last executing test programs: 9m20.857641005s ago: executing program 2 (id=618): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$pokeuser(0x6, r0, 0xfffffffffffffffb, 0x4) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) unshare(0x40000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r4, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='$\x00'], 0x28}}], 0x1, 0x0) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000080)={0x1000, 0x5, 0x5772, 0x800b, 0x7, "ea0000000000f9000000024200000200", 0x4000000, 0x800047f}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0x2) ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @private0, 0x1b9}, 0x1c) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1bb5818a0d53d6a}, 0x40) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0) bind$inet(r6, 0x0, 0x0) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 9m8.923422996s ago: executing program 0 (id=637): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') getdents64(r4, &(0x7f0000000340)=""/79, 0x4f) getdents(r4, 0x0, 0x3b) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x167e00) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x1b7e, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x1, 0x8000399}) r8 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x3f7, 0x1, 0x0, 0x163}, &(0x7f0000000240), &(0x7f0000001880), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000003c0)={0x28, 0x0, 0x0, r8, 0x0, 0x0, 0x8, 0x2, 0x1}, 0x1) io_uring_enter(r7, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) openat$cgroup_int(r6, &(0x7f00000000c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) 9m8.918420547s ago: executing program 0 (id=640): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9}, 0xff95) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x2, r1, 0x0, 0x0}, 0x10) 9m8.916674197s ago: executing program 2 (id=643): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) 9m8.85155586s ago: executing program 2 (id=644): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) accept4$alg(r1, 0x0, 0x0, 0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) socket(0x11, 0x1, 0x0) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00') 9m7.668626016s ago: executing program 2 (id=647): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x1, 0x0) pwritev2(r4, &(0x7f0000000740)=[{&(0x7f0000000040)="a8fc", 0x2}], 0x1, 0x7, 0xbc0, 0x0) 9m2.459761876s ago: executing program 2 (id=657): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000039000000000000000000000085"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x2, @void}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000001c00000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r7, r4, 0x25, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, 0x41014, 0x54c1f}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x20040000) 9m1.981098609s ago: executing program 0 (id=660): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000001c00000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r2, r1, 0x25, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14) sendmsg$nl_route(r0, 0x0, 0x20040000) 9m1.865149154s ago: executing program 3 (id=661): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 9m1.659601524s ago: executing program 3 (id=662): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x800, 0x0, 0x3, 0x9, 0x0, 0x7fff}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000008940)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x1ff, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[], 0x108}}], 0x2, 0xc040) 9m1.579213758s ago: executing program 3 (id=663): openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4e142, 0x2e) truncate(0x0, 0x2fffffd) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001640)="5346f7f875528ef24043c68e04", 0xd}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x0) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x3004}], 0x1, 0x0, 0x0, 0x0) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 9m1.437154895s ago: executing program 0 (id=664): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x400, @loopback, 0x7}, 0x1c) listen(r0, 0xb) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0796050c"], 0xa) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) 9m0.728536359s ago: executing program 0 (id=666): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008404, &(0x7f00000001c0)=ANY=[], 0x85, 0x6b9, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) fsopen(0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r5, 0x80184132, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 9m0.603404005s ago: executing program 3 (id=667): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x259, &(0x7f0000000980)="$eJzs3U9IHFccB/DfzO5q1W2x7aVQ+gdKKa0g9lboxV5aEIpIWwptwVJKLw0aMEpumlMuOSTnJHjKRUJuMTkGL5JLQiAnk3gwl0AiOURySA4bZkeDWQ35s7oTMp8PjDNP5/l7w8z3jQdnNoDS6o+I4YioRMRARNQiItm+w+f50r/ZnO9ZHo9oNH65nzT3y9u5rX59ETEXEd9FxFKaxP/ViJnFP9cervz01bHp2pdnFv/o6ehBblpfW/154/To0fMj385cvX53NInhqD9zXHsv2eV71STig/0o9oZIqkWPgJcxdvjcjSz3H0bEF8381yKN/OQdn+paqsU3p57X98S9ax93cqzA3ms0atk9cK4BlE4aEfVI0sGIyLfTdHAw/xv+ZqU3PTA5dWjgv8npiX+LnqmAvVKPWP3xYveFvpb836nk+QfeXln+fxtbuJVtb1SKHg3QEZ/kqyz/A3/Pfh3yD6Uj/1Bebeb/3f0YE9AZ7v9QXvIPJbX1/5nyD6Xk/g/lJf9QHl0tbfmH8pJ/KK/t+QcAyqXRXfQTyEBRip5/AAAAAAAAAAAAAAAAAACAneZ7lse3lk7VvHwyYv2H/H3kO+tXmp9HHPFO82vvg+Tpa8szSbPbr7V26v/1WTu923e24Kev37tdbP0rnxZbf3YiYu5IRAxVqzuvv2Tz+nt977/g57V/2izwipKW9ve/d7Z+q8cLxdYfWYm4lM0/Q7vNP2l81FzvPv/Us/PXZv2Dj9r8BQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTMkwAAAP//BhJsog==") truncate(0x0, 0x2fffffd) getpid() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 9m0.403737414s ago: executing program 3 (id=668): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) 9m0.318576239s ago: executing program 3 (id=669): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x271d, 0x0, &(0x7f0000000000)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = inotify_init1(0x80800) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000080)={0x20000008}) socket$inet_sctp(0x2, 0x1, 0x84) close(0x3) socket(0x11, 0x80803, 0x0) 8m59.073786738s ago: executing program 2 (id=670): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x400001}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) ioctl$BINDER_FREEZE(r1, 0x400c620e, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fanotify_init(0x2, 0x0) read(r2, &(0x7f0000000040)=""/43, 0x2b) vmsplice(r3, &(0x7f0000000300)=[{&(0x7f0000000a40)="8b", 0x1}], 0x1, 0x0) 8m53.154274602s ago: executing program 0 (id=671): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008f}, 0x0) r0 = gettid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000002c0)=[@window={0x3, 0x8, 0x7}, @window={0x3, 0xfffb, 0x18}, @sack_perm, @window={0x3, 0xfffc, 0xb}, @window={0x3, 0x2}, @timestamp, @timestamp, @window={0x3, 0xe40, 0x100}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r1, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{}, {0x0, 0x989680}}, 0x0) close(0x3) sched_setaffinity(0x0, 0x0, 0x0) 8m41.29819117s ago: executing program 32 (id=665): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x46, 0xc11, &(0x7f0000000d00)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x3010018, &(0x7f0000000040), 0x5, 0x4d0, &(0x7f00000013c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x488) pwrite64(r0, &(0x7f00000000c0)="c5", 0x1, 0x1a) write$rfkill(r0, &(0x7f0000000080)={0x9, 0x6, 0xff, 0x1}, 0xffffff66) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000010000004000000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000200)='.\x00', 0x4000423) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) 8m41.178009705s ago: executing program 33 (id=669): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x271d, 0x0, &(0x7f0000000000)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = inotify_init1(0x80800) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000080)={0x20000008}) socket$inet_sctp(0x2, 0x1, 0x84) close(0x3) socket(0x11, 0x80803, 0x0) 8m41.07916735s ago: executing program 34 (id=670): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x400001}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) ioctl$BINDER_FREEZE(r1, 0x400c620e, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fanotify_init(0x2, 0x0) read(r2, &(0x7f0000000040)=""/43, 0x2b) vmsplice(r3, &(0x7f0000000300)=[{&(0x7f0000000a40)="8b", 0x1}], 0x1, 0x0) 8m37.841529415s ago: executing program 35 (id=671): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008f}, 0x0) r0 = gettid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000002c0)=[@window={0x3, 0x8, 0x7}, @window={0x3, 0xfffb, 0x18}, @sack_perm, @window={0x3, 0xfffc, 0xb}, @window={0x3, 0x2}, @timestamp, @timestamp, @window={0x3, 0xe40, 0x100}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r1, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{}, {0x0, 0x989680}}, 0x0) close(0x3) sched_setaffinity(0x0, 0x0, 0x0) 8m26.419687472s ago: executing program 4 (id=672): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000001c00000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r2, r1, 0x25, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14) sendmsg$nl_route(r0, 0x0, 0x20040000) 8m26.006499152s ago: executing program 4 (id=676): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x259, &(0x7f0000000980)="$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") truncate(0x0, 0x2fffffd) getpid() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 8m25.740979105s ago: executing program 4 (id=677): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) 8m25.560304074s ago: executing program 4 (id=678): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$pokeuser(0x6, r0, 0xfffffffffffffffb, 0x4) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) unshare(0x40000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r4, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='$\x00'], 0x28}}], 0x1, 0x0) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000080)={0x1000, 0x5, 0x5772, 0x800b, 0x7, "ea0000000000f9000000024200000200", 0x4000000, 0x800047f}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0x2) ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @private0, 0x1b9}, 0x1c) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}, 0x1, 0x2, 0x0, 0x1bb5818a0d53d6a}, 0x40) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0) bind$inet(r6, 0x0, 0x0) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 8m20.778983702s ago: executing program 4 (id=681): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000680)={[{@usrquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x1) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x65) openat(0xffffffffffffff9c, 0x0, 0x2141, 0x59) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x6) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="7f45"], 0x78) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x26, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e23, 0x3, @loopback, 0x1}}, 0x0, 0x0, 0x6, 0x0, "10baa70a93289349d889de25b87376f6622d337642b89005000000000000001b7ef6619dd6b2ca4edb6f7debd38b6d889a8c986b33e249c3157f1f370dfd6700"}, 0xd8) r3 = dup(r2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_DEL_TX_TS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) socket(0x10, 0x3, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0x0, 0x3, 0xfff, 0x8, 0x1a, "203fd85ee880dd4251e2d41c2a0080324ecf2a"}) socket$inet6(0xa, 0x800000000000002, 0x1) 8m19.875093906s ago: executing program 4 (id=683): timer_create(0x3, 0x0, &(0x7f0000044000)) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x4, 0x3, 0x7, @vifc_lcl_addr=@private=0xa010102, @multicast1}, 0x10) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x4, 0x2, 0x0, @vifc_lcl_addr=@remote, @dev}, 0x10) 8m4.427240576s ago: executing program 36 (id=683): timer_create(0x3, 0x0, &(0x7f0000044000)) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x4, 0x3, 0x7, @vifc_lcl_addr=@private=0xa010102, @multicast1}, 0x10) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x4, 0x2, 0x0, @vifc_lcl_addr=@remote, @dev}, 0x10) 7m11.94426201s ago: executing program 5 (id=835): socket$kcm(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9}, 0xff95) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x2800, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0010000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0x24, 0x8, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x404c050}, 0x4004004) 7m10.513210178s ago: executing program 5 (id=839): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f000074f000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000b000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xffffffffffffff92) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, 0x0}}, {{&(0x7f00000001c0)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001c40)=ANY=[], 0x10}}], 0x2, 0x0) 7m3.117437282s ago: executing program 5 (id=852): mkdirat(0xffffffffffffff9c, 0x0, 0x1f7) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write$binfmt_format(r0, &(0x7f00000000c0)='0\x00', 0x2) 7m2.819275747s ago: executing program 5 (id=855): syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1014494, &(0x7f00000001c0)=ANY=[], 0xfe, 0xc24, &(0x7f0000001480)="$eJzs3UFsHNd9B+D/Gy5Fym4rJk5Uu42LTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmFoSJNXIRtrQvfTQQ4Ci6CEnAq1RIEUDoymCHtnWBZKLD0VOPREtbARFD2wRIKeAxcy+lZY0ZcmmSFH299nUbznz3ux7b5YzkqA3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiN976cKpZ9ODbgUAcJAuTX311Gn3fwD4RLnsz/8AAAAAAAAAAAAAAHDYpSjisUixeGkzzVTfdw1fbHdu3Jwen9i92tFU1Ryoypdfw8+ePnP2S8+NnevlB9e/356IV6YuX6i/uHB9cam1vNyaq0932rMLc617PsJe6+80Wg1A/fqrN+auXl2un37mzLbdN0feG3r0+Mj5sadOPtkrOz0+MTHVV6Y2+JHf/X3uNMPjSBRxMlI8/b2fpGZEFLH3sbjLZ2e/Ha06MVp1Ynp8ourIfLvZWSl3TvYGooio91Vq9MboAM7FnjQiVsvmlw0eLbs3tdhcal6Zb9Unm0sr7ZX2QmcydVtb9qceRZxLEWsRsTH0/sMNRhG1SPGdY5vpSkQM9Mbhi9XE4Du3o9jHPt6Dsp31wYi14iE4Z4fYUBTxcqT46dtFzJZjlr/iCxEvl/mDiDfLfCEilR+MsxHv7vI54uFUiyL+vDz/5zfTXHU96F1XLn6t/pXO1YW+sr3rykN/fzhIh/zaNBxFNKsr/mb66L/ZAQAAAAAAAAAAAAAAAOB+OxpFPBEpXvr3P6rmFUc1L/3Y+bHfH/nF/jnjj9/lOGXZZyJitbi3OblH8hTiyTSZ0gOeS/xJNhxF/HGe//fGg24MAAAAAAAAAAAAAAAAAADAJ9yPI8Xz75xIa9G/pni7c61+uXllvrsqbG/t396a6VtbW1v11M1GzpmcqznXcq7n3MgZRa6fs5FzJudqzrWc6zk3csZArp+zkXMm52rOtZzrOTdyRi3Xz9nIOZNzNedazvWcGznjkKzdCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwcVJEET+PFN/+xmaKFBGNiJno5vpQrwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CANpSK+Hynqf9C4ta0WEan6v+tE+cvZaBwp89PRGCvzhWhcyNmsstZ44wG0n70ZTEX8KFIMDb9164Tn8z/Y/e7WxyDe/Obt736l1s2B3s6R94YePX7s/NjErz1+p9dptwaMXmx3btysT49PTEz1ba7ld/9037aR/L7F/ek6EbH82uuvNufnW0ufmBdFHIpmPKgXte6LWhyS9hzUi3y9il12FYfhp6BxWAaq9+IBX5g4EOX9/91I8dvv/Efvht+7//9C97tbd/j42Z/cvv8/v/NA+3T/f6xv2/P5dyODtYjhleuLg8cjhpdfe/1k+3rzWutaq3P21Kkvj419+cypwSMRw1fb862+V3seKgAAAAAAAAAAAAAAAICDlYr43UjR/NFmqkfEzWq+1sj5sadOPjkQA9V8q23ztl6Zunyh/uLC9cWl1vJya64+3WnPLsy17vXthqvpXtPjE/vSmbs6us/tPzr84sLia0vta3+4suv+R4YvXFleWWrO7r47jkYR0ejfMlo1eHp8omr0fLvZqapO7jqZ7sMbTEX8Z6SYPVs/0tuW5//tnOG/bf7/6s4D7dP8v0/1bSvfM6UifhYpfusvHo/PV+18JN43Zrnc30SK0XOfy+XiSFmu14bucwW6MwPLsv8bKf7h59vL9uZDPna77LP3Oq4Pi/L8H4sU3/+z78av523bn/+w+/l/ZOeB9un8f6Zv2yPbnlew566Tz//JSPHCY2/Fb+RtH/T8jyK2tra+FXEiF771fI59Ov+f7ds2Et33/c37130AAAAAAAAAAICH1mAq4m8jxZMTtfRc3nYv//5vbueB9unff/1y37a5A1qvaM+DCgAAAACHxGAq4seR4trKW7fmUG+f/903//N3bq+9Pp527K3+nu+XqucG3M+//+s3kt93Zu/dBgAAAAAAAAAAAAAAAAAAgEMlpSKey+upz9xlPfX1SPHSfz+dy6XjZbneOvAj1a/DlxY6Jy/Mzy/MNleaV+Zb9anF5myrrPuZSLH515/LdYtqffXP57rdNd6Ht3prsS9Fiom/65XtrsXeW5u8ux54dy32suynIsV//f32sr11rD97u+zpsuxfRYqv/9PuZY/fLnumLPvdSPHDr9d7ZR8py/aej9p9JulwLeZbz8wuzL/vUagAAAAAAAAAAAAAAAAAAADwYQ2mIv40UvzP9bVYrab9v3FrV85ab8Ob3+xb73+Hm9U6/yPV+v93ev1R1v8fuS+9BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh0uKIl6PFIuXNtP6UPl91/DFdufGzenxid2rHU1VzYGqfPk1/OzpM2e/9NzYuV5+cP377Yl4ZeryhfqLC9cXl1rLy625+nSnPbsw17rnI+y1/u2h6xqtBqB+/dUbc1evLtdPP3Nm2+6bI+8NPXp85PzYUyef7JWdHp+YmOorUxv8EO/+oRp325Eo4i8jxdPf+0n656GIIvY+Fnf57Oy3o1UnRqtOTI9PVB2Zbzc7K+XOyd5AFBH1vkqN3hgdwLnYk0bEatn8ssGjZfemFptLzSvzrfpkc2mlvdJe6EymbmvL/tSjiHMpYi0iNob6D3QkZxGvRorvHNtM/zIUMdAbhy9emvrqqdN3bkexr728i29V7awPRqwVD8E5O8SGooh/jBQ/fftE/OtQRC26X/GFiJfL/EHEm2W+EJHKD8bZiHeHHnSruV9qUcT/lef//GZ6eyii+pGprisXv1b/SufqQl/Z3nVl5/1hKyIeqvvDQTrk16bhKOKH1RV/M/2bn2sAAAAAAAAAAAAAAACAQ6SIX40Uz79zIlXzg2/NKW53rtUvN6/Md6f19eb+9eZMb21tbdVTNxs5Z3Ku5lzLuZ5zI2cUuX7ORs6ZnKs513Ku59zIGQO5fs5GzpmcqznXcq7n3MgZtVw/ZyPnTM7VnGs513Nu5IxDMncPAAAAAAAAAAAAAAAAAAD4eCmq/1J8+xubaWuou770THRz3XqgH3v/HwAA//9wn/vk") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) landlock_create_ruleset(&(0x7f0000000080)={0x10200}, 0x30, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000440)=ANY=[], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f"], 0x6f4}}, 0x0) ioctl(r0, 0xc138fd05, &(0x7f0000000000)="04000000020000") 6m59.132285453s ago: executing program 5 (id=861): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') getdents64(r4, &(0x7f0000000340)=""/79, 0x4f) getdents(r4, 0x0, 0x3b) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x167e00) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x1b7e, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x1, 0x8000399}) r7 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x3f7, 0x1, 0x0, 0x163}, &(0x7f0000000240), &(0x7f0000001880), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000003c0)={0x28, 0x0, 0x0, r7, 0x0, 0x0, 0x8, 0x2, 0x1}, 0x1) io_uring_enter(r6, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) 6m58.170997999s ago: executing program 5 (id=867): getpid() r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0x3, 0x9032, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x3e) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xb8, 0x79, 0x11, 0xb0}, [@ldst={0x4}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuseblk(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f0000000040), 0x1200083, &(0x7f0000001640)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xc00}}]}}) 6m57.025989954s ago: executing program 37 (id=867): getpid() r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0x3, 0x9032, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x3e) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xb8, 0x79, 0x11, 0xb0}, [@ldst={0x4}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuseblk(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f0000000040), 0x1200083, &(0x7f0000001640)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xc00}}]}}) 6m15.193551418s ago: executing program 8 (id=929): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) close_range(r0, 0xffffffffffffffff, 0x0) 6m13.330555078s ago: executing program 8 (id=933): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x8080c61) 6m12.22558414s ago: executing program 8 (id=938): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'veth0_to_bridge\x00', @random="0100"}) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = gettid() timer_create(0x7, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9, r4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) readv(r5, &(0x7f0000000040)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) close(r0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x800000, &(0x7f00000000c0)=ANY=[@ANYBLOB='lastblock=00000000000000000226,adinicb,gid=forget,nostrict,unhide,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c73686f727461642c7569643d69676e6f72652c73686f727461642c766f6c756d653d30303030303030303030303030303030303030362c001829935912ddb19b617db523a6bb7c0d782285ef952b9282ba93ba5ef9353deee866199e1a1a16f9b8980aa11304cc9667f126de9a575a9cb3c29169cb6e8bd4820f0d3882914f9f4dd2ac97c7c5181676dc89c5fd4f9c455fcdbd2eef48adb33cdc1f9e9a7f3a2bcb07fb13cffd272aa79076e8039f7ab310e76e7400"/192, @ANYRES64], 0x4, 0xc24, &(0x7f0000000d00)="$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") 6m6.451788827s ago: executing program 8 (id=943): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) inotify_init1(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000080)={r1, 0x80001, 0x80000004}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={r2, 0x1, r0, 0x3, 0x80000}) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000280)={r2, 0x5, 0x4000003}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 6m0.174761408s ago: executing program 8 (id=957): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000003, 0x1010, r1, 0x995a1000) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) 5m58.939127816s ago: executing program 8 (id=960): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x1, 0x2, 0x1ff, 0xb06}, 0x27, [0x1000, 0x10001, 0x80, 0x10, 0xc, 0x827, 0x0, 0x1, 0xcf1, 0x2, 0x0, 0x8, 0x6, 0x100, 0xc776, 0x7, 0x7, 0xc, 0x9, 0x7, 0xfffffffd, 0x4, 0x2, 0xa, 0xe, 0x1, 0x80000000, 0x4, 0x8, 0xb, 0x4, 0xa9, 0x956, 0x1, 0x88, 0x4, 0x7dfe, 0x7, 0xa, 0x0, 0x9de, 0x1, 0xf82d, 0x80000000, 0x7, 0x2, 0x7fff, 0x80, 0x40000000, 0x6, 0xb05, 0xc, 0x5, 0x5, 0x6, 0x4, 0x0, 0x3, 0x4, 0x9, 0x5, 0x6252, 0x2, 0x3fcc], [0x800, 0x96, 0x2fd1d58, 0x0, 0x401, 0xfff, 0x1, 0x8, 0x7, 0x80, 0xfff, 0x2f, 0x9, 0x64e, 0x10001, 0x0, 0xfffffbff, 0x6, 0x100, 0x4, 0x7fffffff, 0x1, 0x8001, 0x800, 0xd, 0x5, 0x1000, 0x8, 0x1, 0x9, 0x80000000, 0xc, 0x1, 0xfffffa93, 0xfa, 0x7, 0x9f9, 0x4, 0x1f, 0xb342, 0x2, 0x451f, 0x1, 0x605f, 0xb2, 0xd4e5, 0x3, 0x80000001, 0x1, 0x2, 0x7ff, 0x1ff, 0x6c, 0x7, 0x101, 0xca8, 0x0, 0x7fffffff, 0xfffffffe, 0xffffff81, 0x5, 0x9, 0x5, 0xff], [0xfffffff5, 0x4, 0x0, 0xdd, 0x6, 0x0, 0x80000349, 0x10000000, 0x89ef, 0xcb4, 0x4, 0x587a, 0x0, 0xf, 0x100, 0xa0000000, 0x0, 0x5, 0x4, 0x9, 0x6, 0x5, 0xcc, 0x7, 0x200, 0x8, 0x4, 0x6, 0x3, 0x10001, 0x7fff, 0x1, 0xfb, 0x2, 0x5, 0x1, 0x0, 0x1fd, 0x6, 0xf, 0x4, 0x2, 0x1000, 0xfa, 0x5, 0x2, 0x6, 0x0, 0x2, 0x3, 0x9, 0x5, 0x741, 0x3, 0x8, 0x5, 0xff, 0x0, 0x6, 0x7ff, 0xd, 0x7, 0x3], [0x2e, 0x9, 0x1, 0x1d43, 0x5, 0x4f84, 0x7ff, 0x5, 0x4, 0x2b, 0x6, 0x81, 0x8, 0x5, 0xa, 0x1, 0x7fff, 0x7, 0x4, 0x1, 0x2acd684b, 0x102, 0x0, 0x80000000, 0x9, 0x4, 0x41, 0x7, 0x2, 0x4, 0x80, 0x6, 0xda, 0x200, 0x0, 0x6, 0x2, 0xa0000, 0x6a, 0x6, 0x8, 0x8, 0x5, 0xffffff2d, 0x4, 0xbe9f, 0x6, 0x2, 0x8cb3, 0x7, 0x400, 0x7, 0x10001, 0x1c0000, 0x8, 0xaa4, 0x38e4, 0x0, 0x5, 0x2, 0x1, 0x20, 0x6, 0x4]}, 0x45c) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 5m42.765866061s ago: executing program 38 (id=960): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x1, 0x2, 0x1ff, 0xb06}, 0x27, [0x1000, 0x10001, 0x80, 0x10, 0xc, 0x827, 0x0, 0x1, 0xcf1, 0x2, 0x0, 0x8, 0x6, 0x100, 0xc776, 0x7, 0x7, 0xc, 0x9, 0x7, 0xfffffffd, 0x4, 0x2, 0xa, 0xe, 0x1, 0x80000000, 0x4, 0x8, 0xb, 0x4, 0xa9, 0x956, 0x1, 0x88, 0x4, 0x7dfe, 0x7, 0xa, 0x0, 0x9de, 0x1, 0xf82d, 0x80000000, 0x7, 0x2, 0x7fff, 0x80, 0x40000000, 0x6, 0xb05, 0xc, 0x5, 0x5, 0x6, 0x4, 0x0, 0x3, 0x4, 0x9, 0x5, 0x6252, 0x2, 0x3fcc], [0x800, 0x96, 0x2fd1d58, 0x0, 0x401, 0xfff, 0x1, 0x8, 0x7, 0x80, 0xfff, 0x2f, 0x9, 0x64e, 0x10001, 0x0, 0xfffffbff, 0x6, 0x100, 0x4, 0x7fffffff, 0x1, 0x8001, 0x800, 0xd, 0x5, 0x1000, 0x8, 0x1, 0x9, 0x80000000, 0xc, 0x1, 0xfffffa93, 0xfa, 0x7, 0x9f9, 0x4, 0x1f, 0xb342, 0x2, 0x451f, 0x1, 0x605f, 0xb2, 0xd4e5, 0x3, 0x80000001, 0x1, 0x2, 0x7ff, 0x1ff, 0x6c, 0x7, 0x101, 0xca8, 0x0, 0x7fffffff, 0xfffffffe, 0xffffff81, 0x5, 0x9, 0x5, 0xff], [0xfffffff5, 0x4, 0x0, 0xdd, 0x6, 0x0, 0x80000349, 0x10000000, 0x89ef, 0xcb4, 0x4, 0x587a, 0x0, 0xf, 0x100, 0xa0000000, 0x0, 0x5, 0x4, 0x9, 0x6, 0x5, 0xcc, 0x7, 0x200, 0x8, 0x4, 0x6, 0x3, 0x10001, 0x7fff, 0x1, 0xfb, 0x2, 0x5, 0x1, 0x0, 0x1fd, 0x6, 0xf, 0x4, 0x2, 0x1000, 0xfa, 0x5, 0x2, 0x6, 0x0, 0x2, 0x3, 0x9, 0x5, 0x741, 0x3, 0x8, 0x5, 0xff, 0x0, 0x6, 0x7ff, 0xd, 0x7, 0x3], [0x2e, 0x9, 0x1, 0x1d43, 0x5, 0x4f84, 0x7ff, 0x5, 0x4, 0x2b, 0x6, 0x81, 0x8, 0x5, 0xa, 0x1, 0x7fff, 0x7, 0x4, 0x1, 0x2acd684b, 0x102, 0x0, 0x80000000, 0x9, 0x4, 0x41, 0x7, 0x2, 0x4, 0x80, 0x6, 0xda, 0x200, 0x0, 0x6, 0x2, 0xa0000, 0x6a, 0x6, 0x8, 0x8, 0x5, 0xffffff2d, 0x4, 0xbe9f, 0x6, 0x2, 0x8cb3, 0x7, 0x400, 0x7, 0x10001, 0x1c0000, 0x8, 0xaa4, 0x38e4, 0x0, 0x5, 0x2, 0x1, 0x20, 0x6, 0x4]}, 0x45c) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 8.753822321s ago: executing program 6 (id=2106): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f00000024c0)={[{@dioread_nolock}, {@debug}, {@noauto_da_alloc}, {@dax_always}, {@prjquota}, {@nombcache}, {@nodelalloc}, {@errors_remount}, {@auto_da_alloc}, {@test_dummy_encryption}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0xe2, 0x489, &(0x7f00000027c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = io_uring_setup(0x2c4c, &(0x7f00000000c0)={0x0, 0x2, 0x100, 0x0, 0x4}) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000a40)=r2, 0x1) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, &(0x7f0000000580)={""/32, 0x0, 0x0, 0xffffffffffffff2e, 0x0, 0xffffffffffffffff}) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 8.753350691s ago: executing program 9 (id=2107): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) read$FUSE(r0, &(0x7f000000cdc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000004940)="4f50356c9e70ce6dcbe3d22a41991ada3384a3cc61e92a72df663226dcad115a3308ae59bd26134ca5b1d27458f3aebf34acb004e78edccd1c3d66ebfda95d8369a12684acfd2a04e36c20ef64cbf1b5bbc16a9783fcf708a9b8b981d1439e1a70c847592b26218c9a35c8cbf385a246ac35fb857113366f18ebf2038f6f5fe538f19afed142f05dfa55e8e5ec4234f6bd050a4d3033bb36ec207606c74bdbb57dc854f6df4c8c9baa253c94555881384fe2f47514f5b07ec99616b751cfb680bc45603bd053c910f9cd9f7d954178f2385becf76f2acacd3a5f570f9ec36203fdd74b03259ce7df7c4c833708d24e1da50717cf88499739f009f6a0d0f9cfeee33134e807ff90cd8984a2f377c22595be32493ade61f85925cb5803dad77b642a067d357d05fd01e6af9a0b3c1d8e2f871bf2e5d082fb410ca5b5a8b67471a2024d8d8a8f54bb82fc7a858223aed1a741e89cd539823ff5417f0bdd5963502c243a126d3a9bbf66adf1631148a90693467a4d255260760389a5717c9b3c79a0057061c4cfe3ca8d9d5d179526090dad4ea4816f291bb8649ed07de9128e6881f581a7989c9533c7bb6186c1c4266f813ad201d0ac241d9dc7990092b0f59d11bd5d457f722ededd6a147bc22e11d28c48d80f5ed97b66eed8f974ad611c03c76420332deb2bdccf260c7182b5ce9aaef10bfad7241d285bf4beea9d3ffd4e5933c4048ca9a041dac8a712836fafe4988ec3849330c6e929f5a0520bfd21079f603b990986202c08f589c3017c10b087f8fdec4fc56d0f89c2b00bcd5d931daa4219e6efc054f60d0988a3ac98f81324d22b5909bfc1f4d1b7172b30e0ec3b21f776553a4507ef0bd813a94d76733e84b0c7067457650e9fcde01840bf5a04399cf4d40b4c66ac1bb55b1aca704afbae4db5744953acb0e6cb0448153f848c774f74282e6c541f9bd1bec0e1b5044423425f182b95949edc8074e257056241df49812c2cf7ceb0b8d28f65f317523b4a47b9e2b693a89ef7c95d180b318ef70b7ee2d6e0a0cad96043c1df61f09613c1cd6f6d6461a761c8ef9c1338cd918318774502da24b0b9d38030533ff6c0359d3b273a18815a1f0a71df5e6452252fa0ddeefe55e6f9d6e3f7941ee84d76143ffb4d32093351ed67674c9862c5df14ae5f430012ebad4d8bd546e8149facb0c2b15ae86f38588ee617ff2874a668e7f755061460094f8e7e56590ba3f30582fa5341b0339b3d6115d631178424f2d8698a2efd847a5567f54e67eb555d4d8a8b548edaa48d47a7b9c06b04d03ee1ecfdfbda40049d0e2eac6150866bc3102bcd5feb4a62b0ac49601adc9c19450530685d54cd53c654fa4bcee4862b010cf6875a97a77e8c6dd1395d440c003091f241baa97eb2995e363b54e1f23f143e3c45af005100fc582e7730c0abf1ef58170942740709f9946f1d29765ed85f3d13bdeb7816afff414d806d80c2033493d2f3fa80a7ad476037891feca18d7625b27779ec4cd8d14de8afdc6c428005513e795f2e7a1e3410201474d9cf4e315f8e05ba591b242f14094149bfe42812ee05e387b5e791107a32578e2a8297238a0075bbda9a4427f379841ea86508c5fba5e235ed4a3754c846569e9a329494d579d066777ec2f189de2aa55a3549e87bf7cda53b7e9af98355b04264189cc95205bf2955e4ffc692e0e6c48d816758ff322244b4268f69a0b72274c429128d8489e13064c925b9d5f3c82be62445860545927b2ea2f3e439888795780e7c4a2b3f3ff62ff2d25e4a44013f9df631c3a0b68bbad82ebe551bf4ff36f1a260f6347c59685ba09d9d9871ef910cce643ba01c5d3f17a50d7daffa2010d274da5570dd19acdd373b55e55701e638f8d31c6d31315a50cdeda2aaad2b71bccd321619120be8cc92dbc696d810b188119ddfb578054bbd343fd5e9e889719dffdae9488c410bc2ce68ec2f85a337ec8fd5bd522bde64b930813efdd670193d91b37fd93aa02f68f67e884130ada337fcf873a984d91467896a703e15b3718e6fd5f6993da9288dabb6f3876a6db06bd8be05b14a5bc63db5ee4f55103640cf30746cdafa8563f5e8c1cccbb58e538b484e0565ed140f2de8437a20ca422f173c829311919a2156d22f3b8bf349f299494c5e37283b1a373390e08df6a551c608ba42ee6e1577043adf6b9e7c0edbd20be866279cd9ae36af67f198e43fd31737cf70312776f4e695327b4fe957641cd3a46b48b198c32a8fd1998b20ace3d9780d1258b3e131ac51c946d022ddec1daebd8b2d225580efd68c7035b301860f6070daf273637e626c3380226a550a33a0346ebb3b87c2b26f15c923b9a490d97a05fb6fcaa5cab19101ce26adb3dc5bbd9604bd5299ceaa872a8ea956a48772852d5702ae3f322f8bb97e79805f7355b781c4fb7dc55e0f1fbc3125def8973302fb48052605366082dce1c8d92fdfa5d8f56f12bd2f73ae2c3c8a12215428861fdd247f36538c8ef0dacd594a709c656124fd8bdf36d69ff1cbb3903c35ae0a36129f64f65190fe37fa22c173ba32d22d61ba7411b3ca9d94a48022c0f0d305e5986cf008cc3e775b683ce5600f25f85dbed4b6c4a3a596da796b03d67ed072991ecfab88a8c7b5fced1bdd8c6049da0b3caec8e46eb9606ba6e53ad058cf8f7da4f107878ab0208c7324e125440d54749b10f64fb27b236feae37a427b287e0ef6a54cd5e864faedc4fb2125a0dd88ac96732ca025f5989e33ab7b521e6fa98ed3af16c83a6661864dc067b9072c980f64e2d008fafc676e60a26703f1fc7330a0c9503d88872d780bebb6c815e52608c04e74e48bbe66e1c0dab838f36c705957cfaab2ed98692db57ebac0c48b257e9386a8584aba15f86019e20cbcfe0b3b57be3b3407c48256e4531efdeca186c93bc3e9bfbc8f45ec864f32f7b38a63479a3bb4fa75a8b25f606f35b1147c1b53ebfd590418f926bad68807279027617af0d06651e5f977c615055f4dc91819bff755f8e6a2e0fb46dd7b1283de2652944d2b1cde5c72f43fd6456149ab2bda78e4cb8de135c160877e0b0820f95c4524e4cd386d44991055ea3accd2a698fb23793e57e49913f3cb86501bce08795695bfef260dd2d14761e404ce593e3b1e661a01d16b492a3cedf683736840178d08ea575534865c699bef830dbd0d259da79e5c05d7003af642412fa55b59ee5f2c032f1919af3c5067afe6876b154e29065d14224481971f94bc5ed45e48371053d69635e78b7a46cf76d999418011b58cff533c009316e33e87093117951fa4821241eaeef61d1122cd4e2962d6596259b7acf9e46d23d4efe9739189d99a9cf8776a34ad90a6e901872fd377c4f58886787baf9c2785ea437aa54195fbd34f2c5f5b4c4a76a018f5689feeccb6b153b34fc23cd0a8fa0699bff806521cb11172e4d4d45a1fad1cc8c4646b1846f1ba04f99a91db12da738ac1ee104ba3193119f325c600ab4f10e1e664dd7c17e285924487d394c7323ced471fd42728ceb9c25822885c1c6ab6b012d7a9b876958b2819e1a708afaacc537e6ac588e58c33934cea32ed3bfa27bb3d63554539e19bf69f30d03e0f47db84132a39a6dbbfddfdb673dd5cabe21d6d552317db8be0477536a69e2fe4f2e9a772dedc8a3ef34256565090c488c08fef2a3dd247fcbc2864d1862676ad5cfed2fd86871cce47b2ba28625ee67dd7518a6da3345614ff18307f20c27f68a69e4a1a6a3c8f76cf31df45b3b0b660aadbcf9698a32d36829c8aef481b09dabc8c9e449b96a2571af8eeef04bcb1785b596709f5aa1ace3804fc703ed9ec544667f350cb8bfb40a86caad45feb77d58aa1888f203cd963bcd9296feb0b68e0a695ed5cf8e7bca26a77d2bd61662f07bc721233a868805202469d8ee504be1d7cf135bc1bf7a215bbb96ff5514eeba1c0ffb68e4b3d6c20e1afadd2a3cecb002fc5ae0c59315dbf8f775ae5c63da31056a9c088e18477e2f925f7ff88df2786e8d014f0c98c58f218e931cd8cdb258c4d8ed82b7f9beab0db9ae0b35b2790ff7e02d11fcf992b365ce82b94eaa0d5b2fec4aeb984f29c6af84e10ce4aa6df7e9c6b0ee842027c8d2552efc6b4084ef9af751524b3acbca12c5c313381b443cd44e862d8c8b0394dda05aeccda371226ebdf5aed6efd6dfcba73b09ae8e92ad54d4b43db9b7f84b46b307c66a4ec69933e47ef22244250f1c82fe42683fc13fcbfcd1c2ed1b537adb2e83885bb368209f89cfe8d4bc59e6df61ec794fa310f290e56320b39fb843163752a726240236b3a45b59927333e94d0c0b30a862d61c6144ac0a59f96e08651fba2d299a37a1a1010ac12ead549404421bce2b95a05d54d44f0df5d08ac469cbc7e1988e4fc913d98e3eb9a8102ed7d40021274948acf58a10c43f1078076e36ee7cbe548638b273a40347415d20dd153885b6429af1c8e82d8d9f22bcd5b48f60484aca751c29c0ac031001e8d5dd49a889665e4ec41e257e8f3013eeab0e382b281c3463c035d3412a0ab0fadf5753ed735f250e56f24bedce1748accb4af749b12f8cf660127d7b9e710f19483cd9bb09d292355103188625a5fb4b81f22a87498d63a5dbdd78e64b4d2feecba4a3dd881a1c4103f9697e09a23ed1db866e40dcb51aba96b83766028b653cabc365fe5694b4f946ad32d9681252373e6017a9413f5fd02ec689dd9e1e179fa9d607b6a8ede028420b0fe6da5f9a678b3b717df1d48e862c2485f789947dd5baf8c3a4a641e460279827354fee33d97bea7ed36546160354bce0f2f58815e28622590418b99b1499250d5469a66d1d461852b384e99073906c64e0aba5d6a0dc7813ff58c63d32e3992b0fb89be5811a646056714718a7039cfbb82678eebeec54bc4350ea85446ba062e53e239d74509dea0d2c1d5c803e333d37761d311f5c402bf43e6b8d84d036d35c0fbe98d7eb9d5bc6165a5771d048647ad16061c55e57c53dbf64c1a08a2a639672d650b4cc6c0f90ab3b8b3ebfc1ff1844e9791ead72b167ef6b57b81f7b6c751fba73a0835edb2c68a55b5e2d2b2c350bac375153c15e6a1180f09f9c2b984ccab971926ad85980026c4610b7dbcae8bb86b98136ed27facd94e571270187a6bb194cc0ebf24b7acada441b23dbe380c7c3221d1677e5af7bc81c3264a958fb5ceee61e4795dc863da2f13cc59a2fce73070af121983410df1a99fdd864bb62d67c30ab0a98300597d7160646bd2759b950bc0468fe74918dca8fc59c9dbdcff736f0f61d234328f1b560bdf6df54663c7f80be5175d67fc37eb85e491650cac6a8da06d3dbb0743ef8d0a9ae90d2d67c11a77ea52545d53c64991b9005b6e3aae54f1cc39672ed59f3d881d65d6b9da133c1201c105972efd039d2210bafbd2f9d964459a4bc72877c51b7ca9ce6fae62ec3bbdd6d09e4fefaeaac5145b141eb06e7c9537e58a7e78526dc7d0511e399ea983d471eb5e19a1ebd5a0a1149d48afa688507952df4afd85f8c296e678a221055e89451e0920f7fd38ac866a54b932a0a608d3e2126dedba84af8fe86f719647e9fe44f4c85641dcb3347c580fa2e1d6e863ca30625f56da0b6125e6c35075451eb93ce3ce6478c474dae7df27737fd2a37fed7c1d9d793cde4728d80a3480d19771876375be29cc9f9d30433be1c999cc6d6b4295b5963f248baae070c609d49a68ef7db094a7c3bb442c9908b7251a2b1d3058bc71c450bacb88bbded6c99943b618fe9d3c7df4834323942a9b13ea821ce062d85904c5078156e3325da50bce2848598eade14f121ee9de8f6b98ef6bf592933103f567cbaf4b5b082b24ccc461118bc081ca925a0f6d0ab84b9eaaf64a956af511d254d6d1c09299ece040905f7c8fd1d6007907ef795d38744a5b0d9476f7e59476addf0b5f4abb0f7da7b5e21eb9842a7df6b4466913b41a08b06e9684ddf5ef1ba3e730f12be4c80d79ea573549dd3badaded7b7a9f5274e44154ddddf3907c08b977b19820eba4a5a0a40bfd4773d91f3c6329ddb88dd923e2b611cf4fc64fed3c98f9402d2a6c5179ace6f0ac50875e361cabd6610dd789138444ebefd72d0608272716a2359dc3e660ba047970991ac1aa83a665bb5245d9fb16eb4a8db99389d3f1386af7f2931fd09979475f0f4489aa99e6628f9cea46790be34f9d7e3aeceafc2b174650850fdabd4af0e6f84c8620cb0bba96b67f1599fec9406060be53b0c0e626e5cc88b0abb74f2c99f3157076e68cbc6593c544862aaa43b8489c1bf6b0bee80c9a608619e4641447d5422172f46774686b7efa3cedc8a837fc7debbe8598874c52c48c85df82e2f796daf04489458e74936e95ca63aa1594dac0a6708462f342747a43ca99fce71488794166fd1cedda1d444ca877ee10b56194a3ebf2114c2924210de0fb0698a6082ba171145150cf0c433adc7617520ca7626a9842929ab1831da8ccc128ba534ff27ae20f063d16b46f67654e372217e9d5f908d35cb1993b23dd4a83796009b68533270434744bc18b608c3bdc0ffcf64f691455795628987185ae688994e34541f630179533cf6b6ab12d0a150761aa490652a987e9906050c3ccb1fc677dde544296d35410c2f8b70bcc8b1927869db81cf1cdcabf190a9e946dce8439f09a98ae39e08f4d54a489cb7bab7795173c3c0dd0be506f9f8d38425b4e78882a028fd8fb2b9051d3eafcbad61a4a78f4caeab1c2041cdf7b55d3fff546f37beb9454c795e9e19a678cd087d74191e27c8a35584dc548d8fc57c5f92ec630723b335848ea5405c56631d58fa365d9fb88c2ab13d262403518dd862e9111bff48db9554fe512e2e40f96c47186aab5b9365c09692c7b2ff2e1bc5514726396abfc36263922e58be98abd1ddaef1ad23fb0f6f31e2c67315fe19d3a38477ce82d965b2c6c14ebb6872eb2acf6ca9a5860c2ea4d691d46b9cbd19352cb6b328486a07c6bf38af80e423cd6394bd9b7fc892011672833ce3d4c02561887a546d27837ca2662b5d72f595c035018a0511e22b72b8682ab65f8d59edab36389c69b5d8e64c35dd9dc78e6261fa3d141258ed9e9e8553f98e152751d5c9ba8712647e46b093a61984fc08172419a5a2aa08aacc487af4a7854d2ed34c812e96c3c56d8b7beaca74db439b1447b5102e6f66f686fb91e16cd82dc52182bbe5a6f2648d09163b3ef9c17f1b4c9867351913b2653cf4e60c5d44706245989da8f0a8392c941af9d7067496809102608fe8b60734b0c90da122c3432b40eaccafed5f5b37948dc9764337eb7016c24d717ae5ecff4d4f8c5c4aea686680a4b5a79b7f254acb0b46530782484cf8041fab719a3549c70767574c7e6aaa87e60b384ce53180540a6448e2c6743890d8eb6a5c38255cf6f86343bb82e2e57f2cd89ff8029e60267f821b7994199c741098be16e9fcdfd08d76a150761c6094776e270833d8d0cb83d2aeb13ecf2146dd46768338b4ecd8124252c2e620fd98b11d50728aed97a475c36e92b07a12792be948e95e3d26d15f4cc7c669d23d93f7cbead515f7f996afe9119415ed3b03d15e59474ba9e3c9a7c1476f3b8f66c099d85689785b712e82316f5afb6e16db12911b2d19b650e547608ea35af216561d61f36c5bcd3af7f64d9c56732f999e6e33c6e63aef13b3cf3ef69c773b4d0def25269296d535dae2948abd7918b95ffcfbce0236dac8b08b91d91aba716668bd5556d1aaf4e50d296af985a52cf35669b3aa29ea192c9fb34c471f65ec7242648c6fe22abafeb2b9bf349276eb55d0a9ec35399d98aa8ecb5613ffe530c6a5b93d4f713f3256e7a74cbf40e15a402df80c2bc287fc7ad1d1f665dba5139f56a865c0dae06048698a886da045ebb6bdddc29755947d090a6cddfe14f23dc400245211d55314160d2d852a659de834af8e24effd2e0396982c03e29fb94d3f10cd8bd57bbbb9e0945d5deacc5b33969aea3f7af0821327b9a976e8e4a82a41635c4137dee27741ccd001e559f6f6165e0b2d8062d352442689e7aa747438412c4a43dab94ac7f839eefe38c81b8277e565143e4a550c122ab0eef1cf3ddb6e41fd95ec763b636ed3aa62a85da14b1278d93d4e0ce8efb5ae1ada9dccc8c07dee130991098521bdba59399f7f0ad5f3349fe60745cf19f84e4f060a1efadd7c0a864177b46ee853a5d51e6da6382228cab564aee9a688f96e4f0e992dbb9be22629204910f4185085461ae92c5fdda4683212b1f8f03d6730dcce43f0932b6ad3866dbaa9e40493889c7857822e8ea1d498e2690bd232e4a383dee59071fe7cbc0db53d23d60ecf1a7adab5116eda840c57440f1e20989202d6b010d0fd58dc57a83ab1f5ee19c79d7d0819995ebaa36d4c952a861c0958911997d84f2c249a0e29f602966adce8f41f9b8bc051bf4c127aa39b26632e81a00b365d6447725311bdcb9db6a5d62aa46c2049fd2d54b670e308c2f62c9c58a6343905f34fb7a12fdadca999ca13e7bbfba72100ec625eec11d9ffdbf898d57ce95fd606aa57e3d259c6889e2af4e4ead2d9c38327b42d68f65453be8f2798df47ae392817ae9ae6200c3659ee9b8622c948943e5aaee24be9d35a333a20a803c18d3a4f18c22018f4a1f4dca3fef010f00150badbf90c04bfcba748329e835eeeb0783cc2f5246b01e853a84e391a9bf0332fd6fac22c64b83987b51040d09110d0b66a24fe213c72281eef8e79021c9b445056bca406ba1a4f805672f724247b7b2d0bc712cac7bf6e7a8d9a3206762633fd663760c4183309e3209a017514f7f23b350d80c009ae501f46e053b2eefde5f2b8a7ee1d3d4128cc1fd9cd8fc42b5504e2176eb802b21ae7a57d6e6928b82982fcf96615bc4d5b3f8cec1e4a6193961ba5493d9e992ffc933aa3e0d2c47b1217e199223d48e69800ed9a4d2fa5d9d4a8f16e86062b0ee2ca9f11fdfb4331effbda733a1764136e192f49a439910d67056cfed89d05558adcdf54e7eb014d510c35250bf6bffefbf7c3f6ac3d4f26fa205b8857f38256378006209644587d4c56a06eebbfe9cfb0d20a214797699a8960db62dcf84595014a8bcd60d626bbfa0d0647d966635f24111f2ce5a9dedadf34f38217879d27c4e9745b068fb0acc30d4b9a78f753aa286a4cb08ee58a451bc47f64b41cd1cd602db92f691befefbd139a1f919d275dad6e4fef7266999f1ec6f0018435b578032eba39a15b0cdc34ee53acbacbf4a7eca103bec5ff72b08068bf2183643fa24ff1aa69d5125a0d1f666d648550193ccb22f6692590ddfac8866f63fc33eb14844ea6b3b4e18bc613c1d6561506f933d1e8f72b7aa43f7c47e34b921459e230ccf7e333215025482e67f1df4db4aedf4566d5783a64c4511367b69d08ee5076878a22c8db871018ea8d581fb5c0f9e6a9e61f2dc9758c06a6647e4f09c1eff6061ab095b76a60a22ec7cb8a5528d218ef3484ac7574a7b3f63915d867e26b155400b50e1cf6a9d03b8a10ec8e2c4768cf1d2c02de656e7114ffc030ced3f94c0dd0b875cb1ad5cd64e2cf318118d50b45254e0a000a2cb09627489840ce0f4f7c9cecb8e19f01ddff7573a4183e4ff4f85991a15dd5c677f940b57667728b53126a4b45b53c25b6bdf6902ff5ab974995709babdeea1a5c484463fe349efe694c02035a2c149eb3fd813e4d71398503d0a4286443891cd0caf5d9450e27c9142b77565594935c590f44eca1a7d0a74d7059e4017d92e3cb53d3a13f6de6d4ab62800ab64afedfe678f500d8ca51c4e88765247fe88160e4c1ebebee15d0dfdcb138f81d290cb77c0270d7a8666de54e0f255454df5877c7b78bc694175a7e6cf5ce997c9776c208b03b6e11df17d1570d17f7614b5c1da400871268e010727ee8c54db25736d2bac7c56eabf0a8a3aa1e1801f00d24b56f2e30559c39d6bdd655c0e2bed036b616bdac6f11feb41d33608bb9d262c069e102e3079b2ba55614ee7ca498311e72897544db3e6dcb2cb3cd6f1ada2b4f71318b2d5b443cc76907774eaff4c7bed9c77fe264058b5becabc79bf185c0b5a3ad7aed92c28326a188328aedc9cf405541cf2ea2941102cfa5b52f261c550753ecc1ce767015e782f74f2ab3b913d7aff321c138368f77239fce68e9205718f9a87cd8590d1ca56659373e18d951744774b69831f0e51f04a1c5a86462b168890f6f5e12fc0248aeb245f26885a504a0962fb95b1448c629c3c3cb36d3d15bd7d56076c867002f9e58e12fe0d2f86b7508215896c839ea071c5507f30737e34d791f4614687dd0aea9c4debdc95a7dd6d436e9baaac51bffad1ada7d683387eabc5fd384c70469c971342599c6c90c90a57b23df95c7730e25220a8f830d9f9f978945859a1267072a8475d4e5e5011ce6144a6eec6d01d2be2cc558bffee47f7feeb87aa4c38aab5938b444e314c2939322fe81aaf0d32ba9d1c43c4b9f85c84e9284a50a169c65e2100064eb587ace01e361ee6c1bad211867dac692932e23e84795bf6cc58dd06fa1c1c31544e5dce729bb25ca3691b9470d5fa26c627e55127a9fdd4028ae2320192c0df9061db198445c0fcadca9862f0c29f3e62898c00479d0e8c8fb1d619c53ce8181d2b14240da714f82c8c50815ce059fc954595036e41d36bca909b6c8555d152c13ef5f4ff9f6fe7ac6632ebdcf19238d11c2359e6ffd7dd2053378e57ba44704eef580aae7cdf553eed5b0c6892b86e522e6a0912c8d9ccfb639e1f6ea7fccd6c9d04a676ce7e17642b61125329665e21aaa704b2679d698b32ae8388f1f7438e6b50b3d1c5dda7958e0be0be4e286a7a37ea3a6863a99bd4056e80a16866c6d6a121f4d936db302d5335033412ada903ad9bc492f3eb61b3384a4a86717df9e517cf593caab9b4ac8b229a80b934783cae88357c4cc7da8f0d819ebd1eb2961acb7b014411d23ee42e853e85f4f3863005a0a8356cacc15a26f90c549cfd307bdc88bf1c5a21778301ebd20054cfed89acc59cf29237e6c382f2e4f43e6eef14dabce06df261e2bcbadab8c60b9bfc684aceece9e1cf2f0b3751564a037aed891c2686547cb01c6982f073cb0b2882860b6daf111a034f5738d3ea1f67a0e7f4097eec1f9c355c6a9cd5646feed86f4ba075969ad71406f56e16fd5f3e05fc05fe18ea724d114aba4a2d7f312fc77b7b0d1616b00a124ded31251f2218eb95fb444241eca65c051205e7c1a04a6096a0cf9b9a8831907d569ec6de4a92610cf9147bfc0838e1b232d1642d16dcfd7de72c0ecd45c45506ec5641b526c40866c465e8bb64656677e8c1c81fbb00e26b8f775065298e6274a8ab8ca63e8c43a90edce5bede53526e7c2d37808a010627635e1b0d397850edcf6108e5ef1d85233be77b3838a4efda50de1662b9ee643416f92be4896bc6636c9eeddc4a87eb2b5e44635331aadd7cf9a49a4218e941dc76151c6d2363083fcd3f9cb5afb32345ad9b307a5625122fdca8b930cb7864362d890ded2df208ffec06085ab9404199ae419475360abec16d28", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x3c}}) syz_fuse_handle_req(r0, &(0x7f0000002780)="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", 0x2000, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)={0x20, 0x0, 0x9, {0x80000001, 0x0, 0x3, 0xfff}}, 0x0}) ioctl$FS_IOC_RESVSP(r1, 0x40086602, &(0x7f0000002740)={0x0, 0xdaff}) 6.389382934s ago: executing program 6 (id=2109): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_disconnect(r0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0x9, 0x4, &(0x7f0000000100)={0x16, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 6.26785713s ago: executing program 9 (id=2110): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x400, @loopback, 0x7}, 0x1c) listen(r0, 0xb) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x19, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r2, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 5.879436898s ago: executing program 9 (id=2112): r0 = eventfd2(0xfffffe01, 0x80001) read(r0, &(0x7f0000000380)=""/82, 0x52) 5.654017249s ago: executing program 9 (id=2113): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = syz_open_dev$loop(0x0, 0x3, 0x189083) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x1000, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) futex(0x0, 0x5, 0x10000, 0x0, 0x0, 0x3000000) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0x3, 0x9032, 0xffffffffffffffff, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) 4.031878437s ago: executing program 7 (id=2117): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c00000002060300"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="40000000030601010000006800000000020000080500010007"], 0x40}, 0x1, 0x0, 0x0, 0x2000c045}, 0x8000) 3.799191388s ago: executing program 9 (id=2118): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000001c0)={0x1d, r3, 0x0, {0x2, 0xff, 0x6}}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r2, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000840)=[{0x0}], 0x1}}], 0x1, 0x20040891) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r0, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) 3.692339444s ago: executing program 7 (id=2119): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n'], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) 3.447860665s ago: executing program 7 (id=2120): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x1, r1}) 3.13186094s ago: executing program 7 (id=2123): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1e, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x8, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 2.91569407s ago: executing program 7 (id=2125): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000845, &(0x7f0000000000)={0xa, 0x4e22, 0x8, @remote, 0x6}, 0x1c) getsockopt$inet6_buf(r4, 0x29, 0x18, 0x0, &(0x7f0000000040)) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2450100140000fb727affa3f9d64600000029907800000000ffffffffb9e28c6a534377fa69774f78dc08ad38829b10638f777d8d26a58288f6513b4485b5653af705955e054433e53b0f94bc663f98deb244dcc384fa7e32b8c4ec45aa8ffede6e170ebe2372b4a1414f9e399c62919b26f6b1b37974bb8923f5d4643792e8adcc7221e07fe40dd3770012a24be8f1f8e526"], 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x25, 0x2, 0x8}, {0x6, 0x0, 0x6, 0x5}]}, 0x10) write(r5, &(0x7f0000000000), 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) syz_emit_ethernet(0xbe, 0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$int_in(r6, 0x5452, 0x0) sendfile(r7, 0xffffffffffffffff, 0x0, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 2.868735173s ago: executing program 6 (id=2126): syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b00010000000009046b"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) 2.751910049s ago: executing program 1 (id=2127): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000200000000050005000000"], 0x80}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) close(r1) 1.977271766s ago: executing program 7 (id=2128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x20008040) 1.829131442s ago: executing program 1 (id=2129): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n'], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) 1.547822026s ago: executing program 1 (id=2130): write$eventfd(0xffffffffffffffff, &(0x7f0000000140)=0xffffffff004001fe, 0x8) read(0xffffffffffffffff, &(0x7f0000000380)=""/82, 0x52) 1.370090915s ago: executing program 1 (id=2131): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x5, 0x1, 0x6}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @loopback, 0x8}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xe4776000) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x0, 0x0, 0x800, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0) 1.318785537s ago: executing program 6 (id=2132): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r1 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40011) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000100)) 1.063560499s ago: executing program 6 (id=2133): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f00000024c0)={[{@dioread_nolock}, {@debug}, {@noauto_da_alloc}, {@dax_always}, {@prjquota}, {@nombcache}, {@nodelalloc}, {@errors_remount}, {@auto_da_alloc}, {@test_dummy_encryption}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0xe2, 0x489, &(0x7f00000027c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = io_uring_setup(0x2c4c, &(0x7f00000000c0)={0x0, 0x2, 0x100, 0x0, 0x4}) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000a40)=r2, 0x1) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, &(0x7f0000000580)={""/32, 0x0, 0x0, 0xffffffffffffff2e, 0x0, 0xffffffffffffffff}) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 350.680913ms ago: executing program 6 (id=2134): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1e, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x8, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 222.420879ms ago: executing program 9 (id=2135): ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000000)={{0x2, 0x4e23, @loopback}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x6, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x38}}, 'caif0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff000000070581024000000705020240000007058303"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/ttyUSB0\x00', 0x24c02, 0x143) preadv(0xffffffffffffffff, 0x0, 0x0, 0x15f, 0x0) 159.030522ms ago: executing program 1 (id=2136): writev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7008070000000000000000008000f0fffeffe809000000ffd9dd000000080001000d0808004149224e06", 0x55}], 0x1) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) 0s ago: executing program 1 (id=2137): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000845, &(0x7f0000000000)={0xa, 0x4e22, 0x8, @remote, 0x6}, 0x1c) getsockopt$inet6_buf(r4, 0x29, 0x18, 0x0, &(0x7f0000000040)) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2450100140000fb727affa3f9d64600000029907800000000ffffffffb9e28c6a534377fa69774f78dc08ad38829b10638f777d8d26a58288f6513b4485b5653af705955e054433e53b0f94bc663f98deb244dcc384fa7e32b8c4ec45aa8ffede6e170ebe2372b4a1414f9e399c62919b26f6b1b37974bb8923f5d4643792e8adcc7221e07fe40dd3770012a24be8f1f8e526"], 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x25, 0x2, 0x8}, {0x6, 0x0, 0x6, 0x5}]}, 0x10) write(r5, &(0x7f0000000000), 0x0) waitid(0x2, r2, &(0x7f00000000c0), 0x8, &(0x7f0000000200)) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) syz_emit_ethernet(0xbe, 0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$int_in(r6, 0x5452, 0x0) sendfile(r7, 0xffffffffffffffff, 0x0, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): 00-0000-0008-000000000000. [ 369.043763][ T9084] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 369.212675][ T5771] Bluetooth: hci2: command tx timeout [ 372.050456][ T9084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.025791][ T9206] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 373.144435][ T59] hsr_slave_0: left promiscuous mode [ 373.189496][ T59] hsr_slave_1: left promiscuous mode [ 373.270513][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.294703][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.343121][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.350573][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.426560][ T59] bridge_slave_1: left allmulticast mode [ 373.432255][ T59] bridge_slave_1: left promiscuous mode [ 373.445732][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.504969][ T59] bridge_slave_0: left allmulticast mode [ 373.510669][ T59] bridge_slave_0: left promiscuous mode [ 373.522320][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.596967][ T59] veth1_macvtap: left promiscuous mode [ 373.604933][ T59] veth0_macvtap: left promiscuous mode [ 373.610596][ T59] veth1_vlan: left promiscuous mode [ 373.620877][ T59] veth0_vlan: left promiscuous mode [ 377.504214][ T59] team0 (unregistering): Port device team_slave_1 removed [ 377.729540][ T59] team0 (unregistering): Port device team_slave_0 removed [ 377.958804][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.952757][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.959079][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.965489][ T5781] Bluetooth: hci6: command 0x0406 tx timeout [ 379.004116][ T9237] xt_hashlimit: size too large, truncated to 1048576 [ 379.095920][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.023483][ T7977] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 380.330945][ T7977] usb 9-1: unable to get BOS descriptor or descriptor too short [ 380.343640][ T7977] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 380.418207][ T7977] usb 9-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 380.447671][ T7977] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.489210][ T7977] usb 9-1: Product: syz [ 380.519963][ T7977] usb 9-1: Manufacturer: syz [ 380.541079][ T7977] usb 9-1: SerialNumber: syz [ 380.863368][ T7977] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 380.918182][ T59] bond0 (unregistering): Released all slaves [ 381.053160][ T5771] Bluetooth: hci0: command 0x0406 tx timeout [ 381.414428][ T9084] veth0_vlan: entered promiscuous mode [ 381.482934][ T7977] usb 9-1: invalid uac2 rates [ 381.487777][ T7977] usb 9-1: invalid uac2 rates [ 381.533681][ T9084] veth1_vlan: entered promiscuous mode [ 381.659080][ T9084] veth0_macvtap: entered promiscuous mode [ 381.688158][ T7977] usb 9-1: failed to enable PITCH for EP 0x82 [ 381.726264][ T7977] usb 9-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 381.732411][ T9084] veth1_macvtap: entered promiscuous mode [ 381.778617][ T7977] usb 9-1: clock source 0 is not valid, cannot use [ 381.810022][ T7977] usb 9-1: 2:1: cannot get freq (v2/v3): err -71 [ 381.817644][ T9084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.817665][ T9084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.817677][ T9084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.817690][ T9084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.817700][ T9084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.817713][ T9084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.820451][ T9084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.938038][ T9084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.950892][ T9084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.954029][ T7977] usb 9-1: 2:1: cannot set freq 875837238 (v2/v3): err -71 [ 381.968002][ T9084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.968020][ T9084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.995057][ T9084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.019070][ T9084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.038029][ T9084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.086458][ T9084] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.129556][ T9084] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.143484][ T9084] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.152218][ T9084] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.304164][ T7977] usb 9-1: USB disconnect, device number 2 [ 382.438442][ T9253] udevd[9253]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 382.708608][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.746213][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.821861][ T3469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.731208][ T3469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.334259][ T9280] loop9: detected capacity change from 0 to 1024 [ 385.574011][ T9280] EXT4-fs: test_dummy_encryption requires encrypt feature [ 385.727784][ T9261] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 386.124026][ T27] audit: type=1326 audit(1789509458.876:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9290 comm="syz.9.908" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5beb39e159 code=0x7ffc0000 [ 386.244863][ T27] audit: type=1326 audit(1789509458.876:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9290 comm="syz.9.908" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5beb39e159 code=0x7ffc0000 [ 386.475159][ T27] audit: type=1326 audit(1789509458.876:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9290 comm="syz.9.908" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f5beb39e159 code=0x7ffc0000 [ 386.619582][ T9296] loop8: detected capacity change from 0 to 128 [ 386.622575][ T27] audit: type=1326 audit(1789509458.876:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9290 comm="syz.9.908" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5beb39e159 code=0x7ffc0000 [ 386.753870][ T27] audit: type=1326 audit(1789509458.876:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9290 comm="syz.9.908" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5beb39e159 code=0x7ffc0000 [ 386.822446][ T9296] EXT4-fs error (device loop8): __ext4_fill_super:5517: inode #2: comm syz.8.909: iget: checksum invalid [ 386.869457][ T27] audit: type=1326 audit(1789509458.876:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9290 comm="syz.9.908" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5beb39e159 code=0x7ffc0000 [ 386.952652][ T9296] EXT4-fs (loop8): get root inode failed [ 387.030616][ T9296] EXT4-fs (loop8): mount failed [ 387.071421][ T27] audit: type=1326 audit(1789509458.886:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9290 comm="syz.9.908" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5beb39e159 code=0x7ffc0000 [ 387.149409][ T27] audit: type=1326 audit(1789509458.926:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9290 comm="syz.9.908" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f5beb39e159 code=0x7ffc0000 [ 387.204322][ T9307] loop9: detected capacity change from 0 to 512 [ 387.250295][ T9307] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 387.261964][ T27] audit: type=1326 audit(1789509458.926:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9290 comm="syz.9.908" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5beb39e159 code=0x7ffc0000 [ 387.316974][ T9307] EXT4-fs (loop9): Test dummy encryption mode enabled [ 387.342705][ T9307] EXT4-fs (loop9): Cannot use DAX on a filesystem that may contain inline data [ 387.364794][ T27] audit: type=1326 audit(1789509458.996:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9290 comm="syz.9.908" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5beb39e159 code=0x7ffc0000 [ 389.200024][ T9331] loop8: detected capacity change from 0 to 16 [ 389.801133][ T9331] erofs: (device loop8): mounted with root inode @ nid 36. [ 390.677504][ T9344] loop9: detected capacity change from 0 to 2048 [ 390.748175][ T9344] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.864632][ T9344] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 390.935778][ T9344] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 390.969282][ T9344] EXT4-fs (loop9): This should not happen!! Data will be lost [ 390.969282][ T9344] [ 390.996145][ T9344] EXT4-fs (loop9): Total free blocks count 0 [ 391.011071][ T9344] EXT4-fs (loop9): Free/Dirty block details [ 391.037515][ T9344] EXT4-fs (loop9): free_blocks=66060288 [ 391.055643][ T9344] EXT4-fs (loop9): dirty_blocks=16 [ 391.073004][ T9344] EXT4-fs (loop9): Block reservation details [ 391.086640][ T9344] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 391.669703][ T59] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 394.102538][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 396.512781][ T5827] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 396.713783][ T5827] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 396.744279][ T5827] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 396.773064][ T5827] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 396.830256][ T5827] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26217, setting to 1024 [ 396.861922][ T5827] usb 10-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 396.883431][ T5827] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.915634][ T9419] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 396.941633][ T9419] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 396.968993][ T9419] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 397.000877][ T5827] pl2303 10-1:1.0: pl2303 converter detected [ 397.047852][ T5827] usb 10-1: pl2303 converter now attached to ttyUSB0 [ 397.463318][ T9419] pl2303 10-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 397.495691][ T9419] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 397.517013][ T9419] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 397.541439][ T9419] pl2303 10-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 397.567709][ T9419] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 397.641083][ T9446] loop8: detected capacity change from 0 to 4096 [ 397.721020][ T9446] EXT4-fs: inline encryption not supported [ 397.847041][ T9446] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 397.922247][ T9446] EXT4-fs (loop8): Test dummy encryption mode enabled [ 397.961257][ T9419] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 398.023057][ T9446] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=204ec118, mo2=0002] [ 398.049421][ T9419] pl2303 ttyUSB0: error sending break = -32 [ 398.124730][ T9446] System zones: 0-5 [ 398.177751][ T9446] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.426858][ T5781] Bluetooth: hci2: command tx timeout [ 398.445248][ T5827] usb 10-1: USB disconnect, device number 2 [ 398.510599][ T5827] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 398.549961][ T5827] pl2303 10-1:1.0: device disconnected [ 398.888000][ T9446] fscrypt (loop8): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 399.077294][ T8251] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.561335][ T9607] loop8: detected capacity change from 0 to 2048 [ 407.600851][ T9607] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 407.613972][ T9607] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 407.622481][ T9607] UDF-fs: Scanning with blocksize 512 failed [ 407.677476][ T9607] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 407.996528][ T9614] loop6: detected capacity change from 0 to 128 [ 408.224113][ T9614] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 408.313227][ T9614] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 408.518559][ T9635] loop9: detected capacity change from 0 to 128 [ 408.629946][ T7909] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 408.632624][ T9635] EXT4-fs error (device loop9): __ext4_fill_super:5517: inode #2: comm syz.9.945: iget: checksum invalid [ 408.715868][ T9635] EXT4-fs (loop9): get root inode failed [ 408.721569][ T9635] EXT4-fs (loop9): mount failed [ 412.129724][ T5781] Bluetooth: Wrong link type (-22) [ 413.352782][ T5807] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 413.577583][ T5807] usb 10-1: unable to get BOS descriptor or descriptor too short [ 413.599216][ T5807] usb 10-1: config 127 has an invalid interface number: 106 but max is 0 [ 413.612834][ T5807] usb 10-1: config 127 has no interface number 0 [ 413.632569][ T5807] usb 10-1: config 127 interface 106 altsetting 8 endpoint 0xF has invalid maxpacket 128, setting to 8 [ 413.690037][ T5807] usb 10-1: config 127 interface 106 has no altsetting 0 [ 413.711716][ T5807] usb 10-1: string descriptor 0 read error: -22 [ 413.729610][ T5807] usb 10-1: New USB device found, idVendor=0403, idProduct=e80a, bcdDevice= 0.b8 [ 413.752126][ T5807] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.797994][ T5807] ftdi_sio 10-1:127.106: FTDI USB Serial Device converter detected [ 413.837840][ T5807] usb 10-1: Detected SIO [ 413.865928][ T5807] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 413.947681][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 413.947786][ T27] audit: type=1326 audit(1789509486.766:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9700 comm="syz.8.943" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f120d19e159 code=0x7fc00000 [ 414.011818][ T5807] usb 10-1: USB disconnect, device number 3 [ 414.047464][ T27] audit: type=1326 audit(1789509486.786:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9700 comm="syz.8.943" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f120d19e159 code=0x7fc00000 [ 414.104103][ T5807] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 414.151553][ T5807] ftdi_sio 10-1:127.106: device disconnected [ 414.198376][ T27] audit: type=1326 audit(1789509486.796:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9700 comm="syz.8.943" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f120d19e159 code=0x7fc00000 [ 415.114907][ T9725] loop9: detected capacity change from 0 to 2048 [ 415.182110][ T9725] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 415.349250][ T27] audit: type=1800 audit(1789509488.166:141): pid=9725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.959" name="(" dev="loop9" ino=1367 res=0 errno=0 [ 416.574352][ T5781] Bluetooth: hci1: command 0x0406 tx timeout [ 418.398571][ T9798] usb usb7: usbfs: process 9798 (syz.9.963) did not claim interface 0 before use [ 423.891918][ T9895] loop9: detected capacity change from 0 to 256 [ 423.963586][ T9895] exFAT-fs (loop9): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 425.602650][ T7977] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 425.812621][ T7977] usb 9-1: Using ep0 maxpacket: 16 [ 425.834306][ T7977] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.897514][ T7977] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.958733][ T7977] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 427.262659][ T7977] usb 9-1: config 0 interface 0 has no altsetting 0 [ 427.292625][ T7977] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 427.342555][ T7977] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.393780][ T7977] usb 9-1: config 0 descriptor?? [ 427.696219][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 427.882780][ T7977] hid (null): unknown global tag 0xe [ 427.910375][ T7977] hid (null): bogus close delimiter [ 428.052937][ T7977] usb 9-1: USB disconnect, device number 3 [ 428.425545][ T9977] mmap: syz.7.984 (9977) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 432.609316][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 432.624514][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 432.632321][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 432.641213][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 432.649102][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 432.656650][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 433.308469][T10030] chnl_net:caif_netlink_parms(): no params data found [ 433.555707][T10030] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.578538][T10030] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.596524][T10030] bridge_slave_0: entered allmulticast mode [ 433.624352][T10030] bridge_slave_0: entered promiscuous mode [ 433.653938][T10030] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.661226][T10030] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.674272][T10030] bridge_slave_1: entered allmulticast mode [ 433.687479][T10030] bridge_slave_1: entered promiscuous mode [ 433.787944][T10030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.821992][T10030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.938442][T10030] team0: Port device team_slave_0 added [ 433.966979][T10030] team0: Port device team_slave_1 added [ 434.060834][T10030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.080264][T10030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.276416][T10030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.284882][ T5781] Bluetooth: hci3: command tx timeout [ 435.343914][T10030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.350896][T10030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.378046][T10030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.535715][T10030] hsr_slave_0: entered promiscuous mode [ 435.623057][T10030] hsr_slave_1: entered promiscuous mode [ 435.648552][T10030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 435.669354][T10030] Cannot create hsr debugfs directory [ 437.303427][ T5781] Bluetooth: hci3: command tx timeout [ 437.942911][ T8251] bond0: (slave syz_tun): Releasing backup interface [ 438.576895][ T1318] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.848117][ T5781] Bluetooth: hci6: unexpected event 0x08 length: 103 > 4 [ 440.024390][ T5771] Bluetooth: hci3: command tx timeout [ 440.085765][ T1318] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.099860][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.106528][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.477184][T10139] loop6: detected capacity change from 0 to 1024 [ 440.515384][T10139] EXT4-fs: Ignoring removed nobh option [ 440.531279][T10139] EXT4-fs: Ignoring removed bh option [ 440.561344][T10139] EXT4-fs (loop6): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 440.633521][T10139] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 440.661940][ T1318] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.663870][T10139] System zones: [ 440.702077][T10135] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 440.732870][T10139] 0-1, 3-12 [ 440.746511][T10139] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.854947][ T1318] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.893906][ T5771] Bluetooth: hci6: command 0x0406 tx timeout [ 441.219801][T10030] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 441.264652][T10030] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 441.314695][T10030] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 441.361073][T10030] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 441.416767][ T7909] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.766376][T10161] loop6: detected capacity change from 0 to 2048 [ 441.824192][T10161] EXT4-fs error (device loop6): ext4_ext_check_inode:532: inode #2: comm syz.6.1006: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5) [ 441.917796][T10161] EXT4-fs (loop6): get root inode failed [ 441.952185][T10161] EXT4-fs (loop6): mount failed [ 443.221360][ T5781] Bluetooth: hci3: command tx timeout [ 443.435739][T10030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.570326][T10030] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.583636][T10182] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1011'. [ 444.457475][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.464670][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.522135][ T5781] Bluetooth: hci6: unexpected event for opcode 0x0404 [ 444.725159][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.732329][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.544611][T10204] loop6: detected capacity change from 0 to 4096 [ 445.640593][T10204] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.896543][ T7909] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.020133][T10030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.095371][ T1318] hsr_slave_0: left promiscuous mode [ 447.118577][ T1318] hsr_slave_1: left promiscuous mode [ 447.126097][ T1318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.152758][ T1318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.180805][ T1318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.203365][ T1318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.223246][ T1318] bridge_slave_1: left allmulticast mode [ 447.228925][ T1318] bridge_slave_1: left promiscuous mode [ 447.268118][ T1318] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.313828][ T1318] bridge_slave_0: left allmulticast mode [ 447.319525][ T1318] bridge_slave_0: left promiscuous mode [ 447.353550][ T1318] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.462622][ T1318] veth1_macvtap: left promiscuous mode [ 447.468207][ T1318] veth0_macvtap: left promiscuous mode [ 447.492752][ T1318] veth1_vlan: left promiscuous mode [ 447.498117][ T1318] veth0_vlan: left promiscuous mode [ 449.146584][T10268] xt_hashlimit: size too large, truncated to 1048576 [ 450.257527][ T1318] team0 (unregistering): Port device team_slave_1 removed [ 450.306899][ T1318] team0 (unregistering): Port device team_slave_0 removed [ 450.412925][ T1318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.491841][ T1318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.047853][ T1318] bond0 (unregistering): Released all slaves [ 452.394435][T10030] veth0_vlan: entered promiscuous mode [ 452.417765][T10030] veth1_vlan: entered promiscuous mode [ 452.517948][T10030] veth0_macvtap: entered promiscuous mode [ 452.529030][T10030] veth1_macvtap: entered promiscuous mode [ 453.194055][T10294] xt_hashlimit: size too large, truncated to 1048576 [ 454.485911][T10030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.583977][T10030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.966330][T10030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.977919][T10030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.315021][T10306] __vm_enough_memory: pid: 10306, comm: syz.6.1038, not enough memory for the allocation [ 456.389878][T10030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.441064][T10030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.589092][T10030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.644108][T10030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.688004][T10030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.712543][T10030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.737809][T10030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.757808][T10030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.777248][T10030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.807265][T10030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.846080][T10030] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.882607][T10030] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.891346][T10030] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.934082][T10030] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.215328][T10019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.226303][T10019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.295726][ T8109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.317503][ T8109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.748783][T10322] loop1: detected capacity change from 0 to 256 [ 457.817431][T10322] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 458.299775][T10345] loop9: detected capacity change from 0 to 128 [ 458.445571][T10351] syz.9.1044: attempt to access beyond end of device [ 458.445571][T10351] loop9: rw=2049, sector=145, nr_sectors = 744 limit=128 [ 459.210146][ T8] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 459.262724][T10355] xt_hashlimit: size too large, truncated to 1048576 [ 460.110416][ T8] usb 2-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 460.154276][ T5809] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 460.154438][ T1306] kworker/u4:6: attempt to access beyond end of device [ 460.154438][ T1306] loop9: rw=1, sector=889, nr_sectors = 152 limit=128 [ 460.182810][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 460.201726][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 460.221140][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.244298][ T8] usb 2-1: config 0 descriptor?? [ 460.385928][T10361] loop9: detected capacity change from 0 to 2048 [ 460.395708][ T5809] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 460.401758][T10361] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 460.433305][ T5809] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 460.476183][ T5809] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 460.502572][ T5809] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26217, setting to 1024 [ 460.532855][ T5809] usb 7-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 460.564651][ T5809] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.598668][T10352] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 460.612726][T10352] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 460.640454][T10352] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 460.661697][ T5809] pl2303 7-1:1.0: pl2303 converter detected [ 460.694385][ T8] logitech-djreceiver 0003:046D:C70E.0002: ignoring exceeding usage max [ 460.723093][ T5809] usb 7-1: pl2303 converter now attached to ttyUSB0 [ 460.734865][ T8] logitech-djreceiver 0003:046D:C70E.0002: unknown main item tag 0x3 [ 460.781773][ T8] logitech-djreceiver 0003:046D:C70E.0002: unexpected long global item [ 460.806894][ T8] logitech-djreceiver 0003:046D:C70E.0002: logi_dj_probe: parse failed [ 460.839558][ T8] logitech-djreceiver: probe of 0003:046D:C70E.0002 failed with error -22 [ 460.909105][ T8] usb 2-1: USB disconnect, device number 2 [ 460.928114][ T5809] usb 7-1: USB disconnect, device number 2 [ 460.946331][ T5809] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 460.968949][ T5809] pl2303 7-1:1.0: device disconnected [ 461.029568][ T27] audit: type=1326 audit(1789509533.846:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10375 comm="syz.9.1050" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5beb39e159 code=0x7ffc0000 [ 461.077972][ T27] audit: type=1326 audit(1789509533.846:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10375 comm="syz.9.1050" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5beb39e159 code=0x7ffc0000 [ 461.108561][ T27] audit: type=1326 audit(1789509533.876:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10375 comm="syz.9.1050" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5beb39e159 code=0x7ffc0000 [ 461.143999][ T27] audit: type=1326 audit(1789509533.876:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10375 comm="syz.9.1050" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5beb39e159 code=0x7ffc0000 [ 461.155894][T10377] loop9: detected capacity change from 0 to 4096 [ 461.172870][ T27] audit: type=1326 audit(1789509533.876:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10375 comm="syz.9.1050" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5beb39e159 code=0x7ffc0000 [ 461.224398][ T27] audit: type=1326 audit(1789509533.876:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10375 comm="syz.9.1050" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5beb39e159 code=0x7ffc0000 [ 461.256894][ T27] audit: type=1326 audit(1789509533.876:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10375 comm="syz.9.1050" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5beb39e159 code=0x7ffc0000 [ 461.287867][ T27] audit: type=1326 audit(1789509533.876:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10375 comm="syz.9.1050" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5beb39e159 code=0x7ffc0000 [ 461.318548][ T27] audit: type=1326 audit(1789509533.876:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10375 comm="syz.9.1050" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5beb39e159 code=0x7ffc0000 [ 461.342981][T10331] I/O error, dev loop9, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 461.392649][ T27] audit: type=1326 audit(1789509533.876:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10375 comm="syz.9.1050" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5beb39e159 code=0x7ffc0000 [ 461.719786][T10386] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 461.726406][T10388] loop9: detected capacity change from 0 to 2048 [ 463.905071][T10415] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 465.000956][T10422] xt_hashlimit: size too large, truncated to 1048576 [ 467.439348][T10463] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 469.593843][T10491] loop9: detected capacity change from 0 to 2048 [ 469.615325][T10491] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 470.182795][ T8090] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 471.396252][ T8090] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 471.418301][ T8090] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 471.452347][ T8090] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 471.512847][ T8090] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26217, setting to 1024 [ 471.550284][ T8090] usb 7-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 471.582887][ T8090] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.625377][T10493] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 473.236644][ T8090] usb 7-1: can't set config #1, error -71 [ 473.258680][ T8090] usb 7-1: USB disconnect, device number 3 [ 473.752588][ T27] kauditd_printk_skb: 48 callbacks suppressed [ 473.752603][ T27] audit: type=1326 audit(1789509546.566:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10541 comm="syz.1.1077" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e4d9e159 code=0x7ffc0000 [ 473.876038][ T27] audit: type=1326 audit(1789509546.566:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10541 comm="syz.1.1077" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e4d9e159 code=0x7ffc0000 [ 473.972631][ T27] audit: type=1326 audit(1789509546.566:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10541 comm="syz.1.1077" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f69e4d9e159 code=0x7ffc0000 [ 474.072581][ T27] audit: type=1326 audit(1789509546.566:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10541 comm="syz.1.1077" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e4d9e159 code=0x7ffc0000 [ 474.166751][ T27] audit: type=1326 audit(1789509546.566:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10541 comm="syz.1.1077" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e4d9e159 code=0x7ffc0000 [ 475.902659][ T5826] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 476.824910][ T5826] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 476.842613][ T5826] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 476.854542][T10578] xt_hashlimit: size too large, truncated to 1048576 [ 476.907711][ T5826] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 476.948781][ T5826] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 477.005103][ T5826] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 477.717081][ T5826] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.766819][ T5826] usb 7-1: can't set config #1, error -71 [ 477.786262][T10583] bonding: bond0 is being created... [ 477.804172][ T5826] usb 7-1: USB disconnect, device number 4 [ 477.826127][T10583] bonding: bond0 already exists [ 477.910972][ T59] bond0: (slave bond_slave_0): interface is now down [ 477.942392][ T59] bond0: (slave bond_slave_1): interface is now down [ 477.962654][ T59] bond0: (slave syz_tun): interface is now down [ 478.095873][ T59] bond0: (slave bond_slave_0): interface is now down [ 478.118574][ T5807] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 478.124030][ T59] bond0: (slave bond_slave_1): interface is now down [ 478.153071][ T59] bond0: (slave syz_tun): interface is now down [ 478.153075][ T5807] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 478.205654][ T59] bond0: now running without any active interface! [ 478.344821][T10595] fido_id[10595]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 480.152793][ T5869] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 480.909370][T10629] xt_hashlimit: size too large, truncated to 1048576 [ 481.752571][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 481.783974][ T5869] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.822593][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 481.846785][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 481.882722][ T5869] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 481.912554][ T5869] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 481.957705][ T5869] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 481.986673][ T5869] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 482.015237][ T5869] usb 2-1: Manufacturer: syz [ 482.051066][ T5869] usb 2-1: config 0 descriptor?? [ 483.139021][ T5781] Bluetooth: hci2: command 0x0406 tx timeout [ 483.542597][ T5869] rc_core: IR keymap rc-hauppauge not found [ 483.548645][ T5869] Registered IR keymap rc-empty [ 483.561318][ T5869] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 483.614306][ T5869] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 483.669066][ T5869] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 484.463238][ T5869] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 484.492540][T10687] xt_hashlimit: size too large, truncated to 1048576 [ 484.600604][ T5869] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 485.326145][ T5869] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 485.412742][ T5869] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 485.472661][ T5869] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 485.527227][ T5869] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 485.587971][ T5869] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 486.332668][ T5869] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 486.380757][ T5869] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 486.493391][ T5869] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 489.756265][ T5869] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 489.835207][ T5869] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 489.892548][ T5869] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 489.929859][ T5869] usb 2-1: USB disconnect, device number 3 [ 490.272675][ T8] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 490.474495][ T8] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 490.500573][ T8] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 490.530188][ T8] usb 10-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 0.00 [ 490.551140][ T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.596519][ T8] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 491.439376][ T2323] usb 10-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2 [ 491.558032][ T2323] usb 10-1: Falling back to sysfs fallback for: v4l-pvrusb2-24xxx-01.fw [ 491.861843][ T8] usb 10-1: USB disconnect, device number 4 [ 493.709330][T10802] xt_hashlimit: size too large, truncated to 1048576 [ 495.473533][T10834] loop9: detected capacity change from 0 to 128 [ 495.667477][T10840] syz.9.1128: attempt to access beyond end of device [ 495.667477][T10840] loop9: rw=2049, sector=145, nr_sectors = 248 limit=128 [ 495.959262][T10835] Console: switching to colour VGA+ 80x25 [ 496.017901][T10834] syz.9.1128: attempt to access beyond end of device [ 496.017901][T10834] loop9: rw=524288, sector=153, nr_sectors = 216 limit=128 [ 496.058724][T10834] syz.9.1128: attempt to access beyond end of device [ 496.058724][T10834] loop9: rw=524288, sector=369, nr_sectors = 24 limit=128 [ 496.231836][ T79] kworker/u4:5: attempt to access beyond end of device [ 496.231836][ T79] loop9: rw=1, sector=145, nr_sectors = 6 limit=128 [ 496.663653][T10858] xt_hashlimit: size too large, truncated to 1048576 [ 496.882833][ T5809] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 497.196790][ T5809] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 497.897140][ T5809] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 497.927347][ T5809] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 497.978635][ T5809] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26217, setting to 1024 [ 498.026962][ T5809] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 498.057539][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.121855][T10852] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 498.161831][T10852] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 498.208930][T10852] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 498.245596][ T5809] pl2303 2-1:1.0: pl2303 converter detected [ 498.309200][ T5809] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 498.586645][T10852] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 498.612228][T10852] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 498.640071][T10852] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 498.660290][T10852] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 498.681477][T10852] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 499.075339][T10852] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 499.119626][T10852] pl2303 ttyUSB0: error sending break = -32 [ 499.155618][ T7977] usb 2-1: USB disconnect, device number 4 [ 499.180586][ T7977] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 499.191263][ T7977] pl2303 2-1:1.0: device disconnected [ 501.540216][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.546732][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.595993][ T7977] smpboot: CPU 1 is now offline [ 501.689505][T10944] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 502.052274][T10962] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1156'. [ 502.623055][ T5869] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 502.728430][ T5809] smpboot: CPU 1 is now offline [ 502.787244][T10996] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 502.836396][ T5869] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 502.870739][ T5869] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 502.931764][ T5869] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 502.977974][ T5869] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26217, setting to 1024 [ 503.014589][ T5869] usb 7-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 503.038052][ T5869] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.692097][T10977] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 503.714630][T11007] xt_hashlimit: size too large, truncated to 1048576 [ 503.772121][T10977] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 503.815743][T10977] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 503.862271][ T5869] pl2303 7-1:1.0: pl2303 converter detected [ 504.539470][ T5869] usb 7-1: pl2303 converter now attached to ttyUSB0 [ 504.603393][ T5869] usb 7-1: USB disconnect, device number 5 [ 504.656411][ T5869] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 504.714475][ T5869] pl2303 7-1:1.0: device disconnected [ 505.246578][T11039] loop1: detected capacity change from 0 to 128 [ 505.333443][ T5869] smpboot: CPU 1 is now offline [ 505.364009][T11046] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 505.378249][T11039] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 505.471890][T11039] hpfs: filesystem error: improperly stopped [ 505.499625][T11039] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 505.529055][T11039] hpfs: You really don't want any checks? You are crazy... [ 505.555760][T11039] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 505.582669][T11039] hpfs: code page support is disabled [ 505.603208][T11039] hpfs: hpfs_map_4sectors(): unaligned read [ 505.633340][T11039] hpfs: hpfs_map_4sectors(): unaligned read [ 505.649954][T11039] hpfs: filesystem error: unable to find root dir [ 506.152608][ T7977] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 506.706711][ T8227] bond0: (slave bond_slave_0): link status definitely up [ 506.775097][ T8227] bond0: active interface up! [ 506.923771][ T8227] bond0: (slave bond_slave_0): interface is now down [ 506.968904][ T8227] bond0: now running without any active interface! [ 508.114915][ T7977] usb 2-1: Using ep0 maxpacket: 32 [ 509.227155][T11064] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 509.295159][ T7977] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 509.332784][ T7977] usb 2-1: can't read configurations, error -71 [ 509.384269][T11064] bond1 (unregistering): Released all slaves [ 509.652606][ T5809] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 509.822682][ T5809] usb 7-1: device descriptor read/64, error -71 [ 510.103738][ T5809] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 510.282645][ T5809] usb 7-1: device descriptor read/64, error -71 [ 510.553571][ T5809] usb usb7-port1: attempt power cycle [ 511.485941][T11150] xt_hashlimit: size too large, truncated to 1048576 [ 512.842622][ T7977] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 513.089401][ T7977] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 513.132844][ T7977] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 513.182679][ T7977] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 513.245485][ T7977] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26217, setting to 1024 [ 513.312673][ T7977] usb 7-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 513.352595][ T7977] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.394707][T11168] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 514.749561][T11168] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 514.786365][T11168] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 514.844758][ T7977] pl2303 7-1:1.0: pl2303 converter detected [ 514.923042][ T7977] usb 7-1: pl2303 converter now attached to ttyUSB0 [ 515.126100][ T5809] usb 7-1: USB disconnect, device number 9 [ 515.169007][ T5809] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 515.213307][ T5809] pl2303 7-1:1.0: device disconnected [ 516.776281][T11270] xt_hashlimit: size too large, truncated to 1048576 [ 519.876030][ T27] audit: type=1326 audit(1789509592.696:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11302 comm="syz.9.1202" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5beb39e159 code=0x7fc00000 [ 521.972018][T11410] nvmet: adding nsid 1 to subsystem test [ 522.044274][T11410] nvmet: failed to open block device (null): (-22) [ 522.274698][ T7977] nvmet: connect request for invalid subsystem test! [ 522.304689][T11410] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "test" [ 523.295316][ T5771] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 523.550643][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e10b800: rx timeout, send abort [ 524.020940][T11486] tipc: Failed to remove unknown binding: 66,0,0/0:2652238837/2652238839 [ 524.040880][T11486] tipc: Failed to remove unknown binding: 66,0,0/0:2652238837/2652238838 [ 524.050759][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e108800: rx timeout, send abort [ 524.060818][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e10b800: abort rx timeout. Force session deactivation [ 524.084867][T11486] tipc: Failed to remove unknown binding: 66,0,0/0:2652238837/2652238839 [ 524.133119][T11486] tipc: Failed to remove unknown binding: 66,0,0/0:2652238837/2652238838 [ 524.559063][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e108800: abort rx timeout. Force session deactivation [ 527.812990][T11542] FAULT_INJECTION: forcing a failure. [ 527.812990][T11542] name failslab, interval 1, probability 0, space 0, times 1 [ 527.866491][T11542] CPU: 0 PID: 11542 Comm: syz.9.1237 Not tainted syzkaller #0 [ 527.874057][T11542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 527.884135][T11542] Call Trace: [ 527.887512][T11542] [ 527.890533][T11542] dump_stack_lvl+0x18c/0x250 [ 527.895400][T11542] ? show_regs_print_info+0x20/0x20 [ 527.900684][T11542] ? load_image+0x420/0x420 [ 527.905236][T11542] ? __might_sleep+0xe0/0xe0 [ 527.909898][T11542] ? __lock_acquire+0x7d80/0x7d80 [ 527.914973][T11542] ? lock_chain_count+0x20/0x20 [ 527.919852][T11542] should_fail_ex+0x394/0x4c0 [ 527.924597][T11542] should_failslab+0x9/0x20 [ 527.929149][T11542] slab_pre_alloc_hook+0x59/0x300 [ 527.934225][T11542] ? _raw_spin_unlock+0x40/0x40 [ 527.939127][T11542] ? __request_module+0x2d1/0x600 [ 527.944178][T11542] __kmem_cache_alloc_node+0x53/0x250 [ 527.949585][T11542] ? __request_module+0x2d1/0x600 [ 527.954633][T11542] kmalloc_trace+0x2a/0xe0 [ 527.959086][T11542] __request_module+0x2d1/0x600 [ 527.963970][T11542] ? module_enforce_rwx_sections+0x150/0x150 [ 527.969985][T11542] ? __rwlock_init+0x150/0x150 [ 527.974782][T11542] ? do_raw_spin_unlock+0x121/0x230 [ 527.980014][T11542] __sock_create+0x323/0x940 [ 527.984647][T11542] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 527.990631][T11542] __sys_socket+0xd7/0x1b0 [ 527.995045][T11542] __x64_sys_socket+0x7a/0x90 [ 527.999716][T11542] do_syscall_64+0x55/0xb0 [ 528.004134][T11542] ? clear_bhb_loop+0x40/0x90 [ 528.008828][T11542] ? clear_bhb_loop+0x40/0x90 [ 528.013504][T11542] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 528.019401][T11542] RIP: 0033:0x7f5beb39e159 [ 528.023865][T11542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.043510][T11542] RSP: 002b:00007f5bec204028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 528.051926][T11542] RAX: ffffffffffffffda RBX: 00007f5beb625fa0 RCX: 00007f5beb39e159 [ 528.059893][T11542] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002d [ 528.067855][T11542] RBP: 00007f5beb43506b R08: 0000000000000000 R09: 0000000000000000 [ 528.075820][T11542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.083781][T11542] R13: 00007f5beb626038 R14: 00007f5beb625fa0 R15: 00007ffd291dd248 [ 528.091757][T11542] [ 528.746842][T11574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1244'. [ 529.652633][ T5809] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 529.952641][ T5809] usb 2-1: Using ep0 maxpacket: 16 [ 529.966556][ T5809] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 529.984466][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.013071][ T5809] usb 2-1: Product: syz [ 530.032609][ T5809] usb 2-1: Manufacturer: syz [ 530.037250][ T5809] usb 2-1: SerialNumber: syz [ 530.282226][T11630] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1254'. [ 530.314172][ T5809] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 530.362329][ T5809] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 530.414830][ T5809] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 530.435962][ T5809] usb 2-1: media controller created [ 530.520236][ T5809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 530.588779][ T5809] zl10353_read_register: readreg error (reg=127, ret==-32) [ 530.798872][ T5809] dvb_usb_gl861: probe of 2-1:157.0 failed with error -5 [ 530.821759][ T5809] usb 2-1: USB disconnect, device number 7 [ 531.922305][T11682] kvm: kvm [11681]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xffffd20300000018 [ 531.935525][T11691] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1265'. [ 532.672673][ T5809] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 532.867797][ T5809] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 532.897010][ T5809] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 532.921426][ T5809] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 532.944923][ T5809] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 532.969528][ T5809] usb 7-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 532.988392][ T5809] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.019484][T11710] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 533.032794][T11710] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 533.060644][ T5809] pl2303 7-1:1.0: pl2303 converter detected [ 533.080072][ T5809] usb 7-1: pl2303 converter now attached to ttyUSB0 [ 533.369779][T11710] pl2303 7-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 533.401483][T11710] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 533.426768][T11710] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 533.443440][T11710] pl2303 7-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 533.482585][T11710] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 533.509046][ T5869] smpboot: CPU 1 is now offline [ 533.596616][T11739] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 533.661438][ T5809] usb 7-1: USB disconnect, device number 10 [ 533.735849][ T5809] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 533.800498][ T5809] pl2303 7-1:1.0: device disconnected [ 534.112932][T11756] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1275'. [ 534.122216][ T5771] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 534.506905][T11776] loop9: detected capacity change from 0 to 16 [ 534.739499][T11776] erofs: (device loop9): mounted with root inode @ nid 36. [ 535.547910][T11817] loop9: detected capacity change from 0 to 1024 [ 535.567958][T11819] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1287'. [ 535.696393][T11817] hfsplus: invalid file type 0177755 for inode 17 [ 535.743322][ T5809] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 535.956326][ T5809] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 535.985368][ T5809] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 536.038780][ T5809] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 536.097424][ T5809] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 536.142612][ T5809] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 536.172233][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.204431][T11811] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 536.218455][T11811] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 536.245536][ T5809] pl2303 2-1:1.0: pl2303 converter detected [ 536.282858][ T5809] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 536.490014][T11822] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.497524][T11822] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.563005][T11811] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 536.587919][T11811] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 536.612328][T11811] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 536.637564][T11811] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 536.666487][T11811] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 536.697363][ T5809] usb 2-1: USB disconnect, device number 8 [ 536.707111][T11834] loop9: detected capacity change from 0 to 32768 [ 536.725655][ T5809] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 536.740276][ T5809] pl2303 2-1:1.0: device disconnected [ 536.767692][T11834] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 scanned by syz.9.1290 (11834) [ 536.874820][T11834] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 536.896856][T11834] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm [ 536.916642][T11834] BTRFS info (device loop9): setting nodatasum [ 536.935738][T11834] BTRFS info (device loop9): force zlib compression, level 3 [ 536.951913][T11834] BTRFS info (device loop9): setting incompat feature flag for COMPRESS_LZO (0x8) [ 536.963921][T11834] BTRFS info (device loop9): use lzo compression, level 0 [ 536.971162][T11834] BTRFS info (device loop9): turning on flush-on-commit [ 536.989495][T11834] BTRFS info (device loop9): enabling auto defrag [ 537.002244][T11834] BTRFS info (device loop9): max_inline at 4096 [ 537.020046][T11834] BTRFS info (device loop9): using free space tree [ 537.169231][T11834] BTRFS info (device loop9): enabling ssd optimizations [ 537.343994][T11822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.473496][T11822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.554916][ T9084] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 537.748031][ T788] smpboot: CPU 1 is now offline [ 537.791237][T11872] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 538.084378][T11874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1297'. [ 539.172740][T11822] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.192025][T11822] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.211779][T11822] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.231150][T11822] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.514425][T11886] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 539.953190][ T788] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 540.073950][T11909] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1306'. [ 540.168780][ T788] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 540.189070][ T788] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 540.222439][ T788] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 540.262944][ T788] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 540.299861][ T788] usb 7-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 540.322880][ T788] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.145462][T11895] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 541.162983][T11895] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 541.184613][ T788] pl2303 7-1:1.0: pl2303 converter detected [ 541.203897][ T788] usb 7-1: pl2303 converter now attached to ttyUSB0 [ 541.432915][ T8090] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 541.503222][T11895] pl2303 7-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 541.527861][T11895] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 541.540290][T11895] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 541.555086][T11895] pl2303 7-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 541.573772][T11895] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 541.591306][ T788] usb 7-1: USB disconnect, device number 11 [ 541.619342][ T788] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 541.631697][ T8090] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 541.644609][ T788] pl2303 7-1:1.0: device disconnected [ 541.665609][ T8090] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 541.687162][ T8090] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 541.716176][ T8090] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 541.733089][ T8090] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.747521][ T8090] usb 2-1: Product: syz [ 541.755876][ T8090] usb 2-1: Manufacturer: syz [ 541.760493][ T8090] usb 2-1: SerialNumber: syz [ 541.769258][ T8090] usb 2-1: config 0 descriptor?? [ 541.983862][ T788] usb 2-1: USB disconnect, device number 9 [ 545.448571][T11954] loop9: detected capacity change from 0 to 1024 [ 545.462729][ T788] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 546.237592][ T788] usb 7-1: config 4 has an invalid interface number: 44 but max is 0 [ 548.428625][ T788] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 548.518353][ T788] usb 7-1: config 4 has no interface number 0 [ 548.542786][ T788] usb 7-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 548.594114][ T788] usb 7-1: string descriptor 0 read error: -71 [ 548.601878][ T788] usb 7-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 548.682633][ T788] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.732828][ T788] usb 7-1: can't set config #4, error -71 [ 548.784106][ T788] usb 7-1: USB disconnect, device number 12 [ 549.105448][T11979] loop6: detected capacity change from 0 to 512 [ 549.126638][T11981] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1315'. [ 549.142737][T11979] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 549.177494][T11979] EXT4-fs (loop6): Test dummy encryption mode enabled [ 549.206930][T11979] EXT4-fs (loop6): Cannot use DAX on a filesystem that may contain inline data [ 550.350088][T11991] loop1: detected capacity change from 0 to 1024 [ 550.435016][T11992] block nbd9: shutting down sockets [ 550.482207][T11991] hfsplus: invalid file type 0177755 for inode 17 [ 550.492252][T11995] block nbd9: NBD_DISCONNECT [ 550.532570][T11995] block nbd9: Send disconnect failed -32 [ 551.064606][T12014] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1333'. [ 551.600143][T12029] jffs2: notice: (12029) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 552.745756][ T2323] pvrusb2: request_firmware fatal error with code=-110 [ 552.759319][ T2323] pvrusb2: Failure uploading firmware1 [ 552.765313][ T2323] pvrusb2: Device initialization was not successful. [ 552.772004][ T2323] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 552.866836][ T2323] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 552.906829][ T8] pvrusb2: Device being rendered inoperable [ 554.892965][ T5771] Bluetooth: hci3: command 0x0406 tx timeout [ 555.243058][ T5826] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 555.264487][ T8] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 555.454601][ T5826] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 555.472682][ T5826] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 555.498469][ T8] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 555.512612][ T5826] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 555.534153][ T8] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 555.552612][ T5826] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26217, setting to 1024 [ 555.572618][ T8] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 555.581921][ T5826] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 555.602438][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.610768][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.627012][ T8] usb 7-1: config 0 descriptor?? [ 555.642981][T12110] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 555.650278][T12110] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 555.666474][ T8] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 555.684609][T12110] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 555.702470][ T5826] pl2303 2-1:1.0: pl2303 converter detected [ 555.719761][ T5826] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 555.921986][ T5826] usb 2-1: USB disconnect, device number 10 [ 555.945546][ T5826] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 555.967298][ T5826] pl2303 2-1:1.0: device disconnected [ 556.934288][ T5826] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 557.734134][ T5826] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 557.764876][ T5826] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 557.802558][ T5826] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 557.832560][ T5826] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 557.876545][ T5826] usb 10-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 557.922102][ T5826] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.969978][ T788] usb 7-1: USB disconnect, device number 13 [ 558.493516][ T788] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 558.533764][ T5771] Bluetooth: hci0: unexpected event 0x08 length: 103 > 4 [ 559.296068][T12216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.413171][T12216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.447588][ T788] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 559.481570][ T788] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 559.511991][ T5826] gud 10-1:1.0: Failed to get properties (error=-71) [ 559.526786][ T788] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 559.538749][ T5826] gud: probe of 10-1:1.0 failed with error -71 [ 559.572628][ T788] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26217, setting to 1024 [ 559.611411][ T5826] usb 10-1: USB disconnect, device number 5 [ 559.618156][ T788] usb 7-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 559.668040][ T788] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.722991][T12207] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 559.753321][T12207] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 559.787629][T12207] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 559.820508][ T788] pl2303 7-1:1.0: pl2303 converter detected [ 559.857306][ T788] usb 7-1: pl2303 converter now attached to ttyUSB0 [ 560.042740][ T5826] usb 7-1: USB disconnect, device number 14 [ 560.058517][ T5826] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 560.077351][ T5826] pl2303 7-1:1.0: device disconnected [ 560.232615][ T788] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 560.264269][T12236] loop1: detected capacity change from 0 to 1024 [ 560.408199][ T5771] Bluetooth: hci3: unexpected event 0x08 length: 103 > 4 [ 560.445047][ T788] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.139949][ T788] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 561.189802][ T788] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.199726][T12245] loop1: detected capacity change from 0 to 1024 [ 561.223780][T12245] EXT4-fs: Ignoring removed nobh option [ 561.245307][T12245] EXT4-fs: Ignoring removed bh option [ 561.252153][ T788] usb 10-1: config 0 descriptor?? [ 561.277500][T12245] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 561.358295][T12245] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 561.372785][T12245] System zones: 0-1, 3-12 [ 561.391068][T12245] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 561.707223][ T788] ath6kl: Unsupported hardware version: 0x0 [ 561.716133][ T788] ath6kl: Failed to init ath6kl core: -22 [ 561.729052][ T788] ath6kl_usb: probe of 10-1:0.0 failed with error -22 [ 562.414976][ T5771] Bluetooth: hci3: command 0x0406 tx timeout [ 562.766996][ T5826] usb 10-1: USB disconnect, device number 6 [ 562.844121][T10030] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.872342][T12261] loop6: detected capacity change from 0 to 2048 [ 562.970567][T12261] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 562.991957][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.998333][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.365627][T12269] loop1: detected capacity change from 0 to 1024 [ 564.353458][T12277] xt_hashlimit: size too large, truncated to 1048576 [ 564.742719][ T5826] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 564.992261][ T5826] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 565.022449][ T5826] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 565.052556][ T5826] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 565.088074][ T5826] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26217, setting to 1024 [ 565.120512][ T5826] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 565.150368][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.185007][T12282] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 565.192610][T12282] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 565.216866][T12282] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 565.253425][ T5826] pl2303 2-1:1.0: pl2303 converter detected [ 565.281578][ T5826] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 565.478381][ T5826] usb 2-1: USB disconnect, device number 11 [ 565.505486][ T5826] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 565.521075][ T5826] pl2303 2-1:1.0: device disconnected [ 566.123075][T12298] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1394'. [ 566.862229][T12313] loop1: detected capacity change from 0 to 1024 [ 566.917675][T12313] EXT4-fs: Ignoring removed nobh option [ 566.952689][T12313] EXT4-fs: Ignoring removed bh option [ 566.989710][T12313] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 567.055069][T12313] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 567.108661][T12313] System zones: 0-1, 3-12 [ 567.143684][T12313] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.852958][T12253] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 568.006090][T12328] overlayfs: failed to clone upperpath [ 568.052738][T10030] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.650470][T12333] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 570.734130][ T7909] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.828671][T12353] loop9: detected capacity change from 0 to 1024 [ 570.907135][T12353] EXT4-fs: Ignoring removed nobh option [ 570.956892][T12353] EXT4-fs: Ignoring removed bh option [ 571.012655][T12353] EXT4-fs (loop9): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 571.077613][T12355] FAULT_INJECTION: forcing a failure. [ 571.077613][T12355] name failslab, interval 1, probability 0, space 0, times 0 [ 571.110603][T12353] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 571.154090][T12353] System zones: 0-1, 3-12 [ 571.172714][T12355] CPU: 0 PID: 12355 Comm: syz.1.1417 Not tainted syzkaller #0 [ 571.180186][T12355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 571.190227][T12355] Call Trace: [ 571.193493][T12355] [ 571.196413][T12355] dump_stack_lvl+0x18c/0x250 [ 571.201081][T12355] ? show_regs_print_info+0x20/0x20 [ 571.206265][T12355] ? load_image+0x420/0x420 [ 571.210782][T12355] ? __might_sleep+0xe0/0xe0 [ 571.215411][T12355] ? __lock_acquire+0x7d80/0x7d80 [ 571.220457][T12355] should_fail_ex+0x394/0x4c0 [ 571.225148][T12355] should_failslab+0x9/0x20 [ 571.229665][T12355] slab_pre_alloc_hook+0x59/0x300 [ 571.234685][T12355] ? call_usermodehelper_setup+0x8e/0x260 [ 571.240393][T12355] __kmem_cache_alloc_node+0x53/0x250 [ 571.245757][T12355] ? call_usermodehelper_setup+0x8e/0x260 [ 571.251458][T12355] kmalloc_trace+0x2a/0xe0 [ 571.255864][T12355] call_usermodehelper_setup+0x8e/0x260 [ 571.261391][T12355] ? __request_module+0x600/0x600 [ 571.266402][T12355] __request_module+0x3bb/0x600 [ 571.271238][T12355] ? module_enforce_rwx_sections+0x150/0x150 [ 571.277226][T12355] ? __rwlock_init+0x150/0x150 [ 571.282014][T12355] ? do_raw_spin_unlock+0x121/0x230 [ 571.287222][T12355] __sock_create+0x323/0x940 [ 571.291810][T12355] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 571.297794][T12355] __sys_socket+0xd7/0x1b0 [ 571.302212][T12355] __x64_sys_socket+0x7a/0x90 [ 571.306893][T12355] do_syscall_64+0x55/0xb0 [ 571.311309][T12355] ? clear_bhb_loop+0x40/0x90 [ 571.315988][T12355] ? clear_bhb_loop+0x40/0x90 [ 571.320664][T12355] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 571.326560][T12355] RIP: 0033:0x7f69e4d9e159 [ 571.330968][T12355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.350569][T12355] RSP: 002b:00007f69e5cb8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 571.358981][T12355] RAX: ffffffffffffffda RBX: 00007f69e5025fa0 RCX: 00007f69e4d9e159 [ 571.366945][T12355] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002d [ 571.374909][T12355] RBP: 00007f69e4e3506b R08: 0000000000000000 R09: 0000000000000000 [ 571.382874][T12355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 571.390838][T12355] R13: 00007f69e5026038 R14: 00007f69e5025fa0 R15: 00007ffe640d1fa8 [ 571.398815][T12355] [ 571.440286][T12359] loop6: detected capacity change from 0 to 2048 [ 571.454139][T12353] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.842695][T12359] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 572.374248][ T9084] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.711319][T12373] Bluetooth: hci0: unsupported parameter 255 [ 572.758082][T12373] Bluetooth: hci0: unsupported parameter 255 [ 573.632849][T12395] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 577.675447][T12432] loop9: detected capacity change from 0 to 1024 [ 577.719743][T12435] xt_hashlimit: size too large, truncated to 1048576 [ 577.727783][T12432] EXT4-fs: Ignoring removed nobh option [ 577.780953][T12432] EXT4-fs: Ignoring removed bh option [ 577.854715][T12432] EXT4-fs (loop9): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 577.965883][T12432] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 578.022781][T12432] System zones: 0-1, 3-12 [ 578.063348][T12432] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 578.292208][T12440] loop1: detected capacity change from 0 to 4096 [ 578.503890][ T9084] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.600220][T12444] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 578.982048][T12447] loop9: detected capacity change from 0 to 32768 [ 578.997235][T12447] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop9 scanned by syz.9.1441 (12447) [ 579.036279][T12447] BTRFS info (device loop9): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 579.047758][T12447] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm [ 579.056650][T12447] BTRFS info (device loop9): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 579.066126][T12447] BTRFS info (device loop9): use zstd compression, level 3 [ 579.073502][T12447] BTRFS info (device loop9): force clearing of disk cache [ 579.080644][T12447] BTRFS info (device loop9): enabling disk space caching [ 579.087781][T12447] BTRFS info (device loop9): disk space caching is enabled [ 579.150814][T12447] BTRFS info (device loop9): enabling ssd optimizations [ 579.158831][T12447] BTRFS info (device loop9): auto enabling async discard [ 579.176078][T12447] BTRFS info (device loop9): rebuilding free space tree [ 579.216127][T12447] BTRFS info (device loop9): disabling free space tree [ 579.223845][T12447] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 579.233899][T12447] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 580.079942][ T9084] BTRFS info (device loop9): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 580.396801][T12475] loop1: detected capacity change from 0 to 2048 [ 580.590400][T12475] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 581.156284][T12486] loop6: detected capacity change from 0 to 512 [ 581.183972][T12486] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 581.273354][ T5826] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 581.522699][ T5826] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 581.698272][ T5826] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 582.017959][ T5826] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 582.083242][ T5826] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 582.172300][ T5826] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 582.229670][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.684090][T12514] loop6: detected capacity change from 0 to 2048 [ 582.824437][T12514] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 583.345233][ T5826] gud 2-1:1.0: USB-1: Failed to add properties (ret=-5) [ 583.412666][ T5826] gud 2-1:1.0: Failed to get connectors (error=-5) [ 583.440459][ T5826] gud: probe of 2-1:1.0 failed with error -5 [ 583.585619][ T5826] usb 2-1: USB disconnect, device number 12 [ 584.823466][T12541] loop6: detected capacity change from 0 to 2048 [ 584.960010][T12541] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 585.728305][T12556] loop6: detected capacity change from 0 to 4096 [ 585.888487][T12561] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 587.575654][T12557] loop1: detected capacity change from 0 to 32768 [ 588.009561][T12582] loop9: detected capacity change from 0 to 4096 [ 588.136640][T12585] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 588.893415][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d0d1c00: rx timeout, send abort [ 588.957269][T12580] loop6: detected capacity change from 0 to 32768 [ 589.032670][T12580] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.1484 (12580) [ 589.132832][T12580] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 589.182627][T12580] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 589.231997][T12580] BTRFS info (device loop6): using free space tree [ 589.393558][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d0d2800: rx timeout, send abort [ 589.401928][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d0d1c00: abort rx timeout. Force session deactivation [ 589.483855][T12580] BTRFS info (device loop6): enabling ssd optimizations [ 589.542924][T12580] BTRFS info (device loop6): auto enabling async discard [ 589.754614][T12580] BTRFS info (device loop6): device stats zeroed by syz.6.1484 (12580) [ 589.901834][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d0d2800: abort rx timeout. Force session deactivation [ 589.989294][ T7909] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 590.827288][T12596] loop1: detected capacity change from 0 to 32768 [ 590.879890][T12596] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1489 (12596) [ 591.105892][T12596] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 591.154716][T12596] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 591.200348][T12596] BTRFS info (device loop1): disabling tree log [ 591.252739][T12596] BTRFS info (device loop1): using free space tree [ 591.329361][T12633] loop9: detected capacity change from 0 to 4096 [ 591.443354][T12596] BTRFS info (device loop1): enabling ssd optimizations [ 591.443769][T12652] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 591.471453][T12596] BTRFS info (device loop1): auto enabling async discard [ 591.699840][ T27] audit: type=1800 audit(1789509664.516:206): pid=12596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1489" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 591.822578][ T27] audit: type=1804 audit(1789509664.586:207): pid=12661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1489" name="/newroot/96/file0/file1" dev="loop1" ino=260 res=1 errno=0 [ 592.054428][T12070] Bluetooth: hci6: unexpected event for opcode 0x0000 [ 592.510557][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d0bec00: rx timeout, send abort [ 592.539817][T12677] BTRFS info (device loop1): balance: start -d -m [ 592.577189][T12677] BTRFS info (device loop1): relocating block group 6881280 flags data|metadata [ 592.820947][T12677] BTRFS info (device loop1): relocating block group 5242880 flags data|metadata [ 592.964193][T12677] BTRFS info (device loop1): balance: canceled [ 592.985173][T12070] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 593.010693][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d0bc800: rx timeout, send abort [ 593.019562][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d0bec00: abort rx timeout. Force session deactivation [ 593.323773][T12697] loop6: detected capacity change from 0 to 2048 [ 593.374147][T10030] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 593.417852][T12697] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 593.518933][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d0bc800: abort rx timeout. Force session deactivation [ 594.014614][ T788] smpboot: CPU 1 is now offline [ 594.047869][T12700] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 594.231622][T12698] loop9: detected capacity change from 0 to 32768 [ 594.276291][T12070] Bluetooth: hci6: unexpected event for opcode 0x0000 [ 594.289555][T12698] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop9 scanned by syz.9.1512 (12698) [ 594.404473][T12698] BTRFS info (device loop9): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 594.454109][T12698] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm [ 594.491294][T12698] BTRFS info (device loop9): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 594.526749][T12698] BTRFS info (device loop9): use zstd compression, level 3 [ 594.675943][T12698] BTRFS info (device loop9): using free space tree [ 594.982226][T12698] BTRFS info (device loop9): enabling ssd optimizations [ 595.040847][T12698] BTRFS info (device loop9): auto enabling async discard [ 595.122378][T12744] loop1: detected capacity change from 0 to 2048 [ 595.239070][T12744] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 595.525051][ T9084] BTRFS info (device loop9): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 596.067151][T12070] Bluetooth: hci6: unexpected event for opcode 0x0004 [ 597.055253][T12070] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 597.069313][T12070] Bluetooth: hci0: Injecting HCI hardware error event [ 597.078606][T12070] Bluetooth: hci0: hardware error 0x00 [ 597.289253][T12769] loop9: detected capacity change from 0 to 2048 [ 597.298971][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880688ae000: rx timeout, send abort [ 597.325633][T12771] nvmet: adding nsid 1 to subsystem testnqn [ 597.432637][T12769] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 597.543976][ T5826] nvmet: connect request for invalid subsystem t! [ 597.559398][T12771] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 597.799052][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d498400: rx timeout, send abort [ 597.807372][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880688ae000: abort rx timeout. Force session deactivation [ 597.959865][T12776] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1537'. [ 598.159431][T12781] loop1: detected capacity change from 0 to 1024 [ 598.224119][T12781] EXT4-fs: Ignoring removed nobh option [ 598.229843][T12781] EXT4-fs: Ignoring removed bh option [ 598.272667][ T5826] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 598.292717][T12781] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 598.307299][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d498400: abort rx timeout. Force session deactivation [ 598.401035][T12781] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 598.433139][T12781] System zones: 0-1, 3-12 [ 598.460557][T12781] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 599.132739][T12070] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 599.182283][ T5826] usb 10-1: Using ep0 maxpacket: 32 [ 599.266957][ T5826] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.323532][ T5826] usb 10-1: config 0 has no interfaces? [ 599.393507][ T5826] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 599.452774][ T5826] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.493986][T10030] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.503272][ T5826] usb 10-1: Product: syz [ 599.507509][ T5826] usb 10-1: Manufacturer: syz [ 599.512166][ T5826] usb 10-1: SerialNumber: syz [ 599.579355][ T5826] usb 10-1: config 0 descriptor?? [ 600.234773][T12809] loop1: detected capacity change from 0 to 2048 [ 600.302561][T12809] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 601.098689][T12824] loop6: detected capacity change from 0 to 2048 [ 601.864016][T12824] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 601.942362][T12824] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 601.989038][T12833] loop1: detected capacity change from 0 to 1024 [ 602.018537][T12833] EXT4-fs: Ignoring removed nobh option [ 602.043826][T12833] EXT4-fs: Ignoring removed bh option [ 602.080356][T12833] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 602.111263][ T7909] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.135532][T12833] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 602.161494][T12833] System zones: 0-1, 3-12 [ 602.187873][T12833] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 602.342060][T10030] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.380079][T12838] loop6: detected capacity change from 0 to 2048 [ 602.447489][T12838] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 602.811154][ T5826] usb 10-1: USB disconnect, device number 7 [ 602.892407][T12845] loop1: detected capacity change from 0 to 4096 [ 603.213065][ T788] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 603.412613][ T788] usb 7-1: Using ep0 maxpacket: 32 [ 604.239345][ T788] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 604.257916][ T788] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 604.275474][T12863] xt_hashlimit: size too large, truncated to 1048576 [ 604.335654][ T788] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 103, changing to 10 [ 604.377990][ T788] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 26217, setting to 1024 [ 605.422597][ T788] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 605.812594][ T788] usb 7-1: config 0 interface 0 has no altsetting 0 [ 605.847233][ T788] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 605.876991][ T788] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 605.906127][ T788] usb 7-1: Product: syz [ 605.910330][ T788] usb 7-1: Manufacturer: syz [ 605.946942][ T788] usb 7-1: SerialNumber: syz [ 605.954400][ T8090] smpboot: CPU 1 is now offline [ 606.003152][ T788] usb 7-1: config 0 descriptor?? [ 606.064824][ T788] usb 7-1: can't set config #0, error -71 [ 606.099497][ T788] usb 7-1: USB disconnect, device number 15 [ 607.775491][T12891] xt_hashlimit: size too large, truncated to 1048576 [ 610.723289][T12910] loop9: detected capacity change from 0 to 2048 [ 610.798795][T12910] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 610.873084][T12910] overlayfs: missing 'lowerdir' [ 613.425007][T12939] xt_hashlimit: size too large, truncated to 1048576 [ 613.571378][T12935] loop9: detected capacity change from 0 to 4096 [ 615.579453][T12947] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 615.719211][T12949] nvmet: failed to open block device (null): (-22) [ 616.079441][ T8090] nvmet: creating nvm controller 1 for subsystem test for NQN nqn.2014-08.org.nvmexpress:uuid:95e5a67e-a96c-4bce-8d1c-8759a7ec90f8. [ 616.297154][T12949] nvme nvme0: creating 1 I/O queues. [ 616.357086][T12949] nvme nvme0: new ctrl: "test" [ 616.402585][ T788] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 616.688019][ T788] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 616.739740][ T788] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 616.839984][ T788] usb 10-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 616.916428][ T788] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.304756][ T8090] usb 10-1: USB disconnect, device number 8 [ 619.389537][T12976] loop1: detected capacity change from 0 to 4096 [ 619.533328][T12984] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 620.995071][T13002] xt_hashlimit: size too large, truncated to 1048576 [ 621.072145][T12998] loop6: detected capacity change from 0 to 1024 [ 622.855066][T13015] loop1: detected capacity change from 0 to 4096 [ 622.971354][T13023] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 623.779310][T13035] syz.1.1616: attempt to access beyond end of device [ 623.779310][T13035] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 623.792996][T13035] befs: (nbd1): unable to read superblock [ 624.735989][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.742283][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.464211][T13046] xt_hashlimit: size too large, truncated to 1048576 [ 626.140367][T13054] loop1: detected capacity change from 0 to 4096 [ 626.281060][T13061] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 629.033681][T13093] xt_hashlimit: size too large, truncated to 1048576 [ 629.294345][T13098] capability: warning: `syz.6.1637' uses 32-bit capabilities (legacy support in use) [ 629.413042][ T5826] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 629.682739][ T5826] usb 10-1: Using ep0 maxpacket: 32 [ 629.727955][ T5826] usb 10-1: unable to get BOS descriptor or descriptor too short [ 629.790642][ T5826] usb 10-1: config 14 has an invalid interface number: 237 but max is 0 [ 629.862258][ T5826] usb 10-1: config 14 has no interface number 0 [ 629.919555][ T5826] usb 10-1: config 14 interface 237 has no altsetting 0 [ 629.986332][ T5826] usb 10-1: New USB device found, idVendor=050d, idProduct=1203, bcdDevice=f3.a9 [ 630.048531][ T5826] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.119620][ T5826] usb 10-1: Product: syz [ 630.151559][ T5826] usb 10-1: Manufacturer: syz [ 630.193453][ T5826] usb 10-1: SerialNumber: syz [ 630.223034][T13117] fuse: Bad value for 'fd' [ 630.494902][ T5826] belkin_sa 10-1:14.237: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 630.596363][ T5826] usb 10-1: bcdDevice: f3a9, bfc: 0 [ 630.655306][ T5826] usb 10-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 631.355989][ T5826] usb 10-1: USB disconnect, device number 9 [ 631.433950][ T5826] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 631.538905][ T5826] belkin_sa 10-1:14.237: device disconnected [ 631.722717][ T8] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 632.000166][ T8] usb 2-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 632.071224][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 5184, setting to 1024 [ 632.192544][ T8] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 632.282626][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 632.405675][ T8] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 632.498560][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.570805][T13126] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 632.651142][ T8] pl2303 2-1:1.0: required endpoints missing [ 632.876932][ T8] usb 2-1: USB disconnect, device number 13 [ 633.083057][T13135] xt_hashlimit: size too large, truncated to 1048576 [ 637.337948][T13168] xt_hashlimit: size too large, truncated to 1048576 [ 640.416496][T13184] xt_hashlimit: size too large, truncated to 1048576 [ 641.765341][ C0] nvme nvme0: long keepalive RTT (1310 ms) [ 642.878008][T13193] loop9: detected capacity change from 0 to 512 [ 642.998903][T13193] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 643.106866][T13193] EXT4-fs (loop9): Test dummy encryption mode enabled [ 643.289393][T13193] EXT4-fs (loop9): Cannot use DAX on a filesystem that may contain inline data [ 645.484015][T13205] xt_hashlimit: size too large, truncated to 1048576 [ 648.751268][T13223] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1676'. [ 651.121659][T13227] netlink: 5364 bytes leftover after parsing attributes in process `syz.9.1671'. [ 652.938610][T13248] loop9: detected capacity change from 0 to 512 [ 653.037924][T13248] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 653.160669][T13248] EXT4-fs (loop9): Test dummy encryption mode enabled [ 653.222607][T13248] EXT4-fs (loop9): Cannot use DAX on a filesystem that may contain inline data [ 654.485948][T13246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1674'. [ 656.406064][T13267] xt_hashlimit: size too large, truncated to 1048576 [ 657.312102][T13270] autofs4:pid:13270:autofs_fill_super: called with bogus options [ 657.514219][T13271] xt_hashlimit: size too large, truncated to 1048576 [ 660.242668][ T8] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 660.485054][ T8] usb 10-1: Using ep0 maxpacket: 32 [ 660.494488][T13308] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1700'. [ 660.549961][ T8] usb 10-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 660.619959][ T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.711631][ T8] usb 10-1: config 0 descriptor?? [ 660.842657][ T8] as10x_usb: device has been detected [ 660.848539][ T8] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 660.978657][T13312] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1701'. [ 661.058878][ T8] usb 10-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 661.316212][ T8] as10x_usb: error during firmware upload part1 [ 661.392861][ T8] Registered device nBox DVB-T Dongle [ 661.432323][ T8] usb 10-1: USB disconnect, device number 10 [ 661.648876][ T8] Unregistered device nBox DVB-T Dongle [ 661.653695][ T8] as10x_usb: device has been disconnected [ 662.777852][T13327] xt_hashlimit: size too large, truncated to 1048576 [ 663.376141][T13345] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1710'. [ 664.034302][T13350] kvm_intel: kvm [13349]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x100000081 [ 664.193826][T13350] kvm: kvm [13349]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x1 [ 664.317380][T13350] kvm: kvm [13349]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x81 [ 665.935488][T13374] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1720'. [ 668.046617][T13394] xt_hashlimit: size too large, truncated to 1048576 [ 669.150074][T13404] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1730'. [ 672.778756][T13432] xt_hashlimit: size too large, truncated to 1048576 [ 674.052569][ T8] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 674.363208][ T8] usb 10-1: Using ep0 maxpacket: 16 [ 674.412662][ T8] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.484119][ T8] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 674.555252][ T8] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 674.631504][ T8] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 674.733502][ T8] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 674.800467][ T8] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 674.860567][ T8] usb 10-1: Manufacturer: syz [ 674.944201][ T8] usb 10-1: config 0 descriptor?? [ 675.209898][ T8] usb 10-1: USB disconnect, device number 11 [ 678.123386][T13465] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1752'. [ 678.134509][T13466] xt_hashlimit: size too large, truncated to 1048576 [ 679.187500][T13474] loop9: detected capacity change from 0 to 512 [ 679.232709][T13474] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 679.293852][T13474] EXT4-fs (loop9): Test dummy encryption mode enabled [ 679.327735][T13474] EXT4-fs (loop9): Cannot use DAX on a filesystem that may contain inline data [ 681.079143][ C0] vcan0: j1939_tp_rxtimer: 0xffff888062ec2400: rx timeout, send abort [ 681.138479][T13491] loop9: detected capacity change from 0 to 1024 [ 681.167919][T13491] EXT4-fs: Ignoring removed nobh option [ 681.210340][T13491] EXT4-fs: Ignoring removed bh option [ 681.244230][T13491] EXT4-fs (loop9): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 681.318020][T13491] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 681.579238][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802d7e1000: rx timeout, send abort [ 681.592636][ C0] vcan0: j1939_tp_rxtimer: 0xffff888062ec2400: abort rx timeout. Force session deactivation [ 682.087484][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802d7e1000: abort rx timeout. Force session deactivation [ 682.163881][T13491] System zones: 0-1, 3-12 [ 682.183561][T13491] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 682.197726][T13504] xt_hashlimit: size too large, truncated to 1048576 [ 683.864455][ T9084] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.623562][T12070] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 685.857278][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.863824][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.957681][T13612] netlink: 80 bytes leftover after parsing attributes in process `syz.9.1789'. [ 690.733102][T13637] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1800'. [ 693.235981][T13661] netlink: 80 bytes leftover after parsing attributes in process `syz.9.1810'. [ 693.410228][T13663] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1811'. [ 694.203058][T13674] fuse: Bad value for 'fd' [ 695.384927][T13683] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1819'. [ 698.163156][T13708] fuse: Bad value for 'fd' [ 698.449850][T13713] netlink: 80 bytes leftover after parsing attributes in process `syz.9.1828'. [ 700.737118][T13725] loop9: detected capacity change from 0 to 32768 [ 700.788194][T13725] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop9 scanned by syz.9.1832 (13725) [ 701.454425][T13737] fuse: Bad value for 'fd' [ 701.481143][T13725] BTRFS info (device loop9): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 701.556420][T13725] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm [ 701.649613][T13725] BTRFS info (device loop9): using free space tree [ 701.714664][T13746] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1840'. [ 701.855298][T13725] BTRFS info (device loop9): enabling ssd optimizations [ 701.915980][T13725] BTRFS info (device loop9): auto enabling async discard [ 705.365363][ T9084] BTRFS info (device loop9): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 706.853007][T13809] netlink: 80 bytes leftover after parsing attributes in process `syz.9.1849'. [ 707.390594][T13820] fuse: Bad value for 'fd' [ 708.948481][T13831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 708.956034][T13831] 8021q: adding VLAN 0 to HW filter on device team0 [ 709.157940][T13831] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 709.411390][T13838] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1869'. [ 709.693853][T13849] fuse: Bad value for 'fd' [ 710.706991][T13868] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1880'. [ 711.128943][T13874] fuse: Bad value for 'fd' [ 711.450128][T13880] jffs2: notice: (13880) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 713.700923][T13897] netlink: 80 bytes leftover after parsing attributes in process `syz.9.1891'. [ 716.012567][ T788] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 716.270460][ T788] usb 10-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0x7C, skipping [ 716.382932][ T788] usb 10-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 716.433160][ T788] usb 10-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 716.441604][ T788] usb 10-1: Manufacturer: syz [ 716.512914][ T788] usb 10-1: SerialNumber: syz [ 716.976583][ T788] usbhid 10-1:36.0: couldn't find an input interrupt endpoint [ 717.057560][ T788] usb 10-1: USB disconnect, device number 12 [ 717.364537][T13930] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1903'. [ 718.275367][T13938] xt_hashlimit: max too large, truncated to 1048576 [ 719.463083][T13955] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1913'. [ 719.773072][ T8090] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 719.999918][ T8090] usb 10-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 720.060172][ T8090] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.119517][ T8090] usb 10-1: Product: syz [ 720.160636][ T8090] usb 10-1: Manufacturer: syz [ 720.188647][ T8090] usb 10-1: SerialNumber: syz [ 720.228648][ T8090] usb 10-1: config 0 descriptor?? [ 720.270961][ T8090] ch341 10-1:0.0: ch341-uart converter detected [ 720.746534][T13977] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1924'. [ 722.138860][ T8090] usb 10-1: failed to send control message: -110 [ 722.168068][ T8090] ch341-uart: probe of ttyUSB0 failed with error -110 [ 722.518076][ T8090] usb 10-1: USB disconnect, device number 13 [ 722.583535][ T8090] ch341 10-1:0.0: device disconnected [ 723.102559][ T8090] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 723.324782][ T8090] usb 10-1: Using ep0 maxpacket: 16 [ 723.336561][ T8090] usb 10-1: unable to get BOS descriptor or descriptor too short [ 723.375711][ T8090] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 723.442738][ T8090] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 723.512362][ T8090] usb 10-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 723.582461][ T8090] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.590619][ T8090] usb 10-1: Product: syz [ 723.663634][ T8090] usb 10-1: Manufacturer: syz [ 723.685384][ T8090] usb 10-1: SerialNumber: syz [ 724.470738][ T8090] usb 10-1: USB disconnect, device number 14 [ 725.523304][ T8090] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 725.802677][ T8090] usb 10-1: Using ep0 maxpacket: 16 [ 725.936876][ T8090] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 726.199635][ T8090] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 726.278964][ T8090] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 726.356771][ T8090] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 726.450094][ T8090] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 726.509071][ T8090] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 727.659477][ T8090] usb 10-1: Manufacturer: syz [ 727.703226][ T8090] usb 10-1: config 0 descriptor?? [ 728.168528][ T5826] usb 10-1: USB disconnect, device number 15 [ 730.448829][T14075] loop9: detected capacity change from 0 to 32768 [ 730.528301][T14075] (syz.9.1959,14075,0):ocfs2_verify_volume:2344 ERROR: found superblock with incorrect block size bits: found 0, should be 9, 10, 11, or 12 [ 730.675328][T14075] (syz.9.1959,14075,0):ocfs2_verify_volume:2385 ERROR: status = -22 [ 730.746015][T14075] (syz.9.1959,14075,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 730.822744][T14075] (syz.9.1959,14075,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 732.672854][ T8] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 732.882958][ T8] usb 10-1: Using ep0 maxpacket: 16 [ 732.928350][ T8] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.974949][ T8] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 733.057794][ T8] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 733.263515][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d750000: rx timeout, send abort [ 733.684771][ T8] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 733.748897][ T8] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 733.763588][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d753800: rx timeout, send abort [ 733.771792][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d750000: abort rx timeout. Force session deactivation [ 733.793208][T14115] netlink: 'syz.1.1965': attribute type 3 has an invalid length. [ 733.853314][ T8] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 733.861420][ T8] usb 10-1: Manufacturer: syz [ 733.943168][ T8] usb 10-1: config 0 descriptor?? [ 734.182005][ T8] usb 10-1: USB disconnect, device number 16 [ 734.271789][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d753800: abort rx timeout. Force session deactivation [ 737.373102][T14148] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1974'. [ 739.403066][ C0] vcan0: j1939_tp_rxtimer: 0xffff888067b68c00: rx timeout, send abort [ 739.903169][ C0] vcan0: j1939_tp_rxtimer: 0xffff888067b68000: rx timeout, send abort [ 739.911729][ C0] vcan0: j1939_tp_rxtimer: 0xffff888067b68c00: abort rx timeout. Force session deactivation [ 740.411400][ C0] vcan0: j1939_tp_rxtimer: 0xffff888067b68000: abort rx timeout. Force session deactivation [ 742.226586][T14205] loop9: detected capacity change from 0 to 32768 [ 743.322918][T14205] JBD2: Ignoring recovery information on journal [ 743.558675][T14205] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 743.865978][T14229] netlink: 296 bytes leftover after parsing attributes in process `syz.7.2014'. [ 743.948853][T14231] ip_tables: iptables: counters copy to user failed while replacing table [ 744.001657][T14229] ip_tables: iptables: counters copy to user failed while replacing table [ 744.471726][ T9084] ocfs2: Unmounting device (7,9) on (node local) [ 746.926269][T14264] loop9: detected capacity change from 0 to 4096 [ 747.048505][T14267] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 747.299384][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.305784][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.963596][T14323] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2035'. [ 751.123624][T14323] bond0: (slave syz_tun): Releasing backup interface [ 752.487211][T14341] loop9: detected capacity change from 0 to 4096 [ 752.637327][T14341] ntfs3: loop9: ino=3, ntfs_set_state failed, -22. [ 752.715111][T14341] ntfs3: loop9: Failed to initialize $Extend/$ObjId. [ 752.913162][ T79] ntfs3: loop9: ino=3, ntfs3_write_inode failed, -22. [ 752.967787][ T9084] ntfs3: loop9: ino=3, ntfs_set_state failed, -22. [ 753.002631][ T9084] ntfs3: loop9: Mark volume as dirty due to NTFS errors [ 753.082082][ T9084] ntfs3: loop9: ino=3, ntfs_set_state failed, -22. [ 753.135901][ T79] ntfs3: loop9: ino=3, ntfs3_write_inode failed, -22. [ 753.830017][T14353] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20004 [ 754.777106][T14369] fuse: Bad value for 'fd' [ 754.979270][T12070] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 756.101132][T14397] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20004 [ 756.703032][T14378] loop9: detected capacity change from 0 to 32768 [ 756.784332][T14378] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop9 scanned by syz.9.2069 (14378) [ 756.850172][T14400] fuse: Bad value for 'fd' [ 756.933619][T14378] BTRFS info (device loop9): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 757.045283][T14378] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm [ 757.166699][T14378] BTRFS info (device loop9): using free space tree [ 757.471611][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ccbdc00: rx timeout, send abort [ 757.540941][T14378] BTRFS info (device loop9): enabling ssd optimizations [ 757.621748][T14378] BTRFS info (device loop9): auto enabling async discard [ 757.642718][ T79] bond0: (slave bond_slave_0): link status definitely up [ 757.650073][ T79] bond0: active interface up! [ 757.728247][T12070] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 757.916414][T10020] bond0: (slave bond_slave_0): interface is now down [ 757.971686][ C0] vcan0: j1939_tp_rxtimer: 0xffff888029f25800: rx timeout, send abort [ 757.980040][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ccbdc00: abort rx timeout. Force session deactivation [ 758.043428][T10020] bond0: now running without any active interface! [ 758.308266][ T9084] BTRFS info (device loop9): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 758.479977][ C0] vcan0: j1939_tp_rxtimer: 0xffff888029f25800: abort rx timeout. Force session deactivation [ 758.634574][T14437] fuse: Bad value for 'fd' [ 762.440655][T14471] fuse: Bad value for 'fd' [ 769.706347][T14519] xt_hashlimit: size too large, truncated to 1048576 [ 770.297854][T14525] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2117'. [ 770.376303][T14525] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2117'. [ 770.681655][T14532] overlayfs: failed to clone upperpath [ 771.147644][T14544] netlink: 108 bytes leftover after parsing attributes in process `syz.7.2123'. [ 773.361625][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880259e7800: rx timeout, send abort [ 773.861707][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880259e4000: rx timeout, send abort [ 773.871297][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880259e7800: abort rx timeout. Force session deactivation [ 774.369933][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880259e4000: abort rx timeout. Force session deactivation [ 775.480849][ T788] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 775.606230][T14579] syz.1.2137 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 775.615963][T14579] CPU: 0 PID: 14579 Comm: syz.1.2137 Not tainted syzkaller #0 [ 775.623405][T14579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 775.633441][T14579] Call Trace: [ 775.636703][T14579] [ 775.639624][T14579] dump_stack_lvl+0x18c/0x250 [ 775.644298][T14579] ? show_regs_print_info+0x20/0x20 [ 775.649480][T14579] ? load_image+0x420/0x420 [ 775.653964][T14579] ? ___ratelimit+0x478/0x610 [ 775.658630][T14579] ? radix_tree_cpu_dead+0x160/0x160 [ 775.663901][T14579] dump_header+0xd8/0x820 [ 775.668219][T14579] oom_kill_process+0x390/0x580 [ 775.673060][T14579] out_of_memory+0xe0e/0x1200 [ 775.677723][T14579] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 775.683341][T14579] ? print_unlock_imbalance_bug+0x160/0x160 [ 775.689216][T14579] ? mutex_lock_nested+0x20/0x20 [ 775.694138][T14579] ? unregister_oom_notifier+0x20/0x20 [ 775.699585][T14579] mem_cgroup_out_of_memory+0x2c2/0x390 [ 775.705115][T14579] ? try_charge_memcg+0xc91/0x17c0 [ 775.710227][T14579] ? drain_local_stock+0x630/0x630 [ 775.715327][T14579] ? do_raw_spin_unlock+0x121/0x230 [ 775.720513][T14579] try_charge_memcg+0xca1/0x17c0 [ 775.725444][T14579] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 775.731237][T14579] ? folio_flags+0x120/0x120 [ 775.735810][T14579] ? shmem_alloc_folio+0x1f4/0x2a0 [ 775.740934][T14579] ? percpu_ref_tryget+0x15/0x180 [ 775.745960][T14579] ? get_mem_cgroup_from_mm+0x38/0x290 [ 775.751403][T14579] charge_memcg+0x11b/0x3b0 [ 775.755890][T14579] ? __mem_cgroup_charge+0x80/0x80 [ 775.760982][T14579] ? get_mem_cgroup_from_mm+0x38/0x290 [ 775.766420][T14579] ? get_mem_cgroup_from_mm+0x38/0x290 [ 775.771864][T14579] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 775.777391][T14579] __mem_cgroup_charge+0x25/0x80 [ 775.782312][T14579] shmem_add_to_page_cache+0x8d3/0x1b80 [ 775.787854][T14579] ? xas_load+0x12b/0x140 [ 775.792173][T14579] ? shmem_alloc_folio+0x2a0/0x2a0 [ 775.797267][T14579] ? mark_lock+0x94/0x320 [ 775.801583][T14579] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 775.807559][T14579] ? __lock_acquire+0x7d80/0x7d80 [ 775.812568][T14579] ? lock_chain_count+0x20/0x20 [ 775.817402][T14579] shmem_get_folio_gfp+0x1037/0x2b40 [ 775.822683][T14579] shmem_write_begin+0xf2/0x430 [ 775.827531][T14579] generic_perform_write+0x2fe/0x5c0 [ 775.832806][T14579] ? generic_file_direct_write+0x3e0/0x3e0 [ 775.838597][T14579] ? file_update_time+0x192/0x1a0 [ 775.843634][T14579] shmem_file_write_iter+0xfb/0x120 [ 775.848837][T14579] __kernel_write_iter+0x29f/0x6d0 [ 775.853943][T14579] ? vfs_read+0x990/0x990 [ 775.858257][T14579] ? get_dump_page+0x156/0x200 [ 775.863012][T14579] ? __asan_memset+0x22/0x40 [ 775.867589][T14579] ? iov_iter_bvec+0xd4/0x1b0 [ 775.872253][T14579] dump_user_range+0x418/0x840 [ 775.877005][T14579] ? dump_skip+0x40/0x40 [ 775.881225][T14579] ? dump_emit+0x78/0xe0 [ 775.885455][T14579] ? dump_emit+0xa6/0xe0 [ 775.889680][T14579] ? elf_core_dump+0x2dbb/0x37c0 [ 775.894605][T14579] elf_core_dump+0x320e/0x37c0 [ 775.899365][T14579] ? load_elf_binary+0x2850/0x2850 [ 775.904487][T14579] ? verify_lock_unused+0x140/0x140 [ 775.909677][T14579] ? __lock_acquire+0x7d80/0x7d80 [ 775.914686][T14579] ? mas_next_slot+0x94c/0x980 [ 775.919456][T14579] ? rcu_read_lock_any_held+0xb4/0x140 [ 775.924899][T14579] ? 0xffffffffff600000 [ 775.929045][T14579] do_coredump+0x1791/0x24a0 [ 775.933629][T14579] ? nfs_stat_to_errno+0x170/0x170 [ 775.938750][T14579] ? lock_chain_count+0x20/0x20 [ 775.943603][T14579] ? _raw_spin_unlock_irq+0x23/0x50 [ 775.948786][T14579] ? lockdep_hardirqs_on+0x98/0x150 [ 775.953964][T14579] get_signal+0x10da/0x1390 [ 775.958458][T14579] arch_do_signal_or_restart+0xc2/0x7b0 [ 775.964028][T14579] ? get_sigframe_size+0x20/0x20 [ 775.968954][T14579] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 775.974930][T14579] ? exit_to_user_mode_loop+0x3b/0x110 [ 775.980373][T14579] exit_to_user_mode_loop+0x70/0x110 [ 775.985645][T14579] exit_to_user_mode_prepare+0xee/0x180 [ 775.991178][T14579] irqentry_exit_to_user_mode+0x9/0x30 [ 775.996617][T14579] exc_page_fault+0x8c/0x100 [ 776.001189][T14579] asm_exc_page_fault+0x26/0x30 [ 776.006025][T14579] RIP: 0033:0x7f69e4d9e161 [ 776.010424][T14579] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 776.030014][T14579] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 776.036082][T14579] RAX: 0000000000000000 RBX: 00007f69e5025fa0 RCX: 00007f69e4d9e159 [ 776.044034][T14579] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 776.051986][T14579] RBP: 00007f69e4e3506b R08: 0000000000000000 R09: 0000000000000000 [ 776.059939][T14579] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 776.067890][T14579] R13: 00007f69e5026038 R14: 00007f69e5025fa0 R15: 00007ffe640d1fa8 [ 776.075853][T14579] [ 776.079898][T14579] memory: usage 307200kB, limit 307200kB, failcnt 61264 [ 776.086869][T14579] memory+swap: usage 431984kB, limit 9007199254740988kB, failcnt 0 [ 776.094897][T14579] kmem: usage 2676kB, limit 9007199254740988kB, failcnt 0 [ 776.102036][T14579] Memory cgroup stats for /syz1: [ 776.102128][T14579] cache 311021568 [ 776.110701][T14579] rss 811008 [ 776.113925][T14579] rss_huge 0 [ 776.117107][T14579] shmem 310927360 [ 776.120727][T14579] mapped_file 205492224 [ 776.124907][T14579] dirty 90112 [ 776.128173][T14579] writeback 0 [ 776.131437][T14579] workingset_refault_anon 14 [ 776.136067][T14579] workingset_refault_file 2958 [ 776.140808][T14579] swap 127778816 [ 776.144354][T14579] pgpgin 1199528 [ 776.147881][T14579] pgpgout 1123397 [ 776.151494][T14579] pgfault 496717 [ 776.155090][T14579] pgmajfault 67 [ 776.159183][T14579] inactive_anon 237383680 [ 776.163545][T14579] active_anon 74199040 [ 776.167621][T14579] inactive_file 0 [ 776.171237][T14579] active_file 94208 [ 776.175279][T14579] unevictable 0 [ 776.178721][T14579] hierarchical_memory_limit 314572800 [ 776.184120][T14579] hierarchical_memsw_limit 9223372036854771712 [ 776.190251][T14579] total_cache 311021568 [ 776.194461][T14579] total_rss 811008 [ 776.198173][T14579] total_rss_huge 0 [ 776.201876][T14579] total_shmem 310927360 [ 776.206038][T14579] total_mapped_file 205492224 [ 776.210695][T14579] total_dirty 90112 [ 776.214543][T14579] total_writeback 0 [ 776.218328][T14579] total_workingset_refault_anon 14 [ 776.223481][T14579] total_workingset_refault_file 2958 [ 776.228747][T14579] total_swap 127778816 [ 776.232840][T14579] total_pgpgin 1199528 [ 776.236911][T14579] total_pgpgout 1123397 [ 776.241062][T14579] total_pgfault 496717 [ 776.245134][T14579] total_pgmajfault 67 [ 776.249091][T14579] total_inactive_anon 237383680 [ 776.253954][T14579] total_active_anon 74199040 [ 776.258520][T14579] total_inactive_file 0 [ 776.263274][T14579] total_active_file 94208 [ 776.267585][T14579] total_unevictable 0 [ 776.271544][T14579] anon_cost 0 [ 776.274865][T14579] file_cost 0 [ 776.278127][T14579] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2034,pid=14294,uid=0 [ 776.293300][T14579] Memory cgroup out of memory: Killed process 14294 (syz.1.2034) total-vm:200548kB, anon-rss:1524kB, file-rss:20608kB, shmem-rss:118656kB, UID:0 pgtables:340kB oom_score_adj:0 [ 885.542552][ C0] ------------[ cut here ]------------ [ 885.549433][ C0] WARNING: CPU: 0 PID: 14579 at kernel/rcu/tree_stall.h:1001 rcu_check_gp_start_stall+0x2dc/0x460 [ 885.560092][ C0] Modules linked in: [ 885.563973][ C0] CPU: 0 PID: 14579 Comm: syz.1.2137 Not tainted syzkaller #0 [ 885.571412][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 885.581450][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 885.587767][ C0] Code: ff ff ff 48 c7 c7 a0 44 33 97 be 04 00 00 00 e8 ea 2f 6e 00 48 89 df b8 01 00 00 00 87 05 2c 5b c1 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 40 73 13 8d 74 47 48 c7 c0 2c 66 8c 8e 48 c1 e8 03 [ 885.607357][ C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00010046 [ 885.613410][ C0] RAX: 0000000000000000 RBX: ffffffff8d137340 RCX: ffffffff8171e966 [ 885.621364][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8d137340 [ 885.629318][ C0] RBP: ffffc90000007e30 R08: 0000000000000003 R09: 0000000000000004 [ 885.637273][ C0] R10: dffffc0000000000 R11: fffffbfff2e66894 R12: 0000000000002904 [ 885.645225][ C0] R13: 1ffff92000000f94 R14: 0000000000000a02 R15: dffffc0000000000 [ 885.653179][ C0] FS: 00007f69e5cb86c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 885.662105][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 885.668686][ C0] CR2: 00007f855b170700 CR3: 0000000064566000 CR4: 00000000003506f0 [ 885.676657][ C0] Call Trace: [ 885.679929][ C0] [ 885.682762][ C0] rcu_core+0x5ec/0x17f0 [ 885.686995][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 885.692183][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 885.698069][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 885.703260][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 885.708448][ C0] ? sched_clock+0x3f/0x60 [ 885.712882][ C0] ? mark_lock+0x94/0x320 [ 885.717199][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 885.723164][ C0] ? __bpf_trace_tasklet+0x160/0x160 [ 885.728460][ C0] ? lock_chain_count+0x20/0x20 [ 885.733298][ C0] handle_softirqs+0x27d/0x820 [ 885.738043][ C0] ? read_tsc+0x9/0x20 [ 885.742096][ C0] ? ktime_get+0x24b/0x280 [ 885.746522][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 885.751274][ C0] ? do_softirq+0x1a0/0x1a0 [ 885.755788][ C0] __irq_exit_rcu+0xd3/0x190 [ 885.760363][ C0] ? irq_exit_rcu+0x20/0x20 [ 885.764856][ C0] irq_exit_rcu+0x9/0x20 [ 885.769108][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 885.774727][ C0] [ 885.777645][ C0] [ 885.780563][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 885.786549][ C0] RIP: 0010:lock_acquire+0x208/0x420 [ 885.791820][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 885.811430][ C0] RSP: 0018:ffffc90004cd6220 EFLAGS: 00000206 [ 885.817481][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: cde12d1ecafc4000 [ 885.825440][ C0] RDX: 0000000000000000 RSI: ffffffff8acade60 RDI: ffffffff8b1d3ba0 [ 885.833394][ C0] RBP: ffffc90004cd6328 R08: dffffc0000000000 R09: 1ffffffff223d6a0 [ 885.841350][ C0] R10: dffffc0000000000 R11: fffffbfff223d6a1 R12: 1ffff9200099ac50 [ 885.849303][ C0] R13: ffffffff8d1320e0 R14: 0000000000000246 R15: dffffc0000000000 [ 885.857273][ C0] ? read_lock_is_recursive+0x20/0x20 [ 885.862665][ C0] ? xa_load+0x64/0x2e0 [ 885.866805][ C0] xa_load+0x80/0x2e0 [ 885.870773][ C0] ? xa_load+0x64/0x2e0 [ 885.874914][ C0] ? list_lru_count_one+0x27/0x2c0 [ 885.880010][ C0] list_lru_count_one+0x139/0x2c0 [ 885.885023][ C0] super_cache_count+0x18d/0x290 [ 885.889947][ C0] do_shrink_slab+0x8d/0xd20 [ 885.894523][ C0] ? __init_rwsem+0x160/0x160 [ 885.899183][ C0] ? radix_tree_lookup+0x239/0x280 [ 885.904305][ C0] shrink_slab+0x487/0x7c0 [ 885.908707][ C0] ? trace_raw_output_mm_vmscan_throttled+0x1d0/0x1d0 [ 885.915455][ C0] ? mem_cgroup_iter+0x3c/0x4a0 [ 885.920289][ C0] ? mem_cgroup_iter+0x3c/0x4a0 [ 885.925124][ C0] ? mem_cgroup_iter+0x36f/0x4a0 [ 885.930043][ C0] ? mem_cgroup_iter+0x3c/0x4a0 [ 885.934902][ C0] shrink_node+0x9b4/0x3740 [ 885.939408][ C0] ? allow_direct_reclaim+0x8f0/0x8f0 [ 885.944762][ C0] ? wq_worker_last_func+0x40/0x40 [ 885.949859][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 885.955043][ C0] ? _raw_spin_unlock+0x28/0x40 [ 885.959878][ C0] ? vmpressure_prio+0xe3/0x140 [ 885.964719][ C0] do_try_to_free_pages+0x67e/0x1ae0 [ 885.970003][ C0] ? try_to_free_pages+0xeb0/0xeb0 [ 885.975099][ C0] ? mark_lock+0x94/0x320 [ 885.979418][ C0] try_to_free_mem_cgroup_pages+0x325/0x7e0 [ 885.985294][ C0] ? shrink_lruvec+0x2b90/0x2b90 [ 885.990209][ C0] ? psi_memstall_enter+0x244/0x2e0 [ 885.995422][ C0] ? cgroup_file_notify+0x110/0x190 [ 886.000635][ C0] try_charge_memcg+0x5de/0x17c0 [ 886.005566][ C0] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 886.011364][ C0] ? folio_flags+0x120/0x120 [ 886.015962][ C0] ? shmem_alloc_folio+0x1f4/0x2a0 [ 886.021066][ C0] ? percpu_ref_tryget+0x15/0x180 [ 886.026077][ C0] ? get_mem_cgroup_from_mm+0x38/0x290 [ 886.031523][ C0] charge_memcg+0x11b/0x3b0 [ 886.036013][ C0] ? __mem_cgroup_charge+0x80/0x80 [ 886.041107][ C0] ? get_mem_cgroup_from_mm+0x38/0x290 [ 886.046549][ C0] ? get_mem_cgroup_from_mm+0x38/0x290 [ 886.052015][ C0] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 886.057547][ C0] __mem_cgroup_charge+0x25/0x80 [ 886.062493][ C0] shmem_add_to_page_cache+0x8d3/0x1b80 [ 886.068030][ C0] ? xas_load+0x12b/0x140 [ 886.072349][ C0] ? shmem_alloc_folio+0x2a0/0x2a0 [ 886.077446][ C0] ? mark_lock+0x94/0x320 [ 886.081760][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 886.087747][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 886.092758][ C0] ? lock_chain_count+0x20/0x20 [ 886.097593][ C0] shmem_get_folio_gfp+0x1037/0x2b40 [ 886.102877][ C0] shmem_write_begin+0xf2/0x430 [ 886.107715][ C0] generic_perform_write+0x2fe/0x5c0 [ 886.112995][ C0] ? generic_file_direct_write+0x3e0/0x3e0 [ 886.118792][ C0] ? file_update_time+0x192/0x1a0 [ 886.123803][ C0] shmem_file_write_iter+0xfb/0x120 [ 886.128992][ C0] __kernel_write_iter+0x29f/0x6d0 [ 886.134091][ C0] ? vfs_read+0x990/0x990 [ 886.138406][ C0] ? get_dump_page+0x156/0x200 [ 886.143156][ C0] ? __asan_memset+0x22/0x40 [ 886.147730][ C0] ? iov_iter_bvec+0xd4/0x1b0 [ 886.152394][ C0] dump_user_range+0x418/0x840 [ 886.157149][ C0] ? dump_skip+0x40/0x40 [ 886.161376][ C0] ? dump_emit+0x78/0xe0 [ 886.165608][ C0] ? dump_emit+0xa6/0xe0 [ 886.169841][ C0] ? elf_core_dump+0x2dbb/0x37c0 [ 886.174766][ C0] elf_core_dump+0x320e/0x37c0 [ 886.179525][ C0] ? load_elf_binary+0x2850/0x2850 [ 886.184655][ C0] ? verify_lock_unused+0x140/0x140 [ 886.189842][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 886.194852][ C0] ? mas_next_slot+0x94c/0x980 [ 886.199621][ C0] ? rcu_read_lock_any_held+0xb4/0x140 [ 886.205062][ C0] ? 0xffffffffff600000 [ 886.209204][ C0] do_coredump+0x1791/0x24a0 [ 886.213787][ C0] ? nfs_stat_to_errno+0x170/0x170 [ 886.218891][ C0] ? lock_chain_count+0x20/0x20 [ 886.223725][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 886.228905][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 886.234087][ C0] get_signal+0x10da/0x1390 [ 886.238585][ C0] arch_do_signal_or_restart+0xc2/0x7b0 [ 886.244119][ C0] ? get_sigframe_size+0x20/0x20 [ 886.249041][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 886.255009][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 886.260456][ C0] exit_to_user_mode_loop+0x70/0x110 [ 886.265728][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 886.271256][ C0] irqentry_exit_to_user_mode+0x9/0x30 [ 886.276696][ C0] exc_page_fault+0x8c/0x100 [ 886.281270][ C0] asm_exc_page_fault+0x26/0x30 [ 886.286107][ C0] RIP: 0033:0x7f69e4d9e161 [ 886.290506][ C0] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 886.310095][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 886.316146][ C0] RAX: 0000000000000000 RBX: 00007f69e5025fa0 RCX: 00007f69e4d9e159 [ 886.324101][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 886.332053][ C0] RBP: 00007f69e4e3506b R08: 0000000000000000 R09: 0000000000000000 [ 886.340005][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 886.347958][ C0] R13: 00007f69e5026038 R14: 00007f69e5025fa0 R15: 00007ffe640d1fa8 [ 886.355920][ C0] [ 886.358927][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 886.366183][ C0] CPU: 0 PID: 14579 Comm: syz.1.2137 Not tainted syzkaller #0 [ 886.373617][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 886.383649][ C0] Call Trace: [ 886.386916][ C0] [ 886.389744][ C0] dump_stack_lvl+0x18c/0x250 [ 886.394408][ C0] ? show_regs_print_info+0x20/0x20 [ 886.399589][ C0] ? load_image+0x420/0x420 [ 886.404080][ C0] panic+0x2ca/0x720 [ 886.407961][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 886.412453][ C0] __warn+0x2e0/0x470 [ 886.416416][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 886.422120][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 886.427822][ C0] report_bug+0x2be/0x4f0 [ 886.432139][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 886.437842][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 886.443545][ C0] ? rcu_check_gp_start_stall+0x2de/0x460 [ 886.449248][ C0] handle_bug+0xcf/0x120 [ 886.453474][ C0] exc_invalid_op+0x1a/0x50 [ 886.457960][ C0] asm_exc_invalid_op+0x1a/0x20 [ 886.462804][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 886.469117][ C0] Code: ff ff ff 48 c7 c7 a0 44 33 97 be 04 00 00 00 e8 ea 2f 6e 00 48 89 df b8 01 00 00 00 87 05 2c 5b c1 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 40 73 13 8d 74 47 48 c7 c0 2c 66 8c 8e 48 c1 e8 03 [ 886.488702][ C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00010046 [ 886.494750][ C0] RAX: 0000000000000000 RBX: ffffffff8d137340 RCX: ffffffff8171e966 [ 886.502701][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8d137340 [ 886.510653][ C0] RBP: ffffc90000007e30 R08: 0000000000000003 R09: 0000000000000004 [ 886.518606][ C0] R10: dffffc0000000000 R11: fffffbfff2e66894 R12: 0000000000002904 [ 886.526558][ C0] R13: 1ffff92000000f94 R14: 0000000000000a02 R15: dffffc0000000000 [ 886.534517][ C0] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 886.540228][ C0] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 886.545933][ C0] rcu_core+0x5ec/0x17f0 [ 886.550159][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 886.555344][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 886.561245][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 886.566442][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 886.571629][ C0] ? sched_clock+0x3f/0x60 [ 886.576039][ C0] ? mark_lock+0x94/0x320 [ 886.580363][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 886.586327][ C0] ? __bpf_trace_tasklet+0x160/0x160 [ 886.591598][ C0] ? lock_chain_count+0x20/0x20 [ 886.596437][ C0] handle_softirqs+0x27d/0x820 [ 886.601204][ C0] ? read_tsc+0x9/0x20 [ 886.605269][ C0] ? ktime_get+0x24b/0x280 [ 886.609698][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 886.614482][ C0] ? do_softirq+0x1a0/0x1a0 [ 886.619024][ C0] __irq_exit_rcu+0xd3/0x190 [ 886.623624][ C0] ? irq_exit_rcu+0x20/0x20 [ 886.628131][ C0] irq_exit_rcu+0x9/0x20 [ 886.632361][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 886.637984][ C0] [ 886.640940][ C0] [ 886.643895][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 886.649880][ C0] RIP: 0010:lock_acquire+0x208/0x420 [ 886.655166][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 886.674801][ C0] RSP: 0018:ffffc90004cd6220 EFLAGS: 00000206 [ 886.680852][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: cde12d1ecafc4000 [ 886.688809][ C0] RDX: 0000000000000000 RSI: ffffffff8acade60 RDI: ffffffff8b1d3ba0 [ 886.696781][ C0] RBP: ffffc90004cd6328 R08: dffffc0000000000 R09: 1ffffffff223d6a0 [ 886.704743][ C0] R10: dffffc0000000000 R11: fffffbfff223d6a1 R12: 1ffff9200099ac50 [ 886.712698][ C0] R13: ffffffff8d1320e0 R14: 0000000000000246 R15: dffffc0000000000 [ 886.720670][ C0] ? read_lock_is_recursive+0x20/0x20 [ 886.726034][ C0] ? xa_load+0x64/0x2e0 [ 886.730175][ C0] xa_load+0x80/0x2e0 [ 886.734141][ C0] ? xa_load+0x64/0x2e0 [ 886.738280][ C0] ? list_lru_count_one+0x27/0x2c0 [ 886.743374][ C0] list_lru_count_one+0x139/0x2c0 [ 886.748383][ C0] super_cache_count+0x18d/0x290 [ 886.753306][ C0] do_shrink_slab+0x8d/0xd20 [ 886.757880][ C0] ? __init_rwsem+0x160/0x160 [ 886.762542][ C0] ? radix_tree_lookup+0x239/0x280 [ 886.767638][ C0] shrink_slab+0x487/0x7c0 [ 886.772039][ C0] ? trace_raw_output_mm_vmscan_throttled+0x1d0/0x1d0 [ 886.778787][ C0] ? mem_cgroup_iter+0x3c/0x4a0 [ 886.783620][ C0] ? mem_cgroup_iter+0x3c/0x4a0 [ 886.788452][ C0] ? mem_cgroup_iter+0x36f/0x4a0 [ 886.793367][ C0] ? mem_cgroup_iter+0x3c/0x4a0 [ 886.798228][ C0] shrink_node+0x9b4/0x3740 [ 886.802729][ C0] ? allow_direct_reclaim+0x8f0/0x8f0 [ 886.808085][ C0] ? wq_worker_last_func+0x40/0x40 [ 886.813178][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 886.818357][ C0] ? _raw_spin_unlock+0x28/0x40 [ 886.823202][ C0] ? vmpressure_prio+0xe3/0x140 [ 886.828037][ C0] do_try_to_free_pages+0x67e/0x1ae0 [ 886.833316][ C0] ? try_to_free_pages+0xeb0/0xeb0 [ 886.838409][ C0] ? mark_lock+0x94/0x320 [ 886.842729][ C0] try_to_free_mem_cgroup_pages+0x325/0x7e0 [ 886.848606][ C0] ? shrink_lruvec+0x2b90/0x2b90 [ 886.853539][ C0] ? psi_memstall_enter+0x244/0x2e0 [ 886.858746][ C0] ? cgroup_file_notify+0x110/0x190 [ 886.863943][ C0] try_charge_memcg+0x5de/0x17c0 [ 886.868912][ C0] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 886.874711][ C0] ? folio_flags+0x120/0x120 [ 886.879287][ C0] ? shmem_alloc_folio+0x1f4/0x2a0 [ 886.884393][ C0] ? percpu_ref_tryget+0x15/0x180 [ 886.889401][ C0] ? get_mem_cgroup_from_mm+0x38/0x290 [ 886.894846][ C0] charge_memcg+0x11b/0x3b0 [ 886.899336][ C0] ? __mem_cgroup_charge+0x80/0x80 [ 886.904428][ C0] ? get_mem_cgroup_from_mm+0x38/0x290 [ 886.909866][ C0] ? get_mem_cgroup_from_mm+0x38/0x290 [ 886.915306][ C0] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 886.920833][ C0] __mem_cgroup_charge+0x25/0x80 [ 886.925797][ C0] shmem_add_to_page_cache+0x8d3/0x1b80 [ 886.931327][ C0] ? xas_load+0x12b/0x140 [ 886.935644][ C0] ? shmem_alloc_folio+0x2a0/0x2a0 [ 886.940737][ C0] ? mark_lock+0x94/0x320 [ 886.945056][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 886.951017][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 886.956071][ C0] ? lock_chain_count+0x20/0x20 [ 886.960910][ C0] shmem_get_folio_gfp+0x1037/0x2b40 [ 886.966192][ C0] shmem_write_begin+0xf2/0x430 [ 886.971028][ C0] generic_perform_write+0x2fe/0x5c0 [ 886.976301][ C0] ? generic_file_direct_write+0x3e0/0x3e0 [ 886.982095][ C0] ? file_update_time+0x192/0x1a0 [ 886.987125][ C0] shmem_file_write_iter+0xfb/0x120 [ 886.992322][ C0] __kernel_write_iter+0x29f/0x6d0 [ 886.997430][ C0] ? vfs_read+0x990/0x990 [ 887.001764][ C0] ? get_dump_page+0x156/0x200 [ 887.006527][ C0] ? __asan_memset+0x22/0x40 [ 887.011104][ C0] ? iov_iter_bvec+0xd4/0x1b0 [ 887.015768][ C0] dump_user_range+0x418/0x840 [ 887.020524][ C0] ? dump_skip+0x40/0x40 [ 887.024750][ C0] ? dump_emit+0x78/0xe0 [ 887.028988][ C0] ? dump_emit+0xa6/0xe0 [ 887.033216][ C0] ? elf_core_dump+0x2dbb/0x37c0 [ 887.038146][ C0] elf_core_dump+0x320e/0x37c0 [ 887.042909][ C0] ? load_elf_binary+0x2850/0x2850 [ 887.048011][ C0] ? verify_lock_unused+0x140/0x140 [ 887.053195][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 887.058223][ C0] ? mas_next_slot+0x94c/0x980 [ 887.062995][ C0] ? rcu_read_lock_any_held+0xb4/0x140 [ 887.068456][ C0] ? 0xffffffffff600000 [ 887.072617][ C0] do_coredump+0x1791/0x24a0 [ 887.077200][ C0] ? nfs_stat_to_errno+0x170/0x170 [ 887.082303][ C0] ? lock_chain_count+0x20/0x20 [ 887.087137][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 887.092317][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 887.097495][ C0] get_signal+0x10da/0x1390 [ 887.101988][ C0] arch_do_signal_or_restart+0xc2/0x7b0 [ 887.107519][ C0] ? get_sigframe_size+0x20/0x20 [ 887.112448][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 887.118416][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 887.123859][ C0] exit_to_user_mode_loop+0x70/0x110 [ 887.129152][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 887.134683][ C0] irqentry_exit_to_user_mode+0x9/0x30 [ 887.140125][ C0] exc_page_fault+0x8c/0x100 [ 887.144731][ C0] asm_exc_page_fault+0x26/0x30 [ 887.149565][ C0] RIP: 0033:0x7f69e4d9e161 [ 887.154049][ C0] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 887.173655][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 887.179729][ C0] RAX: 0000000000000000 RBX: 00007f69e5025fa0 RCX: 00007f69e4d9e159 [ 887.187681][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 887.195651][ C0] RBP: 00007f69e4e3506b R08: 0000000000000000 R09: 0000000000000000 [ 887.203604][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 887.211554][ C0] R13: 00007f69e5026038 R14: 00007f69e5025fa0 R15: 00007ffe640d1fa8 [ 887.219519][ C0] [ 887.222582][ C0] Kernel Offset: disabled [ 887.227617][ C0] Rebooting in 86400 seconds..