last executing test programs: 7m17.913554996s ago: executing program 4 (id=22): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x6c, 0xff, 0x4, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0xff, 0x1, 0x0, 0x93}, 0xe) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) write(r0, &(0x7f0000001180), 0x0) shutdown(r4, 0x1) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000500)={r6, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000340)={r6, @in6={{0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x14000000}}, [0xfff, 0x5, 0x200, 0x50820bc5, 0x5, 0x2, 0x2, 0x23, 0x268130c7, 0x8, 0x3, 0x3, 0xe5, 0xb, 0x6]}, &(0x7f0000000040)=0x100) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x4b6, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvvW1pKYUWJfFHVBBRNISZdoCGsMKNxhASI3HlAmo7NE1nOk1nirSyKP+DiSSu9E9wYeLChJV7d7pzgwsTVOILfclbzMudmZZSOm3fo8x96Xw+ycm9555hvt/D9J4zPW3nBNC3LkTERkSciIgHETHeuZ50Stxul+xxr189md189WQ2iWbz3n+TVnt2LXb8m8ypznOORMTPfhzxy+TduPW19cWZSqW80qkXG9XlYn1t/epCdWa+PF9eKpWmp6Ynb167UTqyvp6v/vHljxbu/Pwvf/7mi79t/ODXWVpjnbad/ThK7a4PbcfJDEbEnQ8RLAcDnf6cyDsRPpc0Ir4UERez+7+ZdzYAQC80m+PRHN9ZBwCOu7S1Bpakhc5awFikaaHQXsM7F6NppVZvXHlYW12aa6+VTcRQ+nChUp7srBVOxFCS1ada52/qpV31axFxNiJ+M3yyVS/M1ipzeb7xAYA+dmrX/P/RcHv+BwCOuZG8EwAAes78DwD9x/wPAP3H/A8A/cf8DwD9x/wPAP3H/A8AfeWnd+9mpbnZ+fzruUdrq4u1R1fnyvXFQnV1tjBbW1kuzNdq863P7Kke9HyVWm156nqsPi42yvVGsb62fr9aW11q3G99rvf98lBPegUA7Ofs+ef/SCJi49bJVokdezmYq+F4S/NOAMjNQN4JALkZzDsBIDe+xwf22KL3LV1/RejZ0ecC9Mblr1n/h35l/R/6l/V/6F/W/6F/NZuJPf8BoM9Y4wf8/B8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+u7FWSdJCZy/wsUjTQiHidERMxFDycKFSnoyIMxHx9+Gh4aw+lXfSAMB7Sv+ddPb/ujx+aWx364nk4+HWMSJ+9bt7v30802isTGXX/7d9vfGsc72UR/4AwEG25umteXzL61dPZrdKL/N5+cP25qJZ3M1OabcMxmDrOBJDETH6/6RTb8verwwcQfyNpxHx1b36n7TWRiY6O5/ujp/FPt3T+Olb8dNWW/uY/V98+QhygX7zPBt/bu91/6VxoXXc+/4faY1Q729r/Nt8Z/xLt8e/gS7j34XDxrj+1590bXsa8fXBveIn2/GTLvEvHTL+P7/xrYvd2pq/j7gce8ffGavYqC4X62vrVxeqM/Pl+fJSqTQ9NT1589qNUrG1Rl3cWql+139uXTmzX/9Hu8QfOaD/3z1k///wyYNffHuf+N//zt6v/7l94mdz4vcOGX9m9E9dt+/O4s916f9Br/+VQ8Z/8a/1uUM+FADogfra+uJMpVJecdKzk+y92xcgDSe5nWRfAUfxPF/5gKnmPTIBH9qbmz7vTAAAAAAAAAAAAAAAgG568QdPefcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA4+vTAAAA//+0tdao") r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x29943, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'pim6reg0\x00', 0x2}) ioctl$TUNSETOWNER(r8, 0x400454cc, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) setreuid(0x0, 0xee00) close_range(r7, 0xffffffffffffffff, 0x0) 7m14.963571594s ago: executing program 4 (id=29): syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x204c0, &(0x7f0000000180)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRESDEC], 0x8, 0xfcb, &(0x7f00000018c0)="$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") r0 = socket$pptp(0x18, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x1}, 0xe) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000180)=@sg0, &(0x7f0000000040)='.\x00', &(0x7f0000000100)='ecryptfs\x00', 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000, 0x6}, 0x20) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$BLKPG(r6, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x8000000, 0x1000, 0x1}}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) syz_mount_image$hfs(&(0x7f0000000100), &(0x7f00000062c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="747970653d704351852c636f6465706167653d63703836332c00000000746f723db84f842468f8c5568bcf21a304fee0a339572c6469725f756d61736b3d30303030303030313030303030303030303030303030313000"], 0x1, 0x2e6, &(0x7f00000027c0)="$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") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_macvtap\x00'}) chdir(&(0x7f0000000140)='./file0\x00') r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @multicast2}, 0x107, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000000002}) 7m8.531616411s ago: executing program 4 (id=37): syz_open_procfs(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x53) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) ioctl$VIDIOC_S_FREQUENCY(r4, 0x402c5639, &(0x7f0000002280)={0x0, 0x1, 0x40}) ioctl$VIDIOC_G_TUNER(r4, 0xc054561d, &(0x7f0000000200)={0x0, "63ff8791919a5b70f918110cd2e1f7fbd15ec7918e806deb14c0f82379b49307", 0x3, 0x1, 0x3, 0xcd5, 0x4, 0x4, 0x400, 0x4}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r5, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='source', 0x0, 0x0) syz_mount_image$xfs(&(0x7f000000b840), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000000100)={[{@grpquota}, {@nolargeio}, {@gqnoenforce}]}, 0x1, 0xb92b, &(0x7f000000b880)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc2"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r7) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0xb0, r10, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5692}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000011c0)="b9ffddc1ddc8cdde75537d07007e", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$EXT4_IOC_MOVE_EXT(r8, 0x8004587d, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7ff}) write$FUSE_NOTIFY_INVAL_INODE(r7, 0x0, 0x0) 7m5.141977257s ago: executing program 4 (id=41): socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r1 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x2, 0x18}, &(0x7f0000000100), &(0x7f00000000c0)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0xa, 0x3, 0xf2c) r2 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) setsockopt$inet6_int(r4, 0x29, 0x24, &(0x7f0000000500)=0x40, 0x4) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000240)={0x3, 0x1, {0xffffffffffffffff}, {0xee00}, 0x7, 0x3}) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000280)={0x28, 0xffffffffffffffda, 0x0, {{0x3, 0x10001, 0x2}}}, 0x28) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x380002, @dev={0xfe, 0x80, '\x00', 0x34}, 0x692}, 0x1c) sendmsg$inet(r4, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x2000c045) io_destroy(0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x480, 0x0) socket(0x40000000015, 0x5, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x22, 0x0, 0x1) write(r0, &(0x7f0000000000)="09000000010000", 0x7) socket$nl_generic(0x10, 0x3, 0x10) 6m54.539959346s ago: executing program 4 (id=53): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x13}], 0x2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000003c0)) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f00000001c0)={0x24, 0x14, 0x105, 0x70bc2a, 0x2ddfdb7b, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "053e3e71ed07348ace"}]}, 0x24}, 0x1, 0x0, 0x0, 0x8086}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_open_dev$dri(0x0, 0x0, 0x0) r4 = fsopen(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x3, 0x0, 0xe, 0x60a00, 0xffffffffffffffff, 0xfffffff8, '\x00', 0x0, r1, 0x4, 0x5, 0x4, 0x7}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tcp_congestion(0xffffff9c, &(0x7f0000000280), 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 6m50.488459585s ago: executing program 4 (id=56): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) socket$nl_route(0x10, 0x3, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mknod$loop(0x0, 0x8, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r9, {0xe, 0x7}, {0x0, 0xfff1}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r12, {0xe, 0x7}, {0x0, 0xfff1}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0xfffffffb}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x6, 0x3}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_REGS(r13, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x800, 0x100, 0x0, 0x5700000000000000, 0x401, 0x6, 0xfffffffffffffff7, 0x0, 0x13f, 0x100000001, 0xba25, 0xfff, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x1c0080}) ioctl$KVM_RUN(r13, 0xae80, 0x0) 6m33.912533732s ago: executing program 32 (id=56): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) socket$nl_route(0x10, 0x3, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mknod$loop(0x0, 0x8, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r9, {0xe, 0x7}, {0x0, 0xfff1}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r12, {0xe, 0x7}, {0x0, 0xfff1}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0xfffffffb}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x6, 0x3}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_REGS(r13, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x800, 0x100, 0x0, 0x5700000000000000, 0x401, 0x6, 0xfffffffffffffff7, 0x0, 0x13f, 0x100000001, 0xba25, 0xfff, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x1c0080}) ioctl$KVM_RUN(r13, 0xae80, 0x0) 3m19.249536371s ago: executing program 3 (id=488): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x4, @local, 'vcan0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000005280)="b8", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000180)}, {&(0x7f0000000540)="a1032d72b8725add09e3e27228255f53fe3e73567a4965fa8b3f077d9c47ebc82317fb7f18755fbe0f006a4d4b93d1a5b16e4ed072dd75cd142eb1c38899e371e5321fbb30248aa6e860bb5b0e89d0dde67acbe581dc5427ccb16d9357bca30f19e41d74c53499c46176c8b7401d7142356bf96018c16578a347c564ea598d3b4f22abdab5d567785762e3abbf02d3928e9ec8ac75ccca6ba1df749fb26acdeecac2c97551ec3a5d55bbd02f8467130202ec42c52a8bd22f8bf98244c24fcfaf86688d8c920372e6efe52b7a1d7ef7b675f1b378cdca5c705ed36c8f7b6684b4", 0xe0}, {&(0x7f00000014c0)="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", 0x1000}, {&(0x7f0000000440)="1c94eb45a3867a8d6af4204288c0c6c2cec31f69d893c769fac0785532881c28c4147b187adb294e858cc9b626eb7e798b90d4827a10400287506512fd2f0db98c6200aa6c5833c2e2a440049b8e2f174bbf46a2dbe8695b39dc510dab23ac31d9ce5536dcfa45f20c844a06d5e10c458909a9587b0250fbceace0", 0x7b}, {&(0x7f0000000640)="e10b6765d0a119e9c0bab5f215f81feae9c5acc3a8d6079eac6f073e1f1d00d38bfc19b45186ebeed324e8d079bd0de4aedd50b423de42051ac6f30cab51f20423bbca3818d94d975dc1f611265798933bf993be801bf6d4babe49ef772142535b70af6b639838d537d5784dc6c328facb248e013ee2c90aa3912ed055", 0x7d}, {&(0x7f00000006c0)="601502bc8d85f13a1af57e098486ac4cce9bf591fb11675ad460d26ce125043554b2dbb3db3a", 0x26}], 0x6, &(0x7f0000000780)=[{0x50, 0x103, 0x3, "9862611ba7e40bc4fd19db84740b4a6a50473fdec99aa247471c1e6f38b4a0304dbc97cc1728145cffdcc4a093cbd3abf01efbe505c7e4f6bcf430b5"}, {0xd8, 0x84, 0xb, "5c72d1e57c4fc9a4de2f0e93eefea974ae64bbce9ffeaa1f56980f3f6cad5ddcaa5802de6fbc26b2486864c6bf8b31618c38ccbacf21641fa73d78e811e9892ae92cc34c181d8890a8461cd3fc05eb71ce5186bc16c1c77ab850ccfaf53e070e4d2b94ffeeba990d099b9e977c60e0a88e9dceadbdcb6b00c9bc7e823f0e6ca757ac5ae5e6e6fd5757ee5bbb2523cb7a94ed33319d5dbc5b3f0692024cef284b1a25d0a651ea8a7a08664736e98f9762e38bb28ce88d9765d855cd7f540d303f1be55da5"}, {0xf0, 0x10b, 0x4, "b1fb4da0f26d3406afc533e0fc1e022fd20965ba86ba5db3d1351b925f1d47a492097d41658466559a96ca59f68fad6ec1a46e1226b9d237cce33a9abb88e721a9fb8d1398bc64f5da5a7861aa1fd4f186f9dac161eadb598a0c1f000568732f8f011daff4910e8607e6f8ea444d301bc40db399e4ef6700fb3375de1a732d04f60d74f001a5585da6913a01c21e24f8d397525ec1049e22282d4b5a69b6bbaff3fa23454a7ee8b4665cb6dfa23c44ec671fc7ac9ea138bae41f524fa76c5663f63c2114b93e93c336b27a363161d5eb17d825e6e037545928"}, {0x78, 0x10e, 0x52f, "e24a7d48fb245d1cf0a7d987d905ce06e7593c03c8708ea3b629867e06df0d5771d4b63d701edd4c96c2078251088d19cd49086b52b8d23739f7aedb8dec66d389f9a862312dfabaf2a877feeba3469ad819314d7205ccbd618aa2b8022bf7b2ba9a74"}], 0x290}}], 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={0xffffffffffffffff}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r1], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r3 = fsopen(0x0, 0x1) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000040)={0xa}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x2) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000300)=""/206, 0xc9}], 0x3c, 0x4, 0x80000003) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) dup(0xffffffffffffffff) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x80045505, &(0x7f0000000000)=0x1) 3m18.041354614s ago: executing program 3 (id=495): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x18) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000000000000200090008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fdff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="b40010020000000071113b02b8bd81000000000000000000c160c64979378d82e729e10f86b36653a083cb54fd8c3a30e42325918845568a8d082974ff16725424a3bc84e2359d4bb3e380e1d1239cb10aa0fd25e8740a2e02f01c0adc8cd3a99f645ae3c88a09a55db3b4e657f32e97281f7e1c58536eb8e955329735500733ba5356861bae83cf129c1421eddf3b226a7a37"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0xfffe, 0x6}, 0x4) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) ioctl$TIOCSIG(r6, 0x40045436, 0xe) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000007c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x8, 0x0, 0x0, @private1, @mcast2, {[@dstopts={0x21}]}}}}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r7 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r7, 0x0, 0xce, 0x0, &(0x7f00000004c0)) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0xff]}, 0x8, 0x80800) 3m16.851754607s ago: executing program 3 (id=502): r0 = syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2) r1 = syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x810410, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x2, 0x1d6, &(0x7f0000000200)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000640)='.\x00', 0x100643c, &(0x7f0000000780)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRESHEX, @ANYRESDEC, @ANYBLOB="b1f1563f8cf9b3df43707e277e3870d9bbeca08c7c9e5ebdd62801631c9f6ff697c8ea4da0047f1529a0c7", @ANYRES8, @ANYRES64, @ANYRES16=r1, @ANYBLOB="718db7b4db9860baf49f56fdbae9ccf3cb80b447c06ddb76c43b99e1bece6e78255d5d9ffb41487b1d657af3c596b7e7c7da6f384a3b53bc6bce361261972298ab94c05d1e5763eb877aa2cb7e1e79cb81495270e83adad6dc8f7e05077fa8e426ac68e5e96e8dbfffbad9568555637d6ea9b8b3775934aab64c1879d9f5fe3c6ca03232611410cca1bad631990c8d8af498c69d225bba2c91d27c9bd5c8630ad91fd36c3333e5b715", @ANYRES32=0x0], 0x0, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="160000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r5, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r5, &(0x7f00000010c0)=""/4096, 0x1000) socket$inet6(0xa, 0x800000000000002, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x8, 0x2b, 0x0, @private2, @local, {[], {0x3c00, 0x0, 0x8}}}}}}, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x143441, 0x98) pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)}], 0x1, 0xe7b, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000032b00)={0x0, @reserved}) syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000012c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800010, &(0x7f0000000f00)={[{@uid_forget}, {@unhide}, {@volume={'volume', 0x3d, 0x4}}, {@session}, {@gid}, {@rootdir={'rootdir', 0x3d, 0x5}}, {@adinicb}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@session={'session', 0x3d, 0x10001}}, {@longad}, {@uid_ignore}]}, 0x1, 0xc43, &(0x7f00000001c0)="$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") 3m14.69923318s ago: executing program 3 (id=508): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f0000000500)=ANY=[@ANYRES64=0x0, @ANYRESDEC], 0xf, 0x2a4, &(0x7f00000001c0)="$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") truncate(&(0x7f0000000000)='./file1\x00', 0x200981) 3m11.834723596s ago: executing program 3 (id=512): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3d0, 0x100, 0x0, 0x0, 0x2e8, 0x2e8, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'veth1_vlan\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@arp={@multicast2, @loopback, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac=@random="065dcf9efb68"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'vlan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) 3m10.414679925s ago: executing program 3 (id=514): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x6) syz_open_dev$sg(0x0, 0x5, 0x484ec1) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$ax25(0x3, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 2m54.293838221s ago: executing program 33 (id=514): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x6) syz_open_dev$sg(0x0, 0x5, 0x484ec1) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$ax25(0x3, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 22.990000048s ago: executing program 2 (id=751): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$dri(0x0, 0x1ff, 0x101000) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000006c0)={0x3c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_SYNPROXY={0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xfffffffd}, @CTA_ZONE={0x6}, @CTA_NAT_DST={0x4}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x910) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x8, 0x40}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0xffffffff, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0x9, 0xe, 0x21, @local, @mcast2, 0x8000, 0x7, 0x100, 0xfffffff8}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x4, 0x8, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r4, 0x111, 0x5, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file4\x00', &(0x7f0000000040), 0x4, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'bind', '=static'}}}]}) getpid() socket$nl_route(0x10, 0x3, 0x0) capget(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000240)={0x200, 0x3, 0x1ff, 0x2, 0x3, 0x80}) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "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"}) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x48004) 22.954654708s ago: executing program 0 (id=753): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file0\x00', 0x120c0cc, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1f4, &(0x7f0000000500)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008030) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x28, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0xffffec77, @my=0x1}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=r0], 0x50) connect$bt_l2cap(r4, &(0x7f0000000140)={0x1f, 0x3, @any, 0x3, 0x1}, 0xe) 21.631887704s ago: executing program 0 (id=756): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r0, &(0x7f0000000240)="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"}, 0x20) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="030000000000000002004e2064010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000b4ff9652a8000000000000000000000000000001"], 0x190) timer_create(0x0, &(0x7f0000000340)={0x0, 0x2e, 0x0, @thr={0x0, 0x0}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) setitimer(0x1, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) fsopen(&(0x7f0000000180)='ext4\x00', 0x1) r5 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) pidfd_getfd(r6, 0xffffffffffffffff, 0x0) r7 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x8) fchdir(r8) r9 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r9, 0x0, 0x0) 17.434556926s ago: executing program 0 (id=767): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x6) syz_open_dev$sg(0x0, 0x5, 0x484ec1) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x0, 0x8) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, 0x0, 0x0) 16.800548689s ago: executing program 2 (id=771): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0xa40, 0x2e8, 0x2e8, 0xa40, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @private2, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0x2000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYBLOB="200001", @ANYRESOCT=r0, @ANYRES64=r2], 0x38}}, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r4}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) bind$unix(r4, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x400448ca, 0x0) 14.612577433s ago: executing program 2 (id=764): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x18) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000000000000200090008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fdff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r6 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="b40010020000000071113b02b8bd81000000000000000000c160c64979378d82e729e10f86b36653a083cb54fd8c3a30e42325918845568a8d082974ff16725424a3bc84e2359d4bb3e380e1d1239cb10aa0fd25e8740a2e02f01c0adc8cd3a99f645ae3c88a09a55db3b4e657f32e97281f7e1c58536eb8e955329735500733ba5356861bae83cf129c1421eddf3b226a7a37"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0xfffe, 0x6}, 0x4) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) ioctl$TIOCSIG(r7, 0x40045436, 0xe) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000007c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x8, 0x0, 0x0, @private1, @mcast2, {[@dstopts={0x21}]}}}}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r8 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r8, 0x0, 0xce, 0x0, &(0x7f00000004c0)) signalfd4(r6, &(0x7f00000000c0)={[0xff]}, 0x8, 0x80800) 13.565649353s ago: executing program 2 (id=766): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/fscaps', 0x0, 0x0) mkdirat$cgroup(r3, 0x0, 0x1ff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) setpriority(0x2, 0xffffffffffffffff, 0x4d) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x1000, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) add_key(&(0x7f00000002c0)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, 0x0, 0x1000) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000000)=0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r5, &(0x7f0000000100)={0x0, 0x80000010, 0x1}) mq_notify(r5, &(0x7f0000000180)={0x0, 0xe, 0x0, @thr={0x0, 0x0}}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f0000000040)={{@any, 0xffffffff}, 0x7, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x20000003, 0x804}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 9.813296297s ago: executing program 6 (id=770): syz_open_dev$sndctrl(&(0x7f0000000000), 0x6, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = getpid() io_uring_setup(0x30a7, &(0x7f0000000000)={0x0, 0x9dd9, 0x2000, 0x2, 0x373}) r3 = syz_pidfd_open(r2, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f00000009c0)=""/4078, 0xfee}], 0x1}, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e901b1bdbdaf6", 0x11}], 0x1, 0x0, 0x0, 0x40010}, 0x0) open_by_handle_at(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe00"], 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) add_key$keyring(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000004) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="1800d1000000fbdbbefb973d065bc3e04400", @ANYRES32=0x0, @ANYBLOB="0180000000000000140012800b0001006261746164760000040002800a0001000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 8.768777367s ago: executing program 5 (id=784): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x18) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000000000000200090008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fdff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r6 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="b40010020000000071113b02b8bd81000000000000000000c160c64979378d82e729e10f86b36653a083cb54fd8c3a30e42325918845568a8d082974ff16725424a3bc84e2359d4bb3e380e1d1239cb10aa0fd25e8740a2e02f01c0adc8cd3a99f645ae3c88a09a55db3b4e657f32e97281f7e1c58536eb8e955329735500733ba5356861bae83cf129c1421eddf3b226a7a37"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0xfffe, 0x6}, 0x4) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) ioctl$TIOCSIG(r7, 0x40045436, 0xe) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000007c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x8, 0x0, 0x0, @private1, @mcast2, {[@dstopts={0x21}]}}}}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r8 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r8, 0x0, 0xce, 0x0, &(0x7f00000004c0)) signalfd4(r6, &(0x7f00000000c0)={[0xff]}, 0x8, 0x80800) 8.241913918s ago: executing program 6 (id=775): syz_open_dev$sndctrl(&(0x7f0000000000), 0x6, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = getpid() io_uring_setup(0x30a7, &(0x7f0000000000)={0x0, 0x9dd9, 0x2000, 0x2, 0x373}) r3 = syz_pidfd_open(r2, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f00000009c0)=""/4078, 0xfee}], 0x1}, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e901b1bdbdaf6", 0x11}], 0x1, 0x0, 0x0, 0x40010}, 0x0) open_by_handle_at(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe0000"], 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) add_key$keyring(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000004) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="1800d1000000fbdbbefb973d065bc3e04400", @ANYRES32=0x0, @ANYBLOB="0180000000000000140012800b0001006261746164760000040002800a0001000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 8.241003147s ago: executing program 0 (id=786): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x6) syz_open_dev$sg(0x0, 0x5, 0x484ec1) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x0, 0x8) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, 0x0, 0x0) 8.226317918s ago: executing program 1 (id=776): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r5], 0x1}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180), 0x5c}, 0x24000080) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x54) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000340)={r11, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000080)={r12, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r13}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x103, 0x28820}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x118}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BCAST_FLOOD={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x44801}, 0x48000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xcd20}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) 6.967661963s ago: executing program 1 (id=777): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0xa40, 0x2e8, 0x2e8, 0xa40, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @private2, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0x2000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYBLOB="200001", @ANYRESOCT=r0, @ANYRES64=r2], 0x38}}, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r4}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) bind$unix(r4, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x400448ca, 0x0) 6.967385163s ago: executing program 5 (id=778): r0 = openat(0xffffffffffffff9c, 0x0, 0x208002, 0x128) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x22a80, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x3, 0x20) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e24, 0xa, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, 0x46) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) connect$inet6(r3, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x317, 0x1, 0x34, 0x9}, 0x9c) r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r3, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000200), 0x4) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x4431, &(0x7f00000088c0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081412, 0x0, 0x1, 0x0, &(0x7f0000000080)) chdir(&(0x7f00000000c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x80) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000100)={"ec5e92f40ce386330db5045bb7e4146e", 0x0, 0x0, {0xa, 0xbf0c}, {0x9, 0x3}, 0x7, [0xfffffffffffff183, 0x2, 0x9, 0x4, 0x7, 0x10, 0xcd1, 0x0, 0x0, 0xffffffff, 0x3, 0x3, 0x6, 0x7, 0x7, 0x7fffffff]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f00000015c0)={{r4}, r6, 0x18, @unused=[0x7, 0xccc1, 0x80000000, 0xb9b], @subvolid=0xfffffffffffffd81}) 5.213936627s ago: executing program 6 (id=779): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x18) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000000000000200090008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fdff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r6 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="b40010020000000071113b02b8bd81000000000000000000c160c64979378d82e729e10f86b36653a083cb54fd8c3a30e42325918845568a8d082974ff16725424a3bc84e2359d4bb3e380e1d1239cb10aa0fd25e8740a2e02f01c0adc8cd3a99f645ae3c88a09a55db3b4e657f32e97281f7e1c58536eb8e955329735500733ba5356861bae83cf129c1421eddf3b226a7a37"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0xfffe, 0x6}, 0x4) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) ioctl$TIOCSIG(r7, 0x40045436, 0xe) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000007c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x8, 0x0, 0x0, @private1, @mcast2, {[@dstopts={0x21}]}}}}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r8 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r8, 0x0, 0xce, 0x0, &(0x7f00000004c0)) signalfd4(r6, &(0x7f00000000c0)={[0xff]}, 0x8, 0x80800) 3.522071981s ago: executing program 6 (id=780): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b39de2c5000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000190000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d3aa35dd00", 0x2000, &(0x7f00000041c0)={&(0x7f0000000000)={0x50, 0x0, 0x10000, {0x7, 0x29, 0x0, 0x100000, 0x40, 0x0, 0x0, 0x457, 0x0, 0x0, 0x2, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x7, {0xe, 0xcbff, 0x0, {0x5, 0x7, 0x9, 0x1af3, 0xa, 0x80000006, 0x5, 0x6, 0xffb, 0x6000, 0x11, 0xffffffffffffffff, 0x0, 0x800003, 0x1c00}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x800, 0x90) getdents(r1, &(0x7f0000000180)=""/211, 0xd3) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, 0x0) fstat(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r6) r7 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') symlinkat(&(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001200)='./file1\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)=""/29, 0x1d) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdedH\xe5+\xf0', 0xffffffffffffffff) ioctl$VIDIOC_S_OUTPUT(r7, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000480)={0x0, @bt={0x12, 0x0, 0x0, 0x2, 0xd59f80, 0x8, 0x5, 0x7, 0x8, 0x0, 0x2, 0x596, 0x7, 0x0, 0x2e, 0xd, {0xffff945a, 0xfffffaec}, 0x3, 0xed}}) 3.521514951s ago: executing program 5 (id=781): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file0\x00', 0x120c0cc, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1f4, &(0x7f0000000500)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008030) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x28, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0xffffec77, @my=0x1}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=r0], 0x50) connect$bt_l2cap(r4, &(0x7f0000000140)={0x1f, 0x3, @any, 0x3, 0x1}, 0xe) socket$kcm(0x10, 0x2, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@private=0xa010101, @empty, 0x0, "e798888beab3af341dbec4427a73b0fbda814c5f5cd6f92215f46e0b091038f9"}, 0x3c) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="160000000702"], 0x16) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) 3.51961092s ago: executing program 1 (id=792): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x18) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000000000000200090008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fdff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r6 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="b40010020000000071113b02b8bd81000000000000000000c160c64979378d82e729e10f86b36653a083cb54fd8c3a30e42325918845568a8d082974ff16725424a3bc84e2359d4bb3e380e1d1239cb10aa0fd25e8740a2e02f01c0adc8cd3a99f645ae3c88a09a55db3b4e657f32e97281f7e1c58536eb8e955329735500733ba5356861bae83cf129c1421eddf3b226a7a37"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0xfffe, 0x6}, 0x4) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) ioctl$TIOCSIG(r7, 0x40045436, 0xe) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000007c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x8, 0x0, 0x0, @private1, @mcast2, {[@dstopts={0x21}]}}}}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r8 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r8, 0x0, 0xce, 0x0, &(0x7f00000004c0)) signalfd4(r6, &(0x7f00000000c0)={[0xff]}, 0x8, 0x80800) 3.519203631s ago: executing program 2 (id=793): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000400)='./file0\x00', 0x809, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRES8], 0x10, 0x21a, &(0x7f0000000900)="$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") 1.420847491s ago: executing program 6 (id=782): syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4f4, &(0x7f00000005c0)="$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") 1.420527982s ago: executing program 2 (id=783): syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010100020000102505a1a440000000010109024a00010100000009040000160202ff00052406000005240000000d240f0100000000000000000006240700000009057ffffd74000f000905820200020000030905030240"], 0x0) 1.420237941s ago: executing program 5 (id=785): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) 1.329177724s ago: executing program 1 (id=787): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="421c0000000000001c001280090001007866726d000000000c0002800800020002000000140003007866726d2fe000"/56], 0x50}}, 0x0) 1.073134378s ago: executing program 5 (id=788): syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x80, &(0x7f0000000140)={[{@nodots}, {@fat=@check_strict}, {@dots}, {@fat=@check_normal}, {@nodots}, {@fat=@dmask={'dmask', 0x3d, 0xfe}}, {@dots}, {@nodots}, {@nodots}]}, 0x1, 0x250, &(0x7f0000000900)="$eJzs281qnFUYB/B/02hraj78qjYbD7rRzaDxBgylBTGgxEb8AOEtmeiQcSbMDJgRwaxdeRNuikt3gugF5C7cBUG66sqRZGozTSNiaToJ8/ttzjP8meE5PC/DWbxn76Pvv9zc6NY2ql6mzpVMJzu5kyxkKuczdO7uOnVQP5lRO3n9h/Xb333w8SfvLq+sXFst5fryjbeWSilzL//y1Tc/vvJr79KHP839fCG7C5/t/bn0++7l3St7f934otEtjW5ptXulKjfb7V51s1kv643uZq2U95v1qlsvjVa33rkv32i2t7b6pWqtz85sderdbqla/bJZ75deu/Q6/VJ9XjVapVarldmZ8F/Wbq2uVsvj7oKT1eksV1eTLD6QrN0aS0MAwFg5/0+aqZH6Yc//U4+yIU7Y/vn/02On5vwPAAAAAAAAAAAAAABnwZ3BYH4wGMz/sz6RHNzwGdz9/FSSmSSXkjydZDbJXJL5JAtJnknybJLnkjyf5IUkl5O8mOSlJFdGfmvce+VB5j/ZzH+ymf9kG7m4ezH5Y2d7bXttuA7z6++sXHujHFg4/Nbt7e218/fyN4d5uT+/cPDc7OdLx+YX89qrw3w/u/reypF8Mesnv/2JVyv3HDvfWu3f8mE18nwcmd90Fqcf2zZ4SN3+15tVs1nvnLri21Pf4dkqfsupaENxRoox/zHxWBwOfdydAAAAAAAAAAAA8H8cvv/19om9TjjuPQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBRfwcAAP//9EsEOg==") rmdir(&(0x7f0000000080)='./file0\x00') 1.067413029s ago: executing program 1 (id=789): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x6) syz_open_dev$sg(0x0, 0x5, 0x484ec1) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x0, 0x8) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8f}, 0x19) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 912.007132ms ago: executing program 0 (id=790): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000002000000", @ANYRES32=r2, @ANYBLOB="0c009900f400000017000000080026007f17"], 0x40}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) 878.972053ms ago: executing program 6 (id=791): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0xfc, 0x53e, &(0x7f0000000940)="$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") renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x2) 211.482606ms ago: executing program 5 (id=794): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000000)={0x1, &(0x7f0000144300)=[{0x6000004, 0xffffffffffffffa9, 0x0, 0x7, 0x80000000}]}) 198.968796ms ago: executing program 0 (id=795): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x185, &(0x7f0000000500)="$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") listxattr(&(0x7f00000002c0)='./file2\x00', 0x0, 0x0) 0s ago: executing program 1 (id=796): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x5e04, 0x0, 0x90, [0x0, 0x0, 0x200000000140], 0x2, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) kernel console output (not intermixed with test programs): e) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 263.365999][ T5600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.198'. [ 263.615445][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880274af800: rx timeout, send abort [ 263.989064][ T5592] siw: device registration error -23 [ 264.066169][ T5592] loop0: detected capacity change from 0 to 164 [ 264.382507][ T5592] rock: directory entry would overflow storage [ 264.450593][ T5592] rock: sig=0x4f50, size=4, remaining=3 [ 264.490988][ T5592] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 265.192443][ T5612] siw: device registration error -23 [ 268.384742][ T26] audit: type=1326 audit(1758935803.416:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5626 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32c18eec9 code=0x7ffc0000 [ 268.912181][ T26] audit: type=1326 audit(1758935803.436:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5626 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32c18eec9 code=0x7ffc0000 [ 269.006614][ T26] audit: type=1326 audit(1758935803.556:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5626 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32c18eec9 code=0x7ffc0000 [ 269.042921][ T26] audit: type=1326 audit(1758935803.566:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5626 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32c18eec9 code=0x7ffc0000 [ 269.065578][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.090329][ T26] audit: type=1326 audit(1758935803.586:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5626 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fd32c18eec9 code=0x7ffc0000 [ 269.120995][ T26] audit: type=1326 audit(1758935803.596:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5626 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32c18eec9 code=0x7ffc0000 [ 269.146671][ T26] audit: type=1326 audit(1758935803.596:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5626 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32c18eec9 code=0x7ffc0000 [ 269.168791][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.177296][ T26] audit: type=1326 audit(1758935803.746:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5626 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd32c18eec9 code=0x7ffc0000 [ 269.199413][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.238255][ T26] audit: type=1326 audit(1758935803.746:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5626 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32c18eec9 code=0x7ffc0000 [ 269.285317][ T5654] netlink: 28 bytes leftover after parsing attributes in process `syz.5.207'. [ 269.308928][ T26] audit: type=1326 audit(1758935803.746:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5626 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd32c18eec9 code=0x7ffc0000 [ 269.331187][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.719240][ T5655] fuse: root generation should be zero [ 270.260481][ T5674] loop1: detected capacity change from 0 to 128 [ 270.665829][ T5673] loop3: detected capacity change from 0 to 256 [ 270.676092][ T128] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 270.696517][ T5674] FAT-fs (loop1): bogus number of reserved sectors [ 270.703396][ T5674] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 270.713117][ T5674] FAT-fs (loop1): Can't find a valid FAT filesystem [ 270.728404][ T5673] FAT-fs (loop3): count of clusters too big (66845694) [ 270.735459][ T5673] FAT-fs (loop3): Can't find a valid FAT filesystem [ 272.051300][ T5673] loop3: detected capacity change from 0 to 32768 [ 272.086099][ T5673] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 272.094862][ T5673] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 272.122471][ T4465] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 272.154173][ T5673] syz.3.211: attempt to access beyond end of device [ 272.154173][ T5673] loop3: rw=12288, sector=549755814040, nr_sectors = 8 limit=32768 [ 272.168801][ T5673] gfs2: fsid=syz:syz.0: can't acquire journal inode glock: -5 [ 272.197971][ T5674] loop1: detected capacity change from 0 to 1024 [ 272.205487][ T5674] EXT4-fs: Ignoring removed nobh option [ 272.211398][ T5674] EXT4-fs: Ignoring removed bh option [ 272.227065][ T5674] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 272.252737][ T128] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 272.272132][ T128] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 272.281527][ T128] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.289712][ T128] usb 1-1: Product: syz [ 272.294012][ T128] usb 1-1: Manufacturer: syz [ 272.298786][ T128] usb 1-1: SerialNumber: syz [ 272.329510][ T128] usb 1-1: config 0 descriptor?? [ 272.434177][ T5674] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 272.544710][ T128] usb 1-1: can't set config #0, error -71 [ 272.766358][ T128] usb 1-1: USB disconnect, device number 2 [ 273.019563][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 273.523780][ T5694] ptrace attach of "./syz-executor exec"[5696] was attempted by "./syz-executor exec"[5694] [ 274.659925][ T5698] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 274.976838][ T5706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.217'. [ 275.514219][ T5698] loop0: detected capacity change from 0 to 256 [ 275.789377][ T5698] exfat: Bad value for 'umask' [ 277.974261][ T5723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.221'. [ 277.983882][ T5723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.032381][ T5727] loop3: detected capacity change from 0 to 512 [ 278.243524][ T5727] EXT4-fs (loop3): 1 orphan inode deleted [ 278.249394][ T5727] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 278.263605][ T5727] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.309232][ T4465] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 278.511008][ T5723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.724748][ T5731] tmpfs: Bad value for 'mpol' [ 278.875802][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 280.050376][ T5747] loop1: detected capacity change from 0 to 512 [ 280.071254][ T5747] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 280.093375][ T5751] loop0: detected capacity change from 0 to 512 [ 280.113268][ T5752] loop3: detected capacity change from 0 to 8 [ 280.127933][ T5747] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 150994949)! [ 280.168431][ T5751] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 280.199845][ T5747] EXT4-fs (loop1): group descriptors corrupted! [ 280.209296][ T5752] squashfs image failed sanity check [ 280.333636][ T4617] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 280.358327][ T5751] UDF-fs: Scanning with blocksize 512 failed [ 280.404383][ T5757] loop5: detected capacity change from 0 to 512 [ 280.488386][ T5751] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 280.495947][ T5751] UDF-fs: Scanning with blocksize 1024 failed [ 280.619083][ T5751] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 280.668077][ T5751] UDF-fs: Scanning with blocksize 2048 failed [ 281.089780][ T5760] netlink: 32 bytes leftover after parsing attributes in process `syz.1.230'. [ 281.113643][ T5751] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 281.177926][ T14] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 281.325179][ T5751] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 281.339036][ T4312] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 281.385315][ T14] usb 4-1: unable to get BOS descriptor or descriptor too short [ 281.415971][ T14] usb 4-1: not running at top speed; connect to a high speed hub [ 281.446985][ T14] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.482146][ T14] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 281.523955][ T14] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 281.539781][ T4312] usb 6-1: config 201 has an invalid interface number: 249 but max is 0 [ 281.690421][ T4312] usb 6-1: config 201 has an invalid descriptor of length 255, skipping remainder of the config [ 281.705665][ T4312] usb 6-1: config 201 has no interface number 0 [ 281.717973][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.717979][ T4312] usb 6-1: config 201 interface 249 altsetting 4 has an invalid endpoint with address 0xF1, skipping [ 281.740374][ T4312] usb 6-1: config 201 interface 249 altsetting 4 endpoint 0x3 has invalid maxpacket 65535, setting to 64 [ 281.750056][ T14] usb 4-1: Product: syz [ 281.902083][ T4312] usb 6-1: config 201 interface 249 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 281.918788][ T14] usb 4-1: Manufacturer: syz [ 281.924015][ T4312] usb 6-1: config 201 interface 249 has no altsetting 0 [ 281.945692][ T4312] usb 6-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 281.951356][ T14] usb 4-1: SerialNumber: syz [ 282.192410][ T4312] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.196899][ T14] usb 4-1: 0:2 : does not exist [ 282.316822][ T4312] usb 6-1: Product: syz [ 282.339850][ T4312] usb 6-1: Manufacturer: syz [ 282.344601][ T4312] usb 6-1: SerialNumber: syz [ 282.365018][ T5768] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 282.400360][ T14] usb 4-1: USB disconnect, device number 2 [ 284.246398][ T5789] loop2: detected capacity change from 0 to 32768 [ 284.305913][ T4312] ath6kl: Failed to submit usb control message: -71 [ 284.329122][ T5789] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 284.385516][ T5789] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 284.492658][ T4312] ath6kl: unable to send the bmi data to the device: -71 [ 284.624786][ T4312] ath6kl: Unable to send get target info: -71 [ 284.690969][ T4465] udevd[4465]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 284.711300][ T4312] ath6kl: Failed to init ath6kl core: -71 [ 284.886750][ T4312] ath6kl_usb: probe of 6-1:201.249 failed with error -71 [ 284.929994][ T4312] usb 6-1: USB disconnect, device number 2 [ 285.497897][ T14] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 285.975631][ T5810] netlink: 'syz.0.237': attribute type 10 has an invalid length. [ 285.992274][ T5810] batman_adv: batadv0: Adding interface: team0 [ 286.018863][ T5810] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.221553][ T14] usb 4-1: New USB device found, idVendor=0bfd, idProduct=001d, bcdDevice=f2.28 [ 286.252788][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.285902][ T5799] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 286.362014][ T14] usb 4-1: Product: syz [ 286.373651][ T5810] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 286.478011][ T5799] usb 6-1: Using ep0 maxpacket: 32 [ 286.539815][ T14] usb 4-1: Manufacturer: syz [ 286.544942][ T14] usb 4-1: SerialNumber: syz [ 286.560673][ T14] usb 4-1: config 0 descriptor?? [ 286.575451][ T14] kvaser_usb 4-1:0.0: Cannot get usb endpoint(s) [ 286.586090][ T5799] usb 6-1: config 0 has an invalid interface number: 231 but max is 0 [ 287.321971][ T14] usb 4-1: USB disconnect, device number 3 [ 287.330296][ T4279] ocfs2: Unmounting device (7,2) on (node local) [ 287.345379][ T5799] usb 6-1: config 0 has no interface number 0 [ 287.371812][ T5816] netlink: 'syz.0.237': attribute type 10 has an invalid length. [ 287.380254][ T5799] usb 6-1: config 0 interface 231 has no altsetting 0 [ 287.419060][ T5799] usb 6-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=21.78 [ 287.480491][ T5816] netlink: 2 bytes leftover after parsing attributes in process `syz.0.237'. [ 287.494134][ T5799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.503472][ T5799] usb 6-1: Product: syz [ 287.507697][ T5799] usb 6-1: Manufacturer: syz [ 287.517647][ T5816] device team0 entered promiscuous mode [ 287.525279][ T5799] usb 6-1: SerialNumber: syz [ 287.659826][ T5799] usb 6-1: config 0 descriptor?? [ 287.692634][ T5816] device team_slave_0 entered promiscuous mode [ 287.757698][ T5816] device team_slave_1 entered promiscuous mode [ 287.933847][ T5799] asix 6-1:0.231 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 288.107489][ T5822] netlink: 32 bytes leftover after parsing attributes in process `syz.1.243'. [ 288.135481][ T5799] asix: probe of 6-1:0.231 failed with error -71 [ 288.209215][ T5799] usb 6-1: USB disconnect, device number 3 [ 288.231039][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.248578][ T5816] batman_adv: batadv0: Interface activated: team0 [ 288.255767][ T5816] batman_adv: batadv0: Interface deactivated: team0 [ 288.586744][ T5816] batman_adv: batadv0: Removing interface: team0 [ 288.886672][ T5816] bridge0: port 3(team0) entered blocking state [ 288.901226][ T5816] bridge0: port 3(team0) entered disabled state [ 288.945047][ T5816] bridge0: port 3(team0) entered blocking state [ 288.951994][ T5816] bridge0: port 3(team0) entered forwarding state [ 289.166237][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 289.166288][ T26] audit: type=1326 audit(1758935824.216:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5825 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499898eec9 code=0x7ffc0000 [ 289.209346][ T26] audit: type=1326 audit(1758935824.256:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5825 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499898eec9 code=0x7ffc0000 [ 290.389166][ T26] audit: type=1326 audit(1758935825.446:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5825 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499898eec9 code=0x7ffc0000 [ 290.599929][ T26] audit: type=1326 audit(1758935825.446:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5825 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499898eec9 code=0x7ffc0000 [ 290.622349][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.054063][ T26] audit: type=1326 audit(1758935825.456:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5825 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f499898eec9 code=0x7ffc0000 [ 291.108130][ T26] audit: type=1326 audit(1758935825.456:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5825 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499898eec9 code=0x7ffc0000 [ 291.172376][ T26] audit: type=1326 audit(1758935825.456:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5825 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499898eec9 code=0x7ffc0000 [ 291.848349][ T26] audit: type=1326 audit(1758935825.456:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5825 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f499898eec9 code=0x7ffc0000 [ 291.912759][ T26] audit: type=1326 audit(1758935825.456:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5825 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499898eec9 code=0x7ffc0000 [ 292.584079][ T5840] sctp: failed to load transform for md5: -4 [ 292.609861][ T26] audit: type=1326 audit(1758935825.456:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5825 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499898eec9 code=0x7ffc0000 [ 293.048101][ T4341] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 293.247945][ T4341] usb 6-1: Using ep0 maxpacket: 8 [ 293.562025][ T4341] usb 6-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=31.1f [ 293.619152][ T4341] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.666594][ T4341] usb 6-1: Product: syz [ 293.675415][ T4341] usb 6-1: Manufacturer: syz [ 293.704602][ T4341] usb 6-1: SerialNumber: syz [ 293.767062][ T5875] loop3: detected capacity change from 0 to 8 [ 293.768822][ T4341] usb 6-1: config 0 descriptor?? [ 293.779922][ T5875] SQUASHFS error: zlib decompression failed, data probably corrupt [ 293.817351][ T5879] loop0: detected capacity change from 0 to 164 [ 293.833452][ T4341] (null): radio-mr800 - initialization failed [ 293.835260][ T5875] SQUASHFS error: Failed to read block 0x9b: -5 [ 293.860915][ T4341] radio-mr800: probe of 6-1:0.0 failed with error -22 [ 293.874556][ T5875] SQUASHFS error: Unable to read metadata cache entry [99] [ 293.888721][ T4341] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 293.901564][ T5879] Unable to read rock-ridge attributes [ 293.916725][ T5875] SQUASHFS error: Unable to read inode 0x127 [ 294.024909][ T4394] usb 6-1: USB disconnect, device number 4 [ 294.164843][ T5884] loop0: detected capacity change from 0 to 64 [ 294.198926][ T22] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 294.241194][ T4465] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 294.428537][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 294.470116][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 294.485001][ T22] usb 2-1: New USB device found, idVendor=12b8, idProduct=ec62, bcdDevice= 4.34 [ 294.507879][ T14] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 294.523993][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.638445][ T22] usb 2-1: config 0 descriptor?? [ 294.686855][ T22] cp210x 2-1:0.0: cp210x converter detected [ 294.888217][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 294.981229][ T14] usb 3-1: config 1 interface 0 altsetting 111 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 295.009507][ T22] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 295.038012][ T14] usb 3-1: config 1 interface 0 has no altsetting 0 [ 295.048134][ T22] cp210x 2-1:0.0: querying part number failed [ 295.063510][ T14] usb 3-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 295.098317][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.128458][ T22] usb 2-1: cp210x converter now attached to ttyUSB0 [ 295.142795][ T14] usb 3-1: Product: syz [ 295.147062][ T14] usb 3-1: Manufacturer: syz [ 295.190170][ T22] usb 2-1: USB disconnect, device number 4 [ 295.206096][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 295.206112][ T26] audit: type=1326 audit(1758935830.256:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5888 comm="syz.3.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32c18eec9 code=0x7ffc0000 [ 295.253728][ T26] audit: type=1326 audit(1758935830.256:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5888 comm="syz.3.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32c18eec9 code=0x7ffc0000 [ 295.270299][ T14] usb 3-1: SerialNumber: syz [ 295.289141][ T22] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 295.306538][ T22] cp210x 2-1:0.0: device disconnected [ 295.353940][ T26] audit: type=1326 audit(1758935830.296:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5888 comm="syz.3.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fd32c18eec9 code=0x7ffc0000 [ 295.389569][ T26] audit: type=1326 audit(1758935830.446:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5888 comm="syz.3.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32c18eec9 code=0x7ffc0000 [ 295.416390][ T26] audit: type=1326 audit(1758935830.446:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5888 comm="syz.3.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32c18eec9 code=0x7ffc0000 [ 295.472052][ T5899] loop0: detected capacity change from 0 to 512 [ 295.517316][ T5899] EXT4-fs error (device loop0): __ext4_fill_super:5404: inode #2: comm syz.0.262: casefold flag without casefold feature [ 295.559752][ T5899] EXT4-fs (loop0): get root inode failed [ 295.566332][ T5899] EXT4-fs (loop0): mount failed [ 295.804951][ T4256] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 295.820908][ T14] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input8 [ 295.853365][ T3622] bcm5974 3-1:1.0: could not read from device [ 296.132578][ T3622] bcm5974 3-1:1.0: could not read from device [ 296.140188][ T4256] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.155709][ T3622] bcm5974 3-1:1.0: could not read from device [ 296.157792][ T14] usb 3-1: USB disconnect, device number 2 [ 296.171457][ T4256] usb 6-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 296.188547][ T5799] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 296.286238][ T3622] bcm5974 3-1:1.0: could not read from device [ 296.407732][ T5799] usb 1-1: config 4 has an invalid interface number: 88 but max is 0 [ 296.443324][ T5799] usb 1-1: config 4 has no interface number 0 [ 296.499747][ T5799] usb 1-1: config 4 interface 88 altsetting 119 has a duplicate endpoint with address 0xB, skipping [ 296.583447][ T5799] usb 1-1: config 4 interface 88 has no altsetting 0 [ 296.869182][ T4256] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.887757][ T4256] usb 6-1: Product: syz [ 296.893211][ T4256] usb 6-1: Manufacturer: syz [ 296.903609][ T4256] usb 6-1: SerialNumber: syz [ 296.963392][ T4256] usb 6-1: config 0 descriptor?? [ 297.038398][ T5799] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 297.047604][ T5799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.051346][ T4256] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 297.064840][ T5799] usb 1-1: Product: syz [ 297.071302][ T5799] usb 1-1: Manufacturer: syz [ 297.076541][ T5799] usb 1-1: SerialNumber: syz [ 297.158500][ T4256] dvb-usb: bulk message failed: -22 (3/0) [ 297.180199][ T5919] loop3: detected capacity change from 0 to 128 [ 297.263884][ T4256] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 297.289984][ T4256] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 297.292975][ T4617] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 297.317790][ T4256] usb 6-1: media controller created [ 297.341171][ T4256] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 297.361212][ T4256] dvb-usb: bulk message failed: -22 (6/0) [ 297.367563][ T4256] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 297.382604][ T4256] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input9 [ 297.441825][ T4256] dvb-usb: schedule remote query interval to 150 msecs. [ 297.458389][ T4256] dvb-usb: bulk message failed: -22 (3/0) [ 297.469130][ T4438] usb 1-1: USB disconnect, device number 3 [ 297.504168][ T4256] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 297.556107][ T4256] usb 6-1: USB disconnect, device number 5 [ 297.566488][ T5930] loop3: detected capacity change from 0 to 512 [ 297.581116][ T4617] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 297.618007][ T14] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 297.629883][ T5930] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 297.664121][ T4256] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 297.679781][ T5928] loop1: detected capacity change from 0 to 4096 [ 297.686447][ T5930] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 297.727953][ T5930] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 297.756678][ T5928] ntfs: volume version 3.1. [ 297.772234][ T5930] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 297.788176][ T5930] EXT4-fs (loop3): failed to initialize system zone (-117) [ 297.823855][ T14] usb 3-1: New USB device found, idVendor=049f, idProduct=0033, bcdDevice=67.bf [ 297.832655][ T5930] EXT4-fs (loop3): mount failed [ 297.838219][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.838247][ T14] usb 3-1: Product: syz [ 297.838263][ T14] usb 3-1: Manufacturer: syz [ 297.838279][ T14] usb 3-1: SerialNumber: syz [ 297.840949][ T14] usb 3-1: config 0 descriptor?? [ 298.180575][ T5799] usb 3-1: USB disconnect, device number 3 [ 298.834510][ T5945] loop3: detected capacity change from 0 to 64 [ 299.237896][ T5799] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 299.268689][ T14] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 299.354549][ T5951] loop5: detected capacity change from 0 to 512 [ 299.422289][ T5951] EXT4-fs: Ignoring removed bh option [ 299.440457][ T5799] usb 2-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 299.448045][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 299.472862][ T5799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.475571][ T14] usb 1-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 299.544776][ T5799] usb 2-1: config 0 descriptor?? [ 299.592778][ T5799] pwc: Creative Labs Webcam 5 detected. [ 299.596739][ T5951] EXT4-fs error (device loop5): ext4_do_update_inode:5254: inode #15: comm syz.5.276: corrupted inode contents [ 299.833425][ T14] usb 1-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 299.850553][ T5951] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 299.860132][ T5799] pwc: Failed to set LED on/off time (-71) [ 299.875120][ T5951] EXT4-fs error (device loop5): ext4_do_update_inode:5254: inode #15: comm syz.5.276: corrupted inode contents [ 299.888886][ T5799] pwc: send_video_command error -71 [ 299.896580][ T5799] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 299.928449][ T5799] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 299.949023][ T5799] usb 2-1: USB disconnect, device number 5 [ 300.040222][ T5951] EXT4-fs error (device loop5): ext4_evict_inode:327: inode #15: comm syz.5.276: mark_inode_dirty error [ 300.090240][ T14] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 300.119702][ T5951] EXT4-fs (loop5): 1 orphan inode deleted [ 300.126365][ T5951] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 300.247708][ T5962] loop3: detected capacity change from 0 to 128 [ 300.301456][ T5962] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 300.308545][ T14] usb 1-1: config 1 interface 0 has no altsetting 0 [ 300.345777][ T5962] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 300.345851][ T5170] EXT4-fs (loop5): unmounting filesystem. [ 300.362136][ T5962] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 300.390696][ T14] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 300.412206][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.432235][ T5962] UDF-fs: Scanning with blocksize 512 failed [ 300.443062][ T14] usb 1-1: Product: syz [ 300.459860][ T14] usb 1-1: Manufacturer: syz [ 300.464550][ T14] usb 1-1: SerialNumber: syz [ 300.484702][ T5962] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 300.499202][ T5962] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 300.511542][ T5962] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 300.520241][ T5940] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 300.531254][ T5940] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 300.540271][ T5962] UDF-fs: Scanning with blocksize 1024 failed [ 300.553463][ T5962] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 300.577132][ T5962] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 300.597052][ T5962] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 300.605722][ T5962] UDF-fs: Scanning with blocksize 2048 failed [ 300.622937][ T5962] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 300.655572][ T5966] loop5: detected capacity change from 0 to 512 [ 300.665318][ T5962] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 300.676645][ T5962] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 300.689495][ T5962] UDF-fs: Scanning with blocksize 4096 failed [ 300.695785][ T5962] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 300.791299][ T14] usb 1-1: bad CDC descriptors [ 300.835876][ T14] usb 1-1: USB disconnect, device number 4 [ 301.064347][ T5972] loop1: detected capacity change from 0 to 2048 [ 301.085332][ T5972] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 301.377961][ T4256] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 301.567898][ T4256] usb 4-1: Using ep0 maxpacket: 16 [ 301.575634][ T4256] usb 4-1: unable to get BOS descriptor or descriptor too short [ 301.592353][ T4256] usb 4-1: config 13 has an invalid interface number: 50 but max is 0 [ 301.610301][ T4256] usb 4-1: config 13 has no interface number 0 [ 301.624493][ T4256] usb 4-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 301.642394][ T4256] usb 4-1: config 13 interface 50 has no altsetting 0 [ 301.655297][ T4256] usb 4-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 301.669930][ T4256] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.679536][ T4256] usb 4-1: Product: syz [ 301.686241][ T4256] usb 4-1: Manufacturer: syz [ 301.691119][ T4256] usb 4-1: SerialNumber: syz [ 301.708273][ T5974] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 301.768307][ T5993] loop2: detected capacity change from 0 to 64 [ 301.782568][ T5993] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 301.926946][ T5993] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop2 [ 301.981201][ T5991] loop1: detected capacity change from 0 to 2048 [ 301.993809][ T4256] usb 4-1: MIDIStreaming interface descriptor not found [ 302.031507][ T5991] hpfs: filesystem error: dir band size mismatch: dir_band_start==7b318cc2, dir_band_end==7b318cc3, n_dir_band==00000000; already mounted read-only [ 302.143148][ T6000] loop5: detected capacity change from 0 to 128 [ 302.172605][ T4256] usb 4-1: USB disconnect, device number 4 [ 302.204057][ T5999] loop0: detected capacity change from 0 to 128 [ 302.255841][ T5999] befs: (loop0): No write support. Marking filesystem read-only [ 302.346770][ T6002] loop2: detected capacity change from 0 to 512 [ 302.361629][ T5999] befs: (loop0): invalid magic header [ 302.455349][ T6002] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 302.504387][ T4282] Bluetooth: hci5: unexpected subevent 0x0e length: 30 > 15 [ 302.589411][ T4464] udevd[4464]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 302.626781][ T6002] EXT4-fs (loop2): orphan cleanup on readonly fs [ 303.158341][ T6002] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 303.227181][ T6002] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 303.354002][ T6002] EXT4-fs error (device loop2): ext4_acquire_dquot:6816: comm syz.2.293: Failed to acquire dquot type 1 [ 303.413891][ T6002] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.293: bg 0: block 40: padding at end of block bitmap is not set [ 303.573245][ T6002] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 303.626439][ T6002] EXT4-fs (loop2): 1 truncate cleaned up [ 303.754226][ T6002] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 304.071305][ T6017] loop0: detected capacity change from 0 to 4096 [ 304.168095][ T6017] ntfs: volume version 3.1. [ 304.208844][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 304.333793][ T6029] loop1: detected capacity change from 0 to 8 [ 304.343585][ T6030] loop3: detected capacity change from 0 to 128 [ 304.383769][ T4256] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 304.455328][ T6030] ufs: Unable to do repair on error, will lock lock instead [ 304.500876][ T6030] ufs: You didn't specify the type of your ufs filesystem [ 304.500876][ T6030] [ 304.500876][ T6030] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 304.500876][ T6030] [ 304.500876][ T6030] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 304.628082][ T4256] usb 6-1: Using ep0 maxpacket: 16 [ 304.637297][ T6029] SQUASHFS error: lzo decompression failed, data probably corrupt [ 304.650847][ T4256] usb 6-1: unable to get BOS descriptor or descriptor too short [ 304.658067][ T6029] SQUASHFS error: Failed to read block 0x91: -5 [ 304.664896][ T6029] SQUASHFS error: Unable to read metadata cache entry [8f] [ 304.672324][ T6029] SQUASHFS error: Unable to read inode 0x11f [ 304.682700][ T6030] ufs: ufstype=old is supported read-only [ 304.708626][ T4256] usb 6-1: config 0 has an invalid interface number: 68 but max is 0 [ 304.812806][ T4256] usb 6-1: config 0 has no interface number 0 [ 304.826861][ T4256] usb 6-1: config 0 interface 68 has no altsetting 0 [ 304.833929][ T6030] ufs: ufs_fill_super(): bad magic number [ 304.843524][ T4256] usb 6-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=5f.25 [ 304.853449][ T4256] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.861836][ T4256] usb 6-1: Product: syz [ 304.866259][ T4256] usb 6-1: Manufacturer: syz [ 304.871581][ T4256] usb 6-1: SerialNumber: syz [ 304.885437][ T4256] usb 6-1: config 0 descriptor?? [ 305.104029][ T4256] esd_usb 6-1:0.68: sending version message failed [ 305.116413][ T4256] esd_usb: probe of 6-1:0.68 failed with error -22 [ 305.144155][ T4256] usb 6-1: USB disconnect, device number 6 [ 305.644556][ T6049] loop0: detected capacity change from 0 to 2048 [ 305.678679][ T6052] loop2: detected capacity change from 0 to 8192 [ 305.713333][ T6052] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 305.731043][ T6052] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 305.742754][ T4282] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 305.753664][ T4282] Bluetooth: hci2: Injecting HCI hardware error event [ 305.763615][ T4285] Bluetooth: hci2: hardware error 0x00 [ 305.771305][ T6052] REISERFS (device loop2): using ordered data mode [ 305.785202][ T6049] loop0: p2 < > p3 < > [ 305.793376][ T6049] loop0: partition table partially beyond EOD, truncated [ 305.816769][ T6052] reiserfs: using flush barriers [ 305.859353][ T6049] loop0: p2 start 4278190080 is beyond EOD, truncated [ 305.893077][ T6052] REISERFS (device loop2): journal params: device ram0, size 127, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30 [ 305.953796][ T4312] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 306.012893][ T6052] REISERFS (device loop2): checking transaction log (ram0) [ 306.068277][ T6052] REISERFS warning: reiserfs-5085 is_leaf: item length seems wrong: *3.5*[1 2 0x0 IND], item_len 0, item_location 4064, free_space(entry_count) 0 [ 306.094284][ T6052] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 306.106257][ T6052] REISERFS (device loop2): Remounting filesystem read-only [ 306.119946][ T6052] REISERFS error (device loop2): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 306.154502][ T6052] REISERFS warning (device loop2): reiserfs_fill_super: corrupt root inode, run fsck [ 306.247999][ T4312] usb 4-1: Using ep0 maxpacket: 16 [ 306.257193][ T4312] usb 4-1: config 252 has an invalid interface number: 15 but max is 0 [ 306.284086][ T4312] usb 4-1: config 252 has no interface number 0 [ 306.301497][ T4312] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 306.385591][ T4312] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 306.440540][ T4383] udevd[4383]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 306.472415][ T4312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.536956][ T4312] usb 4-1: Product: syz [ 306.578640][ T4312] usb 4-1: Manufacturer: syz [ 306.583407][ T4312] usb 4-1: SerialNumber: syz [ 306.750682][ T4312] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 306.854051][ T4295] usb 4-1: Failed to submit usb control message: -71 [ 306.854276][ T4312] usb 4-1: USB disconnect, device number 5 [ 306.873286][ T4295] usb 4-1: unable to send the bmi data to the device: -71 [ 306.952395][ T4295] usb 4-1: unable to get target info from device [ 306.971085][ T4295] usb 4-1: could not get target info (-71) [ 306.986817][ T4295] usb 4-1: could not probe fw (-71) [ 307.282483][ T22] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 307.291366][ T5799] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 307.479783][ T5799] usb 1-1: not running at top speed; connect to a high speed hub [ 307.489373][ T22] usb 3-1: config 255 has an invalid interface number: 181 but max is 0 [ 307.498253][ T22] usb 3-1: config 255 has no interface number 0 [ 307.504949][ T22] usb 3-1: config 255 interface 181 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 307.517553][ T5799] usb 1-1: config 1 interface 0 altsetting 190 endpoint 0x3 has invalid wMaxPacketSize 0 [ 307.528237][ T22] usb 3-1: config 255 interface 181 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 307.539368][ T5799] usb 1-1: config 1 interface 0 altsetting 190 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 307.553907][ T5799] usb 1-1: config 1 interface 0 has no altsetting 0 [ 307.563809][ T22] usb 3-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=43.b6 [ 307.573480][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.582257][ T22] usb 3-1: Product: syz [ 307.586790][ T5799] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 307.599979][ T22] usb 3-1: Manufacturer: syz [ 307.604759][ T5799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.609073][ T6092] loop5: detected capacity change from 0 to 4096 [ 307.613497][ T22] usb 3-1: SerialNumber: syz [ 307.624494][ T5799] usb 1-1: Product: syz [ 307.630060][ T5799] usb 1-1: Manufacturer: syz [ 307.636289][ T5799] usb 1-1: SerialNumber: syz [ 307.641475][ T6084] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 307.682173][ T6092] ntfs: volume version 3.1. [ 307.690133][ T6096] loop3: detected capacity change from 0 to 736 [ 307.866970][ T5799] usb 1-1: bad CDC descriptors [ 307.879307][ T22] ti_usb_3410_5052 3-1:255.181: TI USB 3410 1 port adapter converter detected [ 307.894142][ T5799] usbtest 1-1:1.0: couldn't get endpoints, -71 [ 307.901367][ T22] ti_usb_3410_5052 3-1:255.181: missing endpoints [ 307.907999][ T4285] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 307.908392][ T5799] usbtest: probe of 1-1:1.0 failed with error -71 [ 307.926280][ T22] usb 3-1: USB disconnect, device number 4 [ 307.974173][ T5799] usb 1-1: USB disconnect, device number 5 [ 308.127675][ T6101] loop1: detected capacity change from 0 to 8 [ 308.247694][ T6101] squashfs image failed sanity check [ 308.504075][ T6112] loop1: detected capacity change from 0 to 8 [ 308.817620][ T6121] loop2: detected capacity change from 0 to 2048 [ 308.891587][ T6121] loop2: p1 p3 < > p4 < p5 > [ 308.896471][ T6121] loop2: partition table partially beyond EOD, truncated [ 308.921855][ T6121] loop2: p1 size 33024 extends beyond EOD, truncated [ 308.934649][ T6121] loop2: p3 start 4284289 is beyond EOD, truncated [ 308.945316][ T6121] loop2: p5 size 33024 extends beyond EOD, truncated [ 308.978141][ T5799] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 309.229736][ T5799] usb 6-1: config 8 has an invalid interface number: 80 but max is 0 [ 309.264216][ T5799] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 309.325214][ T4438] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 309.357340][ T6012] udevd[6012]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 309.357492][ T4383] udevd[4383]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 309.384930][ T5799] usb 6-1: config 8 has no interface number 0 [ 309.393104][ T5799] usb 6-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 309.409739][ T5799] usb 6-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 309.424243][ T5799] usb 6-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 309.445716][ T5799] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 309.481632][ T5799] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.534697][ T5799] usb 6-1: NFC: intf ffff88807de15000 id ffffffff8d3fd3e0 [ 309.564857][ T4465] udevd[4465]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 309.727974][ T4438] usb 2-1: Using ep0 maxpacket: 32 [ 309.735227][ T4438] usb 2-1: config 0 has an invalid interface number: 104 but max is 0 [ 309.749664][ T4438] usb 2-1: config 0 has no interface number 0 [ 309.757491][ T4438] usb 2-1: config 0 interface 104 has no altsetting 0 [ 309.766254][ T128] usb 6-1: USB disconnect, device number 7 [ 309.781868][ T4438] usb 2-1: New USB device found, idVendor=0b05, idProduct=1791, bcdDevice=45.bc [ 309.796947][ T4438] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.813205][ T4438] usb 2-1: Product: syz [ 309.817663][ T4438] usb 2-1: Manufacturer: syz [ 309.833855][ T4438] usb 2-1: SerialNumber: syz [ 309.858306][ T4438] usb 2-1: config 0 descriptor?? [ 310.053841][ T6133] loop3: detected capacity change from 0 to 32768 [ 310.074586][ T4438] r8712u: register rtl8712_netdev_ops to netdev_ops [ 310.099848][ T4438] usb 2-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 310.115603][ T4438] usb 2-1: r8712u: Boot from EFUSE: Autoload Failed [ 310.152190][ T4438] usb 2-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 310.176995][ T4438] usb 2-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 310.309351][ T4438] usb 2-1: USB disconnect, device number 6 [ 310.368093][ T4394] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 310.569865][ T4394] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x7F, skipping [ 310.596863][ T4394] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 310.638202][ T4394] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 310.709245][ T4394] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 310.732820][ T6153] loop2: detected capacity change from 0 to 128 [ 310.740878][ T4394] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 310.771236][ T4394] usb 1-1: SerialNumber: syz [ 310.808592][ T6137] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 310.818966][ T6137] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 310.888164][ T6153] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 310.973331][ T5799] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 311.111666][ T4256] usb 1-1: USB disconnect, device number 6 [ 311.124664][ T6159] loop1: detected capacity change from 0 to 4096 [ 311.148617][ T6159] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 311.170235][ T5799] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 311.177612][ T6159] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 311.189699][ T5799] usb 4-1: config 0 has no interface number 0 [ 311.215052][ T5799] usb 4-1: config 0 interface 29 altsetting 243 endpoint 0x1 has invalid wMaxPacketSize 0 [ 311.254671][ T5799] usb 4-1: config 0 interface 29 has no altsetting 0 [ 311.284893][ T5799] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 311.285363][ T6159] ntfs3: loop1: failed to replay log file. Can't mount rw! [ 311.300648][ T5799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.310194][ T5799] usb 4-1: Product: syz [ 311.314497][ T5799] usb 4-1: Manufacturer: syz [ 311.319379][ T5799] usb 4-1: SerialNumber: syz [ 311.343987][ T5799] usb 4-1: config 0 descriptor?? [ 311.600731][ T5799] peak_usb 4-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 311.624201][ T5799] peak_usb 4-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 311.761362][ T6176] loop5: detected capacity change from 0 to 8 [ 311.786225][ T6177] loop2: detected capacity change from 0 to 164 [ 311.793322][ T5799] peak_usb: probe of 4-1:0.29 failed with error -71 [ 311.823754][ T5799] usb 4-1: USB disconnect, device number 6 [ 311.918341][ T4312] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 311.943072][ T6179] loop0: detected capacity change from 0 to 2048 [ 312.043082][ T6179] loop0: p4 < > [ 312.080358][ T6183] loop5: detected capacity change from 0 to 128 [ 312.120616][ T4312] usb 2-1: unable to get BOS descriptor or descriptor too short [ 312.138955][ T4312] usb 2-1: not running at top speed; connect to a high speed hub [ 312.170076][ T4312] usb 2-1: config 1 has an invalid interface number: 162 but max is 0 [ 312.181453][ T6183] hpfs: Bad version 183,140. Mount readonly to go around [ 312.221091][ T4312] usb 2-1: config 1 has no interface number 0 [ 312.230896][ T4312] usb 2-1: config 1 interface 162 has no altsetting 0 [ 312.259377][ T4312] usb 2-1: New USB device found, idVendor=8086, idProduct=07d3, bcdDevice=64.f0 [ 312.275162][ T6183] hpfs: please try recent version of HPFS driver at http://artax.karlin.mff.cuni.cz/~mikulas/vyplody/hpfs/index-e.cgi and if it still can't understand this format, contact author - mikulas@artax.karlin.mff.cuni.cz [ 312.310785][ T4312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.370551][ T4312] usb 2-1: Product: syz [ 312.374833][ T4312] usb 2-1: Manufacturer: syz [ 312.403664][ T4312] usb 2-1: SerialNumber: syz [ 312.503881][ T6194] loop3: detected capacity change from 0 to 256 [ 312.640939][ T6194] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe9e488b, utbl_chksum : 0xe619d30d) [ 312.655460][ T4312] cdc_subset: probe of 2-1:1.162 failed with error -22 [ 312.690448][ T6198] loop5: detected capacity change from 0 to 512 [ 312.703110][ T6194] exFAT-fs (loop3): error, invalid access to FAT bad cluster (entry 0x00000005) [ 312.719542][ T6190] loop2: detected capacity change from 0 to 8192 [ 312.723916][ T4312] usb 2-1: USB disconnect, device number 7 [ 312.727731][ T6194] exFAT-fs (loop3): Filesystem has been set read-only [ 312.765450][ T6198] EXT4-fs (loop5): orphan cleanup on readonly fs [ 312.776997][ T6194] exFAT-fs (loop3): failed to initialize root inode [ 312.790026][ T6190] REISERFS warning (device loop2): super-6503 reiserfs_getopt: the option "usrquota" does not require an argument [ 312.790026][ T6190] [ 312.836076][ T6198] EXT4-fs error (device loop5): ext4_quota_enable:7024: comm syz.5.356: inode #16777216: comm syz.5.356: iget: illegal inode # [ 312.912204][ T6198] EXT4-fs error (device loop5): ext4_quota_enable:7027: comm syz.5.356: Bad quota inode: 16777216, type: 2 [ 312.969726][ T6198] EXT4-fs warning (device loop5): ext4_enable_quotas:7068: Failed to enable quota tracking (type=2, err=-117, ino=16777216). Please run e2fsck to fix. [ 313.092581][ T6198] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 313.137492][ T6198] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 313.338004][ T4282] Bluetooth: hci4: command 0x0406 tx timeout [ 313.429563][ T5170] EXT4-fs (loop5): unmounting filesystem. [ 313.883242][ T6222] loop2: detected capacity change from 0 to 2048 [ 313.972083][ T6222] loop2: p4 < > [ 314.066727][ T4438] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 314.142275][ T128] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 314.249387][ T4438] usb 6-1: not running at top speed; connect to a high speed hub [ 314.283469][ T4438] usb 6-1: config 1 interface 0 altsetting 190 endpoint 0x3 has invalid wMaxPacketSize 0 [ 314.313004][ T4438] usb 6-1: config 1 interface 0 altsetting 190 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 314.333132][ T4438] usb 6-1: config 1 interface 0 has no altsetting 0 [ 314.351736][ T4438] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 314.365574][ T128] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 314.381350][ T128] usb 2-1: config 0 has no interface number 0 [ 314.402440][ T4438] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.424690][ T128] usb 2-1: config 0 interface 29 altsetting 243 endpoint 0x1 has invalid wMaxPacketSize 0 [ 314.446549][ T4438] usb 6-1: Product: syz [ 314.460591][ T128] usb 2-1: config 0 interface 29 has no altsetting 0 [ 314.474876][ T4438] usb 6-1: Manufacturer: syz [ 314.485191][ T4438] usb 6-1: SerialNumber: syz [ 314.500342][ T128] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 314.534402][ T128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.548845][ T128] usb 2-1: Product: syz [ 314.553206][ T128] usb 2-1: Manufacturer: syz [ 314.564289][ T128] usb 2-1: SerialNumber: syz [ 314.617007][ T128] usb 2-1: config 0 descriptor?? [ 314.755123][ T4438] usb 6-1: bad CDC descriptors [ 314.805305][ T4438] usbtest 6-1:1.0: couldn't get endpoints, -71 [ 314.811057][ T6238] loop3: detected capacity change from 0 to 64 [ 314.836933][ T4438] usbtest: probe of 6-1:1.0 failed with error -71 [ 314.877673][ T6240] loop0: detected capacity change from 0 to 128 [ 314.885269][ T128] peak_usb 2-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 314.953411][ T128] peak_usb 2-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 314.975466][ T4438] usb 6-1: USB disconnect, device number 8 [ 315.251298][ T128] peak_usb: probe of 2-1:0.29 failed with error -71 [ 315.261894][ T128] usb 2-1: USB disconnect, device number 8 [ 315.418210][ T4256] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 315.446347][ T6251] loop5: detected capacity change from 0 to 2048 [ 315.531448][ T6251] loop5: p1 < > p3 [ 315.553733][ T6251] loop5: p3 size 54016 extends beyond EOD, truncated [ 315.789519][ T4256] usb 1-1: unable to get BOS descriptor or descriptor too short [ 315.797969][ T4256] usb 1-1: not running at top speed; connect to a high speed hub [ 315.807231][ T4256] usb 1-1: config 1 has an invalid interface number: 162 but max is 0 [ 315.826630][ T4256] usb 1-1: config 1 has no interface number 0 [ 315.838086][ T4256] usb 1-1: config 1 interface 162 has no altsetting 0 [ 315.933466][ T4256] usb 1-1: New USB device found, idVendor=8086, idProduct=07d3, bcdDevice=64.f0 [ 315.951249][ T4256] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.024798][ T4465] udevd[4465]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 316.043703][ T4256] usb 1-1: Product: syz [ 316.068018][ T4256] usb 1-1: Manufacturer: syz [ 316.077909][ T4256] usb 1-1: SerialNumber: syz [ 316.109531][ T6247] loop3: detected capacity change from 0 to 32768 [ 316.185236][ T6265] loop5: detected capacity change from 0 to 190 [ 316.209044][ T6265] ntfs: (device loop5): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 316.219961][ T6265] ntfs: (device loop5): parse_ntfs_boot_sector(): Cannot handle 64-bit clusters. Sorry. [ 316.222943][ T6247] XFS (loop3): Mounting V5 Filesystem [ 316.236541][ T6265] ntfs: (device loop5): ntfs_fill_super(): Unsupported NTFS filesystem. [ 316.359050][ T4256] cdc_subset: probe of 1-1:1.162 failed with error -22 [ 316.409795][ T4256] usb 1-1: USB disconnect, device number 7 [ 316.429199][ T6271] loop5: detected capacity change from 0 to 8 [ 316.564490][ T6247] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x2a9/0x1060, inode 0x1802 dinode [ 316.576299][ T6247] XFS (loop3): Unmount and run xfs_repair [ 316.582158][ T6247] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 316.589722][ T6247] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 316.604949][ T6247] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 316.643887][ T6273] loop1: detected capacity change from 0 to 128 [ 316.671842][ T6247] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 7f c1 86 28 ..e.....4.Xh...( [ 316.709801][ T6273] hpfs: Bad version 183,140. Mount readonly to go around [ 316.717017][ T6273] hpfs: please try recent version of HPFS driver at http://artax.karlin.mff.cuni.cz/~mikulas/vyplody/hpfs/index-e.cgi and if it still can't understand this format, contact author - mikulas@artax.karlin.mff.cuni.cz [ 316.758089][ T6247] 00000030: 34 f7 58 68 7f c1 86 28 00 00 00 00 00 00 00 00 4.Xh...(........ [ 316.799406][ T6249] loop2: detected capacity change from 0 to 32768 [ 316.823796][ T6247] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 316.853680][ T6247] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 316.875717][ T6249] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.374 (6249) [ 316.918676][ T6247] 00000060: ff ff ff ff bc 69 0f 52 00 00 00 00 00 00 00 02 .....i.R........ [ 316.973545][ T6247] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 ................ [ 317.069669][ T6247] XFS (loop3): failed to read RT inodes [ 317.132622][ T6249] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 317.206287][ T6249] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 317.231164][ T6249] BTRFS warning (device loop2): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 317.233738][ T6281] loop1: detected capacity change from 0 to 128 [ 317.295972][ T6249] BTRFS info (device loop2): setting nodatacow, compression disabled [ 317.348776][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.355983][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.368387][ T6249] BTRFS error (device loop2): support for check_integrity* not compiled in! [ 317.449975][ T6249] BTRFS error (device loop2): open_ctree failed: -22 [ 317.581319][ T4465] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (4465) [ 319.448792][ T6289] loop1: detected capacity change from 0 to 40427 [ 319.476776][ T6289] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 319.485593][ T6289] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 319.499673][ T6289] F2FS-fs (loop1): build fault injection attr: rate: 17010, type: 0x3ffff [ 319.508658][ T6289] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x1f8 [ 319.564122][ T6289] F2FS-fs (loop1): invalid crc value [ 319.642847][ T6297] loop0: detected capacity change from 0 to 32768 [ 319.688178][ T6289] F2FS-fs (loop1): Found nat_bits in checkpoint [ 319.711777][ T6297] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 319.734106][ T6297] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 319.748072][ T6297] BTRFS info (device loop0): turning on sync discard [ 319.780177][ T6297] BTRFS info (device loop0): setting nodatasum [ 319.786477][ T6297] BTRFS info (device loop0): metadata ratio 776 [ 319.860422][ T6297] BTRFS info (device loop0): turning on flush-on-commit [ 319.908626][ T6289] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 319.918539][ T6297] BTRFS info (device loop0): force clearing of disk cache [ 319.938543][ T6297] BTRFS info (device loop0): turning off discard [ 319.944990][ T6297] BTRFS info (device loop0): using free space tree [ 319.947231][ T6289] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 320.081545][ T6322] loop2: detected capacity change from 0 to 512 [ 320.211484][ T6322] EXT4-fs: Ignoring removed i_version option [ 320.288672][ T6303] loop3: detected capacity change from 0 to 32768 [ 320.291821][ T6322] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 320.323843][ T6322] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 320.325199][ T6297] BTRFS info (device loop0): enabling ssd optimizations [ 320.366890][ T6303] (syz.3.389,6303,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 320.384791][ T6297] BTRFS info (device loop0): rebuilding free space tree [ 320.431634][ T6303] (syz.3.389,6303,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 320.695965][ T6303] JBD2: Ignoring recovery information on journal [ 320.874141][ T6303] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 321.049333][ T4272] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 321.184493][ T6360] loop2: detected capacity change from 0 to 512 [ 321.239676][ T4278] ocfs2: Unmounting device (7,3) on (node local) [ 321.432433][ T6360] EXT4-fs (loop2): orphan cleanup on readonly fs [ 321.448012][ T6360] EXT4-fs error (device loop2): ext4_quota_enable:7024: comm syz.2.399: inode #16777216: comm syz.2.399: iget: illegal inode # [ 321.552268][ T6360] EXT4-fs error (device loop2): ext4_quota_enable:7027: comm syz.2.399: Bad quota inode: 16777216, type: 2 [ 321.805560][ T6360] EXT4-fs warning (device loop2): ext4_enable_quotas:7068: Failed to enable quota tracking (type=2, err=-117, ino=16777216). Please run e2fsck to fix. [ 321.899068][ T6360] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 321.906723][ T6360] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 322.093480][ T6380] loop0: detected capacity change from 0 to 4096 [ 322.175476][ T6380] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 322.183889][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 322.250578][ T6380] ntfs3: loop0: volume is dirty and "force" flag is not set! [ 322.544740][ T6397] netlink: 'syz.1.414': attribute type 10 has an invalid length. [ 322.586972][ T6399] loop5: detected capacity change from 0 to 1024 [ 322.707319][ T6397] team0: Port device wlan1 removed [ 322.726662][ T6404] loop2: detected capacity change from 0 to 16 [ 322.776781][ T6404] erofs: (device loop2): mounted with root inode @ nid 36. [ 322.778163][ T6397] batman_adv: batadv0: Adding interface: wlan1 [ 322.830485][ T6397] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.001187][ T6397] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 323.057100][ T6409] loop3: detected capacity change from 0 to 512 [ 323.528201][ T6375] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 323.719966][ T6375] usb 6-1: config 0 has an invalid interface number: 29 but max is 0 [ 323.732040][ T6375] usb 6-1: config 0 has no interface number 0 [ 323.747073][ T6375] usb 6-1: config 0 interface 29 altsetting 243 endpoint 0x1 has invalid wMaxPacketSize 0 [ 323.768848][ T6375] usb 6-1: config 0 interface 29 has no altsetting 0 [ 323.785892][ T6375] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 323.804826][ T6375] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.822932][ T6375] usb 6-1: Product: syz [ 323.828165][ T6375] usb 6-1: Manufacturer: syz [ 323.828346][ T6429] loop3: detected capacity change from 0 to 4096 [ 323.833002][ T6375] usb 6-1: SerialNumber: syz [ 323.847671][ T6375] usb 6-1: config 0 descriptor?? [ 323.886360][ T6429] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 323.905329][ T6429] ntfs3: loop3: volume is dirty and "force" flag is not set! [ 324.131321][ T6375] peak_usb 6-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 324.141039][ T6375] peak_usb 6-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 324.209227][ T6375] peak_usb: probe of 6-1:0.29 failed with error -71 [ 324.255949][ T6375] usb 6-1: USB disconnect, device number 9 [ 324.321024][ T26] audit: type=1326 audit(1758935859.376:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.0.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e43b8eec9 code=0x7ffc0000 [ 324.372404][ T6435] loop2: detected capacity change from 0 to 1024 [ 324.385233][ T6439] loop3: detected capacity change from 0 to 16 [ 324.442023][ T26] audit: type=1326 audit(1758935859.396:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.0.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f0e43b8eec9 code=0x7ffc0000 [ 324.445417][ T6439] erofs: (device loop3): mounted with root inode @ nid 36. [ 324.576179][ T26] audit: type=1326 audit(1758935859.396:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.0.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e43b8eec9 code=0x7ffc0000 [ 324.585191][ T4736] hfsplus: b-tree write err: -5, ino 4 [ 325.630821][ T6432] loop1: detected capacity change from 0 to 32768 [ 325.691248][ T6446] netlink: 'syz.2.435': attribute type 10 has an invalid length. [ 325.778362][ T6446] batman_adv: batadv0: Adding interface: wlan1 [ 325.840588][ T6446] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.875190][ T6432] XFS (loop1): Mounting V5 Filesystem [ 325.923783][ T6446] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 326.183392][ T4285] Bluetooth: hci5: command 0x0406 tx timeout [ 326.253990][ T6432] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x2a9/0x1060, inode 0x1802 dinode [ 326.267412][ T6432] XFS (loop1): Unmount and run xfs_repair [ 326.273609][ T6432] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 326.294494][ T6432] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 326.308429][ T6432] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 326.333486][ T6432] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 7f c1 86 28 ..e.....4.Xh...( [ 326.378263][ T6432] 00000030: 34 f7 58 68 7f c1 86 28 00 00 00 00 00 00 00 00 4.Xh...(........ [ 326.408676][ T6466] loop2: detected capacity change from 0 to 128 [ 326.415229][ T6432] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 326.446904][ T6432] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 326.486992][ T6432] 00000060: ff ff ff ff bc 69 0f 52 00 00 00 00 00 00 00 02 .....i.R........ [ 326.520493][ T6466] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 326.532843][ T6432] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 ................ [ 326.549050][ T6466] FAT-fs (loop2): Filesystem has been set read-only [ 326.556149][ T6432] XFS (loop1): failed to read RT inodes [ 326.872793][ T6472] loop0: detected capacity change from 0 to 256 [ 326.998092][ T6472] FAT-fs (loop0): Directory bread(block 64) failed [ 327.020508][ T6468] loop5: detected capacity change from 0 to 32768 [ 327.022758][ T6472] FAT-fs (loop0): Directory bread(block 65) failed [ 327.034619][ T6472] FAT-fs (loop0): Directory bread(block 66) failed [ 327.041743][ T6472] FAT-fs (loop0): Directory bread(block 67) failed [ 327.063000][ T6472] FAT-fs (loop0): Directory bread(block 68) failed [ 327.069904][ T6472] FAT-fs (loop0): Directory bread(block 69) failed [ 327.076632][ T6472] FAT-fs (loop0): Directory bread(block 70) failed [ 327.083521][ T6468] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.440 (6468) [ 327.083841][ T6472] FAT-fs (loop0): Directory bread(block 71) failed [ 327.197113][ T6472] FAT-fs (loop0): Directory bread(block 72) failed [ 327.205990][ T6472] FAT-fs (loop0): Directory bread(block 73) failed [ 327.228833][ T6468] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 327.278219][ T6468] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 327.287025][ T6468] BTRFS warning (device loop5): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 327.468047][ T6468] BTRFS info (device loop5): setting nodatacow, compression disabled [ 327.476667][ T6468] BTRFS error (device loop5): support for check_integrity* not compiled in! [ 327.498769][ T6468] BTRFS error (device loop5): open_ctree failed: -22 [ 327.540579][ T6478] loop1: detected capacity change from 0 to 16 [ 327.611890][ T6478] erofs: (device loop1): mounted with root inode @ nid 36. [ 327.699869][ T6478] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 327.878085][ T6478] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 327.881228][ T6487] loop2: detected capacity change from 0 to 256 [ 327.937049][ T6487] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 328.052157][ T6493] loop3: detected capacity change from 0 to 128 [ 328.098601][ T4383] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by udevd (4383) [ 328.194855][ T6493] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 328.205725][ T6493] ext4 filesystem being mounted at /88/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 328.390701][ T6498] loop1: detected capacity change from 0 to 4096 [ 328.405371][ T6500] loop0: detected capacity change from 0 to 764 [ 328.437399][ T6498] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 328.531447][ T6498] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 328.561744][ T6498] ntfs3: loop1: Failed to load $Extend. [ 328.634787][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 328.810077][ T6506] loop0: detected capacity change from 0 to 16 [ 328.866988][ T6506] erofs: (device loop0): mounted with root inode @ nid 36. [ 328.910073][ T6508] loop3: detected capacity change from 0 to 256 [ 329.151342][ T6512] loop5: detected capacity change from 0 to 16 [ 329.206188][ T6513] loop2: detected capacity change from 0 to 16 [ 329.552041][ T6512] erofs: (device loop5): mounted with root inode @ nid 36. [ 329.575432][ T6513] erofs: (device loop2): mounted with root inode @ nid 36. [ 331.462746][ T6523] loop0: detected capacity change from 0 to 256 [ 331.520036][ T6523] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 331.572818][ T6523] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 331.598566][ T6523] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 332.540579][ T6538] loop1: detected capacity change from 0 to 8 [ 333.621628][ T6547] loop3: detected capacity change from 0 to 64 [ 333.663867][ T6538] SQUASHFS error: Failed to read block 0x106: -5 [ 333.673879][ T26] audit: type=1800 audit(1758935868.726:128): pid=6538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.467" name="file2" dev="loop1" ino=6 res=0 errno=0 [ 334.167883][ T6558] hub 1-0:1.0: USB hub found [ 334.174115][ T6558] hub 1-0:1.0: 1 port detected [ 334.729824][ T6556] loop3: detected capacity change from 0 to 256 [ 334.763369][ T6560] loop0: detected capacity change from 0 to 512 [ 334.787109][ T6556] exfat: Deprecated parameter 'namecase' [ 334.871198][ T6560] EXT4-fs: Ignoring removed nobh option [ 334.939235][ T6562] loop1: detected capacity change from 0 to 256 [ 334.975705][ T6556] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 335.042738][ T6560] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 335.204984][ T6570] loop5: detected capacity change from 0 to 128 [ 335.304997][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 335.349272][ T6570] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 335.379546][ T6573] loop1: detected capacity change from 0 to 16 [ 335.425927][ T6573] erofs: (device loop1): mounted with root inode @ nid 36. [ 335.508144][ T6570] ext4 filesystem being mounted at /64/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 336.689155][ T5170] EXT4-fs (loop5): unmounting filesystem. [ 338.222283][ T6602] loop0: detected capacity change from 0 to 16 [ 338.303064][ T6602] erofs: (device loop0): mounted with root inode @ nid 36. [ 338.324014][ T6596] loop5: detected capacity change from 0 to 4096 [ 338.340647][ T6602] erofs: Unknown parameter 'ÿÿ184467440737095516150xffffffffffffffff18446744073709551615±ñV?Œù³ßCp~'~8pٻ젌|ž^½Ö(cŸoö—ÈêM ) Çÿÿÿÿÿÿÿÿÿ' [ 338.386067][ T6596] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 339.294652][ T4285] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 339.302548][ T6596] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 339.308977][ T4285] Bluetooth: hci4: Injecting HCI hardware error event [ 339.329748][ T4282] Bluetooth: hci4: hardware error 0x00 [ 339.370269][ T6596] ntfs3: loop5: ino=1b, "file0" attr_set_size [ 339.469552][ T5170] ntfs3: loop5: ntfs_sync_fs r=1a failed, -22. [ 339.529743][ T5170] ntfs3: loop5: ntfs_evict_inode r=1a failed, -22. [ 339.566067][ T6616] loop0: detected capacity change from 0 to 256 [ 339.783287][ T6620] hub 1-0:1.0: USB hub found [ 339.789052][ T6620] hub 1-0:1.0: 1 port detected [ 340.362449][ T6622] loop5: detected capacity change from 0 to 256 [ 340.412132][ T6622] exfat: Deprecated parameter 'namecase' [ 340.466866][ T6622] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 340.882780][ T6632] loop1: detected capacity change from 0 to 4096 [ 340.921750][ T6632] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 340.996470][ T6632] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 341.109314][ T6632] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 341.173398][ T6636] loop5: detected capacity change from 0 to 64 [ 341.175874][ T6632] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 341.250574][ T6638] loop0: detected capacity change from 0 to 256 [ 341.328762][ T6632] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 341.348762][ T6638] exfat: Deprecated parameter 'namecase' [ 341.354687][ T6638] exfat: Deprecated parameter 'namecase' [ 341.372145][ T6632] ntfs: volume version 3.1. [ 341.406715][ T6638] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 341.434715][ T6632] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 341.507912][ T4282] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 341.518506][ T6632] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 341.528361][ T6640] loop5: detected capacity change from 0 to 4096 [ 341.655230][ T6632] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 341.668534][ T6640] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 341.692572][ T6640] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 341.708265][ T6632] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 341.729573][ T6640] ntfs3: loop5: volume is dirty and "force" flag is not set! [ 341.759011][ T6632] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 341.789718][ T6644] loop3: detected capacity change from 0 to 16 [ 341.899686][ T6644] erofs: (device loop3): mounted with root inode @ nid 36. [ 341.929053][ T6644] erofs: Unknown parameter 'ÿÿ184467440737095516150xffffffffffffffff18446744073709551615±ñV?Œù³ßCp~'~8pٻ젌|ž^½Ö(cŸoö—ÈêM ) Çÿÿÿÿÿÿÿÿÿ' [ 342.049923][ T6646] loop0: detected capacity change from 0 to 128 [ 342.318628][ T6646] EXT4-fs (loop0): Test dummy encryption mode enabled [ 342.973238][ T6646] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 343.008297][ T6646] ext4 filesystem being mounted at /111/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 343.229051][ T6658] ufs: You didn't specify the type of your ufs filesystem [ 343.229051][ T6658] [ 343.229051][ T6658] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 343.229051][ T6658] [ 343.229051][ T6658] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 343.260069][ T6658] ufs: ufstype=old is supported read-only [ 343.268732][ T6658] I/O error, dev loop11, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 343.821188][ T6657] loop2: detected capacity change from 0 to 4096 [ 344.006064][ T6657] EXT4-fs (loop2): Test dummy encryption mode enabled [ 344.025944][ T6657] EXT4-fs (loop2): unsupported descriptor size 255 [ 344.838363][ T6662] loop5: detected capacity change from 0 to 764 [ 345.041832][ T6671] tipc: Started in network mode [ 345.047398][ T6671] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 345.057123][ T6671] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 345.066706][ T6671] tipc: Enabled bearer , priority 10 [ 345.833581][ T6666] loop3: detected capacity change from 0 to 256 [ 346.061680][ T6375] tipc: Node number set to 1 [ 346.093264][ T6673] Symlink component flag not implemented [ 346.115294][ T6673] Symlink component flag not implemented (116) [ 346.128540][ T6666] FAT-fs (loop3): error, clusters badly computed (0 != 128) [ 346.170178][ T6666] FAT-fs (loop3): Filesystem has been set read-only [ 346.458969][ T6666] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 346.796455][ T6646] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 347.098021][ T4282] Bluetooth: hci1: command 0x1003 tx timeout [ 347.107103][ T4285] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 347.387498][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 349.535389][ T6707] netlink: 32 bytes leftover after parsing attributes in process `syz.2.518'. [ 350.176282][ T6696] loop1: detected capacity change from 0 to 32768 [ 350.194408][ T6696] (syz.1.515,6696,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 350.215352][ T6696] (syz.1.515,6696,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 351.222060][ T6696] JBD2: Ignoring recovery information on journal [ 355.169838][ T6696] JBD2: recovery failed [ 355.206874][ T6696] (syz.1.515,6696,0):ocfs2_journal_load:1134 ERROR: Failed to load journal! [ 355.247999][ T6696] (syz.1.515,6696,1):ocfs2_check_volume:2433 ERROR: ocfs2 journal load failed! -5 [ 355.257576][ T6696] (syz.1.515,6696,1):ocfs2_check_volume:2489 ERROR: status = -5 [ 355.448088][ T6696] (syz.1.515,6696,0):ocfs2_mount_volume:1821 ERROR: status = -5 [ 355.494103][ T6731] netlink: 32 bytes leftover after parsing attributes in process `syz.0.534'. [ 355.519386][ T6696] (syz.1.515,6696,0):ocfs2_fill_super:1176 ERROR: status = -5 [ 355.530534][ T6733] loop2: detected capacity change from 0 to 128 [ 355.590693][ T6733] EXT4-fs (loop2): Test dummy encryption mode enabled [ 355.804660][ T6733] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 355.822049][ T6733] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 356.060347][ T6745] loop5: detected capacity change from 0 to 16 [ 357.010315][ T6746] loop1: detected capacity change from 0 to 512 [ 357.068445][ T6745] erofs: (device loop5): mounted with root inode @ nid 36. [ 357.091534][ T6746] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 357.101035][ T6746] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 357.160894][ T6745] erofs: Unknown parameter 'ÿÿ184467440737095516150xffffffffffffffff18446744073709551615±ñV?Œù³ßCp~'~8pٻ젌|ž^½Ö(cŸoö—ÈêM ) Çÿÿÿÿÿÿÿÿÿ' [ 357.935754][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 358.464851][ T6733] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 358.509256][ T6765] loop5: detected capacity change from 0 to 512 [ 358.543845][ T6764] loop1: detected capacity change from 0 to 764 [ 358.698171][ T4282] Bluetooth: hci1: command 0x1003 tx timeout [ 358.708704][ T4285] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 358.888065][ T6765] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 358.890966][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 359.862336][ T6774] Symlink component flag not implemented [ 359.869632][ T6774] Symlink component flag not implemented (116) [ 364.121375][ T6795] netlink: 32 bytes leftover after parsing attributes in process `syz.1.537'. [ 365.075328][ T6805] loop0: detected capacity change from 0 to 256 [ 365.084343][ T6805] FAT-fs (loop0): count of clusters too big (66845694) [ 365.085231][ T6804] loop5: detected capacity change from 0 to 512 [ 365.091373][ T6805] FAT-fs (loop0): Can't find a valid FAT filesystem [ 365.875505][ T6805] loop0: detected capacity change from 0 to 32768 [ 365.894907][ T6804] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 365.896387][ T6805] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 365.904110][ T6804] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 365.912757][ T6805] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 365.921693][ T6805] syz.0.540: attempt to access beyond end of device [ 365.921693][ T6805] loop0: rw=12288, sector=549755814040, nr_sectors = 8 limit=32768 [ 365.945283][ T6805] gfs2: fsid=syz:syz.0: can't acquire journal inode glock: -5 [ 366.436431][ T6819] netlink: 3 bytes leftover after parsing attributes in process `syz.2.538'. [ 366.481682][ T5170] EXT4-fs (loop5): unmounting filesystem. [ 366.718554][ T128] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 366.948200][ T128] usb 2-1: Using ep0 maxpacket: 32 [ 366.971446][ T128] usb 2-1: unable to get BOS descriptor or descriptor too short [ 367.132670][ T128] usb 2-1: config 6 has an invalid interface number: 28 but max is 0 [ 367.373850][ T128] usb 2-1: config 6 has no interface number 0 [ 367.693442][ T128] usb 2-1: New USB device found, idVendor=08ca, idProduct=0010, bcdDevice=d7.f0 [ 368.152360][ T128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.321146][ T128] usb 2-1: Product: syz [ 368.389472][ T128] usb 2-1: Manufacturer: syz [ 368.496093][ T128] usb 2-1: SerialNumber: syz [ 369.740073][ T128] aiptek 2-1:6.28: interface has no int in endpoints, but must have minimum 1 [ 369.792810][ T6839] loop0: detected capacity change from 0 to 512 [ 369.816061][ T6839] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 369.838096][ T128] usb 2-1: USB disconnect, device number 9 [ 370.110559][ T4283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 370.122149][ T4283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 370.131115][ T4283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 370.838666][ T4283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 370.869301][ T4283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 370.909310][ T4283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 371.316103][ T6840] lo speed is unknown, defaulting to 1000 [ 372.938178][ T4285] Bluetooth: hci1: command 0x0409 tx timeout [ 373.547592][ T6865] netlink: 32 bytes leftover after parsing attributes in process `syz.5.551'. [ 373.665738][ T6840] chnl_net:caif_netlink_parms(): no params data found [ 374.596413][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888055fbac00: rx timeout, send abort [ 375.098147][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880585e8800: rx timeout, send abort [ 375.106775][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888055fbac00: abort rx timeout. Force session deactivation [ 375.199370][ T4285] Bluetooth: hci1: command 0x041b tx timeout [ 375.612219][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880585e8800: abort rx timeout. Force session deactivation [ 375.654715][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.554'. [ 375.917910][ T6840] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.925334][ T6840] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.935364][ T6840] device bridge_slave_0 entered promiscuous mode [ 375.948885][ T6840] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.976801][ T6840] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.013684][ T6840] device bridge_slave_1 entered promiscuous mode [ 376.076009][ T6840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.093254][ T6840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.149284][ T6840] team0: Port device team_slave_0 added [ 376.178339][ T6840] team0: Port device team_slave_1 added [ 376.320061][ T6840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.327042][ T6840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.369910][ T6840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.390325][ T6840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.399969][ T6840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.438693][ T6840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.564351][ T6840] device hsr_slave_0 entered promiscuous mode [ 376.578361][ T6840] device hsr_slave_1 entered promiscuous mode [ 376.588747][ T6840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 376.596474][ T6840] Cannot create hsr debugfs directory [ 376.935610][ T6840] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 376.951597][ T6840] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 376.972647][ T6840] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 377.047757][ T6840] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 377.328321][ T4285] Bluetooth: hci1: command 0x040f tx timeout [ 377.801042][ T6888] loop0: detected capacity change from 0 to 8192 [ 377.871255][ T6840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.890097][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 377.903078][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 377.921168][ T6840] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.046082][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 378.058398][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 378.067076][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.074330][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.083546][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 378.092659][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 378.102939][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.110161][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.141763][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 378.152663][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 378.171930][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 378.197194][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 378.342641][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 378.353694][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 378.363061][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 378.371899][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 378.380881][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 378.390906][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 378.418907][ T6840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 378.929611][ T6840] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 378.930075][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.957725][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.347956][ T4283] Bluetooth: hci1: command 0x0419 tx timeout [ 379.401347][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 379.438796][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 379.866131][ T6925] loop1: detected capacity change from 0 to 164 [ 380.124644][ T4382] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 380.161375][ T6925] rock: directory entry would overflow storage [ 380.181870][ T6925] rock: sig=0x4f50, size=4, remaining=3 [ 380.197036][ T6925] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 380.328078][ T4382] usb 3-1: Using ep0 maxpacket: 32 [ 380.335865][ T4382] usb 3-1: unable to get BOS descriptor or descriptor too short [ 380.347928][ T4382] usb 3-1: config 6 has an invalid interface number: 28 but max is 0 [ 380.364508][ T4382] usb 3-1: config 6 has no interface number 0 [ 380.375632][ T4382] usb 3-1: New USB device found, idVendor=08ca, idProduct=0010, bcdDevice=d7.f0 [ 380.385450][ T4382] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.394460][ T4382] usb 3-1: Product: syz [ 380.399188][ T4382] usb 3-1: Manufacturer: syz [ 380.404002][ T4382] usb 3-1: SerialNumber: syz [ 380.505935][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 380.521195][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 380.597035][ T6840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.726473][ T4382] aiptek 3-1:6.28: interface has no int in endpoints, but must have minimum 1 [ 380.749458][ T4382] usb 3-1: USB disconnect, device number 5 [ 380.795500][ T6936] netlink: 32 bytes leftover after parsing attributes in process `syz.1.564'. [ 381.620971][ T6945] loop1: detected capacity change from 0 to 512 [ 381.682887][ T6945] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 382.794845][ T6949] loop2: detected capacity change from 0 to 4096 [ 383.184736][ T6960] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 383.249534][ T6957] loop0: detected capacity change from 0 to 4096 [ 383.273522][ T6957] EXT4-fs (loop0): Test dummy encryption mode enabled [ 383.511119][ T6957] EXT4-fs (loop0): unsupported descriptor size 255 [ 383.670654][ T6963] CIFS mount error: No usable UNC path provided in device string! [ 383.670654][ T6963] [ 383.681134][ T6963] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 384.473978][ T6970] tipc: Started in network mode [ 384.479148][ T6970] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 384.493775][ T6970] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 384.505013][ T6970] tipc: Enabled bearer , priority 10 [ 385.789366][ T4394] tipc: Node number set to 1 [ 385.809817][ T6976] loop2: detected capacity change from 0 to 512 [ 385.816741][ T6976] EXT4-fs: Ignoring removed oldalloc option [ 385.881266][ T6976] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.572: dx entry: limit 1024 != root limit 124 [ 385.894969][ T6976] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.572: Corrupt directory, running e2fsck is recommended [ 385.910887][ T6976] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 385.921868][ T6976] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.572: corrupted in-inode xattr [ 385.969452][ T6976] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.572: couldn't read orphan inode 15 (err -117) [ 386.174266][ T6976] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 386.200538][ T6976] EXT4-fs (loop2): unmounting filesystem. [ 386.464892][ T6989] loop1: detected capacity change from 0 to 512 [ 386.758873][ T6989] FAT-fs (loop1): Unrecognized mount option "un" or missing value [ 390.340262][ T6993] netlink: 32 bytes leftover after parsing attributes in process `syz.2.576'. [ 391.699543][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 391.757706][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 392.023044][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 392.038921][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 392.055993][ T6840] device veth0_vlan entered promiscuous mode [ 392.088695][ T7002] loop0: detected capacity change from 0 to 128 [ 393.193883][ T7002] FAT-fs (loop0): bogus number of reserved sectors [ 393.200795][ T7002] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 393.206233][ T6840] device veth1_vlan entered promiscuous mode [ 393.210172][ T7002] FAT-fs (loop0): Can't find a valid FAT filesystem [ 393.302324][ T7004] loop0: detected capacity change from 0 to 1024 [ 393.309724][ T7004] EXT4-fs: Ignoring removed nobh option [ 393.315342][ T7004] EXT4-fs: Ignoring removed bh option [ 393.326572][ T7004] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 393.473539][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 393.483402][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 393.492624][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 393.667060][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 393.676469][ T7004] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 393.819202][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 393.991319][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 394.088369][ T7010] loop1: detected capacity change from 0 to 40427 [ 394.126124][ T7010] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 394.134161][ T7010] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 394.181992][ T7010] F2FS-fs (loop1): invalid crc value [ 394.203527][ T6840] device veth0_macvtap entered promiscuous mode [ 394.219906][ T6840] device veth1_macvtap entered promiscuous mode [ 394.259819][ T7010] F2FS-fs (loop1): Found nat_bits in checkpoint [ 394.311912][ T7010] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 394.319153][ T7010] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 394.365490][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.420618][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.473403][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.505229][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.538082][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.627833][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.344749][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.396333][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.447935][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.484291][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.497000][ T6840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.508301][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 395.518020][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 395.526294][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 395.535444][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 395.669037][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.682401][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.692479][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.703035][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.713867][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.724496][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.734438][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.745154][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.757192][ T6840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.771632][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 395.783192][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 395.794087][ T6840] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.812905][ T6840] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.825072][ T6840] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.838860][ T6840] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.036675][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.075700][ T4429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.084220][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.092277][ T4429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.107468][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 396.131166][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 397.402515][ T7036] ufs: You didn't specify the type of your ufs filesystem [ 397.402515][ T7036] [ 397.402515][ T7036] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 397.402515][ T7036] [ 397.402515][ T7036] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 397.433826][ T7036] ufs: ufstype=old is supported read-only [ 397.443886][ T7036] I/O error, dev loop13, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 397.820549][ T7040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.591'. [ 397.829604][ T7040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.886394][ T7041] loop1: detected capacity change from 0 to 512 [ 398.669456][ T7041] EXT4-fs (loop1): 1 orphan inode deleted [ 398.675283][ T7041] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 398.688734][ T7041] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 398.843760][ T7040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.146891][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 399.435998][ T7053] loop0: detected capacity change from 0 to 16 [ 399.522319][ T7053] erofs: (device loop0): mounted with root inode @ nid 36. [ 401.115981][ T7060] loop1: detected capacity change from 0 to 4096 [ 401.318151][ T7073] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 402.127621][ T7078] CIFS mount error: No usable UNC path provided in device string! [ 402.127621][ T7078] [ 402.138065][ T7078] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 403.088439][ T7083] netlink: 32 bytes leftover after parsing attributes in process `syz.2.588'. [ 403.464584][ T7086] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 404.975726][ T7086] loop5: detected capacity change from 0 to 256 [ 404.990484][ T7086] exfat: Bad value for 'umask' [ 405.389181][ T4465] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 405.745204][ T7097] loop6: detected capacity change from 0 to 512 [ 405.762279][ T7097] FAT-fs (loop6): Unrecognized mount option "un" or missing value [ 406.760003][ T6012] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 407.797312][ T7097] loop6: detected capacity change from 0 to 32768 [ 408.130133][ T7097] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 408.520875][ T7097] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 410.714138][ T7119] loop5: detected capacity change from 0 to 16 [ 410.783270][ T7119] erofs: (device loop5): mounted with root inode @ nid 36. [ 411.310151][ T7123] loop1: detected capacity change from 0 to 16 [ 411.488144][ T7123] erofs: (device loop1): mounted with root inode @ nid 36. [ 411.731235][ T7130] loop2: detected capacity change from 0 to 256 [ 413.071884][ T7130] FAT-fs (loop2): count of clusters too big (66845694) [ 413.078895][ T7130] FAT-fs (loop2): Can't find a valid FAT filesystem [ 414.451886][ T6840] ocfs2: Unmounting device (7,6) on (node local) [ 414.564443][ T7135] netlink: 'syz.5.604': attribute type 1 has an invalid length. [ 414.833748][ T7135] device bond1 entered promiscuous mode [ 415.278105][ T7135] 8021q: adding VLAN 0 to HW filter on device bond1 [ 415.638588][ T7142] bond1: (slave bridge1): making interface the new active one [ 415.673691][ T7142] device bridge1 entered promiscuous mode [ 415.713097][ T7142] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 415.783366][ T7156] netlink: 32 bytes leftover after parsing attributes in process `syz.0.608'. [ 415.816509][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 420.602760][ T7175] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 420.612584][ T7175] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 420.622436][ T7175] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 420.708075][ T7175] syz.5.622 (7175) used greatest stack depth: 15784 bytes left [ 420.716239][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 420.731656][ T26] audit: type=1800 audit(1758935955.656:129): pid=7175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.622" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 421.249251][ T7183] netlink: 32 bytes leftover after parsing attributes in process `syz.1.625'. [ 421.811811][ T7186] loop5: detected capacity change from 0 to 4096 [ 421.862958][ T7191] netlink: 16 bytes leftover after parsing attributes in process `syz.0.615'. [ 422.060110][ T7189] loop1: detected capacity change from 0 to 8192 [ 423.991982][ T7202] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 425.605480][ T7211] CIFS mount error: No usable UNC path provided in device string! [ 425.605480][ T7211] [ 425.616525][ T7211] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 425.738766][ T7215] bridge0: port 3(vlan2) entered blocking state [ 425.745636][ T7215] bridge0: port 3(vlan2) entered disabled state [ 425.755526][ T7215] device vlan2 entered promiscuous mode [ 425.761360][ T7215] device dummy0 entered promiscuous mode [ 428.403178][ T7219] netlink: 28 bytes leftover after parsing attributes in process `syz.1.619'. [ 428.564452][ T7227] ubi31: attaching mtd0 [ 428.664769][ T7227] ubi31: scanning is finished [ 428.822552][ T7228] netlink: 12 bytes leftover after parsing attributes in process `syz.6.624'. [ 429.015042][ T7227] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 429.043138][ T7227] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 429.323538][ T7227] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 429.342086][ T7227] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 429.362369][ T7227] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 429.369986][ T7227] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 429.420348][ T7227] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2264206935 [ 429.603879][ T7238] netlink: 32 bytes leftover after parsing attributes in process `syz.5.628'. [ 430.391826][ T7227] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 430.741958][ T7230] ubi31: background thread "ubi_bgt31d" started, PID 7230 [ 432.192959][ T7252] loop2: detected capacity change from 0 to 16 [ 432.216972][ T7252] erofs: (device loop2): mounted with root inode @ nid 36. [ 434.444500][ T7265] loop0: detected capacity change from 0 to 1024 [ 434.681885][ T7265] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 435.967630][ T26] audit: type=1326 audit(1758935971.016:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7262 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e43b8eec9 code=0x7ffc0000 [ 437.282649][ T26] audit: type=1326 audit(1758935971.046:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7262 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e43b8eec9 code=0x7ffc0000 [ 437.305832][ T26] audit: type=1326 audit(1758935971.046:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7262 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f0e43b8eec9 code=0x7ffc0000 [ 437.328425][ T26] audit: type=1326 audit(1758935971.046:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7262 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e43b8eec9 code=0x7ffc0000 [ 437.351674][ T26] audit: type=1326 audit(1758935971.046:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7262 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0e43b8eec9 code=0x7ffc0000 [ 437.374881][ T26] audit: type=1326 audit(1758935971.046:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7262 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e43b8eec9 code=0x7ffc0000 [ 437.397626][ C1] vkms_vblank_simulate: vblank timer overrun [ 437.406630][ T26] audit: type=1326 audit(1758935971.046:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7262 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f0e43b8eec9 code=0x7ffc0000 [ 437.429270][ C1] vkms_vblank_simulate: vblank timer overrun [ 437.457447][ T26] audit: type=1326 audit(1758935971.046:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7262 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e43b8eec9 code=0x7ffc0000 [ 437.479840][ C1] vkms_vblank_simulate: vblank timer overrun [ 437.521001][ T26] audit: type=1326 audit(1758935971.046:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7262 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0e43b8eec9 code=0x7ffc0000 [ 437.546635][ T26] audit: type=1326 audit(1758935971.046:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7262 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e43b8eec9 code=0x7ffc0000 [ 437.705592][ T7277] loop6: detected capacity change from 0 to 512 [ 437.716085][ T7277] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal [ 438.298728][ T7285] netlink: 16 bytes leftover after parsing attributes in process `syz.5.648'. [ 440.996568][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.003052][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.326957][ T7299] loop6: detected capacity change from 0 to 4096 [ 443.083853][ T4283] Bluetooth: hci1: command 0x0405 tx timeout [ 443.379595][ T7309] binder: BINDER_SET_CONTEXT_MGR already set [ 443.397098][ T7309] binder: 7301:7309 ioctl 4018620d 200000000040 returned -16 [ 443.423146][ T7313] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 443.767916][ T4342] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 443.927883][ T4342] usb 2-1: device descriptor read/64, error -71 [ 444.678361][ T7318] loop2: detected capacity change from 0 to 65536 [ 445.001892][ T7324] CIFS mount error: No usable UNC path provided in device string! [ 445.001892][ T7324] [ 445.012467][ T7324] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 445.075330][ T7311] loop0: detected capacity change from 0 to 4096 [ 445.706072][ T7318] XFS (loop2): Mounting V5 Filesystem [ 445.815287][ T7318] XFS (loop2): Ending clean mount [ 445.824491][ T7318] XFS (loop2): Quotacheck needed: Please wait. [ 446.215917][ T7337] Error parsing options; rc = [-22] [ 446.292492][ T7338] loop0: detected capacity change from 0 to 64 [ 447.183879][ T7318] XFS (loop2): Quotacheck: Done. [ 447.516358][ T4279] XFS (loop2): Unmounting Filesystem [ 460.312830][ T7414] loop5: detected capacity change from 0 to 4096 [ 460.557864][ T4465] I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 461.883398][ T7428] Error parsing options; rc = [-22] [ 462.258440][ T7428] loop5: detected capacity change from 0 to 64 [ 463.000502][ T7434] loop0: detected capacity change from 0 to 16 [ 463.041641][ T7437] loop1: detected capacity change from 0 to 16 [ 463.082836][ T7434] erofs: (device loop0): mounted with root inode @ nid 36. [ 463.131934][ T7437] erofs: (device loop1): mounted with root inode @ nid 36. [ 463.603989][ T5799] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 468.312884][ T5799] usb 3-1: device descriptor read/64, error -71 [ 469.148712][ T7452] loop1: detected capacity change from 0 to 512 [ 469.360073][ T7452] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 471.086499][ T7471] netlink: 32 bytes leftover after parsing attributes in process `syz.1.679'. [ 472.627856][ T4438] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 472.954796][ T4438] usb 1-1: unable to get BOS descriptor or descriptor too short [ 472.969921][ T4438] usb 1-1: not running at top speed; connect to a high speed hub [ 472.979795][ T4438] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 473.097075][ T4438] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 473.126174][ T4438] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 473.152918][ T4438] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.163057][ T4438] usb 1-1: Product: syz [ 473.170887][ T4438] usb 1-1: Manufacturer: syz [ 473.175833][ T4438] usb 1-1: SerialNumber: syz [ 473.512687][ T4438] usb 1-1: 0:2 : does not exist [ 473.537939][ T6374] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 473.678180][ T4438] usb 1-1: USB disconnect, device number 8 [ 473.749983][ T6374] usb 3-1: config 4 has an invalid interface number: 88 but max is 0 [ 473.782386][ T6374] usb 3-1: config 4 has no interface number 0 [ 473.784446][ T7487] netlink: 'syz.5.683': attribute type 10 has an invalid length. [ 473.847635][ T6374] usb 3-1: config 4 interface 88 altsetting 119 has a duplicate endpoint with address 0xB, skipping [ 473.863679][ T6374] usb 3-1: config 4 interface 88 has no altsetting 0 [ 473.880384][ T6374] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 473.895228][ T6374] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.913126][ T6374] usb 3-1: Product: syz [ 473.927266][ T6374] usb 3-1: Manufacturer: syz [ 473.935339][ T6374] usb 3-1: SerialNumber: syz [ 474.180668][ T6375] usb 3-1: USB disconnect, device number 8 [ 474.267082][ T7487] batman_adv: batadv0: Adding interface: team0 [ 474.315185][ T7487] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.369063][ T7490] loop1: detected capacity change from 0 to 128 [ 474.378729][ T7487] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 474.408791][ T7491] netlink: 'syz.5.683': attribute type 10 has an invalid length. [ 474.418068][ T7491] netlink: 2 bytes leftover after parsing attributes in process `syz.5.683'. [ 474.475649][ T7491] device team0 entered promiscuous mode [ 474.509745][ T7491] device team_slave_0 entered promiscuous mode [ 474.528325][ T7491] device team_slave_1 entered promiscuous mode [ 474.593871][ T7493] loop0: detected capacity change from 0 to 16 [ 474.628353][ T7493] erofs: (device loop0): mounted with root inode @ nid 36. [ 474.736803][ T7491] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.908847][ T7491] batman_adv: batadv0: Interface activated: team0 [ 476.032585][ T7491] batman_adv: batadv0: Interface deactivated: team0 [ 476.075062][ T7491] batman_adv: batadv0: Removing interface: team0 [ 476.130687][ T7491] bridge0: port 3(team0) entered blocking state [ 476.153285][ T7491] bridge0: port 3(team0) entered disabled state [ 476.220856][ T7491] bridge0: port 3(team0) entered blocking state [ 476.227387][ T7491] bridge0: port 3(team0) entered forwarding state [ 476.453528][ T6375] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 478.402491][ T6375] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 478.547335][ T6375] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 478.577945][ T27] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 478.599584][ T6375] usb 3-1: New USB device found, idVendor=12b8, idProduct=ec62, bcdDevice= 4.34 [ 478.642576][ T7516] loop0: detected capacity change from 0 to 16 [ 478.646245][ T6375] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.685313][ T6375] usb 3-1: config 0 descriptor?? [ 478.725538][ T6375] cp210x 3-1:0.0: cp210x converter detected [ 478.734702][ T7516] erofs: (device loop0): mounted with root inode @ nid 36. [ 478.767844][ T27] usb 7-1: device descriptor read/64, error -71 [ 483.664737][ T6375] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 483.709625][ T6375] cp210x 3-1:0.0: querying part number failed [ 483.926012][ T7524] netlink: 32 bytes leftover after parsing attributes in process `syz.6.693'. [ 484.321815][ T6375] usb 3-1: cp210x converter now attached to ttyUSB0 [ 484.339917][ T6375] usb 3-1: USB disconnect, device number 9 [ 484.348956][ T6375] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 484.359393][ T6375] cp210x 3-1:0.0: device disconnected [ 484.582526][ T7527] loop2: detected capacity change from 0 to 512 [ 485.083612][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.5.697'. [ 485.715989][ T7535] loop6: detected capacity change from 0 to 128 [ 485.959571][ T7535] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 485.993857][ T7535] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 486.014719][ T7535] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 486.045231][ T7535] UDF-fs: Scanning with blocksize 512 failed [ 486.056993][ T7535] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 486.076361][ T7535] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 486.089869][ T7535] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 486.098032][ T7535] UDF-fs: Scanning with blocksize 1024 failed [ 486.105412][ T7535] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 486.116809][ T7535] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 486.127581][ T7535] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 486.136898][ T7535] UDF-fs: Scanning with blocksize 2048 failed [ 486.153627][ T7535] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 486.208519][ T7535] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 486.267267][ T7535] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 486.489557][ T7535] UDF-fs: Scanning with blocksize 4096 failed [ 486.496008][ T7535] UDF-fs: warning (device loop6): udf_fill_super: No partition found (1) [ 487.030427][ T7555] binder: BINDER_SET_CONTEXT_MGR already set [ 487.040797][ T7555] binder: 7547:7555 ioctl 4018620d 200000000040 returned -16 [ 487.087975][ T14] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 487.580512][ T7557] loop5: detected capacity change from 0 to 16 [ 487.619821][ T7557] erofs: (device loop5): mounted with root inode @ nid 36. [ 487.677958][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 487.685035][ T14] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 487.715643][ T14] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 487.737040][ T14] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 487.758566][ T14] usb 3-1: config 1 interface 0 has no altsetting 0 [ 487.786696][ T14] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 487.816340][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.831345][ T14] usb 3-1: Product: syz [ 487.835646][ T14] usb 3-1: Manufacturer: syz [ 487.855367][ T7559] loop0: detected capacity change from 0 to 2048 [ 487.864162][ T14] usb 3-1: SerialNumber: syz [ 487.888191][ T7544] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 487.923042][ T7544] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 487.969865][ T7559] hpfs: filesystem error: dir band size mismatch: dir_band_start==7b318cc2, dir_band_end==7b318cc3, n_dir_band==00000000; already mounted read-only [ 487.984447][ T7563] loop6: detected capacity change from 0 to 4096 [ 487.993507][ T7564] loop1: detected capacity change from 0 to 16 [ 488.248379][ T7564] erofs: (device loop1): mounted with root inode @ nid 36. [ 488.864984][ T7567] Error parsing options; rc = [-22] [ 491.428522][ T14] usb 3-1: bad CDC descriptors [ 491.457547][ T14] usb 3-1: USB disconnect, device number 10 [ 491.986233][ T7582] netlink: 32 bytes leftover after parsing attributes in process `syz.6.707'. [ 493.108996][ T7592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.710'. [ 495.200851][ T7600] loop5: detected capacity change from 0 to 16 [ 495.305156][ T7600] erofs: (device loop5): mounted with root inode @ nid 36. [ 496.209954][ T7606] loop0: detected capacity change from 0 to 4096 [ 497.773639][ T7612] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 498.902180][ T7617] CIFS mount error: No usable UNC path provided in device string! [ 498.902180][ T7617] [ 498.913897][ T7617] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 499.314800][ T7622] loop5: detected capacity change from 0 to 512 [ 499.392718][ T7622] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 499.428100][ T7622] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 499.453149][ T7626] netlink: 'syz.6.718': attribute type 1 has an invalid length. [ 499.690062][ T7626] device bond1 entered promiscuous mode [ 499.696972][ T7626] 8021q: adding VLAN 0 to HW filter on device bond1 [ 500.242021][ T7632] EXT4-fs error (device loop5): ext4_do_update_inode:5254: inode #2: comm syz.5.719: corrupted inode contents [ 500.263167][ T7632] EXT4-fs error (device loop5): ext4_dirty_inode:6119: inode #2: comm syz.5.719: mark_inode_dirty error [ 500.276673][ T7632] EXT4-fs error (device loop5): ext4_do_update_inode:5254: inode #2: comm syz.5.719: corrupted inode contents [ 500.289637][ T7632] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #2: comm syz.5.719: mark_inode_dirty error [ 500.409329][ T5170] EXT4-fs (loop5): unmounting filesystem. [ 500.499184][ T7629] bond1: (slave bridge1): making interface the new active one [ 500.603725][ T7640] netlink: 32 bytes leftover after parsing attributes in process `syz.1.721'. [ 500.966279][ T7629] device bridge1 entered promiscuous mode [ 501.323318][ T7629] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 501.332286][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 501.751253][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.758588][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.703157][ T7657] loop1: detected capacity change from 0 to 16 [ 502.712234][ T7657] erofs: (device loop1): mounted with root inode @ nid 36. [ 506.881129][ T7683] loop0: detected capacity change from 0 to 16 [ 507.008497][ T7683] erofs: (device loop0): mounted with root inode @ nid 36. [ 509.091413][ T7697] loop6: detected capacity change from 0 to 512 [ 509.173439][ T7700] loop5: detected capacity change from 0 to 16 [ 509.174832][ T7697] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 509.340624][ T7697] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 509.356785][ T7700] erofs: (device loop5): mounted with root inode @ nid 36. [ 510.278225][ T7713] EXT4-fs error (device loop6): ext4_do_update_inode:5254: inode #2: comm syz.6.733: corrupted inode contents [ 510.290770][ T7713] EXT4-fs error (device loop6): ext4_dirty_inode:6119: inode #2: comm syz.6.733: mark_inode_dirty error [ 510.309413][ T7713] EXT4-fs error (device loop6): ext4_do_update_inode:5254: inode #2: comm syz.6.733: corrupted inode contents [ 510.401229][ T7713] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #2: comm syz.6.733: mark_inode_dirty error [ 510.541635][ T6840] EXT4-fs (loop6): unmounting filesystem. [ 510.745237][ T7718] loop0: detected capacity change from 0 to 2048 [ 510.824617][ T7722] loop5: detected capacity change from 0 to 16 [ 510.846999][ T7718] loop0: p1 p3 < > p4 < p5 > [ 510.866575][ T7718] loop0: partition table partially beyond EOD, truncated [ 510.884765][ T7718] loop0: p1 size 33024 extends beyond EOD, truncated [ 511.106616][ T7718] loop0: p3 start 4284289 is beyond EOD, truncated [ 511.115383][ T7722] erofs: (device loop5): mounted with root inode @ nid 36. [ 511.178526][ T7723] loop6: detected capacity change from 0 to 40427 [ 511.333180][ T7723] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 511.341427][ T7723] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 511.353240][ T7723] F2FS-fs (loop6): invalid crc value [ 511.364039][ T7723] F2FS-fs (loop6): Found nat_bits in checkpoint [ 511.541773][ T7718] loop0: p5 size 33024 extends beyond EOD, truncated [ 512.972956][ T7723] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 512.980146][ T7723] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 514.244433][ T4617] udevd[4617]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 514.245147][ T4383] udevd[4383]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 514.275192][ T4465] udevd[4465]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 515.878455][ T7758] loop6: detected capacity change from 0 to 8 [ 515.920311][ T7758] squashfs image failed sanity check [ 515.944648][ T7761] loop0: detected capacity change from 0 to 16 [ 516.011311][ T7761] erofs: (device loop0): mounted with root inode @ nid 36. [ 516.246645][ T7760] tmpfs: Bad value for 'mpol' [ 518.336506][ T7774] ptrace attach of "./syz-executor exec"[7775] was attempted by "./syz-executor exec"[7774] [ 523.339533][ T4283] Bluetooth: hci5: command 0x0406 tx timeout [ 523.932836][ T7802] loop1: detected capacity change from 0 to 164 [ 523.947927][ T4419] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 524.166810][ T4419] usb 7-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x7F, skipping [ 524.240237][ T4419] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 524.340600][ T4419] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 524.356876][ T4419] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 524.381189][ T4419] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 524.389877][ T4419] usb 7-1: SerialNumber: syz [ 524.551840][ T7798] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 524.560708][ T7798] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 524.800374][ T4419] usb 7-1: USB disconnect, device number 4 [ 525.066457][ T7813] loop5: detected capacity change from 0 to 16 [ 525.134776][ T7813] erofs: (device loop5): mounted with root inode @ nid 36. [ 525.786839][ T7820] ptrace attach of "./syz-executor exec"[7822] was attempted by "./syz-executor exec"[7820] [ 530.010839][ T7839] loop1: detected capacity change from 0 to 512 [ 532.902565][ T7861] loop5: detected capacity change from 0 to 32768 [ 533.267856][ T7861] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 533.367006][ T7861] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 533.934133][ T5170] ocfs2: Unmounting device (7,5) on (node local) [ 535.237366][ T7876] loop5: detected capacity change from 0 to 16 [ 535.249012][ T7877] loop2: detected capacity change from 0 to 16 [ 535.267647][ T7876] erofs: (device loop5): mounted with root inode @ nid 36. [ 535.288565][ T7877] erofs: (device loop2): erofs_init_device: empty device tag @ pos 0 [ 537.348022][ T6374] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 537.374993][ T7894] loop6: detected capacity change from 0 to 164 [ 537.545366][ T7896] loop5: detected capacity change from 0 to 128 [ 537.553873][ T6374] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x7F, skipping [ 537.582808][ T6374] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 537.740406][ T6374] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 537.743455][ T7900] netlink: 44 bytes leftover after parsing attributes in process `syz.0.790'. [ 537.830804][ T6374] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 538.242150][ T6374] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 538.340711][ T6374] usb 3-1: SerialNumber: syz [ 538.351039][ T7904] loop6: detected capacity change from 0 to 512 [ 538.362252][ T7887] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 538.428118][ T7887] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 538.489831][ T7909] loop0: detected capacity change from 0 to 8 [ 538.502439][ T7904] [ 538.504899][ T7904] ====================================================== [ 538.511964][ T7904] WARNING: possible circular locking dependency detected [ 538.519023][ T7904] syzkaller #0 Not tainted [ 538.523572][ T7904] ------------------------------------------------------ [ 538.530635][ T7904] syz.6.791/7904 is trying to acquire lock: [ 538.536653][ T7904] ffff8880716548c0 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x316/0x1b60 [ 538.546250][ T7904] [ 538.546250][ T7904] but task is already holding lock: [ 538.553651][ T7904] ffff8880641d4208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_read_dquot+0x4a/0x110 [ 538.563214][ T7904] [ 538.563214][ T7904] which lock already depends on the new lock. [ 538.563214][ T7904] [ 538.573658][ T7904] [ 538.573658][ T7904] the existing dependency chain (in reverse order) is: [ 538.582904][ T7904] [ 538.582904][ T7904] -> #2 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 538.591049][ T7904] down_read+0x42/0x2d0 [ 538.595784][ T7904] v2_read_dquot+0x4a/0x110 [ 538.600873][ T7904] dquot_acquire+0x152/0x520 [ 538.606202][ T7904] ext4_acquire_dquot+0x2d9/0x4a0 [ 538.612066][ T7904] dqget+0x778/0xeb0 [ 538.616544][ T7904] __dquot_initialize+0x3b6/0xcb0 [ 538.622507][ T7904] ext4_file_open+0x2cb/0x6a0 [ 538.623178][ T7914] loop5: detected capacity change from 0 to 128 [ 538.628079][ T7904] do_dentry_open+0x7e9/0x10d0 [ 538.628108][ T7904] path_openat+0x25c6/0x2e70 [ 538.628125][ T7904] do_filp_open+0x1c1/0x3c0 [ 538.628141][ T7904] do_sys_openat2+0x142/0x490 [ 538.655234][ T7904] __x64_sys_openat+0x135/0x160 [ 538.660660][ T7904] do_syscall_64+0x4c/0xa0 [ 538.665725][ T7904] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 538.672166][ T7904] [ 538.672166][ T7904] -> #1 (&dquot->dq_lock){+.+.}-{3:3}: [ 538.679865][ T7904] __mutex_lock+0x120/0xaf0 [ 538.684935][ T7904] dquot_commit+0x5a/0x410 [ 538.689893][ T7904] ext4_write_dquot+0x1f0/0x360 [ 538.695282][ T7904] mark_all_dquot_dirty+0xf9/0x400 [ 538.700931][ T7904] __dquot_alloc_space+0x5fc/0xe60 [ 538.706608][ T7904] ext4_mb_new_blocks+0xf74/0x4720 [ 538.712284][ T7904] ext4_ext_map_blocks+0x143c/0x66d0 [ 538.718106][ T7904] ext4_map_blocks+0x9d1/0x1b60 [ 538.723588][ T7904] ext4_getblk+0x1ab/0x6d0 [ 538.728544][ T7904] ext4_bread+0x26/0x170 [ 538.733327][ T7904] ext4_append+0x2c3/0x560 [ 538.738282][ T7904] ext4_init_new_dir+0x2b8/0x570 [ 538.743764][ T7904] ext4_mkdir+0x47d/0xc50 [ 538.748636][ T7904] vfs_mkdir+0x387/0x570 [ 538.753457][ T7904] do_mkdirat+0x1d0/0x430 [ 538.758346][ T7904] __x64_sys_mkdirat+0x85/0x90 [ 538.763654][ T7904] do_syscall_64+0x4c/0xa0 [ 538.768612][ T7904] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 538.775317][ T7904] [ 538.775317][ T7904] -> #0 (&ei->i_data_sem/2){++++}-{3:3}: [ 538.783444][ T7904] __lock_acquire+0x2cf8/0x7c50 [ 538.789024][ T7904] lock_acquire+0x1b4/0x490 [ 538.794068][ T7904] down_read+0x42/0x2d0 [ 538.798873][ T7904] ext4_map_blocks+0x316/0x1b60 [ 538.804303][ T7904] ext4_getblk+0x1ab/0x6d0 [ 538.809384][ T7904] ext4_bread+0x26/0x170 [ 538.814215][ T7904] ext4_quota_read+0x180/0x380 [ 538.819525][ T7904] find_tree_dqentry+0x1cd/0xf30 [ 538.825011][ T7904] find_tree_dqentry+0x6b0/0xf30 [ 538.830486][ T7904] find_tree_dqentry+0x6b0/0xf30 [ 538.836150][ T7904] find_tree_dqentry+0x6b0/0xf30 [ 538.841628][ T7904] qtree_read_dquot+0x558/0x7f0 [ 538.847029][ T7904] v2_read_dquot+0xc0/0x110 [ 538.852072][ T7904] dquot_acquire+0x152/0x520 [ 538.857301][ T7904] ext4_acquire_dquot+0x2d9/0x4a0 [ 538.862913][ T7904] dqget+0x778/0xeb0 [ 538.867932][ T7904] __dquot_initialize+0x328/0xcb0 [ 538.873507][ T7904] ext4_process_orphan+0x54/0x300 [ 538.879536][ T7904] ext4_orphan_cleanup+0xbd3/0x1400 [ 538.885335][ T7904] ext4_fill_super+0x7bc2/0x8150 [ 538.891088][ T7904] get_tree_bdev+0x3f1/0x610 [ 538.896616][ T7904] vfs_get_tree+0x88/0x270 [ 538.901814][ T7904] do_new_mount+0x24a/0xa40 [ 538.906883][ T7904] __se_sys_mount+0x2d6/0x3c0 [ 538.912464][ T7904] do_syscall_64+0x4c/0xa0 [ 538.917712][ T7904] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 538.924266][ T7904] [ 538.924266][ T7904] other info that might help us debug this: [ 538.924266][ T7904] [ 538.934680][ T7904] Chain exists of: [ 538.934680][ T7904] &ei->i_data_sem/2 --> &dquot->dq_lock --> &s->s_dquot.dqio_sem [ 538.934680][ T7904] [ 538.948620][ T7904] Possible unsafe locking scenario: [ 538.948620][ T7904] [ 538.956195][ T7904] CPU0 CPU1 [ 538.961666][ T7904] ---- ---- [ 538.967141][ T7904] lock(&s->s_dquot.dqio_sem); [ 538.972093][ T7904] lock(&dquot->dq_lock); [ 538.979051][ T7904] lock(&s->s_dquot.dqio_sem); [ 538.986435][ T7904] lock(&ei->i_data_sem/2); [ 538.991129][ T7904] [ 538.991129][ T7904] *** DEADLOCK *** [ 538.991129][ T7904] [ 538.999285][ T7904] 3 locks held by syz.6.791/7904: [ 539.004373][ T7904] #0: ffff8880641d40e0 (&type->s_umount_key#27/1){+.+.}-{3:3}, at: alloc_super+0x1fa/0x930 [ 539.014525][ T7904] #1: ffff88805573e7a8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_acquire+0x63/0x520 [ 539.023963][ T7904] #2: ffff8880641d4208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_read_dquot+0x4a/0x110 [ 539.033818][ T7904] [ 539.033818][ T7904] stack backtrace: [ 539.039819][ T7904] CPU: 0 PID: 7904 Comm: syz.6.791 Not tainted syzkaller #0 [ 539.047142][ T7904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 539.057315][ T7904] Call Trace: [ 539.060617][ T7904] [ 539.063663][ T7904] dump_stack_lvl+0x168/0x22e [ 539.068376][ T7904] ? load_image+0x3b0/0x3b0 [ 539.072923][ T7904] ? show_regs_print_info+0x12/0x12 [ 539.078148][ T7904] ? print_circular_bug+0x12b/0x1a0 [ 539.083373][ T7904] check_noncircular+0x274/0x310 [ 539.088338][ T7904] ? add_chain_block+0x940/0x940 [ 539.093512][ T7904] ? lockdep_lock+0xdc/0x1e0 [ 539.098159][ T7904] ? mark_lock+0x94/0x320 [ 539.102511][ T7904] ? _find_first_zero_bit+0xcf/0x100 [ 539.107827][ T7904] __lock_acquire+0x2cf8/0x7c50 [ 539.112730][ T7904] ? mark_lock+0x94/0x320 [ 539.117079][ T7904] ? verify_lock_unused+0x140/0x140 [ 539.122923][ T7904] ? is_bpf_text_address+0x22/0x2a0 [ 539.128170][ T7904] ? __lock_acquire+0x7c50/0x7c50 [ 539.133352][ T7904] lock_acquire+0x1b4/0x490 [ 539.137878][ T7904] ? ext4_map_blocks+0x316/0x1b60 [ 539.142955][ T7904] ? is_bpf_text_address+0x28b/0x2a0 [ 539.148309][ T7904] ? __might_sleep+0xd0/0xd0 [ 539.152933][ T7904] ? read_lock_is_recursive+0x10/0x10 [ 539.158331][ T7904] ? rcu_is_watching+0x11/0xa0 [ 539.163164][ T7904] down_read+0x42/0x2d0 [ 539.167518][ T7904] ? ext4_map_blocks+0x316/0x1b60 [ 539.172566][ T7904] ext4_map_blocks+0x316/0x1b60 [ 539.177440][ T7904] ? __stack_depot_save+0x35/0x460 [ 539.182574][ T7904] ? __kasan_kmalloc+0x8e/0xa0 [ 539.187371][ T7904] ? __kmalloc+0xb0/0x240 [ 539.191822][ T7904] ? find_tree_dqentry+0x56/0xf30 [ 539.196865][ T7904] ? ext4_issue_zeroout+0x250/0x250 [ 539.202174][ T7904] ? qtree_read_dquot+0x558/0x7f0 [ 539.207227][ T7904] ? ext4_process_orphan+0x54/0x300 [ 539.212555][ T7904] ? ext4_orphan_cleanup+0xbd3/0x1400 [ 539.217982][ T7904] ? ext4_fill_super+0x7bc2/0x8150 [ 539.223135][ T7904] ? get_tree_bdev+0x3f1/0x610 [ 539.227924][ T7904] ? vfs_get_tree+0x88/0x270 [ 539.232576][ T7904] ? do_new_mount+0x24a/0xa40 [ 539.237262][ T7904] ? __se_sys_mount+0x2d6/0x3c0 [ 539.242284][ T7904] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 539.248630][ T7904] ext4_getblk+0x1ab/0x6d0 [ 539.253279][ T7904] ? ext4_get_block_unwritten+0x100/0x100 [ 539.259142][ T7904] ext4_bread+0x26/0x170 [ 539.263425][ T7904] ext4_quota_read+0x180/0x380 [ 539.268482][ T7904] find_tree_dqentry+0x1cd/0xf30 [ 539.273440][ T7904] ? ext4_show_options+0x50/0x50 [ 539.278661][ T7904] ? ext4_quota_read+0x305/0x380 [ 539.283618][ T7904] find_tree_dqentry+0x6b0/0xf30 [ 539.288643][ T7904] find_tree_dqentry+0x6b0/0xf30 [ 539.293690][ T7904] find_tree_dqentry+0x6b0/0xf30 [ 539.298691][ T7904] qtree_read_dquot+0x558/0x7f0 [ 539.303671][ T7904] ? read_lock_is_recursive+0x10/0x10 [ 539.309162][ T7904] ? remove_tree+0x2150/0x2150 [ 539.314053][ T7904] ? trace_contention_end+0x5f/0x170 [ 539.319439][ T7904] ? preempt_count_add+0x8d/0x190 [ 539.324482][ T7904] ? down_read+0x1a8/0x2d0 [ 539.328921][ T7904] v2_read_dquot+0xc0/0x110 [ 539.333462][ T7904] dquot_acquire+0x152/0x520 [ 539.338081][ T7904] ? __ext4_journal_start_sb+0x1dd/0x3d0 [ 539.343774][ T7904] ext4_acquire_dquot+0x2d9/0x4a0 [ 539.348930][ T7904] dqget+0x778/0xeb0 [ 539.353118][ T7904] __dquot_initialize+0x328/0xcb0 [ 539.358161][ T7904] ? dquot_initialize+0x20/0x20 [ 539.363024][ T7904] ? ext4_get_projid+0x140/0x140 [ 539.368079][ T7904] ext4_process_orphan+0x54/0x300 [ 539.373390][ T7904] ext4_orphan_cleanup+0xbd3/0x1400 [ 539.378987][ T7904] ? ext4_orphan_del+0xb90/0xb90 [ 539.383956][ T7904] ? errseq_check_and_advance+0x62/0x120 [ 539.389697][ T7904] ext4_fill_super+0x7bc2/0x8150 [ 539.394667][ T7904] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 539.401103][ T7904] ? snprintf+0xd7/0x120 [ 539.405375][ T7904] ? preempt_count_add+0x8d/0x190 [ 539.410420][ T7904] ? set_blocksize+0x1d3/0x350 [ 539.415215][ T7904] ? sb_set_blocksize+0xa5/0xe0 [ 539.420214][ T7904] get_tree_bdev+0x3f1/0x610 [ 539.424960][ T7904] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 539.431404][ T7904] vfs_get_tree+0x88/0x270 [ 539.435839][ T7904] do_new_mount+0x24a/0xa40 [ 539.440452][ T7904] __se_sys_mount+0x2d6/0x3c0 [ 539.445233][ T7904] ? __x64_sys_mount+0xc0/0xc0 [ 539.450031][ T7904] ? lockdep_hardirqs_on+0x94/0x140 [ 539.455281][ T7904] ? __x64_sys_mount+0x1c/0xc0 [ 539.460192][ T7904] do_syscall_64+0x4c/0xa0 [ 539.464748][ T7904] ? clear_bhb_loop+0x60/0xb0 [ 539.469463][ T7904] ? clear_bhb_loop+0x60/0xb0 [ 539.474187][ T7904] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 539.480100][ T7904] RIP: 0033:0x7f98c759066a [ 539.484545][ T7904] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.504319][ T7904] RSP: 002b:00007f98c838ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 539.512861][ T7904] RAX: ffffffffffffffda RBX: 00007f98c838eef0 RCX: 00007f98c759066a [ 539.521027][ T7904] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 00007f98c838eeb0 [ 539.529098][ T7904] RBP: 0000200000000040 R08: 00007f98c838eef0 R09: 0000000002000008 [ 539.537087][ T7904] R10: 0000000002000008 R11: 0000000000000246 R12: 0000200000000000 [ 539.545073][ T7904] R13: 00007f98c838eeb0 R14: 000000000000053e R15: 00002000000003c0 [ 539.553075][ T7904] [ 539.572092][ T7914] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 539.621637][ T6367] usb 3-1: USB disconnect, device number 11 [ 539.622156][ T7904] __quota_error: 1 callbacks suppressed [ 539.622175][ T7904] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 539.683561][ T7904] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 539.684788][ T7914] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 539.704472][ T7904] EXT4-fs error (device loop6): ext4_acquire_dquot:6816: comm syz.6.791: Failed to acquire dquot type 1 [ 539.756192][ T7914] overlayfs: bad mount option "redirect_dir=follow:/" [ 539.775261][ T7904] EXT4-fs (loop6): 1 truncate cleaned up [ 539.793805][ T7904] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 539.803660][ T7904] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 539.827532][ T7904] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 539.851120][ T7904] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 539.861545][ T7904] EXT4-fs error (device loop6): ext4_acquire_dquot:6816: comm syz.6.791: Failed to acquire dquot type 1 [ 539.887850][ T6840] EXT4-fs (loop6): unmounting filesystem.