last executing test programs: 3m49.40627448s ago: executing program 0 (id=21): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001980)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) syz_mount_image$exfat(&(0x7f0000000180), &(0x7f00000012c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10000, &(0x7f0000001340)=ANY=[@ANYBLOB="646973636172642c666d61736b3d30303030303030303030303030303030303030303030322c757466382c696f636861727365743d63703836332c666d61736b3d30303030303030303030303030303030303030303030342c6572726f72733d636f6e74696e75652c666d61736b3d30303030303030303030303030303030303030303030352c6e616d65636173653d312c756d61736b3d30303030303030303030303030303030303030303230312c6572726f72733d636f6e74696e75652c757466382c00fbfbe2cb63743a0f96"], 0x1, 0x1535, &(0x7f0000002980)="$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") write$UHID_INPUT(r0, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) openat$dm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) 3m47.020756014s ago: executing program 0 (id=22): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x804, &(0x7f0000000180)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d77696e6e742c757466383d312c747a3d5554432c756e695f786c6174653d302c666c7573682c726f6469722c757466383d312c726f6469722c636f6465706167653d3835322c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c757466383d312c757466383d302c73686f72746e616d653d6d697865642c696f636861727365743d6d6163696e7569742c73686f72746e616d653d77696e6e742c73686f72746e616d653d6d697865642c002f131e4d5b5423eb9b5273ff27a367f66a493e9409ec9720a915eb11d5ad56ec3935e668dfa6d1ff45835a4d117ee1155aa1b4e776a7a2d66a8942a58ea825f008c1e30fe1145c6337edb812b822ed790217d5d52edd61045df48523482198c45b49ce4564069fa908b19e1f759b5e8be68c3cc10c9c76788fb047bcc80f78e9c5e89d13a5026428f8a3ada1ad7c0ac79a946e917c8987df6e08e53f1ffd0f6b63d8ab32d8d3ff273d5fcb79ecb7f0016da270e418e0d610d39bf52c8b2c93a6fdd886cf102938d94759b9c1000092460cf074efd00fecc6"], 0x1, 0x28e, &(0x7f0000000340)="$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") sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000bc0)='./cgroup.cpu/syz1\x00', 0x1ff) 3m46.076752441s ago: executing program 0 (id=24): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000640), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000700)='.\x00', 0x20000000) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYRES16=r0], 0x69) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x4000) execve(0x0, 0x0, &(0x7f00000108c0)={[&(0x7f0000010900)='\x01']}) getsockname$inet(0xffffffffffffffff, &(0x7f0000010940)={0x2, 0x0, @empty}, &(0x7f0000010980)=0x10) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='cpuset.effective_mems\x00', 0x275a, 0x0) timerfd_create(0x2, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{0x20, 'nojoyrnal_checksum\xb1>\xdce~\xdc\xe4G\xfb\xf16.\xa2\xe1\xc5a0\x8e\b\xc2\xafb\xd67\xc2%\x82\x81he\xb18\xee\xcd\xd5y/\x18Fn\xc8#\xb3j$ |*\t\xfd\xb2\x1f\xc1\xa2\"\x17\xa3\x8c\xa1<0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000003c40), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000005e40)=0x2) recvmmsg(r1, &(0x7f0000005e80), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) clock_adjtime(0x0, &(0x7f0000005ec0)={0x1000000000066fb, 0x800000000004, 0x376, 0x0, 0x2000000000000, 0x51, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240b, 0x42, 0x9, 0x0, 0x7ca53c09, 0xfffffffffffffffd, 0x1fff, 0xfffffffffffffffc, 0x4, 0x10000000000, 0x0, 0x0, 0x100000000003f89, 0xfffffffffffffffc, 0x8000000000000000}) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r3, 0x5421, &(0x7f0000005fc0)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000070c0)={0x80}, 0x10) connect$bt_rfcomm(r3, &(0x7f0000007100)={0x1f, @any, 0x6}, 0xa) close(r3) r5 = socket$inet6(0xa, 0x80003, 0xe) connect$inet6(r5, &(0x7f0000007300)={0xa, 0x0, 0x0, @loopback}, 0x1c) 3m19.978854006s ago: executing program 3 (id=56): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa04080, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x2, 0x5524, &(0x7f0000000640)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x98) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x800000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000380)='6', 0x1) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) 3m17.796760759s ago: executing program 3 (id=59): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000880)='./proc/thread-self/fail-nth\x00', 0xa142, 0x14b) 3m11.903673623s ago: executing program 3 (id=68): prlimit64(0x0, 0xe, &(0x7f0000000600)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000a40)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000b00)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x101402, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0x10, 0xa456, 0x3, 0x4, 0x8, "5de3b3d5c0d64bca54849f8ad51ca2d8100071", 0x0, 0x8}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x800402, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x4, 0x2f0, &(0x7f0000000700)="$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") bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 3m10.444943373s ago: executing program 33 (id=68): prlimit64(0x0, 0xe, &(0x7f0000000600)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000a40)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000b00)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x101402, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0x10, 0xa456, 0x3, 0x4, 0x8, "5de3b3d5c0d64bca54849f8ad51ca2d8100071", 0x0, 0x8}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x800402, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x4, 0x2f0, &(0x7f0000000700)="$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") bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 1m13.987079188s ago: executing program 2 (id=339): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x6a, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @loopback}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) write$binfmt_misc(r0, &(0x7f0000000580)='}', 0x1) sendto$inet(r0, &(0x7f00000005c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 1m13.288012469s ago: executing program 2 (id=346): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x1, 0x0) rt_tgsigqueueinfo(0x0, r0, 0x1c, &(0x7f00000047c0)={0x1, 0x4, 0x27}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x404, &(0x7f0000000380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000000400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002440)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x2b418842, 0x6, 0x0, 0x0, 0x4}}, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) statx(0xffffffffffffff9c, &(0x7f00000024c0)='./file0/file1\x00', 0x1000, 0x100, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002500)='./file0/file1\x00', 0xfeedefff, 0x0) 1m11.731457669s ago: executing program 2 (id=350): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000500), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000540), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000580)='./proc/mtrr\x00', 0x0, 0x42008, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000840)={0x2, {0x2, 0xa00, 0xff01, 0x101, 0x100}}) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/mtrr\x00', 0x20002, 0x80) ioctl(r5, 0x40104d04, &(0x7f0000000600)="9c81") sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x2) syz_open_procfs$namespace(r1, &(0x7f0000000800)='ns/pid_for_children\x00') 1m8.751506214s ago: executing program 2 (id=353): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x38}}, 0x0) setns(0xc9, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002cc0)=@delchain={0x5c0, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x594, 0x2, [@TCA_BPF_ACT={0x590, 0x1, [@m_bpf={0x11c, 0x11, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0xc, 0x10, 0x7, 0x6}]}]}, {0xd1, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d91028270a2722b141a9140c47e37d068e7193d463a6444e424bc792ab1295f79842a501700a5cc2f71eefaf131a98821e712b03d552c87"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0x34, 0x8, 0x0, 0x0, {{0x8}, {0x4}, {0x9, 0x6, "5d3aee85a6"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x43c, 0x9, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe73, 0x9, 0x7, 0x3, 0x1ff, 0x7, 0x8, 0x80, 0x3, 0x1, 0x10000000, 0x401, 0x3, 0x3, 0x7, 0x6, 0x1000, 0x613, 0x5, 0x5, 0xfffffff9, 0xff, 0xc, 0x7fff, 0x15, 0x5c7000, 0x9, 0x7fffffff, 0x5, 0x6, 0x0, 0x80, 0x1f, 0x7ff, 0xfffffc84, 0x10, 0xfffffff7, 0x3, 0x8, 0x6, 0x5, 0xb, 0x8, 0xfffffffd, 0x4c, 0xe, 0xf, 0x9, 0x9, 0x3, 0xfffffff9, 0xfffffffa, 0x1, 0x2, 0x9, 0x8, 0xc6e7, 0xa000, 0x2, 0x8000, 0x17, 0x4, 0x2e52, 0x9, 0x7, 0x6, 0x414, 0x10001, 0x0, 0x5, 0xffffffff, 0xc, 0x1000, 0x4, 0x800, 0x10, 0x39, 0x5, 0x2, 0x5c3, 0x800, 0x2, 0x3, 0x6e6, 0x3, 0x7, 0x6, 0xc, 0x3, 0x14e, 0x8, 0x5, 0xad8, 0x289f, 0x3, 0x97e, 0x3, 0x80, 0x6, 0xb, 0x8, 0xe6, 0x720, 0x2, 0xa98f, 0x1, 0xffffffff, 0x0, 0x3, 0x74, 0xdd7c, 0x2, 0x0, 0xffffff7c, 0x6, 0x7f, 0x1, 0x6, 0x4, 0x7, 0x3, 0x7, 0xb, 0xfff, 0x0, 0x3, 0xc60, 0x7, 0x4, 0xf8ca, 0xb, 0x6, 0x3ff, 0x7fffffff, 0x8001, 0xd, 0x0, 0x4, 0x4, 0x0, 0x421, 0x8, 0x9, 0x2, 0x1, 0x0, 0x9, 0xffff, 0x7ff, 0x8, 0x9, 0x2, 0xb, 0xa00, 0x2, 0xfec, 0x5, 0x5, 0x5, 0x9, 0x2, 0x400, 0x3, 0x3, 0x3, 0x8, 0xe59, 0x1000, 0x101, 0x5, 0x8001, 0x9, 0x4, 0x0, 0x6175, 0xe040, 0x80000001, 0x40, 0x7f, 0x9, 0x5e59, 0x81, 0x0, 0x9, 0x0, 0x3, 0x1, 0xb571, 0xe, 0xfff, 0x1000, 0x80000000, 0x2797, 0x4, 0x3, 0x2, 0x2, 0x3, 0x81, 0xffffffff, 0x6f, 0xfffffffd, 0x5, 0xb, 0x1, 0x3, 0x3, 0x1, 0x2, 0x0, 0x8001, 0x7, 0x7, 0x1, 0x32d, 0x9, 0x6, 0x2, 0x6, 0x2, 0x4, 0x1, 0x4, 0x0, 0x1000, 0x80000001, 0xffffffff, 0x4, 0x7, 0x8, 0x8, 0x697, 0xe339, 0x9, 0x1, 0x6, 0xffffffff, 0x9, 0x9, 0x35, 0x7, 0x5, 0xfffffffb, 0xfffffff9, 0x965, 0x7145, 0x90b6, 0x6, 0x6, 0x2, 0x8, 0x1, 0x1, 0xd5, 0x7ff, 0x200]}]]}, {0x9, 0x6, "6bf3860426"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x5c0}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1m8.026254928s ago: executing program 2 (id=354): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) mount(&(0x7f00000001c0)=@filename='./dev/sda1\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000280)='./mnt\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt\x00', 0x0, 0x21) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000400)=@v1={0x0, @aes128, 0x1, @desc1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r3, 0x200000) pwrite64(r3, &(0x7f00000000c0)="55aa", 0x2, 0x1fe) pwrite64(r3, 0x0, 0x0, 0xc0c) pwrite64(r3, 0x0, 0x0, 0xd2b) r4 = syz_open_dev$loop(&(0x7f00000003c0), 0x0, 0x2) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000600)='\x00', &(0x7f0000000640)='omfs\x00', 0x3800800, &(0x7f0000000680)='\x00\x00\x11\x11\"\"33') ioctl$LOOP_SET_FD(r4, 0x4c00, r3) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 1m7.677989274s ago: executing program 2 (id=357): gettid() r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000440), 0x400000000000041, 0x0) pidfd_getfd(r3, r3, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000480)=0x2) recvmmsg(r2, &(0x7f00000004c0), 0x80002c1, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10000, &(0x7f00000005c0), 0x1, 0x50a, &(0x7f0000003ec0)="$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") r5 = open(&(0x7f0000004400)='./file1\x00', 0x1ae07e, 0xbe) sendfile(r5, r5, 0x0, 0x10000006) 50.652807739s ago: executing program 34 (id=357): gettid() r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000440), 0x400000000000041, 0x0) pidfd_getfd(r3, r3, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000480)=0x2) recvmmsg(r2, &(0x7f00000004c0), 0x80002c1, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10000, &(0x7f00000005c0), 0x1, 0x50a, &(0x7f0000003ec0)="$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") r5 = open(&(0x7f0000004400)='./file1\x00', 0x1ae07e, 0xbe) sendfile(r5, r5, 0x0, 0x10000006) 37.432946604s ago: executing program 5 (id=408): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./dev\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000000), 0x4) mount(0x0, &(0x7f0000000480)='./dev\x00', &(0x7f00000004c0)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='./dev/sda1\x00', &(0x7f00000005c0)='./mnt\x00', &(0x7f0000000600)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000640)='./mnt\x00') rename(&(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='./mnt/dir\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./mnt/dir\x00', 0x1ff) 36.176038223s ago: executing program 5 (id=411): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./trace\x00', &(0x7f00000001c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='enable_event:sched:sched_process_fork', 0x25) 35.967180874s ago: executing program 5 (id=412): ioprio_set$uid(0x3, 0x0, 0x2004) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002000000106a050052000000000001090224000100009006090400fe020300000009210500060122280009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0009280000002824bdeace918d0fb74237cc6e446c4e88e78881ce2a521382"], 0x0, 0x0, 0x0, 0x0}, 0x0) 31.743211037s ago: executing program 5 (id=416): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000004c0), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000500), 0x80002c1, 0x2, 0x0) r2 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x13) socket(0x11, 0x3, 0x0) 28.144971646s ago: executing program 5 (id=424): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x6a, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e23, @multicast2}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x42, 0x1ff) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x100000d, 0x12, r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./tracing\x00', &(0x7f0000000740)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./tracing/uprobe_events\x00', 0x401, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000004a80)={@mcast2, 0x57}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)}}, {{0x0, 0x0, &(0x7f0000002fc0)=[{0x0}], 0x1, &(0x7f0000003080)}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xf8}}], 0x3, 0x0) write(r5, &(0x7f00000007c0)='p:s/p ./file0:0', 0xf) r6 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./tracing/events/s/p/enable\x00', 0x1, 0x0) write(r6, &(0x7f0000000840)='1', 0x1) prlimit64(0x0, 0x7, 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) syz_clone(0x8011, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto(r0, 0x0, 0x0, 0x4008044, 0x0, 0x0) write$binfmt_misc(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 26.868655766s ago: executing program 5 (id=427): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r3, 0x300000b, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x1, 0x0, 0x1, 0x7, 0x8000006, 0x0, 0x1068, 0x13, 0x5, 0x880000004000084, 0x9, 0x1, 0x2, 0xffffffffffffffff, 0x0, 0x6], 0x1dffa, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 26.857339277s ago: executing program 35 (id=427): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r3, 0x300000b, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x1, 0x0, 0x1, 0x7, 0x8000006, 0x0, 0x1068, 0x13, 0x5, 0x880000004000084, 0x9, 0x1, 0x2, 0xffffffffffffffff, 0x0, 0x6], 0x1dffa, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.096525295s ago: executing program 7 (id=433): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r3, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@multicast1=0xe0000300, @local}, 0x8) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x3}]}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x20044801}, 0x20040000) syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000380)='.\x02\x00', 0x2000800, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64=0x0, @ANYRES32, @ANYRES64=0x0, @ANYRES64, @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES64, @ANYBLOB="4e73ffed029678b24acf42b62a7ebf0ffb61162fed3c98e17878fdc7861ded935ac1221c8b78e02fbb58655ddc297ab592ac65ca1826643d989c42b9bddbd085b521f64b0472f6f38f92d1ae5fad3da5a711d9a36cceaa0a569f173a7f0c5efb58ee54030117cb7332eead32d076b550fcb60f79239c93af994228d7a115118cc0f31fed4a2660ca1e5a603e7901e4a8cf50c1a4572f243e082c4c17474de93de0f9c0423f83c4419c9822cb863ff586d84a5bd70d3e88ebee3838d094410049397ceceb46c2d3b7ea4a4923", @ANYRES64=0x0], 0x1, 0x2ef, &(0x7f0000000940)="$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") r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000c40)=@arena={0x21, 0x0, 0x0, 0x33, 0x0, r1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000000740)=@framed={{0x18, 0x8, 0x0, 0x0, 0x20}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r8}, @generic={0x66, 0x0, 0x0, 0x0, 0x700}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8}, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, 0x0, 0x2, 0xde, &(0x7f0000000840)=""/222}, 0x94) fcntl$lock(r6, 0x5, &(0x7f0000000640)={0x1, 0x0, 0x2, 0x5}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x107001, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 9.437570643s ago: executing program 6 (id=391): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000500), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000540), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000580)='./proc/mtrr\x00', 0x0, 0x42008, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000840)={0x2, {0x2, 0xa00, 0xff01, 0x101, 0x100}}) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/mtrr\x00', 0x20002, 0x80) ioctl(r5, 0x40104d04, &(0x7f0000000600)="9c81") syz_open_procfs$namespace(r1, &(0x7f0000000800)='ns/pid_for_children\x00') 8.78087529s ago: executing program 7 (id=433): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r3, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@multicast1=0xe0000300, @local}, 0x8) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x3}]}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x20044801}, 0x20040000) syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000380)='.\x02\x00', 0x2000800, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64=0x0, @ANYRES32, @ANYRES64=0x0, @ANYRES64, @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES64, @ANYBLOB="4e73ffed029678b24acf42b62a7ebf0ffb61162fed3c98e17878fdc7861ded935ac1221c8b78e02fbb58655ddc297ab592ac65ca1826643d989c42b9bddbd085b521f64b0472f6f38f92d1ae5fad3da5a711d9a36cceaa0a569f173a7f0c5efb58ee54030117cb7332eead32d076b550fcb60f79239c93af994228d7a115118cc0f31fed4a2660ca1e5a603e7901e4a8cf50c1a4572f243e082c4c17474de93de0f9c0423f83c4419c9822cb863ff586d84a5bd70d3e88ebee3838d094410049397ceceb46c2d3b7ea4a4923", @ANYRES64=0x0], 0x1, 0x2ef, &(0x7f0000000940)="$eJzs3c1qE1EUAOCTn6ZpEdu1uAi40U1R126CVBADhUoW6sZALUgrQrqJgpBXEEF8AFc+kgsfoquCi0gyY5Pmp5Uynant98G0Z+ZM79yZaefO4p7m9e13ezvvD3YHP79Fvd6IatQjjiLWoxyVSJSGX+p/41pM6ldOrMZyAACX3fZ2p7ko18+3K2SiOrOl2212lua+m7V/5NQpAAAAAAAAAAAAMjY7/z/6c+f/R0T55Pz/UdCfqgcAAC6/0+b/czV0u83OavL+NlWtaf4/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUJxqDNYGg8G9G8nqMB4vtVgrun8AQPaOJsf74+X3IGX8B4AraP74P16K7h8AkL2J8T/ijPG/Ulw3AYAMPX/x8lmz1drcbjTqEYf9XrvXTr4n+SdPW5v3GyPrEVFOth72eu3Kcf5Bkm+MWx3ml2I1zT+cm6/F3TtJfph7vNWayi/HTj6XAAAAAAAAAAAAAAAAAAAAAAq3MSrjL0Uk9f2pcX3/xsbW119vj+v/J/JJlP5/gHJM1fd/+l6NW9Vkrbzw6MsZnw0AAAAAAAAAAAAAAAAAAAD8nw4+fNzr7O+/6eYTlCIi25YrETEKqumWSuaHmAguruVhUI9RUIqZVC0izt3y8KLPTw0z5+3z5ySIOM+PP3oVcebOpb2VmEmt5P9Le7HBSvqXmMOxvuz+w+2+WY/RPV30xKjl93ACAAAAAAAAAAAAAAAAAIBrZlz9W3RPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA448//Xxwspfuets9pQcGnCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwTfwIAAP///HZwig==") r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000c40)=@arena={0x21, 0x0, 0x0, 0x33, 0x0, r1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000000740)=@framed={{0x18, 0x8, 0x0, 0x0, 0x20}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r8}, @generic={0x66, 0x0, 0x0, 0x0, 0x700}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8}, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, 0x0, 0x2, 0xde, &(0x7f0000000840)=""/222}, 0x94) fcntl$lock(r6, 0x5, &(0x7f0000000640)={0x1, 0x0, 0x2, 0x5}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x107001, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 8.105492129s ago: executing program 6 (id=391): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000500), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000540), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000580)='./proc/mtrr\x00', 0x0, 0x42008, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000840)={0x2, {0x2, 0xa00, 0xff01, 0x101, 0x100}}) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/mtrr\x00', 0x20002, 0x80) ioctl(r5, 0x40104d04, &(0x7f0000000600)="9c81") syz_open_procfs$namespace(r1, &(0x7f0000000800)='ns/pid_for_children\x00') 7.579628123s ago: executing program 4 (id=459): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000500), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000540), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000580)='./proc/mtrr\x00', 0x0, 0x42008, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000840)={0x2, {0x2, 0xa00, 0xff01, 0x101, 0x100}}) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/mtrr\x00', 0x20002, 0x80) ioctl(r5, 0x40104d04, &(0x7f0000000600)="9c81") sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x2) syz_open_procfs$namespace(r1, &(0x7f0000000800)='ns/pid_for_children\x00') mount(0x0, &(0x7f00000006c0)='./tracing\x00', &(0x7f0000000700)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./tracing/events/sched/filter\x00', 0x1, 0x0) pwritev(r6, &(0x7f0000000780)=[{&(0x7f00000007c0)="ef27021e19db19acab049ab4f127a9d8e74a5169c9cee9d67d044d7bfb0bdf41b49f72df1be42c7042c03586604d99e33565d7eac38f861a65f829", 0x3b}], 0x1, 0x800, 0x86) 7.576279023s ago: executing program 7 (id=433): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r3, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@multicast1=0xe0000300, @local}, 0x8) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x3}]}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x20044801}, 0x20040000) syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000380)='.\x02\x00', 0x2000800, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64=0x0, @ANYRES32, @ANYRES64=0x0, @ANYRES64, @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES64, @ANYBLOB="4e73ffed029678b24acf42b62a7ebf0ffb61162fed3c98e17878fdc7861ded935ac1221c8b78e02fbb58655ddc297ab592ac65ca1826643d989c42b9bddbd085b521f64b0472f6f38f92d1ae5fad3da5a711d9a36cceaa0a569f173a7f0c5efb58ee54030117cb7332eead32d076b550fcb60f79239c93af994228d7a115118cc0f31fed4a2660ca1e5a603e7901e4a8cf50c1a4572f243e082c4c17474de93de0f9c0423f83c4419c9822cb863ff586d84a5bd70d3e88ebee3838d094410049397ceceb46c2d3b7ea4a4923", @ANYRES64=0x0], 0x1, 0x2ef, &(0x7f0000000940)="$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") r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000c40)=@arena={0x21, 0x0, 0x0, 0x33, 0x0, r1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000000740)=@framed={{0x18, 0x8, 0x0, 0x0, 0x20}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r8}, @generic={0x66, 0x0, 0x0, 0x0, 0x700}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8}, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, 0x0, 0x2, 0xde, &(0x7f0000000840)=""/222}, 0x94) fcntl$lock(r6, 0x5, &(0x7f0000000640)={0x1, 0x0, 0x2, 0x5}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x107001, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 6.358467258s ago: executing program 4 (id=460): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, 0x52, 0x1, 0x70bd2c, 0x4, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) creat(&(0x7f0000000100)='./bus\x00', 0x0) setns(0xc9, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x18, r4, 0x321, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c811}, 0x20040884) 6.175357077s ago: executing program 1 (id=461): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000071c0)={0x1, &(0x7f0000007200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000007240)={0xaa, 0x4c}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007280)={{&(0x7f0000000000/0x800000)=nil, 0x800000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) 5.986594437s ago: executing program 6 (id=391): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000500), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000540), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000580)='./proc/mtrr\x00', 0x0, 0x42008, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000840)={0x2, {0x2, 0xa00, 0xff01, 0x101, 0x100}}) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/mtrr\x00', 0x20002, 0x80) ioctl(r5, 0x40104d04, &(0x7f0000000600)="9c81") syz_open_procfs$namespace(r1, &(0x7f0000000800)='ns/pid_for_children\x00') 5.237396894s ago: executing program 1 (id=462): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 3.969687093s ago: executing program 4 (id=463): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x1, 0x0) rt_tgsigqueueinfo(0x0, r0, 0x1c, &(0x7f00000047c0)={0x1, 0x4, 0x27}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x404, &(0x7f0000000380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) statx(0xffffffffffffff9c, &(0x7f00000024c0)='./file0/file1\x00', 0x1000, 0x100, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002500)='./file0/file1\x00', 0xfeedefff, 0x0) syz_fuse_handle_req(r1, &(0x7f0000002540)="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", 0x2000, &(0x7f0000004540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004600)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x4000, 0x4, r2, r3, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.965573813s ago: executing program 1 (id=464): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xa001, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000003c0)="2eab9fbdcb4fe1d5e3", 0x9}, {&(0x7f00000006c0)="b15bad3ed8bd6576", 0x8}], 0x2) 3.965008593s ago: executing program 7 (id=433): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r3, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@multicast1=0xe0000300, @local}, 0x8) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x3}]}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x20044801}, 0x20040000) syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000380)='.\x02\x00', 0x2000800, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64=0x0, @ANYRES32, @ANYRES64=0x0, @ANYRES64, @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES64, @ANYBLOB="4e73ffed029678b24acf42b62a7ebf0ffb61162fed3c98e17878fdc7861ded935ac1221c8b78e02fbb58655ddc297ab592ac65ca1826643d989c42b9bddbd085b521f64b0472f6f38f92d1ae5fad3da5a711d9a36cceaa0a569f173a7f0c5efb58ee54030117cb7332eead32d076b550fcb60f79239c93af994228d7a115118cc0f31fed4a2660ca1e5a603e7901e4a8cf50c1a4572f243e082c4c17474de93de0f9c0423f83c4419c9822cb863ff586d84a5bd70d3e88ebee3838d094410049397ceceb46c2d3b7ea4a4923", @ANYRES64=0x0], 0x1, 0x2ef, &(0x7f0000000940)="$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") r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000c40)=@arena={0x21, 0x0, 0x0, 0x33, 0x0, r1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000000740)=@framed={{0x18, 0x8, 0x0, 0x0, 0x20}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r8}, @generic={0x66, 0x0, 0x0, 0x0, 0x700}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8}, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, 0x0, 0x2, 0xde, &(0x7f0000000840)=""/222}, 0x94) fcntl$lock(r6, 0x5, &(0x7f0000000640)={0x1, 0x0, 0x2, 0x5}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x107001, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 3.304325211s ago: executing program 4 (id=465): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='27', 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x40, 0x700, 0x40, 0x1, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}) 3.303518901s ago: executing program 1 (id=466): r0 = syz_usb_connect(0x2, 0x68, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="200906"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000840)={0x34, &(0x7f00000004c0)={0x0, 0xa, 0x73, "6f21c914713120c3a8fd8c78a159329bc6f24a8fe68ecdf1d829db0652cb8054e69a84bf2ba9c01e8a07e6adafe275df4f03649c4ca40013cfe1f2def3b1402ad7cb57165e33d95e851ed2841ea15615e6b17a155107d082c3206e853c8f81e10b314f37689b7dd52d5fec5e3fc0627a6d41f3"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000005c0)={0x0, 0x8, 0x1}, 0x0, &(0x7f00000007c0)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000800)={0x20, 0x0, 0x1, 0x1c}}) 3.303174521s ago: executing program 6 (id=391): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000500), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000540), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000580)='./proc/mtrr\x00', 0x0, 0x42008, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000840)={0x2, {0x2, 0xa00, 0xff01, 0x101, 0x100}}) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/mtrr\x00', 0x20002, 0x80) ioctl(r5, 0x40104d04, &(0x7f0000000600)="9c81") syz_open_procfs$namespace(r1, &(0x7f0000000800)='ns/pid_for_children\x00') 2.224487092s ago: executing program 4 (id=467): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$inet_tcp(0x2, 0x1, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) socket$inet6(0xa, 0x3, 0x7) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x80000, 0x4003ffff, 0x338}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2.223782542s ago: executing program 7 (id=433): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r3, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@multicast1=0xe0000300, @local}, 0x8) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x3}]}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x20044801}, 0x20040000) syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000380)='.\x02\x00', 0x2000800, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64=0x0, @ANYRES32, @ANYRES64=0x0, @ANYRES64, @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES64, @ANYBLOB="4e73ffed029678b24acf42b62a7ebf0ffb61162fed3c98e17878fdc7861ded935ac1221c8b78e02fbb58655ddc297ab592ac65ca1826643d989c42b9bddbd085b521f64b0472f6f38f92d1ae5fad3da5a711d9a36cceaa0a569f173a7f0c5efb58ee54030117cb7332eead32d076b550fcb60f79239c93af994228d7a115118cc0f31fed4a2660ca1e5a603e7901e4a8cf50c1a4572f243e082c4c17474de93de0f9c0423f83c4419c9822cb863ff586d84a5bd70d3e88ebee3838d094410049397ceceb46c2d3b7ea4a4923", @ANYRES64=0x0], 0x1, 0x2ef, &(0x7f0000000940)="$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") r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000c40)=@arena={0x21, 0x0, 0x0, 0x33, 0x0, r1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000000740)=@framed={{0x18, 0x8, 0x0, 0x0, 0x20}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r8}, @generic={0x66, 0x0, 0x0, 0x0, 0x700}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8}, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, 0x0, 0x2, 0xde, &(0x7f0000000840)=""/222}, 0x94) fcntl$lock(r6, 0x5, &(0x7f0000000640)={0x1, 0x0, 0x2, 0x5}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x107001, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 1.390062997s ago: executing program 6 (id=391): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000500), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000540), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000580)='./proc/mtrr\x00', 0x0, 0x42008, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000840)={0x2, {0x2, 0xa00, 0xff01, 0x101, 0x100}}) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/mtrr\x00', 0x20002, 0x80) ioctl(r5, 0x40104d04, &(0x7f0000000600)="9c81") syz_open_procfs$namespace(r1, &(0x7f0000000800)='ns/pid_for_children\x00') 779.75339ms ago: executing program 4 (id=468): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000280)={0x2c, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) pwrite64(r1, 0x0, 0x0, 0x1) 778.4623ms ago: executing program 1 (id=469): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x400) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.self_freezing\x00', 0x275a, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000480)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f00000004c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 778.17268ms ago: executing program 7 (id=433): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r3, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@multicast1=0xe0000300, @local}, 0x8) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x3}]}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x20044801}, 0x20040000) syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000380)='.\x02\x00', 0x2000800, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64=0x0, @ANYRES32, @ANYRES64=0x0, @ANYRES64, @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES64, @ANYBLOB="4e73ffed029678b24acf42b62a7ebf0ffb61162fed3c98e17878fdc7861ded935ac1221c8b78e02fbb58655ddc297ab592ac65ca1826643d989c42b9bddbd085b521f64b0472f6f38f92d1ae5fad3da5a711d9a36cceaa0a569f173a7f0c5efb58ee54030117cb7332eead32d076b550fcb60f79239c93af994228d7a115118cc0f31fed4a2660ca1e5a603e7901e4a8cf50c1a4572f243e082c4c17474de93de0f9c0423f83c4419c9822cb863ff586d84a5bd70d3e88ebee3838d094410049397ceceb46c2d3b7ea4a4923", @ANYRES64=0x0], 0x1, 0x2ef, &(0x7f0000000940)="$eJzs3c1qE1EUAOCTn6ZpEdu1uAi40U1R126CVBADhUoW6sZALUgrQrqJgpBXEEF8AFc+kgsfoquCi0gyY5Pmp5Uynant98G0Z+ZM79yZaefO4p7m9e13ezvvD3YHP79Fvd6IatQjjiLWoxyVSJSGX+p/41pM6ldOrMZyAACX3fZ2p7ko18+3K2SiOrOl2212lua+m7V/5NQpAAAAAAAAAAAAMjY7/z/6c+f/R0T55Pz/UdCfqgcAAC6/0+b/czV0u83OavL+NlWtaf4/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUJxqDNYGg8G9G8nqMB4vtVgrun8AQPaOJsf74+X3IGX8B4AraP74P16K7h8AkL2J8T/ijPG/Ulw3AYAMPX/x8lmz1drcbjTqEYf9XrvXTr4n+SdPW5v3GyPrEVFOth72eu3Kcf5Bkm+MWx3ml2I1zT+cm6/F3TtJfph7vNWayi/HTj6XAAAAAAAAAAAAAAAAAAAAAAq3MSrjL0Uk9f2pcX3/xsbW119vj+v/J/JJlP5/gHJM1fd/+l6NW9Vkrbzw6MsZnw0AAAAAAAAAAAAAAAAAAAD8nw4+fNzr7O+/6eYTlCIi25YrETEKqumWSuaHmAguruVhUI9RUIqZVC0izt3y8KLPTw0z5+3z5ySIOM+PP3oVcebOpb2VmEmt5P9Le7HBSvqXmMOxvuz+w+2+WY/RPV30xKjl93ACAAAAAAAAAAAAAAAAAIBrZlz9W3RPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA448//Xxwspfuets9pQcGnCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwTfwIAAP///HZwig==") r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000c40)=@arena={0x21, 0x0, 0x0, 0x33, 0x0, r1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000000740)=@framed={{0x18, 0x8, 0x0, 0x0, 0x20}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r8}, @generic={0x66, 0x0, 0x0, 0x0, 0x700}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8}, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, 0x0, 0x2, 0xde, &(0x7f0000000840)=""/222}, 0x94) fcntl$lock(r6, 0x5, &(0x7f0000000640)={0x1, 0x0, 0x2, 0x5}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x107001, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 656.95µs ago: executing program 1 (id=470): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x168) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x8, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000940), 0x0, &(0x7f0000000980)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000009c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x180) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0x200) 0s ago: executing program 6 (id=391): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000500), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000540), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000580)='./proc/mtrr\x00', 0x0, 0x42008, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000840)={0x2, {0x2, 0xa00, 0xff01, 0x101, 0x100}}) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/mtrr\x00', 0x20002, 0x80) ioctl(r5, 0x40104d04, &(0x7f0000000600)="9c81") syz_open_procfs$namespace(r1, &(0x7f0000000800)='ns/pid_for_children\x00') kernel console output (not intermixed with test programs): 7821][ T6253] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 132.195487][ T6253] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 132.206113][ T6250] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 132.214554][ T6250] EXT4-fs (loop1): orphan cleanup on readonly fs [ 132.231358][ T6250] EXT4-fs warning (device loop1): ext4_enable_quotas:7193: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 132.247665][ T5789] syz-executor: attempt to access beyond end of device [ 132.247665][ T5789] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 132.265066][ T5789] syz-executor: attempt to access beyond end of device [ 132.265066][ T5789] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 132.279664][ T6244] syz.4.36 (6244): drop_caches: 2 [ 132.314033][ T6250] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 132.347199][ T6253] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 2: comm syz.2.58: lblock 2 mapped to illegal pblock 2 (length 1) [ 132.362337][ T6250] EXT4-fs error (device loop1): __ext4_iget:5117: inode #16: block 127754: comm syz.1.67: invalid block [ 132.398032][ T6253] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 132.406717][ T6253] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 48: comm syz.2.58: lblock 0 mapped to illegal pblock 48 (length 1) [ 132.421644][ T6253] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 132.431369][ T6250] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.67: couldn't read orphan inode 16 (err -117) [ 132.440464][ T6253] EXT4-fs error (device loop2): ext4_acquire_dquot:6958: comm syz.2.58: Failed to acquire dquot type 0 [ 132.460006][ T2891] kworker/u4:8: attempt to access beyond end of device [ 132.460006][ T2891] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 132.478185][ T6253] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 132.482138][ T6250] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 132.502233][ T6253] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.58: mark_inode_dirty error [ 132.507043][ T2891] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 132.540846][ T2891] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 132.543990][ T6253] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 132.564369][ T2891] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 132.607728][ T6253] EXT4-fs (loop2): 1 orphan inode deleted [ 132.627481][ T12] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 132.649610][ T6253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.719476][ T12] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 132.954234][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6994: comm kworker/u4:1: Failed to release dquot type 0 [ 133.005605][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.023106][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.799536][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.265624][ T6273] loop4: detected capacity change from 0 to 512 [ 135.428640][ T6273] EXT4-fs (loop4): 1 orphan inode deleted [ 135.470499][ T6273] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.518093][ T6273] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.762054][ T6069] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.740679][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.767484][ T1138] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 136.812566][ T1138] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 136.838571][ T1138] EXT4-fs error (device loop2): ext4_release_dquot:6994: comm kworker/u4:7: Failed to release dquot type 0 [ 136.885140][ T5787] EXT4-fs error (device loop2): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 136.930963][ T5787] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 136.967814][ T5787] EXT4-fs error (device loop2): ext4_quota_off:7242: inode #3: comm syz-executor: mark_inode_dirty error [ 137.560197][ T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.044220][ T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.498184][ T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.191924][ T60] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.087207][ T6327] loop4: detected capacity change from 0 to 512 [ 141.300605][ T5803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 141.314600][ T5803] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 141.332391][ T5803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 141.340979][ T5803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 141.351476][ T5803] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 141.359016][ T5803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 141.945870][ T6319] syz.2.71 (6319): drop_caches: 2 [ 141.999501][ T6321] syz.2.71 (6321): drop_caches: 2 [ 142.021575][ T6327] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #15: comm syz.4.72: iget: bad i_size value: 38620345925642 [ 142.041263][ T6327] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.72: couldn't read orphan inode 15 (err -117) [ 142.058014][ T6327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.085322][ T28] audit: type=1800 audit(1793788121.036:3): pid=6325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.72" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 142.292299][ T6332] rxe_eth0 speed is unknown, defaulting to 1000 [ 142.615784][ T6069] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.688740][ T60] hsr_slave_0: left promiscuous mode [ 142.771440][ T60] hsr_slave_1: left promiscuous mode [ 142.788273][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.817036][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.855564][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.863487][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.926748][ T60] bridge_slave_1: left allmulticast mode [ 142.932471][ T60] bridge_slave_1: left promiscuous mode [ 142.947072][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.997387][ T60] bridge_slave_0: left allmulticast mode [ 143.005738][ T60] bridge_slave_0: left promiscuous mode [ 143.023022][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.095434][ T60] veth1_macvtap: left promiscuous mode [ 143.104345][ T60] veth0_macvtap: left promiscuous mode [ 143.119859][ T60] veth1_vlan: left promiscuous mode [ 143.138901][ T60] veth0_vlan: left promiscuous mode [ 143.337630][ T6359] loop2: detected capacity change from 0 to 2048 [ 143.412557][ T6359] loop2: p4 < > [ 143.454107][ T5796] Bluetooth: hci3: command tx timeout [ 144.566103][ T60] team0 (unregistering): Port device team_slave_1 removed [ 144.686410][ T60] team0 (unregistering): Port device team_slave_0 removed [ 144.749816][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.827880][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.587082][ T5796] Bluetooth: hci3: command tx timeout [ 145.807618][ T6380] loop1: detected capacity change from 0 to 1024 [ 145.872879][ T5791] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 146.132223][ T6381] loop1: detected capacity change from 0 to 256 [ 146.216100][ T6381] FAT-fs (loop1): IO charset macturname=winnt not found [ 146.244203][ T60] bond0 (unregistering): Released all slaves [ 147.619600][ T5796] Bluetooth: hci3: command tx timeout [ 148.667657][ T6332] chnl_net:caif_netlink_parms(): no params data found [ 148.687148][ T6396] loop1: detected capacity change from 0 to 1024 [ 148.705056][ T6396] EXT4-fs: Ignoring removed bh option [ 148.743093][ T6396] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 148.797534][ T6396] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.236904][ T6332] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.261756][ T6332] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.288692][ T6332] bridge_slave_0: entered allmulticast mode [ 150.333310][ T5796] Bluetooth: hci3: command tx timeout [ 150.772635][ T6332] bridge_slave_0: entered promiscuous mode [ 150.804599][ T6332] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.844315][ T6332] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.883557][ T6332] bridge_slave_1: entered allmulticast mode [ 150.913272][ T6332] bridge_slave_1: entered promiscuous mode [ 151.107734][ T6332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.187024][ T6332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.332916][ T6332] team0: Port device team_slave_0 added [ 151.375163][ T6332] team0: Port device team_slave_1 added [ 151.528209][ T6332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.588350][ T6332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.722715][ T6332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.786228][ T6332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.807082][ T6332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.917621][ T6332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.056291][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.226153][ T6332] hsr_slave_0: entered promiscuous mode [ 152.256729][ T6332] hsr_slave_1: entered promiscuous mode [ 152.268594][ T6332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.280297][ T6428] loop1: detected capacity change from 0 to 128 [ 152.287637][ T6332] Cannot create hsr debugfs directory [ 155.623964][ T6332] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 155.660041][ T6332] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 155.719166][ T6332] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 155.751388][ T6332] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 155.966093][ T6464] loop2: detected capacity change from 0 to 128 [ 156.054282][ T6464] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 156.073270][ T6332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.081243][ T6464] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.101256][ T6332] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.131236][ T1002] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.138461][ T1002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.224911][ T1002] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.232131][ T1002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.386991][ T5787] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 157.301762][ T6453] loop1: detected capacity change from 0 to 40427 [ 157.335748][ T6453] F2FS-fs (loop1): Image doesn't support compression [ 157.342980][ T6453] F2FS-fs (loop1): Unrecognized mount option "whint_mode=fs-based" or missing value [ 157.687062][ T6332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.717887][ T6490] tipc: Started in network mode [ 157.748103][ T6490] tipc: Node identity 7f000001, cluster identity 4711 [ 157.781537][ T6490] tipc: New replicast peer: 127.0.0.1 [ 157.787943][ T6490] tipc: Enabled bearer , priority 10 [ 159.529935][ T175] tipc: Node number set to 2130706433 [ 159.610741][ T6502] loop4: detected capacity change from 0 to 512 [ 159.876569][ T6502] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #15: comm syz.4.101: iget: bad i_size value: 38620345925642 [ 160.052398][ T6502] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.101: couldn't read orphan inode 15 (err -117) [ 160.236147][ T6502] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.464873][ T28] audit: type=1800 audit(1793788139.155:4): pid=6502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.101" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 160.636208][ T6522] loop2: detected capacity change from 0 to 16 [ 160.723432][ T6522] erofs: (device loop2): mounted with root inode @ nid 36. [ 160.798176][ T6510] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 160.880080][ T6332] veth0_vlan: entered promiscuous mode [ 160.951480][ T6332] veth1_vlan: entered promiscuous mode [ 161.034842][ T6332] veth0_macvtap: entered promiscuous mode [ 161.075913][ T6332] veth1_macvtap: entered promiscuous mode [ 161.118794][ T6332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.153631][ T6332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.178150][ T6332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.200785][ T6332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.225389][ T6332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.245844][ T6332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.258862][ T6332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.290606][ T6332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.307595][ T175] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 161.327975][ T6332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.337834][ T6332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.390307][ T6332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.400188][ T6332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.439720][ T6332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.465031][ T6332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.501707][ T6332] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.517076][ T6332] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.526189][ T175] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 161.535029][ T6332] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.547602][ T6332] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.556626][ T175] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.556649][ T175] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 161.556725][ T175] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 161.556749][ T175] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.653153][ T175] gspca_main: spca501-2.14.0 probing 0000:0000 [ 161.782194][ T2963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.803308][ T2963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.822243][ T175] gspca_spca501: reg write: error -71 [ 161.839013][ T175] spca501 3-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 161.861126][ T175] spca501: probe of 3-1:1.0 failed with error -22 [ 161.869182][ T175] uvcvideo 3-1:1.0: Found multiple Units with ID 1 [ 161.889046][ T175] usb 3-1: Found UVC 71.01 device (0000:0000) [ 161.896119][ T175] usb 3-1: No streaming interface found for terminal 2. [ 161.924742][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.942065][ T175] usb 3-1: USB disconnect, device number 3 [ 161.963907][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.229178][ T6539] loop5: detected capacity change from 0 to 256 [ 162.259752][ T6539] exFAT-fs (loop5): bogus fat length [ 162.279952][ T6539] exFAT-fs (loop5): failed to read boot sector [ 162.303924][ T6539] exFAT-fs (loop5): failed to recognize exfat type [ 164.452284][ T6560] loop5: detected capacity change from 0 to 512 [ 164.546107][ T6560] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 164.603257][ T6560] EXT4-fs (loop5): orphan cleanup on readonly fs [ 164.657075][ T6560] EXT4-fs warning (device loop5): ext4_enable_quotas:7193: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 164.762811][ T6560] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 164.804484][ T6560] EXT4-fs error (device loop5): __ext4_iget:5117: inode #16: block 127754: comm syz.5.109: invalid block [ 164.837708][ T6560] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.109: couldn't read orphan inode 16 (err -117) [ 164.885005][ T6560] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 165.085862][ T6568] netlink: 32 bytes leftover after parsing attributes in process `syz.5.109'. [ 167.019704][ T6586] loop1: detected capacity change from 0 to 256 [ 167.134636][ T6586] FAT-fs (loop1): Directory bread(block 64) failed [ 167.172824][ T6332] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.182742][ T6586] FAT-fs (loop1): Directory bread(block 65) failed [ 167.250363][ T6586] FAT-fs (loop1): Directory bread(block 66) failed [ 167.257046][ T6586] FAT-fs (loop1): Directory bread(block 67) failed [ 167.328490][ T6586] FAT-fs (loop1): Directory bread(block 68) failed [ 167.356862][ T6586] FAT-fs (loop1): Directory bread(block 69) failed [ 167.378588][ T6586] FAT-fs (loop1): Directory bread(block 70) failed [ 167.396224][ T6586] FAT-fs (loop1): Directory bread(block 71) failed [ 167.424768][ T6586] FAT-fs (loop1): Directory bread(block 72) failed [ 167.431377][ T6586] FAT-fs (loop1): Directory bread(block 73) failed [ 167.642677][ T6586] syz.1.114: attempt to access beyond end of device [ 167.642677][ T6586] loop1: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 167.690450][ T6586] syz.1.114: attempt to access beyond end of device [ 167.690450][ T6586] loop1: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 167.721197][ T6596] loop5: detected capacity change from 0 to 256 [ 167.763485][ T6598] syz.1.114: attempt to access beyond end of device [ 167.763485][ T6598] loop1: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 167.777113][ T28] audit: type=1800 audit(1793788146.088:5): pid=6586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.114" name="file1" dev="loop1" ino=1048643 res=0 errno=0 [ 167.874111][ T6586] syz.1.114: attempt to access beyond end of device [ 167.874111][ T6586] loop1: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 168.094589][ T6596] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x75619368, utbl_chksum : 0xe619d30d) [ 168.580074][ T6069] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.777516][ T6607] loop5: detected capacity change from 0 to 256 [ 168.813175][ T6607] exfat: Deprecated parameter 'utf8' [ 168.818564][ T6607] exfat: Deprecated parameter 'utf8' [ 168.837737][ T6607] exfat: Deprecated parameter 'utf8' [ 168.878383][ T6607] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 169.458877][ T6632] loop4: detected capacity change from 0 to 128 [ 169.518555][ T6635] loop1: detected capacity change from 0 to 512 [ 169.550767][ T28] audit: type=1804 audit(1793788147.742:6): pid=6632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.123" name="/newroot/20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop4" ino=1048645 res=1 errno=0 [ 169.670092][ T6635] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 169.684224][ T6635] EXT4-fs (loop1): orphan cleanup on readonly fs [ 169.693136][ T6635] EXT4-fs warning (device loop1): ext4_enable_quotas:7193: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 169.732541][ T6635] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 169.740049][ T6635] EXT4-fs error (device loop1): __ext4_iget:5117: inode #16: block 127754: comm syz.1.124: invalid block [ 169.795104][ T6635] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.124: couldn't read orphan inode 16 (err -117) [ 169.860960][ T6635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 169.916403][ T6640] loop4: detected capacity change from 0 to 256 [ 169.923279][ T6642] capability: warning: `syz.5.125' uses 32-bit capabilities (legacy support in use) [ 169.942374][ T6640] exfat: Deprecated parameter 'utf8' [ 169.966595][ T6640] exfat: Deprecated parameter 'utf8' [ 170.006653][ T6640] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 170.089139][ T6645] netlink: 32 bytes leftover after parsing attributes in process `syz.1.124'. [ 172.410101][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.275895][ T6662] loop5: detected capacity change from 0 to 512 [ 175.082259][ T6662] EXT4-fs error (device loop5): ext4_orphan_get:1408: inode #15: comm syz.5.129: iget: bad i_size value: 38620345925642 [ 175.165764][ T6662] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.129: couldn't read orphan inode 15 (err -117) [ 175.182575][ T6673] loop4: detected capacity change from 0 to 256 [ 175.234609][ T6673] exfat: Deprecated parameter 'utf8' [ 175.241014][ T6673] exfat: Deprecated parameter 'namecase' [ 175.281138][ T6662] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.349777][ T6673] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 175.387050][ T28] audit: type=1800 audit(1793788153.139:7): pid=6662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.129" name="file1" dev="loop5" ino=18 res=0 errno=0 [ 175.710009][ T6670] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 175.759662][ T6686] loop1: detected capacity change from 0 to 512 [ 175.808952][ T6686] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 175.886952][ T6686] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.917960][ T6693] loop4: detected capacity change from 0 to 512 [ 175.929525][ T6686] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.996333][ T6693] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 176.102976][ T6693] EXT4-fs (loop4): orphan cleanup on readonly fs [ 176.156719][ T6693] EXT4-fs warning (device loop4): ext4_enable_quotas:7193: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 176.201000][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.210997][ T6693] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 176.245477][ T6693] EXT4-fs error (device loop4): __ext4_iget:5117: inode #16: block 127754: comm syz.4.136: invalid block [ 176.309628][ T6693] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.136: couldn't read orphan inode 16 (err -117) [ 176.355381][ T6693] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 176.590380][ T6713] netlink: 32 bytes leftover after parsing attributes in process `syz.4.136'. [ 179.164369][ T6069] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.239621][ T6785] loop4: detected capacity change from 0 to 512 [ 186.408200][ T6785] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 187.834758][ T6332] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.856046][ T6823] netlink: 16 bytes leftover after parsing attributes in process `syz.2.162'. [ 187.968420][ T6827] loop2: detected capacity change from 0 to 128 [ 188.515940][ T6827] syz.2.162: attempt to access beyond end of device [ 188.515940][ T6827] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 188.546893][ T6827] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 188.660492][ T6855] binder: 6854:6855 unknown command 1074291477 [ 188.668144][ T6855] binder: 6854:6855 ioctl c0306201 2000000001c0 returned -22 [ 189.145183][ T6870] loop1: detected capacity change from 0 to 512 [ 189.237688][ T6870] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.172: iget: bad i_size value: 38620345925642 [ 189.315746][ T6870] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.172: couldn't read orphan inode 15 (err -117) [ 189.341816][ T6870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.362115][ T28] audit: type=1800 audit(1793788166.058:8): pid=6870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.172" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 189.700397][ T175] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 189.765206][ T6876] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 189.916440][ T175] usb 3-1: Using ep0 maxpacket: 16 [ 189.931495][ T175] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.954678][ T175] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.988586][ T175] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 190.002318][ T175] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.013096][ T175] usb 3-1: Product: syz [ 190.019739][ T175] usb 3-1: Manufacturer: syz [ 190.024801][ T175] usb 3-1: SerialNumber: syz [ 190.275892][ T175] usb 3-1: 0:2 : does not exist [ 190.303738][ T175] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 190.392550][ T175] usb 3-1: USB disconnect, device number 4 [ 190.508430][ T5791] udevd[5791]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.079366][ T6907] netlink: 16 bytes leftover after parsing attributes in process `syz.4.184'. [ 191.198304][ T6910] loop4: detected capacity change from 0 to 128 [ 191.432141][ T6910] syz.4.184: attempt to access beyond end of device [ 191.432141][ T6910] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 191.446957][ T6910] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 192.183899][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.475384][ T5877] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 192.725701][ T5877] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 192.735813][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.884983][ T6956] loop1: detected capacity change from 0 to 512 [ 192.908846][ T6956] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 192.918609][ T6956] EXT4-fs (loop1): orphan cleanup on readonly fs [ 192.931489][ T6956] EXT4-fs warning (device loop1): ext4_enable_quotas:7193: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 192.949860][ T6121] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 192.949918][ T5874] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 192.976335][ T6956] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 192.999463][ T6956] EXT4-fs error (device loop1): __ext4_iget:5117: inode #16: block 127754: comm syz.1.196: invalid block [ 193.023949][ T6956] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.196: couldn't read orphan inode 16 (err -117) [ 193.046561][ T6956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 193.208336][ T6121] usb 6-1: Using ep0 maxpacket: 16 [ 193.222681][ T5874] usb 3-1: Using ep0 maxpacket: 8 [ 193.250494][ T6961] netlink: 32 bytes leftover after parsing attributes in process `syz.1.196'. [ 193.273563][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 193.313000][ T5874] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 193.360356][ T5874] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 193.456637][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.611994][ T5874] usb 3-1: config 0 descriptor?? [ 194.161710][ T5874] lenovo 0003:17EF:6047.0003: unknown main item tag 0x0 [ 194.181405][ T5874] lenovo 0003:17EF:6047.0003: unknown main item tag 0x0 [ 194.213121][ T5874] lenovo 0003:17EF:6047.0003: unknown main item tag 0x0 [ 194.240638][ T5874] lenovo 0003:17EF:6047.0003: unknown main item tag 0x0 [ 194.265043][ T5874] lenovo 0003:17EF:6047.0003: unknown main item tag 0x0 [ 194.287936][ T5874] lenovo 0003:17EF:6047.0003: unknown main item tag 0x0 [ 194.306290][ T5874] lenovo 0003:17EF:6047.0003: unknown main item tag 0x0 [ 194.319682][ T5874] lenovo 0003:17EF:6047.0003: unknown main item tag 0x0 [ 194.368547][ T5874] lenovo 0003:17EF:6047.0003: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 194.427042][ T5874] lenovo 0003:17EF:6047.0003: Failed to switch F7/9/11 mode: -71 [ 194.477310][ T5874] lenovo 0003:17EF:6047.0003: Failed to switch middle button: -71 [ 194.518254][ T5874] lenovo 0003:17EF:6047.0003: Fn-lock setting failed: -71 [ 194.565546][ T5874] lenovo 0003:17EF:6047.0003: Sensitivity setting failed: -71 [ 194.621272][ T5874] usb 3-1: USB disconnect, device number 5 [ 194.751335][ T6121] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.765018][ T6121] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 194.781944][ T6121] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 194.803024][ T6121] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.811115][ T6121] usb 6-1: Product: syz [ 194.828743][ T6121] usb 6-1: Manufacturer: syz [ 194.833425][ T6121] usb 6-1: SerialNumber: syz [ 195.212028][ T6980] netlink: 16 bytes leftover after parsing attributes in process `syz.2.197'. [ 195.347732][ T6982] loop2: detected capacity change from 0 to 128 [ 195.646089][ T5877] usb 5-1: Cannot set autoneg [ 195.652973][ T5877] MOSCHIP usb-ethernet driver: probe of 5-1:7.0 failed with error -71 [ 195.664123][ T6121] usb 6-1: 0:2 : does not exist [ 195.676571][ T6121] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 195.695489][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.706483][ T5877] usb 5-1: USB disconnect, device number 2 [ 195.746887][ T6982] syz.2.197: attempt to access beyond end of device [ 195.746887][ T6982] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 195.776095][ T6121] usb 6-1: USB disconnect, device number 2 [ 195.819584][ T6982] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 195.899931][ T5791] udevd[5791]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 195.936311][ T6990] loop4: detected capacity change from 0 to 512 [ 195.957816][ T6990] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 196.035181][ T6990] EXT4-fs (loop4): orphan cleanup on readonly fs [ 196.080432][ T6990] EXT4-fs warning (device loop4): ext4_enable_quotas:7193: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 196.132439][ T6990] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 196.150917][ T6990] EXT4-fs error (device loop4): __ext4_iget:5117: inode #16: block 127754: comm syz.4.199: invalid block [ 196.215034][ T6990] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.199: couldn't read orphan inode 16 (err -117) [ 196.268508][ T6990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 196.288440][ T6995] UHID_CREATE from different security context by process 166 (syz.1.201), this is not allowed. [ 197.582107][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.588662][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.852559][ T7024] loop5: detected capacity change from 0 to 512 [ 197.892729][ T7024] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 197.940043][ T7024] EXT4-fs (loop5): orphan cleanup on readonly fs [ 197.969993][ T7024] EXT4-fs warning (device loop5): ext4_enable_quotas:7193: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 198.034501][ T7024] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 198.045151][ T7024] EXT4-fs error (device loop5): __ext4_iget:5117: inode #16: block 127754: comm syz.5.207: invalid block [ 198.067460][ T7024] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.207: couldn't read orphan inode 16 (err -117) [ 198.083551][ T7024] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 198.647056][ T7033] netlink: 32 bytes leftover after parsing attributes in process `syz.5.207'. [ 198.742923][ T6069] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.142826][ T7041] netlink: 16 bytes leftover after parsing attributes in process `syz.2.211'. [ 199.266399][ T5874] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 199.343559][ T7048] loop2: detected capacity change from 0 to 128 [ 199.482090][ T5874] usb 2-1: Using ep0 maxpacket: 16 [ 199.512802][ T5874] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.567213][ T5874] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 199.617301][ T5874] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 199.667591][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.706830][ T5874] usb 2-1: Product: syz [ 199.725360][ T5874] usb 2-1: Manufacturer: syz [ 199.747537][ T5874] usb 2-1: SerialNumber: syz [ 199.783906][ T7048] syz.2.211: attempt to access beyond end of device [ 199.783906][ T7048] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 199.833800][ T7048] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 200.045372][ T5874] usb 2-1: 0:2 : does not exist [ 200.118913][ T5874] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 200.217167][ T5874] usb 2-1: USB disconnect, device number 2 [ 200.442305][ T5791] udevd[5791]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.908865][ T6332] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.116336][ T28] audit: type=1800 audit(1793788176.911:9): pid=7079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.220" name="file2" dev="sda1" ino=2047 res=0 errno=0 [ 201.642634][ T7082] loop5: detected capacity change from 0 to 512 [ 201.906793][ T7082] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 202.131881][ T7082] EXT4-fs (loop5): orphan cleanup on readonly fs [ 202.174728][ T7082] EXT4-fs warning (device loop5): ext4_enable_quotas:7193: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 202.256234][ T7090] netlink: 16 bytes leftover after parsing attributes in process `syz.2.221'. [ 202.273619][ T7082] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 202.306046][ T7082] EXT4-fs error (device loop5): __ext4_iget:5117: inode #16: block 127754: comm syz.5.218: invalid block [ 202.331957][ T7082] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.218: couldn't read orphan inode 16 (err -117) [ 202.348869][ T7082] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 202.408089][ T7090] loop2: detected capacity change from 0 to 128 [ 204.733822][ T5881] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 204.951535][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 204.967746][ T5881] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.005206][ T5881] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 205.048002][ T5881] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 205.076916][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.111651][ T5881] usb 2-1: Product: syz [ 205.140135][ T5881] usb 2-1: Manufacturer: syz [ 205.149823][ T7126] loop2: detected capacity change from 0 to 512 [ 205.159952][ T5881] usb 2-1: SerialNumber: syz [ 205.219466][ T7126] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 205.261533][ T7126] EXT4-fs (loop2): orphan cleanup on readonly fs [ 205.301316][ T7126] EXT4-fs warning (device loop2): ext4_enable_quotas:7193: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 205.365922][ T7126] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 205.384129][ T7126] EXT4-fs error (device loop2): __ext4_iget:5117: inode #16: block 127754: comm syz.2.227: invalid block [ 205.441146][ T5881] usb 2-1: 0:2 : does not exist [ 205.448366][ T7126] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.227: couldn't read orphan inode 16 (err -117) [ 205.479531][ T5881] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 205.502912][ T7126] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 205.583403][ T5881] usb 2-1: USB disconnect, device number 3 [ 205.738512][ T7136] netlink: 32 bytes leftover after parsing attributes in process `syz.2.227'. [ 205.770715][ T6332] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.096168][ T5791] udevd[5791]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 207.168592][ T7156] loop5: detected capacity change from 0 to 512 [ 207.177101][ T7156] EXT4-fs (loop5): Cannot use DAX on a filesystem that may contain inline data [ 207.575761][ T7162] loop4: detected capacity change from 0 to 512 [ 207.618142][ T7162] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 207.716544][ T7162] EXT4-fs (loop4): 1 truncate cleaned up [ 207.755019][ T7162] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.046728][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.084828][ T7172] loop5: detected capacity change from 0 to 16 [ 208.555642][ T7162] can: request_module (can-proto-0) failed. [ 210.135390][ T7181] loop2: detected capacity change from 0 to 512 [ 210.423633][ T5800] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 210.496551][ T7181] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.236: iget: bad i_size value: 38620345925642 [ 210.514273][ T7181] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.236: couldn't read orphan inode 15 (err -117) [ 210.573244][ T7181] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.644328][ T28] audit: type=1800 audit(1793788185.672:10): pid=7181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.236" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 210.668678][ T6069] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.037218][ T5794] Bluetooth: hci0: command 0x0406 tx timeout [ 211.043430][ T5794] Bluetooth: hci2: command 0x0406 tx timeout [ 213.085646][ T7187] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 213.145496][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.953704][ T5881] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 213.995757][ T7225] loop2: detected capacity change from 0 to 512 [ 214.131041][ T7225] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.245: iget: bad i_size value: 38620345925642 [ 214.145830][ T7225] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.245: couldn't read orphan inode 15 (err -117) [ 214.172649][ T7225] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.232337][ T28] audit: type=1800 audit(1793788188.996:11): pid=7225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.245" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 214.457881][ T5881] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 214.843989][ T5881] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 214.884592][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 214.892669][ T5881] usb 2-1: SerialNumber: syz [ 215.016957][ T7230] loop5: detected capacity change from 0 to 512 [ 215.087223][ T7230] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 215.173231][ T7230] EXT4-fs (loop5): 1 truncate cleaned up [ 215.237436][ T7230] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.428317][ T5796] Bluetooth: hci4: command 0x1003 tx timeout [ 215.436921][ T5803] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 215.473281][ T7230] can: request_module (can-proto-0) failed. [ 215.523364][ T5803] Bluetooth: hci0: command tx timeout [ 215.900910][ T5881] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 216.197140][ T5874] usb 2-1: USB disconnect, device number 4 [ 216.204595][ T5874] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 216.478383][ T6332] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.514356][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.869380][ T7292] loop4: detected capacity change from 0 to 512 [ 218.910567][ T7292] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 218.998469][ T7292] EXT4-fs (loop4): 1 truncate cleaned up [ 219.035122][ T7292] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.060868][ T7297] FAULT_INJECTION: forcing a failure. [ 219.060868][ T7297] name failslab, interval 1, probability 0, space 0, times 0 [ 219.092037][ T7297] CPU: 1 PID: 7297 Comm: syz.5.257 Not tainted syzkaller #0 [ 219.099399][ T7297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 219.109504][ T7297] Call Trace: [ 219.112849][ T7297] [ 219.115830][ T7297] dump_stack_lvl+0x18c/0x250 [ 219.120589][ T7297] ? show_regs_print_info+0x20/0x20 [ 219.125849][ T7297] ? load_image+0x420/0x420 [ 219.130407][ T7297] ? __might_sleep+0xe0/0xe0 [ 219.135055][ T7297] ? __lock_acquire+0x7eb0/0x7eb0 [ 219.140136][ T7297] should_fail_ex+0x394/0x4c0 [ 219.144876][ T7297] should_failslab+0x9/0x20 [ 219.149424][ T7297] slab_pre_alloc_hook+0x59/0x300 [ 219.154498][ T7297] ? sk_prot_alloc+0xe7/0x210 [ 219.159230][ T7297] ? sk_prot_alloc+0xe7/0x210 [ 219.163985][ T7297] __kmem_cache_alloc_node+0x53/0x260 [ 219.169438][ T7297] ? sk_prot_alloc+0xe7/0x210 [ 219.174194][ T7297] __kmalloc+0xa7/0x240 [ 219.178420][ T7297] sk_prot_alloc+0xe7/0x210 [ 219.182976][ T7297] ? sk_alloc+0x24/0x350 [ 219.187291][ T7297] sk_alloc+0x3a/0x350 [ 219.191411][ T7297] ? can_get_proto+0x234/0x280 [ 219.196230][ T7297] can_create+0x1d2/0x4e0 [ 219.200613][ T7297] __sock_create+0x49e/0x940 [ 219.205276][ T7297] __sys_socket+0xd7/0x1b0 [ 219.209754][ T7297] __x64_sys_socket+0x7a/0x90 [ 219.214523][ T7297] do_syscall_64+0x55/0xb0 [ 219.218990][ T7297] ? clear_bhb_loop+0x40/0x90 [ 219.223738][ T7297] ? clear_bhb_loop+0x40/0x90 [ 219.228478][ T7297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 219.234424][ T7297] RIP: 0033:0x7f2e5019fb19 [ 219.238902][ T7297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.258553][ T7297] RSP: 002b:00007f2e510df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 219.267043][ T7297] RAX: ffffffffffffffda RBX: 00007f2e50425fa0 RCX: 00007f2e5019fb19 [ 219.275060][ T7297] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001d [ 219.283097][ T7297] RBP: 00007f2e50237b70 R08: 0000000000000000 R09: 0000000000000000 [ 219.291111][ T7297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.299123][ T7297] R13: 00007f2e50426038 R14: 00007f2e50425fa0 R15: 00007ffdbd12a338 [ 219.307155][ T7297] [ 219.454895][ T7292] can: request_module (can-proto-0) failed. [ 219.569788][ T6069] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.035082][ T7316] loop5: detected capacity change from 0 to 512 [ 220.056797][ T7316] EXT4-fs (loop5): Cannot use DAX on a filesystem that may contain inline data [ 220.365373][ T6121] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 220.423542][ T7327] loop5: detected capacity change from 0 to 16 [ 220.488538][ T7327] x_tables: duplicate underflow at hook 3 [ 220.496021][ T5791] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 220.571290][ T6121] usb 3-1: Using ep0 maxpacket: 16 [ 220.595498][ T6121] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.631238][ T7324] loop1: detected capacity change from 0 to 256 [ 220.652154][ T6121] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 220.674707][ T7324] exfat: Deprecated parameter 'utf8' [ 220.727320][ T7324] exfat: Deprecated parameter 'utf8' [ 220.740459][ T6121] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 220.765490][ T7324] exfat: Deprecated parameter 'utf8' [ 220.790682][ T6121] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.851538][ T7324] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 220.868259][ T6121] usb 3-1: Product: syz [ 220.894433][ T6121] usb 3-1: Manufacturer: syz [ 220.954793][ T6121] usb 3-1: SerialNumber: syz [ 221.317120][ T6121] usb 3-1: 0:2 : does not exist [ 221.358370][ T6121] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 221.440033][ T6121] usb 3-1: USB disconnect, device number 6 [ 221.564886][ T5791] udevd[5791]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.112106][ T7345] loop2: detected capacity change from 0 to 512 [ 222.176702][ T7345] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 222.213029][ T7345] EXT4-fs (loop2): orphan cleanup on readonly fs [ 222.241810][ T7345] EXT4-fs warning (device loop2): ext4_enable_quotas:7193: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 222.319948][ T7345] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 222.352521][ T7345] EXT4-fs error (device loop2): __ext4_iget:5117: inode #16: block 127754: comm syz.2.264: invalid block [ 222.386429][ T7345] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.264: couldn't read orphan inode 16 (err -117) [ 222.534241][ T7345] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 222.587004][ T7353] loop1: detected capacity change from 0 to 512 [ 222.659591][ T7353] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 224.027323][ T7353] EXT4-fs (loop1): 1 truncate cleaned up [ 224.047028][ T7353] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.133160][ T7353] can: request_module (can-proto-0) failed. [ 226.245689][ T7370] FAULT_INJECTION: forcing a failure. [ 226.245689][ T7370] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 226.264671][ T7370] CPU: 0 PID: 7370 Comm: syz.4.267 Not tainted syzkaller #0 [ 226.272031][ T7370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 226.282126][ T7370] Call Trace: [ 226.285441][ T7370] [ 226.288436][ T7370] dump_stack_lvl+0x18c/0x250 [ 226.293197][ T7370] ? show_regs_print_info+0x20/0x20 [ 226.298477][ T7370] ? load_image+0x420/0x420 [ 226.303032][ T7370] ? __lock_acquire+0x7eb0/0x7eb0 [ 226.308102][ T7370] ? mark_lock+0x94/0x320 [ 226.312477][ T7370] should_fail_ex+0x394/0x4c0 [ 226.317225][ T7370] prepare_alloc_pages+0x1e1/0x5b0 [ 226.322382][ T7370] __alloc_pages+0x134/0x460 [ 226.327025][ T7370] ? zone_statistics+0x170/0x170 [ 226.332049][ T7370] __folio_alloc+0x10/0x20 [ 226.336500][ T7370] vma_alloc_folio+0x474/0x8f0 [ 226.341326][ T7370] ? mpol_shared_policy_lookup+0x14b/0x1e0 [ 226.347176][ T7370] shmem_alloc_folio+0x1a9/0x2a0 [ 226.352161][ T7370] ? folio_put+0xd0/0xd0 [ 226.356468][ T7370] ? __vm_enough_memory+0x11a/0x370 [ 226.361740][ T7370] ? shmem_inode_acct_block+0x35e/0x460 [ 226.367356][ T7370] shmem_alloc_and_acct_folio+0x1cb/0x6c0 [ 226.373129][ T7370] ? put_swap_device+0x230/0x230 [ 226.378116][ T7370] ? filemap_get_entry+0xce/0x3f0 [ 226.383184][ T7370] ? xas_load+0x11d/0x140 [ 226.387569][ T7370] ? filemap_get_entry+0xce/0x3f0 [ 226.392641][ T7370] ? filemap_get_entry+0xce/0x3f0 [ 226.397715][ T7370] ? filemap_get_entry+0x375/0x3f0 [ 226.402964][ T7370] ? shmem_get_folio_gfp+0x14ae/0x2b40 [ 226.408493][ T7370] ? page_cache_prev_miss+0x390/0x390 [ 226.413928][ T7370] ? do_raw_spin_lock+0x11f/0x2b0 [ 226.419028][ T7370] shmem_get_folio_gfp+0xe1d/0x2b40 [ 226.424309][ T7370] shmem_fallocate+0x8bc/0x1020 [ 226.429239][ T7370] ? shmem_file_splice_read+0xc70/0xc70 [ 226.434939][ T7370] ? rcu_read_lock_any_held+0xb4/0x140 [ 226.440449][ T7370] ? rcu_read_lock_bh_held+0x100/0x100 [ 226.445958][ T7370] ? common_file_perm+0x198/0x1f0 [ 226.451033][ T7370] vfs_fallocate+0x585/0x6f0 [ 226.455698][ T7370] __x64_sys_fallocate+0xc1/0x110 [ 226.460771][ T7370] do_syscall_64+0x55/0xb0 [ 226.465244][ T7370] ? clear_bhb_loop+0x40/0x90 [ 226.469971][ T7370] ? clear_bhb_loop+0x40/0x90 [ 226.474702][ T7370] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 226.480644][ T7370] RIP: 0033:0x7f286139fb19 [ 226.485182][ T7370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.504878][ T7370] RSP: 002b:00007f2862290028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 226.513336][ T7370] RAX: ffffffffffffffda RBX: 00007f2861625fa0 RCX: 00007f286139fb19 [ 226.521380][ T7370] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000003 [ 226.529413][ T7370] RBP: 00007f2861437b70 R08: 0000000000000000 R09: 0000000000000000 [ 226.537441][ T7370] R10: 000000000008ffff R11: 0000000000000246 R12: 0000000000000000 [ 226.545445][ T7370] R13: 00007f2861626038 R14: 00007f2861625fa0 R15: 00007ffe11ec39c8 [ 226.553475][ T7370] [ 226.975529][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.469486][ T7380] FAULT_INJECTION: forcing a failure. [ 227.469486][ T7380] name fail_futex, interval 1, probability 0, space 0, times 1 [ 227.491428][ T7380] CPU: 1 PID: 7380 Comm: syz.2.268 Not tainted syzkaller #0 [ 227.498791][ T7380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 227.508900][ T7380] Call Trace: [ 227.512243][ T7380] [ 227.515226][ T7380] dump_stack_lvl+0x18c/0x250 [ 227.519963][ T7380] ? show_regs_print_info+0x20/0x20 [ 227.525222][ T7380] ? load_image+0x420/0x420 [ 227.529808][ T7380] should_fail_ex+0x394/0x4c0 [ 227.534522][ T7380] get_futex_key+0x134/0xf40 [ 227.539144][ T7380] ? __lock_acquire+0x7eb0/0x7eb0 [ 227.544201][ T7380] ? __might_fault+0xaa/0x120 [ 227.548910][ T7380] ? futex_setup_timer+0xc0/0xc0 [ 227.553878][ T7380] ? __might_fault+0xc6/0x120 [ 227.558587][ T7380] futex_wake+0x127/0x4f0 [ 227.562956][ T7380] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 227.568973][ T7380] ? futex_wake_mark+0x150/0x150 [ 227.573945][ T7380] ? __local_bh_enable_ip+0x13a/0x1c0 [ 227.579342][ T7380] ? lockdep_hardirqs_on+0x98/0x150 [ 227.584564][ T7380] ? __set_current_blocked+0x8f/0x240 [ 227.589972][ T7380] ? __local_bh_enable_ip+0x13a/0x1c0 [ 227.595383][ T7380] do_futex+0x35d/0x3e0 [ 227.599571][ T7380] ? signal_setup_done+0x232/0x310 [ 227.604729][ T7380] ? __ia32_sys_get_robust_list+0x110/0x110 [ 227.610653][ T7380] ? arch_do_signal_or_restart+0x4bd/0x7b0 [ 227.616509][ T7380] __se_sys_futex+0x3a9/0x440 [ 227.621218][ T7380] ? __x64_sys_futex+0xf0/0xf0 [ 227.626011][ T7380] ? lock_chain_count+0x20/0x20 [ 227.630901][ T7380] ? __x64_sys_futex+0x21/0xf0 [ 227.635705][ T7380] do_syscall_64+0x55/0xb0 [ 227.640209][ T7380] ? clear_bhb_loop+0x40/0x90 [ 227.644923][ T7380] ? clear_bhb_loop+0x40/0x90 [ 227.649676][ T7380] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 227.655610][ T7380] RIP: 0033:0x7f31ef39fb19 [ 227.660050][ T7380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.679728][ T7380] RSP: 002b:00007f31f02e30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 227.688265][ T7380] RAX: ffffffffffffffda RBX: 00007f31ef625fa8 RCX: 00007f31ef39fb19 [ 227.696264][ T7380] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f31ef625fac [ 227.704255][ T7380] RBP: 00007f31ef625fa0 R08: 00000000006b6d50 R09: 0000000000000000 [ 227.712250][ T7380] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 227.720249][ T7380] R13: 00007f31ef626038 R14: 00007fff8c448380 R15: 00007fff8c448468 [ 227.728266][ T7380] [ 227.814971][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.229894][ T7399] loop5: detected capacity change from 0 to 512 [ 228.238866][ T7399] EXT4-fs (loop5): Cannot use DAX on a filesystem that may contain inline data [ 228.544822][ T5902] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 228.679623][ T7405] loop5: detected capacity change from 0 to 16 [ 228.729923][ T7405] x_tables: duplicate underflow at hook 3 [ 229.055470][ T7408] loop2: detected capacity change from 0 to 512 [ 229.122864][ T7408] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 229.186458][ T7408] EXT4-fs (loop2): orphan cleanup on readonly fs [ 229.516662][ T7408] EXT4-fs warning (device loop2): ext4_enable_quotas:7193: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 229.552048][ T5902] usb 5-1: config 127 has an invalid interface number: 57 but max is 0 [ 230.470106][ T7415] netlink: 260 bytes leftover after parsing attributes in process `syz.1.277'. [ 230.536358][ T5902] usb 5-1: config 127 has no interface number 0 [ 230.536661][ T7408] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 230.542698][ T5902] usb 5-1: too many endpoints for config 127 interface 57 altsetting 0: 232, using maximum allowed: 30 [ 230.553513][ T7408] EXT4-fs error (device loop2): __ext4_iget:5117: inode #16: block 127754: comm syz.2.276: invalid block [ 230.572751][ T7408] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.276: couldn't read orphan inode 16 (err -117) [ 230.586462][ T7408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 231.651412][ T5902] usb 5-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 255, setting to 64 [ 231.665393][ T7421] loop5: detected capacity change from 0 to 512 [ 231.673829][ T5902] usb 5-1: config 127 interface 57 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 232 [ 232.681287][ T5902] usb 5-1: string descriptor 0 read error: -71 [ 232.695054][ T5902] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 232.713575][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.730588][ T5902] usb 5-1: can't set config #127, error -71 [ 232.746296][ T5902] usb 5-1: USB disconnect, device number 3 [ 232.756069][ T7421] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 233.413005][ T7421] EXT4-fs (loop5): 1 truncate cleaned up [ 233.464830][ T7421] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.568681][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.688630][ T7432] can: request_module (can-proto-0) failed. [ 234.887805][ T6332] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.994723][ T7443] mmap: syz.2.281 (7443) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 235.616783][ T8] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 236.993707][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 237.001542][ T8] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 237.013563][ T8] usb 6-1: config 0 has no interface number 0 [ 237.023964][ T8] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 237.046304][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.054362][ T8] usb 6-1: Product: syz [ 237.068373][ T8] usb 6-1: Manufacturer: syz [ 237.079052][ T8] usb 6-1: SerialNumber: syz [ 238.013190][ T8] usb 6-1: config 0 descriptor?? [ 238.035907][ T8] smsc95xx v2.0.0 [ 238.409972][ T7485] loop2: detected capacity change from 0 to 512 [ 238.414907][ T7484] loop4: detected capacity change from 0 to 512 [ 238.444323][ T7484] EXT4-fs (loop4): Cannot use DAX on a filesystem that may contain inline data [ 238.496180][ T7485] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 238.653376][ T7485] EXT4-fs (loop2): 1 truncate cleaned up [ 238.693394][ T7485] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.739384][ T7484] loop4: detected capacity change from 0 to 16 [ 238.793173][ T7484] x_tables: duplicate underflow at hook 3 [ 238.855699][ T5791] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 238.921825][ T7485] can: request_module (can-proto-0) failed. [ 239.019341][ T7492] loop1: detected capacity change from 0 to 512 [ 239.060252][ T7492] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 239.080749][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.100086][ T7492] EXT4-fs (loop1): orphan cleanup on readonly fs [ 239.124250][ T8] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 239.144442][ T8] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 239.154438][ T8] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 239.165937][ T8] smsc95xx: probe of 6-1:0.67 failed with error -71 [ 239.180729][ T8] usb 6-1: USB disconnect, device number 3 [ 239.205175][ T7492] EXT4-fs warning (device loop1): ext4_enable_quotas:7193: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 239.288980][ T7492] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 239.316390][ T7492] EXT4-fs error (device loop1): __ext4_iget:5117: inode #16: block 127754: comm syz.1.291: invalid block [ 239.428558][ T7492] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.291: couldn't read orphan inode 16 (err -117) [ 239.522200][ T7492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 243.146492][ T8] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 243.191635][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.361987][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 243.373018][ T8] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.388771][ T8] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.413809][ T8] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 243.423255][ T8] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 243.436704][ T8] usb 6-1: Product: syz [ 243.441227][ T8] usb 6-1: Manufacturer: syz [ 243.457793][ T8] hub 6-1:4.0: USB hub found [ 243.687656][ T8] hub 6-1:4.0: config failed, can't read hub descriptor (err -22) [ 243.788837][ T8] usb 6-1: USB disconnect, device number 4 [ 244.628789][ T5796] Bluetooth: hci1: command 0x0406 tx timeout [ 245.319463][ T7521] loop4: detected capacity change from 0 to 512 [ 245.368501][ T7521] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 245.420935][ T7527] loop5: detected capacity change from 0 to 512 [ 245.481078][ T7527] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 245.527350][ T7527] EXT4-fs (loop5): orphan cleanup on readonly fs [ 245.534507][ T7521] EXT4-fs (loop4): 1 truncate cleaned up [ 245.541985][ T7521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.565503][ T7527] EXT4-fs warning (device loop5): ext4_enable_quotas:7193: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 245.629580][ T7527] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 245.663607][ T7521] can: request_module (can-proto-0) failed. [ 245.663877][ T7527] EXT4-fs error (device loop5): __ext4_iget:5117: inode #16: block 127754: comm syz.5.303: invalid block [ 245.707005][ T7527] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.303: couldn't read orphan inode 16 (err -117) [ 245.741556][ T7527] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 245.771025][ T6069] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.966335][ T7543] netlink: 32 bytes leftover after parsing attributes in process `syz.5.303'. [ 248.195778][ T6332] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.683244][ T8] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 248.901443][ T8] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 248.921525][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.963955][ T8] usb 3-1: config 1 has no interface number 0 [ 248.987351][ T8] usb 3-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 249.041752][ T8] usb 3-1: config 1 interface 105 has no altsetting 0 [ 249.095018][ T8] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 249.127844][ T8] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 249.163931][ T8] usb 3-1: Product: syz [ 249.185897][ T8] usb 3-1: Manufacturer: syz [ 249.199713][ T8] usb 3-1: SerialNumber: syz [ 249.542139][ T8] aqc111: probe of 3-1:1.105 failed with error -22 [ 249.588083][ T8] usb 3-1: USB disconnect, device number 7 [ 250.331718][ T7560] loop1: detected capacity change from 0 to 512 [ 250.377717][ T7560] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.310: iget: bad i_size value: 38620345925642 [ 250.391871][ T7560] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.310: couldn't read orphan inode 15 (err -117) [ 250.406722][ T7560] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.501809][ T28] audit: type=1800 audit(1793788222.434:12): pid=7560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.310" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 250.531084][ T7571] loop5: detected capacity change from 0 to 512 [ 250.582461][ T7571] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 250.593779][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.696962][ T7571] EXT4-fs (loop5): 1 truncate cleaned up [ 250.712806][ T7571] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.886778][ T7571] can: request_module (can-proto-0) failed. [ 251.038187][ T6332] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.188782][ T7592] loop5: detected capacity change from 0 to 512 [ 251.227922][ T7592] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 251.240575][ T7592] EXT4-fs (loop5): orphan cleanup on readonly fs [ 251.250740][ T7592] EXT4-fs warning (device loop5): ext4_enable_quotas:7193: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 251.275945][ T7592] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 251.312132][ T7592] EXT4-fs error (device loop5): __ext4_iget:5117: inode #16: block 127754: comm syz.5.320: invalid block [ 251.353735][ T7592] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.320: couldn't read orphan inode 16 (err -117) [ 251.371752][ T7592] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 252.101420][ T7601] netlink: 32 bytes leftover after parsing attributes in process `syz.5.320'. [ 252.579492][ T5902] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 252.702508][ T7608] loop2: detected capacity change from 0 to 512 [ 252.736702][ T7608] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.326: iget: bad i_size value: 38620345925642 [ 252.750692][ T7608] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.326: couldn't read orphan inode 15 (err -117) [ 252.771418][ T7608] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.819056][ T5881] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 252.827046][ T5902] usb 2-1: config 127 has an invalid interface number: 57 but max is 0 [ 252.836137][ T28] audit: type=1800 audit(1793788224.613:13): pid=7608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.326" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 252.864108][ T5902] usb 2-1: config 127 has no interface number 0 [ 252.898518][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.907876][ T5902] usb 2-1: too many endpoints for config 127 interface 57 altsetting 0: 232, using maximum allowed: 30 [ 252.952984][ T5902] usb 2-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 255, setting to 64 [ 252.986824][ T5902] usb 2-1: config 127 interface 57 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 232 [ 253.040760][ T5902] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 253.055475][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.065186][ T5902] usb 2-1: Product: syz [ 253.069908][ T5881] usb 5-1: Using ep0 maxpacket: 16 [ 253.080531][ T5902] usb 2-1: Manufacturer: syz [ 253.085521][ T5902] usb 2-1: SerialNumber: syz [ 253.092054][ T5881] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 253.106013][ T5881] usb 5-1: config 0 has no interface number 0 [ 253.116448][ T5881] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 253.138512][ T5881] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 253.158576][ T7596] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 253.177056][ T5881] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 253.192354][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.204825][ T5881] usb 5-1: Product: syz [ 253.214586][ T5881] usb 5-1: Manufacturer: syz [ 253.223896][ T5881] usb 5-1: SerialNumber: syz [ 253.261373][ T5881] usb 5-1: config 0 descriptor?? [ 253.278571][ T7604] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 253.288770][ T7604] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 253.578462][ T7604] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 253.585878][ T7604] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 253.656220][ T7613] loop2: detected capacity change from 0 to 512 [ 253.674182][ T7596] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 253.699040][ T7613] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 253.757585][ T7613] EXT4-fs (loop2): 1 truncate cleaned up [ 253.795950][ T7613] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.864763][ T5881] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 253.920741][ T5902] asix 2-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 253.957108][ T5902] asix: probe of 2-1:127.57 failed with error -71 [ 254.016979][ T5902] usb 2-1: USB disconnect, device number 5 [ 254.099536][ T7613] can: request_module (can-proto-0) failed. [ 254.143099][ T6332] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.148200][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.373776][ T7621] device-mapper: table: 248:2: crypt: Device lookup failed (-ENOENT) [ 254.382367][ T7621] device-mapper: ioctl: error adding target to table [ 255.035519][ T7641] loop5: detected capacity change from 0 to 512 [ 255.067197][ T7641] EXT4-fs error (device loop5): ext4_orphan_get:1408: inode #15: comm syz.5.336: iget: bad i_size value: 38620345925642 [ 255.120763][ T7641] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.336: couldn't read orphan inode 15 (err -117) [ 255.266710][ T7641] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.519083][ T28] audit: type=1800 audit(1793788226.949:14): pid=7641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.336" name="file1" dev="loop5" ino=18 res=0 errno=0 [ 255.571159][ T5881] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 255.824374][ T5881] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 255.870590][ T6332] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.935827][ T5881] asix: probe of 5-1:0.34 failed with error -71 [ 256.049411][ T5881] usb 5-1: USB disconnect, device number 4 [ 256.192740][ T7649] loop5: detected capacity change from 0 to 512 [ 256.228055][ T7649] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 256.321638][ T7649] EXT4-fs (loop5): 1 truncate cleaned up [ 256.346851][ T7649] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.509780][ T7649] can: request_module (can-proto-0) failed. [ 256.613530][ T6332] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.755950][ T7666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.343'. [ 257.383498][ T7674] loop4: detected capacity change from 0 to 128 [ 258.030698][ T7678] loop5: detected capacity change from 0 to 512 [ 258.090663][ T7678] EXT4-fs error (device loop5): ext4_orphan_get:1408: inode #15: comm syz.5.347: iget: bad i_size value: 38620345925642 [ 258.117362][ T7678] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.347: couldn't read orphan inode 15 (err -117) [ 258.136655][ T7678] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.177656][ T28] audit: type=1800 audit(1793788229.571:15): pid=7678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.347" name="file1" dev="loop5" ino=18 res=0 errno=0 [ 258.253162][ T6332] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.196227][ T7710] syz.2.354 (pid 7710) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 262.238220][ T7710] loop0: detected capacity change from 0 to 4096 [ 262.263128][ T6121] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 262.307556][ T7710] loop0: [ 262.381715][ T7715] loop4: detected capacity change from 0 to 128 [ 262.486034][ T6121] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 262.531090][ T6121] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 262.580634][ T6121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 262.625508][ T6121] usb 2-1: SerialNumber: syz [ 262.843189][ T7715] syz.4.356: attempt to access beyond end of device [ 262.843189][ T7715] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 262.869672][ T7715] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 263.354552][ T6121] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 263.780232][ T5902] usb 2-1: USB disconnect, device number 6 [ 263.983367][ T5902] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 264.131810][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 264.140643][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.012691][ T7731] loop1: detected capacity change from 0 to 1024 [ 265.150989][ T5791] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 265.408017][ T7731] loop1: detected capacity change from 0 to 256 [ 265.517117][ T7731] FAT-fs (loop1): IO charset macturname=winnt not found [ 266.938269][ T7751] loop4: detected capacity change from 0 to 128 [ 267.044687][ T7755] loop5: detected capacity change from 0 to 1024 [ 267.072120][ T7755] EXT4-fs: Ignoring removed bh option [ 267.092028][ T7755] EXT4-fs (loop5): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 267.189157][ T7755] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.289730][ T7751] syz.4.368: attempt to access beyond end of device [ 267.289730][ T7751] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 267.309728][ T7751] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 269.519705][ T7765] loop1: detected capacity change from 0 to 512 [ 269.558840][ T7765] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 269.607273][ T7765] EXT4-fs (loop1): orphan cleanup on readonly fs [ 269.685277][ T7765] EXT4-fs warning (device loop1): ext4_enable_quotas:7193: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 269.771073][ T7765] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 269.829871][ T7765] EXT4-fs error (device loop1): __ext4_iget:5117: inode #16: block 127754: comm syz.1.372: invalid block [ 269.862318][ T7765] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.372: couldn't read orphan inode 16 (err -117) [ 270.002803][ T7765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 270.253421][ T7776] netlink: 32 bytes leftover after parsing attributes in process `syz.1.372'. [ 270.662152][ T28] audit: type=1804 audit(1793788241.120:16): pid=5787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/104/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 270.774910][ T6332] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.660884][ T5153] udevd[5153]: could not touch /run/udev/queue: No such file or directory [ 271.754650][ T7782] syz.5.375(7782): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 272.485015][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.000231][ T7806] loop5: detected capacity change from 0 to 128 [ 275.015630][ T7811] random: crng reseeded on system resumption [ 275.775301][ T7821] loop1: detected capacity change from 0 to 512 [ 275.859055][ T7821] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 275.867402][ T7821] EXT4-fs (loop1): orphan cleanup on readonly fs [ 275.924769][ T7821] EXT4-fs warning (device loop1): ext4_enable_quotas:7193: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 275.990659][ T7821] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 276.024571][ T7821] EXT4-fs error (device loop1): __ext4_iget:5117: inode #16: block 127754: comm syz.1.387: invalid block [ 276.073820][ T7821] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.387: couldn't read orphan inode 16 (err -117) [ 276.124325][ T7821] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 276.376035][ T7824] netlink: 32 bytes leftover after parsing attributes in process `syz.1.387'. [ 277.478376][ T5803] Bluetooth: hci3: command 0x0406 tx timeout [ 278.573358][ T7831] loop4: detected capacity change from 0 to 512 [ 278.595596][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.692242][ T7831] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #15: comm syz.4.388: iget: bad i_size value: 38620345925642 [ 278.708635][ T7831] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.388: couldn't read orphan inode 15 (err -117) [ 278.728794][ T7831] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.794542][ T28] audit: type=1800 audit(1793788248.598:17): pid=7831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.388" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 280.203457][ T5803] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 280.213283][ T5803] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 280.221123][ T5803] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 280.230462][ T5803] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 280.239884][ T5803] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 280.247669][ T5803] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 280.428027][ T8] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 280.919812][ T2971] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.084654][ T6069] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.099768][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 281.112021][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.132248][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.153705][ T8] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 281.169481][ T8] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 281.190328][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.233036][ T8] usb 6-1: config 0 descriptor?? [ 281.305554][ T2971] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.502364][ T2971] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.609990][ T7840] loop1: detected capacity change from 0 to 40427 [ 281.630533][ T7840] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 281.638351][ T7840] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 281.694196][ T2971] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.734202][ T7840] F2FS-fs (loop1): invalid crc value [ 281.746843][ T8] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 281.771363][ T8] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 281.783259][ T8] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 281.802013][ T8] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 281.814526][ T7840] F2FS-fs (loop1): Found nat_bits in checkpoint [ 281.826596][ T8] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 281.857461][ T8] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 281.883833][ T8] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 281.932275][ T8] microsoft 0003:045E:07DA.0004: no inputs found [ 281.964536][ T8] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 282.024005][ T8] usb 6-1: USB disconnect, device number 5 [ 282.041615][ T7840] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 282.048854][ T7840] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 282.196068][ T2971] tipc: Disabling bearer [ 282.215762][ T2971] tipc: Left network mode [ 283.189018][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 283.199766][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 283.212329][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 283.222758][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 283.232111][ T5796] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 283.243481][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 285.106791][ T7876] loop5: detected capacity change from 0 to 512 [ 285.203657][ T7876] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 285.236635][ T7876] EXT4-fs (loop5): orphan cleanup on readonly fs [ 285.293051][ T7876] EXT4-fs warning (device loop5): ext4_enable_quotas:7193: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 285.373399][ T7876] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 285.404395][ T7876] EXT4-fs error (device loop5): __ext4_iget:5117: inode #16: block 127754: comm syz.5.398: invalid block [ 285.473077][ T7876] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.398: couldn't read orphan inode 16 (err -117) [ 285.520273][ T7876] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 286.085304][ T7890] netlink: 32 bytes leftover after parsing attributes in process `syz.5.398'. [ 286.263611][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 286.273229][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 286.282753][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 286.291248][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 286.300117][ T5796] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 286.307477][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 287.289422][ T2971] hsr_slave_0: left promiscuous mode [ 287.313285][ T2971] hsr_slave_1: left promiscuous mode [ 287.334923][ T2971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.365796][ T2971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.406509][ T2971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.433593][ T2971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.465442][ T2971] bridge_slave_1: left allmulticast mode [ 287.486939][ T2971] bridge_slave_1: left promiscuous mode [ 287.510992][ T2971] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.573620][ T2971] bridge_slave_0: left allmulticast mode [ 287.596321][ T2971] bridge_slave_0: left promiscuous mode [ 287.622744][ T2971] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.833479][ T2971] veth1_macvtap: left promiscuous mode [ 287.863330][ T2971] veth0_macvtap: left promiscuous mode [ 287.869077][ T2971] veth1_vlan: left promiscuous mode [ 287.896467][ T2971] veth0_vlan: left promiscuous mode [ 287.915386][ T6332] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.157989][ T7911] loop4: detected capacity change from 0 to 512 [ 288.209373][ T7911] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 288.229522][ T7911] EXT4-fs (loop4): orphan cleanup on readonly fs [ 288.249602][ T7911] EXT4-fs warning (device loop4): ext4_enable_quotas:7193: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 288.275419][ T7911] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 288.300178][ T7911] EXT4-fs error (device loop4): __ext4_iget:5117: inode #16: block 127754: comm syz.4.401: invalid block [ 288.354792][ T7911] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.401: couldn't read orphan inode 16 (err -117) [ 288.405521][ T7911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 289.812855][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 289.822890][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 289.832483][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 289.840635][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 289.849826][ T5796] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 289.861589][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 291.093104][ T2971] team0 (unregistering): Port device team_slave_1 removed [ 291.161163][ T2971] team0 (unregistering): Port device team_slave_0 removed [ 291.224966][ T2971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.293644][ T2971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.031930][ T2971] bond0 (unregistering): Released all slaves [ 292.172849][ T7919] netlink: 32 bytes leftover after parsing attributes in process `syz.4.401'. [ 292.248423][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 292.258337][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 292.267046][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 292.312065][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 292.320836][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 292.328515][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 292.385203][ T6069] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.605967][ T7946] FAULT_INJECTION: forcing a failure. [ 292.605967][ T7946] name failslab, interval 1, probability 0, space 0, times 0 [ 292.646616][ T7946] CPU: 0 PID: 7946 Comm: syz.1.407 Not tainted syzkaller #0 [ 292.653992][ T7946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 292.664105][ T7946] Call Trace: [ 292.667423][ T7946] [ 292.670392][ T7946] dump_stack_lvl+0x18c/0x250 [ 292.675169][ T7946] ? show_regs_print_info+0x20/0x20 [ 292.680441][ T7946] ? load_image+0x420/0x420 [ 292.684994][ T7946] ? __might_sleep+0xe0/0xe0 [ 292.689632][ T7946] ? __lock_acquire+0x7eb0/0x7eb0 [ 292.694718][ T7946] should_fail_ex+0x394/0x4c0 [ 292.699460][ T7946] should_failslab+0x9/0x20 [ 292.704014][ T7946] slab_pre_alloc_hook+0x59/0x300 [ 292.709089][ T7946] ? kvmalloc_node+0x70/0x180 [ 292.713919][ T7946] ? kvmalloc_node+0x70/0x180 [ 292.718663][ T7946] __kmem_cache_alloc_node+0x53/0x260 [ 292.724102][ T7946] ? kvmalloc_node+0x70/0x180 [ 292.728843][ T7946] __kmalloc_node+0xa6/0x240 [ 292.733504][ T7946] kvmalloc_node+0x70/0x180 [ 292.738071][ T7946] alloc_netdev_mqs+0x88/0x1090 [ 292.742967][ T7946] ? IP6_ECN_decapsulate+0x1830/0x1830 [ 292.748490][ T7946] ? dev_valid_name+0x207/0x2f0 [ 292.753379][ T7946] ip6_tnl_locate+0x684/0x830 [ 292.758105][ T7946] ? ip6_tnl_parm_from_user+0x340/0x340 [ 292.763690][ T7946] ? __might_fault+0xaa/0x120 [ 292.768408][ T7946] ? __might_fault+0xc6/0x120 [ 292.773125][ T7946] ? __might_fault+0xaa/0x120 [ 292.777828][ T7946] ? ip6_tnl_siocdevprivate+0x5ed/0xab0 [ 292.783412][ T7946] ip6_tnl_siocdevprivate+0x61b/0xab0 [ 292.788831][ T7946] ? ip6_tnl_start_xmit+0x1230/0x1230 [ 292.794243][ T7946] ? dev_ioctl+0x83c/0x1140 [ 292.798787][ T7946] ? __lock_acquire+0x7eb0/0x7eb0 [ 292.803870][ T7946] ? dev_ifsioc+0x957/0xc40 [ 292.808422][ T7946] dev_ioctl+0x84c/0x1140 [ 292.812801][ T7946] sock_ioctl+0x74c/0x7e0 [ 292.817170][ T7946] ? sock_poll+0x460/0x460 [ 292.821630][ T7946] ? bpf_lsm_file_ioctl+0x9/0x10 [ 292.826601][ T7946] ? security_file_ioctl+0x80/0xa0 [ 292.831761][ T7946] ? sock_poll+0x460/0x460 [ 292.836238][ T7946] __se_sys_ioctl+0xfd/0x170 [ 292.840894][ T7946] do_syscall_64+0x55/0xb0 [ 292.845353][ T7946] ? clear_bhb_loop+0x40/0x90 [ 292.850080][ T7946] ? clear_bhb_loop+0x40/0x90 [ 292.854798][ T7946] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 292.860743][ T7946] RIP: 0033:0x7fab9df9fb19 [ 292.865189][ T7946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.884829][ T7946] RSP: 002b:00007fab9eedc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 292.893277][ T7946] RAX: ffffffffffffffda RBX: 00007fab9e225fa0 RCX: 00007fab9df9fb19 [ 292.901279][ T7946] RDX: 0000200000000000 RSI: 00000000000089f1 RDI: 0000000000000003 [ 292.909287][ T7946] RBP: 00007fab9e037b70 R08: 0000000000000000 R09: 0000000000000000 [ 292.917282][ T7946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.925280][ T7946] R13: 00007fab9e226038 R14: 00007fab9e225fa0 R15: 00007ffc1248b078 [ 292.933292][ T7946] [ 293.880279][ T7955] netlink: 16 bytes leftover after parsing attributes in process `syz.4.409'. [ 293.926933][ T7957] loop1: detected capacity change from 0 to 512 [ 293.949520][ T7957] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 293.963501][ T7957] EXT4-fs (loop1): orphan cleanup on readonly fs [ 293.971816][ T7957] EXT4-fs warning (device loop1): ext4_enable_quotas:7193: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 293.992351][ T7961] loop4: detected capacity change from 0 to 128 [ 294.010619][ T7957] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 294.027425][ T7957] EXT4-fs error (device loop1): __ext4_iget:5117: inode #16: block 127754: comm syz.1.410: invalid block [ 294.065599][ T7957] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.410: couldn't read orphan inode 16 (err -117) [ 294.127728][ T7957] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 294.281279][ T7966] netlink: 32 bytes leftover after parsing attributes in process `syz.1.410'. [ 294.433811][ T5874] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 294.457306][ T7961] syz.4.409: attempt to access beyond end of device [ 294.457306][ T7961] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 294.605781][ T7961] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 294.685183][ T5874] usb 6-1: Using ep0 maxpacket: 16 [ 294.767785][ T5874] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.946069][ T5874] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.978192][ T5874] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 295.023941][ T5874] usb 6-1: config 0 interface 0 has no altsetting 0 [ 295.056238][ T5874] usb 6-1: New USB device found, idVendor=056a, idProduct=5200, bcdDevice= 0.00 [ 295.098713][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.157053][ T5874] usb 6-1: config 0 descriptor?? [ 296.233092][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 296.243171][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 296.251003][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 296.260952][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 296.269436][ T5796] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 296.281245][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 296.976328][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.025498][ T5874] wacom 0003:056A:5200.0005: unknown main item tag 0x0 [ 297.077044][ T5874] wacom 0003:056A:5200.0005: unknown main item tag 0x0 [ 297.148715][ T5874] wacom 0003:056A:5200.0005: unknown main item tag 0x0 [ 297.174206][ T5874] wacom 0003:056A:5200.0005: unknown main item tag 0x0 [ 297.190556][ T5874] wacom 0003:056A:5200.0005: unknown main item tag 0x0 [ 297.207136][ T5874] wacom 0003:056A:5200.0005: unknown main item tag 0x0 [ 297.214098][ T5874] wacom 0003:056A:5200.0005: unknown main item tag 0x0 [ 297.232031][ T5874] wacom 0003:056A:5200.0005: unknown main item tag 0x0 [ 297.250010][ T5874] wacom 0003:056A:5200.0005: unknown main item tag 0x0 [ 297.258220][ T7980] loop4: detected capacity change from 0 to 512 [ 297.265487][ T5874] wacom 0003:056A:5200.0005: unknown main item tag 0x0 [ 297.282462][ T5874] wacom 0003:056A:5200.0005: Unknown device_type for 'HID 056a:5200'. Ignoring. [ 297.297855][ T7980] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 297.309193][ T5874] usb 6-1: USB disconnect, device number 6 [ 297.347808][ T7980] EXT4-fs (loop4): orphan cleanup on readonly fs [ 297.373068][ T7980] EXT4-fs warning (device loop4): ext4_enable_quotas:7193: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 297.424253][ T7980] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 297.445381][ T7980] EXT4-fs error (device loop4): __ext4_iget:5117: inode #16: block 127754: comm syz.4.415: invalid block [ 297.470542][ T7980] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.415: couldn't read orphan inode 16 (err -117) [ 297.506623][ T7980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 297.680624][ T7985] netlink: 32 bytes leftover after parsing attributes in process `syz.4.415'. [ 299.460504][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 299.470007][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 299.478934][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 299.487195][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 299.494962][ T5796] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 299.502379][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 299.938177][ T6069] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.561332][ T5874] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 301.661388][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 301.671451][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 301.680509][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 301.694367][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 301.712534][ T5796] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 301.723637][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 301.789582][ T5874] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.816384][ T5874] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.862614][ T5874] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 301.889661][ T5874] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 301.906720][ T5874] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 301.927800][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.940128][ T5874] usb 5-1: Product: syz [ 301.944347][ T5874] usb 5-1: Manufacturer: syz [ 301.959408][ T5874] usb 5-1: SerialNumber: syz [ 301.983591][ T5874] usbserial_generic 5-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 302.012587][ T5874] usbserial_generic 5-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 302.045080][ T5874] usbserial_generic 5-1:1.0: generic converter detected [ 302.079524][ T5874] usb 5-1: generic converter now attached to ttyUSB0 [ 302.101733][ T8030] event trace: Could not enable event p [ 302.223218][ T5874] usb 5-1: USB disconnect, device number 5 [ 302.254971][ T5874] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 302.274461][ T5874] usbserial_generic 5-1:1.0: device disconnected [ 302.884255][ T2971] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.982969][ T2971] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.065309][ T2971] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.189268][ T2971] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.941363][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 304.952749][ T5796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 304.962749][ T5796] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 304.970830][ T5796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 304.979417][ T5796] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 304.987713][ T5796] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 304.995619][ T5796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 305.004740][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 305.041613][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 305.065662][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 305.073739][ T5796] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 305.081149][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 308.266452][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 308.520787][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 308.532505][ T8] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 308.547427][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 308.561760][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 308.572380][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 308.580915][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 308.589021][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 308.678408][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 308.687993][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 308.759316][ T8] usb 5-1: SerialNumber: syz [ 309.046122][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 309.057372][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 309.065598][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 309.087346][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 309.096888][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 309.105302][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 309.647119][ T8] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 309.846853][ T8] usb 5-1: USB disconnect, device number 6 [ 309.888051][ T8] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 309.935244][ T2971] hsr_slave_0: left promiscuous mode [ 309.943067][ T2971] hsr_slave_1: left promiscuous mode [ 309.957173][ T2971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.967010][ T2971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.980206][ T2971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.987773][ T2971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.001073][ T2971] bridge_slave_1: left allmulticast mode [ 310.006885][ T2971] bridge_slave_1: left promiscuous mode [ 310.013395][ T2971] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.024933][ T2971] bridge_slave_0: left allmulticast mode [ 310.030651][ T2971] bridge_slave_0: left promiscuous mode [ 310.037293][ T2971] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.071651][ T2971] veth1_macvtap: left promiscuous mode [ 310.077383][ T2971] veth0_macvtap: left promiscuous mode [ 310.083180][ T2971] veth1_vlan: left promiscuous mode [ 310.091522][ T2971] veth0_vlan: left promiscuous mode [ 310.267821][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 310.281524][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 310.299322][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 310.321595][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 310.329597][ T5796] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 310.344910][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 311.248863][ T2971] team0 (unregistering): Port device team_slave_1 removed [ 311.375757][ T2971] team0 (unregistering): Port device team_slave_0 removed [ 311.501804][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 311.513964][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 311.523720][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 311.537993][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 311.545862][ T5796] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 311.554411][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 311.584529][ T2971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.655420][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 311.680393][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 311.694075][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 311.709106][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 311.721942][ T52] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 311.729485][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 311.854417][ T2971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.642811][ T2971] bond0 (unregistering): Released all slaves [ 312.680733][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 312.704556][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 312.714719][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 312.725425][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 312.757113][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 312.766886][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 313.495809][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 313.505575][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 313.517009][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 313.525446][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 313.534372][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 313.542395][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 313.807287][ T8141] FAULT_INJECTION: forcing a failure. [ 313.807287][ T8141] name failslab, interval 1, probability 0, space 0, times 0 [ 313.820664][ T8141] CPU: 1 PID: 8141 Comm: syz.1.442 Not tainted syzkaller #0 [ 313.828015][ T8141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 313.838568][ T8141] Call Trace: [ 313.841897][ T8141] [ 313.844885][ T8141] dump_stack_lvl+0x18c/0x250 [ 313.849636][ T8141] ? show_regs_print_info+0x20/0x20 [ 313.854896][ T8141] ? load_image+0x420/0x420 [ 313.859471][ T8141] ? __might_sleep+0xe0/0xe0 [ 313.864121][ T8141] ? __lock_acquire+0x7eb0/0x7eb0 [ 313.869213][ T8141] should_fail_ex+0x394/0x4c0 [ 313.873966][ T8141] should_failslab+0x9/0x20 [ 313.878517][ T8141] slab_pre_alloc_hook+0x59/0x300 [ 313.883608][ T8141] kmem_cache_alloc_lru+0x4d/0x2c0 [ 313.888766][ T8141] ? proc_alloc_inode+0x2a/0xb0 [ 313.893683][ T8141] proc_alloc_inode+0x2a/0xb0 [ 313.898417][ T8141] ? proc_invalidate_siblings_dcache+0x6c0/0x6c0 [ 313.904816][ T8141] new_inode_pseudo+0x63/0x1d0 [ 313.909643][ T8141] new_inode+0x22/0x1d0 [ 313.913874][ T8141] proc_pid_make_inode+0x24/0x190 [ 313.918988][ T8141] proc_pident_instantiate+0x6d/0x2b0 [ 313.924436][ T8141] proc_pident_lookup+0x1b3/0x290 [ 313.929533][ T8141] ? proc_pident_instantiate+0x2b0/0x2b0 [ 313.935245][ T8141] path_openat+0x1110/0x3270 [ 313.939966][ T8141] ? do_filp_open+0x430/0x430 [ 313.944782][ T8141] do_filp_open+0x1f2/0x430 [ 313.949393][ T8141] ? vfs_tmpfile+0x620/0x620 [ 313.954056][ T8141] ? noop_direct_IO+0x20/0x20 [ 313.958800][ T8141] ? _raw_spin_unlock+0x28/0x40 [ 313.963706][ T8141] ? alloc_fd+0x590/0x640 [ 313.968104][ T8141] do_sys_openat2+0x134/0x1d0 [ 313.972844][ T8141] ? do_sys_open+0xe0/0xe0 [ 313.977325][ T8141] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 313.983370][ T8141] ? lock_chain_count+0x20/0x20 [ 313.988287][ T8141] __x64_sys_openat+0x139/0x160 [ 313.993207][ T8141] do_syscall_64+0x55/0xb0 [ 313.997677][ T8141] ? clear_bhb_loop+0x40/0x90 [ 314.002410][ T8141] ? clear_bhb_loop+0x40/0x90 [ 314.007154][ T8141] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.013119][ T8141] RIP: 0033:0x7fab9df6034e [ 314.017675][ T8141] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 314.037386][ T8141] RSP: 002b:00007fab9eedbec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 314.045919][ T8141] RAX: ffffffffffffffda RBX: 00007fab9eedc6c0 RCX: 00007fab9df6034e [ 314.053985][ T8141] RDX: 0000000000000002 RSI: 00007fab9eedbf90 RDI: ffffffffffffff9c [ 314.062033][ T8141] RBP: 00007fab9e037b70 R08: 0000000000000000 R09: 0000000000000000 [ 314.070059][ T8141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.078122][ T8141] R13: 00007fab9e226038 R14: 00007fab9e225fa0 R15: 00007ffc1248b078 [ 314.086211][ T8141] [ 314.295641][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 314.306254][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 314.315903][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 314.324797][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 314.336086][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 314.345681][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 314.932326][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 314.945917][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 314.958513][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 314.968746][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 314.976805][ T5796] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 314.986464][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 315.294390][ T8164] Bluetooth: ISO socket layer initialized [ 316.478392][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 316.490726][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 316.499701][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 316.507811][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 316.516157][ T5796] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 316.524989][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 317.297354][ T5796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 317.316646][ T5796] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 317.326128][ T5796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 317.338411][ T5796] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 317.347508][ T5796] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 317.357547][ T5796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 317.386410][ T5875] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 317.603183][ T5875] usb 5-1: Using ep0 maxpacket: 16 [ 317.645184][ T5875] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.669595][ T5875] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 317.702453][ T5875] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 317.733037][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 317.768864][ T5875] usb 5-1: SerialNumber: syz [ 317.861326][ T5875] usb 5-1: 0:2 : does not exist [ 318.355517][ T5877] usb 5-1: USB disconnect, device number 7 [ 318.383432][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 318.399327][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 318.409284][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 318.419515][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 318.430156][ T5796] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 318.438915][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 318.983199][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 318.995265][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 319.004052][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 319.013824][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 319.021643][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 319.029338][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 319.372327][ T8201] device-mapper: table: 248:4: ram8 too small for target: start=0, len=10368, dev_size=8192 [ 319.384020][ T8201] device-mapper: core: Cannot calculate initial queue limits [ 319.392115][ T8201] device-mapper: ioctl: unable to set up device queue for new table. [ 319.582803][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 319.592877][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 319.601942][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 319.611216][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 319.620645][ T5796] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 319.628081][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 320.314653][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 320.323087][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 320.331272][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 320.340764][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 320.348824][ T5796] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 320.358263][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 320.871223][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 320.880686][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 320.891074][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 320.899319][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 320.908837][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 320.916296][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 320.918208][ T5877] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 321.134244][ T5877] usb 5-1: Using ep0 maxpacket: 8 [ 321.143151][ T5877] usb 5-1: config 10 has an invalid interface number: 91 but max is 0 [ 321.151616][ T5877] usb 5-1: config 10 has no interface number 0 [ 321.160228][ T5877] usb 5-1: config 10 interface 91 has no altsetting 0 [ 321.185049][ T5877] usb 5-1: string descriptor 0 read error: -22 [ 321.191649][ T5877] usb 5-1: New USB device found, idVendor=097b, idProduct=61f6, bcdDevice=d4.9a [ 321.203037][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.224167][ T5877] uvcvideo 5-1:10.91: Found Unit with invalid ID 0 [ 321.230873][ T5877] usb 5-1: Found UVC 0.40 device (097b:61f6) [ 321.251006][ T5877] uvcvideo 5-1:10.91: Entity type for entity Output 3 was not initialized! [ 321.262372][ T5877] uvcvideo 5-1:10.91: Entity type for entity Media 2 was not initialized! [ 321.319884][ T8233] loop5: detected capacity change from 0 to 7 [ 321.331648][ T8233] Dev loop5: unable to read RDB block 7 [ 321.337293][ T8233] loop5: unable to read partition table [ 321.344334][ T8233] loop5: partition table beyond EOD, truncated [ 321.354998][ T8233] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 321.379544][ T2949] loop: Write error at byte offset 4, length 3584. [ 321.386612][ C0] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 321.396164][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 321.488255][ T5877] usb 5-1: USB disconnect, device number 8 [ 321.628697][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 321.637572][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 321.648245][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 321.658228][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 321.667877][ T5796] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 321.675252][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 322.169182][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 322.178367][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 322.187937][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 322.197776][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 322.205850][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 322.214397][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 322.260896][ T5877] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 322.466553][ T5877] usb 2-1: Using ep0 maxpacket: 16 [ 322.480398][ T5877] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.494475][ T5877] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 322.508632][ T5877] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 322.523990][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.533620][ T5877] usb 2-1: Product: syz [ 322.537836][ T5877] usb 2-1: Manufacturer: syz [ 322.544001][ T5877] usb 2-1: SerialNumber: syz [ 323.434353][ T5877] usb 2-1: 0:2 : does not exist [ 323.444635][ T5877] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 323.523116][ T5877] usb 2-1: USB disconnect, device number 7 [ 323.740777][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 323.780798][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 323.791067][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 323.912941][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 323.920962][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 323.931866][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 325.714364][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 325.723149][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 325.733376][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 325.742618][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 325.752734][ T5796] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 325.760776][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 326.110196][ T8279] random: crng reseeded on system resumption [ 326.196753][ T8281] fuse: Bad value for 'fd' [ 326.407495][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 326.417365][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 326.429161][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 326.438193][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 326.451114][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 326.458562][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 326.788076][ T8288] FAULT_INJECTION: forcing a failure. [ 326.788076][ T8288] name failslab, interval 1, probability 0, space 0, times 0 [ 326.802014][ T8288] CPU: 1 PID: 8288 Comm: syz.4.465 Not tainted syzkaller #0 [ 326.809368][ T8288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 326.819473][ T8288] Call Trace: [ 326.822803][ T8288] [ 326.825776][ T8288] dump_stack_lvl+0x18c/0x250 [ 326.830511][ T8288] ? show_regs_print_info+0x20/0x20 [ 326.835763][ T8288] ? load_image+0x420/0x420 [ 326.840317][ T8288] ? __might_sleep+0xe0/0xe0 [ 326.844961][ T8288] ? __lock_acquire+0x7eb0/0x7eb0 [ 326.850048][ T8288] should_fail_ex+0x394/0x4c0 [ 326.854786][ T8288] should_failslab+0x9/0x20 [ 326.859334][ T8288] slab_pre_alloc_hook+0x59/0x300 [ 326.864407][ T8288] ? __kernfs_new_node+0xaa/0x7f0 [ 326.869488][ T8288] ? __kernfs_new_node+0xaa/0x7f0 [ 326.874576][ T8288] __kmem_cache_alloc_node+0x53/0x260 [ 326.880003][ T8288] ? __kernfs_new_node+0xaa/0x7f0 [ 326.885087][ T8288] __kmalloc_node_track_caller+0xa4/0x230 [ 326.890873][ T8288] kstrdup+0x3b/0x80 [ 326.894831][ T8288] __kernfs_new_node+0xaa/0x7f0 [ 326.899751][ T8288] ? kernfs_new_node+0x260/0x260 [ 326.904748][ T8288] ? sysfs_do_create_link_sd+0x75/0x110 [ 326.910333][ T8288] kernfs_new_node+0x14c/0x260 [ 326.915135][ T8288] kernfs_create_link+0xa7/0x200 [ 326.920104][ T8288] sysfs_do_create_link_sd+0x83/0x110 [ 326.925505][ T8288] device_add_class_symlinks+0x1cf/0x240 [ 326.931193][ T8288] device_add+0x4f9/0xc40 [ 326.935557][ T8288] netdev_register_kobject+0x188/0x320 [ 326.941066][ T8288] register_netdevice+0x12aa/0x1ba0 [ 326.946308][ T8288] ? netif_stacked_transfer_operstate+0x210/0x210 [ 326.952758][ T8288] ? __lock_acquire+0x7eb0/0x7eb0 [ 326.957836][ T8288] ? kvmalloc_node+0x70/0x180 [ 326.962547][ T8288] ? dev_addr_check+0x20/0x240 [ 326.967350][ T8288] ? __asan_memset+0x22/0x40 [ 326.971981][ T8288] ? ipip6_tunnel_create+0x84/0x450 [ 326.977400][ T8288] ipip6_tunnel_create+0x111/0x450 [ 326.982553][ T8288] ipip6_tunnel_locate+0x524/0x740 [ 326.987793][ T8288] ? check_6rd+0x660/0x660 [ 326.992241][ T8288] ? ipip6_tunnel_ctl+0xd7/0x9e0 [ 326.997212][ T8288] ipip6_tunnel_ctl+0x6aa/0x9e0 [ 327.002120][ T8288] ip_tunnel_siocdevprivate+0x138/0x1f0 [ 327.007698][ T8288] ? ip_tunnel_update+0xae0/0xae0 [ 327.012756][ T8288] ? __mutex_trylock_common+0x160/0x270 [ 327.018331][ T8288] ipip6_tunnel_siocdevprivate+0x362/0x16e0 [ 327.024261][ T8288] ? rcu_is_watching+0x15/0xb0 [ 327.029149][ T8288] ? sit_tunnel_xmit+0x2390/0x2390 [ 327.034293][ T8288] ? trace_contention_end+0x39/0xe0 [ 327.039515][ T8288] ? __mutex_lock+0x30d/0xce0 [ 327.044220][ T8288] ? dev_load+0x21/0x1f0 [ 327.048494][ T8288] ? dev_ioctl+0x83c/0x1140 [ 327.053038][ T8288] ? __lock_acquire+0x7eb0/0x7eb0 [ 327.058089][ T8288] ? mutex_lock_nested+0x20/0x20 [ 327.063071][ T8288] ? full_name_hash+0x92/0xe0 [ 327.067780][ T8288] ? dev_ifsioc+0x957/0xc40 [ 327.072323][ T8288] dev_ioctl+0x84c/0x1140 [ 327.076712][ T8288] sock_ioctl+0x74c/0x7e0 [ 327.081076][ T8288] ? sock_poll+0x460/0x460 [ 327.085533][ T8288] ? bpf_lsm_file_ioctl+0x9/0x10 [ 327.090519][ T8288] ? security_file_ioctl+0x80/0xa0 [ 327.095671][ T8288] ? sock_poll+0x460/0x460 [ 327.100122][ T8288] __se_sys_ioctl+0xfd/0x170 [ 327.104747][ T8288] do_syscall_64+0x55/0xb0 [ 327.109287][ T8288] ? clear_bhb_loop+0x40/0x90 [ 327.113996][ T8288] ? clear_bhb_loop+0x40/0x90 [ 327.118716][ T8288] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 327.124644][ T8288] RIP: 0033:0x7f286139fb19 [ 327.129082][ T8288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.148722][ T8288] RSP: 002b:00007f2862290028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 327.157171][ T8288] RAX: ffffffffffffffda RBX: 00007f2861625fa0 RCX: 00007f286139fb19 [ 327.165171][ T8288] RDX: 0000200000000140 RSI: 00000000000089f1 RDI: 0000000000000004 [ 327.173168][ T8288] RBP: 00007f2861437b70 R08: 0000000000000000 R09: 0000000000000000 [ 327.181181][ T8288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.189180][ T8288] R13: 00007f2861626038 R14: 00007f2861625fa0 R15: 00007ffe11ec39c8 [ 327.197206][ T8288] [ 327.362669][ T5877] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 327.424783][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 327.435714][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 327.444371][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 327.456039][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 327.464698][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 327.472109][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 327.559607][ T5877] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 327.567882][ T5877] usb 2-1: config 0 has no interface number 0 [ 327.581159][ T5877] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 327.590395][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.598424][ T5877] usb 2-1: Product: syz [ 327.605906][ T5877] usb 2-1: Manufacturer: syz [ 327.610563][ T5877] usb 2-1: SerialNumber: syz [ 327.624337][ T5877] usb 2-1: config 0 descriptor?? [ 328.153743][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 328.162600][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 328.180932][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 328.195168][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 328.213803][ T5796] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 328.225483][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 328.328957][ T5877] asix 2-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 328.349301][ T5877] asix: probe of 2-1:0.251 failed with error -524 [ 328.588070][ T5877] usb 2-1: USB disconnect, device number 8 [ 328.945296][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 328.953755][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 328.964621][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 328.973040][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 328.982558][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 328.991241][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 329.596042][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 329.615644][ T5874] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 329.616693][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 329.633031][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 329.641708][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 329.649855][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 329.657291][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 329.834718][ T5874] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 329.854064][ T5874] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 329.879371][ T5874] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 329.897308][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.905361][ T5874] usb 5-1: Product: syz [ 329.929733][ T5874] usb 5-1: Manufacturer: syz [ 329.934424][ T5874] usb 5-1: SerialNumber: syz SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=6 req=391 state=3 status=67 (errno 32: Broken pipe) [ 330.338723][ T5874] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 330.587267][ T6121] usb 5-1: USB disconnect, device number 9 [ 330.599636][ T6121] usblp0: removed [ 330.686949][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 330.697643][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 330.971391][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 330.989124][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 331.008298][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 331.016881][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 331.046122][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 331.053536][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 331.454545][ T2963] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.528959][ T2963] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.621567][ T2963] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.678092][ T2963] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.807034][ T2963] hsr_slave_0: left promiscuous mode [ 332.819367][ T2963] hsr_slave_1: left promiscuous mode [ 332.828336][ T2963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.836782][ T2963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.850923][ T2963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.858595][ T2963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.866732][ T2963] bridge_slave_1: left allmulticast mode [ 332.872448][ T2963] bridge_slave_1: left promiscuous mode [ 332.878377][ T2963] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.888354][ T2963] bridge_slave_0: left allmulticast mode [ 332.894037][ T2963] bridge_slave_0: left promiscuous mode [ 332.906261][ T2963] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.929557][ T2963] bridge0: left promiscuous mode [ 332.935876][ T2963] veth1_macvtap: left promiscuous mode [ 332.941578][ T2963] veth0_macvtap: left promiscuous mode [ 332.947296][ T2963] veth1_vlan: left promiscuous mode [ 332.954455][ T2963] veth0_vlan: left promiscuous mode [ 333.518449][ T2963] team0 (unregistering): Port device team_slave_1 removed [ 333.570967][ T2963] team0 (unregistering): Port device team_slave_0 removed [ 333.618207][ T2963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.663442][ T2963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.984900][ T2963] bond0 (unregistering): Released all slaves [ 334.426209][ T2963] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.497994][ T2963] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.582830][ T2963] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.658627][ T2963] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.851708][ T2963] hsr_slave_0: left promiscuous mode [ 335.857826][ T2963] hsr_slave_1: left promiscuous mode [ 335.864103][ T2963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.872328][ T2963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.880665][ T2963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.888382][ T2963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.896431][ T2963] bridge_slave_1: left allmulticast mode [ 335.902541][ T2963] bridge_slave_1: left promiscuous mode [ 335.908353][ T2963] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.919157][ T2963] bridge_slave_0: left allmulticast mode [ 335.924951][ T2963] bridge_slave_0: left promiscuous mode [ 335.931323][ T2963] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.957984][ T2963] veth1_macvtap: left promiscuous mode [ 335.963683][ T2963] veth0_macvtap: left promiscuous mode [ 335.969382][ T2963] veth1_vlan: left promiscuous mode [ 335.975908][ T2963] veth0_vlan: left promiscuous mode [ 336.533335][ T2963] team0 (unregistering): Port device team_slave_1 removed [ 336.576887][ T2963] team0 (unregistering): Port device team_slave_0 removed [ 336.620180][ T2963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.670126][ T2963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.977973][ T2963] bond0 (unregistering): Released all slaves