last executing test programs: 17m18.2802584s ago: executing program 32 (id=945): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) r0 = getpid() creat(&(0x7f0000000140)='./bus\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000100)='dvmrp0\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x3, 0x27b, &(0x7f0000000640)="$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") mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x5c, 0x70, 0xe5, 0x40, 0x22b8, 0x2d99, 0xfba5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x0, 0x0, 0x12, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x42, 0x8a, 0x15, 0x2c}}]}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_pidfd_open(r0, 0x0) 14m9.14280049s ago: executing program 0 (id=1489): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{}, &(0x7f00000007c0), &(0x7f0000000800)='%pi6 \x00'}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000300, 0xe, 0x0, &(0x7f0000000180)='\x00'/14, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14m9.052426894s ago: executing program 0 (id=1490): ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000000)={0x0, 0x1, 'hub\x00'}) close(0xffffffffffffffff) syz_emit_ethernet(0x82, &(0x7f0000000500)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000000800450000740000000000019078ac1e0001ac1414aa05009078e00000e046000000000000000011000000000000ac141400070300070300443c00030a01012f00000000e0000001000000007f00000100000200ac1414aa000000000000000000000000ac141400000000000000000000000000000011ed9cae89b8716edb855fffbbbeadf26ef4c9a6dff41b70e4568a"], 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x1801) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(&(0x7f0000000280)=@filename='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x200020, &(0x7f0000000400)='/dev/sequencer2\x00') r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, &(0x7f0000000280)) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x40, 0x0) r2 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r2, 0x0, &(0x7f0000000440)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x4, 0x64a, 0x0, 0x0, 0x1000, 0x400e, 0x0, 0x0, 0x102}}}, &(0x7f00000005c0)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r3, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 14m8.084082754s ago: executing program 0 (id=1492): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A', 0x1}], 0x1}}], 0x1, 0x4000801) 14m6.058511376s ago: executing program 0 (id=1497): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) mount$fuse(0x0, 0x0, 0x0, 0x2000010, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x9, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, 0x0, 0x0) connect$unix(r1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x22801, 0x2) io_setup(0x202, 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file1\x00', 0x1000040, &(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYBLOB="f206d69b9436474a01529af29dfee9a4061f0d820c84d52ea67a515c77464d78bb3744375520e70264167ef5f4ff7a476378e045f3d362341ff08d27fb8802f24947e028e4e6153bd565ee372bca9e3a8921590105152f519a910f9e0dc53a7cd6bf8c27ca5797f8034d66ba1cb75fb3805a8ddd06a4387b0d95ad568340139009ef9fac4179a9947637aedbbefd86d13f33b12f7f52eb03e70c358f3ffe3a20216cc011f55c7afa7b30bb6ff312e9d92d10f4fe8661", @ANYRESDEC=r0], 0x1, 0x3a2, &(0x7f0000000340)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, 0x0) 14m4.570294576s ago: executing program 0 (id=1506): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000041401000000000002000000080001000000000008000300"], 0x20}}, 0x0) 14m2.867449989s ago: executing program 0 (id=1510): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x40044160, 0x3) socket$nl_generic(0x10, 0x3, 0x10) 14m2.487641938s ago: executing program 33 (id=1510): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x40044160, 0x3) socket$nl_generic(0x10, 0x3, 0x10) 13m53.610893469s ago: executing program 1 (id=1542): ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc0585604, &(0x7f0000000100)={0x1000000}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r4) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) userfaultfd(0x1) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa6f81, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x20002) ioctl$VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f0000000140)={0x9, @raw_data="aa1d33c716d5b6c598bb846045a4bcde20fce0759b5c056dddb296fe6a83dba0fddded3748767a86464e2d891fd2233e2e34bc803b4b8da2533af7268e8114063e523749d15906dd6b2b142a27f2a2422a49a8d947ddcabfc37cb266e3ba7058137740598d04828e74eb7b413ec0847036eca4215e1f2e40b6ec95e1a190fb73954b3ada9faf3ef4d77d6cffe617982304db80ebb456edb8117402076cea30bccfc83eddbac4c369c3528b552ad400"}) socket$inet6(0xa, 0x80002, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0xc0101) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x2}, 0x2) r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2}) r8 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000300)='iocharset', &(0x7f00000001c0)='io#(ap\xac\xbesyt\xca\xb6(\xf9\xde\xe7\x82\v\xad\x9c\xf2\xd7+\x9bCN:?\xfd\xedf0\xb3\xb1\xf4\x8c\x15\xf9G+\x7f\x87\x91JQ\x01\x00\x00\x00\xee@\xf0Pbp\x95\x1a\xc2\xde\xad]\x80~\xf9\xbd|!\ta\xaa\xb2p\xee\x8d\xb6\n\x90wx\xd2\xc5\x00'/95, 0x0) ioctl$VIDIOC_QUERYMENU(r7, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) dup2(0xffffffffffffffff, r0) 13m50.542997512s ago: executing program 1 (id=1553): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x10040003}, 0x8008880) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101010c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13m49.445639101s ago: executing program 1 (id=1555): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{r0}, &(0x7f00000007c0), &(0x7f0000000800)='%pi6 \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000180)='\x00'/14, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 13m49.26398032s ago: executing program 1 (id=1557): syz_mount_image$minix(&(0x7f0000000100), &(0x7f00000066c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1810002, &(0x7f0000006800)=ANY=[], 0x1, 0x1d8, &(0x7f0000000580)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) chdir(&(0x7f0000000080)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x22043, 0x69) 13m48.508171906s ago: executing program 1 (id=1563): openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x44842, 0x1ef) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x144}}, 0x4050) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r3, &(0x7f00000091c0)=""/16384, 0x4000) 13m46.623972637s ago: executing program 1 (id=1566): write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000002480), &(0x7f0000000500)='./file0\x00', 0x200000, &(0x7f00000001c0)=ANY=[], 0x1, 0x495, &(0x7f0000000a40)="$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") bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r2, 0x0, 0x9) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13m46.171498937s ago: executing program 34 (id=1566): write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000002480), &(0x7f0000000500)='./file0\x00', 0x200000, &(0x7f00000001c0)=ANY=[], 0x1, 0x495, &(0x7f0000000a40)="$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") bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r2, 0x0, 0x9) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m29.047426999s ago: executing program 6 (id=2736): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) getpid() setreuid(0x0, 0xee00) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) msgsnd(0x0, &(0x7f0000000140)=ANY=[], 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa62d6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = io_uring_setup(0x29e2, &(0x7f0000000400)={0x0, 0x18e4, 0x0, 0x2}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd']) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x1ef6e3}], 0x100000000000011a) 6m28.96038168s ago: executing program 4 (id=2737): socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x801) socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_INFO(0x0, 0xc, 0x0) syz_clone3(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x4080) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xaf123e30d406ff1, 0x2010, 0xffffffffffffffff, 0xe414c000) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x280, 0x1e0, 0x3014, 0x1, 0x8, 0x3, 0x2, 0x5}}) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x1d, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000300)={0x1, @pix={0x280, 0x1e0, 0x42474752, 0x1, 0x280, 0x4b000, 0x8}}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000400)={0xffffffff, 0x1, 0x1}) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000600)=0x1) 6m23.438112463s ago: executing program 4 (id=2740): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0xfffffffffffffffe) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') lseek(r8, 0x80000002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x40, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x15}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0xc0) 6m19.407700024s ago: executing program 6 (id=2742): r0 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0xfa0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000400)=[{0x18, 0x110, 0x1, "01"}], 0x18}, 0x8000) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 6m19.219747172s ago: executing program 5 (id=2743): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='1', 0x1) 6m18.756950269s ago: executing program 6 (id=2744): socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x2, 0x12, 0xf1, 0x400000000050, 0x12, 0x5, 0x0, 0x1d497c23, 0xffffffffffff9a66, 0x6, 0x0, 0xbdb], 0x4, 0x43100}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000740)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0xdea, 0xfffffffffffffffb, 0xd4, 0x7, 0x0, 0x5, 0xff, 0x400006, 0xffffffff80000004], 0x0, 0x10002}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m18.743001074s ago: executing program 5 (id=2745): syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 6m18.311666731s ago: executing program 5 (id=2746): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$dri(&(0x7f0000000200), 0x9, 0x400) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40240) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000003c0)={{0x3, 0x0, 0x0, 0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000000c0)={0x3, 0x9dc5, 0x0, 0x0, 0xef7826c8d995ba17}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x840, 0x0) r6 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x101, 0x840) ioctl$VIDIOC_SUBDEV_S_SELECTION(r6, 0xc040563e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, {0x68, 0xffffffff, 0x6, 0x95bf6fef}}) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000280)={r7, 0x1}) pipe(&(0x7f0000000180)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c001080", @ANYRES64=r8], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 6m17.57040532s ago: executing program 4 (id=2748): socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_INFO(0x0, 0xc, 0x0) syz_clone3(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x4080) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xaf123e30d406ff1, 0x2010, 0xffffffffffffffff, 0xe414c000) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x280, 0x1e0, 0x3014, 0x1, 0x8, 0x3, 0x2, 0x5}}) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x1d, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000300)={0x1, @pix={0x280, 0x1e0, 0x42474752, 0x1, 0x280, 0x4b000, 0x8}}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000400)={0xffffffff, 0x1, 0x1}) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000600)=0x1) 6m15.431860295s ago: executing program 5 (id=2749): bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000240)=r1) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) close(r4) 6m10.931658597s ago: executing program 6 (id=2750): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) getpid() setreuid(0x0, 0xee00) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) msgsnd(0x0, &(0x7f0000000140)=ANY=[], 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa62d6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = io_uring_setup(0x29e2, &(0x7f0000000400)={0x0, 0x18e4, 0x0, 0x2}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd']) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x1ef6e3}], 0x100000000000011a) 6m8.957915152s ago: executing program 4 (id=2752): r0 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0xfa0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000400)=[{0x18, 0x110, 0x1, "01"}], 0x18}, 0x8000) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)}, 0x0) 6m8.398328625s ago: executing program 2 (id=2753): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='1', 0x1) 6m8.167702099s ago: executing program 2 (id=2754): inotify_init1(0x800) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0) landlock_restrict_self(r5, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0xffffffffffffffff, 0x4000, r4}, 0x18) 6m7.037385859s ago: executing program 2 (id=2755): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000001100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) preadv(r0, &(0x7f0000001040)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 6m6.67347312s ago: executing program 2 (id=2756): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0xfffffffffffffffe) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') lseek(r8, 0x80000002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x40, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x15}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0xc0) 6m3.983131466s ago: executing program 4 (id=2757): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = add_key(0x0, &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x20) keyctl$read(0xb, r2, &(0x7f00000010c0)=""/4096, 0x1000) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0xd, 0x4, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r3 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x85, 0x0, &(0x7f00000010c0)) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x8080, 0x8, 0x3, 0x0, 0x0, r1}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r9 = open(0x0, 0x66842, 0x21) syz_ublk_add_dev(r9, r6, r7, r8, &(0x7f00000003c0)={0x2e, 0x71, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) syz_ublk_setup_queues(r9, 0x0, &(0x7f0000000340)={0x0, 0xfb7e, 0x3000, 0x2, 0x3cf, 0x0, r5}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0xfffffffd, 0x3de, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x200, 0xfffffffe, 0x278}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdada, 0x1000, 0x3, 0x321}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc9b3, 0x20, 0x3, 0x80000c4}}], 0x4, &(0x7f0000000e00)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xf6}, 0x0, r10, '\x00', {0x5, 0xe81, 0x0, 0x0}}, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f0000000080)=""/4080, 0x1044}], 0x1, 0x1, 0x1) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000004200)=[{0x0}], 0x1}, 0x20) 6m3.731367997s ago: executing program 5 (id=2758): syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e00000"], 0x254}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 6m3.729927788s ago: executing program 6 (id=2759): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x2800411, &(0x7f00000003c0)=ANY=[], 0x1, 0x1a4, &(0x7f0000000700)="$eJzsVU9rGkEU/83uuKstlF5bCj20tHqormtb2lN7afED9FwiZmMka/64QqIYMCe/Ry5+kUA+Qg4JuZhDCORg7mHDzLzdjAEPgYRomB/o7/femzdvnoNvVqOtyAVwPenX8RsSNl7hmDFwAO+Z8v11FV84iotkn3PFBfLvE58QR93eWi0Mg/ZdwWaH7isebKP5Fv8fYefDl+qayCMuU4g3c9LyQguOGSH6y+DJT/jsxa35a8/CpZxlR5N+XYglAHEcx0ByH2D6GhvAQboGeMvlh9mI0zUiUxifAZQ6rc1S1O19abZqjaARrPt+5bv31fO++aWVZhh46ptpJSyqK7gAQMzUnBbPADjNqTUvMA2mHY3iTM91tOGc/zCdazGe5iacpZjIpdmO3Z9/uv/wSca2BywmaL+YbKkKBhtcGmWunU/1lpWBYn0jXB6CQbwrsQt4I3BYSdoYmcQQqakRVH4MkmJD4o/EVeIR8Zg4ebOSt4jLHc7Iyg8ABzu1TqddFi6lUp+f+vzXaWWLql450829c2FgYGBgYGBgsGC4CQAA//96Ul4h") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x2, 0x0, 0x48}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r3 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xe, 0x1d, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1952, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @generic={0x9, 0x9, 0x0, 0x3, 0xb3}, @map_fd={0x18, 0xb, 0x1, 0x0, r5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xe}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000009c0)='syzkaller\x00', 0x80000001, 0x32, &(0x7f0000000a00)=""/50, 0x40f00, 0x10, '\x00', 0x0, @sk_skb=0x4, r6, 0x8, &(0x7f0000000a40)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000a80)={0x2, 0x5, 0x0, 0x101}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b80)=[r5, 0x1, r6, r5, 0xffffffffffffffff, r6, r5], 0x0, 0x10, 0xfffffff8}, 0x94) getdents64(r6, &(0x7f0000000280)=""/48, 0x30) 6m3.617085579s ago: executing program 2 (id=2760): socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_INFO(0x0, 0xc, 0x0) syz_clone3(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x4080) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xaf123e30d406ff1, 0x2010, 0xffffffffffffffff, 0xe414c000) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x280, 0x1e0, 0x3014, 0x1, 0x8, 0x3, 0x2, 0x5}}) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x1d, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000300)={0x1, @pix={0x280, 0x1e0, 0x42474752, 0x1, 0x280, 0x4b000, 0x8}}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000400)={0xffffffff, 0x1, 0x1}) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000600)=0x1) 5m57.676628323s ago: executing program 2 (id=2761): mmap$IORING_OFF_SQ_RING(0x0, 0x7f, 0x100000e, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mkdirat(0xffffffffffffffff, 0x0, 0x181) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4080) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0xf2, 0x4, 0x4, @empty, @empty, 0x8, 0x80, 0x4, 0x6}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$snapshot(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) read$snapshot(r4, 0x0, 0x0) ioctl(r3, 0x4048aecb, &(0x7f0000000580)="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") ioctl(r3, 0xc048aeca, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x18}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0) mkdirat(r5, &(0x7f0000000180)='nullb1\x00', 0x1ff) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x5422) 5m57.496091608s ago: executing program 6 (id=2762): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x183200, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000300c8"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$BLKOPENZONE(r2, 0x40101286, &(0x7f0000000180)={0x8, 0x9}) semctl$IPC_INFO(0x0, 0x1, 0x3, 0x0) r3 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) r5 = dup2(r3, r3) sendto$packet(r5, &(0x7f0000000080)="01154e0001001c1122d51d", 0xb, 0x404c094, &(0x7f0000000040)={0x11, 0x1c, r4, 0x0, 0x7, 0x0, @local}, 0x14) ioctl$FE_GET_PROPERTY(r5, 0x80106f53, &(0x7f0000000600)={0x38, &(0x7f0000000340)}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) unshare(0x22020600) ioctl$KVM_IRQFD(r7, 0x4020ae76, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000007800010402000000000000000700000064000000140001800800030064000000080002"], 0x2c}}, 0x0) 5m57.466488759s ago: executing program 4 (id=2763): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c0200000000"], 0x0, 0x34}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x2004a6}, 0x94) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x8, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000640)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8, 0x20, 0x3, 0x9, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x0, 0x0, 0x4, 0x0, @local, @rand_addr=0x64010102}}}}) 5m57.416880807s ago: executing program 5 (id=2764): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x440, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000001100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) preadv(r0, &(0x7f0000001040)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 5m16.196082244s ago: executing program 35 (id=2764): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x440, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000001100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) preadv(r0, &(0x7f0000001040)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 5m15.945883586s ago: executing program 36 (id=2762): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x183200, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000300c8"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$BLKOPENZONE(r2, 0x40101286, &(0x7f0000000180)={0x8, 0x9}) semctl$IPC_INFO(0x0, 0x1, 0x3, 0x0) r3 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) r5 = dup2(r3, r3) sendto$packet(r5, &(0x7f0000000080)="01154e0001001c1122d51d", 0xb, 0x404c094, &(0x7f0000000040)={0x11, 0x1c, r4, 0x0, 0x7, 0x0, @local}, 0x14) ioctl$FE_GET_PROPERTY(r5, 0x80106f53, &(0x7f0000000600)={0x38, &(0x7f0000000340)}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) unshare(0x22020600) ioctl$KVM_IRQFD(r7, 0x4020ae76, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000007800010402000000000000000700000064000000140001800800030064000000080002"], 0x2c}}, 0x0) 5m15.644985097s ago: executing program 37 (id=2761): mmap$IORING_OFF_SQ_RING(0x0, 0x7f, 0x100000e, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mkdirat(0xffffffffffffffff, 0x0, 0x181) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4080) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0xf2, 0x4, 0x4, @empty, @empty, 0x8, 0x80, 0x4, 0x6}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$snapshot(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) read$snapshot(r4, 0x0, 0x0) ioctl(r3, 0x4048aecb, &(0x7f0000000580)="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") ioctl(r3, 0xc048aeca, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x18}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0) mkdirat(r5, &(0x7f0000000180)='nullb1\x00', 0x1ff) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x5422) 5m15.433909133s ago: executing program 38 (id=2763): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c0200000000"], 0x0, 0x34}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x2004a6}, 0x94) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x8, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000640)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8, 0x20, 0x3, 0x9, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x0, 0x0, 0x4, 0x0, @local, @rand_addr=0x64010102}}}}) 14.275150417s ago: executing program 9 (id=3348): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000003c0)={{0x3, 0x0, 0x0, 0x0, 0x2}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x840, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, {0x68, 0xffffffff, 0x6, 0x95bf6fef}}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000280)={0x0, 0x1}) pipe(&(0x7f0000000180)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) 12.097437354s ago: executing program 9 (id=3352): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) r4 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x88b02, 0x0) write$P9_RSTATu(r4, &(0x7f0000000340)={0x230, 0x7d, 0x0, {{0x500, 0xef, 0x3, 0x0, {0x0, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0xee00}}, 0x230) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000040)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) 11.974495899s ago: executing program 8 (id=3354): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @broadcast, 0x800, 0x3, 'lc\x00', 0x2, 0x7ff, 0x3e}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000340)={0x230, 0x7d, 0x0, {{0x500, 0xef, 0x3, 0x0, {0x0, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0xee00}}, 0x230) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000040)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) 11.130536358s ago: executing program 7 (id=3355): socket$nl_generic(0x10, 0x3, 0x10) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_INFO(0x0, 0xc, 0x0) syz_clone3(0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x4080) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xaf123e30d406ff1, 0x2010, 0xffffffffffffffff, 0xe414c000) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x280, 0x1e0, 0x3014, 0x1, 0x8, 0x3, 0x2, 0x5}}) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x1d, 0x0, 0x0) r5 = syz_open_dev$video(&(0x7f0000000280), 0x4, 0x40) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000400)={0xffffffff, 0x1, 0x1}) ioctl$VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000600)=0x1) 11.130045618s ago: executing program 8 (id=3356): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc054) r3 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000180)={0x8, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0x4, 0x3, 0x12, "c12400"}, 0x3, 0x2, {&(0x7f0000000040)}, 0x96000}) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mmap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0xa, 0x11, 0xffffffffffffffff, 0x0) syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000002) 11.052084953s ago: executing program 3 (id=3357): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000500)=""/100, 0x7ffc) 10.510204602s ago: executing program 7 (id=3358): fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x3200400, &(0x7f0000000c00)=ANY=[], 0x1, 0xa76, &(0x7f00000000c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f00000000c0)={{&(0x7f0000000280)=[{0x6, 0x3, 0x2, {0x100000000002000, 0x3}, 0x0, 0xea}], 0x1, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff7}, {0x0, 0x0, 0x8, 0x4, 0x7}, {0x0, 0x0, 0x28, 0x9, 0xffffffffffffff2d}, {0x0, 0x0, 0x8, 0x98f, 0x8}}) 10.42013473s ago: executing program 3 (id=3359): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r1 = syz_usb_connect(0x2, 0x4e, 0x0, 0x0) syz_usb_ep_write(r1, 0x88, 0x0, 0x0) syz_usb_connect(0x5, 0x57, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f00000000c0)={0x1c, 0x11, 0xeffe, 0x9, "cd510591002a493ce0b27464485201ecf2a0000000000000000000000900fff8"}) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000040)={0x52, 0x40, 0x3, {0x9, 0xa}, {0x3, 0x7ff}, @rumble={0x3}}) 9.966169781s ago: executing program 7 (id=3360): inotify_init1(0x800) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0) landlock_restrict_self(r4, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0xffffffffffffffff, 0x4000, r3}, 0x18) 8.287792308s ago: executing program 7 (id=3361): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000003c0)={{0x3, 0x0, 0x0, 0x0, 0x2}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x840, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, {0x68, 0xffffffff, 0x6, 0x95bf6fef}}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000280)={0x0, 0x1}) pipe(&(0x7f0000000180)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) 6.746207128s ago: executing program 8 (id=3362): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, &(0x7f0000000000)='$\x00\x00\x00X\x00A', 0x7) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x40000007fff, 0xb) write(r1, 0x0, 0x0) 6.647324867s ago: executing program 3 (id=3363): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x167}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000300)="1787ef8b7a23897f0de1bd82b1009dc6841376d01fb80189ce810a4e112079ba10d349ac3a16cd140fee5b3dda921394b22af6b7eec13678fe837027fb25c614ac7ed5b898624d12c2ff844c19ab42e7ebe8c8c4d383d09fc365041fc85ef9cf76596780f2f2cfecf28156ef7e98a8e2be8d8a7bc8291334eb782d8923c7c99ac738dc9f5ca72ed68e6a808726485e7f2def663c9d9a8b90e5d14a5ebb1404a548e64ff1", 0xa4}, {&(0x7f00000003c0)="91da5abc3faa3b4f1e812a16aa3a6dba482220731927cd8138ab958c743284aec37bfe9ef561cca7c22bd7112075870452ad4f5088d40a92de82e25ff919a126f18427852d5eb07b85c48d898bd844957fff5cd6951e24bc6ae626ccfc49f597ce70b3446f7634209471d31cea11d072c66d8b136b68084d476799c8f1e9626ecbadf753cefe8a7cd84d091af9c3d75ff6faa2d3e00086ec338753111336a2cd1b9db2de3457de9f0986d9ece8b2bac9bea32eff35c845d854b6998a319dd86cdec2239d56c08ff7c7fdebfbf7", 0xcd}, {&(0x7f0000000500)="da46d1f03c9c0dd4d5a165fce4a4e8ff58d9281daf597e1e1547d4b2b5dedb46e06cbace23e6937bf6f920b58158a3262818743cb07e49f415729ae0c8ed2539d0974e187ccac409fd992bb2ceb99831be6a854b83a846eaadb6e2624181b646155796bb7912a0d45db6b7aeff40c7c1c964af90e70277912ac52412f34f4a109822d1497625c5fc811dae0d9727f1b6cc83d7ff05157360cdfa8fad3b413ac0b01c4cb6", 0xa4}, {&(0x7f00000005c0)='\r', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)="2913d2436fbca6482ecb4dfd39321e87f18b0c28a7fa410c7b6f4c362314d4273777273f2dc32094ba0e9f0051e582b7917665670b3c39d79f60b1b136660b5d682d69aaea9f623b5fcc71ae773949079a4697360e3d25b4c9a10ecbceafa28600981ceba6da61fddc494f19d41f93ca931d8c4b172bed08dff106e8cf287b66dfc1e489052843e98d1c93040f77186a6eda1bd2bb", 0x95}, {&(0x7f0000000780)="9282bfe8af8dd480d81de1c17120024d1df34c99cc57a79bae0e4cfb061dd9101515581c1ddbebf2de10f3b274e37dac33584704e139d8ecf7f027d396ac0c628603e0bff0fe3bafbb4217335ac438495af493434c53531e363980952e39db90890debe496ad2a6fb4f9acaeb4b8e2157b17e46c3c7a406951046b5adf7fbb4d03737034c4929148ff7e1635717af38bad6077387e03a762b3cc1ab983ad72f7311f530d586b0f32b29b7038f3129710b53f5a0e6e3320579d820e52bbe329da12ab538d73f6feb0ba7ea7f873291aa480053f05e1e99037", 0xd8}], 0x2, &(0x7f00000008c0)}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) write(r0, &(0x7f0000001e00)="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", 0x1d0) 6.536276439s ago: executing program 3 (id=3364): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @broadcast, 0x800, 0x3, 'lc\x00', 0x2, 0x7ff, 0x3e}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000340)={0x230, 0x7d, 0x0, {{0x500, 0xef, 0x3, 0x0, {0x0, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0xee00}}, 0x230) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000040)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) 5.378471562s ago: executing program 7 (id=3365): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002e00101408780250001000000000109022700010100c03209040000"], 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x2, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x250, 0xaa, 0xc9, 0xb2, 0x8, 0x1660, 0x932, 0x7332, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x7, 0x10, 0x81, "", [{{0x9, 0x4, 0xff, 0x0, 0x0, 0x1d, 0xd4, 0xf8, 0xfc}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) 5.268191394s ago: executing program 8 (id=3366): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xf002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022180000000506000025ff0904a1ec080182008c0508950129308102c0"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)=':') 5.220706583s ago: executing program 9 (id=3367): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_debugfs/usb/devices\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 5.110696165s ago: executing program 3 (id=3368): fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x3200400, &(0x7f0000000c00)=ANY=[], 0x1, 0xa76, &(0x7f00000000c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f00000000c0)={{&(0x7f0000000280)=[{0x6, 0x3, 0x2, {0x100000000002000, 0x3}, 0x0, 0xea}], 0x1, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff7}, {0x0, 0x0, 0x8, 0x4, 0x7}, {0x0, 0x0, 0x28, 0x9, 0xffffffffffffff2d}, {0x0, 0x0, 0x8, 0x98f, 0x8}}) 3.74405849s ago: executing program 9 (id=3369): inotify_init1(0x800) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0) landlock_restrict_self(r4, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0xffffffffffffffff, 0x4000, r3}, 0x18) 2.872411594s ago: executing program 3 (id=3370): write$hidraw(0xffffffffffffffff, &(0x7f0000000400)="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", 0x112) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0003b8000000b803"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x60, 0x26, 0xf2, 0x20, 0x2040, 0x2011, 0x3a6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6, 0x10, 0x60, 0x5, "", [{{0x9, 0x4, 0x0, 0x24, 0x1, 0x8d, 0x24, 0x80, 0x3, [], [{{0x9, 0x5, 0x8, 0x3, 0x1a7, 0x7, 0x6, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000f00)={0x14, 0x0, 0x0}, 0x0) syz_open_dev$evdev(0x0, 0x3, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x862b01) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="401505000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x84100) syz_usb_control_io$hid(r1, &(0x7f0000001440)={0x24, 0x0, &(0x7f0000001380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x440a}}, 0x0, 0x0}, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a400090582"], 0x0) r2 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = syz_usb_connect(0x2, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c00712"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r4, &(0x7f0000000000)='8', 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="120110012b5132402404009d2753010203010902120001"], 0x0) 2.852200368s ago: executing program 9 (id=3371): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc054) r3 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000180)={0x8, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0x4, 0x3, 0x12, "c12400"}, 0x3, 0x2, {&(0x7f0000000040)}, 0x96000}) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mmap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0xa, 0x11, 0xffffffffffffffff, 0x0) syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000002) 1.804025698s ago: executing program 9 (id=3372): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000a80)=""/188, 0xba) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write(r0, 0x5, 0x0, &(0x7f0000000080)) syz_usb_connect(0x0, 0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002c9cb8e102d1510030a3b0102030109022a0001010400030904e700010e0100040724010f0c04000905030c4000014007080b71"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) syz_usb_connect(0x1, 0x36, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000500)={0x2c, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x4, @string={0x4, 0x3, "1334"}}, &(0x7f0000000180)={0x0, 0xf, 0x16, {0x5, 0xf, 0x16, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x3, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x40, 0xa1, 0x2}]}}, 0x0, 0x0}, &(0x7f0000000b40)={0x84, &(0x7f0000000540)={0x20, 0x5}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0xff}, 0x0, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x1}}, 0x0, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000780)={0x40, 0x9, 0x1, 0x36}, 0x0, &(0x7f0000000840)={0x40, 0xf, 0x2, 0x10}, &(0x7f0000000880)={0x40, 0x13, 0x6, @random="06665791ef2e"}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "20f3"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x8d7}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x1}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0x5}}) syz_usb_connect(0x4, 0x90, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000002c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.364164227s ago: executing program 8 (id=3373): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000003c0)={{0x3, 0x0, 0x0, 0x0, 0x2}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x840, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, {0x68, 0xffffffff, 0x6, 0x95bf6fef}}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000280)={0x0, 0x1}) pipe(&(0x7f0000000180)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) 208.470938ms ago: executing program 8 (id=3374): r0 = syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000100)='./file1\x00', 0x40, &(0x7f0000000440)={[{@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@space_cache_v1}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xffffe000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x0, 0x90001) 0s ago: executing program 7 (id=3375): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) r4 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x88b02, 0x0) write$P9_RSTATu(r4, &(0x7f0000000340)={0x230, 0x7d, 0x0, {{0x500, 0xef, 0x3, 0x0, {0x0, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0xee00}}, 0x230) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000040)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): 175/0x1a0 [ 1015.532216][T14322] ? __x64_sys_setsockopt+0x182/0x200 [ 1015.537630][T14322] __vmalloc_node_range+0x129/0x1320 [ 1015.542990][T14322] ? free_vm_area+0x50/0x50 [ 1015.547557][T14322] vmalloc_user+0x74/0x80 [ 1015.551929][T14322] ? xskq_create+0xbf/0x170 [ 1015.556472][T14322] xskq_create+0xbf/0x170 [ 1015.560842][T14322] xsk_init_queue+0xad/0x100 [ 1015.565479][T14322] xsk_setsockopt+0x413/0x750 [ 1015.570194][T14322] ? xsk_poll+0x670/0x670 [ 1015.574577][T14322] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1015.580167][T14322] ? security_socket_setsockopt+0x7e/0xa0 [ 1015.585926][T14322] ? xsk_poll+0x670/0x670 [ 1015.590309][T14322] do_sock_setsockopt+0x175/0x1a0 [ 1015.595390][T14322] ? __fdget+0x14a/0x210 [ 1015.599690][T14322] __x64_sys_setsockopt+0x182/0x200 [ 1015.604945][T14322] do_syscall_64+0x55/0xb0 [ 1015.609406][T14322] ? clear_bhb_loop+0x40/0x90 [ 1015.614124][T14322] ? clear_bhb_loop+0x40/0x90 [ 1015.618843][T14322] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1015.624780][T14322] RIP: 0033:0x7f0a1e39e159 [ 1015.629227][T14322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1015.648867][T14322] RSP: 002b:00007f0a1f346028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1015.657323][T14322] RAX: ffffffffffffffda RBX: 00007f0a1e625fa0 RCX: 00007f0a1e39e159 [ 1015.665332][T14322] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1015.673341][T14322] RBP: 00007f0a1e43506b R08: 0000000000000004 R09: 0000000000000000 [ 1015.681341][T14322] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1015.689345][T14322] R13: 00007f0a1e626038 R14: 00007f0a1e625fa0 R15: 00007ffc5786db68 [ 1015.697372][T14322] [ 1015.774423][T14329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2402'. [ 1016.288564][T14322] Mem-Info: [ 1016.328650][T14322] active_anon:9125 inactive_anon:0 isolated_anon:0 [ 1016.328650][T14322] active_file:21742 inactive_file:40068 isolated_file:0 [ 1016.328650][T14322] unevictable:768 dirty:205 writeback:0 [ 1016.328650][T14322] slab_reclaimable:11391 slab_unreclaimable:102351 [ 1016.328650][T14322] mapped:24578 shmem:4445 pagetables:612 [ 1016.328650][T14322] sec_pagetables:0 bounce:0 [ 1016.328650][T14322] kernel_misc_reclaimable:0 [ 1016.328650][T14322] free:1325171 free_pcp:11023 free_cma:0 [ 1017.005047][T14322] Node 0 active_anon:36200kB inactive_anon:0kB active_file:86968kB inactive_file:160072kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98312kB dirty:820kB writeback:0kB shmem:16244kB shmem_thp:12288kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11920kB pagetables:2248kB sec_pagetables:0kB all_unreclaimable? no [ 1017.849553][T14322] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1018.040970][T14322] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1018.070344][T14322] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1018.076302][T14322] Node 0 DMA32 free:1403324kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:24020kB inactive_anon:0kB active_file:86968kB inactive_file:159260kB unevictable:1536kB writepending:324kB present:3129332kB managed:2586800kB mlocked:0kB bounce:0kB free_pcp:25196kB local_pcp:8680kB free_cma:0kB [ 1018.094465][T14334] loop2: detected capacity change from 0 to 512 [ 1018.106877][T14322] lowmem_reserve[]: 0 0 0 0 0 [ 1018.106982][T14322] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1018.147002][T14322] lowmem_reserve[]: 0 0 0 0 0 [ 1018.151832][T14322] Node 1 Normal free:3888176kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21792kB local_pcp:0kB free_cma:0kB [ 1018.181254][T14322] lowmem_reserve[]: 0 0 0 0 0 [ 1018.186033][T14322] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1018.200139][T14322] Node 0 DMA32: 741*4kB (UME) 1727*8kB (UM) 1063*16kB (UME) 510*32kB (UME) 415*64kB (UME) 125*128kB (UME) 86*256kB (UM) 46*512kB (UM) 33*1024kB (UME) 13*2048kB (UME) 294*4096kB (UM) = 1402876kB [ 1018.212304][T14334] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1018.220315][T14322] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1018.258398][T14336] netlink: 'syz.5.2405': attribute type 1 has an invalid length. [ 1018.264792][T14322] Node 1 Normal: 242*4kB (UE) 57*8kB (UME) 34*16kB (UME) 220*32kB (UME) 66*64kB (UE) 7*128kB (UM) 1*256kB (U) 2*512kB (ME) 0*1024kB 3*2048kB (UE) 944*4096kB (M) = 3888176kB [ 1018.285561][T14322] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1018.296875][T14334] EXT4-fs error (device loop2): ext4_init_orphan_info:585: comm syz.2.2404: inode #1: comm syz.2.2404: iget: illegal inode # [ 1018.297136][T14322] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1018.320387][T14322] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1018.330641][T14322] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1018.338061][T14334] EXT4-fs (loop2): Remounting filesystem read-only [ 1018.340320][T14322] 63671 total pagecache pages [ 1018.352918][T14322] 0 pages in swap cache [ 1018.357113][T14322] Free swap = 124472kB [ 1018.358713][T14336] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1018.362500][T14322] Total swap = 124996kB [ 1018.368446][T14334] EXT4-fs (loop2): get orphan inode failed [ 1018.372830][T14322] 2097051 pages RAM [ 1018.382751][T14322] 0 pages HighMem/MovableOnly [ 1018.387462][T14322] 416965 pages reserved [ 1018.392266][T14322] 0 pages cma reserved [ 1018.417450][T14334] EXT4-fs (loop2): mount failed [ 1018.496047][T14345] loop6: detected capacity change from 0 to 16 [ 1018.513457][T14345] erofs: (device loop6): mounted with root inode @ nid 36. [ 1018.652920][T14349] overlayfs: failed to get metacopy (-117) [ 1019.756131][T14357] overlayfs: failed to resolve './file0': -2 [ 1020.851678][T14371] loop6: detected capacity change from 0 to 128 [ 1020.958196][T14371] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1021.219089][T14371] ext4 filesystem being mounted at /215/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1021.813501][T14383] loop2: detected capacity change from 0 to 16 [ 1021.831037][T14383] erofs: (device loop2): mounted with root inode @ nid 36. [ 1021.985331][T14389] overlayfs: failed to get metacopy (-117) [ 1022.394670][T14371] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 1022.808426][T11294] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1022.993137][T14397] overlayfs: failed to resolve './file0': -2 [ 1026.082549][T14415] loop5: detected capacity change from 0 to 8 [ 1026.356885][T14417] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1026.367925][T14417] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1027.255505][ T5814] IPVS: starting estimator thread 0... [ 1027.381074][T14427] IPVS: using max 16 ests per chain, 38400 per kthread [ 1029.660441][T14448] loop2: detected capacity change from 0 to 512 [ 1029.684070][T14448] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1029.690995][T14448] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1030.461409][T14448] EXT4-fs (loop2): 1 truncate cleaned up [ 1030.468543][T14448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1030.702142][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1030.711442][ T27] IPVS: starting estimator thread 0... [ 1030.851035][T14461] IPVS: using max 18 ests per chain, 43200 per kthread [ 1030.878875][T14456] Could not find key with description: [syz] [ 1030.900978][T14456] process_request_key_err: No key [ 1030.906059][T14456] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 1030.920510][T14456] One or more global auth toks could not properly register; rc = [-2] [ 1030.934304][T14456] Error parsing options; rc = [-2] [ 1031.395332][T14473] loop6: detected capacity change from 0 to 128 [ 1031.809337][T14473] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1031.832016][T14473] hpfs: filesystem error: improperly stopped [ 1031.838061][T14473] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1031.874406][T14473] hpfs: You really don't want any checks? You are crazy... [ 1031.885908][T14473] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 1031.906142][T14473] hpfs: code page support is disabled [ 1032.322821][T14473] hpfs: hpfs_map_4sectors(): unaligned read [ 1032.763297][T14473] hpfs: hpfs_map_4sectors(): unaligned read [ 1032.769225][T14473] hpfs: filesystem error: unable to find root dir [ 1036.501458][ T5085] Bluetooth: hci2: command 0x0406 tx timeout [ 1041.546117][ T5773] tipc: Resetting bearer [ 1041.600496][T12241] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1041.610974][T12241] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1041.619043][T12241] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1041.628522][T12241] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1041.638148][T12241] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1041.647137][T12241] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1042.816090][ T5773] tipc: Disabling bearer [ 1042.948368][T14545] wlan0 speed is unknown, defaulting to 1000 [ 1043.143152][T14560] overlayfs: failed to resolve './file1': -2 [ 1043.196879][T14545] chnl_net:caif_netlink_parms(): no params data found [ 1043.700985][T12241] Bluetooth: hci0: command tx timeout [ 1044.196746][T14572] loop6: detected capacity change from 0 to 164 [ 1044.489209][T14545] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.593760][T14580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2481'. [ 1044.623858][T14545] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.715927][T14545] bridge_slave_0: entered allmulticast mode [ 1044.934506][T14545] bridge_slave_0: entered promiscuous mode [ 1045.036130][ T28] audit: type=1326 audit(1791000594.160:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14578 comm="syz.4.2481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb25ef9e159 code=0x0 [ 1045.059333][T14545] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.127513][T14545] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.218251][T14545] bridge_slave_1: entered allmulticast mode [ 1045.319059][T14545] bridge_slave_1: entered promiscuous mode [ 1045.502973][T14545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1045.556113][T14545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1045.667859][T14545] team0: Port device team_slave_0 added [ 1045.771828][T14545] team0: Port device team_slave_1 added [ 1045.810892][T12241] Bluetooth: hci0: command tx timeout [ 1045.856115][T14545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1045.925527][T14545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1045.959524][T14545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1045.984552][T14545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1045.995139][T14545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1046.033675][T14545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1046.127636][ T5814] libceph: connect (1)[c::]:6789 error -101 [ 1046.136344][T14595] ceph: No mds server is up or the cluster is laggy [ 1046.177259][ T5814] libceph: mon0 (1)[c::]:6789 connect error [ 1047.550660][T14545] hsr_slave_0: entered promiscuous mode [ 1047.587236][T14545] hsr_slave_1: entered promiscuous mode [ 1047.860983][ T5085] Bluetooth: hci0: command tx timeout [ 1049.538223][T14620] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2494'. [ 1049.643173][ T28] audit: type=1326 audit(1791000598.790:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14619 comm="syz.5.2494" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f592479e159 code=0x0 [ 1049.719285][T14545] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1049.737445][T14545] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.936367][T14545] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1049.950979][ T5085] Bluetooth: hci0: command tx timeout [ 1049.965575][T14545] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.348102][T14545] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1050.382794][T14545] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.473223][T14545] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1051.511177][T14545] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.683531][T14545] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1052.722285][T14545] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1052.772962][T14545] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1052.791437][T14545] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1054.226986][T14545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1054.728910][T14545] 8021q: adding VLAN 0 to HW filter on device team0 [ 1054.744650][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.751550][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.933569][ T3481] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.940826][ T3481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1054.958812][T14672] loop6: detected capacity change from 0 to 8 [ 1054.976310][ T3481] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.983530][ T3481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1055.009381][T14674] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2512'. [ 1055.260935][T14675] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1055.272040][T14675] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1055.285295][T14675] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1055.447705][ T28] audit: type=1326 audit(1791000604.400:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14673 comm="syz.5.2512" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f592479e159 code=0x0 [ 1058.071087][ T5814] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1058.096578][T14545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1058.321571][ T5814] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1058.354662][ T5814] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1058.369858][ T5814] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1058.379863][ T5814] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.689550][T14545] veth0_vlan: entered promiscuous mode [ 1058.733501][T14545] veth1_vlan: entered promiscuous mode [ 1058.800646][T14545] veth0_macvtap: entered promiscuous mode [ 1058.811911][T14545] veth1_macvtap: entered promiscuous mode [ 1058.833213][T14545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1058.844867][T14545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.874464][T14714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2523'. [ 1058.880948][T14545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1058.904059][ T5814] usb 7-1: USB disconnect, device number 15 [ 1058.920241][T14545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.937935][T14545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1058.949670][T14545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.966396][ T28] audit: type=1326 audit(1791000608.110:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14713 comm="syz.4.2523" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb25ef9e159 code=0x0 [ 1058.998608][T14545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1059.019144][T14545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.033446][T14545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1059.054287][T14545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1059.086326][T14545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.099156][T14545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1059.110973][T14545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.121361][T14545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1059.132381][T14545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.142767][T14545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1059.153709][T14545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.167967][T14545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1059.193651][T14545] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.203694][T14545] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.221436][T14545] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.240387][T14545] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.374295][T14719] loop5: detected capacity change from 0 to 16 [ 1059.386703][T14719] erofs: (device loop5): mounted with root inode @ nid 36. [ 1059.530361][T14721] overlayfs: failed to get metacopy (-117) [ 1060.337602][ T3481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1060.377964][ T3481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1062.276702][T10812] tipc: Left network mode [ 1062.379038][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1062.470913][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.680122][T14742] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2529'. [ 1063.713448][T14748] loop6: detected capacity change from 0 to 16 [ 1063.738286][T14748] erofs: (device loop6): mounted with root inode @ nid 36. [ 1063.816712][T14750] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2535'. [ 1063.877986][T14752] overlayfs: failed to get metacopy (-117) [ 1063.923960][ T28] audit: type=1326 audit(1791000613.070:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14749 comm="syz.5.2535" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f592479e159 code=0x0 [ 1064.716108][ T56] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 1064.944321][ T56] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1065.132321][ T56] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1065.306479][ T56] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1065.486850][ T56] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1065.590173][ T56] usb 3-1: Product: syz [ 1065.638100][ T56] usb 3-1: Manufacturer: syz [ 1065.670948][ T56] usb 3-1: SerialNumber: syz [ 1065.693709][ T56] usb 3-1: config 0 descriptor?? [ 1065.928997][ T56] usb 3-1: selecting invalid altsetting 0 [ 1066.566852][ T56] usb 3-1: USB disconnect, device number 27 [ 1066.768124][T14779] udevd[14779]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1066.786348][T10812] bond1: (slave gretap1): Releasing backup interface [ 1066.887770][T14787] loop4: detected capacity change from 0 to 128 [ 1067.065659][T14789] loop4: detected capacity change from 0 to 8 [ 1068.344429][T14796] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1068.355757][T14796] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1070.216414][T10812] bond0: left promiscuous mode [ 1070.264817][T10812] bond_slave_0: left promiscuous mode [ 1070.291181][T10812] bond_slave_1: left promiscuous mode [ 1070.296674][T10812] vxlan0: left promiscuous mode [ 1070.354741][ T28] audit: type=1326 audit(1791000619.500:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14807 comm="syz.5.2546" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f592479e159 code=0x0 [ 1070.496689][T10812] batadv0: left promiscuous mode [ 1072.891148][T10812] hsr_slave_0: left promiscuous mode [ 1072.933251][T10812] hsr_slave_1: left promiscuous mode [ 1073.001873][T10812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1073.012775][T10812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1073.052382][T10812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1073.066503][T10812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1073.109428][T10812] bridge_slave_1: left allmulticast mode [ 1073.127476][T10812] bridge_slave_1: left promiscuous mode [ 1073.151332][T10812] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.192036][T10812] bridge_slave_0: left allmulticast mode [ 1073.197730][T10812] bridge_slave_0: left promiscuous mode [ 1073.215817][T10812] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.478108][T10812] veth1_macvtap: left promiscuous mode [ 1073.498719][T10812] veth0_macvtap: left promiscuous mode [ 1073.504667][T10812] veth1_vlan: left promiscuous mode [ 1073.516859][T10812] veth0_vlan: left promiscuous mode [ 1074.053775][T10812] bond9 (unregistering): Released all slaves [ 1075.135556][T10812] bond8 (unregistering): Released all slaves [ 1075.316380][T10812] bond7 (unregistering): Released all slaves [ 1075.509035][T10812] bond6 (unregistering): Released all slaves [ 1075.673990][T10812] bond5 (unregistering): Released all slaves [ 1075.862496][T10812] bond4 (unregistering): Released all slaves [ 1076.043579][T10812] bond3 (unregistering): Released all slaves [ 1076.223449][T10812] bond2 (unregistering): Released all slaves [ 1076.389249][T10812] bond1 (unregistering): Released all slaves [ 1076.413410][T10812] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 1077.092885][T10812] team0 (unregistering): Port device team_slave_1 removed [ 1077.150016][T10812] team0 (unregistering): Port device team_slave_0 removed [ 1077.210987][T10812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1077.270359][T10812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1077.665040][T10812] team0 (unregistering): Port device bridge0 removed [ 1077.706158][T10812] bond0 (unregistering): Released all slaves [ 1077.827987][T14836] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2554'. [ 1078.072160][T14846] loop4: detected capacity change from 0 to 8 [ 1079.312485][T14853] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1079.366532][T14853] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1079.385617][T14853] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1079.657038][ T28] audit: type=1326 audit(1791000628.800:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14858 comm="syz.6.2558" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a1e39e159 code=0x0 [ 1079.959775][T10812] IPVS: stop unused estimator thread 0... [ 1080.571195][T14872] loop2: detected capacity change from 0 to 8 [ 1080.850691][T14873] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1080.861919][T14873] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1080.878860][T14873] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1083.210445][T14883] loop4: detected capacity change from 0 to 16 [ 1083.217867][T14883] erofs: (device loop4): mounted with root inode @ nid 36. [ 1083.242863][ T8] IPVS: starting estimator thread 0... [ 1083.365575][T14888] overlayfs: failed to get metacopy (-117) [ 1083.374467][T14888] tunl0: entered allmulticast mode [ 1083.410913][T14884] IPVS: using max 16 ests per chain, 38400 per kthread [ 1084.126553][T14882] tunl0: left allmulticast mode [ 1084.366572][T14891] loop4: detected capacity change from 0 to 164 [ 1084.440108][T14891] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1084.499882][T14891] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1084.621305][T14891] rock: directory entry would overflow storage [ 1084.670036][T14891] rock: sig=0x4f50, size=4, remaining=3 [ 1084.753368][T14891] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1085.602179][T14902] loop5: detected capacity change from 0 to 8 [ 1085.869127][T14904] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1085.878609][T14904] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1085.890107][T14904] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1086.037149][T14907] loop6: detected capacity change from 0 to 8 [ 1088.192683][T14908] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1088.202116][T14908] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1088.212748][T14908] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1090.903401][T14917] loop5: detected capacity change from 0 to 64 [ 1090.923225][T14917] hfs: creator requires a 4 character value [ 1090.956930][T14917] hfs: unable to parse mount options [ 1090.972366][T14919] loop6: detected capacity change from 0 to 512 [ 1091.007703][T14919] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1091.076004][T14919] EXT4-fs (loop6): 1 truncate cleaned up [ 1091.100211][T14919] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1091.186020][T14923] loop2: detected capacity change from 0 to 16 [ 1091.186856][ T28] audit: type=1800 audit(1791000640.330:1215): pid=14919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2574" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 1091.197944][T14923] erofs: (device loop2): mounted with root inode @ nid 36. [ 1091.398862][T14931] overlayfs: failed to get metacopy (-117) [ 1091.406558][T14931] tunl0: entered allmulticast mode [ 1092.065259][T14922] tunl0: left allmulticast mode [ 1092.138458][T11294] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1092.375560][T14937] loop2: detected capacity change from 0 to 8 [ 1092.479829][ T28] audit: type=1326 audit(1791000641.610:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14936 comm="syz.6.2579" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a1e39e159 code=0x0 [ 1092.636055][T14941] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1092.645646][T14941] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1092.656988][T14941] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1093.275460][T14944] loop5: detected capacity change from 0 to 8 [ 1093.546718][T14949] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1093.556614][T14949] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1093.567184][T14949] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1095.768863][T14961] loop2: detected capacity change from 0 to 16 [ 1095.783165][T14961] erofs: (device loop2): mounted with root inode @ nid 36. [ 1095.911004][T14964] overlayfs: failed to get metacopy (-117) [ 1095.918470][T14964] tunl0: entered allmulticast mode [ 1096.664401][T14960] tunl0: left allmulticast mode [ 1097.791311][ T28] audit: type=1326 audit(1791000646.940:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14974 comm="syz.2.2592" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff08799e159 code=0x0 [ 1098.064971][T14984] loop6: detected capacity change from 0 to 8 [ 1098.294202][T14985] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1098.303627][T14985] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1098.337269][T14985] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1100.463709][T14995] loop4: detected capacity change from 0 to 164 [ 1100.492899][T14995] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1101.732369][T15012] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2604'. [ 1101.877946][T15012] vlan2: entered allmulticast mode [ 1101.901884][T15012] bond5: entered allmulticast mode [ 1101.926844][T15012] bond5: (slave vlan2): Opening slave failed [ 1103.459003][T15029] 9pnet_fd: Insufficient options for proto=fd [ 1104.824691][T15043] loop6: detected capacity change from 0 to 16 [ 1104.832946][T15043] erofs: (device loop6): mounted with root inode @ nid 36. [ 1104.966936][T15050] overlayfs: failed to get metacopy (-117) [ 1104.979968][T15050] tunl0: entered allmulticast mode [ 1105.712053][T15042] tunl0: left allmulticast mode [ 1105.992248][T15053] FAULT_INJECTION: forcing a failure. [ 1105.992248][T15053] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1106.076865][T15053] CPU: 1 PID: 15053 Comm: syz.2.2617 Not tainted syzkaller #0 [ 1106.084385][T15053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1106.094452][T15053] Call Trace: [ 1106.097740][T15053] [ 1106.100683][T15053] dump_stack_lvl+0x18c/0x250 [ 1106.105408][T15053] ? show_regs_print_info+0x20/0x20 [ 1106.110641][T15053] ? load_image+0x420/0x420 [ 1106.115163][T15053] ? __lock_acquire+0x7d80/0x7d80 [ 1106.120218][T15053] should_fail_ex+0x394/0x4c0 [ 1106.124922][T15053] prepare_alloc_pages+0x1e1/0x5b0 [ 1106.130057][T15053] __alloc_pages+0x134/0x460 [ 1106.134662][T15053] ? zone_statistics+0x170/0x170 [ 1106.139618][T15053] ? alloc_pages+0x4e1/0x740 [ 1106.144225][T15053] get_zeroed_page+0x17/0x40 [ 1106.148823][T15053] machine_kexec_prepare+0x81a/0xa20 [ 1106.154133][T15053] ? arch_crash_save_vmcoreinfo+0xf0/0xf0 [ 1106.159869][T15053] ? arch_kexec_pre_free_pages+0x10/0x10 [ 1106.165518][T15053] ? kimage_free_pages+0x1d0/0x1d0 [ 1106.170662][T15053] do_kexec_load+0x483/0x6d0 [ 1106.175277][T15053] __se_sys_kexec_load+0x134/0x160 [ 1106.180405][T15053] do_syscall_64+0x55/0xb0 [ 1106.184835][T15053] ? clear_bhb_loop+0x40/0x90 [ 1106.189531][T15053] ? clear_bhb_loop+0x40/0x90 [ 1106.194228][T15053] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1106.200136][T15053] RIP: 0033:0x7ff08799e159 [ 1106.204566][T15053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1106.224188][T15053] RSP: 002b:00007ff0888f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 1106.232615][T15053] RAX: ffffffffffffffda RBX: 00007ff087c26090 RCX: 00007ff08799e159 [ 1106.240600][T15053] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000000002 [ 1106.248588][T15053] RBP: 00007ff087a3506b R08: 0000000000000000 R09: 0000000000000000 [ 1106.256566][T15053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1106.264549][T15053] R13: 00007ff087c26128 R14: 00007ff087c26090 R15: 00007ffcfa3a91c8 [ 1106.272549][T15053] [ 1106.334191][T15054] ecryptfs_mount: kern_path() failed [ 1106.385200][T15054] Reading sb failed; rc = [-2] [ 1106.414551][T15057] 9pnet_fd: Insufficient options for proto=fd [ 1108.060262][T15077] loop6: detected capacity change from 0 to 16 [ 1108.075364][T15077] erofs: (device loop6): mounted with root inode @ nid 36. [ 1108.210893][T15085] overlayfs: failed to get metacopy (-117) [ 1108.226126][T15085] tunl0: entered allmulticast mode [ 1108.401769][T14691] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1108.716383][T14691] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1108.807433][ T28] audit: type=1326 audit(1791000657.910:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15084 comm="syz.4.2609" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb25ef9e159 code=0x0 [ 1108.923503][T15076] tunl0: left allmulticast mode [ 1108.970913][T14691] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1108.983767][T14691] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.131728][T15092] 9pnet_fd: Insufficient options for proto=fd [ 1109.287715][ T8] usb 3-1: USB disconnect, device number 28 [ 1110.399558][T15109] loop5: detected capacity change from 0 to 128 [ 1110.703079][T15120] 9pnet_fd: Insufficient options for proto=fd [ 1110.738775][ T28] audit: type=1326 audit(1791000659.880:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15117 comm="syz.6.2640" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a1e39e159 code=0x0 [ 1112.271954][T15140] netlink: 14544 bytes leftover after parsing attributes in process `syz.6.2645'. [ 1112.452730][T15144] loop4: detected capacity change from 0 to 128 [ 1112.912345][T15152] 9pnet_fd: Insufficient options for proto=fd [ 1113.020922][ T23] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1113.137907][ T28] audit: type=1326 audit(1791000662.280:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15153 comm="syz.4.2653" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb25ef9e159 code=0x0 [ 1113.166811][ C0] hrtimer: interrupt took 5137777 ns [ 1113.264760][ T23] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1113.356008][ T23] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1113.453123][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.842890][ T23] usb 7-1: USB disconnect, device number 16 [ 1114.645026][T15187] 9pnet_fd: Insufficient options for proto=fd [ 1114.799857][T15189] loop6: detected capacity change from 0 to 512 [ 1114.851834][T15189] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1114.934628][T15189] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 1114.975320][T15189] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1115.019807][T15189] EXT4-fs error (device loop6): ext4_orphan_get:1434: comm syz.6.2663: bad orphan inode 267 [ 1115.089572][T15189] EXT4-fs (loop6): Remounting filesystem read-only [ 1115.142590][T15189] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1115.388775][ T28] audit: type=1326 audit(1791000664.530:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15193 comm="syz.2.2665" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff08799e159 code=0x0 [ 1115.695007][T15189] EXT4-fs warning (device loop6): dx_probe:893: inode #2: comm syz.6.2663: dx entry: limit 0 != root limit 125 [ 1115.710523][T15189] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.2663: Corrupt directory, running e2fsck is recommended [ 1115.728100][T15203] program syz.4.2669 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1115.834642][T11294] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1116.014577][T15209] 9pnet_fd: Insufficient options for proto=fd [ 1116.050359][T15210] loop4: detected capacity change from 0 to 8 [ 1116.203549][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.225142][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.251835][T14691] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1118.683244][T14691] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1119.444987][T15214] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1119.589072][T14691] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1119.803124][T15213] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1119.952096][T15213] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1120.459435][T14691] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.570718][T14691] usb 6-1: can't set config #1, error -71 [ 1120.623177][T14691] usb 6-1: USB disconnect, device number 9 [ 1122.403059][T15238] capability: warning: `syz.5.2679' uses deprecated v2 capabilities in a way that may be insecure [ 1122.503100][T15239] 9pnet_fd: Insufficient options for proto=fd [ 1122.895078][ T27] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1123.527977][ T27] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1123.564491][ T27] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1123.615049][ T27] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1125.751856][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.820104][ T27] usb 3-1: can't set config #1, error -71 [ 1125.862150][ T27] usb 3-1: USB disconnect, device number 29 [ 1125.993443][ T28] audit: type=1326 audit(1791000675.140:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15249 comm="syz.5.2684" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f592479e159 code=0x0 [ 1127.050315][T15263] loop5: detected capacity change from 0 to 8 [ 1131.522557][T15264] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1131.629255][T15264] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1131.791622][T15263] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1131.841828][T15272] loop4: detected capacity change from 0 to 164 [ 1131.904107][T15272] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1131.965592][T15272] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1132.047663][T15272] rock: directory entry would overflow storage [ 1132.082117][T15272] rock: sig=0x4f50, size=4, remaining=3 [ 1132.106030][T15272] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1132.779475][ T28] audit: type=1326 audit(1791000681.920:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15287 comm="syz.6.2696" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a1e39e159 code=0x0 [ 1132.821461][T15245] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1133.034160][T15245] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1133.053119][T15245] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1133.068574][T15245] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1133.079432][T15245] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.319973][T15245] usb 3-1: USB disconnect, device number 30 [ 1133.614998][T15298] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2698'. [ 1134.013207][T15304] loop5: detected capacity change from 0 to 8 [ 1134.049495][T15306] loop2: detected capacity change from 0 to 164 [ 1134.141883][T15306] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1134.289031][T15307] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1134.298258][T15307] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1134.309676][T15307] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1137.777107][ T28] audit: type=1326 audit(1791000686.920:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15317 comm="syz.4.2707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb25ef9e159 code=0x0 [ 1138.811106][ T8] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1138.874682][T15342] loop4: detected capacity change from 0 to 128 [ 1139.057060][ T8] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1139.107371][ T8] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1139.119855][ T8] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1139.185159][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.946951][T15351] loop5: detected capacity change from 0 to 8 [ 1139.991381][ T5763] usb 7-1: USB disconnect, device number 17 [ 1144.422301][T15351] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1144.431018][T15351] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1144.446645][T15351] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1144.856170][T15371] loop6: detected capacity change from 0 to 128 [ 1144.871192][ T28] audit: type=1326 audit(1791000694.010:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15368 comm="syz.2.2721" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff08799e159 code=0x0 [ 1146.061502][T15245] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1146.327902][T15245] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1146.437564][T15245] usb 7-1: config 0 has no interface number 0 [ 1147.867964][T15245] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1149.002906][T15393] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2728'. [ 1149.065184][T15245] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.145374][T15245] usb 7-1: Product: syz [ 1149.175411][T15245] usb 7-1: Manufacturer: syz [ 1149.204506][T15245] usb 7-1: SerialNumber: syz [ 1149.294961][T15245] usb 7-1: config 0 descriptor?? [ 1149.339914][T15245] usb 7-1: can't set config #0, error -71 [ 1149.408518][T15245] usb 7-1: USB disconnect, device number 18 [ 1149.654597][T15406] loop6: detected capacity change from 0 to 2048 [ 1149.783185][T15406] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1149.908103][T15414] loop2: detected capacity change from 0 to 8 [ 1150.022610][T15416] loop4: detected capacity change from 0 to 128 [ 1151.812065][T11294] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1151.846208][ T28] audit: type=1326 audit(1791000700.990:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15419 comm="syz.5.2735" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f592479e159 code=0x0 [ 1153.911672][T15418] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1154.118315][T15418] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1159.774194][T15440] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(3) [ 1161.475293][T15446] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2740'. [ 1162.274688][T15460] loop5: detected capacity change from 0 to 128 [ 1162.925138][T15470] loop2: detected capacity change from 0 to 8 [ 1164.719654][T15462] Bluetooth: hci0: command 0x0406 tx timeout [ 1165.274767][T15465] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2746'. [ 1165.283735][T15465] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2746'. [ 1174.368072][T15506] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2756'. [ 1177.849931][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.953484][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1183.297882][T15517] Process accounting resumed [ 1227.274795][T15462] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1227.285849][T15462] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1227.296200][T15462] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1227.371969][T15553] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1227.381799][T15553] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1227.394187][T15553] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1227.404999][T15553] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1227.415551][T15553] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1227.431907][T15553] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1227.434375][T15550] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1227.447555][T15550] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1227.459728][T15553] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1227.461107][T15550] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1227.477104][T15550] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1227.485153][T15553] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1227.488061][T15550] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1227.533395][T15557] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1227.540873][T15557] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1227.833171][T12241] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1227.845688][T12241] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1227.854192][T12241] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1227.882872][T12241] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1227.913422][T12241] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1227.921902][T12241] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1228.642681][ T1100] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.777679][T15548] wlan0 speed is unknown, defaulting to 1000 [ 1228.972846][ T1100] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.008720][T15560] wlan0 speed is unknown, defaulting to 1000 [ 1229.115158][T15551] wlan0 speed is unknown, defaulting to 1000 [ 1229.149426][ T1100] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.193405][T15547] wlan0 speed is unknown, defaulting to 1000 [ 1229.282093][ T1100] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.543039][T12241] Bluetooth: hci4: command tx timeout [ 1229.549471][T15557] Bluetooth: hci2: command tx timeout [ 1229.702416][T12241] Bluetooth: hci5: command tx timeout [ 1229.870077][T15548] chnl_net:caif_netlink_parms(): no params data found [ 1230.015930][T15560] chnl_net:caif_netlink_parms(): no params data found [ 1230.024358][T12241] Bluetooth: hci3: command tx timeout [ 1230.109371][T15547] chnl_net:caif_netlink_parms(): no params data found [ 1230.797180][T15548] bridge0: port 1(bridge_slave_0) entered blocking state [ 1230.823620][T15548] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.846073][T15548] bridge_slave_0: entered allmulticast mode [ 1230.876081][T15548] bridge_slave_0: entered promiscuous mode [ 1230.912307][T15548] bridge0: port 2(bridge_slave_1) entered blocking state [ 1230.919463][T15548] bridge0: port 2(bridge_slave_1) entered disabled state [ 1230.947787][T15548] bridge_slave_1: entered allmulticast mode [ 1230.966064][T15548] bridge_slave_1: entered promiscuous mode [ 1231.170098][T15551] chnl_net:caif_netlink_parms(): no params data found [ 1231.258687][T15548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1231.334561][T15547] bridge0: port 1(bridge_slave_0) entered blocking state [ 1231.352649][T15547] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.361515][T15547] bridge_slave_0: entered allmulticast mode [ 1231.373946][T15547] bridge_slave_0: entered promiscuous mode [ 1231.438757][T15548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1231.465337][T15560] bridge0: port 1(bridge_slave_0) entered blocking state [ 1231.472929][T15560] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.480132][T15560] bridge_slave_0: entered allmulticast mode [ 1231.492732][T15560] bridge_slave_0: entered promiscuous mode [ 1231.502995][T15560] bridge0: port 2(bridge_slave_1) entered blocking state [ 1231.510144][T15560] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.529638][T15560] bridge_slave_1: entered allmulticast mode [ 1231.538462][T15560] bridge_slave_1: entered promiscuous mode [ 1231.549654][T15547] bridge0: port 2(bridge_slave_1) entered blocking state [ 1231.558801][T15547] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.567338][T15547] bridge_slave_1: entered allmulticast mode [ 1231.582320][T15547] bridge_slave_1: entered promiscuous mode [ 1231.621438][T12241] Bluetooth: hci4: command tx timeout [ 1231.626877][T12241] Bluetooth: hci2: command tx timeout [ 1231.754551][T15548] team0: Port device team_slave_0 added [ 1231.783243][T12241] Bluetooth: hci5: command tx timeout [ 1231.826125][T15548] team0: Port device team_slave_1 added [ 1231.838220][T15560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1231.854408][T15547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1231.937366][T15560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1232.001867][T15547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1232.101045][T12241] Bluetooth: hci3: command tx timeout [ 1232.218538][T15548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1232.240636][T15548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1232.283004][T15548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1232.317029][T15560] team0: Port device team_slave_0 added [ 1232.373652][T15560] team0: Port device team_slave_1 added [ 1232.414549][T15547] team0: Port device team_slave_0 added [ 1232.434162][T15547] team0: Port device team_slave_1 added [ 1232.454156][T15548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1232.467543][T15548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1232.507517][T15548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1232.692742][T15551] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.699958][T15551] bridge0: port 1(bridge_slave_0) entered disabled state [ 1232.718279][T15551] bridge_slave_0: entered allmulticast mode [ 1232.727931][T15551] bridge_slave_0: entered promiscuous mode [ 1232.749960][T15551] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.768037][T15551] bridge0: port 2(bridge_slave_1) entered disabled state [ 1232.791312][T15551] bridge_slave_1: entered allmulticast mode [ 1232.808678][T15551] bridge_slave_1: entered promiscuous mode [ 1232.932569][ T1100] hsr_slave_0: left promiscuous mode [ 1232.938939][ T1100] hsr_slave_1: left promiscuous mode [ 1232.953450][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1232.970333][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1232.992419][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1232.999860][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1233.019491][ T1100] bridge_slave_1: left allmulticast mode [ 1233.027023][ T1100] bridge_slave_1: left promiscuous mode [ 1233.033277][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state [ 1233.053039][ T1100] bridge_slave_0: left allmulticast mode [ 1233.058719][ T1100] bridge_slave_0: left promiscuous mode [ 1233.066195][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state [ 1233.151105][ T1100] veth1_macvtap: left promiscuous mode [ 1233.156683][ T1100] veth0_macvtap: left promiscuous mode [ 1233.175347][ T1100] veth1_vlan: left promiscuous mode [ 1233.180762][ T1100] veth0_vlan: left promiscuous mode [ 1233.482727][ T1100] bond5 (unregistering): Released all slaves [ 1233.709677][T12241] Bluetooth: hci2: command tx timeout [ 1233.719128][T15557] Bluetooth: hci4: command tx timeout [ 1233.826895][ T1100] bond4 (unregistering): Released all slaves [ 1233.861859][T15557] Bluetooth: hci5: command tx timeout [ 1234.046107][ T1100] bond3 (unregistering): Released all slaves [ 1234.182801][T15557] Bluetooth: hci3: command tx timeout [ 1234.244288][ T1100] bond2 (unregistering): Released all slaves [ 1234.502322][ T1100] bond1 (unregistering): Released all slaves [ 1235.222679][ T1100] team0 (unregistering): Port device team_slave_1 removed [ 1235.277593][ T1100] team0 (unregistering): Port device team_slave_0 removed [ 1235.344067][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1235.397326][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1235.781151][T15557] Bluetooth: hci4: command tx timeout [ 1235.786648][T15557] Bluetooth: hci2: command tx timeout [ 1235.858182][ T1100] bond0 (unregistering): Released all slaves [ 1235.941206][T15557] Bluetooth: hci5: command tx timeout [ 1236.003095][T15560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1236.010090][T15560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1236.039639][T15560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1236.080831][T15547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1236.087813][T15547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1236.129854][T15547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1236.196450][T15551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1236.218607][T15560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1236.240043][T15560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1236.260838][T15557] Bluetooth: hci3: command tx timeout [ 1236.279406][T15560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1236.301721][T15547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1236.308694][T15547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1236.334964][T15547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1236.405996][T15548] hsr_slave_0: entered promiscuous mode [ 1236.413487][T15548] hsr_slave_1: entered promiscuous mode [ 1236.419828][T15548] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1236.427697][T15548] Cannot create hsr debugfs directory [ 1236.435679][T15551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1236.474287][T15551] team0: Port device team_slave_0 added [ 1236.510912][T15551] team0: Port device team_slave_1 added [ 1236.537020][T15560] hsr_slave_0: entered promiscuous mode [ 1236.556451][T15560] hsr_slave_1: entered promiscuous mode [ 1236.567500][T15560] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1236.575241][T15560] Cannot create hsr debugfs directory [ 1236.670140][T15551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1236.685468][T15551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1236.712359][T15551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1236.729077][T15547] hsr_slave_0: entered promiscuous mode [ 1236.736249][T15547] hsr_slave_1: entered promiscuous mode [ 1236.745461][T15547] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1236.758146][T15547] Cannot create hsr debugfs directory [ 1236.794446][T15551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1236.802027][T15551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1236.829306][T15551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1236.993886][T15551] hsr_slave_0: entered promiscuous mode [ 1237.008531][T15551] hsr_slave_1: entered promiscuous mode [ 1237.014995][T15551] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1237.022967][T15551] Cannot create hsr debugfs directory [ 1237.107001][ T1100] IPVS: stop unused estimator thread 0... [ 1237.816308][ T1100] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.980192][ T1100] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.023414][T15548] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1238.045800][T15548] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1238.094347][ T1100] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.127547][T15548] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1238.222678][ T1100] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.240327][T15548] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1238.389863][T15547] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1238.418780][T15547] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1238.469432][T15547] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1238.496400][T15547] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1238.753850][ T1100] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.793069][T15551] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1238.806315][T15551] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1238.868203][ T1100] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.882913][T15551] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1238.894968][T15551] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1238.958497][ T1100] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.027385][T15548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1239.066096][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.073114][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.130130][ T1100] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.193496][T15548] 8021q: adding VLAN 0 to HW filter on device team0 [ 1239.284383][T15560] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1239.319815][T10581] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.327024][T10581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1239.363988][T15547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1239.389468][T15560] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1239.459942][T15560] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1239.487886][T15560] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1239.563773][T10581] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.570989][T10581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1239.607466][T15547] 8021q: adding VLAN 0 to HW filter on device team0 [ 1239.746484][T15551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1239.790428][T15270] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.797647][T15270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1239.835924][T15270] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.843086][T15270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1240.103637][T15551] 8021q: adding VLAN 0 to HW filter on device team0 [ 1240.160502][T15270] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.167659][T15270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1240.228572][T15270] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.235783][T15270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1240.643542][T15560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1240.797641][T15560] 8021q: adding VLAN 0 to HW filter on device team0 [ 1240.828991][T15548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1241.018428][T10581] bridge0: port 1(bridge_slave_0) entered blocking state [ 1241.025617][T10581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1241.205402][T10581] bridge0: port 2(bridge_slave_1) entered blocking state [ 1241.212635][T10581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1241.439196][T15547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1241.488229][T15551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1242.200039][T15548] veth0_vlan: entered promiscuous mode [ 1242.315573][T15548] veth1_vlan: entered promiscuous mode [ 1242.367225][ T1100] hsr_slave_0: left promiscuous mode [ 1242.387336][ T1100] hsr_slave_1: left promiscuous mode [ 1242.400245][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1242.421771][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1242.441675][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1242.449119][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1242.468329][ T1100] bridge_slave_1: left allmulticast mode [ 1242.474671][ T1100] bridge_slave_1: left promiscuous mode [ 1242.481107][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.494346][ T1100] bridge_slave_0: left allmulticast mode [ 1242.500017][ T1100] bridge_slave_0: left promiscuous mode [ 1242.506785][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.526643][ T1100] hsr_slave_0: left promiscuous mode [ 1242.532566][ T1100] hsr_slave_1: left promiscuous mode [ 1242.538423][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1242.549036][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1242.561681][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1242.569119][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1242.577528][ T1100] bridge_slave_1: left allmulticast mode [ 1242.584040][ T1100] bridge_slave_1: left promiscuous mode [ 1242.589700][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.599806][ T1100] bridge_slave_0: left allmulticast mode [ 1242.605807][ T1100] bridge_slave_0: left promiscuous mode [ 1242.611687][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.676004][ T1100] veth1_macvtap: left promiscuous mode [ 1242.681945][ T1100] veth0_macvtap: left promiscuous mode [ 1242.687729][ T1100] veth1_vlan: left promiscuous mode [ 1242.693410][ T1100] veth0_vlan: left promiscuous mode [ 1242.701441][ T1100] veth1_macvtap: left promiscuous mode [ 1242.708267][ T1100] veth0_macvtap: left promiscuous mode [ 1242.714619][ T1100] veth1_vlan: left promiscuous mode [ 1242.719922][ T1100] veth0_vlan: left promiscuous mode [ 1243.614912][ T1100] team0 (unregistering): Port device team_slave_1 removed [ 1243.679132][ T1100] team0 (unregistering): Port device team_slave_0 removed [ 1243.739660][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1243.805356][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1244.269237][ T1100] bond0 (unregistering): Released all slaves [ 1244.535068][ T1100] bond4 (unregistering): Released all slaves [ 1244.712097][ T1100] bond3 (unregistering): Released all slaves [ 1244.889662][ T1100] bond2 (unregistering): Released all slaves [ 1245.079623][ T1100] bond1 (unregistering): Released all slaves [ 1245.775755][ T1100] team0 (unregistering): Port device team_slave_1 removed [ 1245.840189][ T1100] team0 (unregistering): Port device team_slave_0 removed [ 1245.898693][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1245.953334][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1246.407521][ T1100] bond0 (unregistering): Released all slaves [ 1246.564163][T15560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1246.778038][T15548] veth0_macvtap: entered promiscuous mode [ 1246.815551][T15551] veth0_vlan: entered promiscuous mode [ 1246.864832][T15547] veth0_vlan: entered promiscuous mode [ 1246.888923][T15547] veth1_vlan: entered promiscuous mode [ 1246.929843][T15548] veth1_macvtap: entered promiscuous mode [ 1246.994146][T15560] veth0_vlan: entered promiscuous mode [ 1247.012571][T15560] veth1_vlan: entered promiscuous mode [ 1247.035420][T15548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1247.046530][T15548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.059094][T15548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1247.090233][T15548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1247.108628][T15548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.131821][T15548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1247.163672][T15551] veth1_vlan: entered promiscuous mode [ 1247.286430][T15548] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.303323][T15548] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.320790][T15548] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.329531][T15548] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.375102][T15547] veth0_macvtap: entered promiscuous mode [ 1247.408738][T15547] veth1_macvtap: entered promiscuous mode [ 1247.570208][T15560] veth0_macvtap: entered promiscuous mode [ 1247.588864][T15551] veth0_macvtap: entered promiscuous mode [ 1247.612670][T15560] veth1_macvtap: entered promiscuous mode [ 1247.631976][T15547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1247.642557][T15547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.654090][T15547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1247.664698][T15547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.677474][T15547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1247.709566][T15551] veth1_macvtap: entered promiscuous mode [ 1247.774879][T15547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1247.791989][T15547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.804300][T15547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1247.817308][T15547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.829601][T15547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1247.858698][T15547] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.869366][T15547] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.879069][T15547] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.888050][T15547] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.905959][T15560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1247.916648][T15560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.931119][T15560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1247.941901][T15560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.952168][T15560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1247.962942][T15560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.974875][T15560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1247.989267][T15270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1248.002418][T15270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1248.015378][T15551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1248.027306][T15551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.039078][T15551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1248.049613][T15551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.059554][T15551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1248.070132][T15551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.081974][T15551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1248.092601][T15551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.104395][T15551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1248.120595][T15560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1248.133748][T15560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.144494][T15560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1248.157297][T15560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.167219][T15560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1248.177746][T15560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.190028][T15560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1248.202832][T15560] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.212816][T15560] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.221430][ T1100] IPVS: stop unused estimator thread 0... [ 1248.221813][T15560] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.235994][T15560] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.240396][ T1100] IPVS: stop unused estimator thread 0... [ 1248.368415][T15551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1248.387781][T15551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.405267][T15551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1248.419417][T15551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.438751][T15551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1248.450399][T15551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.460565][T15551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1248.471402][T15551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.482781][T15551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1248.529355][T15551] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.534092][ T9696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1248.538678][T15551] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.556551][ T9696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1248.565792][T15551] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.575825][T15551] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.798587][ T9696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1248.822563][ T9696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1248.913142][ T9696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1248.933421][ T9696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1248.976756][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1248.993156][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1249.027053][T11575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1249.392206][T11575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1249.689696][T11825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1249.742114][T11825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1249.807443][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1249.926003][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1251.370592][T15756] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2768'. [ 1259.366033][T15816] loop7: detected capacity change from 0 to 256 [ 1259.384299][T15816] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1259.478917][ T28] audit: type=1800 audit(1791000808.620:1227): pid=15816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2782" name="file1" dev="loop7" ino=1048916 res=0 errno=0 [ 1260.074715][T15822] loop8: detected capacity change from 0 to 2048 [ 1260.165142][T15822] NILFS (loop8): invalid segment: Magic number mismatch [ 1260.210674][T15822] NILFS (loop8): trying rollback from an earlier position [ 1260.290763][T15825] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2783'. [ 1260.357673][T15825] vlan2: entered promiscuous mode [ 1260.363460][T15822] NILFS (loop8): recovery complete [ 1260.392123][T15830] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1260.430857][T15825] bond0: entered promiscuous mode [ 1260.450910][T15825] bond_slave_0: entered promiscuous mode [ 1260.471010][T15825] bond_slave_1: entered promiscuous mode [ 1260.527801][T15829] netlink: 'syz.7.2783': attribute type 10 has an invalid length. [ 1260.615341][T15829] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 1260.646455][T15829] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1260.970860][T15833] EXT4-fs (sda1): shut down requested (0) [ 1262.015115][T15852] wlan0 speed is unknown, defaulting to 1000 [ 1263.423989][T15865] loop8: detected capacity change from 0 to 512 [ 1263.522946][ T5814] Process accounting resumed [ 1263.647435][T15865] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1264.053946][T15865] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1264.744437][T15865] jffs2: notice: (15865) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1264.858971][T15879] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1265.119781][T15547] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1265.692048][T15903] loop8: detected capacity change from 0 to 256 [ 1266.926884][T15915] loop8: detected capacity change from 0 to 32768 [ 1267.251633][T14823] Process accounting resumed [ 1269.260915][T15948] wlan0 speed is unknown, defaulting to 1000 [ 1269.339300][T15955] loop8: detected capacity change from 0 to 512 [ 1269.372569][T15955] EXT4-fs: Ignoring removed bh option [ 1269.399499][T15955] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1269.455909][T15955] EXT4-fs error (device loop8): ext4_iget_extra_inode:4752: inode #15: comm syz.8.2802: corrupted in-inode xattr: invalid ea_ino [ 1269.490951][T15955] EXT4-fs error (device loop8): ext4_orphan_get:1413: comm syz.8.2802: couldn't read orphan inode 15 (err -117) [ 1269.580473][T15955] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1269.883399][T15547] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1271.263868][T15983] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 1271.932572][T15662] Process accounting resumed [ 1275.739939][T16038] loop7: detected capacity change from 0 to 512 [ 1276.024689][T16038] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1276.158084][T16038] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1276.337499][T16033] EXT4-fs error (device loop7): ext4_empty_dir:3138: inode #12: comm syz.7.2810: invalid size [ 1276.350644][T16033] EXT4-fs (loop7): Remounting filesystem read-only [ 1276.519914][T15548] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1276.533773][ T1100] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1276.570881][ T1100] Quota error (device loop7): write_blk: dquota write failed [ 1276.578313][ T1100] Quota error (device loop7): free_dqentry: Can't write quota data block 5 [ 1276.621677][ T1100] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1276.642912][ T1100] Quota error (device loop7): write_blk: dquota write failed [ 1276.684242][ T1100] Quota error (device loop7): free_dqentry: Can't write quota data block 5 [ 1279.084115][T16083] loop3: detected capacity change from 0 to 128 [ 1279.163300][T16086] loop8: detected capacity change from 0 to 256 [ 1282.989909][T14823] Process accounting resumed [ 1285.509404][T16160] loop8: detected capacity change from 0 to 8 [ 1286.875496][T16160] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1286.890230][T16160] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1286.909922][T16160] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1293.039453][T16206] loop8: detected capacity change from 0 to 32768 [ 1293.069897][T16206] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.2838 (16206) [ 1293.105333][T16206] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1293.115591][T16206] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 1293.124423][T16206] BTRFS info (device loop8): force clearing of disk cache [ 1293.131589][T16206] BTRFS info (device loop8): enabling auto defrag [ 1293.138221][T16206] BTRFS info (device loop8): max_inline at 0 [ 1293.145052][T16206] BTRFS info (device loop8): enabling disk space caching [ 1293.152093][T16206] BTRFS info (device loop8): disk space caching is enabled [ 1293.403886][T16206] BTRFS info (device loop8): enabling ssd optimizations [ 1293.412946][T16206] BTRFS info (device loop8): rebuilding free space tree [ 1293.431878][T16206] BTRFS info (device loop8): disabling free space tree [ 1293.439102][T16206] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1293.449551][T16206] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1293.519814][T16232] udevd[16232]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 1293.536149][ T28] audit: type=1326 audit(1791000842.520:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16231 comm="syz.3.2845" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc013d9e159 code=0x7ffc0000 [ 1293.648667][T16230] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2843'. [ 1293.657221][ T28] audit: type=1326 audit(1791000842.520:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16231 comm="syz.3.2845" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc013d9e159 code=0x7ffc0000 [ 1294.336677][ T28] audit: type=1326 audit(1791000842.530:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16231 comm="syz.3.2845" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc013d9e159 code=0x7ffc0000 [ 1294.390862][T16237] udevd[16237]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 1294.413769][ T28] audit: type=1326 audit(1791000842.530:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16231 comm="syz.3.2845" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc013d9e159 code=0x7ffc0000 [ 1294.508376][ T28] audit: type=1326 audit(1791000842.530:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16231 comm="syz.3.2845" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc013d9e159 code=0x7ffc0000 [ 1294.512629][T16239] loop3: detected capacity change from 0 to 2048 [ 1294.542407][ T28] audit: type=1326 audit(1791000842.530:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16231 comm="syz.3.2845" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc013d9e159 code=0x7ffc0000 [ 1294.626214][ T28] audit: type=1326 audit(1791000842.530:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16231 comm="syz.3.2845" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc013d9e159 code=0x7ffc0000 [ 1294.689676][T16241] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1295.914502][T16239] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean [ 1296.087423][T14885] IPVS: starting estimator thread 0... [ 1296.092324][T15547] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1296.192084][T16246] IPVS: using max 32 ests per chain, 76800 per kthread [ 1296.311698][T16225] bridge0: port 2(bridge_slave_1) entered disabled state [ 1296.319128][T16225] bridge0: port 1(bridge_slave_0) entered disabled state [ 1296.386613][T15651] Process accounting resumed [ 1299.125171][T16225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1299.155188][T16225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1299.541649][T16225] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.551318][T16225] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.560276][T16225] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.569768][T16225] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.698760][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.725246][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.600733][T16284] netlink: 164 bytes leftover after parsing attributes in process `syz.7.2856'. [ 1304.549071][T15731] IPVS: starting estimator thread 0... [ 1304.652464][T16312] IPVS: using max 15 ests per chain, 36000 per kthread [ 1304.734458][T14823] Process accounting resumed [ 1306.782887][T16338] loop3: detected capacity change from 0 to 8 [ 1307.017456][T16341] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1307.026934][T16341] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1307.038528][T16341] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1309.359993][T15693] IPVS: starting estimator thread 0... [ 1309.965489][T16348] IPVS: using max 14 ests per chain, 33600 per kthread [ 1312.270274][T15731] Process accounting resumed [ 1313.791653][T16374] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[15547] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[16374] [ 1315.549202][T16386] printk: console [ttyS0] disabled [ 1315.690752][T16389] printk: console [ttyS0] enabled [ 1318.654474][T16402] loop8: detected capacity change from 0 to 8 [ 1319.055787][T16404] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1319.066107][T16404] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1319.076828][T16404] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1323.949660][T16436] random: crng reseeded on system resumption [ 1324.112453][T16438] Falling back ldisc for ttyS3. [ 1325.417453][ T12] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -5 [ 1325.427642][ T49] (NULL device *): loading /lib/firmware/regulatory.db failed with error -5 [ 1325.502029][ T49] (NULL device *): Direct firmware load for regulatory.db failed with error -5 [ 1325.522233][ T12] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -5 [ 1327.036435][ T49] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 1327.078574][ T12] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 1327.711516][ T27] Process accounting resumed [ 1328.568386][T16457] fuse: Bad value for 'fd' [ 1338.117565][T16486] (null): rxe_set_mtu: Set mtu to 4096 [ 1338.146378][T16486] lo speed is unknown, defaulting to 1000 [ 1338.198286][T16486] lo speed is unknown, defaulting to 1000 [ 1338.216133][T16486] lo speed is unknown, defaulting to 1000 [ 1338.701044][ T1209] lo speed is unknown, defaulting to 1000 [ 1338.713292][T16486] infiniband sz1: set down [ 1338.741347][T16486] infiniband sz1: added lo [ 1338.779282][T16486] RDS/IB: sz1: added [ 1338.795188][T16486] smc: adding ib device sz1 with port count 1 [ 1338.808332][T16486] smc: ib device sz1 port 1 has pnetid [ 1338.870885][T14885] lo speed is unknown, defaulting to 1000 [ 1338.902029][T16486] lo speed is unknown, defaulting to 1000 [ 1340.914251][T16486] lo speed is unknown, defaulting to 1000 [ 1341.329517][T16486] lo speed is unknown, defaulting to 1000 [ 1344.832340][T16486] lo speed is unknown, defaulting to 1000 [ 1346.614517][T16486] lo speed is unknown, defaulting to 1000 [ 1346.824715][T16486] lo speed is unknown, defaulting to 1000 [ 1346.837309][T16551] loop3: detected capacity change from 0 to 512 [ 1346.879307][T16551] EXT4-fs: Ignoring removed bh option [ 1346.907446][T16551] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1346.964221][T16555] jffs2: notice: (16555) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1346.981285][T16551] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.2926: corrupted in-inode xattr: invalid ea_ino [ 1347.047408][T16551] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.2926: couldn't read orphan inode 15 (err -117) [ 1347.067765][T16551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1347.307304][T15560] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1347.329998][T15557] Bluetooth: Wrong link type (-71) [ 1348.527729][T16486] lo speed is unknown, defaulting to 1000 [ 1350.270175][T16582] printk: console [ttyS0] disabled [ 1350.353450][T16585] printk: console [ttyS0] enabled [ 1350.567912][T16589] loop7: detected capacity change from 0 to 256 [ 1350.874711][T16593] loop3: detected capacity change from 0 to 512 [ 1350.948604][T16593] EXT4-fs: Ignoring removed bh option [ 1350.996478][T16593] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1351.931932][T16593] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.2937: corrupted in-inode xattr: invalid ea_ino [ 1352.002384][T16593] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.2937: couldn't read orphan inode 15 (err -117) [ 1352.064422][T16593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1352.225746][T15560] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1354.228864][T15557] Bluetooth: hci2: command 0x0406 tx timeout [ 1354.235051][T15557] Bluetooth: hci4: command 0x0406 tx timeout [ 1354.241573][T15550] Bluetooth: hci5: command 0x0406 tx timeout [ 1354.907875][T16632] loop7: detected capacity change from 0 to 256 [ 1356.902529][T16641] loop7: detected capacity change from 0 to 32768 [ 1356.910891][T16641] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop7 scanned by syz.7.2951 (16641) [ 1356.949483][T16641] BTRFS info (device loop7): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1356.959705][T16641] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 1356.968444][T16641] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1356.977932][T16641] BTRFS info (device loop7): use zstd compression, level 3 [ 1356.985203][T16641] BTRFS info (device loop7): force clearing of disk cache [ 1356.992638][T16641] BTRFS info (device loop7): enabling disk space caching [ 1356.999723][T16641] BTRFS info (device loop7): disk space caching is enabled [ 1357.164660][T16641] BTRFS info (device loop7): enabling ssd optimizations [ 1357.171814][T16641] BTRFS info (device loop7): auto enabling async discard [ 1357.179742][T16641] BTRFS info (device loop7): rebuilding free space tree [ 1357.195493][T16641] BTRFS info (device loop7): disabling free space tree [ 1357.202652][T16641] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1357.212429][T16641] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1357.278754][T16661] udevd[16661]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 1357.360742][T16663] loop3: detected capacity change from 0 to 8 [ 1357.922561][T16663] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1357.946242][T16663] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1357.956395][T16667] loop9: detected capacity change from 0 to 512 [ 1357.976124][T16663] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1358.008190][T16667] EXT4-fs: Ignoring removed bh option [ 1358.015672][T15548] BTRFS info (device loop7): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1358.029537][T16667] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1358.039543][T16668] udevd[16668]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 1358.114704][T16667] EXT4-fs error (device loop9): ext4_iget_extra_inode:4752: inode #15: comm syz.9.2953: corrupted in-inode xattr: invalid ea_ino [ 1358.182570][T16667] EXT4-fs error (device loop9): ext4_orphan_get:1413: comm syz.9.2953: couldn't read orphan inode 15 (err -117) [ 1358.261674][T16667] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1358.330640][T16675] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2955'. [ 1358.400187][T15551] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1362.298871][T16705] loop7: detected capacity change from 0 to 8 [ 1362.420707][T16705] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1362.428771][T16705] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1362.443000][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.450114][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.492019][T16705] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1362.677024][T16707] loop7: detected capacity change from 0 to 512 [ 1362.699693][T16707] EXT4-fs: Ignoring removed bh option [ 1362.740786][T16707] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1362.784021][T16707] EXT4-fs error (device loop7): ext4_iget_extra_inode:4752: inode #15: comm syz.7.2965: corrupted in-inode xattr: invalid ea_ino [ 1362.848649][T16707] EXT4-fs error (device loop7): ext4_orphan_get:1413: comm syz.7.2965: couldn't read orphan inode 15 (err -117) [ 1362.942010][T16707] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1363.089369][T15548] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1366.495066][T16733] loop7: detected capacity change from 0 to 8 [ 1366.608832][T16736] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2974'. [ 1366.786401][T16737] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1366.797079][T16737] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1366.809096][T16737] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1371.003143][ T1209] Process accounting resumed [ 1372.734170][T16777] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2987'. [ 1373.234570][T16786] loop7: detected capacity change from 0 to 256 [ 1375.574346][T16800] loop8: detected capacity change from 0 to 8 [ 1375.852500][T16801] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1375.863803][T16801] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1375.875216][T16801] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1378.946747][T16816] loop3: detected capacity change from 0 to 512 [ 1378.957508][T16816] EXT4-fs: Ignoring removed bh option [ 1378.966535][T16816] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1379.072999][T16816] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.2995: corrupted in-inode xattr: invalid ea_ino [ 1379.097732][T16820] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3000'. [ 1379.947348][T16816] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.2995: couldn't read orphan inode 15 (err -117) [ 1380.023190][T16816] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1381.023194][T15560] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1381.132418][T16835] loop3: detected capacity change from 0 to 256 [ 1381.939156][T16843] loop9: detected capacity change from 0 to 8 [ 1384.801291][T16843] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1384.809308][T16843] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1384.817716][T16843] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1385.150489][T16852] loop9: detected capacity change from 0 to 512 [ 1385.186717][T16852] EXT4-fs: Ignoring removed bh option [ 1385.242004][T16852] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1385.315884][T16852] EXT4-fs error (device loop9): ext4_iget_extra_inode:4752: inode #15: comm syz.9.3012: corrupted in-inode xattr: invalid ea_ino [ 1385.376002][T16852] EXT4-fs error (device loop9): ext4_orphan_get:1413: comm syz.9.3012: couldn't read orphan inode 15 (err -117) [ 1385.462710][T16852] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1385.624224][T15551] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1387.729630][T16870] loop7: detected capacity change from 0 to 256 [ 1390.979764][T16884] loop7: detected capacity change from 0 to 8 [ 1391.437350][T16885] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1391.511923][T16886] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1391.525425][T16885] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1394.675978][T16907] loop8: detected capacity change from 0 to 512 [ 1394.721560][T16907] EXT4-fs: Ignoring removed bh option [ 1394.742285][T16907] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1394.835183][T16907] EXT4-fs error (device loop8): ext4_iget_extra_inode:4752: inode #15: comm syz.8.3022: corrupted in-inode xattr: invalid ea_ino [ 1395.666966][T16907] EXT4-fs error (device loop8): ext4_orphan_get:1413: comm syz.8.3022: couldn't read orphan inode 15 (err -117) [ 1395.753053][T16907] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1395.917497][T15547] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1395.974100][T16921] loop3: detected capacity change from 0 to 8 [ 1396.204186][T15245] Process accounting resumed [ 1397.195866][T16924] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1397.232610][T16924] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1397.327183][T16924] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1400.715333][ T5085] Bluetooth: hci3: command 0x0406 tx timeout [ 1402.128054][T16975] loop3: detected capacity change from 0 to 8 [ 1402.475678][T16976] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1402.574375][T16979] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1402.583341][T16976] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1411.097210][T15731] IPVS: starting estimator thread 0... [ 1411.222283][T17034] IPVS: using max 20 ests per chain, 48000 per kthread [ 1411.277649][T17037] loop7: detected capacity change from 0 to 8 [ 1411.869038][T17039] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1411.997710][T17039] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1412.038017][T17039] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1419.834478][T17104] loop3: detected capacity change from 0 to 8 [ 1420.375027][T17106] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1420.536905][T17106] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1420.587514][T17106] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1423.138152][T17050] Process accounting resumed [ 1424.365540][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1424.415728][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1426.852520][T14885] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 1427.146930][T14885] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1427.196388][T14885] usb 4-1: config 1 interface 0 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 1427.235869][T17154] loop7: detected capacity change from 0 to 512 [ 1427.249167][T14885] usb 4-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1427.290941][T14885] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 1427.319980][T14885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.385285][T14885] usb 4-1: Product: syz [ 1427.400450][T14885] usb 4-1: Manufacturer: syz [ 1427.400547][T17154] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1427.405106][T14885] usb 4-1: SerialNumber: syz [ 1427.715295][T17154] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1427.766701][T14885] snd-usb-caiaq 4-1:1.0: invalid EPs [ 1427.772108][T14885] usb 4-1: unable to init card! (ret=-22) [ 1427.779082][T14885] snd-usb-caiaq: probe of 4-1:1.0 failed with error -22 [ 1428.750862][T17154] jffs2: notice: (17154) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1428.874139][ T56] usb 4-1: USB disconnect, device number 11 [ 1429.312427][T15548] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1431.122883][T17190] loop8: detected capacity change from 0 to 8192 [ 1432.503907][T17190] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1433.581449][T17199] loop7: detected capacity change from 0 to 512 [ 1433.763676][T17199] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1433.987140][T17199] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1434.114109][T17199] jffs2: notice: (17199) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1435.628805][T17213] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1435.725577][T17215] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 1436.067606][T15548] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1442.440233][T17250] loop8: detected capacity change from 0 to 512 [ 1442.534960][T17250] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1442.660663][T17250] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1442.806912][T17250] jffs2: notice: (17250) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1443.039124][T17259] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1443.097052][T17250] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 1443.276359][T15547] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1447.660626][T17293] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.3117'. [ 1447.679155][T17292] loop8: detected capacity change from 0 to 512 [ 1447.701797][T17290] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.3117'. [ 1447.774030][T17292] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1447.842792][T17292] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1447.923706][T17292] jffs2: notice: (17292) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1447.962708][T17302] Process accounting resumed [ 1448.022767][T17304] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1448.053529][T17292] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 1448.169962][T15547] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1451.447837][T17339] Process accounting resumed [ 1451.634003][T17348] loop7: detected capacity change from 0 to 512 [ 1451.670950][T17348] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1451.729567][T17348] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1454.119862][T15548] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1455.327118][T17377] Process accounting resumed [ 1458.128897][T17403] loop7: detected capacity change from 0 to 512 [ 1458.246423][T17403] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1459.178271][T17403] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1459.547527][T17419] Process accounting resumed [ 1459.669002][T15548] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1460.732358][T17431] loop3: detected capacity change from 0 to 256 [ 1461.749139][T17441] netlink: 'syz.8.3156': attribute type 5 has an invalid length. [ 1461.921516][T17441] netlink: 'syz.8.3156': attribute type 5 has an invalid length. [ 1463.243574][T17463] loop9: detected capacity change from 0 to 512 [ 1463.353116][T17463] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1463.498466][T17463] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1463.528371][T17465] Process accounting resumed [ 1463.638736][T17474] loop3: detected capacity change from 0 to 2048 [ 1464.610120][T17478] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1464.675115][T17474] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean [ 1464.684059][T15551] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1465.483734][T17494] Process accounting resumed [ 1468.404812][T17528] loop9: detected capacity change from 0 to 2048 [ 1468.440777][T17530] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1468.482918][T17528] NILFS (loop9): nilfs_sufile_do_free: segment 9 is already clean [ 1469.842368][T17543] netlink: 'syz.7.3187': attribute type 29 has an invalid length. [ 1469.939223][T17541] Process accounting resumed [ 1469.945612][T17543] netlink: 'syz.7.3187': attribute type 29 has an invalid length. [ 1470.019655][T17544] netlink: 'syz.7.3187': attribute type 29 has an invalid length. [ 1471.592786][ T1209] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1471.813349][ T1209] usb 9-1: Using ep0 maxpacket: 8 [ 1471.843838][ T1209] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1471.858230][T17566] loop3: detected capacity change from 0 to 2048 [ 1471.908088][ T1209] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1471.926927][T17567] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1472.003866][ T1209] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1472.090822][ T1209] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1472.141902][ T1209] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1472.172324][ T1209] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.650040][T17559] netlink: 144 bytes leftover after parsing attributes in process `syz.8.3190'. [ 1473.606546][ T1209] usb 9-1: GET_CAPABILITIES returned 0 [ 1473.631085][ T1209] usbtmc 9-1:16.0: can't read capabilities [ 1474.753286][T17577] Process accounting resumed [ 1475.034569][T14885] usb 9-1: USB disconnect, device number 2 [ 1475.728566][T17594] loop9: detected capacity change from 0 to 8 [ 1476.162597][T17595] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1476.244647][T17598] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1476.353940][T17595] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1478.049904][T17618] loop9: detected capacity change from 0 to 2048 [ 1478.264221][T17623] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1479.331432][T17637] loop8: detected capacity change from 0 to 512 [ 1479.346226][T17637] EXT4-fs: Ignoring removed bh option [ 1479.375347][T17637] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1479.510917][T17637] EXT4-fs error (device loop8): ext4_iget_extra_inode:4752: inode #15: comm syz.8.3217: corrupted in-inode xattr: invalid ea_ino [ 1479.563915][T17637] EXT4-fs error (device loop8): ext4_orphan_get:1413: comm syz.8.3217: couldn't read orphan inode 15 (err -117) [ 1479.584363][T17641] loop7: detected capacity change from 0 to 8 [ 1479.628509][T17637] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1480.686636][T15547] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1480.714488][T17645] loop3: detected capacity change from 0 to 2048 [ 1480.985974][T17649] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1481.495739][T17648] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1481.559807][T17641] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1481.587745][T17641] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1482.834302][T17678] loop7: detected capacity change from 0 to 512 [ 1483.645633][T17678] EXT4-fs: Ignoring removed bh option [ 1483.833804][T17678] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1483.886944][T17681] loop9: detected capacity change from 0 to 2048 [ 1484.091837][T17686] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1484.128044][T17678] EXT4-fs error (device loop7): ext4_iget_extra_inode:4752: inode #15: comm syz.7.3229: corrupted in-inode xattr: invalid ea_ino [ 1484.314636][T17678] EXT4-fs error (device loop7): ext4_orphan_get:1413: comm syz.7.3229: couldn't read orphan inode 15 (err -117) [ 1484.398406][T17678] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1484.763860][T15548] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1484.979575][T17701] netlink: 'syz.7.3238': attribute type 10 has an invalid length. [ 1484.987551][T17701] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3238'. [ 1485.029802][T17701] bridge0: port 3(team0) entered blocking state [ 1485.049406][T17701] bridge0: port 3(team0) entered disabled state [ 1485.055875][T17701] team0: entered allmulticast mode [ 1485.097193][T17701] team_slave_0: entered allmulticast mode [ 1485.135623][T17701] team_slave_1: entered allmulticast mode [ 1485.156204][T17701] team0: entered promiscuous mode [ 1485.173505][T17701] team_slave_0: entered promiscuous mode [ 1485.190120][T17701] team_slave_1: entered promiscuous mode [ 1485.513767][T17712] loop3: detected capacity change from 0 to 2048 [ 1485.669303][T17714] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1485.947005][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.953391][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.326976][T17728] loop8: detected capacity change from 0 to 8 [ 1486.416922][T17728] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1486.427106][T17728] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1486.435700][T17728] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1487.748306][T17738] loop8: detected capacity change from 0 to 2048 [ 1487.865919][T17739] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1487.927291][T17738] NILFS (loop8): nilfs_sufile_do_free: segment 9 is already clean [ 1490.249410][T17758] loop3: detected capacity change from 0 to 8 [ 1491.378108][T17758] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1491.443961][T17758] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1492.115219][T17758] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1492.301300][T17764] Process accounting resumed [ 1493.794875][T17778] netlink: 'syz.7.3269': attribute type 29 has an invalid length. [ 1493.837992][T17778] netlink: 'syz.7.3269': attribute type 29 has an invalid length. [ 1494.100201][T17778] netlink: 'syz.7.3269': attribute type 29 has an invalid length. [ 1494.110597][T17778] netlink: 'syz.7.3269': attribute type 29 has an invalid length. [ 1495.953167][T17799] loop8: detected capacity change from 0 to 2048 [ 1496.143855][T17802] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1496.178375][T17798] NILFS (loop8): nilfs_sufile_do_free: segment 9 is already clean [ 1498.103757][T17804] Process accounting resumed [ 1500.114965][T17833] printk: console [ttyS0] disabled [ 1512.313408][T17936] printk: console [ttyS0] enabled [ 1512.745980][T17943] loop8: detected capacity change from 0 to 512 [ 1512.844119][T17943] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1514.332369][T17943] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1514.353333][T17943] jffs2: notice: (17943) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1514.552365][T17952] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1514.620560][T17943] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 1514.933990][T15547] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1516.406797][T17969] printk: console [ttyS0] disabled [ 1516.640689][T17975] printk: console [ttyS0] enabled [ 1517.605453][T17981] loop9: detected capacity change from 0 to 512 [ 1517.630479][T17981] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1517.710164][T17981] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1518.041604][T17981] jffs2: notice: (17981) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1518.375064][T17981] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1518.497914][T17989] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 1518.630704][T17987] Process accounting resumed [ 1519.707839][T15551] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1522.203568][ T5814] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1522.396081][T18012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3338'. [ 1522.400854][ T5814] usb 9-1: Using ep0 maxpacket: 8 [ 1523.235089][ T5814] usb 9-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1523.468201][ T5814] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1523.626231][ T5814] usb 9-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 1523.666592][ T5814] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1523.753093][ T5814] usb 9-1: Product: syz [ 1523.759677][ T5814] usb 9-1: Manufacturer: syz [ 1523.767728][ T5814] usb 9-1: SerialNumber: syz [ 1524.267404][ T5814] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input8 [ 1524.988883][T18021] Process accounting resumed [ 1525.047648][ T5814] usb 9-1: USB disconnect, device number 3 [ 1525.055926][ T5125] pxrc 9-1:1.0: pxrc_open - usb_submit_urb failed, error: -19 [ 1525.657239][T18029] loop8: detected capacity change from 0 to 2048 [ 1526.520515][T18039] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1527.134423][T18050] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3350'. [ 1527.305031][T15245] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1527.505219][T15245] usb 4-1: Using ep0 maxpacket: 8 [ 1527.527791][T15245] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1527.572095][T15245] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1527.614785][T15245] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1527.650878][T15245] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1527.698557][T15245] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1527.729524][T15245] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.060549][T18048] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3349'. [ 1528.104183][T15245] usb 4-1: GET_CAPABILITIES returned 0 [ 1528.125643][T15245] usbtmc 4-1:16.0: can't read capabilities [ 1528.489108][ T5814] usb 4-1: USB disconnect, device number 12 [ 1530.534676][T18077] loop7: detected capacity change from 0 to 2048 [ 1530.604316][T18080] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1530.858285][ T1209] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1531.101540][ T1209] usb 4-1: Using ep0 maxpacket: 8 [ 1531.146979][ T1209] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1531.178400][ T1209] usb 4-1: config 179 has no interface number 0 [ 1531.204331][ T1209] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1531.246345][ T1209] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1531.324374][ T1209] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1531.392993][ T1209] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1531.447565][ T1209] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1531.493801][ T1209] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1531.529075][ T1209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1531.566832][T18079] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1531.585953][ T1209] xpad: probe of 4-1:179.65 failed with error -5 [ 1533.016309][ T5814] usb 4-1: USB disconnect, device number 13 [ 1535.846091][ T27] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1536.065308][ T27] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1536.103978][ T27] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1536.140410][ T27] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1536.173042][ T27] usb 9-1: config 0 descriptor?? [ 1536.443776][ T27] usbhid 9-1:0.0: can't add hid device: -71 [ 1536.462606][ T27] usbhid: probe of 9-1:0.0 failed with error -71 [ 1536.491694][ T27] usb 9-1: USB disconnect, device number 4 [ 1537.029885][T15245] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1537.049665][T18118] loop3: detected capacity change from 0 to 2048 [ 1537.085087][T18121] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1537.121479][ T27] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1537.308431][T15245] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1537.370033][ T27] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1537.480580][T15245] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1537.536831][ T27] usb 9-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1537.688144][T15245] usb 8-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 1537.798380][ T27] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1537.867549][T15245] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.893161][ T27] usb 9-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1537.942788][ T27] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.948177][T15245] usb 8-1: probing VID:PID(0424:012C) [ 1537.965431][ T27] usb 9-1: config 0 descriptor?? [ 1537.998901][T15245] usb 8-1: vub300 testing BULK IN EndPoint(0) 81 [ 1538.014561][T15245] usb 8-1: vub300 testing BULK OUT EndPoint(1) 02 [ 1538.021137][T15245] usb 8-1: vub300 testing BULK IN EndPoint(2) 83 [ 1538.043578][T15245] usb 8-1: vub300 testing BULK OUT EndPoint(3) 04 [ 1538.050089][T15245] usb 8-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 1538.352526][T15245] usb 8-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 1538.354267][ T5814] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1538.398001][ T27] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 1538.405803][ T27] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 1538.413415][ T27] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 1538.421035][ T27] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 1538.499867][ T27] hid-picolcd 0003:04D8:F002.0002: No report with id 0xf3 found [ 1538.507979][ T27] hid-picolcd 0003:04D8:F002.0002: No report with id 0xf4 found [ 1538.545109][ T5814] usb 4-1: Using ep0 maxpacket: 16 [ 1538.554411][ T5814] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1538.562647][T15245] usb 8-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 1538.565244][ T5814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1538.604291][ T5814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1538.615170][ T5814] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1538.634714][ T5814] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1538.663127][ T5814] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1538.672448][ T5814] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1538.680551][ T5814] usb 4-1: Manufacturer: syz [ 1538.690061][ T5814] usb 4-1: config 0 descriptor?? [ 1538.765967][T18114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1538.778047][T18114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1538.865271][T14885] usb 9-1: USB disconnect, device number 5 [ 1538.997108][ T5814] rc_core: Couldn't load IR keymap rc-hauppauge [ 1539.003532][ T5814] Registered IR keymap rc-empty [ 1539.014621][ T5814] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1539.049643][ T5814] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1539.087843][ T5814] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1539.102633][ T5814] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9 [ 1539.121881][ T5814] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1539.157262][ T5814] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1539.187370][ T5814] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1539.217911][ T5814] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1539.247650][ T5814] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1539.277435][ T5814] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1539.287562][T14823] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1539.307479][ T5814] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1539.337545][ T5814] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1539.367675][ T5814] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1539.398068][ T5814] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1539.438108][ T5814] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1540.571540][T14823] usb 10-1: Using ep0 maxpacket: 8 [ 1540.601783][T14823] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 1540.614153][ T5814] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1540.614524][T18127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1540.645920][T18127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1540.650183][T14823] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1540.671022][T18127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1540.680437][T18127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1540.685269][ T5814] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1540.693154][T18127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1540.714658][T15245] usb 8-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 1540.733575][T18127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1540.756248][T14823] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1540.762245][T15245] usb 8-1: USB disconnect, device number 2 [ 1540.775217][ T27] usb 8-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 1540.821666][T14823] usb 10-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 1540.832370][ T27] usb 8-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 1540.872495][T14823] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1541.810959][T14823] usb 10-1: config 168 interface 0 has no altsetting 0 [ 1541.813600][T15245] USB vub300 remote SDIO host controller[0] now disconnected [ 1541.820600][ C0] BUG: sleeping function called from invalid context at kernel/workqueue.c:3414 [ 1541.837803][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 14823, name: kworker/0:1 [ 1541.847191][ C0] preempt_count: 101, expected: 0 [ 1541.852364][ C0] RCU nest depth: 0, expected: 0 [ 1541.857443][ C0] 4 locks held by kworker/0:1/14823: [ 1541.862788][ C0] #0: ffff888147644938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1541.874393][ C0] #1: ffffc900038e7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1541.886517][ C0] #2: ffff8881437bc1d8 (&dev->mutex){....}-{3:3}, at: hub_event+0x188/0x4a80 [ 1541.895666][ C0] #3: ffffc90000007be0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540 [ 1541.906261][ C0] Preemption disabled at: [ 1541.906295][ C0] [] vprintk_emit+0x146/0x610 [ 1541.917032][ C0] CPU: 0 PID: 14823 Comm: kworker/0:1 Not tainted syzkaller #0 [ 1541.924599][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1541.934664][ C0] Workqueue: usb_hub_wq hub_event [ 1541.939687][ C0] Call Trace: [ 1541.942960][ C0] [ 1541.945800][ C0] dump_stack_lvl+0x18c/0x250 [ 1541.950482][ C0] ? show_regs_print_info+0x20/0x20 [ 1541.955689][ C0] ? load_image+0x420/0x420 [ 1541.960209][ C0] ? vprintk_emit+0x146/0x610 [ 1541.964883][ C0] __might_resched+0x48d/0x5f0 [ 1541.969646][ C0] ? vprintk_emit+0x146/0x610 [ 1541.974331][ C0] ? __might_sleep+0xe0/0xe0 [ 1541.978918][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1541.984812][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1541.989681][ C0] __flush_work+0x10f/0xac0 [ 1541.994182][ C0] ? flush_work+0x20/0x20 [ 1541.998508][ C0] ? __timer_delete+0x6b/0x290 [ 1542.003267][ C0] ? mark_lock+0x94/0x320 [ 1542.007604][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1542.013589][ C0] ? mod_delayed_work_on+0x1c0/0x1c0 [ 1542.018882][ C0] ? lock_chain_count+0x20/0x20 [ 1542.023742][ C0] ? __cancel_work_timer+0x36e/0x560 [ 1542.029022][ C0] __cancel_work_timer+0x3f8/0x560 [ 1542.034133][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1542.039327][ C0] ? cancel_work_sync+0x20/0x20 [ 1542.044172][ C0] ? slab_free_freelist_hook+0x130/0x1a0 [ 1542.049817][ C0] ? kobject_put+0x41a/0x450 [ 1542.054408][ C0] mmc_free_host+0x19/0x30 [ 1542.058894][ C0] call_timer_fn+0x189/0x540 [ 1542.063479][ C0] ? kref_get+0x70/0x70 [ 1542.067667][ C0] ? call_timer_fn+0xd2/0x540 [ 1542.072335][ C0] ? __run_timers+0x810/0x810 [ 1542.077030][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1542.082228][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1542.087421][ C0] ? kref_get+0x70/0x70 [ 1542.091587][ C0] __run_timers+0x570/0x810 [ 1542.096093][ C0] ? detach_timer+0x2b0/0x2b0 [ 1542.100768][ C0] ? lock_chain_count+0x20/0x20 [ 1542.105631][ C0] run_timer_softirq+0x67/0xf0 [ 1542.110392][ C0] handle_softirqs+0x27d/0x820 [ 1542.115154][ C0] ? read_tsc+0x9/0x20 [ 1542.119218][ C0] ? ktime_get+0x24b/0x280 [ 1542.123630][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1542.128393][ C0] ? do_softirq+0x1a0/0x1a0 [ 1542.132891][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1542.138094][ C0] __irq_exit_rcu+0xd3/0x190 [ 1542.142684][ C0] ? irq_exit_rcu+0x20/0x20 [ 1542.147186][ C0] irq_exit_rcu+0x9/0x20 [ 1542.151424][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1542.157051][ C0] [ 1542.159990][ C0] [ 1542.162915][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1542.168898][ C0] RIP: 0010:console_flush_all+0x883/0xcf0 [ 1542.174613][ C0] Code: ed 01 00 00 e8 be 85 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 af 85 1b 00 eb 06 e8 a8 85 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 58 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 1542.194215][ C0] RSP: 0018:ffffc900038e6e60 EFLAGS: 00000283 [ 1542.200294][ C0] RAX: ffffffff816c05a8 RBX: ffffc900038e6fdf RCX: 0000000000100000 [ 1542.208260][ C0] RDX: ffffc90017218000 RSI: 000000000002d966 RDI: 000000000002d967 [ 1542.216224][ C0] RBP: ffffc900038e6fb0 R08: ffffffff911eb577 R09: 1ffffffff223d6ae [ 1542.224188][ C0] R10: dffffc0000000000 R11: fffffbfff223d6af R12: ffffffff8d8ce340 [ 1542.232153][ C0] R13: 1ffffffff19f9740 R14: ffffffff8d8ce398 R15: dffffc0000000000 [ 1542.240132][ C0] ? console_flush_all+0x878/0xcf0 [ 1542.245244][ C0] ? console_flush_all+0x10b/0xcf0 [ 1542.250360][ C0] ? is_console_locked+0x20/0x20 [ 1542.255299][ C0] ? lock_chain_count+0x20/0x20 [ 1542.260148][ C0] ? __down_trylock_console_sem+0xf6/0x1f0 [ 1542.265953][ C0] console_unlock+0xad/0x350 [ 1542.270555][ C0] ? other_cpu_in_panic+0xf0/0xf0 [ 1542.275580][ C0] vprintk_emit+0x497/0x610 [ 1542.280082][ C0] ? printk_sprint+0x460/0x460 [ 1542.284844][ C0] ? vscnprintf+0x80/0x80 [ 1542.289190][ C0] dev_vprintk_emit+0x339/0x3f0 [ 1542.294076][ C0] ? _dev_info+0x170/0x170 [ 1542.298505][ C0] dev_printk_emit+0xef/0x140 [ 1542.303184][ C0] ? dev_vprintk_emit+0x3f0/0x3f0 [ 1542.308209][ C0] ? __dev_printk+0x131/0x190 [ 1542.312907][ C0] _dev_notice+0x11f/0x170 [ 1542.317340][ C0] ? _dev_warn+0x170/0x170 [ 1542.321754][ C0] ? usb_get_configuration+0x1a1c/0x5300 [ 1542.327381][ C0] ? rcu_is_watching+0x15/0xb0 [ 1542.332142][ C0] ? usb_get_configuration+0x1c96/0x5300 [ 1542.337774][ C0] usb_get_configuration+0x4a80/0x5300 [ 1542.343251][ C0] ? usb_destroy_configuration+0x680/0x680 [ 1542.349049][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1542.355030][ C0] ? lock_chain_count+0x20/0x20 [ 1542.359877][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1542.365766][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1542.370970][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1542.376162][ C0] usb_new_device+0x136/0x1550 [ 1542.380924][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1542.386901][ C0] ? mutex_unlock+0x10/0x10 [ 1542.391399][ C0] ? lock_chain_count+0x20/0x20 [ 1542.396261][ C0] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1542.401281][ C0] ? usb_disconnect+0x8a0/0x8a0 [ 1542.406130][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1542.411322][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1542.416514][ C0] hub_event+0x29d5/0x4a80 [ 1542.420953][ C0] ? hub_post_resume+0x120/0x120 [ 1542.425888][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1542.431258][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1542.436466][ C0] ? process_scheduled_works+0x975/0x1600 [ 1542.442180][ C0] ? process_scheduled_works+0x975/0x1600 [ 1542.447898][ C0] process_scheduled_works+0xa60/0x1600 [ 1542.453454][ C0] ? worker_attach_to_pool+0x370/0x370 [ 1542.458914][ C0] ? assign_work+0x3cc/0x5d0 [ 1542.463503][ C0] worker_thread+0xa5e/0xfe0 [ 1542.468096][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1542.472945][ C0] ? __kthread_parkme+0x71/0x1c0 [ 1542.477884][ C0] kthread+0x2fa/0x390 [ 1542.481960][ C0] ? pr_cont_work+0x550/0x550 [ 1542.486631][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1542.491217][ C0] ret_from_fork+0x48/0x80 [ 1542.495627][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1542.500212][ C0] ret_from_fork_asm+0x11/0x20 [ 1542.505005][ C0] [ 1542.508533][ C0] ODEBUG: object ffffc900000079c0 is NOT on stack ffffc900038e0000, but annotated. [ 1542.510637][ C0] [ 1542.510641][ C0] ====================================================== [ 1542.510645][ C0] WARNING: possible circular locking dependency detected [ 1542.510649][ C0] syzkaller #0 Tainted: G W [ 1542.510656][ C0] ------------------------------------------------------ [ 1542.510659][ C0] kworker/0:1/14823 is trying to acquire lock: [ 1542.510665][ C0] ffffffff8d1263e0 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 1542.510694][ C0] [ 1542.510694][ C0] but task is already holding lock: [ 1542.510697][ C0] ffffffff9754b2b0 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0x5c/0x450 [ 1542.510725][ C0] [ 1542.510725][ C0] which lock already depends on the new lock. [ 1542.510725][ C0] [ 1542.510728][ C0] [ 1542.510728][ C0] the existing dependency chain (in reverse order) is: [ 1542.510731][ C0] [ 1542.510731][ C0] -> #4 (&obj_hash[i].lock){-.-.}-{2:2}: [ 1542.510745][ C0] _raw_spin_lock_irqsave+0xb4/0x100 [ 1542.510758][ C0] debug_object_activate+0x6c/0x500 [ 1542.510770][ C0] insert_work+0x35/0x310 [ 1542.510781][ C0] __queue_work+0xbfd/0xfd0 [ 1542.510791][ C0] queue_work_on+0x128/0x1f0 [ 1542.510800][ C0] start_poll_synchronize_rcu_expedited+0x105/0x140 [ 1542.510815][ C0] rcu_init+0x10d/0x160 [ 1542.510866][ C0] start_kernel+0x1fd/0x4e0 [ 1542.510882][ C0] x86_64_start_reservations+0x2a/0x30 [ 1542.510892][ C0] copy_bootdata+0x0/0xd0 [ 1542.510906][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 1542.510920][ C0] [ 1542.510920][ C0] -> #3 (&pool->lock){-.-.}-{2:2}: [ 1542.510935][ C0] _raw_spin_lock+0x2e/0x40 [ 1542.510946][ C0] __queue_work+0x72f/0xfd0 [ 1542.510956][ C0] queue_work_on+0x128/0x1f0 [ 1542.510967][ C0] rpm_suspend+0x1133/0x1b60 [ 1542.510982][ C0] __pm_runtime_idle+0x12f/0x1a0 [ 1542.510996][ C0] __device_attach+0x352/0x420 [ 1542.511006][ C0] bus_probe_device+0x180/0x260 [ 1542.511020][ C0] device_add+0x87c/0xc40 [ 1542.511031][ C0] serial_base_port_add+0x2f6/0x430 [ 1542.511057][ C0] serial_core_register_port+0x378/0x20b0 [ 1542.511068][ C0] serial8250_register_8250_port+0x15fd/0x1f40 [ 1542.511081][ C0] serial_pnp_probe+0x577/0x750 [ 1542.511094][ C0] pnp_device_probe+0x305/0x4b0 [ 1542.511121][ C0] really_probe+0x247/0xae0 [ 1542.511131][ C0] __driver_probe_device+0x1f5/0x390 [ 1542.511140][ C0] driver_probe_device+0x4f/0x420 [ 1542.511149][ C0] __driver_attach+0x444/0x6d0 [ 1542.511157][ C0] bus_for_each_dev+0x235/0x2b0 [ 1542.511170][ C0] bus_add_driver+0x340/0x630 [ 1542.511182][ C0] driver_register+0x23a/0x310 [ 1542.511191][ C0] serial8250_init+0x9a/0x170 [ 1542.511205][ C0] do_one_initcall+0x242/0x790 [ 1542.511216][ C0] do_initcall_level+0x13d/0x1f0 [ 1542.511226][ C0] do_initcalls+0x69/0xd0 [ 1542.511235][ C0] kernel_init_freeable+0x3d9/0x560 [ 1542.511245][ C0] kernel_init+0x1d/0x1c0 [ 1542.511255][ C0] ret_from_fork+0x48/0x80 [ 1542.511265][ C0] ret_from_fork_asm+0x11/0x20 [ 1542.511277][ C0] [ 1542.511277][ C0] -> #2 (&dev->power.lock){-.-.}-{2:2}: [ 1542.511290][ C0] _raw_spin_lock_irqsave+0xb4/0x100 [ 1542.511301][ C0] __pm_runtime_resume+0x10f/0x170 [ 1542.511314][ C0] __uart_start+0x171/0x3e0 [ 1542.511323][ C0] uart_write+0x449/0x5d0 [ 1542.511331][ C0] n_tty_write+0xd3d/0x11e0 [ 1542.511345][ C0] file_tty_write+0x529/0x960 [ 1542.511355][ C0] vfs_write+0x474/0x9a0 [ 1542.511368][ C0] ksys_write+0x151/0x260 [ 1542.511380][ C0] do_syscall_64+0x55/0xb0 [ 1542.511392][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1542.511405][ C0] [ 1542.511405][ C0] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 1542.511417][ C0] _raw_spin_lock_irqsave+0xb4/0x100 [ 1542.511428][ C0] serial8250_console_write+0x181/0x18b0 [ 1542.511441][ C0] console_flush_all+0x6ad/0xcf0 [ 1542.511452][ C0] console_unlock+0xad/0x350 [ 1542.511462][ C0] vprintk_emit+0x497/0x610 [ 1542.511473][ C0] _printk+0xde/0x130 [ 1542.511482][ C0] register_console+0xb96/0xf00 [ 1542.511493][ C0] univ8250_console_init+0x45/0x50 [ 1542.511502][ C0] console_init+0x17b/0x5d0 [ 1542.511511][ C0] start_kernel+0x2c8/0x4e0 [ 1542.511520][ C0] x86_64_start_reservations+0x2a/0x30 [ 1542.511529][ C0] copy_bootdata+0x0/0xd0 [ 1542.511541][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 1542.511553][ C0] [ 1542.511553][ C0] -> #0 (console_owner){-.-.}-{0:0}: [ 1542.511565][ C0] __lock_acquire+0x37ef/0x7d80 [ 1542.511576][ C0] lock_acquire+0x19e/0x420 [ 1542.511585][ C0] console_flush_all+0x676/0xcf0 [ 1542.511596][ C0] console_unlock+0xad/0x350 [ 1542.511606][ C0] vprintk_emit+0x497/0x610 [ 1542.511617][ C0] _printk+0xde/0x130 [ 1542.511626][ C0] __debug_object_init+0x18d/0x450 [ 1542.511638][ C0] __synchronize_srcu+0x2ae/0x3d0 [ 1542.511649][ C0] wakeup_source_unregister+0x116/0x190 [ 1542.511659][ C0] mmc_host_classdev_release+0x47/0x100 [ 1542.511674][ C0] device_release+0xbc/0x1e0 [ 1542.511685][ C0] kobject_put+0x21b/0x450 [ 1542.511694][ C0] call_timer_fn+0x189/0x540 [ 1542.511704][ C0] __run_timers+0x570/0x810 [ 1542.511712][ C0] run_timer_softirq+0x67/0xf0 [ 1542.511721][ C0] handle_softirqs+0x27d/0x820 [ 1542.511731][ C0] __irq_exit_rcu+0xd3/0x190 [ 1542.511740][ C0] irq_exit_rcu+0x9/0x20 [ 1542.511748][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1542.511757][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1542.511770][ C0] console_flush_all+0x883/0xcf0 [ 1542.511781][ C0] console_unlock+0xad/0x350 [ 1542.511791][ C0] vprintk_emit+0x497/0x610 [ 1542.511802][ C0] dev_vprintk_emit+0x339/0x3f0 [ 1542.511814][ C0] dev_printk_emit+0xef/0x140 [ 1542.511825][ C0] _dev_notice+0x11f/0x170 [ 1542.511837][ C0] usb_get_configuration+0x4a80/0x5300 [ 1542.511847][ C0] usb_new_device+0x136/0x1550 [ 1542.511856][ C0] hub_event+0x29d5/0x4a80 [ 1542.511866][ C0] process_scheduled_works+0xa60/0x1600 [ 1542.511877][ C0] worker_thread+0xa5e/0xfe0 [ 1542.511888][ C0] kthread+0x2fa/0x390 [ 1542.511896][ C0] ret_from_fork+0x48/0x80 [ 1542.511907][ C0] ret_from_fork_asm+0x11/0x20 [ 1542.511918][ C0] [ 1542.511918][ C0] other info that might help us debug this: [ 1542.511918][ C0] [ 1542.511921][ C0] Chain exists of: [ 1542.511921][ C0] console_owner --> &pool->lock --> &obj_hash[i].lock [ 1542.511921][ C0] [ 1542.511936][ C0] Possible unsafe locking scenario: [ 1542.511936][ C0] [ 1542.511938][ C0] CPU0 CPU1 [ 1542.511941][ C0] ---- ---- [ 1542.511943][ C0] lock(&obj_hash[i].lock); [ 1542.511949][ C0] lock(&pool->lock); [ 1542.511956][ C0] lock(&obj_hash[i].lock); [ 1542.511962][ C0] lock(console_owner); [ 1542.511968][ C0] [ 1542.511968][ C0] *** DEADLOCK *** [ 1542.511968][ C0] [ 1542.511971][ C0] 7 locks held by kworker/0:1/14823: [ 1542.511977][ C0] #0: ffff888147644938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1542.512004][ C0] #1: ffffc900038e7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1542.512030][ C0] #2: ffff8881437bc1d8 (&dev->mutex){....}-{3:3}, at: hub_event+0x188/0x4a80 [ 1542.512053][ C0] #3: ffffc90000007be0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540 [ 1542.512075][ C0] #4: ffffffff9754b2b0 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0x5c/0x450 [ 1542.512100][ C0] #5: ffffffff8d1264c0 (console_lock){+.+.}-{0:0}, at: _printk+0xde/0x130 [ 1542.512127][ C0] #6: ffffffff8d00dcd0 (console_srcu){....}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 1542.512152][ C0] [ 1542.512152][ C0] stack backtrace: [ 1542.512155][ C0] CPU: 0 PID: 14823 Comm: kworker/0:1 Tainted: G W syzkaller #0 [ 1542.512166][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1542.512172][ C0] Workqueue: usb_hub_wq hub_event [ 1542.512182][ C0] Call Trace: [ 1542.512187][ C0] [ 1542.512191][ C0] dump_stack_lvl+0x18c/0x250 [ 1542.512205][ C0] ? load_image+0x420/0x420 [ 1542.512215][ C0] ? show_regs_print_info+0x20/0x20 [ 1542.512230][ C0] ? print_circular_bug+0x12b/0x1a0 [ 1542.512243][ C0] check_noncircular+0x2fc/0x400 [ 1542.512257][ C0] ? print_deadlock_bug+0x5d0/0x5d0 [ 1542.512268][ C0] ? lockdep_lock+0xf5/0x230 [ 1542.512282][ C0] __lock_acquire+0x37ef/0x7d80 [ 1542.512299][ C0] ? verify_lock_unused+0x140/0x140 [ 1542.512316][ C0] lock_acquire+0x19e/0x420 [ 1542.512326][ C0] ? console_flush_all+0x10b/0xcf0 [ 1542.512340][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 1542.512350][ C0] ? do_raw_spin_lock+0x11f/0x2b0 [ 1542.512363][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1542.512374][ C0] ? __rwlock_init+0x150/0x150 [ 1542.512387][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 1542.512401][ C0] console_flush_all+0x676/0xcf0 [ 1542.512412][ C0] ? console_flush_all+0x10b/0xcf0 [ 1542.512424][ C0] ? console_flush_all+0x10b/0xcf0 [ 1542.512438][ C0] ? is_console_locked+0x20/0x20 [ 1542.512453][ C0] console_unlock+0xad/0x350 [ 1542.512465][ C0] ? other_cpu_in_panic+0xf0/0xf0 [ 1542.512480][ C0] vprintk_emit+0x497/0x610 [ 1542.512492][ C0] ? printk_sprint+0x460/0x460 [ 1542.512505][ C0] ? do_raw_spin_lock+0x11f/0x2b0 [ 1542.512519][ C0] _printk+0xde/0x130 [ 1542.512531][ C0] ? load_image+0x420/0x420 [ 1542.512542][ C0] ? alloc_object+0x1c/0x640 [ 1542.512555][ C0] ? lock_release+0x8c0/0x8c0 [ 1542.512566][ C0] __debug_object_init+0x18d/0x450 [ 1542.512580][ C0] __synchronize_srcu+0x2ae/0x3d0 [ 1542.512593][ C0] ? synchronize_srcu_expedited+0x20/0x20 [ 1542.512605][ C0] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 1542.512619][ C0] ? read_tsc+0x9/0x20 [ 1542.512630][ C0] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 1542.512642][ C0] ? synchronize_srcu+0x25a/0x280 [ 1542.512655][ C0] wakeup_source_unregister+0x116/0x190 [ 1542.512667][ C0] mmc_host_classdev_release+0x47/0x100 [ 1542.512681][ C0] ? mmc_free_host+0x30/0x30 [ 1542.512695][ C0] device_release+0xbc/0x1e0 [ 1542.512708][ C0] kobject_put+0x21b/0x450 [ 1542.512719][ C0] call_timer_fn+0x189/0x540 [ 1542.512729][ C0] ? kref_get+0x70/0x70 [ 1542.512738][ C0] ? call_timer_fn+0xd2/0x540 [ 1542.512748][ C0] ? __run_timers+0x810/0x810 [ 1542.512760][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1542.512771][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1542.512780][ C0] ? kref_get+0x70/0x70 [ 1542.512790][ C0] __run_timers+0x570/0x810 [ 1542.512803][ C0] ? detach_timer+0x2b0/0x2b0 [ 1542.512815][ C0] ? lock_chain_count+0x20/0x20 [ 1542.512827][ C0] run_timer_softirq+0x67/0xf0 [ 1542.512837][ C0] handle_softirqs+0x27d/0x820 [ 1542.512847][ C0] ? read_tsc+0x9/0x20 [ 1542.512857][ C0] ? ktime_get+0x24b/0x280 [ 1542.512869][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1542.512879][ C0] ? do_softirq+0x1a0/0x1a0 [ 1542.512890][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1542.512904][ C0] __irq_exit_rcu+0xd3/0x190 [ 1542.512914][ C0] ? irq_exit_rcu+0x20/0x20 [ 1542.512925][ C0] irq_exit_rcu+0x9/0x20 [ 1542.512935][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1542.512945][ C0] [ 1542.512948][ C0] [ 1542.512951][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1542.512965][ C0] RIP: 0010:console_flush_all+0x883/0xcf0 [ 1542.512978][ C0] Code: ed 01 00 00 e8 be 85 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 af 85 1b 00 eb 06 e8 a8 85 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 58 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 1542.512987][ C0] RSP: 0018:ffffc900038e6e60 EFLAGS: 00000283 [ 1542.512995][ C0] RAX: ffffffff816c05a8 RBX: ffffc900038e6fdf RCX: 0000000000100000 [ 1542.513003][ C0] RDX: ffffc90017218000 RSI: 000000000002d966 RDI: 000000000002d967 [ 1542.513010][ C0] RBP: ffffc900038e6fb0 R08: ffffffff911eb577 R09: 1ffffffff223d6ae [ 1542.513017][ C0] R10: dffffc0000000000 R11: fffffbfff223d6af R12: ffffffff8d8ce340 [ 1542.513024][ C0] R13: 1ffffffff19f9740 R14: ffffffff8d8ce398 R15: dffffc0000000000 [ 1542.513033][ C0] ? console_flush_all+0x878/0xcf0 [ 1542.513048][ C0] ? console_flush_all+0x10b/0xcf0 [ 1542.513062][ C0] ? is_console_locked+0x20/0x20 [ 1542.513074][ C0] ? lock_chain_count+0x20/0x20 [ 1542.513085][ C0] ? __down_trylock_console_sem+0xf6/0x1f0 [ 1542.513099][ C0] console_unlock+0xad/0x350 [ 1542.513111][ C0] ? other_cpu_in_panic+0xf0/0xf0 [ 1542.513131][ C0] vprintk_emit+0x497/0x610 [ 1542.513143][ C0] ? printk_sprint+0x460/0x460 [ 1542.513155][ C0] ? vscnprintf+0x80/0x80 [ 1542.513168][ C0] dev_vprintk_emit+0x339/0x3f0 [ 1542.513182][ C0] ? _dev_info+0x170/0x170 [ 1542.513198][ C0] dev_printk_emit+0xef/0x140 [ 1542.513212][ C0] ? dev_vprintk_emit+0x3f0/0x3f0 [ 1542.513227][ C0] ? __dev_printk+0x131/0x190 [ 1542.513240][ C0] _dev_notice+0x11f/0x170 [ 1542.513254][ C0] ? _dev_warn+0x170/0x170 [ 1542.513267][ C0] ? usb_get_configuration+0x1a1c/0x5300 [ 1542.513277][ C0] ? rcu_is_watching+0x15/0xb0 [ 1542.513290][ C0] ? usb_get_configuration+0x1c96/0x5300 [ 1542.513301][ C0] usb_get_configuration+0x4a80/0x5300 [ 1542.513322][ C0] ? usb_destroy_configuration+0x680/0x680 [ 1542.513332][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1542.513344][ C0] ? lock_chain_count+0x20/0x20 [ 1542.513354][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1542.513367][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1542.513378][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1542.513388][ C0] usb_new_device+0x136/0x1550 [ 1542.513399][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1542.513410][ C0] ? mutex_unlock+0x10/0x10 [ 1542.513419][ C0] ? lock_chain_count+0x20/0x20 [ 1542.513429][ C0] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1542.513440][ C0] ? usb_disconnect+0x8a0/0x8a0 [ 1542.513451][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1542.513462][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1542.513472][ C0] hub_event+0x29d5/0x4a80 [ 1542.513493][ C0] ? hub_post_resume+0x120/0x120 [ 1542.513504][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1542.513517][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1542.513528][ C0] ? process_scheduled_works+0x975/0x1600 [ 1542.513540][ C0] ? process_scheduled_works+0x975/0x1600 [ 1542.513552][ C0] process_scheduled_works+0xa60/0x1600 [ 1542.513571][ C0] ? worker_attach_to_pool+0x370/0x370 [ 1542.513584][ C0] ? assign_work+0x3cc/0x5d0 [ 1542.513597][ C0] worker_thread+0xa5e/0xfe0 [ 1542.513612][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1542.513623][ C0] ? __kthread_parkme+0x71/0x1c0 [ 1542.513634][ C0] kthread+0x2fa/0x390 [ 1542.513644][ C0] ? pr_cont_work+0x550/0x550 [ 1542.513656][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1542.513665][ C0] ret_from_fork+0x48/0x80 [ 1542.513677][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1542.513687][ C0] ret_from_fork_asm+0x11/0x20 [ 1542.513702][ C0] [ 1543.985856][ C0] ------------[ cut here ]------------ [ 1543.991304][ C0] WARNING: CPU: 0 PID: 14823 at lib/debugobjects.c:558 __debug_object_init+0x18d/0x450 [ 1544.000936][ C0] Modules linked in: [ 1544.004823][ C0] CPU: 0 PID: 14823 Comm: kworker/0:1 Tainted: G W syzkaller #0 [ 1544.013832][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1544.023880][ C0] Workqueue: usb_hub_wq hub_event [ 1544.028902][ C0] RIP: 0010:__debug_object_init+0x18d/0x450 [ 1544.034788][ C0] Code: 24 08 74 2f 41 ff c6 44 89 35 2f 5b 25 13 48 c7 c1 40 44 1d 8b 48 c7 c7 a0 44 1d 8b 84 c0 48 0f 45 f9 48 89 de e8 33 98 4a 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f [ 1544.054388][ C0] RSP: 0018:ffffc90000007928 EFLAGS: 00010046 [ 1544.060456][ C0] RAX: 0000000000000050 RBX: ffffc900000079c0 RCX: bdf0e613eacf1500 [ 1544.068432][ C0] RDX: 0000000000000100 RSI: 0000000000000102 RDI: 0000000000000000 [ 1544.076410][ C0] RBP: dffffc0000000000 R08: ffffc90000007527 R09: 1ffff92000000ea4 [ 1544.084376][ C0] R10: dffffc0000000000 R11: fffff52000000ea5 R12: ffff888026c25a20 [ 1544.092352][ C0] R13: ffff888024c19f50 R14: 0000000000000001 R15: ffffffff8acbe000 [ 1544.100318][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1544.109239][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1544.115827][ C0] CR2: 00005555903344a0 CR3: 000000007c8b2000 CR4: 00000000003506f0 [ 1544.123806][ C0] Call Trace: [ 1544.127078][ C0] [ 1544.129917][ C0] __synchronize_srcu+0x2ae/0x3d0 [ 1544.134952][ C0] ? synchronize_srcu_expedited+0x20/0x20 [ 1544.140675][ C0] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 1544.146602][ C0] ? read_tsc+0x9/0x20 [ 1544.150664][ C0] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 1544.156202][ C0] ? synchronize_srcu+0x25a/0x280 [ 1544.161218][ C0] wakeup_source_unregister+0x116/0x190 [ 1544.166770][ C0] mmc_host_classdev_release+0x47/0x100 [ 1544.172326][ C0] ? mmc_free_host+0x30/0x30 [ 1544.176923][ C0] device_release+0xbc/0x1e0 [ 1544.181509][ C0] kobject_put+0x21b/0x450 [ 1544.185917][ C0] call_timer_fn+0x189/0x540 [ 1544.190497][ C0] ? kref_get+0x70/0x70 [ 1544.194642][ C0] ? call_timer_fn+0xd2/0x540 [ 1544.199311][ C0] ? __run_timers+0x810/0x810 [ 1544.203980][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1544.209182][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1544.214372][ C0] ? kref_get+0x70/0x70 [ 1544.218519][ C0] __run_timers+0x570/0x810 [ 1544.223034][ C0] ? detach_timer+0x2b0/0x2b0 [ 1544.227723][ C0] ? lock_chain_count+0x20/0x20 [ 1544.232578][ C0] run_timer_softirq+0x67/0xf0 [ 1544.237349][ C0] handle_softirqs+0x27d/0x820 [ 1544.242102][ C0] ? read_tsc+0x9/0x20 [ 1544.246162][ C0] ? ktime_get+0x24b/0x280 [ 1544.250570][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1544.255328][ C0] ? do_softirq+0x1a0/0x1a0 [ 1544.259821][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1544.265026][ C0] __irq_exit_rcu+0xd3/0x190 [ 1544.269622][ C0] ? irq_exit_rcu+0x20/0x20 [ 1544.274117][ C0] irq_exit_rcu+0x9/0x20 [ 1544.278351][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1544.283972][ C0] [ 1544.286907][ C0] [ 1544.289831][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1544.295818][ C0] RIP: 0010:console_flush_all+0x883/0xcf0 [ 1544.301531][ C0] Code: ed 01 00 00 e8 be 85 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 af 85 1b 00 eb 06 e8 a8 85 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 58 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 1544.321126][ C0] RSP: 0018:ffffc900038e6e60 EFLAGS: 00000283 [ 1544.327183][ C0] RAX: ffffffff816c05a8 RBX: ffffc900038e6fdf RCX: 0000000000100000 [ 1544.335146][ C0] RDX: ffffc90017218000 RSI: 000000000002d966 RDI: 000000000002d967 [ 1544.343112][ C0] RBP: ffffc900038e6fb0 R08: ffffffff911eb577 R09: 1ffffffff223d6ae [ 1544.351076][ C0] R10: dffffc0000000000 R11: fffffbfff223d6af R12: ffffffff8d8ce340 [ 1544.359038][ C0] R13: 1ffffffff19f9740 R14: ffffffff8d8ce398 R15: dffffc0000000000 [ 1544.367008][ C0] ? console_flush_all+0x878/0xcf0 [ 1544.372115][ C0] ? console_flush_all+0x10b/0xcf0 [ 1544.377220][ C0] ? is_console_locked+0x20/0x20 [ 1544.382149][ C0] ? lock_chain_count+0x20/0x20 [ 1544.387010][ C0] ? __down_trylock_console_sem+0xf6/0x1f0 [ 1544.392810][ C0] console_unlock+0xad/0x350 [ 1544.397406][ C0] ? other_cpu_in_panic+0xf0/0xf0 [ 1544.402426][ C0] vprintk_emit+0x497/0x610 [ 1544.406923][ C0] ? printk_sprint+0x460/0x460 [ 1544.411678][ C0] ? vscnprintf+0x80/0x80 [ 1544.416000][ C0] dev_vprintk_emit+0x339/0x3f0 [ 1544.420861][ C0] ? _dev_info+0x170/0x170 [ 1544.425274][ C0] dev_printk_emit+0xef/0x140 [ 1544.429960][ C0] ? dev_vprintk_emit+0x3f0/0x3f0 [ 1544.434977][ C0] ? __dev_printk+0x131/0x190 [ 1544.439659][ C0] _dev_notice+0x11f/0x170 [ 1544.444074][ C0] ? _dev_warn+0x170/0x170 [ 1544.448485][ C0] ? usb_get_configuration+0x1a1c/0x5300 [ 1544.454108][ C0] ? rcu_is_watching+0x15/0xb0 [ 1544.458881][ C0] ? usb_get_configuration+0x1c96/0x5300 [ 1544.464507][ C0] usb_get_configuration+0x4a80/0x5300 [ 1544.469981][ C0] ? usb_destroy_configuration+0x680/0x680 [ 1544.475777][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1544.481764][ C0] ? lock_chain_count+0x20/0x20 [ 1544.486603][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1544.492489][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1544.497693][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1544.502881][ C0] usb_new_device+0x136/0x1550 [ 1544.507635][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1544.513613][ C0] ? mutex_unlock+0x10/0x10 [ 1544.518107][ C0] ? lock_chain_count+0x20/0x20 [ 1544.522959][ C0] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1544.527985][ C0] ? usb_disconnect+0x8a0/0x8a0 [ 1544.532830][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1544.538021][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1544.543222][ C0] hub_event+0x29d5/0x4a80 [ 1544.547640][ C0] ? hub_post_resume+0x120/0x120 [ 1544.552571][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1544.557952][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1544.563141][ C0] ? process_scheduled_works+0x975/0x1600 [ 1544.568853][ C0] ? process_scheduled_works+0x975/0x1600 [ 1544.574569][ C0] process_scheduled_works+0xa60/0x1600 [ 1544.580112][ C0] ? worker_attach_to_pool+0x370/0x370 [ 1544.585565][ C0] ? assign_work+0x3cc/0x5d0 [ 1544.590149][ C0] worker_thread+0xa5e/0xfe0 [ 1544.594736][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1544.599591][ C0] ? __kthread_parkme+0x71/0x1c0 [ 1544.604535][ C0] kthread+0x2fa/0x390 [ 1544.608593][ C0] ? pr_cont_work+0x550/0x550 [ 1544.613260][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1544.617843][ C0] ret_from_fork+0x48/0x80 [ 1544.622251][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1544.626842][ C0] ret_from_fork_asm+0x11/0x20 [ 1544.631601][ C0] [ 1544.634611][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1544.641876][ C0] CPU: 0 PID: 14823 Comm: kworker/0:1 Tainted: G W syzkaller #0 [ 1544.650885][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1544.660930][ C0] Workqueue: usb_hub_wq hub_event [ 1544.665949][ C0] Call Trace: [ 1544.669218][ C0] [ 1544.672062][ C0] dump_stack_lvl+0x18c/0x250 [ 1544.676734][ C0] ? show_regs_print_info+0x20/0x20 [ 1544.681923][ C0] ? load_image+0x420/0x420 [ 1544.686420][ C0] panic+0x2ca/0x720 [ 1544.690310][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 1544.694805][ C0] ? ret_from_fork_asm+0x11/0x20 [ 1544.699734][ C0] __warn+0x2e0/0x470 [ 1544.703703][ C0] ? __debug_object_init+0x18d/0x450 [ 1544.708982][ C0] ? __debug_object_init+0x18d/0x450 [ 1544.714260][ C0] report_bug+0x2be/0x4f0 [ 1544.718587][ C0] ? __debug_object_init+0x18d/0x450 [ 1544.723864][ C0] ? __debug_object_init+0x18d/0x450 [ 1544.729143][ C0] ? __debug_object_init+0x18f/0x450 [ 1544.734421][ C0] handle_bug+0xcf/0x120 [ 1544.739280][ C0] exc_invalid_op+0x1a/0x50 [ 1544.743774][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1544.748620][ C0] RIP: 0010:__debug_object_init+0x18d/0x450 [ 1544.754506][ C0] Code: 24 08 74 2f 41 ff c6 44 89 35 2f 5b 25 13 48 c7 c1 40 44 1d 8b 48 c7 c7 a0 44 1d 8b 84 c0 48 0f 45 f9 48 89 de e8 33 98 4a 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f [ 1544.774103][ C0] RSP: 0018:ffffc90000007928 EFLAGS: 00010046 [ 1544.780161][ C0] RAX: 0000000000000050 RBX: ffffc900000079c0 RCX: bdf0e613eacf1500 [ 1544.788122][ C0] RDX: 0000000000000100 RSI: 0000000000000102 RDI: 0000000000000000 [ 1544.796082][ C0] RBP: dffffc0000000000 R08: ffffc90000007527 R09: 1ffff92000000ea4 [ 1544.804042][ C0] R10: dffffc0000000000 R11: fffff52000000ea5 R12: ffff888026c25a20 [ 1544.812008][ C0] R13: ffff888024c19f50 R14: 0000000000000001 R15: ffffffff8acbe000 [ 1544.819987][ C0] ? __debug_object_init+0x18d/0x450 [ 1544.825267][ C0] __synchronize_srcu+0x2ae/0x3d0 [ 1544.830285][ C0] ? synchronize_srcu_expedited+0x20/0x20 [ 1544.836013][ C0] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 1544.841901][ C0] ? read_tsc+0x9/0x20 [ 1544.845959][ C0] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 1544.851495][ C0] ? synchronize_srcu+0x25a/0x280 [ 1544.856512][ C0] wakeup_source_unregister+0x116/0x190 [ 1544.862073][ C0] mmc_host_classdev_release+0x47/0x100 [ 1544.867629][ C0] ? mmc_free_host+0x30/0x30 [ 1544.872210][ C0] device_release+0xbc/0x1e0 [ 1544.876807][ C0] kobject_put+0x21b/0x450 [ 1544.881213][ C0] call_timer_fn+0x189/0x540 [ 1544.885792][ C0] ? kref_get+0x70/0x70 [ 1544.889936][ C0] ? call_timer_fn+0xd2/0x540 [ 1544.894599][ C0] ? __run_timers+0x810/0x810 [ 1544.899266][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1544.904466][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1544.909665][ C0] ? kref_get+0x70/0x70 [ 1544.913822][ C0] __run_timers+0x570/0x810 [ 1544.918321][ C0] ? detach_timer+0x2b0/0x2b0 [ 1544.922986][ C0] ? lock_chain_count+0x20/0x20 [ 1544.927827][ C0] run_timer_softirq+0x67/0xf0 [ 1544.932581][ C0] handle_softirqs+0x27d/0x820 [ 1544.937335][ C0] ? read_tsc+0x9/0x20 [ 1544.941397][ C0] ? ktime_get+0x24b/0x280 [ 1544.945804][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1544.950572][ C0] ? do_softirq+0x1a0/0x1a0 [ 1544.955068][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1544.960274][ C0] __irq_exit_rcu+0xd3/0x190 [ 1544.964854][ C0] ? irq_exit_rcu+0x20/0x20 [ 1544.969350][ C0] irq_exit_rcu+0x9/0x20 [ 1544.973595][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1544.979215][ C0] [ 1544.982138][ C0] [ 1544.985066][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1544.991035][ C0] RIP: 0010:console_flush_all+0x883/0xcf0 [ 1544.996768][ C0] Code: ed 01 00 00 e8 be 85 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 af 85 1b 00 eb 06 e8 a8 85 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 58 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 1545.016364][ C0] RSP: 0018:ffffc900038e6e60 EFLAGS: 00000283 [ 1545.022419][ C0] RAX: ffffffff816c05a8 RBX: ffffc900038e6fdf RCX: 0000000000100000 [ 1545.030384][ C0] RDX: ffffc90017218000 RSI: 000000000002d966 RDI: 000000000002d967 [ 1545.038358][ C0] RBP: ffffc900038e6fb0 R08: ffffffff911eb577 R09: 1ffffffff223d6ae [ 1545.046318][ C0] R10: dffffc0000000000 R11: fffffbfff223d6af R12: ffffffff8d8ce340 [ 1545.054278][ C0] R13: 1ffffffff19f9740 R14: ffffffff8d8ce398 R15: dffffc0000000000 [ 1545.062241][ C0] ? console_flush_all+0x878/0xcf0 [ 1545.067348][ C0] ? console_flush_all+0x10b/0xcf0 [ 1545.072466][ C0] ? is_console_locked+0x20/0x20 [ 1545.077393][ C0] ? lock_chain_count+0x20/0x20 [ 1545.082236][ C0] ? __down_trylock_console_sem+0xf6/0x1f0 [ 1545.088054][ C0] console_unlock+0xad/0x350 [ 1545.092635][ C0] ? other_cpu_in_panic+0xf0/0xf0 [ 1545.097668][ C0] vprintk_emit+0x497/0x610 [ 1545.102162][ C0] ? printk_sprint+0x460/0x460 [ 1545.106916][ C0] ? vscnprintf+0x80/0x80 [ 1545.111238][ C0] dev_vprintk_emit+0x339/0x3f0 [ 1545.116081][ C0] ? _dev_info+0x170/0x170 [ 1545.120493][ C0] dev_printk_emit+0xef/0x140 [ 1545.125162][ C0] ? dev_vprintk_emit+0x3f0/0x3f0 [ 1545.130180][ C0] ? __dev_printk+0x131/0x190 [ 1545.134864][ C0] _dev_notice+0x11f/0x170 [ 1545.139273][ C0] ? _dev_warn+0x170/0x170 [ 1545.143684][ C0] ? usb_get_configuration+0x1a1c/0x5300 [ 1545.149304][ C0] ? rcu_is_watching+0x15/0xb0 [ 1545.154064][ C0] ? usb_get_configuration+0x1c96/0x5300 [ 1545.159686][ C0] usb_get_configuration+0x4a80/0x5300 [ 1545.165144][ C0] ? usb_destroy_configuration+0x680/0x680 [ 1545.170940][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1545.176925][ C0] ? lock_chain_count+0x20/0x20 [ 1545.181769][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1545.187653][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1545.192840][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1545.198026][ C0] usb_new_device+0x136/0x1550 [ 1545.202799][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1545.208771][ C0] ? mutex_unlock+0x10/0x10 [ 1545.213265][ C0] ? lock_chain_count+0x20/0x20 [ 1545.218107][ C0] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1545.223122][ C0] ? usb_disconnect+0x8a0/0x8a0 [ 1545.227963][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1545.233151][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1545.238341][ C0] hub_event+0x29d5/0x4a80 [ 1545.242759][ C0] ? hub_post_resume+0x120/0x120 [ 1545.247689][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1545.253057][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1545.258245][ C0] ? process_scheduled_works+0x975/0x1600 [ 1545.263958][ C0] ? process_scheduled_works+0x975/0x1600 [ 1545.269667][ C0] process_scheduled_works+0xa60/0x1600 [ 1545.275212][ C0] ? worker_attach_to_pool+0x370/0x370 [ 1545.280664][ C0] ? assign_work+0x3cc/0x5d0 [ 1545.285245][ C0] worker_thread+0xa5e/0xfe0 [ 1545.289844][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1545.294698][ C0] ? __kthread_parkme+0x71/0x1c0 [ 1545.299641][ C0] kthread+0x2fa/0x390 [ 1545.303697][ C0] ? pr_cont_work+0x550/0x550 [ 1545.308364][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1545.312942][ C0] ret_from_fork+0x48/0x80 [ 1545.317349][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1545.321944][ C0] ret_from_fork_asm+0x11/0x20 [ 1545.326706][ C0] [ 1545.329968][ C0] Kernel Offset: disabled [ 1545.334284][ C0] Rebooting in 86400 seconds..