last executing test programs: 17m50.454249389s ago: executing program 1 (id=2): getgroups(0x4, &(0x7f0000000080)=[0x0, 0xee01, 0xee00, 0xee00]) r1 = timerfd_create(0x0, 0x80800) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_gettime(r1, 0x0) read(r1, &(0x7f00000003c0)=""/222, 0xde) mkdir(0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x800008ec0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3ff, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000700)={[{@acl}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@noinit_itable}, {@noload}, {@noinit_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@sysvgroups}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x26bcaeb15148fbba) ftruncate(r6, 0x2007ffc) sendfile(r6, r6, 0x0, 0x800000009) 17m34.189926486s ago: executing program 32 (id=2): getgroups(0x4, &(0x7f0000000080)=[0x0, 0xee01, 0xee00, 0xee00]) r1 = timerfd_create(0x0, 0x80800) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_gettime(r1, 0x0) read(r1, &(0x7f00000003c0)=""/222, 0xde) mkdir(0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x800008ec0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3ff, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000700)={[{@acl}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@noinit_itable}, {@noload}, {@noinit_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@sysvgroups}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x26bcaeb15148fbba) ftruncate(r6, 0x2007ffc) sendfile(r6, r6, 0x0, 0x800000009) 14m30.190410843s ago: executing program 4 (id=347): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x200000) 14m30.053450555s ago: executing program 4 (id=348): socket$kcm(0x10, 0x7, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pivot_root(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00') r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x28}}, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x47ffffa, 0x60500) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@broadcast}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x494, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb, 0xffffffffffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x400002, 0x4000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ebe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x356, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) 14m27.925377687s ago: executing program 4 (id=349): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x23) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffffff, &(0x7f0000001600)='./file0\x00', 0x8, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x0, 0x451, &(0x7f0000000f80)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095", @ANYRES64=r3], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000003040)=[{{&(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000002dc0)}, 0x6}, {{0x0, 0x0, 0x0}, 0x7fffffff}, {{&(0x7f0000001680)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000002b80)=[{&(0x7f0000002740)=""/180, 0xb4}, {&(0x7f0000002800)=""/86, 0x56}, {&(0x7f0000002880)=""/88, 0x58}, {&(0x7f0000002900)=""/226, 0xe2}, {&(0x7f0000003180)=""/148, 0x94}, {&(0x7f0000002ac0)=""/9, 0x9}, {&(0x7f0000002b00)=""/92, 0x5c}], 0x7, &(0x7f0000002c00)=""/109, 0x6d}, 0x7fff}, {{&(0x7f0000002c80)=@nfc_llcp, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002d80)=""/7, 0x7}, {&(0x7f0000002e00)=""/221, 0xdd}], 0x2, &(0x7f0000002f40)=""/214, 0xd6}, 0x1}], 0x4, 0x40000000, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x1, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x5}, 0x4}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 14m23.353517596s ago: executing program 4 (id=351): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/773], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) close_range(r1, 0xffffffffffffffff, 0x0) 14m21.798570086s ago: executing program 4 (id=355): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 14m20.629463109s ago: executing program 4 (id=356): syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000000)='./bus\x00', 0x90, &(0x7f0000000140)=ANY=[], 0x6, 0x2d7, &(0x7f0000000340)="$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") socket$inet6_udp(0xa, 0x2, 0x0) io_setup(0x2, 0x0) eventfd(0x2000100) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback}, 0x1c) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x91) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 14m5.517469272s ago: executing program 33 (id=356): syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000000)='./bus\x00', 0x90, &(0x7f0000000140)=ANY=[], 0x6, 0x2d7, &(0x7f0000000340)="$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") socket$inet6_udp(0xa, 0x2, 0x0) io_setup(0x2, 0x0) eventfd(0x2000100) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback}, 0x1c) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x91) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 8m26.801176387s ago: executing program 0 (id=1095): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r1, @ANYBLOB="bf4400000000000000000c0000008000058014000280080001000000000008000100090000002c0002800800020001000000080004005fbe0000080001001b00000008000200000000000800020009000000070001"], 0x2ac}}, 0x0) 8m26.320882597s ago: executing program 0 (id=1101): accept$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000480)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000004c0), 0x4) timer_create(0x4, 0x0, &(0x7f0000000680)=0x0) timer_delete(r0) connect$unix(0xffffffffffffffff, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f0000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x1, r3, 0x1, 0x9}, 0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r3, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x10880, &(0x7f00000002c0), 0x4, 0x252, &(0x7f0000000600)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r6, 0xfffffffffffffffe, 0x63) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x2000000, 0x20002, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10, 0x5}}, 0x50) syz_fuse_handle_req(r7, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={&(0x7f00000000c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x29, 0x5, 0x201800, 0xbe3, 0x201, 0xffff, 0x2, 0x0, 0x0, 0x80, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r10, 0x40345410, &(0x7f00000083c0)={{0x1}}) 8m24.923393974s ago: executing program 0 (id=1103): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="17"], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)=ANY=[], 0x20) 8m24.229894688s ago: executing program 0 (id=1104): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb500a, 0x0) 8m23.369973804s ago: executing program 0 (id=1107): r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x4f27, 0x0, 0x10000, 0x4, 0x5, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e58, 0x3, 0xe66, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0x1f, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x0) 8m23.03807824s ago: executing program 0 (id=1110): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b80000001900010027bd700000000000e00000020000000000000000000000000000000000000000000000000000000001fe0000000000000a"], 0xb8}}, 0x4004) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r6, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r6, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000000480)=""/161, 0x98, 0x0, 0x0, 0x2}}, 0x5a) write$vhost_msg_v2(r6, &(0x7f0000001f00)={0x2, 0x0, {&(0x7f0000000000)=""/119, 0x77, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r6, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r6, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/119, 0xfca2, 0x0, 0x0, 0x3}}, 0x48) write$vhost_msg_v2(r6, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000000340)=""/115, 0x73, &(0x7f0000000240)=""/31, 0x1, 0x1}}, 0x48) ioctl$SIOCGSTAMPNS(r5, 0x8907, &(0x7f00000006c0)) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r7 = socket$inet(0x2, 0x3, 0x9) getsockname$tipc(r1, &(0x7f0000000040)=@id, &(0x7f0000000100)=0x10) shutdown(r7, 0x0) recvmmsg(r7, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000840)=ANY=[@ANYBLOB]) close_range(r0, 0xffffffffffffffff, 0x0) 8m22.371286524s ago: executing program 34 (id=1110): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b80000001900010027bd700000000000e00000020000000000000000000000000000000000000000000000000000000001fe0000000000000a"], 0xb8}}, 0x4004) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r6, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r6, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000000480)=""/161, 0x98, 0x0, 0x0, 0x2}}, 0x5a) write$vhost_msg_v2(r6, &(0x7f0000001f00)={0x2, 0x0, {&(0x7f0000000000)=""/119, 0x77, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r6, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r6, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/119, 0xfca2, 0x0, 0x0, 0x3}}, 0x48) write$vhost_msg_v2(r6, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000000340)=""/115, 0x73, &(0x7f0000000240)=""/31, 0x1, 0x1}}, 0x48) ioctl$SIOCGSTAMPNS(r5, 0x8907, &(0x7f00000006c0)) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r7 = socket$inet(0x2, 0x3, 0x9) getsockname$tipc(r1, &(0x7f0000000040)=@id, &(0x7f0000000100)=0x10) shutdown(r7, 0x0) recvmmsg(r7, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000840)=ANY=[@ANYBLOB]) close_range(r0, 0xffffffffffffffff, 0x0) 12.96018971s ago: executing program 2 (id=2284): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$ttys(0xc, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000080)=@echo=0xffffffcd) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mlockall(0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x40) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2717, 0x0, &(0x7f0000000000)) 10.653483484s ago: executing program 2 (id=2286): prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffe000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x83, 0x0, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, {0xa, 0x0, 0x1, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}}, 0x5c) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setresuid(0xee01, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) syz_clone(0x20229500, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68010}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x222705, 0x0) 9.35754934s ago: executing program 2 (id=2289): openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 8.465441727s ago: executing program 5 (id=2290): mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f00000005c0)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}h\xc6\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\a\x00\x00\x00\xb6\x9b\xdb\xdc\xf3\xb9\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000480)=[{{&(0x7f0000000180)=@file={0x1, './file1\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}}], 0x1, 0x0) 7.404279877s ago: executing program 5 (id=2294): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, '\x00\x00t\x00', "f02b089d05e47611102742c4a4d5ae22", "cccc00", "0000000000001000"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 6.461434126s ago: executing program 6 (id=2298): socket$nl_xfrm(0x10, 0x3, 0x6) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x8d2, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r3, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)='d', 0x1}], 0x1}}], 0x1, 0x2004c0d0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x1, 0x0, 0x4000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400050124bd70007bdbdf250a84312a09"], 0x48}, 0x1, 0x0, 0x0, 0x4004081}, 0x2005c840) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, 0x0) 5.456720895s ago: executing program 5 (id=2299): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r6 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(r6, 0x0, 0x119) write$UHID_GET_REPORT_REPLY(r6, &(0x7f0000000000)={0xa, {0x2, 0xd}}, 0xa) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = epoll_create1(0x0) dup3(0xffffffffffffffff, r9, 0x0) r10 = openat(r8, &(0x7f0000000040)='.\x00', 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x2128, r10}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xfffffff8, r5}, 0x58) 5.409575476s ago: executing program 3 (id=2300): setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000), 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000040)=0xd) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) sendmsg$inet_sctp(r1, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xf, 0x2) r4 = socket$inet(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000200)=0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = io_uring_setup(0x2c93, &(0x7f0000000100)={0x0, 0xf0ce, 0x1, 0xfffffffc, 0x14}) io_uring_enter(r5, 0x0, 0xcb, 0xf, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="b4000000", @ANYBLOB="05043fbd7000fddbdf", @ANYRES32=r6, @ANYBLOB="9800028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e0004"], 0xb4}, 0x1, 0x0, 0x0, 0x20000401}, 0x44084) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) 5.313526957s ago: executing program 2 (id=2301): socket(0x1e, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) socket$packet(0x11, 0x3, 0x300) socket$rds(0x15, 0x5, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 5.280065438s ago: executing program 6 (id=2302): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x3, 0x7ffc1ffb}]}) setpriority(0x0, 0x0, 0xfff) 4.13009966s ago: executing program 5 (id=2303): accept$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000480)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000004c0), 0x4) timer_create(0x4, 0x0, &(0x7f0000000680)=0x0) timer_delete(r0) connect$unix(0xffffffffffffffff, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x1, r3, 0x1, 0x9}, 0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r3, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x10880, &(0x7f00000002c0), 0x4, 0x252, &(0x7f0000000600)="$eJzs3TFoJFUcBvBvZnfvzN0iURtBUEFENBDOTrA5K+FAjkNEUCGiYqMkQkywS6xsLLRWSSVCEDtjK2mCjSJYRU0RG0GDhcFCi5XdSSSaTZTsZked3w82mUnem/8bZr43STEzARprOsnVJK0kM0k6SYqjDe6uPtMHq2tTW3NJr/f4T8WgXbVeOex3OclqkoeSbJZFXmonyxtP7/6y/eh9by517n1/46mpie7kgb3dncf237v+xsfXHlz+4qsfrhe5mu6f9mv8iiE/axfJredR7F+iaNc9Av6JG6999HU/97cluWeQ/07KVAfvrcULm5088O5Jfd/+8cs7JjlWYPx6vU7/GrjaAxqnTNJNUc4mqZbLcna2+hv+m9al8uWFxVdnXlxYmn+h7pkKGJfq/96Ln1z+S/6/b1X5B/6/usnOEzfWv+0v77fqHg0wSf38zzy7cn/kHxpH/qG55B+aS/6huU7O//Rp3Z6/67wHBpw7139oLvmH5pJ/aC75h+aSf2iuo/kHAJqld/GMNw4Xg4cHAP9hdc8/AAAAAAAAAAAAAAAAAADAcWtTW3OHn0nV/OydZO+RJO1h9VuD9xEnNw2+Xvq56Df7Q1F1G8kzNb/M4MOa776++btxbOWDM/f8/M5x1D9iyHPsLpzSfGU+WX09yZV2+/j5Vxycf2d3y9/8vvPciAVG9PCT9db/bb3e+te2k0/788+VYfNPmdsH34fPP93+8Rux/iu/jrgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJub3AAAA//8jdGiU") r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r6, 0xfffffffffffffffe, 0x63) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000006380)={0x2020}, 0x2020) write$FUSE_INIT(r7, 0x0, 0x0) syz_fuse_handle_req(r7, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={&(0x7f00000000c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x29, 0x5, 0x201800, 0xbe3, 0x201, 0xffff, 0x2, 0x0, 0x0, 0x80, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f00000083c0)={{0x1}}) 3.349611475s ago: executing program 3 (id=2304): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f00000001c0)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@errors_continue}, {@orlov}, {@user_xattr}, {@quota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mkdir(&(0x7f0000000180)='./file0\x00', 0x118) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 3.277797687s ago: executing program 2 (id=2305): syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/185) 3.177492519s ago: executing program 6 (id=2306): io_uring_setup(0x7df1, 0x0) socket$packet(0x11, 0x2, 0x300) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x20800, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.09010816s ago: executing program 6 (id=2307): syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r0 = io_uring_setup(0x60f7, &(0x7f0000000a40)={0x0, 0x0, 0x80, 0x2, 0x3bd}) r1 = socket$rxrpc(0x21, 0x2, 0xa) close_range(r0, r1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff4}, 0x94) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = epoll_create(0x7) r4 = epoll_create1(0x0) r5 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) r7 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r7, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r8, 0x0, 0x0) r9 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r9, 0xa0044d07, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) lsetxattr$security_capability(&(0x7f0000000280)='./cgroup/cgroup.procs\x00', 0x0, &(0x7f0000000040)=@v2={0x2000000, [{0x6, 0x4}, {0x4, 0x1bf}]}, 0x14, 0x1) 3.044257491s ago: executing program 3 (id=2308): socket$nl_audit(0x10, 0x3, 0x9) syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, 0x0, 0x0) 2.883833384s ago: executing program 5 (id=2309): write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0xffffffff, 0x1582603b6fab213b) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x5}) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='bfs\x00', 0x4, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='pvfs2\x00', 0x11, 0x0) umount2(0x0, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2.113510159s ago: executing program 6 (id=2310): socket$nl_xfrm(0x10, 0x3, 0x6) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x8d2, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r3, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)='d', 0x1}], 0x1}}], 0x1, 0x2004c0d0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x1, 0x0, 0x4000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400050124bd70007bdbdf250a84312a09"], 0x48}, 0x1, 0x0, 0x0, 0x4004081}, 0x2005c840) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, 0x0) 2.09170562s ago: executing program 3 (id=2311): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r6 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(r6, 0x0, 0x119) write$UHID_GET_REPORT_REPLY(r6, &(0x7f0000000000)={0xa, {0x2, 0xd}}, 0xa) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = epoll_create1(0x0) dup3(0xffffffffffffffff, r9, 0x0) r10 = openat(r8, &(0x7f0000000040)='.\x00', 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x2128, r10}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xfffffff8, r5}, 0x58) 1.170081767s ago: executing program 6 (id=2312): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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") syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) truncate(&(0x7f0000000900)='./file1\x00', 0xbf39) 157.476597ms ago: executing program 3 (id=2313): socket(0x1e, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) socket$packet(0x11, 0x3, 0x300) socket$rds(0x15, 0x5, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 0s ago: executing program 3 (id=2314): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000001100)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, 0x0, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): 9784] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 545.786443][ T9801] bridge0: port 3(vlan2) entered blocking state [ 545.792893][ T9801] bridge0: port 3(vlan2) entered disabled state [ 545.799458][ T9801] vlan2: entered allmulticast mode [ 545.805133][ T9801] bridge0: entered allmulticast mode [ 546.045645][ T9801] vlan2: left allmulticast mode [ 546.050791][ T9801] bridge0: left allmulticast mode [ 546.363721][ T7802] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.688573][ T9826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.807'. [ 548.734225][ T9826] loop2: detected capacity change from 0 to 128 [ 549.344087][ T9826] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 549.371310][ T9826] ext4 filesystem being mounted at /195/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 549.393894][ T9826] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.807: No space for directory leaf checksum. Please run e2fsck -D. [ 549.413381][ T9826] EXT4-fs error (device loop2): htree_dirblock_to_tree:1083: inode #2: comm syz.2.807: Directory block failed checksum [ 549.427780][ T9826] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.807: No space for directory leaf checksum. Please run e2fsck -D. [ 549.456938][ T9826] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.807: checksumming directory block 0 [ 549.477344][ T9826] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.807: No space for directory leaf checksum. Please run e2fsck -D. [ 549.493089][ T9826] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.807: checksumming directory block 0 [ 549.568209][ T5785] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 550.233960][ T9846] bridge0: port 3(vlan2) entered blocking state [ 550.240496][ T9846] bridge0: port 3(vlan2) entered disabled state [ 550.247094][ T9846] vlan2: entered allmulticast mode [ 550.252246][ T9846] bridge0: entered allmulticast mode [ 550.298247][ T9846] vlan2: left allmulticast mode [ 550.303181][ T9846] bridge0: left allmulticast mode [ 550.800740][ T9852] tipc: Enabling of bearer rejected, failed to enable media [ 551.545222][ T9867] wireguard0: entered promiscuous mode [ 551.551104][ T9867] wireguard0: entered allmulticast mode [ 551.741728][ T9877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.819'. [ 551.818904][ T9877] loop3: detected capacity change from 0 to 128 [ 551.892589][ T9885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.821'. [ 551.904284][ T9877] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 551.931453][ T9877] ext4 filesystem being mounted at /206/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 551.982093][ T9875] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.819: No space for directory leaf checksum. Please run e2fsck -D. [ 552.056709][ T9875] EXT4-fs error (device loop3): htree_dirblock_to_tree:1083: inode #2: comm syz.3.819: Directory block failed checksum [ 552.085845][ T9877] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.819: No space for directory leaf checksum. Please run e2fsck -D. [ 552.381980][ T9877] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.819: checksumming directory block 0 [ 552.589630][ T9875] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.819: No space for directory leaf checksum. Please run e2fsck -D. [ 552.669452][ T9875] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.819: checksumming directory block 0 [ 552.763190][ T9893] loop2: detected capacity change from 0 to 512 [ 552.783667][ T9893] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.824: iget: bad extended attribute block 1 [ 552.838860][ T5786] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 552.852994][ T9893] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.824: couldn't read orphan inode 15 (err -117) [ 552.943165][ T9893] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 553.198325][ T9898] tipc: Enabling of bearer rejected, failed to enable media [ 553.425024][ T9900] bridge0: port 3(vlan2) entered blocking state [ 553.431605][ T9900] bridge0: port 3(vlan2) entered disabled state [ 553.438165][ T9900] vlan2: entered allmulticast mode [ 553.443319][ T9900] bridge0: entered allmulticast mode [ 553.567464][ T9900] vlan2: left allmulticast mode [ 553.572452][ T9900] bridge0: left allmulticast mode [ 553.742975][ T5792] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 553.765494][ T5792] CPU: 1 PID: 5792 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 553.773132][ T5792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 553.783263][ T5792] Workqueue: hci2 hci_rx_work [ 553.787987][ T5792] Call Trace: [ 553.791274][ T5792] [ 553.794218][ T5792] dump_stack_lvl+0x16c/0x230 [ 553.798931][ T5792] ? show_regs_print_info+0x20/0x20 [ 553.804159][ T5792] ? load_image+0x3b0/0x3b0 [ 553.808704][ T5792] sysfs_create_dir_ns+0x256/0x280 [ 553.813837][ T5792] ? hci_rx_work+0x43a/0xd80 [ 553.818446][ T5792] ? sysfs_warn_dup+0xa0/0xa0 [ 553.823148][ T5792] ? do_raw_spin_unlock+0x121/0x230 [ 553.828380][ T5792] kobject_add_internal+0x6b8/0xc70 [ 553.833622][ T5792] kobject_add+0x156/0x220 [ 553.838187][ T5792] ? __rwlock_init+0x150/0x150 [ 553.842984][ T5792] ? kobject_init+0x1e0/0x1e0 [ 553.847695][ T5792] ? _raw_spin_unlock+0x28/0x40 [ 553.852560][ T5792] ? get_device_parent+0x366/0x390 [ 553.857708][ T5792] device_add+0x408/0xc20 [ 553.862064][ T5792] hci_conn_add_sysfs+0xd5/0x1e0 [ 553.867024][ T5792] le_conn_complete_evt+0xc37/0x1220 [ 553.872332][ T5792] ? hci_event_packet+0x4a7/0x1210 [ 553.877483][ T5792] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 553.883745][ T5792] ? __copy_skb_header+0xa7/0x550 [ 553.888795][ T5792] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 553.894452][ T5792] ? skb_pull_data+0xfb/0x200 [ 553.899242][ T5792] hci_le_enh_conn_complete_evt+0x189/0x460 [ 553.905154][ T5792] ? hci_le_remote_conn_param_req_evt+0xcc0/0xcc0 [ 553.911608][ T5792] ? hci_remote_host_features_evt+0x160/0x160 [ 553.917692][ T5792] hci_event_packet+0x795/0x1210 [ 553.922677][ T5792] ? bis_list+0x290/0x290 [ 553.927038][ T5792] ? lockdep_hardirqs_on+0x98/0x150 [ 553.932271][ T5792] ? hci_send_to_monitor+0xd7/0x4f0 [ 553.937494][ T5792] hci_rx_work+0x43a/0xd80 [ 553.941933][ T5792] ? process_scheduled_works+0x957/0x15b0 [ 553.947669][ T5792] process_scheduled_works+0xa45/0x15b0 [ 553.953250][ T5792] ? assign_work+0x400/0x400 [ 553.957856][ T5792] ? assign_work+0x39e/0x400 [ 553.962462][ T5792] worker_thread+0xa55/0xfc0 [ 553.967088][ T5792] kthread+0x2fa/0x390 [ 553.971165][ T5792] ? pr_cont_work+0x560/0x560 [ 553.975854][ T5792] ? kthread_blkcg+0xd0/0xd0 [ 553.980472][ T5792] ret_from_fork+0x48/0x80 [ 553.984901][ T5792] ? kthread_blkcg+0xd0/0xd0 [ 553.989518][ T5792] ret_from_fork_asm+0x11/0x20 [ 553.994339][ T5792] [ 554.007419][ T5792] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 554.023553][ T5792] Bluetooth: hci2: failed to register connection device [ 554.041336][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.261096][ T9918] loop3: detected capacity change from 0 to 16 [ 556.600665][ T9918] erofs: (device loop3): erofs_read_superblock: cannot find valid erofs superblock [ 556.688131][ T9917] loop3: detected capacity change from 0 to 256 [ 556.749276][ T9917] FAT-fs (loop3): Directory bread(block 64) failed [ 556.755892][ T9917] FAT-fs (loop3): Directory bread(block 65) failed [ 556.763578][ T9917] FAT-fs (loop3): Directory bread(block 66) failed [ 556.770258][ T9917] FAT-fs (loop3): Directory bread(block 67) failed [ 556.776998][ T9917] FAT-fs (loop3): Directory bread(block 68) failed [ 556.783580][ T9917] FAT-fs (loop3): Directory bread(block 69) failed [ 556.790598][ T9917] FAT-fs (loop3): Directory bread(block 70) failed [ 556.797297][ T9917] FAT-fs (loop3): Directory bread(block 71) failed [ 556.803962][ T9917] FAT-fs (loop3): Directory bread(block 72) failed [ 556.810603][ T9917] FAT-fs (loop3): Directory bread(block 73) failed [ 557.246402][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.833'. [ 557.290943][ T9927] loop2: detected capacity change from 0 to 128 [ 557.363804][ T9927] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 557.400576][ T9927] ext4 filesystem being mounted at /202/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 557.446684][ T9927] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.833: No space for directory leaf checksum. Please run e2fsck -D. [ 557.514334][ T9927] EXT4-fs error (device loop2): htree_dirblock_to_tree:1083: inode #2: comm syz.2.833: Directory block failed checksum [ 557.562270][ T9934] tipc: Enabling of bearer rejected, failed to enable media [ 558.086274][ T9936] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.833: No space for directory leaf checksum. Please run e2fsck -D. [ 558.233510][ T9936] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.833: checksumming directory block 0 [ 558.269839][ T9925] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.833: No space for directory leaf checksum. Please run e2fsck -D. [ 558.342812][ T9925] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.833: checksumming directory block 0 [ 558.603479][ T5785] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 559.590080][ T9945] loop2: detected capacity change from 0 to 512 [ 559.672388][ T9945] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.836: iget: bad extended attribute block 1 [ 559.743788][ T9945] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.836: couldn't read orphan inode 15 (err -117) [ 559.817384][ T9945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 559.935515][ T9953] IPv6: NLM_F_CREATE should be specified when creating new route [ 560.440048][ T9945] bridge0: port 3(vlan2) entered blocking state [ 560.446561][ T9945] bridge0: port 3(vlan2) entered disabled state [ 560.453051][ T9945] vlan2: entered allmulticast mode [ 560.458275][ T9945] bridge0: entered allmulticast mode [ 560.508437][ T9945] vlan2: left allmulticast mode [ 560.513482][ T9945] bridge0: left allmulticast mode [ 560.786762][ T9931] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 561.684844][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.867557][ T27] audit: type=1326 audit(1759303299.132:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9966 comm="syz.5.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9c18eec9 code=0x7ffc0000 [ 561.903844][ T27] audit: type=1326 audit(1759303299.132:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9966 comm="syz.5.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9c18eec9 code=0x7ffc0000 [ 561.927362][ T27] audit: type=1326 audit(1759303299.162:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9966 comm="syz.5.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c9c18eec9 code=0x7ffc0000 [ 561.952206][ T27] audit: type=1326 audit(1759303299.162:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9966 comm="syz.5.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9c18eec9 code=0x7ffc0000 [ 561.976972][ T27] audit: type=1326 audit(1759303299.162:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9966 comm="syz.5.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9c18eec9 code=0x7ffc0000 [ 562.005775][ T27] audit: type=1326 audit(1759303299.212:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9966 comm="syz.5.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c9c18eec9 code=0x7ffc0000 [ 562.093161][ T27] audit: type=1326 audit(1759303299.212:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9966 comm="syz.5.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9c18eec9 code=0x7ffc0000 [ 562.176251][ T27] audit: type=1326 audit(1759303299.212:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9966 comm="syz.5.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9c18eec9 code=0x7ffc0000 [ 562.226152][ T27] audit: type=1326 audit(1759303299.232:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9966 comm="syz.5.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c9c18eec9 code=0x7ffc0000 [ 562.279805][ T9974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.844'. [ 562.306089][ T27] audit: type=1326 audit(1759303299.232:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9966 comm="syz.5.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9c18eec9 code=0x7ffc0000 [ 562.438318][ T9974] loop2: detected capacity change from 0 to 128 [ 562.527630][ T9974] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 562.558070][ T9974] ext4 filesystem being mounted at /205/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 563.372940][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.387038][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.443202][ T9971] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.844: No space for directory leaf checksum. Please run e2fsck -D. [ 563.516519][ T9974] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.844: No space for directory leaf checksum. Please run e2fsck -D. [ 563.595198][ T9971] EXT4-fs error (device loop2): htree_dirblock_to_tree:1083: inode #2: comm syz.2.844: Directory block failed checksum [ 563.596712][ T9974] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.844: checksumming directory block 0 [ 563.712001][ T9984] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.844: No space for directory leaf checksum. Please run e2fsck -D. [ 563.766319][ T9984] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.844: checksumming directory block 0 [ 563.930032][ T5785] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 565.554240][ T9996] loop2: detected capacity change from 0 to 512 [ 565.937269][ T9996] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.850: iget: bad extended attribute block 1 [ 566.005909][ T9996] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.850: couldn't read orphan inode 15 (err -117) [ 566.226639][ T9996] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 566.786779][ T9996] bridge0: port 3(vlan2) entered blocking state [ 566.793212][ T9996] bridge0: port 3(vlan2) entered disabled state [ 566.800100][ T9996] vlan2: entered allmulticast mode [ 566.805279][ T9996] bridge0: entered allmulticast mode [ 566.814135][ T9996] vlan2: left allmulticast mode [ 566.819162][ T9996] bridge0: left allmulticast mode [ 568.074670][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.327622][T10022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.856'. [ 570.136511][T10027] can: request_module (can-proto-0) failed. [ 572.597849][T10043] delete_channel: no stack [ 573.339420][T10055] bridge0: port 3(vlan2) entered blocking state [ 573.345878][T10055] bridge0: port 3(vlan2) entered disabled state [ 573.352335][T10055] vlan2: entered allmulticast mode [ 573.357523][T10055] bridge0: entered allmulticast mode [ 573.370730][T10055] vlan2: left allmulticast mode [ 573.375832][T10055] bridge0: left allmulticast mode [ 573.493778][T10066] loop5: detected capacity change from 0 to 16 [ 574.592197][T10066] erofs: (device loop5): erofs_read_superblock: cannot find valid erofs superblock [ 575.255117][T10075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.868'. [ 575.385040][T10079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.871'. [ 575.849611][T10083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.870'. [ 575.859213][T10083] netlink: 9 bytes leftover after parsing attributes in process `syz.0.870'. [ 576.765090][T10087] hsr0 speed is unknown, defaulting to 1000 [ 576.785718][T10087] hsr0 speed is unknown, defaulting to 1000 [ 576.810330][T10087] hsr0 speed is unknown, defaulting to 1000 [ 576.843386][T10087] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 576.874049][T10087] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 577.027235][T10087] hsr0 speed is unknown, defaulting to 1000 [ 577.206892][T10087] hsr0 speed is unknown, defaulting to 1000 [ 577.228301][T10087] hsr0 speed is unknown, defaulting to 1000 [ 577.236380][T10087] hsr0 speed is unknown, defaulting to 1000 [ 578.241032][T10106] loop2: detected capacity change from 0 to 512 [ 578.370057][T10106] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.878: iget: bad extended attribute block 1 [ 579.226987][T10106] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.878: couldn't read orphan inode 15 (err -117) [ 579.276852][T10106] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 579.560609][T10106] bridge0: port 3(vlan2) entered blocking state [ 579.567156][T10106] bridge0: port 3(vlan2) entered disabled state [ 579.573636][T10106] vlan2: entered allmulticast mode [ 579.578883][T10106] bridge0: entered allmulticast mode [ 579.586880][T10106] vlan2: left allmulticast mode [ 579.592270][T10106] bridge0: left allmulticast mode [ 579.717656][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.896133][ T5824] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 580.117315][ T5824] usb 6-1: Using ep0 maxpacket: 32 [ 580.169409][ T5824] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 580.190873][ T5824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.246072][ T5824] usb 6-1: Product: syz [ 580.250314][ T5824] usb 6-1: Manufacturer: syz [ 580.254944][ T5824] usb 6-1: SerialNumber: syz [ 580.293754][ T5824] usb 6-1: config 0 descriptor?? [ 580.678468][ T5824] snd-usb-6fire 6-1:0.0: unable to receive device firmware state. [ 580.697895][ T5824] snd-usb-6fire: probe of 6-1:0.0 failed with error -71 [ 581.661400][ T5824] usb 6-1: USB disconnect, device number 2 [ 583.916077][ T5861] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 584.109436][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.120529][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.130798][ T5861] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 584.144108][ T5861] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 584.154649][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.185499][ T5861] usb 3-1: config 0 descriptor?? [ 584.625309][ T5861] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 584.646973][ T5861] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 584.657925][ T5861] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 584.665412][ T5861] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 584.673689][ T5861] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 584.690796][T10155] bridge0: port 3(vlan2) entered blocking state [ 584.697285][T10155] bridge0: port 3(vlan2) entered disabled state [ 584.703780][T10155] vlan2: entered allmulticast mode [ 584.709024][T10155] bridge0: entered allmulticast mode [ 584.717047][ T5861] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 584.724515][ T5861] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 584.732834][ T5861] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 584.744679][ T5861] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 584.755728][ T5861] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 584.765248][ T5861] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 584.773277][ T5861] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 584.786332][T10155] vlan2: left allmulticast mode [ 584.791313][T10155] bridge0: left allmulticast mode [ 584.821523][ T5861] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 584.856530][ T5861] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 584.910087][ T5861] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 584.930905][ T5861] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 585.689683][ T5861] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 585.935432][ T5861] usb 3-1: USB disconnect, device number 15 [ 586.871260][T10172] fido_id[10172]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 587.056605][T10189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.899'. [ 588.286161][T10178] mmap: syz.2.896 (10178) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 591.500593][T10237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.911'. [ 591.611732][T10241] loop2: detected capacity change from 0 to 128 [ 592.897460][T10241] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 593.014403][T10241] ext4 filesystem being mounted at /223/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 593.232424][T10256] 9pnet_fd: Insufficient options for proto=fd [ 593.690482][T10235] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.911: No space for directory leaf checksum. Please run e2fsck -D. [ 593.806059][T10235] EXT4-fs error (device loop2): htree_dirblock_to_tree:1083: inode #2: comm syz.2.911: Directory block failed checksum [ 593.816572][T10237] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.911: No space for directory leaf checksum. Please run e2fsck -D. [ 593.904775][T10237] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.911: checksumming directory block 0 [ 594.182192][T10272] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.911: No space for directory leaf checksum. Please run e2fsck -D. [ 595.140909][T10272] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.911: checksumming directory block 0 [ 595.395469][ T5785] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 595.418965][ T9907] Bluetooth: to_multiplier 0 < 10 [ 596.373691][T10284] can: request_module (can-proto-0) failed. [ 597.433657][ T9907] Bluetooth: hci3: command 0x0406 tx timeout [ 598.314279][T10310] loop5: detected capacity change from 0 to 512 [ 598.365138][T10312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.929'. [ 598.436239][T10310] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.930: iget: bad extended attribute block 1 [ 598.452281][T10312] loop2: detected capacity change from 0 to 128 [ 598.577843][T10310] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.930: couldn't read orphan inode 15 (err -117) [ 599.026253][T10310] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 599.074265][T10312] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 599.202301][T10312] ext4 filesystem being mounted at /226/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 599.237339][T10312] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.929: No space for directory leaf checksum. Please run e2fsck -D. [ 599.350754][T10319] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.929: No space for directory leaf checksum. Please run e2fsck -D. [ 599.385709][T10312] EXT4-fs error (device loop2): htree_dirblock_to_tree:1083: inode #2: comm syz.2.929: Directory block failed checksum [ 599.404673][T10319] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.929: checksumming directory block 0 [ 599.455664][T10308] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.929: No space for directory leaf checksum. Please run e2fsck -D. [ 599.552043][T10308] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.929: checksumming directory block 0 [ 599.676412][T10314] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 599.725316][ T5785] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 599.774562][T10323] bridge0: port 3(vlan2) entered blocking state [ 599.848916][T10323] bridge0: port 3(vlan2) entered disabled state [ 599.869185][T10323] vlan2: entered allmulticast mode [ 599.874383][T10323] bridge0: entered allmulticast mode [ 600.017888][T10323] vlan2: left allmulticast mode [ 600.101396][T10323] bridge0: left allmulticast mode [ 603.371887][T10356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.941'. [ 603.448208][T10356] loop2: detected capacity change from 0 to 128 [ 603.510445][T10356] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 603.572579][T10356] ext4 filesystem being mounted at /230/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 603.605275][ T7802] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.637278][T10354] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.941: No space for directory leaf checksum. Please run e2fsck -D. [ 603.652903][T10354] EXT4-fs error (device loop2): htree_dirblock_to_tree:1083: inode #2: comm syz.2.941: Directory block failed checksum [ 603.725680][T10356] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.941: No space for directory leaf checksum. Please run e2fsck -D. [ 603.802602][T10356] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.941: checksumming directory block 0 [ 603.967606][T10354] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.941: No space for directory leaf checksum. Please run e2fsck -D. [ 604.009186][T10354] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.941: checksumming directory block 0 [ 604.011199][T10373] input: syz1 as /devices/virtual/input/input7 [ 604.932266][ T5785] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 607.240151][T10392] loop5: detected capacity change from 0 to 512 [ 607.408521][T10392] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.952: iget: bad extended attribute block 1 [ 607.887589][T10392] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.952: couldn't read orphan inode 15 (err -117) [ 607.967592][T10392] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 608.399588][T10401] bridge0: port 3(vlan2) entered blocking state [ 608.406294][T10401] bridge0: port 3(vlan2) entered disabled state [ 608.413269][T10401] vlan2: entered allmulticast mode [ 608.418799][T10401] bridge0: entered allmulticast mode [ 608.846634][T10401] vlan2: left allmulticast mode [ 608.852020][T10401] bridge0: left allmulticast mode [ 609.070994][ T7802] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.491444][T10412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.957'. [ 610.187235][T10422] Bluetooth: MGMT ver 1.22 [ 611.465120][T10426] bridge0: port 3(vlan2) entered blocking state [ 611.538338][T10426] bridge0: port 3(vlan2) entered disabled state [ 611.578820][T10426] vlan2: entered allmulticast mode [ 611.616932][T10426] bridge0: entered allmulticast mode [ 611.740297][T10426] vlan2: left allmulticast mode [ 611.746925][T10431] loop2: detected capacity change from 0 to 512 [ 611.749460][T10426] bridge0: left allmulticast mode [ 611.806350][T10431] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.963: iget: bad extended attribute block 1 [ 611.823096][T10431] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.963: couldn't read orphan inode 15 (err -117) [ 611.840229][T10431] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 612.448350][T10442] bridge0: port 3(vlan2) entered blocking state [ 612.455349][T10442] bridge0: port 3(vlan2) entered disabled state [ 612.462997][T10442] vlan2: entered allmulticast mode [ 612.468317][T10442] bridge0: entered allmulticast mode [ 612.500535][T10442] vlan2: left allmulticast mode [ 612.505635][T10442] bridge0: left allmulticast mode [ 612.966426][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.376839][T10448] syz.0.968: attempt to access beyond end of device [ 613.376839][T10448] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 613.682359][T10448] SQUASHFS error: Failed to read block 0x0: -5 [ 613.693411][T10448] unable to read squashfs_super_block [ 614.076211][ T9747] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 614.748157][ T9747] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 614.762303][ T9747] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.554767][ T9747] usb 4-1: config 0 descriptor?? [ 615.565328][T10465] netlink: 12 bytes leftover after parsing attributes in process `syz.5.972'. [ 615.732830][T10468] loop5: detected capacity change from 0 to 512 [ 615.772040][T10469] loop2: detected capacity change from 0 to 16 [ 615.852915][T10469] erofs: (device loop2): erofs_read_superblock: cannot find valid erofs superblock [ 615.935475][T10469] loop2: detected capacity change from 0 to 256 [ 616.030389][T10469] FAT-fs (loop2): Directory bread(block 64) failed [ 616.037566][T10469] FAT-fs (loop2): Directory bread(block 65) failed [ 616.044908][T10469] FAT-fs (loop2): Directory bread(block 66) failed [ 616.051700][T10469] FAT-fs (loop2): Directory bread(block 67) failed [ 616.058847][T10469] FAT-fs (loop2): Directory bread(block 68) failed [ 616.065532][T10469] FAT-fs (loop2): Directory bread(block 69) failed [ 616.072867][T10469] FAT-fs (loop2): Directory bread(block 70) failed [ 616.079920][T10469] FAT-fs (loop2): Directory bread(block 71) failed [ 616.087367][T10469] FAT-fs (loop2): Directory bread(block 72) failed [ 616.094130][T10469] FAT-fs (loop2): Directory bread(block 73) failed [ 616.198190][T10468] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.975: iget: bad extended attribute block 1 [ 616.308148][T10468] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.975: couldn't read orphan inode 15 (err -117) [ 616.402943][T10468] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 618.461926][T10480] bridge0: port 3(vlan2) entered blocking state [ 618.469030][T10480] bridge0: port 3(vlan2) entered disabled state [ 618.476411][T10480] vlan2: entered allmulticast mode [ 618.481757][T10480] bridge0: entered allmulticast mode [ 618.714447][T10484] netlink: 44 bytes leftover after parsing attributes in process `syz.2.977'. [ 618.921785][T10480] vlan2: left allmulticast mode [ 618.926815][T10480] bridge0: left allmulticast mode [ 619.037409][ T9747] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 619.090734][ T9747] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 619.284868][ T9747] asix: probe of 4-1:0.0 failed with error -71 [ 619.346422][ T9747] usb 4-1: USB disconnect, device number 14 [ 619.400349][ T7802] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.729968][T10493] bridge0: port 3(vlan2) entered blocking state [ 619.736959][T10493] bridge0: port 3(vlan2) entered disabled state [ 619.744498][T10493] vlan2: entered allmulticast mode [ 619.750000][T10493] bridge0: entered allmulticast mode [ 619.769844][T10493] vlan2: left allmulticast mode [ 619.774922][T10493] bridge0: left allmulticast mode [ 621.556451][T10518] loop5: detected capacity change from 0 to 512 [ 621.673755][T10518] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.990: iget: bad extended attribute block 1 [ 621.771031][T10518] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.990: couldn't read orphan inode 15 (err -117) [ 621.878447][T10518] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 622.248494][T10531] loop2: detected capacity change from 0 to 512 [ 622.532138][T10531] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.994: iget: bad extended attribute block 1 [ 622.641716][T10531] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.994: couldn't read orphan inode 15 (err -117) [ 622.684628][T10532] can: request_module (can-proto-0) failed. [ 622.707870][T10531] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 622.742034][T10533] bridge0: port 3(vlan2) entered blocking state [ 622.780058][T10533] bridge0: port 3(vlan2) entered disabled state [ 622.931791][T10533] vlan2: entered allmulticast mode [ 622.980815][T10533] bridge0: entered allmulticast mode [ 623.026396][T10533] vlan2: left allmulticast mode [ 623.046072][T10533] bridge0: left allmulticast mode [ 623.574892][T10543] bridge0: port 3(vlan2) entered blocking state [ 623.581509][T10543] bridge0: port 3(vlan2) entered disabled state [ 623.588103][T10543] vlan2: entered allmulticast mode [ 623.593258][T10543] bridge0: entered allmulticast mode [ 623.600777][T10543] vlan2: left allmulticast mode [ 623.605682][T10543] bridge0: left allmulticast mode [ 623.849783][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.924169][ T9907] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 624.311010][T10521] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 624.712749][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.757244][ T7802] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.832585][T10572] loop2: detected capacity change from 0 to 16 [ 624.843802][T10572] erofs: (device loop2): erofs_read_superblock: cannot find valid erofs superblock [ 625.833878][T10572] loop2: detected capacity change from 0 to 256 [ 626.172429][T10572] FAT-fs (loop2): Directory bread(block 64) failed [ 626.179498][T10572] FAT-fs (loop2): Directory bread(block 65) failed [ 626.186268][T10572] FAT-fs (loop2): Directory bread(block 66) failed [ 626.192850][T10572] FAT-fs (loop2): Directory bread(block 67) failed [ 626.200421][T10572] FAT-fs (loop2): Directory bread(block 68) failed [ 626.207344][T10572] FAT-fs (loop2): Directory bread(block 69) failed [ 626.214186][T10572] FAT-fs (loop2): Directory bread(block 70) failed [ 626.220750][T10572] FAT-fs (loop2): Directory bread(block 71) failed [ 626.227444][T10572] FAT-fs (loop2): Directory bread(block 72) failed [ 626.233997][T10572] FAT-fs (loop2): Directory bread(block 73) failed [ 631.643078][T10619] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 637.720336][T10659] can: request_module (can-proto-0) failed. [ 639.912394][T10685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1041'. [ 641.072971][T10702] loop2: detected capacity change from 0 to 512 [ 641.198729][T10702] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1045: iget: bad extended attribute block 1 [ 641.260482][T10702] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1045: couldn't read orphan inode 15 (err -117) [ 641.326090][T10702] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 641.941970][T10706] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1046'. [ 642.414508][T10718] bridge0: port 3(vlan2) entered blocking state [ 642.421311][T10718] bridge0: port 3(vlan2) entered disabled state [ 642.427877][T10718] vlan2: entered allmulticast mode [ 642.433024][T10718] bridge0: entered allmulticast mode [ 642.660715][T10718] vlan2: left allmulticast mode [ 642.665828][T10718] bridge0: left allmulticast mode [ 643.871256][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.186782][T10741] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1054'. [ 644.211310][T10741] loop5: detected capacity change from 0 to 128 [ 644.279544][T10741] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 644.318660][T10741] ext4 filesystem being mounted at /153/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 644.621041][T10741] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:406: inode #2: comm syz.5.1054: No space for directory leaf checksum. Please run e2fsck -D. [ 644.666091][T10741] EXT4-fs error (device loop5): htree_dirblock_to_tree:1083: inode #2: comm syz.5.1054: Directory block failed checksum [ 644.861370][T10751] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:406: inode #2: comm syz.5.1054: No space for directory leaf checksum. Please run e2fsck -D. [ 645.087759][T10751] EXT4-fs error (device loop5): __ext4_find_entry:1696: inode #2: comm syz.5.1054: checksumming directory block 0 [ 645.299295][T10736] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:406: inode #2: comm syz.5.1054: No space for directory leaf checksum. Please run e2fsck -D. [ 645.629644][T10736] EXT4-fs error (device loop5): __ext4_find_entry:1696: inode #2: comm syz.5.1054: checksumming directory block 0 [ 645.813554][ T7802] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 646.040129][T10763] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1060'. [ 646.698909][T10767] loop5: detected capacity change from 0 to 512 [ 646.745726][T10767] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1062: iget: bad extended attribute block 1 [ 646.806258][T10767] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1062: couldn't read orphan inode 15 (err -117) [ 646.876254][T10774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1065'. [ 646.909541][T10767] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 646.923525][T10774] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.930921][T10774] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.436901][T10783] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1068'. [ 647.746510][T10786] loop8: detected capacity change from 0 to 8 [ 648.415988][T10786] Dev loop8: unable to read RDB block 8 [ 648.421661][T10786] loop8: unable to read partition table [ 648.428149][T10786] loop8: partition table beyond EOD, truncated [ 648.434656][T10786] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 648.716105][ T23] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 649.117070][T10794] bridge0: port 3(vlan2) entered blocking state [ 649.123532][T10794] bridge0: port 3(vlan2) entered disabled state [ 649.130262][T10794] vlan2: entered allmulticast mode [ 649.135427][T10794] bridge0: entered allmulticast mode [ 649.219762][T10794] vlan2: left allmulticast mode [ 649.224743][T10794] bridge0: left allmulticast mode [ 649.316838][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 650.202483][ T23] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 650.211338][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 650.223388][ T23] usb 3-1: config 0 has no interface number 0 [ 650.237726][ T23] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 650.259056][ T7802] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.273814][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.305352][ T23] usb 3-1: Product: syz [ 650.326066][ T23] usb 3-1: Manufacturer: syz [ 650.330751][ T23] usb 3-1: SerialNumber: syz [ 650.364834][ T23] usb 3-1: config 0 descriptor?? [ 650.381110][ T23] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 650.392726][ T23] usb 3-1: No valid video chain found. [ 650.456232][ T9907] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 650.467558][ T9907] CPU: 1 PID: 9907 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 650.475177][ T9907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 650.485283][ T9907] Workqueue: hci3 hci_rx_work [ 650.490073][ T9907] Call Trace: [ 650.493399][ T9907] [ 650.496377][ T9907] dump_stack_lvl+0x16c/0x230 [ 650.501110][ T9907] ? show_regs_print_info+0x20/0x20 [ 650.506363][ T9907] ? load_image+0x3b0/0x3b0 [ 650.510934][ T9907] sysfs_create_dir_ns+0x256/0x280 [ 650.516094][ T9907] ? hci_rx_work+0x43a/0xd80 [ 650.520761][ T9907] ? sysfs_warn_dup+0xa0/0xa0 [ 650.525496][ T9907] ? do_raw_spin_unlock+0x121/0x230 [ 650.530754][ T9907] kobject_add_internal+0x6b8/0xc70 [ 650.536017][ T9907] kobject_add+0x156/0x220 [ 650.540488][ T9907] ? __rwlock_init+0x150/0x150 [ 650.545496][ T9907] ? kobject_init+0x1e0/0x1e0 [ 650.550337][ T9907] ? _raw_spin_unlock+0x28/0x40 [ 650.555255][ T9907] ? get_device_parent+0x366/0x390 [ 650.560433][ T9907] device_add+0x408/0xc20 [ 650.564843][ T9907] hci_conn_add_sysfs+0xd5/0x1e0 [ 650.569851][ T9907] le_conn_complete_evt+0xc37/0x1220 [ 650.575193][ T9907] ? hci_event_packet+0x4a7/0x1210 [ 650.580379][ T9907] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 650.586683][ T9907] ? __copy_skb_header+0xa7/0x550 [ 650.591770][ T9907] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 650.597460][ T9907] ? skb_pull_data+0xfb/0x200 [ 650.602202][ T9907] hci_le_enh_conn_complete_evt+0x189/0x460 [ 650.608160][ T9907] ? hci_le_remote_conn_param_req_evt+0xcc0/0xcc0 [ 650.614636][ T9907] ? hci_remote_host_features_evt+0x160/0x160 [ 650.620770][ T9907] hci_event_packet+0x795/0x1210 [ 650.625790][ T9907] ? bis_list+0x290/0x290 [ 650.630189][ T9907] ? lockdep_hardirqs_on+0x98/0x150 [ 650.635455][ T9907] ? hci_send_to_monitor+0xd7/0x4f0 [ 650.640809][ T9907] hci_rx_work+0x43a/0xd80 [ 650.645299][ T9907] ? process_scheduled_works+0x957/0x15b0 [ 650.651080][ T9907] process_scheduled_works+0xa45/0x15b0 [ 650.656735][ T9907] ? assign_work+0x400/0x400 [ 650.661395][ T9907] ? assign_work+0x39e/0x400 [ 650.666053][ T9907] worker_thread+0xa55/0xfc0 [ 650.670701][ T9907] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 650.676645][ T9907] ? _raw_spin_unlock+0x40/0x40 [ 650.681546][ T9907] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 650.687574][ T9907] kthread+0x2fa/0x390 [ 650.691705][ T9907] ? pr_cont_work+0x560/0x560 [ 650.696449][ T9907] ? kthread_blkcg+0xd0/0xd0 [ 650.701099][ T9907] ret_from_fork+0x48/0x80 [ 650.705578][ T9907] ? kthread_blkcg+0xd0/0xd0 [ 650.710562][ T9907] ret_from_fork_asm+0x11/0x20 [ 650.715406][ T9907] [ 650.722374][ T9907] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 650.738314][ T9907] Bluetooth: hci3: failed to register connection device [ 650.749453][ T23] usb 3-1: USB disconnect, device number 16 [ 652.027768][T10832] bridge0: port 3(vlan2) entered blocking state [ 652.034210][T10832] bridge0: port 3(vlan2) entered disabled state [ 652.040806][T10832] vlan2: entered allmulticast mode [ 652.046016][T10832] bridge0: entered allmulticast mode [ 652.053665][T10832] vlan2: left allmulticast mode [ 652.058661][T10832] bridge0: left allmulticast mode [ 653.846317][ T8] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 654.091848][T10846] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 655.016434][T10846] orangefs_mount: mount request failed with -4 [ 655.246161][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 655.512479][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 656.573852][ T8] usb 1-1: string descriptor 0 read error: -71 [ 656.610681][ T8] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 656.735704][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.338747][ T8] usb 1-1: config 0 descriptor?? [ 657.374464][ T8] usb 1-1: can't set config #0, error -71 [ 657.387379][ T8] usb 1-1: USB disconnect, device number 15 [ 657.395483][T10866] loop2: detected capacity change from 0 to 512 [ 657.507661][T10866] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1091: iget: bad extended attribute block 1 [ 657.604081][T10866] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1091: couldn't read orphan inode 15 (err -117) [ 657.637553][T10866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 657.661632][T10875] netlink: 536 bytes leftover after parsing attributes in process `syz.0.1095'. [ 657.793890][T10875] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1095'. [ 659.346165][T10871] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 660.331923][T10911] netlink: 'syz.5.1105': attribute type 28 has an invalid length. [ 661.595694][ T2995] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.711307][T10927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1111'. [ 661.862291][ T2995] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.929574][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.993997][ T2995] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.274269][ T2995] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.571160][ T9907] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 666.582229][ T9907] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 666.640555][ T9907] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 666.662262][ T9907] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 666.672532][ T9907] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 666.681940][ T9907] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 667.566803][T10960] hsr0 speed is unknown, defaulting to 1000 [ 669.026177][ T9907] Bluetooth: hci1: command tx timeout [ 670.317195][T11001] can: request_module (can-proto-0) failed. [ 671.786074][ T9907] Bluetooth: hci1: command tx timeout [ 671.808850][T10960] chnl_net:caif_netlink_parms(): no params data found [ 673.826091][ T9907] Bluetooth: hci1: command tx timeout [ 674.449424][ T2995] hsr_slave_0: left promiscuous mode [ 674.456133][T11033] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 674.485583][ T2995] hsr_slave_1: left promiscuous mode [ 674.513913][ T2995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 674.536924][ T2995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.557243][ T2995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 674.564806][ T2995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.586924][ T2995] bridge_slave_1: left allmulticast mode [ 674.592737][ T2995] bridge_slave_1: left promiscuous mode [ 674.608747][ T2995] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.848958][ T2995] bridge_slave_0: left allmulticast mode [ 674.854984][ T2995] bridge_slave_0: left promiscuous mode [ 674.861382][ T2995] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.448811][ T9907] Bluetooth: hci1: command tx timeout [ 676.820445][ T2995] veth1_macvtap: left promiscuous mode [ 676.835539][ T2995] veth0_macvtap: left promiscuous mode [ 676.853103][ T2995] veth1_vlan: left promiscuous mode [ 676.860837][ T2995] veth0_vlan: left promiscuous mode [ 680.141352][T11092] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1150'. [ 680.204672][ T2995] team0 (unregistering): Port device team_slave_1 removed [ 680.272379][ T2995] team0 (unregistering): Port device team_slave_0 removed [ 680.364707][ T2995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 680.423128][ T2995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 680.727878][T11096] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 681.951325][ T2995] bond0 (unregistering): Released all slaves [ 682.076990][T10960] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.084283][T10960] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.094035][T10960] bridge_slave_0: entered allmulticast mode [ 682.103332][T10960] bridge_slave_0: entered promiscuous mode [ 682.135123][T11092] IPVS: Error connecting to the multicast addr [ 682.143014][T10960] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.154111][T10960] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.168596][T10960] bridge_slave_1: entered allmulticast mode [ 682.181551][T10960] bridge_slave_1: entered promiscuous mode [ 682.332061][T10960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 682.394769][T10960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 682.673654][T10960] team0: Port device team_slave_0 added [ 682.722097][T10960] team0: Port device team_slave_1 added [ 682.824944][T11115] loop2: detected capacity change from 0 to 16 [ 682.856269][T11115] erofs: (device loop2): erofs_read_superblock: cannot find valid erofs superblock [ 683.014472][T11115] loop2: detected capacity change from 0 to 256 [ 683.120328][T11115] FAT-fs (loop2): Directory bread(block 64) failed [ 683.127351][T11115] FAT-fs (loop2): Directory bread(block 65) failed [ 683.134766][T11115] FAT-fs (loop2): Directory bread(block 66) failed [ 683.141565][T11115] FAT-fs (loop2): Directory bread(block 67) failed [ 683.149402][T11115] FAT-fs (loop2): Directory bread(block 68) failed [ 683.156250][T11115] FAT-fs (loop2): Directory bread(block 69) failed [ 683.163735][T11115] FAT-fs (loop2): Directory bread(block 70) failed [ 683.170528][T11115] FAT-fs (loop2): Directory bread(block 71) failed [ 683.177936][T11115] FAT-fs (loop2): Directory bread(block 72) failed [ 683.184651][T11115] FAT-fs (loop2): Directory bread(block 73) failed [ 683.734805][T10960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 683.784097][T10960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 683.865589][T10960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.053112][T10960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.251837][T10960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.535992][T10960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.893703][T11133] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2870834618 (5741669236 ns) > initial count (396924862 ns). Using initial count to start timer. [ 685.324163][T10960] hsr_slave_0: entered promiscuous mode [ 685.489360][T10960] hsr_slave_1: entered promiscuous mode [ 686.151965][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.533902][T10960] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 686.553585][T10960] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 686.567931][T10960] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 686.585217][T10960] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 687.098032][T11172] netlink: set zone limit has 8 unknown bytes [ 687.125605][T10960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 687.192254][T10960] 8021q: adding VLAN 0 to HW filter on device team0 [ 687.260855][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.268296][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.066353][T11174] can: request_module (can-proto-0) failed. [ 688.440779][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.448102][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.721410][T10960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.540755][T10960] veth0_vlan: entered promiscuous mode [ 698.619736][T10960] veth1_vlan: entered promiscuous mode [ 698.702247][T10960] veth0_macvtap: entered promiscuous mode [ 698.715179][T10960] veth1_macvtap: entered promiscuous mode [ 698.751614][T10960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.765293][T10960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.776708][T10960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.787918][T10960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.798644][T10960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.821426][T10960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.846946][T10960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 698.863742][T11274] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1188'. [ 698.879870][T10960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.896022][T10960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.914775][T10960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.932784][T10960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.956475][T10960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.976411][T10960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.997867][T10960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 699.061203][T10960] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.104355][T10960] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.171735][T10960] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.194339][T10960] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.050062][ T9069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.071415][ T9069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.137851][ T9069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.145804][ T9069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.964311][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 705.964327][ T27] audit: type=1326 audit(1759303443.202:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11320 comm="syz.3.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3478eec9 code=0x7ffc0000 [ 706.776179][ T27] audit: type=1326 audit(1759303443.202:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11320 comm="syz.3.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3478eec9 code=0x7ffc0000 [ 706.902945][ T27] audit: type=1326 audit(1759303443.202:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11320 comm="syz.3.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8a3478eec9 code=0x7ffc0000 [ 706.997148][ T27] audit: type=1326 audit(1759303443.202:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11320 comm="syz.3.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3478eec9 code=0x7ffc0000 [ 707.083362][ T27] audit: type=1326 audit(1759303443.202:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11320 comm="syz.3.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f8a3478eec9 code=0x7ffc0000 [ 708.456103][ T27] audit: type=1326 audit(1759303443.212:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11320 comm="syz.3.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3478eec9 code=0x7ffc0000 [ 708.516373][ T27] audit: type=1326 audit(1759303443.212:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11320 comm="syz.3.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3478eec9 code=0x7ffc0000 [ 708.606333][ T27] audit: type=1326 audit(1759303443.212:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11320 comm="syz.3.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a3478eec9 code=0x7ffc0000 [ 708.670670][ T27] audit: type=1326 audit(1759303443.212:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11320 comm="syz.3.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3478eec9 code=0x7ffc0000 [ 708.819949][ T27] audit: type=1326 audit(1759303443.212:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11320 comm="syz.3.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3478eec9 code=0x7ffc0000 [ 716.635869][T11416] fuse: Bad value for 'fd' [ 731.127144][T11523] netlink: 868 bytes leftover after parsing attributes in process `syz.3.1244'. [ 732.384678][T11536] IPv6: NLM_F_CREATE should be specified when creating new route [ 735.176567][T11555] can: request_module (can-proto-0) failed. [ 735.454644][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 735.454659][ T27] audit: type=1326 audit(1759303472.712:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11560 comm="syz.3.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3478eec9 code=0x7ffc0000 [ 735.605000][ T27] audit: type=1326 audit(1759303472.712:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11560 comm="syz.3.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3478eec9 code=0x7ffc0000 [ 735.900995][ T27] audit: type=1326 audit(1759303472.712:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11560 comm="syz.3.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3478eec9 code=0x7ffc0000 [ 735.906989][T11573] netlink: 868 bytes leftover after parsing attributes in process `syz.2.1255'. [ 736.739215][ T27] audit: type=1326 audit(1759303472.712:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11560 comm="syz.3.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3478eec9 code=0x7ffc0000 [ 736.818315][ T27] audit: type=1326 audit(1759303472.712:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11560 comm="syz.3.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f8a3478eec9 code=0x7ffc0000 [ 736.864987][ T27] audit: type=1326 audit(1759303472.712:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11560 comm="syz.3.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3478eec9 code=0x7ffc0000 [ 736.989441][ T27] audit: type=1326 audit(1759303472.712:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11560 comm="syz.3.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3478eec9 code=0x7ffc0000 [ 737.019275][ T27] audit: type=1326 audit(1759303472.722:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11560 comm="syz.3.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8a3478eec9 code=0x7ffc0000 [ 737.093462][ T27] audit: type=1326 audit(1759303472.722:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11560 comm="syz.3.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8a3478eec9 code=0x7ffc0000 [ 739.022206][ T27] audit: type=1326 audit(1759303475.642:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11589 comm="syz.6.1259" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6b878eec9 code=0x0 [ 739.612513][T11603] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 740.885854][T11603] orangefs_mount: mount request failed with -4 [ 742.409369][T11631] netlink: 868 bytes leftover after parsing attributes in process `syz.2.1269'. [ 742.546231][T10333] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 742.849705][T10333] usb 7-1: Using ep0 maxpacket: 8 [ 742.878129][T10333] usb 7-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 743.182326][T10333] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.276155][T10333] usb 7-1: Product: syz [ 743.296258][T10333] usb 7-1: Manufacturer: syz [ 743.436078][T10333] usb 7-1: SerialNumber: syz [ 743.462394][T10333] usb 7-1: config 0 descriptor?? [ 743.522784][T10333] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 743.553994][T10333] pctv452e: pctv452e_power_ctrl: 1 [ 743.553994][T10333] [ 743.575049][T10333] usb 7-1: selecting invalid altsetting 3 [ 743.605774][T10333] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 743.605774][T10333] [ 743.809079][T10333] dvb-usb: bulk message failed: -22 (5/0) [ 743.825838][T10333] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 743.856524][T10333] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 743.865397][T10333] usb 7-1: media controller created [ 745.049664][T10333] dvb-usb: bulk message failed: -22 (8/0) [ 745.056247][T10333] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 745.299915][T10333] dvb-usb: MAC address reading failed. [ 745.329918][T10333] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 746.361904][T10333] DVB: Unable to find symbol stb0899_attach() [ 746.368911][T10333] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 747.486102][T10333] rc_core: IR keymap rc-tt-1500 not found [ 747.492058][T10333] Registered IR keymap rc-empty [ 747.762992][T11670] bridge0: port 3(vlan2) entered blocking state [ 747.770147][T11670] bridge0: port 3(vlan2) entered disabled state [ 747.778163][T11670] vlan2: entered allmulticast mode [ 747.783375][T11670] bridge0: entered allmulticast mode [ 748.129531][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.190037][T10333] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 748.217290][T10333] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input8 [ 749.046849][T10333] dvb-usb: schedule remote query interval to 100 msecs. [ 749.054619][T10333] pctv452e: pctv452e_power_ctrl: 0 [ 749.054619][T10333] [ 749.067917][T10333] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 749.102433][T10333] usb 7-1: USB disconnect, device number 2 [ 749.448669][T11670] vlan2: left allmulticast mode [ 749.454239][T11670] bridge0: left allmulticast mode [ 751.386866][T11683] netlink: 860 bytes leftover after parsing attributes in process `syz.5.1280'. [ 751.728905][T10333] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 752.312837][T11697] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 755.559600][T11726] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1290'. [ 755.590525][T11726] loop5: detected capacity change from 0 to 128 [ 755.701183][T11726] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 755.760616][T11726] ext4 filesystem being mounted at /214/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 755.844653][T11721] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:406: inode #2: comm syz.5.1290: No space for directory leaf checksum. Please run e2fsck -D. [ 755.866069][T11721] EXT4-fs error (device loop5): __ext4_find_entry:1696: inode #2: comm syz.5.1290: checksumming directory block 0 [ 755.978806][T11726] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:406: inode #2: comm syz.5.1290: No space for directory leaf checksum. Please run e2fsck -D. [ 756.239753][T11726] EXT4-fs error (device loop5): __ext4_find_entry:1696: inode #2: comm syz.5.1290: checksumming directory block 0 [ 756.779839][ T7802] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 756.890791][T11744] syz_tun: entered allmulticast mode [ 756.936359][T11744] syz_tun: left allmulticast mode [ 758.176511][T11758] autofs4:pid:11758:autofs_fill_super: called with bogus options [ 759.459283][T11766] hsr0 speed is unknown, defaulting to 1000 [ 769.919710][ T9907] Bluetooth: hci0: connection err: -111 [ 773.536132][T11904] loop2: detected capacity change from 0 to 512 [ 773.651376][T11904] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1324: iget: bad extended attribute block 1 [ 773.739413][T11904] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1324: couldn't read orphan inode 15 (err -117) [ 774.031586][T11904] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 774.716787][T11919] can: request_module (can-proto-0) failed. [ 775.522486][T11932] hsr0 speed is unknown, defaulting to 1000 [ 777.626308][T10333] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 777.719651][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 777.846279][T10333] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 777.876062][T10333] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 777.886308][T10333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.899640][T10333] usb 4-1: config 0 descriptor?? [ 777.921282][T10333] pwc: Askey VC010 type 2 USB webcam detected. [ 778.414742][T10333] pwc: recv_control_msg error -32 req 02 val 2b00 [ 778.542848][T10333] pwc: recv_control_msg error -32 req 02 val 2700 [ 778.670312][T10333] pwc: recv_control_msg error -32 req 02 val 2c00 [ 778.784010][T10333] pwc: recv_control_msg error -32 req 04 val 1000 [ 778.823038][T10333] pwc: recv_control_msg error -32 req 04 val 1300 [ 778.858030][T10333] pwc: recv_control_msg error -32 req 04 val 1400 [ 778.896631][T10333] pwc: recv_control_msg error -32 req 02 val 2000 [ 778.942650][T10333] pwc: recv_control_msg error -32 req 02 val 2100 [ 778.973305][T10333] pwc: recv_control_msg error -32 req 04 val 1500 [ 779.002176][T10333] pwc: recv_control_msg error -32 req 02 val 2500 [ 779.045224][T10333] pwc: recv_control_msg error -32 req 02 val 2400 [ 779.065649][T10333] pwc: recv_control_msg error -32 req 02 val 2600 [ 779.092561][T10333] pwc: recv_control_msg error -32 req 02 val 2900 [ 779.129148][T10333] pwc: recv_control_msg error -32 req 02 val 2800 [ 779.598596][T10333] pwc: recv_control_msg error -71 req 04 val 1200 [ 779.889706][T10333] pwc: Registered as video103. [ 779.939905][T10333] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 780.060391][T10333] usb 4-1: USB disconnect, device number 15 [ 782.340808][T12019] loop2: detected capacity change from 0 to 512 [ 782.394736][T12019] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1342: iget: bad extended attribute block 1 [ 782.453308][T12019] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1342: couldn't read orphan inode 15 (err -117) [ 782.492178][T12019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 783.828027][T12024] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 786.375464][T12066] hsr0 speed is unknown, defaulting to 1000 [ 786.458213][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.657016][T12104] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 789.840904][T12109] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1355'. [ 790.626037][ T5799] Bluetooth: hci1: command 0x0406 tx timeout [ 791.388446][T12131] bridge0: port 3(vlan2) entered blocking state [ 791.424959][T12131] bridge0: port 3(vlan2) entered disabled state [ 791.513243][T12131] vlan2: entered allmulticast mode [ 791.555934][T12131] bridge0: entered allmulticast mode [ 791.698034][T12131] vlan2: left allmulticast mode [ 791.703044][T12131] bridge0: left allmulticast mode [ 797.264188][T12176] hsr0 speed is unknown, defaulting to 1000 [ 801.088381][T12204] loop6: detected capacity change from 0 to 512 [ 801.264939][T12204] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.1376: iget: bad extended attribute block 1 [ 801.406137][T12204] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1376: couldn't read orphan inode 15 (err -117) [ 801.612699][T12204] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 801.909427][T12218] bridge0: port 3(vlan2) entered blocking state [ 801.916225][T12218] bridge0: port 3(vlan2) entered disabled state [ 801.922732][T12218] vlan2: entered allmulticast mode [ 801.928033][T12218] bridge0: entered allmulticast mode [ 801.936364][T12218] vlan2: left allmulticast mode [ 801.941293][T12218] bridge0: left allmulticast mode [ 802.340013][T10960] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 803.220407][T12228] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1381'. [ 803.478898][T12232] hsr0 speed is unknown, defaulting to 1000 [ 806.427765][T12252] ufs: You didn't specify the type of your ufs filesystem [ 806.427765][T12252] [ 806.427765][T12252] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 806.427765][T12252] [ 806.427765][T12252] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 806.459660][T12252] ufs: ufstype=old is supported read-only [ 806.467002][T12252] syz.3.1386: attempt to access beyond end of device [ 806.467002][T12252] loop7: rw=0, sector=16, nr_sectors = 2 limit=0 [ 807.164407][T12242] block device autoloading is deprecated and will be removed. [ 807.245797][T12242] tmpfs: Bad value for 'mpol' [ 807.915751][T12242] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 807.927142][T12242] qnx6: wrong signature (magic) in superblock #1. [ 807.933640][T12242] qnx6: unable to read the first superblock [ 809.032069][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 811.070166][ T27] audit: type=1326 audit(1759303548.332:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12290 comm="syz.6.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b878eec9 code=0x7ffc0000 [ 811.114080][ T27] audit: type=1326 audit(1759303548.352:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12290 comm="syz.6.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6b878eec9 code=0x7ffc0000 [ 811.165976][ T27] audit: type=1326 audit(1759303548.352:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12290 comm="syz.6.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b878eec9 code=0x7ffc0000 [ 811.208022][ T27] audit: type=1326 audit(1759303548.352:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12290 comm="syz.6.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b878eec9 code=0x7ffc0000 [ 812.659911][T12305] hsr0 speed is unknown, defaulting to 1000 [ 812.992241][T12314] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1405'. [ 819.499411][T12357] tipc: Enabling of bearer rejected, failed to enable media [ 819.800657][T12362] vlan0: entered promiscuous mode [ 821.490778][T12371] hsr0 speed is unknown, defaulting to 1000 [ 823.040456][T12384] autofs4:pid:12384:autofs_fill_super: called with bogus options [ 823.752549][T12403] tipc: Enabling of bearer rejected, failed to enable media [ 823.796237][ T787] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 824.201763][ T787] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 824.214386][ T787] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 824.232104][ T787] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 824.250841][ T787] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.305675][T12394] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 824.379791][T12411] can: request_module (can-proto-0) failed. [ 824.440273][ T787] usb 7-1: Quirk or no altest; falling back to MIDI 1.0 [ 827.839219][ T787] usb 7-1: USB disconnect, device number 3 [ 828.708279][T12439] IPv6: NLM_F_CREATE should be specified when creating new route [ 828.758731][T12433] autofs4:pid:12433:autofs_fill_super: called with bogus options [ 829.107741][T12442] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 832.222974][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 832.249926][ T8] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 832.599472][T10333] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 832.806000][T10333] usb 7-1: Using ep0 maxpacket: 16 [ 832.817909][T10333] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 832.867859][T10333] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 832.910524][T10333] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 832.985082][T10333] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.386916][T10333] usb 7-1: config 0 descriptor?? [ 833.551124][T12472] autofs4:pid:12472:autofs_fill_super: called with bogus options [ 834.016497][T10333] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 834.095783][T10333] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 834.129137][ T23] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 834.203064][T10333] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 834.305387][T10333] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 834.341971][T10333] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 834.423481][T10333] mcp2221 0003:04D8:00DD.0007: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 834.473365][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 834.520863][ T23] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 834.535614][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.581759][ T23] usb 4-1: Product: syz [ 834.623711][ T23] usb 4-1: Manufacturer: syz [ 834.629963][T10333] usb 7-1: USB disconnect, device number 4 [ 834.658357][ T23] usb 4-1: SerialNumber: syz [ 834.702917][ T23] usb 4-1: config 0 descriptor?? [ 834.742021][ T23] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 834.822222][T12487] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 836.094106][T12488] orangefs_mount: mount request failed with -4 [ 837.143505][ T23] gp8psk: usb in 128 operation failed. [ 837.160269][ T23] gp8psk: usb in 137 operation failed. [ 837.186152][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 837.206736][ T23] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 837.222228][ T23] usb 4-1: media controller created [ 837.251020][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 837.306699][ T23] gp8psk_fe: Frontend revision 1 attached [ 837.318806][ T23] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 837.333638][ T23] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 837.609443][ T5878] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 837.691946][ T5878] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 837.738902][ T23] gp8psk: usb in 138 operation failed. [ 837.756064][ T23] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 837.775609][ T23] gp8psk: found Genpix USB device pID = 201 (hex) [ 837.844636][ T23] usb 4-1: USB disconnect, device number 16 [ 837.914624][T12521] tipc: Enabling of bearer rejected, failed to enable media [ 837.939417][T12520] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1463'. [ 838.281674][ T23] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 841.816720][T12564] tipc: Enabling of bearer rejected, failed to enable media [ 843.837223][T12581] hsr0 speed is unknown, defaulting to 1000 [ 845.099565][ T787] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 845.144828][ T787] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 847.506301][T12616] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1485'. [ 847.523723][T12615] tipc: Enabling of bearer rejected, failed to enable media [ 848.539233][ T5878] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 848.588186][ T5878] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 849.626253][T10333] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 849.858711][T10333] usb 3-1: config 133 has too many interfaces: 96, using maximum allowed: 32 [ 849.869091][T10333] usb 3-1: config 133 has an invalid descriptor of length 0, skipping remainder of the config [ 849.884699][T10333] usb 3-1: config 133 has 0 interfaces, different from the descriptor's value: 96 [ 849.917672][T10333] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 849.928724][T10333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.931507][T12647] autofs4:pid:12647:autofs_fill_super: called with bogus options [ 849.937281][T10333] usb 3-1: Product: syz [ 849.937362][T10333] usb 3-1: Manufacturer: syz [ 849.954664][T10333] usb 3-1: SerialNumber: syz [ 850.202515][T12653] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1499'. [ 850.418734][T10333] usb 3-1: USB disconnect, device number 17 [ 850.625672][T12659] hsr0 speed is unknown, defaulting to 1000 [ 851.891041][T10333] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 851.927074][T10333] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 852.663894][T12678] autofs4:pid:12678:autofs_fill_super: called with bogus options [ 853.986562][T12696] netlink: 'syz.6.1512': attribute type 72 has an invalid length. [ 854.019635][T12696] netlink: 'syz.6.1512': attribute type 8 has an invalid length. [ 857.363671][T12714] autofs4:pid:12714:autofs_fill_super: called with bogus options [ 857.530937][T12723] hsr0 speed is unknown, defaulting to 1000 [ 858.762190][T12736] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 859.373348][T12745] fuse: Bad value for 'fd' [ 859.405330][T12743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1524'. [ 862.302951][T12778] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1532'. [ 865.924816][T12815] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1545'. [ 869.963911][T12839] IPv6: NLM_F_CREATE should be specified when creating new route [ 870.566479][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 873.249150][T12875] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 873.973418][T12885] bridge0: port 3(vlan2) entered blocking state [ 873.989171][T12885] bridge0: port 3(vlan2) entered disabled state [ 873.995709][T12885] vlan2: entered allmulticast mode [ 874.001015][T12885] bridge0: entered allmulticast mode [ 874.008615][T12885] vlan2: left allmulticast mode [ 874.013546][T12885] bridge0: left allmulticast mode [ 874.966027][ T5824] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 875.176070][ T5824] usb 4-1: Using ep0 maxpacket: 8 [ 875.207264][ T5824] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 875.215522][ T5824] usb 4-1: config 0 has no interface number 0 [ 875.249577][ T5824] usb 4-1: too many endpoints for config 0 interface 146 altsetting 28: 57, using maximum allowed: 30 [ 875.296010][ T5824] usb 4-1: config 0 interface 146 altsetting 28 has 0 endpoint descriptors, different from the interface descriptor's value: 57 [ 875.478781][ T5824] usb 4-1: config 0 interface 146 has no altsetting 0 [ 875.485672][ T5824] usb 4-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=54.48 [ 875.601379][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.657650][ T5824] usb 4-1: config 0 descriptor?? [ 875.859424][T12912] team0: No ports can be present during mode change [ 877.877297][ T5824] usb 4-1: string descriptor 0 read error: -71 [ 877.938531][ T5824] usb 4-1: USB disconnect, device number 17 [ 877.949046][T12918] can: request_module (can-proto-0) failed. [ 877.982726][T12916] bridge0: port 3(vlan2) entered blocking state [ 877.989296][T12916] bridge0: port 3(vlan2) entered disabled state [ 877.995800][T12916] vlan2: entered allmulticast mode [ 878.001269][T12916] bridge0: entered allmulticast mode [ 878.070312][T12916] vlan2: left allmulticast mode [ 878.075275][T12916] bridge0: left allmulticast mode [ 880.075960][T12952] ceph: No mds server is up or the cluster is laggy [ 880.178209][ T5861] libceph: connect (1)[c::]:6789 error -101 [ 880.496089][ T5861] libceph: mon0 (1)[c::]:6789 connect error [ 883.066400][ T5824] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 883.445976][ T5824] usb 6-1: Using ep0 maxpacket: 8 [ 883.453907][ T5824] usb 6-1: unable to get BOS descriptor or descriptor too short [ 883.466036][ T5824] usb 6-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 1024 [ 883.476505][ T5824] usb 6-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 883.496913][ T5824] usb 6-1: config 1 interface 0 has no altsetting 0 [ 883.509287][ T5824] usb 6-1: string descriptor 0 read error: -22 [ 883.518832][ T5824] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 883.562974][ T5824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.361608][T12971] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 884.669536][ T5824] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 4 proto 1 vid 0x04B8 pid 0x0202 [ 885.008821][ T5824] usb 6-1: USB disconnect, device number 3 [ 885.050079][ T5824] usblp0: removed [ 885.363178][T13009] tipc: Enabling of bearer rejected, failed to enable media [ 887.598517][T13026] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1612'. [ 890.150543][ T787] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 890.365925][ T787] usb 4-1: Using ep0 maxpacket: 16 [ 890.373294][ T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 890.401990][ T787] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 890.432161][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.464021][ T787] usb 4-1: config 0 descriptor?? [ 890.653910][T13057] tipc: Enabling of bearer rejected, failed to enable media [ 891.313586][ T787] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 891.339604][ T787] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 891.352293][ T787] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 891.361543][ T787] mcp2221 0003:04D8:00DD.000C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 891.385740][ C0] usb 4-1: input irq status -75 received [ 891.506525][T13045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 891.533037][T13045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 891.575674][T13045] i2c i2c-1: unsupported multi-msg i2c transaction [ 891.675140][ T8] usb 4-1: USB disconnect, device number 18 [ 892.180053][T13073] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1624'. [ 893.541198][T13082] C: renamed from team_slave_0 (while UP) [ 893.550416][T13082] netlink: 'syz.3.1628': attribute type 1 has an invalid length. [ 893.562150][T13082] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1628'. [ 893.580017][T13082] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 893.646199][T13084] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1629'. [ 893.780947][T13085] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1628'. [ 893.929895][T13089] tipc: Enabling of bearer rejected, failed to enable media [ 895.742034][T13102] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1633'. [ 897.935425][T13120] can: request_module (can-proto-0) failed. [ 897.963436][T13110] block device autoloading is deprecated and will be removed. [ 899.206095][ T787] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 899.595980][ T787] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 899.882378][ T787] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 899.892804][ T787] usb 7-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 899.912440][ T787] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.945546][ T787] usb 7-1: config 0 descriptor?? [ 900.396143][ T787] usbhid 7-1:0.0: can't add hid device: -71 [ 900.412931][ T787] usbhid: probe of 7-1:0.0 failed with error -71 [ 900.472355][ T787] usb 7-1: USB disconnect, device number 5 [ 902.101577][T13162] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1650'. [ 905.329117][T13187] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1657'. [ 910.235774][T13251] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1668'. [ 910.548508][T13244] can: request_module (can-proto-0) failed. [ 917.933987][T13296] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1679'. [ 921.216131][ T5824] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 921.494039][ T5824] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 921.765938][ T5824] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 921.817100][ T5824] usb 6-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 921.846092][ T5824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.906689][ T5824] usb 6-1: config 0 descriptor?? [ 922.168897][ T5824] usbhid 6-1:0.0: can't add hid device: -71 [ 922.192137][ T5824] usbhid: probe of 6-1:0.0 failed with error -71 [ 922.215124][ T5824] usb 6-1: USB disconnect, device number 4 [ 923.813403][ T9747] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 924.875894][ T9747] usb 6-1: Using ep0 maxpacket: 16 [ 924.950447][ T9747] usb 6-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 924.996321][ T9747] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 925.238910][ T9747] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 925.395067][ T9747] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.461599][ T9747] usb 6-1: Product: syz [ 925.499335][ T9747] usb 6-1: Manufacturer: syz [ 925.505278][ T9747] usb 6-1: SerialNumber: syz [ 925.776280][ T9747] usb 6-1: 0:2 : does not exist [ 925.850701][ T9747] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 925.900693][ T9747] usb 6-1: USB disconnect, device number 5 [ 926.033945][T13322] udevd[13322]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 926.226915][T13368] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 927.129809][T13375] hsr0 speed is unknown, defaulting to 1000 [ 927.167286][T13366] orangefs_mount: mount request failed with -4 [ 928.017738][T13391] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1710'. [ 931.077671][T13422] tipc: Enabling of bearer rejected, failed to enable media [ 932.026582][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 935.115320][T13445] hsr0 speed is unknown, defaulting to 1000 [ 935.158973][T13455] tipc: Enabling of bearer rejected, failed to enable media [ 937.535024][T13493] tipc: Enabling of bearer rejected, failed to enable media [ 937.832426][T13500] netlink: 'syz.2.1743': attribute type 10 has an invalid length. [ 937.852649][T13500] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 938.040481][T13503] macvlan2: entered promiscuous mode [ 938.055856][T13503] macvlan2: entered allmulticast mode [ 938.061354][T13503] syz_tun: entered allmulticast mode [ 939.936438][T13529] tipc: Enabling of bearer rejected, failed to enable media [ 939.999289][T13525] hsr0 speed is unknown, defaulting to 1000 [ 940.925069][T13532] can: request_module (can-proto-0) failed. [ 943.311273][T13569] tipc: Enabling of bearer rejected, failed to enable media [ 944.223459][T13585] can: request_module (can-proto-0) failed. [ 947.491777][T13626] hsr0 speed is unknown, defaulting to 1000 [ 947.980613][T13637] tipc: Enabling of bearer rejected, failed to enable media [ 949.695910][T13646] can: request_module (can-proto-0) failed. [ 949.759095][ T27] audit: type=1326 audit(1759303687.012:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13649 comm="syz.2.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004c18eec9 code=0x7ffc0000 [ 949.820934][ T27] audit: type=1326 audit(1759303687.012:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13649 comm="syz.2.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004c18eec9 code=0x7ffc0000 [ 949.845955][ T27] audit: type=1326 audit(1759303687.052:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13649 comm="syz.2.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f004c18eec9 code=0x7ffc0000 [ 949.946488][ T27] audit: type=1326 audit(1759303687.062:143): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=13649 comm="syz.2.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004c18eec9 code=0x7ffc0000 [ 951.813717][T13667] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 953.100865][T13667] orangefs_mount: mount request failed with -4 [ 953.395565][T13684] tipc: Enabling of bearer rejected, failed to enable media [ 956.427243][T13699] kthread_run failed with err -4 [ 958.174981][T13709] tipc: Started in network mode [ 958.181436][T13709] tipc: Node identity 0aaf9468bf4c, cluster identity 4711 [ 958.191164][T13709] tipc: Enabled bearer , priority 0 [ 958.207608][T13709] syzkaller0: entered promiscuous mode [ 958.213244][T13709] syzkaller0: entered allmulticast mode [ 958.445345][T13709] tipc: Resetting bearer [ 958.493883][T13708] tipc: Resetting bearer [ 958.566449][T13708] tipc: Disabling bearer [ 959.047017][T13719] bridge0: port 3(vlan2) entered blocking state [ 959.053410][T13719] bridge0: port 3(vlan2) entered disabled state [ 959.060055][T13719] vlan2: entered allmulticast mode [ 959.065223][T13719] bridge0: entered allmulticast mode [ 959.072676][T13719] vlan2: left allmulticast mode [ 959.077671][T13719] bridge0: left allmulticast mode [ 959.301849][T13727] tipc: Enabling of bearer rejected, failed to enable media [ 961.406389][T13749] can: request_module (can-proto-0) failed. [ 961.534260][ T27] audit: type=1326 audit(1759303698.792:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13746 comm="syz.3.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3478eec9 code=0x7ffc0000 [ 961.590786][ T27] audit: type=1326 audit(1759303698.822:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13746 comm="syz.3.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3478eec9 code=0x7ffc0000 [ 961.807952][ T27] audit: type=1326 audit(1759303698.822:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13746 comm="syz.3.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3478eec9 code=0x7ffc0000 [ 961.837057][ T27] audit: type=1326 audit(1759303698.822:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13746 comm="syz.3.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f8a3478eec9 code=0x7ffc0000 [ 962.098940][ T27] audit: type=1326 audit(1759303698.832:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13746 comm="syz.3.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8a3478ef03 code=0x7ffc0000 [ 962.122618][ T27] audit: type=1326 audit(1759303698.832:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13746 comm="syz.3.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8a3478ef03 code=0x7ffc0000 [ 962.313630][ T27] audit: type=1326 audit(1759303698.832:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13746 comm="syz.3.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3478eec9 code=0x7ffc0000 [ 962.589088][T13766] tipc: Enabling of bearer rejected, failed to enable media [ 962.652146][ T27] audit: type=1326 audit(1759303698.832:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13746 comm="syz.3.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3478eec9 code=0x7ffc0000 [ 962.737447][ T27] audit: type=1326 audit(1759303698.832:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13746 comm="syz.3.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3478eec9 code=0x7ffc0000 [ 962.800241][ T27] audit: type=1326 audit(1759303698.832:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13746 comm="syz.3.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3478eec9 code=0x7ffc0000 [ 965.792450][T13806] bridge0: port 3(vlan2) entered blocking state [ 965.799299][T13806] bridge0: port 3(vlan2) entered disabled state [ 965.806172][T13806] vlan2: entered allmulticast mode [ 965.811412][T13806] bridge0: entered allmulticast mode [ 965.822847][T13806] vlan2: left allmulticast mode [ 965.828049][T13806] bridge0: left allmulticast mode [ 969.499166][T13849] IPv6: NLM_F_CREATE should be specified when creating new route [ 970.826908][T13858] hsr0 speed is unknown, defaulting to 1000 [ 975.954432][T13912] hsr0 speed is unknown, defaulting to 1000 [ 978.729078][ T23] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 978.773302][T13947] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 979.486421][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 979.502632][ T23] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 979.529022][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 979.924250][ T23] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 979.935470][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.952085][ T23] usb 4-1: Product: syz [ 979.961482][ T23] usb 4-1: Manufacturer: syz [ 979.970555][ T23] usb 4-1: SerialNumber: syz [ 980.368466][ T23] usb 4-1: 0:2 : does not exist [ 980.385167][ T23] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 980.637724][ T23] usb 4-1: USB disconnect, device number 19 [ 981.564798][T13862] udevd[13862]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 982.826598][T13986] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1860'. [ 982.893955][T13986] fuse: Bad value for 'user_id' [ 983.167114][T13989] hsr0 speed is unknown, defaulting to 1000 [ 984.250739][T14007] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1864'. [ 984.544653][ T9747] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 984.998574][ T9747] usb 7-1: Using ep0 maxpacket: 32 [ 985.112634][ T9747] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 985.131533][ T9747] usb 7-1: config 0 has no interface number 0 [ 985.154782][ T9747] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 985.180221][ T9747] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.200616][ T9747] usb 7-1: Product: syz [ 985.204855][ T9747] usb 7-1: Manufacturer: syz [ 985.220598][ T9747] usb 7-1: SerialNumber: syz [ 985.241604][ T9747] usb 7-1: config 0 descriptor?? [ 985.263160][ T9747] radio-si470x 7-1:0.35: could not find interrupt in endpoint [ 985.279336][ T9747] radio-si470x: probe of 7-1:0.35 failed with error -5 [ 985.332094][T14013] autofs4:pid:14013:autofs_fill_super: called with bogus options [ 985.463482][ T9747] radio-raremono 7-1:0.35: this is not Thanko's Raremono. [ 985.486416][ T9747] usbhid 7-1:0.35: couldn't find an input interrupt endpoint [ 985.669200][ T9] usb 7-1: USB disconnect, device number 6 [ 985.766273][T14023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1869'. [ 985.821087][T14023] fuse: Bad value for 'user_id' [ 988.924583][T14049] autofs4:pid:14049:autofs_fill_super: called with bogus options [ 989.308748][T14058] hsr0 speed is unknown, defaulting to 1000 [ 989.532096][T14065] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1879'. [ 989.588540][T14065] fuse: Bad value for 'user_id' [ 993.086906][T14087] autofs4:pid:14087:autofs_fill_super: called with bogus options [ 993.425982][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 999.853821][T14134] autofs4:pid:14134:autofs_fill_super: called with bogus options [ 1000.099384][T14118] capability: warning: `syz.2.1891' uses 32-bit capabilities (legacy support in use) [ 1001.994690][T14147] hsr0 speed is unknown, defaulting to 1000 [ 1006.588019][T14172] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1006.635379][T14173] orangefs_mount: mount request failed with -4 [ 1007.112333][T14179] autofs4:pid:14179:autofs_fill_super: called with bogus options [ 1008.435709][ T9747] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1010.121117][ T9747] usb 4-1: Using ep0 maxpacket: 16 [ 1010.275915][ T9747] usb 4-1: device descriptor read/all, error -71 [ 1011.468991][T14210] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1012.299353][T14226] hsr0 speed is unknown, defaulting to 1000 [ 1012.395004][T14210] orangefs_mount: mount request failed with -4 [ 1013.145544][T14242] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1926'. [ 1013.645889][ T9747] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1013.966006][ T9747] usb 4-1: Using ep0 maxpacket: 16 [ 1013.987144][ T9747] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1014.017222][ T9747] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1014.044871][ T9747] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1014.065040][ T9747] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.092601][ T9747] usb 4-1: Product: syz [ 1014.103847][ T9747] usb 4-1: Manufacturer: syz [ 1014.115878][ T9747] usb 4-1: SerialNumber: syz [ 1014.156093][ T8] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1015.017809][ T9747] usb 4-1: 0:2 : does not exist [ 1015.040034][ T9747] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1015.086355][ T9747] usb 4-1: USB disconnect, device number 22 [ 1015.142355][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.163213][ T8] usb 3-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 1015.208039][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.235188][T14250] udevd[14250]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1015.279302][ T8] usb 3-1: config 0 descriptor?? [ 1015.290993][ T8] usb 3-1: bad CDC descriptors [ 1015.589250][ T5878] usb 3-1: USB disconnect, device number 18 [ 1015.919855][T14259] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1016.716244][T14261] orangefs_mount: mount request failed with -4 [ 1017.062708][T14279] fuse: Bad value for 'user_id' [ 1018.526056][ T5861] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1018.786673][ T5861] usb 3-1: Using ep0 maxpacket: 16 [ 1018.877282][ T5861] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1019.203968][ T5861] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1019.283972][ T5861] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1019.317051][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.353591][ T5861] usb 3-1: Product: syz [ 1019.365840][ T5861] usb 3-1: Manufacturer: syz [ 1019.370511][ T5861] usb 3-1: SerialNumber: syz [ 1020.947857][T14302] syz_tun: entered promiscuous mode [ 1020.954277][T14302] macvlan2: entered promiscuous mode [ 1020.963054][T14302] macvlan2: entered allmulticast mode [ 1020.971865][T14302] syz_tun: entered allmulticast mode [ 1020.985178][T14302] team0: Device macvlan2 is up. Set it down before adding it as a team port [ 1021.549356][ T5861] usb 3-1: 0:2 : does not exist [ 1021.568333][ T5861] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1021.646651][T14302] syz_tun: left allmulticast mode [ 1021.651949][T14302] syz_tun: left promiscuous mode [ 1021.694579][ T5861] usb 3-1: USB disconnect, device number 19 [ 1022.081583][T14250] udevd[14250]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1022.204913][T14309] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1023.077677][T14312] orangefs_mount: mount request failed with -4 [ 1024.612039][T14328] fuse: Bad value for 'fd' [ 1029.116525][T14365] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1960'. [ 1030.788541][ T787] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1031.182058][ T787] usb 7-1: Using ep0 maxpacket: 8 [ 1031.274078][ T787] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1031.325576][ T787] usb 7-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1031.687443][ T787] usb 7-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1031.789007][ T787] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1031.821123][ T787] usb 7-1: string descriptor 0 read error: -22 [ 1031.829835][ T787] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1031.849615][ T787] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.911716][T14371] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1032.158562][T14395] fuse: Bad value for 'fd' [ 1032.190949][ T787] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 4 proto 1 vid 0x04B8 pid 0x0202 [ 1032.476523][ T787] usb 7-1: USB disconnect, device number 7 [ 1032.553651][ T787] usblp0: removed [ 1033.597706][T14417] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1970'. [ 1033.816807][T14417] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1970'. [ 1037.156248][ T787] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1037.336034][ T787] usb 6-1: Using ep0 maxpacket: 8 [ 1037.351804][ T787] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 1037.363100][ T787] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 1037.375493][ T787] usb 6-1: config 0 has no interface number 0 [ 1037.384979][ T787] usb 6-1: config 0 interface 21 altsetting 0 has an invalid endpoint with address 0x71, skipping [ 1037.413129][ T787] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1037.427998][ T787] usb 6-1: New USB device strings: Mfr=25, Product=1, SerialNumber=0 [ 1037.453714][ T787] usb 6-1: Product: syz [ 1037.458379][ T787] usb 6-1: Manufacturer: syz [ 1037.472085][ T787] usb 6-1: config 0 descriptor?? [ 1037.690326][ T787] usb 6-1: USB disconnect, device number 6 [ 1039.178373][T14462] fuse: Bad value for 'fd' [ 1043.332991][ T787] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1043.957293][ T787] usb 6-1: Using ep0 maxpacket: 8 [ 1043.993945][T14498] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1992'. [ 1044.003682][T14498] 8021q: VLANs not supported on ip_vti0 [ 1044.034325][ T787] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1044.046191][ T787] usb 6-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1044.078744][ T787] usb 6-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1044.101839][ T787] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1044.119788][ T787] usb 6-1: string descriptor 0 read error: -22 [ 1044.127640][ T787] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1044.155039][ T787] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.168610][T14492] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1045.223804][ T787] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 4 proto 1 vid 0x04B8 pid 0x0202 [ 1045.238314][ T787] usb 6-1: USB disconnect, device number 7 [ 1045.248427][ T787] usblp0: removed [ 1045.461406][T14518] fuse: Bad value for 'fd' [ 1047.696140][ T9747] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1047.926006][ T9747] usb 4-1: Using ep0 maxpacket: 16 [ 1048.110081][ T9747] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1048.436778][ T9747] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1048.459877][ T9747] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1048.474629][ T9747] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.573562][ T9747] usb 4-1: Product: syz [ 1048.598407][ T9747] usb 4-1: Manufacturer: syz [ 1048.603098][ T9747] usb 4-1: SerialNumber: syz [ 1048.908656][ T9747] usb 4-1: 0:2 : does not exist [ 1048.932482][ T9747] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1048.995622][ T9747] usb 4-1: USB disconnect, device number 23 [ 1049.059574][T14550] udevd[14550]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1049.091045][T14555] hsr0 speed is unknown, defaulting to 1000 [ 1050.385942][T14571] fuse: Bad value for 'fd' [ 1050.471969][T14572] autofs4:pid:14572:autofs_fill_super: called with bogus options [ 1052.101551][T14584] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1053.306051][ T787] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1053.517063][ T787] usb 6-1: Using ep0 maxpacket: 16 [ 1053.622914][ T787] usb 6-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1053.745652][ T787] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1053.908778][ T787] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1053.925884][ T787] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.934072][ T787] usb 6-1: Product: syz [ 1053.943775][ T787] usb 6-1: Manufacturer: syz [ 1053.965145][ T787] usb 6-1: SerialNumber: syz [ 1054.428401][ T787] usb 6-1: 0:2 : does not exist [ 1054.522988][ T787] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1055.107185][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.663241][T14614] hsr0 speed is unknown, defaulting to 1000 [ 1055.666113][ T787] usb 6-1: USB disconnect, device number 8 [ 1056.098018][T14625] fuse: Bad value for 'fd' [ 1058.535239][T14649] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2038'. [ 1058.966156][T10333] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1059.166248][T10333] usb 7-1: Using ep0 maxpacket: 16 [ 1059.206953][T10333] usb 7-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1059.217953][T10333] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1059.275485][T10333] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1059.288325][T10333] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.306111][T10333] usb 7-1: Product: syz [ 1059.310398][T10333] usb 7-1: Manufacturer: syz [ 1059.315871][T10333] usb 7-1: SerialNumber: syz [ 1059.585533][T10333] usb 7-1: 0:2 : does not exist [ 1059.611375][T10333] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1060.135412][T10333] usb 7-1: USB disconnect, device number 8 [ 1060.192310][T14550] udevd[14550]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1060.212529][T14663] fuse: Invalid rootmode [ 1061.036710][T14668] netlink: 'syz.5.2042': attribute type 3 has an invalid length. [ 1061.460735][T14675] hsr0 speed is unknown, defaulting to 1000 [ 1061.978920][T14684] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2047'. [ 1064.098513][T14698] netlink: 'syz.5.2050': attribute type 2 has an invalid length. [ 1064.106730][T14698] netlink: 'syz.5.2050': attribute type 2 has an invalid length. [ 1064.726064][T14705] netlink: 'syz.6.2053': attribute type 9 has an invalid length. [ 1064.734955][T14705] netlink: 'syz.6.2053': attribute type 7 has an invalid length. [ 1064.743174][T14705] netlink: 'syz.6.2053': attribute type 8 has an invalid length. [ 1065.136162][ T8] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1065.346117][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 1065.353434][ T8] usb 6-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1065.375869][ T8] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1065.391098][ T8] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1065.401666][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.408308][T14711] fuse: Invalid rootmode [ 1065.417251][ T8] usb 6-1: Product: syz [ 1065.421522][ T8] usb 6-1: Manufacturer: syz [ 1065.427343][ T8] usb 6-1: SerialNumber: syz [ 1065.571451][T14715] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2057'. [ 1065.668614][ T8] usb 6-1: 0:2 : does not exist [ 1065.687970][ T8] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1065.823542][ T8] usb 6-1: USB disconnect, device number 9 [ 1065.943274][T14550] udevd[14550]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1067.864286][T14735] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 1068.043119][T14729] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1068.914234][T14736] orangefs_mount: mount request failed with -4 [ 1069.794209][T14744] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2066'. [ 1069.862598][T14746] hsr0 speed is unknown, defaulting to 1000 [ 1070.380057][ T5861] IPVS: starting estimator thread 0... [ 1070.846626][T14756] IPVS: using max 16 ests per chain, 38400 per kthread [ 1071.306186][ T787] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1071.629746][ T787] usb 6-1: Using ep0 maxpacket: 16 [ 1071.759393][ T787] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1071.811479][ T787] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1071.880747][T14767] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 1071.916020][ T787] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1071.956266][ T787] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1071.981068][ T787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.017079][ T787] usb 6-1: config 0 descriptor?? [ 1073.159291][T14775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2074'. [ 1073.218502][T14775] fuse: Unknown parameter 'user_id00000000000000000000' [ 1073.242581][ T787] microsoft 0003:045E:07DA.000D: collection stack underflow [ 1073.276877][ T787] microsoft 0003:045E:07DA.000D: item 0 2 0 12 parsing failed [ 1073.346824][ T787] microsoft 0003:045E:07DA.000D: parse failed [ 1073.353188][ T787] microsoft: probe of 0003:045E:07DA.000D failed with error -22 [ 1075.984652][ T23] usb 6-1: USB disconnect, device number 10 [ 1076.645267][T14803] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 1077.951777][T14797] hsr0 speed is unknown, defaulting to 1000 [ 1078.479401][T14817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2086'. [ 1078.535096][T14817] fuse: Unknown parameter 'user_id00000000000000000000' [ 1083.247847][T14855] can: request_module (can-proto-0) failed. [ 1083.728909][T14858] autofs4:pid:14858:autofs_fill_super: called with bogus options [ 1084.381015][T14868] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2099'. [ 1085.109524][T14868] fuse: Unknown parameter 'user_id00000000000000000000' [ 1088.132407][T14880] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2101'. [ 1088.243565][T14884] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1089.209830][T14899] autofs4:pid:14899:autofs_fill_super: called with bogus options [ 1089.267872][T14900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2109'. [ 1089.289730][T14900] fuse: Bad value for 'fd' [ 1093.176141][ T787] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1093.365984][ T787] usb 3-1: Using ep0 maxpacket: 16 [ 1093.374653][ T787] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1093.386388][ T787] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1093.403507][ T787] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1093.433059][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.456327][ T787] usb 3-1: Product: syz [ 1093.486075][ T787] usb 3-1: Manufacturer: syz [ 1093.495867][ T787] usb 3-1: SerialNumber: syz [ 1093.693281][T14937] autofs4:pid:14937:autofs_fill_super: called with bogus options [ 1093.752341][ T787] usb 3-1: 0:2 : does not exist [ 1093.859618][ T787] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1094.212044][ T787] usb 3-1: USB disconnect, device number 20 [ 1094.284541][T14939] udevd[14939]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1094.618898][T14952] pimreg: tun_chr_ioctl cmd 2147767506 [ 1095.737290][T14964] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2128'. [ 1095.824507][T14965] fuse: Bad value for 'fd' [ 1096.286706][T14978] autofs4:pid:14978:autofs_fill_super: called with bogus options [ 1097.693392][T15003] netlink: 'syz.5.2138': attribute type 20 has an invalid length. [ 1102.827856][T15034] autofs4:pid:15034:autofs_fill_super: called with bogus options [ 1106.625271][T15060] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2154'. [ 1106.677054][T15062] fuse: Unknown parameter 'user_i00000000000000000000' [ 1108.999091][T15086] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2161'. [ 1110.247173][T15099] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2165'. [ 1110.980629][T15091] 9pnet_fd: Insufficient options for proto=fd [ 1111.256260][T15108] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2167'. [ 1111.337324][T15108] fuse: Unknown parameter '0x0000000000000009' [ 1111.376072][T15110] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2168'. [ 1111.495319][T15113] fuse: Unknown parameter 'user_i00000000000000000000' [ 1111.896091][ T23] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1112.806634][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 1112.818811][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1112.843402][ T23] usb 4-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1112.878081][ T23] usb 4-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1112.893578][ T23] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1112.922324][ T23] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1112.933064][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.036412][ T23] usb 4-1: Product: syz [ 1113.054650][ T23] usb 4-1: Manufacturer: syz [ 1113.078703][ T23] usb 4-1: SerialNumber: syz [ 1113.134432][T15115] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1113.504229][ T23] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 4 proto 1 vid 0x04B8 pid 0x0202 [ 1113.531786][ T23] usb 4-1: USB disconnect, device number 24 [ 1113.543834][ T23] usblp0: removed [ 1114.801731][T15150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2180'. [ 1114.918489][T15150] fuse: Unknown parameter '0x0000000000000009' [ 1116.249347][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.384239][T15166] fuse: Unknown parameter 'user_i00000000000000000000' [ 1116.729851][T15161] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2183'. [ 1117.286784][T15175] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1118.656255][T15175] orangefs_mount: mount request failed with -4 [ 1120.607082][T15201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2194'. [ 1120.730993][T15201] fuse: Unknown parameter '0x0000000000000009' [ 1121.653313][T14826] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1121.700752][T14826] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1122.140794][T15207] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2196'. [ 1125.974156][T15246] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2208'. [ 1132.678454][T15300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2224'. [ 1132.698207][T15300] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2224'. [ 1136.153589][T15337] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1141.535295][T15381] can: request_module (can-proto-0) failed. [ 1143.697492][T15407] netlink: 'syz.5.2257': attribute type 10 has an invalid length. [ 1144.301757][T15407] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1144.384244][T15407] team0: Port device dummy0 added [ 1144.567514][T15418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2260'. [ 1144.778135][T15426] netlink: zone id is out of range [ 1148.567073][T15467] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2274'. [ 1150.926238][T15483] binder: 15482:15483 ioctl 40046205 0 returned -22 [ 1150.965646][T15483] binder: 15482:15483 ioctl c038943b 0 returned -22 [ 1151.575877][T14826] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1151.584588][ T5861] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1152.817268][T14826] usb 6-1: Using ep0 maxpacket: 16 [ 1152.910047][T14826] usb 6-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1152.921635][T14826] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1152.935204][T14826] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1152.946067][T14826] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.954932][T14826] usb 6-1: Product: syz [ 1152.960686][T14826] usb 6-1: Manufacturer: syz [ 1152.967544][T14826] usb 6-1: SerialNumber: syz [ 1153.086137][ T5861] usb 4-1: Using ep0 maxpacket: 16 [ 1153.245952][ T5861] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 1153.522786][T14826] usb 6-1: 0:2 : does not exist [ 1153.603259][T14826] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1153.648211][ T5861] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1153.658512][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.668250][ T5861] usb 4-1: Product: syz [ 1153.683228][ T5861] usb 4-1: Manufacturer: syz [ 1153.715239][T14826] usb 6-1: USB disconnect, device number 11 [ 1153.721982][ T5861] usb 4-1: SerialNumber: syz [ 1153.747897][ T5861] usb 4-1: config 0 descriptor?? [ 1154.004854][T15472] udevd[15472]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1155.934176][T14826] usb 4-1: USB disconnect, device number 25 [ 1156.037827][T15523] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2287'. [ 1160.501346][T15565] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1160.525838][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 1160.525855][ T27] audit: type=1326 audit(1759303897.782:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15567 comm="syz.6.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b878eec9 code=0x7ffc0000 [ 1160.789987][ T27] audit: type=1326 audit(1759303897.782:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15567 comm="syz.6.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b878eec9 code=0x7ffc0000 [ 1160.827814][T15574] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2303'. [ 1160.891558][ T27] audit: type=1326 audit(1759303897.782:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15567 comm="syz.6.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fa6b878eec9 code=0x7ffc0000 [ 1161.007073][ T27] audit: type=1326 audit(1759303897.782:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15567 comm="syz.6.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b878eec9 code=0x7ffc0000 [ 1161.080166][ T27] audit: type=1326 audit(1759303897.782:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15567 comm="syz.6.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b878eec9 code=0x7ffc0000 [ 1161.315326][T15587] ksmbd: Unknown IPC event: 6, ignore. [ 1161.465923][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1162.358282][ T9] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1163.098729][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1163.124425][ T9] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1163.135951][ T9] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1163.145000][ T9] usb 3-1: Manufacturer: syz [ 1163.158138][ T9] usb 3-1: config 0 descriptor?? [ 1163.930580][ T9] rc_core: IR keymap rc-hauppauge not found [ 1163.965816][ T9] Registered IR keymap rc-empty [ 1163.973637][T15599] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1163.989355][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1164.034581][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input11 [ 1164.090873][ T9] usb 3-1: USB disconnect, device number 21 [ 1164.308536][T15617] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1164.404076][T15599] orangefs_mount: mount request failed with -4 [ 1164.457453][T15619] ------------[ cut here ]------------ [ 1164.464191][T15619] WARNING: CPU: 1 PID: 15619 at fs/inode.c:389 inc_nlink+0x121/0x130 [ 1164.473535][T15619] Modules linked in: [ 1164.477993][T15619] CPU: 1 PID: 15619 Comm: syz.3.2314 Not tainted syzkaller #0 [ 1164.486342][T15619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1164.497521][T15619] RIP: 0010:inc_nlink+0x121/0x130 [ 1164.503097][T15619] Code: 58 ea ff e9 3a ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 4c ff ff ff 48 89 df e8 f9 57 ea ff e9 3f ff ff ff e8 ef 0c 93 ff <0f> 0b eb 82 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 41 57 41 [ 1164.524895][T15619] RSP: 0018:ffffc9001099fc28 EFLAGS: 00010283 [ 1164.533061][T15619] RAX: ffffffff81f28ab1 RBX: ffff88805f158628 RCX: 0000000000080000 [ 1164.542081][T15619] RDX: ffffc9000d47a000 RSI: 0000000000018b50 RDI: 0000000000018b51 [ 1164.550961][T15619] RBP: 0000000000000000 R08: ffff888057488c3b R09: 1ffff1100ae91187 [ 1164.560056][T15619] R10: dffffc0000000000 R11: ffffed100ae91188 R12: dffffc0000000000 [ 1164.568958][T15619] R13: 1ffff1100be2b0c5 R14: ffff88805f1585d0 R15: 0000000000000000 [ 1164.577892][T15619] FS: 00007f8a355fd6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1164.587881][T15619] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1164.595163][T15619] CR2: 000055557c529588 CR3: 0000000031603000 CR4: 00000000003506e0 [ 1164.604034][T15619] Call Trace: [ 1164.608886][T15619] [ 1164.612137][T15619] v9fs_vfs_mkdir_dotl+0x624/0x780 [ 1164.617868][T15619] ? v9fs_vfs_symlink_dotl+0x640/0x640 [ 1164.623925][T15619] ? capable_wrt_inode_uidgid+0x1e6/0x280 [ 1164.630514][T15619] ? inode_permission+0xf3/0x480 [ 1164.636373][T15619] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 1164.641937][T15619] ? security_inode_mkdir+0xb7/0x100 [ 1164.647905][T15619] vfs_mkdir+0x296/0x440 [ 1164.652609][T15619] do_mkdirat+0x1d4/0x440 [ 1164.657473][T15619] ? vfs_mkdir+0x440/0x440 [ 1164.662389][T15619] __x64_sys_mkdirat+0x89/0xa0 [ 1164.667722][T15619] do_syscall_64+0x55/0xb0 [ 1164.672599][T15619] ? clear_bhb_loop+0x40/0x90 [ 1164.677795][T15619] ? clear_bhb_loop+0x40/0x90 [ 1164.682964][T15619] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1164.689583][T15619] RIP: 0033:0x7f8a3478d617 [ 1164.694467][T15619] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1164.716161][T15619] RSP: 002b:00007f8a355fce68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1164.725454][T15619] RAX: ffffffffffffffda RBX: 00007f8a355fcef0 RCX: 00007f8a3478d617 [ 1164.734880][T15619] RDX: 00000000000001ff RSI: 00002000000002c0 RDI: 00000000ffffff9c [ 1164.743834][T15619] RBP: 00002000000001c0 R08: 0000000000000000 R09: 0000000000000000 [ 1164.752905][T15619] R10: 00002000000001c0 R11: 0000000000000246 R12: 00002000000002c0 [ 1164.761827][T15619] R13: 00007f8a355fceb0 R14: 0000000000000000 R15: 0000000000000000 [ 1164.770757][T15619] [ 1164.774121][T15619] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1164.782150][T15619] CPU: 1 PID: 15619 Comm: syz.3.2314 Not tainted syzkaller #0 [ 1164.790370][T15619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1164.801464][T15619] Call Trace: [ 1164.805190][T15619] [ 1164.808452][T15619] dump_stack_lvl+0x16c/0x230 [ 1164.813620][T15619] ? show_regs_print_info+0x20/0x20 [ 1164.819355][T15619] ? load_image+0x3b0/0x3b0 [ 1164.824327][T15619] panic+0x2c0/0x710 [ 1164.828644][T15619] ? bpf_jit_dump+0xd0/0xd0 [ 1164.833643][T15619] __warn+0x2e0/0x470 [ 1164.838050][T15619] ? inc_nlink+0x121/0x130 [ 1164.842918][T15619] ? inc_nlink+0x121/0x130 [ 1164.847791][T15619] report_bug+0x2be/0x4f0 [ 1164.852688][T15619] ? inc_nlink+0x121/0x130 [ 1164.857571][T15619] ? inc_nlink+0x121/0x130 [ 1164.862455][T15619] ? inc_nlink+0x123/0x130 [ 1164.867334][T15619] handle_bug+0xcf/0x120 [ 1164.872031][T15619] exc_invalid_op+0x1a/0x50 [ 1164.877134][T15619] asm_exc_invalid_op+0x1a/0x20 [ 1164.882504][T15619] RIP: 0010:inc_nlink+0x121/0x130 [ 1164.888354][T15619] Code: 58 ea ff e9 3a ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 4c ff ff ff 48 89 df e8 f9 57 ea ff e9 3f ff ff ff e8 ef 0c 93 ff <0f> 0b eb 82 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 41 57 41 [ 1164.912456][T15619] RSP: 0018:ffffc9001099fc28 EFLAGS: 00010283 [ 1164.919144][T15619] RAX: ffffffff81f28ab1 RBX: ffff88805f158628 RCX: 0000000000080000 [ 1164.927928][T15619] RDX: ffffc9000d47a000 RSI: 0000000000018b50 RDI: 0000000000018b51 [ 1164.936916][T15619] RBP: 0000000000000000 R08: ffff888057488c3b R09: 1ffff1100ae91187 [ 1164.945776][T15619] R10: dffffc0000000000 R11: ffffed100ae91188 R12: dffffc0000000000 [ 1164.954678][T15619] R13: 1ffff1100be2b0c5 R14: ffff88805f1585d0 R15: 0000000000000000 [ 1164.963575][T15619] ? inc_nlink+0x121/0x130 [ 1164.968559][T15619] ? inc_nlink+0x121/0x130 [ 1164.973715][T15619] v9fs_vfs_mkdir_dotl+0x624/0x780 [ 1164.979371][T15619] ? v9fs_vfs_symlink_dotl+0x640/0x640 [ 1164.987426][T15619] ? capable_wrt_inode_uidgid+0x1e6/0x280 [ 1164.993786][T15619] ? inode_permission+0xf3/0x480 [ 1164.999281][T15619] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 1165.005390][T15619] ? security_inode_mkdir+0xb7/0x100 [ 1165.011381][T15619] vfs_mkdir+0x296/0x440 [ 1165.016109][T15619] do_mkdirat+0x1d4/0x440 [ 1165.020906][T15619] ? vfs_mkdir+0x440/0x440 [ 1165.025796][T15619] __x64_sys_mkdirat+0x89/0xa0 [ 1165.031066][T15619] do_syscall_64+0x55/0xb0 [ 1165.035939][T15619] ? clear_bhb_loop+0x40/0x90 [ 1165.041119][T15619] ? clear_bhb_loop+0x40/0x90 [ 1165.046313][T15619] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1165.052862][T15619] RIP: 0033:0x7f8a3478d617 [ 1165.057744][T15619] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1165.080867][T15619] RSP: 002b:00007f8a355fce68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1165.090146][T15619] RAX: ffffffffffffffda RBX: 00007f8a355fcef0 RCX: 00007f8a3478d617 [ 1165.100192][T15619] RDX: 00000000000001ff RSI: 00002000000002c0 RDI: 00000000ffffff9c [ 1165.109076][T15619] RBP: 00002000000001c0 R08: 0000000000000000 R09: 0000000000000000 [ 1165.117851][T15619] R10: 00002000000001c0 R11: 0000000000000246 R12: 00002000000002c0 [ 1165.126629][T15619] R13: 00007f8a355fceb0 R14: 0000000000000000 R15: 0000000000000000 [ 1165.135437][T15619] [ 1165.139089][T15619] Kernel Offset: disabled [ 1165.143960][T15619] Rebooting in 86400 seconds..