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 913.609408][ T6265] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 913.609445][ T6265] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 915.177646][T11260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 915.302099][ C0] usb 2-1: yurex_control_callback - control failed: -2 [ 915.309082][ T5742] usb 2-1: USB disconnect, device number 18 [ 915.336005][ T5742] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 915.448870][T11260] veth0_vlan: entered promiscuous mode [ 915.499203][T11260] veth1_vlan: entered promiscuous mode [ 915.638658][T11260] veth0_macvtap: entered promiscuous mode [ 915.668356][T11260] veth1_macvtap: entered promiscuous mode [ 915.757273][T11260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 915.789878][T11260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 916.806316][ T6265] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.806661][ T6265] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.340241][ T6265] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.365626][ T6145] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.793823][ T225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.793841][ T225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.996230][ T225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.996247][ T225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.100810][T11635] device-mapper: ioctl: Invalid ioctl structure: name c, dev f800 [ 922.554613][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 925.602546][T11690] Dead loop on virtual device lo (net 83), fix it urgently! [ 925.602681][T11690] Dead loop on virtual device lo (net 83), fix it urgently! [ 925.602787][T11690] Dead loop on virtual device lo (net 83), fix it urgently! [ 925.603038][T11690] Dead loop on virtual device lo (net 83), fix it urgently! [ 925.604571][T11690] Dead loop on virtual device lo (net 83), fix it urgently! [ 925.604675][T11690] Dead loop on virtual device lo (net 83), fix it urgently! [ 925.664750][T11690] Dead loop on virtual device lo (net 83), fix it urgently! [ 925.664863][T11690] Dead loop on virtual device lo (net 83), fix it urgently! [ 925.664955][T11690] Dead loop on virtual device lo (net 83), fix it urgently! [ 925.665212][T11690] Dead loop on virtual device lo (net 83), fix it urgently! [ 927.115109][ T6234] IPVS: starting estimator thread 0... [ 927.202195][T11699] IPVS: using max 38 ests per chain, 91200 per kthread [ 929.462004][T11595] libceph: connect (1)[c::]:6789 error -101 [ 929.505942][T11595] libceph: mon0 (1)[c::]:6789 connect error [ 929.523194][T11709] ceph: No mds server is up or the cluster is laggy [ 929.665682][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 931.628035][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.628078][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.712169][T11724] FAULT_INJECTION: forcing a failure. [ 931.712169][T11724] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 931.712203][T11724] CPU: 0 UID: 0 PID: 11724 Comm: syz.6.1140 Not tainted syzkaller #0 PREEMPT(full) [ 931.712223][T11724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 931.712233][T11724] Call Trace: [ 931.712240][T11724] [ 931.712248][T11724] dump_stack_lvl+0xe8/0x150 [ 931.712276][T11724] should_fail_ex+0x3eb/0x540 [ 931.712307][T11724] _copy_from_user+0x2d/0xb0 [ 931.712420][T11724] get_itimerspec64+0xaa/0x310 [ 931.712450][T11724] ? do_futex+0x3e7/0x4e0 [ 931.712468][T11724] ? __pfx_get_itimerspec64+0x10/0x10 [ 931.712486][T11724] ? __pfx_do_futex+0x10/0x10 [ 931.712498][T11724] ? __fget_files+0x3a2/0x420 [ 931.712535][T11724] __x64_sys_timerfd_settime+0x149/0x240 [ 931.712569][T11724] ? __pfx___x64_sys_timerfd_settime+0x10/0x10 [ 931.712601][T11724] do_syscall_64+0x166/0x520 [ 931.712620][T11724] ? trace_irq_disable+0x3b/0x140 [ 931.712635][T11724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.712654][T11724] ? clear_bhb_loop+0x70/0xc0 [ 931.712672][T11724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.712688][T11724] RIP: 0033:0x7efeccd9e199 [ 931.712704][T11724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 931.712718][T11724] RSP: 002b:00007efecdbd4028 EFLAGS: 00000246 ORIG_RAX: 000000000000011e [ 931.712737][T11724] RAX: ffffffffffffffda RBX: 00007efecd025fa0 RCX: 00007efeccd9e199 [ 931.712749][T11724] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffffffffffffffff [ 931.712760][T11724] RBP: 00007efecce358e0 R08: 0000000000000000 R09: 0000000000000000 [ 931.712770][T11724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 931.712780][T11724] R13: 00007efecd026038 R14: 00007efecd025fa0 R15: 00007ffdb2661038 [ 931.712804][T11724] [ 934.692092][T11596] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 934.844785][T11596] usb 9-1: New USB device found: idVendor=056a, idProduct=5012, bcdDevice=0.00 [ 934.850336][T11596] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 934.850366][T11596] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 934.850396][T11596] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.898524][T11596] usb 9-1: config 0 descriptor?? [ 936.066385][T11596] wacom 0003:056A:5012.0001: unknown main item tag 0x0 [ 936.066421][T11596] wacom 0003:056A:5012.0001: unknown main item tag 0x0 [ 936.066453][T11596] wacom 0003:056A:5012.0001: unknown main item tag 0x0 [ 936.066472][T11596] wacom 0003:056A:5012.0001: unknown main item tag 0x0 [ 936.066490][T11596] wacom 0003:056A:5012.0001: unknown main item tag 0x0 [ 936.066507][T11596] wacom 0003:056A:5012.0001: unknown main item tag 0x0 [ 936.066525][T11596] wacom 0003:056A:5012.0001: unknown main item tag 0x0 [ 936.066543][T11596] wacom 0003:056A:5012.0001: unknown main item tag 0x0 [ 936.066560][T11596] wacom 0003:056A:5012.0001: unknown main item tag 0x0 [ 936.066578][T11596] wacom 0003:056A:5012.0001: unknown main item tag 0x0 [ 936.066966][T11596] wacom 0003:056A:5012.0001: ignoring exceeding usage max [ 936.186326][T11770] nvme_fcloop: unknown parameter or missing value 'roles=' [ 936.229812][T11773] 0x000000000000-0x000000010000 : "" [ 936.343719][T11596] usb 9-1: USB disconnect, device number 3 [ 938.114620][ T33] audit: type=1800 audit(1791282777.712:198): pid=11780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1154" name="syzkaller0" dev="sda1" ino=2065 res=0 errno=-22 [ 938.216928][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4 [ 938.682374][T11773] ftl_cs: FTL header not found. [ 939.012777][T11800] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1158'. [ 939.118524][ T6241] IPVS: starting estimator thread 0... [ 939.202478][T11805] IPVS: using max 38 ests per chain, 91200 per kthread [ 946.242148][ C0] sched: DL replenish lagged too much [ 993.652328][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.664449][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1049.851141][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1049.858339][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11786/1:b..l.. P11802/1:b..l.. [ 1049.869868][ C0] rcu: (detected by 0, t=10502 jiffies, g=84561, q=782 ncpus=1) [ 1049.877628][ C0] task:syz.1.1157 state:R running task stack:27592 pid:11802 tgid:11802 ppid:11799 task_flags:0x40004c flags:0x00080000 [ 1049.891156][ C0] Call Trace: [ 1049.894460][ C0] [ 1049.897405][ C0] __schedule+0x1b47/0x5b40 [ 1049.902002][ C0] ? __alloc_frozen_pages_noprof+0x24a/0x400 [ 1049.908024][ C0] ? irqentry_exit+0x218/0x920 [ 1049.912916][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1049.918192][ C0] ? __pfx___schedule+0x10/0x10 [ 1049.923089][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 1049.928523][ C0] preempt_schedule_common+0x7f/0xd0 [ 1049.933872][ C0] preempt_schedule_thunk+0x16/0x40 [ 1049.939110][ C0] _raw_spin_unlock+0x41/0x50 [ 1049.943891][ C0] __zap_vma_range+0x40e1/0x4f70 [ 1049.948909][ C0] ? __lock_acquire+0x747/0x2de0 [ 1049.953889][ C0] ? flush_tlb_mm_range+0x53f/0x1090 [ 1049.959206][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 1049.964538][ C0] ? mas_find+0x6d6/0xcb0 [ 1049.968931][ C0] unmap_vmas+0x38b/0x550 [ 1049.973281][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 1049.978150][ C0] ? mas_next_slot+0xc91/0xd70 [ 1049.982952][ C0] exit_mmap+0x293/0x9f0 [ 1049.987210][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1049.992007][ C0] ? __pfx_exit_aio+0x10/0x10 [ 1049.996707][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 1050.001972][ C0] __mmput+0x118/0x420 [ 1050.006073][ C0] exit_mm+0x18e/0x240 [ 1050.010151][ C0] do_exit+0x6a8/0x2380 [ 1050.014325][ C0] ? __pfx_do_exit+0x10/0x10 [ 1050.018925][ C0] ? rcu_is_watching+0x16/0xb0 [ 1050.023706][ C0] __x64_sys_exit+0x40/0x40 [ 1050.028222][ C0] x64_sys_call+0x18b4/0x18d0 [ 1050.033005][ C0] do_syscall_64+0x166/0x520 [ 1050.037602][ C0] ? trace_irq_disable+0x3b/0x140 [ 1050.042636][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.048717][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1050.053405][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.059306][ C0] RIP: 0033:0x7fa16219e199 [ 1050.063731][ C0] RSP: 002b:00007fa16303dfd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 1050.072509][ C0] RAX: ffffffffffffffda RBX: 00007fa162425fa0 RCX: 00007fa16219e199 [ 1050.080493][ C0] RDX: 00007fa16303e9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 1050.088469][ C0] RBP: 00007fa1622358e0 R08: 0000000000000000 R09: 0000000000000000 [ 1050.096451][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1050.104429][ C0] R13: 00007fa162426038 R14: 00007fa162425fa0 R15: 00007ffc995034e8 [ 1050.112430][ C0] [ 1050.115458][ C0] task:syz.8.1155 state:R running task stack:23760 pid:11786 tgid:11784 ppid:8600 task_flags:0x400140 flags:0x00080006 [ 1050.128952][ C0] Call Trace: [ 1050.132254][ C0] [ 1050.135310][ C0] __schedule+0x1b47/0x5b40 [ 1050.139835][ C0] ? lock_acquire+0x115/0x350 [ 1050.144548][ C0] ? __lock_acquire+0x747/0x2de0 [ 1050.149590][ C0] ? __pfx___schedule+0x10/0x10 [ 1050.154467][ C0] ? __lock_acquire+0x747/0x2de0 [ 1050.159461][ C0] preempt_schedule_irq+0x4b/0x90 [ 1050.164504][ C0] irqentry_exit+0x14f/0x920 [ 1050.169117][ C0] ? trace_irq_disable+0x3b/0x140 [ 1050.174157][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1050.180147][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 1050.185550][ C0] Code: ff ff ff e8 a0 c9 47 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 02 64 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 57 38 d9 [ 1050.205257][ C0] RSP: 0018:ffffc9000476fb10 EFLAGS: 00000292 [ 1050.211339][ C0] RAX: d2fc00b74a318100 RBX: 0000000000000000 RCX: 0000000000000046 [ 1050.219338][ C0] RDX: 00000000b46a8597 RSI: ffffffff8e6c0a90 RDI: ffffffff8c6df880 [ 1050.227321][ C0] RBP: ffff88802768ddc0 R08: ffffffff84dda962 R09: 0000000000000000 [ 1050.235303][ C0] R10: dffffc0000000000 R11: ffffed100548fc1f R12: ffffffff8ed5a260 [ 1050.243375][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 1050.251366][ C0] ? io_wq_enqueue+0x332/0x8a0 [ 1050.256267][ C0] ? io_wq_enqueue+0x332/0x8a0 [ 1050.261060][ C0] io_wq_enqueue+0x34f/0x8a0 [ 1050.265680][ C0] ? io_wq_enqueue+0x332/0x8a0 [ 1050.270456][ C0] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 1050.276278][ C0] io_submit_sqes+0x147a/0x2310 [ 1050.281236][ C0] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 1050.286805][ C0] ? ktime_get+0x1f5/0x220 [ 1050.291237][ C0] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1050.297224][ C0] ? clockevents_program_event+0x491/0x630 [ 1050.303132][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 1050.309316][ C0] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1050.314881][ C0] do_syscall_64+0x166/0x520 [ 1050.319510][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.325591][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1050.330287][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.336213][ C0] RIP: 0033:0x7fdfbb99e199 [ 1050.340652][ C0] RSP: 002b:00007fdfb9bf5f38 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1050.349120][ C0] RAX: ffffffffffffffda RBX: 0000200000000340 RCX: 00007fdfbb99e199 [ 1050.357110][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000008 [ 1050.365088][ C0] RBP: 0000000000000d3f R08: 0000000000000000 R09: 0000000000000008 [ 1050.373081][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000800 [ 1050.381096][ C0] R13: 0000200000000808 R14: 0000000000000e26 R15: 0000000000000000 [ 1050.389109][ C0] [ 1050.392141][ C0] rcu: rcu_preempt kthread starved for 509 jiffies! g84561 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 1050.403078][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1050.413071][ C0] rcu: RCU grace-period kthread stack dump: [ 1050.418964][ C0] task:rcu_preempt state:R running task stack:27496 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1050.432586][ C0] Call Trace: [ 1050.435898][ C0] [ 1050.438873][ C0] __schedule+0x1b47/0x5b40 [ 1050.443417][ C0] ? __lock_acquire+0x747/0x2de0 [ 1050.448377][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 1050.453503][ C0] ? __pfx___schedule+0x10/0x10 [ 1050.458371][ C0] ? lock_acquire+0x115/0x350 [ 1050.463060][ C0] ? schedule+0x90/0x2b0 [ 1050.467322][ C0] schedule+0x164/0x2b0 [ 1050.471544][ C0] schedule_timeout+0x152/0x2c0 [ 1050.476421][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1050.481874][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1050.487176][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1050.492991][ C0] ? prepare_to_swait_event+0x220/0x3e0 [ 1050.498568][ C0] ? prepare_to_swait_event+0x35e/0x3e0 [ 1050.504160][ C0] rcu_gp_fqs_loop+0x30c/0x1230 [ 1050.509055][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1050.515275][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1050.520587][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1050.525805][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1050.531625][ C0] rcu_gp_kthread+0x9c/0x340 [ 1050.536366][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1050.541613][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1050.546615][ C0] ? __kthread_parkme+0x199/0x1f0 [ 1050.551658][ C0] kthread+0x38b/0x480 [ 1050.555743][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1050.560973][ C0] ? __pfx_kthread+0x10/0x10 [ 1050.565580][ C0] ret_from_fork+0x514/0xb70 [ 1050.570190][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1050.575310][ C0] ? __switch_to+0xc78/0x1410 [ 1050.580059][ C0] ? __pfx_kthread+0x10/0x10 [ 1050.584655][ C0] ret_from_fork_asm+0x1a/0x30 [ 1050.589442][ C0] [ 1050.592470][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1050.598808][ C0] CPU: 0 UID: 0 PID: 3226 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) [ 1050.608529][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1050.618596][ C0] Workqueue: bat_events batadv_tt_purge [ 1050.624248][ C0] RIP: 0010:lock_acquire+0x51/0x350 [ 1050.629456][ C0] Code: 8b 05 fb 65 f2 11 48 89 44 24 50 0f 1f 44 00 00 65 8b 05 fa 65 f2 11 83 f8 08 0f 83 9b 01 00 00 89 c0 48 0f a3 05 67 00 d6 0e <73> 0d e8 e8 56 09 00 84 c0 0f 84 e2 01 00 00 83 3d 79 2f d6 0e 00 [ 1050.649070][ C0] RSP: 0018:ffffc90000006ec8 EFLAGS: 00000293 [ 1050.655413][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000002 [ 1050.663387][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8ed5a260 [ 1050.671367][ C0] RBP: ffffc900000070b0 R08: 0000000000000000 R09: 0000000000000000 [ 1050.679351][ C0] R10: ffffc90000006fa0 R11: fffff52000000dfb R12: ffffffff8ed5a260 [ 1050.687356][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000000 [ 1050.695349][ C0] FS: 0000000000000000(0000) GS:ffff888124cc0000(0000) knlGS:0000000000000000 [ 1050.704317][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1050.710927][ C0] CR2: 00007f5a0d086008 CR3: 0000000076e52000 CR4: 00000000003526f0 [ 1050.718927][ C0] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1050.726902][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1050.734886][ C0] Call Trace: [ 1050.738185][ C0] [ 1050.741133][ C0] __inet_dev_addr_type+0x17a/0x560 [ 1050.746426][ C0] ? __inet_dev_addr_type+0x159/0x560 [ 1050.751827][ C0] ? stack_depot_save_flags+0x33/0x7f0 [ 1050.757401][ C0] ? __inet_dev_addr_type+0x159/0x560 [ 1050.762809][ C0] ? __pfx___inet_dev_addr_type+0x10/0x10 [ 1050.768555][ C0] ? inet_addr_type_dev_table+0x25/0x190 [ 1050.774226][ C0] ? inet_addr_type_dev_table+0x25/0x190 [ 1050.779881][ C0] ? inet_addr_type_dev_table+0x25/0x190 [ 1050.785534][ C0] ip_route_me_harder+0x45a/0xfe0 [ 1050.790678][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 1050.796243][ C0] ? __alloc_skb+0x27a/0x7a0 [ 1050.800940][ C0] ? __cookie_v4_init_sequence+0x273/0x510 [ 1050.806790][ C0] ? kmem_cache_alloc_node_noprof+0x3b9/0x600 [ 1050.812894][ C0] synproxy_send_tcp+0x332/0x670 [ 1050.817963][ C0] synproxy_send_client_synack+0x89b/0xde0 [ 1050.823794][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 1050.830135][ C0] ? nft_jhash_init+0x8/0x640 [ 1050.835012][ C0] ? synproxy_pernet+0x45/0x270 [ 1050.839937][ C0] nft_synproxy_eval_v4+0x362/0x4e0 [ 1050.845179][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1050.851218][ C0] ? nf_ip_checksum+0x13c/0x510 [ 1050.856196][ C0] nft_synproxy_do_eval+0x389/0x5d0 [ 1050.861435][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1050.867193][ C0] ? __pfx_nft_ct_get_eval+0x10/0x10 [ 1050.872567][ C0] ? clockevents_program_event+0x491/0x630 [ 1050.878409][ C0] nft_do_chain+0x48d/0x1b10 [ 1050.883018][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 1050.888238][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1050.893302][ C0] ? ipt_do_table+0x2b9/0x15d0 [ 1050.898186][ C0] nft_do_chain_inet+0x360/0x4b0 [ 1050.903183][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1050.908683][ C0] ? ipt_do_table+0x2b9/0x15d0 [ 1050.913467][ C0] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 1050.918908][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1050.924375][ C0] nf_hook_slow+0xc5/0x220 [ 1050.928846][ C0] NF_HOOK+0x21f/0x3c0 [ 1050.932958][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1050.938955][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1050.943126][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1050.947726][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1050.953719][ C0] ? ip_local_deliver+0x113/0x190 [ 1050.958775][ C0] NF_HOOK+0x336/0x3c0 [ 1050.962879][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1050.968022][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1050.972209][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1050.976814][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1050.981936][ C0] ? ip_rcv_core+0x88d/0xd50 [ 1050.986557][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1050.991067][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1050.995581][ C0] process_backlog+0xa6b/0x18b0 [ 1051.000507][ C0] ? process_backlog+0x3de/0x18b0 [ 1051.005553][ C0] __napi_poll+0xaa/0x330 [ 1051.009916][ C0] net_rx_action+0x61d/0xf50 [ 1051.014532][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1051.019672][ C0] ? xfrm_dev_backlog+0x24b/0x3c0 [ 1051.024800][ C0] ? net_tx_action+0x5bb/0xc30 [ 1051.029597][ C0] ? net_tx_action+0xbff/0xc30 [ 1051.034391][ C0] handle_softirqs+0x223/0x840 [ 1051.039165][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 1051.043961][ C0] ? do_softirq+0x77/0xd0 [ 1051.048314][ C0] ? batadv_tt_local_purge+0x2d4/0x370 [ 1051.053796][ C0] do_softirq+0x77/0xd0 [ 1051.057983][ C0] [ 1051.061013][ C0] [ 1051.063959][ C0] __local_bh_enable_ip+0x100/0x140 [ 1051.069180][ C0] batadv_tt_local_purge+0x2d4/0x370 [ 1051.074496][ C0] ? process_scheduled_works+0x97a/0x1630 [ 1051.080226][ C0] batadv_tt_purge+0x35/0xa40 [ 1051.084971][ C0] ? rcu_is_watching+0x16/0xb0 [ 1051.089770][ C0] ? process_scheduled_works+0x97a/0x1630 [ 1051.095512][ C0] process_scheduled_works+0xc3d/0x1630 [ 1051.101102][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1051.107105][ C0] ? assign_work+0x3af/0x5d0 [ 1051.111713][ C0] rescuer_thread+0x84a/0x12a0 [ 1051.116490][ C0] ? rescuer_thread+0xb8/0x12a0 [ 1051.121373][ C0] kthread+0x38b/0x480 [ 1051.125490][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 1051.130705][ C0] ? __pfx_kthread+0x10/0x10 [ 1051.135340][ C0] ret_from_fork+0x514/0xb70 [ 1051.139950][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1051.145091][ C0] ? __switch_to+0xc78/0x1410 [ 1051.149783][ C0] ? __pfx_kthread+0x10/0x10 [ 1051.154396][ C0] ret_from_fork_asm+0x1a/0x30 [ 1051.159235][ C0]