last executing test programs: 2m7.240321544s ago: executing program 0 (id=154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() mount$tmpfs(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000280), 0x2000001, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x11, 0xfffffffffffffffa) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x47, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$HIDIOCGUCODE(r5, 0xc018480d, &(0x7f0000000000)={0x1, 0x200, 0x800, 0x76f, 0x96c}) sendfile(r4, r5, 0x0, 0x20000023896) 2m5.715341336s ago: executing program 0 (id=155): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000100)='io.pressure\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000740)='\x00', 0x1, 0xffff) 2m2.73427029s ago: executing program 0 (id=161): msgget$private(0x0, 0x193) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/54, 0x0}) 2m1.275038121s ago: executing program 0 (id=162): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40000) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r2 = dup(r1) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/30, 0x1e}], 0x1) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioperm(0x4, 0x8, 0x5) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_clone(0x2080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m55.837034621s ago: executing program 0 (id=175): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1a, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) write(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r3, 0xc138fd03, &(0x7f0000000300)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006364") ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x30, 0x0, 0xd55319eec59dfa33, 0xfffffffe, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x67}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 1m49.470340824s ago: executing program 0 (id=187): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1a, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) write(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r4, 0xc138fd03, &(0x7f0000000300)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006364") sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x30, r1, 0xd55319eec59dfa33, 0xfffffffe, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7, 0x67}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001900010000000000fedb9a25802000000011000500000000080002"], 0x2c}}, 0x0) 1m48.804042574s ago: executing program 32 (id=187): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1a, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) write(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r4, 0xc138fd03, &(0x7f0000000300)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006364") sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x30, r1, 0xd55319eec59dfa33, 0xfffffffe, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7, 0x67}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001900010000000000fedb9a25802000000011000500000000080002"], 0x2c}}, 0x0) 20.772407905s ago: executing program 3 (id=379): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) syz_open_dev$vcsa(0x0, 0x7, 0x840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={r1, &(0x7f00000003c0), &(0x7f0000000480)=@tcp6=r0, 0x1}, 0x20) 20.010521737s ago: executing program 3 (id=380): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) setrlimit(0xf, &(0x7f0000000180)={0xa58, 0x7f}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(&(0x7f0000009b00)=[{}], 0x20, 0x72) socket$key(0xf, 0x3, 0x2) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f00000000c0)={0xfffffffd, 0x6, 0xef, 0x1, 0x0, "2f3718cb92da1eafff06f5d4dccb1f5b5de0ef"}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x961a02, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) 19.853488388s ago: executing program 4 (id=381): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1a10c10, &(0x7f0000001e80)=ANY=[], 0xfc, 0x2b6, &(0x7f0000000740)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4024800) sendmsg$nl_route(r0, 0x0, 0x8000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f00000002c0)=""/43, 0x2b) getdents(r1, 0xfffffffffffffffd, 0x58) 18.506319968s ago: executing program 2 (id=382): sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x2080}, 0x18, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r5 = gettid() timer_create(0x9, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r5}, &(0x7f00000001c0)=0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000140)={{0x77359400}, {0x0, 0x9}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r6, 0x0, &(0x7f0000000080)={{0x77359400}, {r7, r8+10000000}}, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff8006]}, 0x0, 0x0, 0xfff8) landlock_restrict_self(r4, 0x0) syz_emit_vhci(0x0, 0x7) syz_emit_vhci(0x0, 0x22) 17.214979938s ago: executing program 3 (id=383): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) 15.596325391s ago: executing program 1 (id=385): msgget$private(0x0, 0x193) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/54, 0x0}) 14.224944791s ago: executing program 4 (id=386): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0xfff2, 0xfff1}}}, 0x24}}, 0x0) 13.922551136s ago: executing program 4 (id=387): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)='\n', 0x1}], 0x1, 0x4, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1c0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x300001e, &(0x7f0000001e80)=ANY=[@ANYBLOB="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", @ANYRES16=0x0], 0xfc, 0x2b8, &(0x7f0000000740)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x60) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, 0x0) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r2 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) getgid() lstat(&(0x7f0000000180)='./dev/ttyUSB0\x00', &(0x7f0000000240)) r3 = dup2(r2, r2) write$P9_RSTATu(r3, 0x0, 0x0) syz_usb_connect(0x5, 0x47, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040cd0607010001010203010902350001010080fa0904000005ff00000007058102400001070501024000010705830240000107050302"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0x2, 0x0) 12.576363716s ago: executing program 1 (id=388): syz_clone(0x0, 0x0, 0x3c, 0x0, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000003c0)='.\x00', 0x5db) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 12.216614641s ago: executing program 2 (id=389): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r3, 0xfffffffffffffffe, 0x0}, 0x20) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ptrace$getregset(0x4204, 0x0, 0x204, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000003c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@test_dummy_encryption_v1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nobh}, {@nombcache}, {@noquota}]}, 0x2, 0x445, &(0x7f0000000780)="$eJzs28tvG1UXAPAz4yT9+voSqvLoAwgURHklTVpKF2xAILEACQkWZRmStCp1G9QEiVYRBITKElVixQaxROIvYAUbBKyQ2MIeVapQNi2sjMYeJ7ZjO486cYh/P2mce2fGvud45tp35sYB9Kzh7CGJ2BcRv0fEYKVav8Nw5c+dxfnJvxfnJ5Mold78Kynvd3txfrK6a/V5e6uVvoj00ySONGl39uq1ixPF4vSVvD46d+m90dmr1569cGni/PT56cvjZ86cOjn2/Onx5zqSZ5bX7cMfzhw99OrbN16fPHvjnZ+/Tar5N+TRIcPtNj5eKnW4ue7aX1NO+roYCOtSqHTT6C/3/8EoxPLBG4xXPulqcMCmKpVKpftab14oATtYEt2OAOiO6hd9dv1bXbZo6LEt3HqxcgGU5X0nXypb+iLN9+lvuL7tpOGIOLvwz1fZEptzHwIAoM732fjnmWbjvzRq7wv9P59DGYqIeyLiQEScjoiDEXFvRHnf+yPigbpXT1dtv3GSZOX4J7254eTWIBv/vZDPbdWP/5ZiHyrktf3l/PuTcxeK0yfy9+R49O/K6mNt2vjh5d8+b7WtdvyXLVn71bFgHsfNvl31z5mamJu4m5xr3fo44nBfs/yTpZmAJCIORcThDbZx4alvjrbatnr+bXRgnqn0dcQTleO/EA35VyXt5ydH/xfF6ROj1bNipV9+vf5Gq/bvKv8OyI7/nqbn/1L+Q0ntfO3sel79yyezx+t/fNbymmaj5/9A8lbdug8m5uaujEUMJK9Vgq5dP96w3/jy/ln+x4817/8HYvmdOBIR2Un8YEQ8FBEP57E/EhGPRsSxNu/CTy899u7G899cWf5T6zr+y4WBaFzTvFC4+ON3dY0OrSf/7PifKpeO52vW8vm3lrjWezYDAADAf1UaEfsiSUeWymk6MlL5H/6DsSctzszOPX1u5v3LU5XfCAxFf1q90zVYcz90LL+sr9bHG+on8/vGXxR2l+sjkzPFqW4nDz1ub4v+n/mz0O3ogE3n91rQu/R/6F36P/Qu/R96V5P+v7sbcQBbr9n3/0ddiAPYeg3937Qf9BDX/9C7NtL/fWbAztC2Lw9sXRzAlprdHav/SF5BYUUh0m0Rxo4qxDbqjN3+ZAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiMfwMAAP//e9nmsQ==") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$system_posix_acl(&(0x7f00000006c0)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x1, 0x2}, [{0x2, 0x7, 0xee01}, {0x2, 0x3}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x4}], {}, {0x20, 0x7}}, 0x4c, 0x3) 11.133553577s ago: executing program 2 (id=390): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==") rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000140)='./file0/file0\x00') socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xffffffffffffffa4}, 0x800, 0x0, 0x3, 0x0, 0x40, 0x8}, 0x20) close_range(r1, 0xffffffffffffffff, 0x400000000000000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x519041, 0x13) r4 = socket(0x10, 0x3, 0x0) epoll_create1(0x0) r5 = fanotify_init(0x200, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x7a) fanotify_mark(r5, 0x1, 0x48000016, 0xffffffffffffffff, 0x0) r6 = dup3(r3, r4, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r6, 0x29, 0xcf, &(0x7f0000000040)=0x5, 0x4) 9.779624296s ago: executing program 4 (id=391): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) 9.504160111s ago: executing program 1 (id=392): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x20, 0x1405, 0x131, 0x0, 0x0, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}]}, 0x20}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r2, &(0x7f00000007c0)='\v', 0x1) r3 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) write$char_usb(r2, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_names\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = socket$key(0xf, 0x3, 0x2) close_range(r5, r3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x2517e, &(0x7f0000000740)={0x0, 0x9aa, 0x1000, 0x2, 0x1cb}, &(0x7f00000007c0), 0x0, &(0x7f0000000840)) read$eventfd(r4, &(0x7f0000000000), 0x8) syz_usb_ep_read(r0, 0x1, 0xa1, &(0x7f0000000680)=""/161) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r8, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x100000008, 0x7f, 0x1, 0x0, 0x2, 0xfffffffffffff804, 0x0, 0x0, 0x0, 0x102000000000000, 0x7, 0x2, 0x1, 0x8], 0xeeef0000, 0x4fb40}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1, 0x3}, 0x10) ioctl$KVM_SET_GUEST_DEBUG_x86(r8, 0x4048ae9b, &(0x7f0000000380)={0x40000, 0x0, {[0x7a, 0x7, 0x2, 0xbdf1, 0x6, 0x6, 0x0, 0xfffffffffffffffd]}}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 8.976340858s ago: executing program 3 (id=393): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000462, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0, 0x2d7, &(0x7f0000000840)="$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") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x106000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.615740798s ago: executing program 2 (id=394): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) setrlimit(0xf, &(0x7f0000000180)={0xa58, 0x7f}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(&(0x7f0000009b00)=[{}], 0x20, 0x72) socket$key(0xf, 0x3, 0x2) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f00000000c0)={0xfffffffd, 0x6, 0xef, 0x1, 0x0, "2f3718cb92da1eafff06f5d4dccb1f5b5de0ef"}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x961a02, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) 6.17971058s ago: executing program 4 (id=395): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1a, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) write(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r4, 0xc138fd03, &(0x7f0000000300)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006364") ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x30, r1, 0xd55319eec59dfa33, 0xfffffffe, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x67}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 5.747172486s ago: executing program 2 (id=396): msgget$private(0x0, 0x193) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/54, 0x0}) 4.441772455s ago: executing program 4 (id=397): sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x2080}, 0x18, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r5 = gettid() timer_create(0x9, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r5}, &(0x7f00000001c0)=0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000140)={{0x77359400}, {0x0, 0x9}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r6, 0x0, &(0x7f0000000080)={{0x77359400}, {r7, r8+10000000}}, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff8006]}, 0x0, 0x0, 0xfff8) landlock_restrict_self(r4, 0x0) syz_emit_vhci(0x0, 0x7) syz_emit_vhci(0x0, 0x22) 4.225578838s ago: executing program 1 (id=398): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, 0x0, &(0x7f0000000040)) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, r4) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c9"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) 2.338576466s ago: executing program 3 (id=399): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./bus\x00', 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="747a3d5554432c756e695f786c6174653d312c646973636172642c757466383d302c756e695f786c6174653d312c726f6469722c757466383d312c00ee284a015f4d897833fb742704c70630c7e3804afc5fe645f66ca614e17a7c3e5fcafc620b6af31b1896c6c50b36c73b7ad41b37f80916dee79d4e30902beed2"], 0x1, 0x247, &(0x7f0000000840)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x7f, 0x204, 0x0, 0x0, 0x20, 0x11, "79820fde98abdd00b771eecbbba14da08fe8cfcf2d39005755e339df6e3474ee07e13a269fce2bb3dc5ed34394903821e81be586d9ee749d76a7285644943ebe", "ba646f857993f0c5787944d335671e614090022d722436df22213419a5999377aead1d59f9928abd899cc24fbe73d652739fc43c0e45ac5209ccdc91ae82cb81", "e462775f9527ad4d3ff445ff0000008010cdbbf76e69950600", [0x1ce, 0x20000001]}) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000180)='./file2\x00', 0x2204002, &(0x7f0000000240), 0x1, 0x252, &(0x7f0000000480)="$eJzs2r+LHGUYB/BnziQXL1x2xV8kjS+KqM2Qu9oih+RAPFA0q0RBMvH2dLlx97hZFlbEbKWtf4KFlVjaCZLS5hr/Agu7a1IeKI5sZmPcEIWgyar5fJp54J3vvu+7s/vyFHP44ucf7u5U+U4xjKUsi6XzMYmjLNqxFDdN4oXnLn0/iUtvv7KxtXXh9ZQ2Ny6uraeUTj/13Tsff/30teGpN785/e1yHLTfPby+/tPBEwdnDn+9+EGvSr0q9QfDVKQrg8GwuFJ203av2s1Teq3s1ssRvX7V3Z8b3ykHe3vjVPS3V1f29rtVlYr+OO12x2k4SMP9cSreL3r9lOd5Wl0J/o7OV0ermxH18ctR1/XDX8Spa7H6Y7QieyRlj57PHr+cPTnJzlyv69ail8o9cVTX9az0/B9Ab9w61E9GlJ+NOqNOc23GN3aiF2V041y04peYHhMzTb358taFc+mGdnxaXh11fq7renp9aD6/Fq1o3zm/1uTfmi1pOv/VUWc5ViKOR8zy69GKx+6cX2/yqZl/NMufjOefiThxc/48WvHDezGIMranP/Y/5D9ZS+mlV7duy5+9cR8AwP9Nnn7Xnu9/mv4tz/9svMnfRX94W391LM4eW+zeiajGH+0WZdnd/08V2T375HK5+V7mh579cuFbVij+seLE7N//V/cs8lTifrn10Be9EgAAAAAAAAAAAO7G/XjlcNF7BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/t1+CwAA//9tWMiB") openat(0xffffffffffffff9c, 0x0, 0x143042, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 2.133874489s ago: executing program 1 (id=400): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001b40)='./file1\x00', 0x208008de, &(0x7f0000000b40)=ANY=[], 0x80, 0x150a, &(0x7f0000002080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) write$binfmt_elf32(r0, &(0x7f0000004000)=ANY=[], 0x1358) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0) fstat(0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f00000035c0)={0x2020}, 0x2020) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x280000, 0x0) 1.048492635s ago: executing program 3 (id=401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x4200, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) 78.799539ms ago: executing program 1 (id=402): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)={[{@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@lazytime}, {@nouid32}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3a}}, {@dioread_lock}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") 0s ago: executing program 2 (id=403): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@test_dummy_encryption}, {}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0xd800, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000000)={0xfffffdb0}) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 53.229577][ T5437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.248038][ T5437] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.224' (ED25519) to the list of known hosts. syzkaller login: [ 75.449555][ T5763] cgroup: Unknown subsys name 'net' [ 75.614315][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.375320][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.638095][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.649315][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.657705][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.666112][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.667864][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.680818][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.683029][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.688174][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.698277][ T5789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.710854][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.725079][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.732454][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.739702][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.740506][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.746979][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.755584][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.762997][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.768940][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.776451][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.782708][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.790249][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.828275][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.844602][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.860600][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.213847][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 80.346250][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 80.358340][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 80.394163][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 80.464235][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.471574][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.479433][ T5776] bridge_slave_0: entered allmulticast mode [ 80.486259][ T5776] bridge_slave_0: entered promiscuous mode [ 80.517549][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.524746][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.532471][ T5776] bridge_slave_1: entered allmulticast mode [ 80.540120][ T5776] bridge_slave_1: entered promiscuous mode [ 80.636285][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.643628][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.651015][ T5778] bridge_slave_0: entered allmulticast mode [ 80.657936][ T5778] bridge_slave_0: entered promiscuous mode [ 80.677258][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.704731][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.712411][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.720108][ T5778] bridge_slave_1: entered allmulticast mode [ 80.726906][ T5778] bridge_slave_1: entered promiscuous mode [ 80.733996][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.741381][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.748906][ T5777] bridge_slave_0: entered allmulticast mode [ 80.755684][ T5777] bridge_slave_0: entered promiscuous mode [ 80.765179][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.784053][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.791399][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.799152][ T5775] bridge_slave_0: entered allmulticast mode [ 80.805956][ T5775] bridge_slave_0: entered promiscuous mode [ 80.823945][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.831440][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.838907][ T5777] bridge_slave_1: entered allmulticast mode [ 80.845843][ T5777] bridge_slave_1: entered promiscuous mode [ 80.864399][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.871636][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.879333][ T5775] bridge_slave_1: entered allmulticast mode [ 80.886065][ T5775] bridge_slave_1: entered promiscuous mode [ 80.923095][ T5776] team0: Port device team_slave_0 added [ 80.942985][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.964488][ T5776] team0: Port device team_slave_1 added [ 80.975087][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.986236][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.008374][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.021979][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.051667][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.092485][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.099679][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.126212][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.139936][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.146903][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.172885][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.196928][ T5778] team0: Port device team_slave_0 added [ 81.228237][ T5775] team0: Port device team_slave_0 added [ 81.235521][ T5778] team0: Port device team_slave_1 added [ 81.253209][ T5777] team0: Port device team_slave_0 added [ 81.262521][ T5777] team0: Port device team_slave_1 added [ 81.283570][ T5775] team0: Port device team_slave_1 added [ 81.302627][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.309835][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.336010][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.386525][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.393656][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.420037][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.439924][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.446914][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.473724][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.487288][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.494266][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.520432][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.536459][ T5776] hsr_slave_0: entered promiscuous mode [ 81.542985][ T5776] hsr_slave_1: entered promiscuous mode [ 81.563735][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.570885][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.597296][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.641516][ T5777] hsr_slave_0: entered promiscuous mode [ 81.648177][ T5777] hsr_slave_1: entered promiscuous mode [ 81.654514][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.662728][ T5777] Cannot create hsr debugfs directory [ 81.669251][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.676215][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.702634][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.727986][ T5783] Bluetooth: hci0: command tx timeout [ 81.778763][ T5778] hsr_slave_0: entered promiscuous mode [ 81.785440][ T5778] hsr_slave_1: entered promiscuous mode [ 81.792204][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.799955][ T5778] Cannot create hsr debugfs directory [ 81.807428][ T5783] Bluetooth: hci2: command tx timeout [ 81.887401][ T5783] Bluetooth: hci1: command tx timeout [ 81.887420][ T5789] Bluetooth: hci3: command tx timeout [ 81.924384][ T5775] hsr_slave_0: entered promiscuous mode [ 81.930876][ T5775] hsr_slave_1: entered promiscuous mode [ 81.936933][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.944607][ T5775] Cannot create hsr debugfs directory [ 82.280592][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.292370][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.306165][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.316211][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.387999][ T5778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.405104][ T5778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.416577][ T5778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.433022][ T5778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.512917][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.530822][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.543943][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.588978][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.655070][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.666779][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.684688][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.703841][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.725712][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.756125][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.809625][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.832187][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.872625][ T3414] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.880046][ T3414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.892124][ T3414] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.899375][ T3414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.912141][ T3414] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.919344][ T3414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.930140][ T3414] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.937349][ T3414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.984921][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.072235][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.101220][ T1015] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.108430][ T1015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.140681][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.148084][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.200684][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.294869][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.334912][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.342121][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.411857][ T3447] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.419079][ T3447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.693718][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.764127][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.817662][ T5783] Bluetooth: hci0: command tx timeout [ 83.887771][ T5783] Bluetooth: hci2: command tx timeout [ 83.904824][ T5778] veth0_vlan: entered promiscuous mode [ 83.926800][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.957998][ T5776] veth0_vlan: entered promiscuous mode [ 83.966120][ T5778] veth1_vlan: entered promiscuous mode [ 83.972237][ T5783] Bluetooth: hci3: command tx timeout [ 83.978325][ T5789] Bluetooth: hci1: command tx timeout [ 84.000326][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.012161][ T5776] veth1_vlan: entered promiscuous mode [ 84.080947][ T5776] veth0_macvtap: entered promiscuous mode [ 84.115528][ T5776] veth1_macvtap: entered promiscuous mode [ 84.151404][ T5778] veth0_macvtap: entered promiscuous mode [ 84.180385][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.196405][ T5778] veth1_macvtap: entered promiscuous mode [ 84.218937][ T5777] veth0_vlan: entered promiscuous mode [ 84.226504][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.235847][ T5775] veth0_vlan: entered promiscuous mode [ 84.256415][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.265508][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.277551][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.286274][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.311286][ T5777] veth1_vlan: entered promiscuous mode [ 84.321878][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.334902][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.346949][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.382509][ T5775] veth1_vlan: entered promiscuous mode [ 84.398731][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.411241][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.423074][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.455711][ T5778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.464746][ T5778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.474055][ T5778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.482858][ T5778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.522383][ T5777] veth0_macvtap: entered promiscuous mode [ 84.539713][ T5777] veth1_macvtap: entered promiscuous mode [ 84.589303][ T3414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.605335][ T3414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.629271][ T5775] veth0_macvtap: entered promiscuous mode [ 84.660152][ T5775] veth1_macvtap: entered promiscuous mode [ 84.684443][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.700074][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.710430][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.721324][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.733969][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.761056][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.773385][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.785168][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.796356][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.809042][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.820167][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.836632][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.853111][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.864864][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.875214][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.886264][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.896951][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.907868][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.920127][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.939274][ T3414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.953261][ T3414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.964977][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.975301][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.984267][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.993045][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.003656][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.015382][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.025800][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.036322][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.046348][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.056879][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.068964][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.080331][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.089496][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.098814][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.108045][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.154734][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.166684][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.340493][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.355532][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.837324][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 86.743266][ T5789] Bluetooth: hci0: command tx timeout [ 86.747599][ T5783] Bluetooth: hci2: command tx timeout [ 86.748987][ T51] Bluetooth: hci3: command tx timeout [ 86.760509][ T5784] Bluetooth: hci1: command tx timeout [ 86.832261][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.840566][ T5849] syz.1.2[5849]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 86.857128][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.876036][ T5849] loop1: detected capacity change from 0 to 512 [ 86.906088][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.946127][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.991608][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.397119][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 88.557188][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.772106][ T5789] Bluetooth: hci2: command tx timeout [ 88.778200][ T51] Bluetooth: hci0: command tx timeout [ 88.783658][ T51] Bluetooth: hci3: command tx timeout [ 88.789593][ T5784] Bluetooth: hci1: command tx timeout [ 89.076524][ T5855] loop0: detected capacity change from 0 to 736 [ 91.500571][ T5866] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.540832][ T5868] loop0: detected capacity change from 0 to 512 [ 91.544266][ T28] audit: type=1326 audit(1790241672.238:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.0.10" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbec479e159 code=0x7ffc0000 [ 91.574034][ T5868] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 91.617338][ T5868] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 91.633955][ T28] audit: type=1326 audit(1790241672.248:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.0.10" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbec479e159 code=0x7ffc0000 [ 91.713961][ T5868] EXT4-fs (loop0): 1 truncate cleaned up [ 91.733666][ T28] audit: type=1326 audit(1790241672.248:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.0.10" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbec479e159 code=0x7ffc0000 [ 91.760525][ T5868] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.833612][ T28] audit: type=1326 audit(1790241672.248:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.0.10" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbec479e159 code=0x7ffc0000 [ 91.910046][ T28] audit: type=1326 audit(1790241672.248:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.0.10" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbec479e159 code=0x7ffc0000 [ 91.980235][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.017294][ T28] audit: type=1326 audit(1790241672.248:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.0.10" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbec479dec2 code=0x7ffc0000 [ 92.106198][ T28] audit: type=1326 audit(1790241672.248:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.0.10" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbec475e98e code=0x7ffc0000 [ 92.146919][ T9] cfg80211: failed to load regulatory.db [ 92.159305][ T28] audit: type=1326 audit(1790241672.258:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.0.10" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fbec479df87 code=0x7ffc0000 [ 92.237122][ T28] audit: type=1326 audit(1790241672.258:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.0.10" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbec475e98e code=0x7ffc0000 [ 92.334134][ T28] audit: type=1326 audit(1790241672.258:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.0.10" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbec479ddeb code=0x7ffc0000 [ 93.149837][ T5882] loop2: detected capacity change from 0 to 7 [ 93.218347][ T5882] Dev loop2: unable to read RDB block 7 [ 93.255431][ T5882] loop2: unable to read partition table [ 93.278122][ T5882] loop2: partition table beyond EOD, truncated [ 93.284389][ T5882] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 93.297556][ T5887] futex_wake_op: syz.3.7 tries to shift op by 144; fix this program [ 94.930925][ T5897] loop2: detected capacity change from 0 to 128 [ 95.175595][ T5906] loop2: detected capacity change from 0 to 16 [ 95.194024][ T5906] erofs: (device loop2): mounted with root inode @ nid 36. [ 95.313559][ T5789] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 95.327065][ T5789] CPU: 0 PID: 5789 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 95.334692][ T5789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.344792][ T5789] Workqueue: hci2 hci_rx_work [ 95.349526][ T5789] Call Trace: [ 95.352843][ T5789] [ 95.355809][ T5789] dump_stack_lvl+0x18c/0x250 [ 95.360544][ T5789] ? show_regs_print_info+0x20/0x20 [ 95.365800][ T5789] ? load_image+0x420/0x420 [ 95.370377][ T5789] sysfs_create_dir_ns+0x26e/0x2a0 [ 95.375536][ T5789] ? __lock_acquire+0x7d80/0x7d80 [ 95.380610][ T5789] ? sysfs_warn_dup+0xa0/0xa0 [ 95.385341][ T5789] ? do_raw_spin_unlock+0x121/0x230 [ 95.390597][ T5789] kobject_add_internal+0x617/0xc90 [ 95.395836][ T5908] loop2: detected capacity change from 0 to 736 [ 95.395844][ T5789] kobject_add+0x164/0x240 [ 95.406557][ T5789] ? kobject_init+0x1d0/0x1d0 [ 95.411288][ T5789] ? get_device_parent+0x366/0x390 [ 95.416454][ T5789] device_add+0x3fa/0xc40 [ 95.420832][ T5789] hci_conn_add_sysfs+0xd5/0x1e0 [ 95.425816][ T5789] le_conn_complete_evt+0xe9a/0x1480 [ 95.431160][ T5789] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 95.437448][ T5789] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 95.443127][ T5789] ? mutex_unlock+0x10/0x10 [ 95.447673][ T5789] ? skb_pull_data+0xf0/0x1f0 [ 95.452401][ T5789] hci_le_conn_complete_evt+0x187/0x440 [ 95.458008][ T5789] ? hci_remote_host_features_evt+0x150/0x150 [ 95.464124][ T5789] hci_event_packet+0x7b4/0x1280 [ 95.469115][ T5789] ? __lock_acquire+0x7d80/0x7d80 [ 95.474188][ T5789] ? lock_chain_count+0x20/0x20 [ 95.479088][ T5789] ? bis_list+0x290/0x290 [ 95.483472][ T5789] ? kcov_remote_start+0x513/0x810 [ 95.488726][ T5789] ? lockdep_hardirqs_on+0x98/0x150 [ 95.493972][ T5789] ? hci_send_to_monitor+0xd7/0x4f0 [ 95.499222][ T5789] hci_rx_work+0x43a/0xd60 [ 95.503713][ T5789] ? process_scheduled_works+0x975/0x1600 [ 95.509481][ T5789] process_scheduled_works+0xa60/0x1600 [ 95.515113][ T5789] ? worker_attach_to_pool+0x370/0x370 [ 95.520651][ T5789] ? assign_work+0x3cc/0x5d0 [ 95.525305][ T5789] worker_thread+0xa5e/0xfe0 [ 95.529989][ T5789] kthread+0x2fa/0x390 [ 95.531957][ T5910] loop3: detected capacity change from 0 to 256 [ 95.534079][ T5789] ? pr_cont_work+0x550/0x550 [ 95.545052][ T5789] ? kthread_blkcg+0xd0/0xd0 [ 95.549694][ T5789] ret_from_fork+0x48/0x80 [ 95.554157][ T5789] ? kthread_blkcg+0xd0/0xd0 [ 95.558790][ T5789] ret_from_fork_asm+0x11/0x20 [ 95.563611][ T5789] [ 95.572653][ T5789] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 95.586961][ T5789] Bluetooth: hci2: failed to register connection device [ 95.608120][ T5910] exfat: Deprecated parameter 'namecase' [ 95.613943][ T5910] exfat: Deprecated parameter 'namecase' [ 95.691225][ T5910] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 96.102528][ T5912] loop0: detected capacity change from 0 to 1024 [ 96.439681][ T5912] syz.0.26: attempt to access beyond end of device [ 96.439681][ T5912] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 96.539429][ T5916] ip_tables: iptables: counters copy to user failed while replacing table [ 97.521368][ T5922] loop1: detected capacity change from 0 to 8 [ 97.642506][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 97.642552][ T28] audit: type=1326 audit(1790241678.358:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5917 comm="syz.2.27" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f38a659e159 code=0x0 [ 97.673807][ T5789] Bluetooth: hci3: command tx timeout [ 98.056997][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'. [ 98.125941][ T5922] unable to read inode lookup table [ 98.446049][ T5928] loop0: detected capacity change from 0 to 736 [ 100.833373][ T5949] loop0: detected capacity change from 0 to 2048 [ 100.880326][ T5949] ======================================================= [ 100.880326][ T5949] WARNING: The mand mount option has been deprecated and [ 100.880326][ T5949] and is ignored by this kernel. Remove the mand [ 100.880326][ T5949] option from the mount to silence this warning. [ 100.880326][ T5949] ======================================================= [ 100.947085][ T5789] Bluetooth: hci0: command tx timeout [ 100.972517][ T5949] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.457381][ T5789] Bluetooth: hci3: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 104.527697][ T5789] Bluetooth: hci3: command tx timeout [ 104.828682][ T5986] loop0: detected capacity change from 0 to 512 [ 104.857925][ T5986] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 104.867966][ T5986] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 104.877773][ T5986] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 105.209070][ T5986] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 105.217097][ T5986] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 105.225095][ T5986] EXT4-fs (loop0): failed to initialize system zone (-117) [ 105.232553][ T5986] EXT4-fs (loop0): mount failed [ 106.317371][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 108.228293][ T6012] loop0: detected capacity change from 0 to 512 [ 108.273009][ T6012] EXT4-fs: Ignoring removed i_version option [ 108.311334][ T6012] EXT4-fs: Ignoring removed oldalloc option [ 108.405124][ T6012] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.287239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.528186][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.707652][ T6047] Bluetooth: MGMT ver 1.22 [ 116.142439][ T6051] loop3: detected capacity change from 0 to 1024 [ 116.157445][ T6051] EXT4-fs: Ignoring removed mblk_io_submit option [ 116.164649][ T6051] ext4: Bad value for 'journal_dev' [ 117.427426][ T6045] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 117.694966][ T6067] ip_tables: iptables: counters copy to user failed while replacing table [ 117.709202][ T6066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.66'. [ 118.447025][ C1] sched: RT throttling activated [ 121.677340][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 122.014061][ T6092] loop1: detected capacity change from 0 to 256 [ 122.211129][ T6092] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 122.337318][ T6092] loop1: detected capacity change from 256 to 1 [ 122.517228][ T6055] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 124.793613][ T6114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.79'. [ 126.797286][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 127.511356][ T28] audit: type=1800 audit(1790241708.228:32): pid=6143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.92" name=8006 dev="sda1" ino=2043 res=0 errno=0 [ 127.544912][ T6143] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 129.357296][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 129.440063][ T1207] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 129.680530][ T1207] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 130.981641][ T1207] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.027218][ T1207] usb 3-1: Product: syz [ 131.037128][ T1207] usb 3-1: Manufacturer: syz [ 131.046347][ T1207] usb 3-1: SerialNumber: syz [ 131.142547][ T1207] usb 3-1: can't set config #1, error -71 [ 131.166383][ T1207] usb 3-1: USB disconnect, device number 2 [ 131.877623][ T6176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.103'. [ 132.625116][ T6190] loop1: detected capacity change from 0 to 164 [ 132.866435][ T6193] loop1: detected capacity change from 0 to 256 [ 132.915318][ T28] audit: type=1800 audit(1790241713.628:33): pid=6194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.100" name=8006 dev="sda1" ino=2043 res=0 errno=0 [ 132.919753][ T6193] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 132.950785][ T6194] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 133.069171][ T28] audit: type=1800 audit(1790241713.788:34): pid=6193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.107" name="file1" dev="loop1" ino=1048594 res=0 errno=0 [ 133.098811][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.106824][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.497542][ T28] audit: type=1800 audit(1790241715.208:35): pid=6193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.107" name="file1" dev="loop1" ino=1048594 res=0 errno=0 [ 135.420670][ T6215] loop3: detected capacity change from 0 to 256 [ 135.444088][ T6215] exfat: Deprecated parameter 'namecase' [ 135.463205][ T6216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.114'. [ 135.491411][ T6215] exfat: Deprecated parameter 'namecase' [ 135.559812][ T6215] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 139.597415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 143.282376][ T6253] loop0: detected capacity change from 0 to 256 [ 143.324704][ T6253] exfat: Deprecated parameter 'namecase' [ 143.336740][ T6253] exfat: Deprecated parameter 'namecase' [ 143.371346][ T6253] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 148.094365][ T6295] loop0: detected capacity change from 0 to 256 [ 148.121605][ T6295] exfat: Deprecated parameter 'namecase' [ 149.717939][ T6295] exfat: Deprecated parameter 'namecase' [ 149.766685][ T6295] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 152.397325][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 154.123892][ T6334] loop3: detected capacity change from 0 to 256 [ 154.156465][ T6334] exfat: Deprecated parameter 'namecase' [ 154.192181][ T6334] exfat: Deprecated parameter 'namecase' [ 154.248882][ T6334] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 160.303596][ T6363] loop1: detected capacity change from 0 to 256 [ 160.351905][ T6363] exfat: Deprecated parameter 'namecase' [ 160.382340][ T6363] exfat: Deprecated parameter 'namecase' [ 160.453524][ T6363] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 164.893374][ T6398] loop3: detected capacity change from 0 to 256 [ 164.914762][ T6399] xt_hashlimit: max too large, truncated to 1048576 [ 164.928390][ T6398] exfat: Deprecated parameter 'namecase' [ 164.934303][ T6398] exfat: Deprecated parameter 'namecase' [ 164.974985][ T6398] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 166.292101][ T6414] loop3: detected capacity change from 0 to 128 [ 166.419188][ T6414] FAT-fs (loop3): Unrecognized mount option "shortna" or missing value [ 169.910012][ T6432] capability: warning: `syz.2.177' uses deprecated v2 capabilities in a way that may be insecure [ 172.188281][ T6444] 9pnet_fd: Insufficient options for proto=fd [ 172.877279][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 174.912837][ T3414] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.101877][ T3414] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.333668][ T3414] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.471420][ T3414] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.077111][ T1207] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 176.280212][ T1207] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.335249][ T1207] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 176.402070][ T1207] usb 4-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 176.464505][ T1207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.508454][ T1207] usb 4-1: Product: syz [ 176.512694][ T1207] usb 4-1: Manufacturer: syz [ 176.556359][ T1207] usb 4-1: SerialNumber: syz [ 176.606576][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 176.611947][ T1207] usb 4-1: Found UVC 1.00 device syz (046d:0821) [ 176.632119][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 176.640356][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 176.661452][ T1207] usb 4-1: No streaming interface found for terminal 2. [ 176.664206][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 176.682074][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 176.692683][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 176.858517][ T1207] usb 4-1: USB disconnect, device number 2 [ 176.948987][ T5765] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 177.166404][ T5765] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 177.176903][ T5765] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.186681][ T5765] usb 3-1: Product: syz [ 177.195054][ T5765] usb 3-1: Manufacturer: syz [ 177.213919][ T5765] usb 3-1: SerialNumber: syz [ 177.314851][ T6479] chnl_net:caif_netlink_parms(): no params data found [ 177.636504][ T6479] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.656415][ T5765] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 177.666178][ T6479] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.676050][ T6479] bridge_slave_0: entered allmulticast mode [ 177.704328][ T6479] bridge_slave_0: entered promiscuous mode [ 179.027155][ T51] Bluetooth: hci3: command tx timeout [ 179.189568][ T6479] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.196766][ T6479] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.224899][ T6479] bridge_slave_1: entered allmulticast mode [ 179.251585][ T6479] bridge_slave_1: entered promiscuous mode [ 179.338438][ T6479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.366567][ T6479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.473049][ T6479] team0: Port device team_slave_0 added [ 179.521784][ T6521] process 'syz.2.191' launched './file0' with NULL argv: empty string added [ 179.633226][ T3414] hsr_slave_0: left promiscuous mode [ 179.872362][ T3414] hsr_slave_1: left promiscuous mode [ 180.031563][ T3414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.086905][ T3414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.128869][ T3414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.171416][ T3414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.199346][ T3414] bridge_slave_1: left allmulticast mode [ 180.215394][ T3414] bridge_slave_1: left promiscuous mode [ 180.233416][ T3414] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.275104][ T3414] bridge_slave_0: left allmulticast mode [ 180.298676][ T3414] bridge_slave_0: left promiscuous mode [ 180.317089][ T3414] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.423689][ T3414] veth1_macvtap: left promiscuous mode [ 180.442442][ T3414] veth0_macvtap: left promiscuous mode [ 180.472518][ T3414] veth1_vlan: left promiscuous mode [ 180.489883][ T3414] veth0_vlan: left promiscuous mode [ 181.098365][ T51] Bluetooth: hci3: command tx timeout [ 181.368422][ T5817] usb 3-1: USB disconnect, device number 3 [ 181.417595][ T5817] usblp0: removed [ 181.486595][ T6533] loop2: detected capacity change from 0 to 512 [ 181.559214][ T6533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.773322][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.173135][ T6543] binder: 6542:6543 ioctl 40046205 0 returned -22 [ 182.180301][ T6543] binder: 6542:6543 ioctl 80087601 0 returned -22 [ 183.187989][ T51] Bluetooth: hci3: command tx timeout [ 184.161803][ T3414] team0 (unregistering): Port device team_slave_1 removed [ 184.466165][ T3414] team0 (unregistering): Port device team_slave_0 removed [ 184.690799][ T3414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.040264][ T3414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.247096][ T51] Bluetooth: hci3: command tx timeout [ 185.615135][ T3414] bond0 (unregistering): Released all slaves [ 185.697255][ T6479] team0: Port device team_slave_1 added [ 185.896488][ T6479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.917119][ T6479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.958814][ T6582] trusted_key: encrypted_key: insufficient parameters specified [ 185.973123][ T6479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.994300][ T6582] trusted_key: encrypted_key: insufficient parameters specified [ 186.050976][ T6479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.064549][ T6479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.109217][ T6586] loop1: detected capacity change from 0 to 512 [ 186.115629][ T6479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.128165][ T6586] ext4: Unknown parameter 'defcontext' [ 186.187317][ T6147] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 186.243155][ T6479] hsr_slave_0: entered promiscuous mode [ 186.279444][ T6479] hsr_slave_1: entered promiscuous mode [ 186.335781][ T6584] loop1: detected capacity change from 0 to 1024 [ 186.345547][ T6479] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.363126][ T6479] Cannot create hsr debugfs directory [ 186.367812][ T6584] hfsplus: unable to parse mount options [ 187.493468][ T6605] loop1: detected capacity change from 0 to 512 [ 187.703451][ T6605] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 187.752126][ T6479] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 187.779788][ T6605] FAT-fs (loop1): Filesystem has been set read-only [ 187.816467][ T6479] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 187.863281][ T6479] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 187.909113][ T6479] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 188.355037][ T6479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.378235][ T6479] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.397103][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 188.411253][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.418508][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.485942][ T3447] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.493176][ T3447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.625912][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 188.653646][ T9] usb 3-1: config 0 has no interface number 0 [ 188.673072][ T9] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 188.698682][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.727437][ T9] usb 3-1: Product: syz [ 188.731682][ T9] usb 3-1: Manufacturer: syz [ 188.736314][ T9] usb 3-1: SerialNumber: syz [ 188.765299][ T9] usb 3-1: config 0 descriptor?? [ 189.062291][ T9] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 189.076390][ T6479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.095160][ T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 189.117684][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 189.136897][ T9] usb 3-1: media controller created [ 189.198456][ T5817] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 189.201749][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 189.330722][ T9] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 189.402230][ T5817] usb 2-1: config 0 has no interfaces? [ 189.408935][ T5817] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 189.437467][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.458055][ T9] usb 3-1: USB disconnect, device number 4 [ 189.489767][ T5817] usb 2-1: config 0 descriptor?? [ 189.708029][ T5840] usb 2-1: USB disconnect, device number 2 [ 189.878571][ T6479] veth0_vlan: entered promiscuous mode [ 189.918022][ T6479] veth1_vlan: entered promiscuous mode [ 189.992693][ T6479] veth0_macvtap: entered promiscuous mode [ 190.016649][ T6479] veth1_macvtap: entered promiscuous mode [ 190.085122][ T6479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.137254][ T6479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.147680][ T6479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.158591][ T6479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.168760][ T6479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.179554][ T6479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.192837][ T6479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.309001][ T6479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.382442][ T6479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.427788][ T6479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.433514][ T6657] loop2: detected capacity change from 0 to 256 [ 190.475490][ T6479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.492419][ T6479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.512947][ T6479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.521071][ T6657] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 190.524602][ T6479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.546526][ T6479] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.555328][ T6479] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.564993][ T6479] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.574025][ T6479] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.617871][ T28] audit: type=1800 audit(1790241771.328:36): pid=6657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.222" name="file1" dev="loop2" ino=1048603 res=0 errno=0 [ 190.806809][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.848951][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.942344][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.972992][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.497224][ T5840] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 192.096841][ T6692] binder: 6686:6692 ioctl 4018620d 0 returned -22 [ 192.132683][ T6692] binder: 6686:6692 unknown command 0 [ 192.138454][ T6692] binder: 6686:6692 ioctl c0306201 200000000c00 returned -22 [ 192.990321][ T5840] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.372348][ T5840] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 194.412073][ T5840] usb 5-1: string descriptor 0 read error: -71 [ 194.427168][ T5840] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 194.436270][ T5840] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 194.489830][ T5840] usb 5-1: config 0 descriptor?? [ 194.505759][ T5840] usb 5-1: can't set config #0, error -71 [ 194.526756][ T5840] usb 5-1: USB disconnect, device number 2 [ 194.538319][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.544734][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.864331][ T6724] loop3: detected capacity change from 0 to 256 [ 196.888429][ T6724] exfat: Deprecated parameter 'namecase' [ 196.904417][ T6724] exfat: Deprecated parameter 'namecase' [ 196.921818][ T6724] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 199.147289][ T5817] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 199.732920][ T6743] binder: 6739:6743 ioctl 4018620d 0 returned -22 [ 200.738652][ T5817] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.767100][ T5817] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 200.780232][ T5817] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 200.798503][ T5817] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 200.806731][ T5817] usb 4-1: Product: syz [ 200.845802][ T5817] usb 4-1: Manufacturer: syz [ 200.862650][ T5817] usb 4-1: SerialNumber: syz [ 200.878419][ T5817] usb 4-1: config 0 descriptor?? [ 201.111060][ T5765] usb 4-1: USB disconnect, device number 3 [ 203.185716][ T6764] netlink: 60 bytes leftover after parsing attributes in process `syz.3.248'. [ 203.279296][ T6764] unsupported nlmsg_type 40 [ 203.662699][ T6773] loop2: detected capacity change from 0 to 256 [ 204.636917][ T6773] exfat: Deprecated parameter 'namecase' [ 204.690126][ T6773] exfat: Deprecated parameter 'namecase' [ 204.726610][ T6773] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 206.847465][ T5087] Bluetooth: hci0: command 0x0406 tx timeout [ 206.853924][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 206.853936][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 206.871334][ T6789] tmpfs: Bad value for 'mpol' [ 212.087413][ T5817] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 212.327803][ T5817] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.353355][ T5817] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 212.409147][ T5817] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 212.441630][ T5817] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 212.475535][ T5817] usb 3-1: Product: syz [ 212.482617][ T5817] usb 3-1: Manufacturer: syz [ 212.488755][ T5817] usb 3-1: SerialNumber: syz [ 212.529395][ T5817] usb 3-1: config 0 descriptor?? [ 212.658571][ T6823] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input6 [ 212.827585][ T5817] usb 3-1: USB disconnect, device number 5 [ 219.000121][ T6880] FAULT_INJECTION: forcing a failure. [ 219.000121][ T6880] name failslab, interval 1, probability 0, space 0, times 0 [ 219.013255][ T6878] loop4: detected capacity change from 0 to 2048 [ 219.044535][ T6878] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 219.061917][ T6880] CPU: 0 PID: 6880 Comm: syz.3.264 Not tainted syzkaller #0 [ 219.069394][ T6880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 219.079495][ T6880] Call Trace: [ 219.082812][ T6880] [ 219.085787][ T6880] dump_stack_lvl+0x18c/0x250 [ 219.090534][ T6880] ? show_regs_print_info+0x20/0x20 [ 219.095785][ T6880] ? load_image+0x420/0x420 [ 219.100332][ T6880] ? __might_sleep+0xe0/0xe0 [ 219.104970][ T6880] ? __lock_acquire+0x7d80/0x7d80 [ 219.110043][ T6880] should_fail_ex+0x394/0x4c0 [ 219.114782][ T6880] should_failslab+0x9/0x20 [ 219.119335][ T6880] slab_pre_alloc_hook+0x59/0x300 [ 219.124410][ T6880] ? d_instantiate+0x6f/0x90 [ 219.129135][ T6880] kmem_cache_alloc+0x5a/0x2c0 [ 219.133943][ T6880] ? alloc_empty_file+0x9e/0x1d0 [ 219.138921][ T6880] alloc_empty_file+0x9e/0x1d0 [ 219.143720][ T6880] alloc_file+0x5b/0x600 [ 219.147999][ T6880] alloc_file_pseudo+0x184/0x210 [ 219.152981][ T6880] ? fput+0x1a0/0x1a0 [ 219.157013][ T6880] anon_inode_getfile+0xc5/0x1a0 [ 219.162008][ T6880] init_listener+0x10f/0x1d0 [ 219.166654][ T6880] do_seccomp+0x93a/0xdc0 [ 219.171040][ T6880] ? prctl_set_seccomp+0x60/0x60 [ 219.176106][ T6880] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 219.182144][ T6880] ? lockdep_hardirqs_on+0x98/0x150 [ 219.187640][ T6880] do_syscall_64+0x55/0xb0 [ 219.192182][ T6880] ? clear_bhb_loop+0x40/0x90 [ 219.196900][ T6880] ? clear_bhb_loop+0x40/0x90 [ 219.201630][ T6880] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 219.207566][ T6880] RIP: 0033:0x7fe7c6d9e159 [ 219.212015][ T6880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.231657][ T6880] RSP: 002b:00007fe7c7c41028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 219.240116][ T6880] RAX: ffffffffffffffda RBX: 00007fe7c7025fa0 RCX: 00007fe7c6d9e159 [ 219.248122][ T6880] RDX: 00002000000000c0 RSI: 000000000000000c RDI: 0000000000000001 [ 219.256131][ T6880] RBP: 00007fe7c6e3506b R08: 0000000000000000 R09: 0000000000000000 [ 219.264136][ T6880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.272138][ T6880] R13: 00007fe7c7026038 R14: 00007fe7c7025fa0 R15: 00007ffcca0929b8 [ 219.280245][ T6880] [ 219.918130][ T6885] workqueue: Failed to create a rescuer kthread for wq "kdmflush/248:1": -EINTR [ 219.956194][ T28] audit: type=1326 audit(1790241800.198:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6881 comm="syz.1.266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe1d579e159 code=0x0 [ 222.547146][ T9] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 222.769071][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.805291][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 222.841100][ T9] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 222.867023][ T9] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 222.875249][ T9] usb 3-1: Product: syz [ 222.897247][ T9] usb 3-1: Manufacturer: syz [ 222.901923][ T9] usb 3-1: SerialNumber: syz [ 222.928494][ T9] usb 3-1: config 0 descriptor?? [ 223.173224][ T9] usb 3-1: USB disconnect, device number 6 [ 223.447513][ T788] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 225.064559][ T788] usb 2-1: Using ep0 maxpacket: 32 [ 225.107940][ T5765] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 225.123007][ T788] usb 2-1: unable to get BOS descriptor or descriptor too short [ 225.144187][ T788] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 225.157596][ T788] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 225.185809][ T788] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 225.217330][ T788] usb 2-1: config 128 has no interface number 0 [ 225.223772][ T788] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 8865, setting to 1024 [ 225.225640][ T6929] loop2: detected capacity change from 0 to 1024 [ 225.260786][ T788] usb 2-1: config 128 interface 127 altsetting 14 bulk endpoint 0x5 has invalid maxpacket 1024 [ 225.312751][ T5765] usb 5-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 225.317074][ T788] usb 2-1: config 128 interface 127 has no altsetting 0 [ 225.344452][ T5765] usb 5-1: config 0 interface 0 has no altsetting 0 [ 225.351344][ T5765] usb 5-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 225.360614][ T5765] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.377899][ T5765] usb 5-1: config 0 descriptor?? [ 225.420094][ T788] usb 2-1: string descriptor 0 read error: -22 [ 225.426723][ T788] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 225.467043][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.498213][ T6910] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 225.850747][ T5765] logitech-djreceiver 0003:046D:C70E.0001: unknown main item tag 0x3 [ 225.894272][ T5765] logitech-djreceiver 0003:046D:C70E.0001: ignoring exceeding usage max [ 225.966802][ T5765] logitech-djreceiver 0003:046D:C70E.0001: hidraw0: USB HID v0.01 Device [HID 046d:c70e] on usb-dummy_hcd.4-1/input0 [ 226.015460][ T788] usb 2-1: USB disconnect, device number 3 [ 226.439589][ T788] usb 5-1: USB disconnect, device number 3 [ 227.327077][ T5784] Bluetooth: hci2: command 0x0406 tx timeout [ 227.511764][ T6975] loop2: detected capacity change from 0 to 128 [ 227.547835][ T6975] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 227.705655][ T49] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 227.810542][ T23] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 227.989618][ T6989] loop2: detected capacity change from 0 to 4096 [ 228.025596][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.037425][ T6989] EXT4-fs: Ignoring removed orlov option [ 228.048502][ T23] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 228.064042][ T23] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 228.080162][ T23] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 228.094127][ T6989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.118356][ T23] usb 5-1: Product: syz [ 228.122578][ T23] usb 5-1: Manufacturer: syz [ 228.157158][ T23] usb 5-1: SerialNumber: syz [ 228.199254][ T23] usb 5-1: config 0 descriptor?? [ 228.325448][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.446216][ T23] usb 5-1: USB disconnect, device number 4 [ 228.660353][ T7006] loop3: detected capacity change from 0 to 4096 [ 228.683827][ T7006] EXT4-fs: Ignoring removed bh option [ 228.720688][ T7006] EXT4-fs (loop3): stripe (13) is not aligned with cluster size (16), stripe is disabled [ 228.738574][ T7006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.779671][ T7006] EXT4-fs error (device loop3): ext4_get_first_dir_block:3606: inode #12: block 80: comm syz.3.299: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 228.816141][ T7006] EXT4-fs (loop3): Remounting filesystem read-only [ 228.856508][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.270610][ T23] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 236.450050][ T7092] FAULT_INJECTION: forcing a failure. [ 236.450050][ T7092] name failslab, interval 1, probability 0, space 0, times 0 [ 236.462907][ T7092] CPU: 0 PID: 7092 Comm: syz.1.320 Not tainted syzkaller #0 [ 236.470240][ T7092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.480338][ T7092] Call Trace: [ 236.483658][ T7092] [ 236.486617][ T7092] dump_stack_lvl+0x18c/0x250 [ 236.491387][ T7092] ? show_regs_print_info+0x20/0x20 [ 236.496642][ T7092] ? load_image+0x420/0x420 [ 236.501183][ T7092] ? __might_sleep+0xe0/0xe0 [ 236.505787][ T7092] ? __lock_acquire+0x7d80/0x7d80 [ 236.510830][ T7092] should_fail_ex+0x394/0x4c0 [ 236.515527][ T7092] should_failslab+0x9/0x20 [ 236.520049][ T7092] slab_pre_alloc_hook+0x59/0x300 [ 236.525096][ T7092] ? __lock_acquire+0x7d80/0x7d80 [ 236.530217][ T7092] ? copy_cgroup_ns+0x2c6/0x610 [ 236.535082][ T7092] __kmem_cache_alloc_node+0x53/0x250 [ 236.540469][ T7092] ? __bpf_trace_rcu_stall_warning+0x160/0x160 [ 236.546638][ T7092] ? copy_cgroup_ns+0x2c6/0x610 [ 236.551504][ T7092] kmalloc_trace+0x2a/0xe0 [ 236.555944][ T7092] copy_cgroup_ns+0x2c6/0x610 [ 236.560653][ T7092] create_new_namespaces+0x335/0x700 [ 236.565961][ T7092] unshare_nsproxy_namespaces+0x11a/0x160 [ 236.571698][ T7092] ksys_unshare+0x4fa/0x8f0 [ 236.576220][ T7092] ? sighand_ctor+0x50/0x50 [ 236.580740][ T7092] ? lock_chain_count+0x20/0x20 [ 236.585604][ T7092] ? syscall_enter_from_user_mode+0x25/0x80 [ 236.591511][ T7092] __x64_sys_unshare+0x38/0x40 [ 236.596287][ T7092] do_syscall_64+0x55/0xb0 [ 236.600715][ T7092] ? clear_bhb_loop+0x40/0x90 [ 236.605405][ T7092] ? clear_bhb_loop+0x40/0x90 [ 236.610098][ T7092] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 236.616003][ T7092] RIP: 0033:0x7fe1d579e159 [ 236.620544][ T7092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.640180][ T7092] RSP: 002b:00007fe1d6684028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 236.648637][ T7092] RAX: ffffffffffffffda RBX: 00007fe1d5a25fa0 RCX: 00007fe1d579e159 [ 236.656627][ T7092] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006000080 [ 236.664611][ T7092] RBP: 00007fe1d583506b R08: 0000000000000000 R09: 0000000000000000 [ 236.672596][ T7092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.680586][ T7092] R13: 00007fe1d5a26038 R14: 00007fe1d5a25fa0 R15: 00007fff59582b48 [ 236.688592][ T7092] [ 236.765934][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.798094][ T23] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 236.807454][ T23] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 236.839505][ T23] usb 3-1: Product: syz [ 236.847914][ T23] usb 3-1: Manufacturer: syz [ 236.852580][ T23] usb 3-1: SerialNumber: syz [ 236.886914][ T23] usb 3-1: config 0 descriptor?? [ 236.916872][ T23] keyspan 3-1:0.0: Keyspan 4 port adapter converter detected [ 236.935120][ T23] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 236.957148][ T23] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 88 [ 236.985874][ T23] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 237.014784][ T23] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 237.033835][ T23] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 238.410524][ T23] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 238.430594][ T23] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 238.440752][ T23] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 238.452203][ T23] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 238.464254][ T23] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 238.502049][ T23] usb 3-1: USB disconnect, device number 7 [ 238.543647][ T23] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 238.597942][ T23] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 238.648697][ T23] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 238.700080][ T23] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 238.738056][ T23] keyspan 3-1:0.0: device disconnected [ 239.234967][ T7116] loop2: detected capacity change from 0 to 2048 [ 239.316021][ T7116] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.839927][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.649355][ T7148] loop1: detected capacity change from 0 to 164 [ 242.719300][ T7148] isofs: Unable to find the ".." directory for NFS. [ 243.577259][ T7163] FAULT_INJECTION: forcing a failure. [ 243.577259][ T7163] name failslab, interval 1, probability 0, space 0, times 0 [ 243.637437][ T7163] CPU: 0 PID: 7163 Comm: syz.4.330 Not tainted syzkaller #0 [ 243.645012][ T7163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 243.655116][ T7163] Call Trace: [ 243.658444][ T7163] [ 243.661416][ T7163] dump_stack_lvl+0x18c/0x250 [ 243.666155][ T7163] ? show_regs_print_info+0x20/0x20 [ 243.671418][ T7163] ? load_image+0x420/0x420 [ 243.675979][ T7163] should_fail_ex+0x394/0x4c0 [ 243.680726][ T7163] should_failslab+0x9/0x20 [ 243.685309][ T7163] slab_pre_alloc_hook+0x59/0x300 [ 243.690399][ T7163] ? proc_self_get_link+0xe5/0x180 [ 243.695562][ T7163] __kmem_cache_alloc_node+0x53/0x250 [ 243.701000][ T7163] ? proc_self_get_link+0xe5/0x180 [ 243.706163][ T7163] kmalloc_trace+0x2a/0xe0 [ 243.710642][ T7163] proc_self_get_link+0xe5/0x180 [ 243.715634][ T7163] ? proc_setup_self+0x2c0/0x2c0 [ 243.720628][ T7163] pick_link+0x6a8/0xdd0 [ 243.724935][ T7163] step_into+0xc18/0xee0 [ 243.729233][ T7163] ? set_root+0x3a0/0x3a0 [ 243.733615][ T7163] ? lookup_fast+0x14a/0x4c0 [ 243.738269][ T7163] ? security_inode_permission+0xb0/0xf0 [ 243.743938][ T7163] link_path_walk+0x748/0xe40 [ 243.748656][ T7163] ? handle_lookup_down+0x130/0x130 [ 243.753887][ T7163] path_openat+0x291/0x3270 [ 243.758444][ T7163] ? do_sys_openat2+0xda/0x1d0 [ 243.763240][ T7163] ? __x64_sys_openat+0x139/0x160 [ 243.768286][ T7163] ? verify_lock_unused+0x140/0x140 [ 243.773503][ T7163] ? do_filp_open+0x430/0x430 [ 243.778209][ T7163] do_filp_open+0x1f2/0x430 [ 243.782795][ T7163] ? vfs_tmpfile+0x620/0x620 [ 243.787447][ T7163] ? _raw_spin_unlock+0x28/0x40 [ 243.792327][ T7163] ? alloc_fd+0x590/0x640 [ 243.796685][ T7163] do_sys_openat2+0x134/0x1d0 [ 243.801385][ T7163] ? do_sys_open+0xe0/0xe0 [ 243.805823][ T7163] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 243.811837][ T7163] ? lock_chain_count+0x20/0x20 [ 243.816727][ T7163] __x64_sys_openat+0x139/0x160 [ 243.821620][ T7163] do_syscall_64+0x55/0xb0 [ 243.826069][ T7163] ? clear_bhb_loop+0x40/0x90 [ 243.830771][ T7163] ? clear_bhb_loop+0x40/0x90 [ 243.835549][ T7163] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 243.841462][ T7163] RIP: 0033:0x7f0b8195e98e [ 243.845890][ T7163] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 243.865516][ T7163] RSP: 002b:00007f0b827f7ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 243.873976][ T7163] RAX: ffffffffffffffda RBX: 00007f0b827f86c0 RCX: 00007f0b8195e98e [ 243.881964][ T7163] RDX: 0000000000000002 RSI: 00007f0b827f7f90 RDI: ffffffffffffff9c [ 243.889949][ T7163] RBP: 00007f0b81a3506b R08: 0000000000000000 R09: 0000000000000000 [ 243.897936][ T7163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.905934][ T7163] R13: 00007f0b81c26038 R14: 00007f0b81c25fa0 R15: 00007ffca9237d98 [ 243.914045][ T7163] [ 244.300254][ T6689] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 246.958868][ T6689] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.139106][ T6689] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 247.183924][ T6689] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 247.234150][ T6689] usb 2-1: config 0 descriptor?? [ 247.263997][ T6689] usb 2-1: can't set config #0, error -71 [ 247.297696][ T6689] usb 2-1: USB disconnect, device number 4 [ 248.535290][ T7209] loop3: detected capacity change from 0 to 1024 [ 249.475495][ T7222] loop3: detected capacity change from 0 to 512 [ 249.616053][ T7222] EXT4-fs (loop3): 1 truncate cleaned up [ 249.663648][ T7222] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.857522][ T7222] EXT4-fs error (device loop3): __ext4_get_inode_loc:4509: comm syz.3.345: Invalid inode table block 1874718639 in block_group 0 [ 249.902433][ T7222] EXT4-fs (loop3): Remounting filesystem read-only [ 250.002218][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.767113][ T5784] Bluetooth: hci1: command 0x0406 tx timeout [ 252.057487][ T7259] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.350'. [ 252.091348][ T788] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 252.233608][ T7265] netlink: 108 bytes leftover after parsing attributes in process `syz.1.353'. [ 252.264136][ T7265] netlink: 108 bytes leftover after parsing attributes in process `syz.1.353'. [ 252.294265][ T788] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.327218][ T788] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 252.362948][ T788] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 252.392293][ T788] usb 5-1: Product: syz [ 252.396533][ T788] usb 5-1: Manufacturer: syz [ 252.417841][ T788] usb 5-1: SerialNumber: syz [ 252.446237][ T788] usb 5-1: config 0 descriptor?? [ 252.463466][ T788] keyspan 5-1:0.0: Keyspan 4 port adapter converter detected [ 252.477555][ T788] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 252.485877][ T788] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 88 [ 252.498428][ T788] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 252.516450][ T788] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 252.545505][ T788] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 252.575940][ T788] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 252.639650][ T788] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 252.688905][ T788] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 252.723110][ T788] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 252.762477][ T788] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 252.777333][ T788] usb 5-1: USB disconnect, device number 5 [ 252.792023][ T788] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 252.815890][ T788] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 252.850851][ T788] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 252.930431][ T788] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 252.955890][ T788] keyspan 5-1:0.0: device disconnected [ 254.898721][ T5784] Bluetooth: hci3: link tx timeout [ 254.905913][ T5784] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 256.414550][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.420990][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.876514][ T7300] loop3: detected capacity change from 0 to 512 [ 256.896039][ T7300] EXT4-fs: Ignoring removed i_version option [ 256.929764][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 256.961017][ T7300] EXT4-fs: Ignoring removed oldalloc option [ 257.110384][ T7300] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.702357][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.110801][ T7326] loop2: detected capacity change from 0 to 256 [ 260.132590][ T7326] exfat: Deprecated parameter 'namecase' [ 260.139579][ T7326] exfat: Deprecated parameter 'namecase' [ 260.274759][ T7326] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 269.892999][ T7366] loop4: detected capacity change from 0 to 256 [ 271.403978][ T7375] loop4: detected capacity change from 0 to 256 [ 271.628238][ T7375] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 271.707196][ T7375] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 271.758251][ T7375] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 271.813347][ T7375] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 271.857339][ T7375] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 271.896060][ T7375] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 271.958348][ T7375] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 271.997756][ T7375] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 272.028759][ T7375] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 272.067192][ T6689] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 272.087649][ T7375] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 272.099627][ T28] audit: type=1800 audit(1790241852.818:38): pid=7375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.387" name="file1" dev="loop4" ino=1048611 res=0 errno=0 [ 272.122184][ T7379] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 272.197043][ T28] audit: type=1800 audit(1790241852.818:39): pid=7379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.387" name="file1" dev="loop4" ino=1048611 res=0 errno=0 [ 272.339346][ T6689] usb 5-1: config 1 has an invalid descriptor of length 46, skipping remainder of the config [ 272.370169][ T6689] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 272.414183][ T6689] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 272.437354][ T6689] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 272.463356][ T6689] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 272.492792][ T6689] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 272.542609][ T6689] usb 5-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 272.654796][ T7389] loop2: detected capacity change from 0 to 512 [ 272.668661][ T7389] EXT4-fs: Ignoring removed nobh option [ 273.114905][ T7389] EXT4-fs (loop2): Test dummy encryption mode enabled [ 273.121913][ T7389] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 273.181594][ T7389] EXT4-fs (loop2): 1 truncate cleaned up [ 273.187154][ T6689] usb 5-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 273.188601][ T7389] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.255871][ T7388] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 273.351125][ T6689] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.377411][ T6689] usb 5-1: Product: syz [ 273.381649][ T6689] usb 5-1: Manufacturer: syz [ 273.388525][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.412140][ T6689] usb 5-1: SerialNumber: syz [ 273.445165][ T7380] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 273.473417][ T7380] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 273.550878][ T7380] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 273.592241][ T6689] keyspan 5-1:1.0: Keyspan 1 port adapter converter detected [ 273.629301][ T6689] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 273.659293][ T6689] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 82 [ 273.692878][ T7375] syz.4.387 (7375) used greatest stack depth: 20584 bytes left [ 273.721871][ T6689] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 273.766621][ T6689] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 274.643037][ T6689] usb 5-1: USB disconnect, device number 6 [ 274.732981][ T6689] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 274.758048][ T6689] keyspan 5-1:1.0: device disconnected [ 274.772444][ T7396] loop2: detected capacity change from 0 to 256 [ 274.907796][ T7396] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 274.947400][ T7396] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 275.167082][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 275.259093][ T7396] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 275.337409][ T7396] exFAT-fs (loop2): failed to load alloc-bitmap [ 275.374439][ T7396] exFAT-fs (loop2): failed to recognize exfat type [ 275.710632][ T6689] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 276.355402][ T6689] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 276.367337][ T6689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.387087][ T6689] usb 2-1: Product: syz [ 276.391277][ T6689] usb 2-1: Manufacturer: syz [ 276.395885][ T6689] usb 2-1: SerialNumber: syz [ 276.958180][ T6689] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 280.195601][ T23] usb 2-1: USB disconnect, device number 5 [ 280.209176][ T23] usblp0: removed [ 280.789923][ T7421] netlink: 20 bytes leftover after parsing attributes in process `syz.1.398'. [ 281.232661][ T7427] loop3: detected capacity change from 0 to 256 [ 281.397200][ T6055] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 281.720871][ T7421] veth0_to_bond: entered promiscuous mode [ 281.726711][ T7421] veth0_to_bond: entered allmulticast mode [ 282.311981][ T7433] loop3: detected capacity change from 0 to 128 [ 282.408519][ T7421] syz.1.398 (7421) used greatest stack depth: 20104 bytes left [ 282.673521][ T7438] loop1: detected capacity change from 0 to 256 [ 282.717460][ T7433] loop3: detected capacity change from 128 to 1 [ 282.768339][ T7433] syz.3.399: attempt to access beyond end of device [ 282.768339][ T7433] loop3: rw=2049, sector=2, nr_sectors = 1 limit=1 [ 282.833654][ T7433] Buffer I/O error on dev loop3, logical block 2, lost sync page write [ 282.887254][ T7433] syz.3.399: attempt to access beyond end of device [ 282.887254][ T7433] loop3: rw=0, sector=2, nr_sectors = 1 limit=1 [ 282.914398][ T7438] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 283.027249][ T7433] FAT-fs (loop3): Directory bread(block 2) failed [ 283.046882][ T7433] syz.3.399: attempt to access beyond end of device [ 283.046882][ T7433] loop3: rw=2049, sector=3, nr_sectors = 1 limit=1 [ 283.231381][ T7438] syz.1.400: attempt to access beyond end of device [ 283.231381][ T7438] loop1: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 283.264683][ T7433] Buffer I/O error on dev loop3, logical block 3, lost sync page write [ 283.367871][ T7438] syz.1.400: attempt to access beyond end of device [ 283.367871][ T7438] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 283.458783][ T28] audit: type=1800 audit(1790241864.178:40): pid=7438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.400" name="file1" dev="loop1" ino=1048612 res=0 errno=0 [ 285.740778][ T7469] loop1: detected capacity change from 0 to 512 [ 285.779916][ T7462] loop2: detected capacity change from 0 to 4096 [ 286.126500][ T7469] ------------[ cut here ]------------ [ 286.133347][ T7469] EA inode 11 i_nlink=0 [ 286.181090][ T7469] WARNING: CPU: 0 PID: 7469 at fs/ext4/xattr.c:1059 ext4_xattr_inode_update_ref+0x572/0x5d0 [ 286.195670][ T7469] Modules linked in: [ 286.199990][ T7469] CPU: 0 PID: 7469 Comm: syz.1.402 Not tainted syzkaller #0 [ 286.207394][ T7469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 286.217567][ T7469] RIP: 0010:ext4_xattr_inode_update_ref+0x572/0x5d0 [ 286.224199][ T7469] Code: 50 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 91 f5 98 ff 49 8b 34 24 48 c7 c7 60 df de 8a 44 89 fa e8 5e 2d 0a ff <0f> 0b 4c 8b 64 24 10 4c 8d 6c 24 60 e9 8e fe ff ff e8 d8 27 4a 08 [ 286.244386][ T7469] RSP: 0018:ffffc9001a3a7360 EFLAGS: 00010246 [ 286.250595][ T7469] RAX: 061d0197c85a6900 RBX: ffff888077dd72a8 RCX: 0000000000080000 [ 286.258718][ T7469] RDX: ffffc9000c849000 RSI: 0000000000015485 RDI: 0000000000015486 [ 286.266699][ T7469] RBP: ffffc9001a3a7450 R08: ffff8880b8e28c53 R09: 1ffff110171c518a [ 286.274706][ T7469] R10: dffffc0000000000 R11: ffffed10171c518b R12: ffff888077dd7100 [ 286.282823][ T7469] R13: ffffc9001a3a73c0 R14: dffffc0000000000 R15: 0000000000000000 [ 286.291070][ T7469] FS: 00007fe1d66846c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 286.300189][ T7469] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.306811][ T7469] CR2: 00007f682f36b000 CR3: 000000005e630000 CR4: 00000000003506f0 [ 286.314882][ T7469] Call Trace: [ 286.318265][ T7469] [ 286.321212][ T7469] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 286.326860][ T7469] ? __ext4_journal_ensure_credits+0x30/0x450 [ 286.332995][ T7469] ext4_xattr_inode_dec_ref_all+0x9bb/0x1030 [ 286.339538][ T7469] ? ext4_xattr_delete_inode+0xd00/0xd00 [ 286.345194][ T7469] ? __ext4_journal_ensure_credits+0x450/0x450 [ 286.351513][ T7469] ext4_xattr_delete_inode+0xb3b/0xd00 [ 286.357065][ T7469] ? ext4_mark_iloc_dirty+0x694/0x1c60 [ 286.362541][ T7469] ? ext4_expand_extra_isize_ea+0x1ea0/0x1ea0 [ 286.368778][ T7469] ? __ext4_mark_inode_dirty+0x50d/0x720 [ 286.374429][ T7469] ext4_evict_inode+0xa88/0xe70 [ 286.379354][ T7469] ? evict+0x482/0x8a0 [ 286.383439][ T7469] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 286.389415][ T7469] ? do_raw_spin_unlock+0x121/0x230 [ 286.394647][ T7469] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 286.400620][ T7469] evict+0x4b7/0x8a0 [ 286.404535][ T7469] ? __lock_acquire+0x7d80/0x7d80 [ 286.409620][ T7469] ? proc_nr_inodes+0x230/0x230 [ 286.414484][ T7469] ? do_raw_spin_unlock+0x121/0x230 [ 286.419753][ T7469] ? _raw_spin_unlock+0x28/0x40 [ 286.424614][ T7469] ext4_orphan_cleanup+0xdff/0x1650 [ 286.429899][ T7469] ? ext4_orphan_file_block_trigger+0x440/0x440 [ 286.436158][ T7469] ? ext4_orphan_del+0xc90/0xc90 [ 286.441621][ T7469] ? ext4_register_li_request+0x182/0x930 [ 286.447591][ T7469] ? errseq_check_and_advance+0x66/0x120 [ 286.453241][ T7469] ext4_fill_super+0x5fb5/0x6870 [ 286.458256][ T7469] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 286.464512][ T7469] ? __might_sleep+0xe0/0xe0 [ 286.469246][ T7469] ? read_lock_is_recursive+0x20/0x20 [ 286.474796][ T7469] ? snprintf+0xe9/0x140 [ 286.479094][ T7469] ? down_read_killable+0x340/0x340 [ 286.484303][ T7469] ? setup_bdev_super+0x56b/0x660 [ 286.489420][ T7469] get_tree_bdev+0x3e5/0x520 [ 286.494042][ T7469] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 286.500394][ T7469] ? setup_bdev_super+0x660/0x660 [ 286.505433][ T7469] ? apparmor_capable+0x137/0x1a0 [ 286.510499][ T7469] ? bpf_lsm_capable+0x9/0x10 [ 286.515180][ T7469] ? security_capable+0x89/0xb0 [ 286.520076][ T7469] vfs_get_tree+0x8c/0x280 [ 286.524509][ T7469] do_new_mount+0x24a/0xa40 [ 286.529304][ T7469] __se_sys_mount+0x2e7/0x3d0 [ 286.533994][ T7469] ? __x64_sys_mount+0xc0/0xc0 [ 286.538812][ T7469] ? lockdep_hardirqs_on+0x98/0x150 [ 286.544453][ T7469] ? __x64_sys_mount+0x20/0xc0 [ 286.549327][ T7469] do_syscall_64+0x55/0xb0 [ 286.553758][ T7469] ? clear_bhb_loop+0x40/0x90 [ 286.558503][ T7469] ? clear_bhb_loop+0x40/0x90 [ 286.563198][ T7469] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.569211][ T7469] RIP: 0033:0x7fe1d579f3ca [ 286.573679][ T7469] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.593516][ T7469] RSP: 002b:00007fe1d6683e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 286.602076][ T7469] RAX: ffffffffffffffda RBX: 00007fe1d6683ee0 RCX: 00007fe1d579f3ca [ 286.610131][ T7469] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 00007fe1d6683ea0 [ 286.618143][ T7469] RBP: 0000200000000040 R08: 00007fe1d6683ee0 R09: 0000000000000000 [ 286.626270][ T7469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 286.634784][ T7469] R13: 00007fe1d6683ea0 R14: 000000000000047a R15: 0000200000000080 [ 286.642832][ T7469] [ 286.646289][ T7469] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 286.653606][ T7469] CPU: 0 PID: 7469 Comm: syz.1.402 Not tainted syzkaller #0 [ 286.661036][ T7469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 286.671100][ T7469] Call Trace: [ 286.674473][ T7469] [ 286.677426][ T7469] dump_stack_lvl+0x18c/0x250 [ 286.682112][ T7469] ? show_regs_print_info+0x20/0x20 [ 286.687333][ T7469] ? load_image+0x420/0x420 [ 286.691902][ T7469] panic+0x2ca/0x720 [ 286.695821][ T7469] ? bpf_jit_dump+0xd0/0xd0 [ 286.700343][ T7469] __warn+0x2e0/0x470 [ 286.704325][ T7469] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 286.710322][ T7469] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 286.716360][ T7469] report_bug+0x2be/0x4f0 [ 286.720722][ T7469] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 286.726711][ T7469] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 286.732710][ T7469] ? ext4_xattr_inode_update_ref+0x574/0x5d0 [ 286.738703][ T7469] handle_bug+0xcf/0x120 [ 286.742960][ T7469] exc_invalid_op+0x1a/0x50 [ 286.747469][ T7469] asm_exc_invalid_op+0x1a/0x20 [ 286.752331][ T7469] RIP: 0010:ext4_xattr_inode_update_ref+0x572/0x5d0 [ 286.758940][ T7469] Code: 50 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 91 f5 98 ff 49 8b 34 24 48 c7 c7 60 df de 8a 44 89 fa e8 5e 2d 0a ff <0f> 0b 4c 8b 64 24 10 4c 8d 6c 24 60 e9 8e fe ff ff e8 d8 27 4a 08 [ 286.778657][ T7469] RSP: 0018:ffffc9001a3a7360 EFLAGS: 00010246 [ 286.784730][ T7469] RAX: 061d0197c85a6900 RBX: ffff888077dd72a8 RCX: 0000000000080000 [ 286.792969][ T7469] RDX: ffffc9000c849000 RSI: 0000000000015485 RDI: 0000000000015486 [ 286.800940][ T7469] RBP: ffffc9001a3a7450 R08: ffff8880b8e28c53 R09: 1ffff110171c518a [ 286.808911][ T7469] R10: dffffc0000000000 R11: ffffed10171c518b R12: ffff888077dd7100 [ 286.817021][ T7469] R13: ffffc9001a3a73c0 R14: dffffc0000000000 R15: 0000000000000000 [ 286.825126][ T7469] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 286.830770][ T7469] ? __ext4_journal_ensure_credits+0x30/0x450 [ 286.836864][ T7469] ext4_xattr_inode_dec_ref_all+0x9bb/0x1030 [ 286.842861][ T7469] ? ext4_xattr_delete_inode+0xd00/0xd00 [ 286.848512][ T7469] ? __ext4_journal_ensure_credits+0x450/0x450 [ 286.854775][ T7469] ext4_xattr_delete_inode+0xb3b/0xd00 [ 286.860245][ T7469] ? ext4_mark_iloc_dirty+0x694/0x1c60 [ 286.865812][ T7469] ? ext4_expand_extra_isize_ea+0x1ea0/0x1ea0 [ 286.871890][ T7469] ? __ext4_mark_inode_dirty+0x50d/0x720 [ 286.877529][ T7469] ext4_evict_inode+0xa88/0xe70 [ 286.882561][ T7469] ? evict+0x482/0x8a0 [ 286.886759][ T7469] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 286.892684][ T7469] ? do_raw_spin_unlock+0x121/0x230 [ 286.898002][ T7469] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 286.903898][ T7469] evict+0x4b7/0x8a0 [ 286.907798][ T7469] ? __lock_acquire+0x7d80/0x7d80 [ 286.912822][ T7469] ? proc_nr_inodes+0x230/0x230 [ 286.917686][ T7469] ? do_raw_spin_unlock+0x121/0x230 [ 286.922907][ T7469] ? _raw_spin_unlock+0x28/0x40 [ 286.927796][ T7469] ext4_orphan_cleanup+0xdff/0x1650 [ 286.933191][ T7469] ? ext4_orphan_file_block_trigger+0x440/0x440 [ 286.939459][ T7469] ? ext4_orphan_del+0xc90/0xc90 [ 286.944397][ T7469] ? ext4_register_li_request+0x182/0x930 [ 286.950121][ T7469] ? errseq_check_and_advance+0x66/0x120 [ 286.955774][ T7469] ext4_fill_super+0x5fb5/0x6870 [ 286.960827][ T7469] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 286.967204][ T7469] ? __might_sleep+0xe0/0xe0 [ 286.971813][ T7469] ? read_lock_is_recursive+0x20/0x20 [ 286.977186][ T7469] ? snprintf+0xe9/0x140 [ 286.981434][ T7469] ? down_read_killable+0x340/0x340 [ 286.986651][ T7469] ? setup_bdev_super+0x56b/0x660 [ 286.991898][ T7469] get_tree_bdev+0x3e5/0x520 [ 286.996524][ T7469] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 287.002802][ T7469] ? setup_bdev_super+0x660/0x660 [ 287.007961][ T7469] ? apparmor_capable+0x137/0x1a0 [ 287.013019][ T7469] ? bpf_lsm_capable+0x9/0x10 [ 287.017706][ T7469] ? security_capable+0x89/0xb0 [ 287.022563][ T7469] vfs_get_tree+0x8c/0x280 [ 287.027010][ T7469] do_new_mount+0x24a/0xa40 [ 287.031535][ T7469] __se_sys_mount+0x2e7/0x3d0 [ 287.036219][ T7469] ? __x64_sys_mount+0xc0/0xc0 [ 287.040985][ T7469] ? lockdep_hardirqs_on+0x98/0x150 [ 287.046180][ T7469] ? __x64_sys_mount+0x20/0xc0 [ 287.051120][ T7469] do_syscall_64+0x55/0xb0 [ 287.055556][ T7469] ? clear_bhb_loop+0x40/0x90 [ 287.060240][ T7469] ? clear_bhb_loop+0x40/0x90 [ 287.064934][ T7469] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.070830][ T7469] RIP: 0033:0x7fe1d579f3ca [ 287.075247][ T7469] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.095032][ T7469] RSP: 002b:00007fe1d6683e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 287.103454][ T7469] RAX: ffffffffffffffda RBX: 00007fe1d6683ee0 RCX: 00007fe1d579f3ca [ 287.111439][ T7469] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 00007fe1d6683ea0 [ 287.119405][ T7469] RBP: 0000200000000040 R08: 00007fe1d6683ee0 R09: 0000000000000000 [ 287.127389][ T7469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 287.135359][ T7469] R13: 00007fe1d6683ea0 R14: 000000000000047a R15: 0000200000000080 [ 287.143333][ T7469] [ 287.146489][ T7469] Kernel Offset: disabled [ 287.150893][ T7469] Rebooting in 86400 seconds..