last executing test programs: 6m25.252316527s ago: executing program 4 (id=56): syz_pidfd_open(0x0, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1200800, &(0x7f00000008c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303031302c6e6c733d69736f383835392d332c747970653d78fa42012c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="00000000f5", @ANYRESHEX=0x0, @ANYBLOB="056c"], 0x3, 0x6ae, &(0x7f0000000e40)="$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") syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000040)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) memfd_create(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405668, &(0x7f0000000080)={0xb, 0x1, 0x0, "1c13ebdaf2f20d55800000000000000000000009234700", 0x584e4f53}) fsmount(r2, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 6m24.688570641s ago: executing program 4 (id=57): r0 = socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x143902) io_submit(r1, 0x2, &(0x7f0000000640)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x1, r0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3}]) 6m24.348850324s ago: executing program 4 (id=58): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f0000000240)={[{@space_cache_v1}, {@autodefrag}, {@ref_verify}, {@compress_algo={'compress', 0x3d, 'no'}}, {@clear_cache}, {@discard_sync}, {@space_cache_v1}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$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") setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x2}], 0x1c) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0xc400941b, &(0x7f0000000000)={0x1, 0x500000}) 6m22.60081665s ago: executing program 4 (id=62): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$eJzs3E9rXOUaAPDnnCZtb5t7Jxfu4uJKqFih9iRN1a6EiOtCoR+ghslJCDnJhMykNjFg68KFIKgI/ulGv4EbRXBT+h0UwZ2CC0FrGheCi8iZzEx1OpOObdKR+vvBmfO875kzz/vMHF7mwLwTwD/W4+VDEjEWERciotLqTyPicDM6GnF193m3tzar21ub1SR2di7eSsrTmn3t10pa++PRPCX+HxE3RyNOvXZ33vr6xuJMUeSrrfZEY2llor6+cXphaWY+n8+XpyYnz559burZZyb3rdY3X/nkpzc+f/HLD88t/fb8radnk5hu1h1ddeyn3fdkNKa7+pcPItkQJcMeAAAAAym/5x+KiJHmt9RKHGpGAAAAwKNk58gOAAAA8MhLYtgjAAAAAA5W+3cAt7c2q+3tYf7+4McXImL8ztri7U7+keYa4oijMRoRx7aTP61MSHZPgwdy9VpE3Jjucf0nrevv/nWvXLdG+u/nRjn/TPea/9LO/BM95p+R9n8nPKD2/Ld91/x3J/+hPvPfhQFzHFk9+VXf/NciHhvplT/p5E/65H9pwPyfjn3zbb9jOx9HnIze+f+Ya4//h5iYWyjy1mPPHCc+e/XUXvUf65c/2bv+lQHr/+761Hy/uaTM/9SJvT//XvnLa+Kt1jjSiHi7tS/b73TlePLm5Ad71T/bp/57ff4fDVj/F69vfD/gUwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKApjYixSNKsE6dplkUcj4j/xbG0qNUbp+Zqa8uz5bGI8RhN5xaKfDIiKrvtpGyfacZ32lNd7bMR8d+IeLfyr2Y7q9aK2WEXDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMfxiBiLJM0iIo2IXyppmmXDHhUAAACw78aHPQAAAADgwLn/BwAAgEef+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgIbhw/ny57WxvbVbL9uzl9bXF2uXTs3l9MVtaq2bV2upKNl+rzRd5Vq0t3ev1ilpt5Vwsr12ZaOT1xkR9fePSUm1tuXFpYWlmPr+Ujz6UqgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPirxppbkmYRkTbjNM2yiH9HxHiMJnMLRT4ZEf+JiK8ro0fK9plhDxoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB9V1/fWJwpinxVIBAIOsGwZyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIahvr6xOFMU+Wp92CMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABguNIfkogot5OVJ8a6jx5Ofq009xHx8vWL712ZaTRWz5T9P3f6G++3+qeGMX4AAACgW/s+vX0fDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMKj6+sbiTFHkqwcYDLtGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/vweAAD//4rSy1s=") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file7\x00', 0x21) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x107) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x800, 0x8005, 0x0, 0x0, 0x19, 0x4, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c627f7877278fd421361fdcf3307000200c2542ded71038259ca171ce1a311ef54ece9b48b000000110000400000000400", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x4000040204]}) setxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file7\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) 6m21.102722674s ago: executing program 4 (id=65): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) syz_clone3(0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080002000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000080)=0x5) r6 = syz_open_procfs(0x0, 0x0) lseek(r6, 0xcbe, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r7 = accept4$x25(r0, &(0x7f0000000180), &(0x7f0000000200)=0x12, 0x80000) ioctl$sock_x25_SIOCADDRT(r7, 0x890b, &(0x7f0000000300)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x2, 'syz_tun\x00'}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ptrace$pokeuser(0x6, r8, 0x358, 0x0) 6m19.51045503s ago: executing program 4 (id=71): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) read(r0, 0x0, 0x0) 6m19.0249661s ago: executing program 32 (id=71): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) read(r0, 0x0, 0x0) 1m28.415876581s ago: executing program 0 (id=764): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000e80000000000"]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) sendmmsg$sock(r4, &(0x7f0000003280)=[{{&(0x7f00000005c0)=@isdn={0x22, 0x4, 0x3, 0xd, 0x7}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001640)}], 0x1, &(0x7f0000003400)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x7f}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x320d}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0xd8}}, {{&(0x7f0000001b40)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x3}}, 0x80, &(0x7f0000003080), 0x0, &(0x7f0000003140)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x6a7b}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f00000031c0)="aa5b4b1b5be3a8732f104898ef22de94580a9e17", 0x14}], 0x1, &(0x7f0000003240)=[@timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x8000}}], 0x30}}], 0x4, 0x410c1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) 1m26.795274584s ago: executing program 0 (id=768): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r6, 0x2285, &(0x7f00000001c0)={0x53, 0xfffffffffffffffc, 0x0, 0x7, @buffer={0x0, 0x0, 0x0}, &(0x7f00000002c0), 0x0, 0xee2, 0x10013, 0x0, 0x0}) mmap(&(0x7f0000529000/0x1000)=nil, 0x1000, 0x2, 0x28011, r5, 0x4000) ftruncate(r5, 0x81ff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r1, r5, 0x0, 0x1, &(0x7f0000000180)='\x00'}, 0x30) 1m24.596426511s ago: executing program 0 (id=772): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000400)='cgroup.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000d40)=""/53, 0x35}], 0x1, 0x0, 0x8bd7) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) vmsplice(r0, &(0x7f0000000680)=[{&(0x7f00000002c0)="bb976f4e2ad4b686ae1b578e137643149559c5dff355a68ea8b0ac5a7df60d63ea906e78000ae4c86e8d5b1161c92da4224d81702f17f9aba5d4b40555323c3ead14d359b2c1442d9ba03a0ce0f7d91ee15d1b1ab6892e2b48b51cae22656a5e6ca7", 0x62}, {&(0x7f0000000540)="5d3b422866a75868aaee05157a692975db98482cb33459cfb3a90bb6db2f89cef9ccf34921a70443e0279c14ab9ad720ba19735c4e931e4fa84bd5ab205a02966a591b116cf79d545b229972bb72d5226da125eeebd8207451ecbeac9c536cc6bc37474302f8bb9fe03343b12fafbb07e7da1351cae1a02d4de7c71016ef5900c4a4018774acece75768", 0x8a}, {&(0x7f0000000180)="904e21ed317a", 0x6}, {&(0x7f0000000740)="fa5508a3d2b1635bb3a3c3936c957da61e8f0847b46d32d5b3f8423127b3b50482886b1e9d91ff3a5ee687f5486457f5e29fd5999fac4da46059e4b53c67f361fc3554e3f87b2ba9ec48d0a620fcde0b6aa27df8c113019ff315970bf35e737847741bcc338d09bcb08105629eb6153b2e4c9e73ac64eea2898f70461ec1eae1ca22bd31ff6feb896ab357766768a8516d3b791d2bc74a85e073645a16fc1a79ee4b8ec993088c14dfda78b0d935cc74e092161217d3166d7a3869003d5220620ff825fce02524bfd64bf446b8eb30b39eb6451f3574add5ae4fc656e519f3d7d28467fb28092d", 0xe7}, {&(0x7f0000000340)="090d140cb187969cc9abf838fe0ee55504613032a5584ba683dcc7c6eeaa28b1b8bb99aab2ffc568e5c416bfeea6223cd1ab06", 0x33}, {&(0x7f0000000b00)="c698413157e98630ef532c3f9c88b27feb8e3073b6c635a67b50218c3ec9667df4f04d0a084b7330007d57bb44cc1756a2c5142291bd7aa628ccf4420495a2ca74b26de0b459834fc9c7cc1db90eb6018bbdb830618c52e9af0527940b4f626fb9245a015e3dd266a2947339b4ab1dfc42935061544cf15bb981ad021b3c1daea79f78b7cb3f9aa337a1b791f6b736265ae624adaaf023a6ca6908a3f88e517a9745fc747fbfe7f8f7d774ab29a3f979cabae72b115a8e4d34b1e43c736c1f8982515f51d510a436a4a81cbaa007c1f71bb2ab0410d4", 0xd6}, {&(0x7f00000004c0)="5b4d7d6962a0cfd73ee79f57189301a450ae20729d2942ada6c91d4f8338c3cc9553dea98483d3741754a371b3125a6ddf7319ef08", 0x35}], 0x7, 0x4) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="b19ccccf84f531d9ec214627c11430c1d7a18f26513936b59d27c685d5538a20bce449ae31d8d80d683ad45a6e285e95664fd8708acc85119e7b0efa75aee6e8e27ec1acc7e35c1cfd7b22c95486106ad50f0089e19bce207c9e38e2aa6a81bb9433b0e995614908d05746464ae86b6c7768440257f5bfc170264c73c669cbfd6b4d1f35d295e4360ef6175ad1a1bd8bb1036376d2d917c542c8c595d1cd49b600395be2ff99aed1afd5d9c8c81af5c57be5f17702253af95fbdb5fb9b5e1171eef7f6fb049c8c301de39eb99c855efee0a3986297cd67302221dd6d8fbb72965b582079b1280f3419fe19a033fd6b60ffc9e70ba7079829a4a641f2", 0xfc) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="94c03f3fd040218df8e46ee7dc4d68f6059535e285aadc4fe6a6634f9c3c179a201670c909069489b7f95a93439217c408105a973956313b89b092d4f8f2afa24d452bd453f65a3efc18f69803dc16763d3d0570928170497293943473bcde7872772275539c6f1606ed133ae8917889949deaf4af73d5556e065fd4fab5d55b3bc9a27136149abf92f34f3a4d0ee9149e745d1774dfc77f71bc69fded5d74f47ed43e8e2083a8fd53737e2ef128663083f5ae185b9061", 0xb7, 0x2000c084, &(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10) r4 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37a}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r7 = socket$inet6(0xa, 0x0, 0x100000) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x10}, 0x0, 0xe3d08660d3cd4684, 0xf8c5000cf0158dfe}) io_uring_enter(r4, 0x92, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000900)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000140)=r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000021c0)={0x1f, 0xd3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x21b1}, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) sendmmsg$alg(r3, &(0x7f0000000500)=[{0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000001c00)="5985d20392a438a118753a61ccd1d0e83101f02653a3db12a8785d9bcc", 0x1d}], 0x1}], 0x1, 0x20041001) recvmsg(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/28, 0x1c}], 0x1}, 0x2) 1m22.014139601s ago: executing program 0 (id=780): r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x400, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB=',\x00']) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf0bd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000200)={0x24, &(0x7f0000000000)={0x40, 0x30, 0x3, {0x3, 0xe, "dc"}}, 0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000100)={0x0, 0x59455247, 0x8780, 0x438, 0x0, @discrete={0x5, 0x6}}) 1m17.764950268s ago: executing program 0 (id=792): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000180)=';R', 0x2}], 0x1}}], 0x1, 0x4) sendto$inet(r0, &(0x7f0000001280)="24bd8aa4c8f059d2336d60d59ae1d671b71dc86980071198227f05f6e287b003f89ce0650cd1bd1d974eb3216de2c45ba434cdd59e231cfb8c4c57d944c1fd88bbb4c7fdf44a89f3298333f906731f451edb2733ddf5cd76d0f9b7fd64c62529c92b84865e9b0acf7176bbe428a056b8a66aeaa4f138a967e97839e92b86ebb1b4d617ebb3f9f2b32471321da74e03623b5c3ab920b4adc81cb0756bb3265b2168038eef736f232c47d2da350ed1f4329e7f034ad0ed516ff24ad4261e12cf0f73fe466e5d2f608f5044203f15a9a034c749bd3c15bc771088c3c202d33cad810af01777f94dd214271af908340a0298ce4c116f58bc8e3ff655b1b36975afbe7caa53a0f7c9fa96a01b17c03d7aa60f7e4058463f8ba69f1e6465df94eae26417398cfffa7dd7d6f806630b4694a18a79e3a99047bd526a2def8610d4e724cdce9fd9a26f8ea60f31fa0b419484704dc4dfb643aaa3b16a9a8d143822f3c3ba1244c9fa62c051c3ae085b4796a092f59416016e7a95e8f98809a912cd2fc96d73e8d6918e8ba2cd3f99e57b1ddc8905ab7fc6cdb68e75a9d33cdfbc197ac3b1cbc835667b9751685872a6e2a15fb02d1cd8813bbccc7043720683aa51ea1f85927afc420e8ee70ce0893da2556ead6c844683d6ee471790222ea7db03b5edf767aefb8cc10e2ee165e42173f1dba2626219ebcc9e7d50c575d5851105cae7c4d3aab0b5f5b0d259a1a54360143bc66f20cbb2692db0aad51c037caa4ff44db8a28a6d3bd674ed4b5c79bc840bff41a2e47513c830a15ade0e3cc3b1b233f14adf8ad86083c6060d4c6a349ed08e8f47bb91c6bf5662870ce7bb27bc16eccf950b4f847e330375e5d8fa62af19f8657bd8daae490173587343b3ff3ecf46a38b92747c0d4038b380473c2b16f4928b6da140bd75b4aa862f1996722a3d1a6444b9727cba1740df9f2c0735e63039bfe28df3fc135b480e2262106f0ba9c6887958a05fdfd6c69ce2ba2eeaac4aa8a2c5f07d1fed7bb8f6d0841a726828412062439b3236cfe1fb3c02554c4e2a07172954a1681b406fd74a91da50d4994cfd0b65f1085e3cc2a99797500a94e2fafc8543d6f481a34620c5a376cb6172e34a3a6d673910988e40fa193d429253ef2814025fc683f74d84760f1e7b8fc1b9814c93fcec0d1503b681f80744f8bbb4cbbf96f1fa311c1205fc63fd1d9d13804c0cf10e31be8851f82727ff7c6537bcfb4ed56396c409daa3934a3ddaf699fc5d7cb464d9a9c6d949517aa6be45d370d01d6f3b05c4ca93a2e070cd4c00fd195f590d7be22d035bbab82925d807aeae68292470b6265dc9aa7a2d403f58daf4f3d12756ed5ed3ad0cbc2abd5806ab3cbc1d90590fda75bfbf25ec6340b8db141616aec60fad791d86356a6a968f44b146cbe10a68e8c5458ace79e21165c9edb8e3f28908e3b392d830bd38bdf1344a7a19e3e72cc42bad061b9e1bfb5c7f017f8fff3f19030f8a52014ee11821d02050cf80f03d2858b01f6229c119464741e78fc3fdeb8892262fea5a30916c6b641ce4657ec88b8a66c82c577e194ac2a3799f6a47a6f0e1ef6ca7a2a65e32d8d9ef6dd7a4785f6e3227152ba4a9cb5985759ed8439e6c38f726ff0d06c1e6f6db9f42f2c82c0a4b21b8578d3e587178c4bab0a8479b888ad0a1ee4ba46b1d8e8d611bebd43a398f8a67a17451e2eef47e437379a8eeea2ad3af82758fef59513f6fcbacd59feed22b214f702afc274c4fc84e920d665012283f0761177a354b6782b8566c3bc358004ca0ccdd95d3aaa9f6003d5ec47f28a5e5b7d5aec8429f88cf45d6ee9c632bc1b43a402c4367b8bdc4d2b942c6038bc88fc04a88c7460522c76f0d1f2d94bc065bd71bc0494162f083936ab3270d0953ed21b8750f434d5f6b3b312b192cf76970c0c5aa042bb9686f82d56ddd044e33fe607c6213fb45bf28bc765ec84a3602b4101d6d08d01523145cd411b511eeae2d40526e36fdba819a77fd9fc696babd6d351e889682a07827323edfd5420e01a3b05fd2361426448450a1a279b89b8fcd04ec69427f9ddb9a522a1c92c28b88b28ea0f0b61aabefcd19d70f6df8c5cd67f9bf4f868955aebc2330867f66c71b7c9cf62e6fcf971d6d378a98d131e3b409afd5ae17784eaac1903339993e1e12b876c5a5e5438113d31a70f3842249d21f12f81507a336935af69cc44d6f11387edff79833efa374db542bc91c3bc24bed7b238a41a35a1b3875361ccca6b2423cc642b1508ef3a9bb649dd29bec5394226604cadbd93106435ec43a0fccbfcf992ef9829b397633825269023208b2544f9c7b78bf92fcc54f28fc8f62d8d4890302f1368fd8f165f2944d12390dc20d1156016bb47e3fa2115d74e92758bce9a7c865b0f501e6bc5c8db0076b5fa8d62efb2f781df9b79fe4ee9748925aa7073770ab4a9b1a588d4872f7a27c00f5b29dde324abc0f9f208ea55c767ca5f0ebcd74ff81367d64f4f0afeb5c91ca887f730ada4fa0e89351cd157f25215b0285a3545441cba606b0c6ac646e7328c985b42dc7a893d9c2c4874cc25fdeaff6f85594a2e76e58e3a55f07cc3bb31f9b3288ee09f4c0803e6cc36d6192192e6402534f939dbf8c0adcd38fe171df24a6ffe209a3d785fb37e9a9f9c26252c391384bf815cd0c7a62014c1a4c619e3b8e7409da5b3ce954f63a063c953005bed04114992543bec4b4c3345c4729241ede30611fc33a78f2c874f95d4774204361af2fc9cc11af02ddabdd43898d161ec22daa6c726adcaf6a553e32fb8d0cb992a737ab5d437362b8df5c5b4c5f92c95d5c1754deb31bb03e6cea1d83adb46aaf22f3f04c6848779139978b45230c37635e20ecfd9603d6f58c272e8ec09f9fcc2b30d2dd1163c62d17a16fb7f8debcebd0898fbd96c06981a002f0c8f631ffb07c14551d7dc23ec98fde5f5b3058a37d5df115e42871c3079fc98f8d4ca17a3a18ce7e1d79c3579daba34d0633c4fce36db228fdab150e37cb6d07c97ab0fe375f75a8ae891b070f0b031aed47859b96b14b430d1c70420dbdf8e8de9ad1af730c5301738e2c8dc9d28e3105b26cc70abebd382366e618e0ed396b7814d0d6611bf6a3d014c96b9b84d9962fe36173d783153393a7eae0082109a27d995ad5ee5c5ca4ef0ea352e3eda8a8342e96be0de243b2231dd57027070858ebaf386753605f088b6d8b0c163101372fbdba7677c079f55c01e68719a2970c756c7cc9210b26869cf397ea925119d836f9204776fa26604bfa0a1a65120539b74a5385c3224034da59b119f6ca12fa9345f726b14e5a469fd98d625f57353ad5d8d6488e4bd1f1961aa6d5b8f74eb5eb1e1629faae22a9cdbd6257a86b", 0x95e, 0x44, 0x0, 0x0) 1m17.230275267s ago: executing program 0 (id=796): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r6, 0x2285, &(0x7f00000001c0)={0x53, 0xfffffffffffffffc, 0x0, 0x7, @buffer={0x0, 0x0, 0x0}, &(0x7f00000002c0), 0x0, 0xee2, 0x10013, 0x0, 0x0}) mmap(&(0x7f0000529000/0x1000)=nil, 0x1000, 0x2, 0x28011, r5, 0x4000) ftruncate(r5, 0x81ff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r1, r5, 0x0, 0x1, &(0x7f0000000180)='\x00'}, 0x30) 1m15.936128966s ago: executing program 33 (id=796): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r6, 0x2285, &(0x7f00000001c0)={0x53, 0xfffffffffffffffc, 0x0, 0x7, @buffer={0x0, 0x0, 0x0}, &(0x7f00000002c0), 0x0, 0xee2, 0x10013, 0x0, 0x0}) mmap(&(0x7f0000529000/0x1000)=nil, 0x1000, 0x2, 0x28011, r5, 0x4000) ftruncate(r5, 0x81ff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r1, r5, 0x0, 0x1, &(0x7f0000000180)='\x00'}, 0x30) 17.864984305s ago: executing program 5 (id=926): bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0xd, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000fdffffff000000000000000018110000", @ANYRES64, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000f3fcdda748c95cce1752f79a5cc5a4dd9bd5e817984ced99f8ca70e02a262bf148945ff2a760c5f592f00add26fd87638e0eb6f456f88bb3088907000000304c354dd819db62cc5a3b61f25552fa4b76d1b0b7ac24ebe4c00b8316cae76ad8035ace9ec8b423a68dafd791c87031cf23b9a20a598fa288e4d7656ad053d69020bbdd60806c07e0"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x75, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 17.793164704s ago: executing program 6 (id=927): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000002c0)=0x1b, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x30, 0x0, &(0x7f0000001000)) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x92da, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x951a, 0x3010, 0x1}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="100000000000"], 0xe8}, 0x0, 0x24040092}) io_uring_enter(r5, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) ioctl$TCXONC(r0, 0x4b3a, 0x3) 16.659223873s ago: executing program 6 (id=928): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x400, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008051}, 0x4000) 16.611514317s ago: executing program 3 (id=929): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000e80000000000"]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000080)={@void, @void, @ipv6=@tipc_packet={0x1, 0x6, "aae2e7", 0x20, 0x6, 0xff, @private0, @private0, {[], @payload_direct={{{{0x20, 0x0, 0x0, 0x1, 0x1, 0x8, 0x0, 0x2, 0x1ff, 0x0, 0x2, 0x7, 0x4, 0x3, 0x8, 0x6, 0x2, 0x4e22, 0x4e20}, 0x4, 0x4}}}}}}, 0x48) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003280)=[{{&(0x7f00000005c0)=@isdn={0x22, 0x4, 0x3, 0xd, 0x7}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001640)}], 0x1, &(0x7f0000003400)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x7f}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x320d}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0xd8}}, {{&(0x7f0000001b40)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x3}}, 0x80, &(0x7f0000003080), 0x0, &(0x7f0000003140)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x6a7b}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f00000031c0)="aa5b4b1b5be3a8732f104898ef22de94580a9e17", 0x14}], 0x1, &(0x7f0000003240)=[@timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x8000}}], 0x30}}], 0x4, 0x410c1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) 16.262991143s ago: executing program 5 (id=931): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) setxattr$security_capability(0x0, &(0x7f0000000040), 0x0, 0x0, 0x3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'wlan1\x00', {}, 0x108}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="0109000000000000"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x2, 0x4002004c4, 0xffe, 0x0, 0x0, 0x0, 0x900f, 0x0, 0xd57b, 0x0, 0x7], 0xeeee8000, 0x2113c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.461377542s ago: executing program 6 (id=932): syz_pidfd_open(0x0, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1200800, &(0x7f00000008c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303031302c6e6c733d69736f383835392d332c747970653d78fa42012c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="00000000f5", @ANYRESHEX=0x0, @ANYBLOB="056c"], 0x3, 0x6ae, &(0x7f0000000e40)="$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") syz_open_dev$admmidi(0x0, 0x20, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000040)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r4 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) memfd_create(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405668, &(0x7f0000000080)={0xb, 0x1, 0x0, "1c13ebdaf2f20d55800000000000000000000009234700", 0x584e4f53}) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) 15.062221537s ago: executing program 5 (id=934): creat(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES16=r2, @ANYBLOB="010000000000fedbdf2505000000180001801400020073797a5f74756e0000000000000000001800038014000380100001800c00020073797a5f74756e00"], 0x44}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_mreq(r3, 0x0, 0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, 0x0, &(0x7f0000000180)) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c00d}, 0x20000000) 13.748017309s ago: executing program 6 (id=936): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000006800010003001000fdffff7f00"/32], 0x20}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000) r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000000), 0x1, 0x455, &(0x7f0000000d80)="$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") ioprio_set$pid(0x2, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x401, 0x80, 0x9, 0x9, 0xffffffff}, 0x1c) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x10000000}}, 0x10) bind$tipc(r7, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) bind$tipc(r7, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) sendmsg$tipc(r7, &(0x7f0000002340)={0x0, 0x0, 0x0}, 0x0) r8 = socket(0x1f, 0x2, 0x0) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10}, 0x20) 10.812268585s ago: executing program 6 (id=941): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000100)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@dioread_nolock}]}, 0x1, 0x573, &(0x7f0000000ec0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='Q', 0x1, 0x200980) lseek(r0, 0xba, 0x4) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0x1, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000280)=0x40) r7 = syz_open_dev$evdev(&(0x7f0000000080), 0x20000000, 0x187400) ioctl$EVIOCSCLOCKID(r7, 0x40084504, &(0x7f0000ffcffc)=0xffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r6) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 10.736317557s ago: executing program 3 (id=942): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000000c0)={0xffff, 0x80600}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r9, 0x0, 0x0) r10 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) read$FUSE(r10, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r10, &(0x7f00000029c0)=ANY=[@ANYBLOB="5806000000000000", @ANYRES64=r11, @ANYBLOB="0000000000000000020000000000000001800000000000004600000000000000ff000000020000000600000000000000a90f000000000000f9fffffffffffffbff0f000000000000ffffffffffffffff0300000000000000040000000000000007ed000000a0000008000000", @ANYRES32=r12, @ANYRES32=0x0, @ANYBLOB="fd55000007000000000000000000000000000000030000000000000006000000050000007663616e30000000060000000000000004000000000000000500000000000000c0ffffffffffffff030000000002000003000000000000000200000000000000050000000000000001ffffffffffffff0f000000000000000700000000000000ffff00000200000001feffff00300000", @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="05000000184c00000000000000000000000000000100010000000000080000000b000000257042202020200001000000000000000000000000000000ffffffff00000000070000000000000025f40000020000000600000000000000070000000000000002000000000000000f00000000000000ffffffffffffffff010000000000000002000000080000006194000000e0000007000000", @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="008000000080ff01000000000100000000000000a8d00000000000000a0000005e9a00000000060000000000000002000000000000005f000000000000b84569f325c16eb2da1dcb0004000000000000000400000001000000000000000000000007000000000000000010000000000000f9ffffffffffffff0180000000000000000000000000000000080000000000808300"/160, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="8a020000070000000000000005000000000000000400000000000000010000000a000000000000000000000005000000000000000200000000000000080000000000000001800000000000000d00000006000000060000000000000084010000000000008705000000000000008000000000000008000000000000000000000000000000ffffffff0600000010000000002000000b000000", @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="000000800b000000000000000200000000000000080000000000000001000000a200000028000000000000000200000000000000010000000000000009000000000000000600000000000000f8ffffffff7f0000050000000000000001000000000000000c000000000000000a00000000000000060000000000000006000000000000020300000006000000070000000080000008000000", @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="0500000003000000000000000300000000000000020000000000000001000000090000002c0000000000000006000000000000000000000000000000d55d00000000000003000000000000000500000081000000030000000000000001000000010000000500000000000000020000000000000000000000000000000200000000000000060000009e4f5069000000800020000006000000", @ANYRES32=r13, @ANYBLOB="0600000005000000000000000000000000000000fcffffffffffffff060000000400000026272e3a262800000200000000000000010000000000000001040000000000000500000000000000800000000400000005000000000000000404000000000000050000000000000004000000000000000108000000000000ff0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffff7fc60000000000000004000000000000000100000001000000040000004f0f00005c2d2d2c0000000005000000000000000100000000000000ff0700000000000004000000000000003d0000007f0000000600000000000000070000000000000005000000000000000300000000000000ec590000000000000500000000000000040000006c0f0000000000", @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="060000004a6a00000000000002000000000000004f0500000000000008000000ff0300006e6c3830323131000500000000000000020000000000000002000000000000009f04000000000000ff7f00006500000005000000000000004abe0000000000000707000000000000b304000000000000000000000000000003000000000000000100010000f8ffff06000000004000003eca4c4b", @ANYRES32=0xee00, @ANYRES32=r13, @ANYBLOB="01000000e262000000000000020000000000000001010000000000000100000003000000ad00000000000000"], 0x658) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002dc0)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@ipv4={""/10, ""/2, @empty}}}, &(0x7f0000002ec0)=0xe4) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000900)="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", 0x2000, &(0x7f00000031c0)={&(0x7f0000000300)={0x50, 0x0, 0x5, {0x7, 0x2b, 0xc7, 0x20101686, 0xfff9, 0x3, 0x8, 0x15, 0x0, 0x0, 0x100, 0x8000}}, &(0x7f0000000380)={0x18, 0xfffffffffffffffe, 0x0, {0x1}}, &(0x7f00000003c0)={0x18, 0x0, 0x0, {0x4}}, &(0x7f0000000400)={0x18, 0x0, 0x8, {0x4}}, &(0x7f0000000440)={0x18, 0xffffffffffffffda, 0x0, {0x761}}, &(0x7f0000000480)={0x28, 0x0, 0x2d55, {{0x8, 0xed4, 0x3, r5}}}, &(0x7f00000004c0)={0x60, 0xffffffffffffffda, 0xfff, {{0x2, 0x318, 0x6, 0xe, 0x2, 0x0, 0x4, 0x95}}}, &(0x7f0000000540)={0x18, 0xffffffffffffffda, 0x5, {0x6}}, &(0x7f0000000580)={0x12, 0x0, 0x3, {'\xb9\x00'}}, &(0x7f00000005c0)={0x20, 0x0, 0x5, {0x0, 0x2}}, &(0x7f0000000600)={0x78, 0x0, 0x5, {0x1, 0x4, 0x0, {0x6, 0x6, 0x0, 0x2, 0xdf03730800000000, 0x5, 0x2, 0x1, 0xf04a, 0x2000, 0xfffffffb, r3, r4, 0x3, 0x3}}}, &(0x7f0000000680)={0x90, 0x0, 0x9, {0x3, 0x1, 0x100, 0x2, 0x8, 0xf, {0x0, 0x0, 0x0, 0x9, 0x1, 0x4, 0x921, 0x7fff, 0x6, 0x8000, 0x6, r3, r4, 0xc81, 0x7}}}, &(0x7f0000003240)=ANY=[@ANYBLOB="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"], &(0x7f0000002940)={0x470, 0x4dd3856fee913c69, 0xcbe, [{{0x0, 0x3, 0xec, 0x200, 0x1, 0x101, {0x0, 0x4, 0xc86, 0xffff000000000000, 0xc, 0x10000, 0x1ffc0000, 0x7, 0x6, 0x49e2b2b5c0b25dfb, 0x1, r3, r4, 0x9}}, {0x0, 0x3, 0x1, 0x8000, '\x00'}}, {{0x1, 0x2, 0x6, 0x4, 0x3, 0x4, {0x1, 0xffffffffffffffb8, 0x2, 0x80000000, 0x8000000000000001, 0xa, 0x47, 0xf, 0x8, 0x4000, 0x7, r3, r4, 0x2003, 0x1}}, {0x1, 0x9, 0x5, 0xefee, '\x9a-&:.'}}, {{0x0, 0x2, 0x9, 0x27cc, 0xf8e, 0x6, {0x9, 0xc, 0x9, 0x0, 0x5, 0x3, 0x1, 0x5, 0xfffffffd, 0xc000, 0x4, r3, r13, 0x9}}, {0x1, 0x80, 0xa, 0x9, '}@$^]-^-,)'}}, {{0x4, 0x2, 0x0, 0xffff, 0x6, 0x8, {0x5, 0x3, 0xb, 0x200, 0x4, 0xaa, 0x7, 0x8, 0x7fffffff, 0x2000, 0x1000, r3, r4, 0x8, 0x4}}, {0x5, 0x4f4f04b6, 0x0, 0x3ff}}, {{0x5, 0x0, 0x2, 0x0, 0x80000000, 0x3, {0x6, 0x5, 0x4, 0x8, 0x5, 0x3, 0x47, 0x47f, 0x8, 0xa000, 0x5, r3, r4, 0x2, 0x8}}, {0x5, 0x10001, 0x4, 0xfffffffb, 'GPL\x00'}}, {{0x3, 0x2, 0xfe08, 0x4, 0x120, 0x7, {0x0, 0x4, 0x8, 0x3ff, 0xdb, 0x100000001, 0x4, 0x6, 0x5, 0x1000, 0xffff0821, r3, 0x0, 0xf31, 0x1}}, {0x4, 0x6, 0x5, 0x6, ']\')]@'}}, {{0x2, 0x0, 0x0, 0x10000000000000, 0x682, 0x5, {0x4, 0x8, 0x1000, 0x7ffe, 0x1, 0x1c000000000, 0xa9, 0x7f071428, 0x1e, 0x1000, 0x8001, r3, r4, 0x1, 0x1}}, {0x5, 0x401, 0x4, 0x4, '*%-&'}}]}, &(0x7f0000002f00)={0xa0, 0x0, 0x400, {{0x6, 0x3, 0x4, 0x81, 0xffffffff, 0x9, {0x1, 0x1, 0x3, 0x1, 0x2, 0x6, 0x4, 0x3, 0x1, 0x8000, 0x7, r14, r4, 0x734d, 0x3}}, {0x0, 0x5}}}, &(0x7f0000002fc0)={0x20, 0x0, 0x0, {0x3ff, 0x0, 0x4572, 0x1b95}}, &(0x7f0000003000)={0x130, 0xffffffffffffffda, 0x8, {0x486f, 0x2, 0x0, '\x00', {0x980de3229895d52f, 0x5, 0x4, 0x5, r3, r4, 0xa000, '\x00', 0x1000, 0x7, 0xff, 0x4, {0x9}, {0x7, 0x6}, {0x7f, 0xba}, {0x0, 0x7}, 0x1, 0xfffeffff, 0x1, 0x2}}}}) setsockopt$SO_BINDTODEVICE_wg(r9, 0x1, 0x19, 0x0, 0x0) 9.284607868s ago: executing program 3 (id=944): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x30, 0x2d, 0x1, 0x0, 0x3f00, "", [@nested={0x4, 0x800}, @nested={0x19, 0x11, 0x0, 0x1, [@generic="9e15c00619065e963eba3ef94d765eb501e2e4bea6"]}]}, 0x30}], 0x1}, 0x300) 9.027371219s ago: executing program 1 (id=945): socket(0x29, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000eaff", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x5) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) 8.4036895s ago: executing program 5 (id=946): syz_pidfd_open(0x0, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1200800, &(0x7f00000008c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303031302c6e6c733d69736f383835392d332c747970653d78fa42012c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="00000000f5", @ANYRESHEX=0x0, @ANYBLOB="056c"], 0x3, 0x6ae, &(0x7f0000000e40)="$eJzs3U9sHFcdB/DvbDbrbJBSt03TgJBqNVIFjUjsrEqChNSAEMohQhFcerUSp7GySSvHRWmEyAYoSJw4oR44FKFw6AkhhFQOCFHOSEhcOOUeiRuHHABXM7O7Xtsbx25ir9t+PtJ43ts3773f/DJ/dsexNsBn1rnXsr+XIueOn79Z1u/d7XTv3e1cG5STTCVpJM16laKdFB8mZ1Mv+Xz5Yn+44mHzvHL/g6L57vudutbsL9X2jc36bTB2y15yYFjZl2SmLv53y8NuGK9aqnEuro73cFObNRbDuMuEHRskDiZtZYPeamPjkd23ft4Ce9bt+r65wXRyMPXdtbrF9a8Oj74yTN6m16be7sUBAAAAO2XsZ/lRTz3Ig9zMod0JBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4divo7A4v+0hiUZ1IMvv+/NfKd+q0Jh/uY3rlcrb771KQDAQAAAAAAAIDH8sKDPMjNHBrUV4rqd/4vVpXD1c/P5a3cyEKWciI3M5/lLGcpc0mmRwZq3ZxfXl6a29jzlyl7rqys3O73PDW256m1cfXWBzrufxps2AgAAAAAAAAAPrN+lHOrv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC9oEj21atqOTwoT6fRTHIgSauYGW7emmiwT8BfJh0AAAAA7Lx2f32o+H9dWCmqz/xHqs/9B/JWrmc5i1lONwu5VD0LqD/1N/7R63Tv3e1cK5eNA3/j39uKoxox9bOH8TPPVls8N+xxLt/O93I8M7mQpSzm+5nPchYyk29VpfkUme4/vZi+d7edQawb4z27pnZhfWwvjJTL+I5WkbRzOYtVbCdysTUIvdHf7ujIbH9sJetmvFNmp3i1b4s5utRfl3v0i/56b5iu9nz/MCOz/dyX2Xh6NO8bc7/N42T9THNpDJ9BHV6dpayun+lj5fxgf13m+qc7m/NtPkpbm4nez8va4Og7snnOky//868XrjSuX71y+cbxvXMYfUzrj4nOSCae31ImumUmeo+RiQOPE/+T0+pno76Kbu9q+WLV91AW8528kUtZyOnMZi5nMpuv5VQ6OTWS1+c2z2t1rjW2d64d+1K/UN6TfjZyb9o1Uw9rKPP69EheR69001Xb6CurWXpmC1kqWhmfpX+NDaX5hX6hnOPHI3ecyVufibmRTDy7eSZ+/b+VJDe6168uXZl/c5M5bv354EuD8qBQnrbvrL02/+ZJ7tc29He3PF6eKf+xUt82Ro+Osu3ZQVudr6KZ1X6Hh21r73OtVqrzuW571JlajnTkzriR6rbnx87SqdqOjrSteZeTN9IdvgsBYA87+PLBVvt+++/t99o/aV9pnz/wzakzU19sZf/fmn/a97vGbxtfL17Oe/lhDk06UgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+DS48fatq/Pd7sLSHiyk8YQHvDO2aZCK+pXW3tj3T2pharMj6vdJNunemkTM7SR7InVp7sJcUxnTdH74SjtpDONJcnWPfMEdsBNOLl978+SNt299ZfHa/OsLry9cP3Xm9KunO1+du33y8mJ3Ybb+OekogZ2w+jZg0pEAAAAAAAAAAAAAW7Ubf94wZtqiN4F9BQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6Zzr2W/b0UmZs9MVvW793tdMtlUF7dspmkkaT4QVJ8mJxNvWR6ZLjiYfO8cv+DX7307vud1bGag+0b6/r94T8rK9vci15/yUySff31o01tabyLI+P1thlYrRjuYZmwY4PEwaR9FAAA///howfX") syz_open_dev$admmidi(0x0, 0x20, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000040)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r4 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) memfd_create(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405668, &(0x7f0000000080)={0xb, 0x1, 0x0, "1c13ebdaf2f20d55800000000000000000000009234700", 0x584e4f53}) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) 7.267204024s ago: executing program 5 (id=947): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000002180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007"], 0x138}}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c000280050001"], 0x80}}, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) io_submit(r5, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) r7 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010100cf8bed20d90f25000029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r8 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x1000, 0x9, 0x0, 0x400, 0x0, 0x3, 0x0, 0x8, 0x8d], 0x100000, 0x2011c0}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_usb_control_io(r7, 0x0, 0x0) r11 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000202505a8a4400001020301090224000101044006090400257c4add730300000000000000040609058202000209f1ff"], &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0xaf, 0xf9, 0x69, 0x20, 0x4}, 0x10, &(0x7f0000000140)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0xa7, 0xff, 0x401}]}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xfcff}}, {0xdc, &(0x7f00000001c0)=@string={0xdc, 0x3, "d2595ea22c66d413a773ec93359ef7545828ec75a51506c83c7a9eef912fc11b1d42820e8a72f8e1b79591360b43302dd4fe0f3e596c1623994a8d3ac0c20d9862cf99cba51707da64bc7a9c59258f3a7a689727dcb196bb261c1bcfb9d58c1ef5b9ecdf3da53885ba8979d78a075617985a44618d8e86cf3c6369573342903d0b00d27a48ae73e8a130ca26025d0784bdccfdbb0602ab27a740e6a4ffc2f7e7e1bda0877932e967c76c9f99cc8e3fa407e984d97436f7c35096eb49aa88009c32d0c343d4486c63817c31643ac24039788fe65df21ff72c665a"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc07}}]}) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x20, 0x7, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x7, 0x1, 0x3, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xf7, 0xfe, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x1, 0xa, 0x6b}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x250, 0x0, 0x40, 0x2, 0x8, 0x9}, 0x1c2, &(0x7f0000000740)={0x5, 0xf, 0x1c2, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xe, 0x4, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "39ee34fef7c83e51e75adf5e8508314e"}, @generic={0xa8, 0x10, 0x3, "22ac4a715780b02a5df7ffe375dd81fb34282a71a28bfc95de49ac6f3daf04fa9fba18d3d78f1e0c16456f895886f9a079de3bc85a0484897a7dfe81f02dcf5598de6ece352e31ee6e7c275e62189e8d2462c376c1455aec88907bb8642a5b2a745fbe2676c93e3b31aeb459e0dd104a0d0fd1438d87743c36fbf3c77fd1a0d24975ccfc6705a183254967f85a69b682c719982a5142d5ba90a2f4ba9db2fcb58ebcf4a36c"}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "1eeae25455f8eef2ae062dd78629fdfa"}, @generic={0xcb, 0x10, 0xa, "f97f3895fe6c1587ea1b55ad9962d159a416281e6cd63f0026c93d424d38de97a523b3a8856ed1bd555b250bccdec74a1017f477aed682d0956880b424bf1396b71e958910acc6bc7b6b2dac1ceca02f2413fe28c90a773a8980f2f4282ca88ea7bc868993133d72fbe18077b95b51c20774ddb10e232515394581c7bfa2cf3b7c4dca14e9ca9ab6cff2cbaf321109779d51f0f858c29cdadec69cf1aad3b4655118eeea5890b48dd7cfbff5d117823bd44f7fef2cd455a6f4e975c739dbea33c30e39d6120610d4"}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x8001, 0xf, 0x9, [0xc030, 0x0, 0xc0]}]}, 0x4, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x813}}]}) syz_usb_control_io(r11, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) 7.231863909s ago: executing program 2 (id=948): r0 = getpid() r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x400000000000, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x1000, 0x4, &(0x7f0000ffc000/0x1000)=nil) close_range(r5, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x202742, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) syz_open_dev$radio(0x0, 0x1, 0x2) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x1}) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) syz_pidfd_open(r0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000c000000280005801400f48004000200000000000800010000000000080001"], 0x3c}}, 0x0) r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 6.962848503s ago: executing program 1 (id=949): socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x20, 0x0, @fd_index=0x4, 0x6, 0x0, 0xfffffffc, 0x4, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 6.172993279s ago: executing program 2 (id=950): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="640000001600010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="14000100fc00000000000000000000000000000114000200ff0200000000000000000000000000010800080008040000140006000500000007000000008000003600000008"], 0x64}}, 0x24008818) 6.062952884s ago: executing program 3 (id=951): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x6, 0x5, 0x5}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff036}]}, 0x10) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000200)={0xffff, 0x5, 0x800077, 0x412, 0x6, 0x40006, 0x1000, 0xf67, 0x12}) 6.001530309s ago: executing program 1 (id=952): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x7, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d3234565", 0x44, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r5, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) 5.946589722s ago: executing program 2 (id=953): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x914f989e7507b04d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r2, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002300)=[{{0x0, 0x0, &(0x7f0000000f80)}, 0x7f}], 0x1, 0x11102, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf25040001"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socket(0x10, 0x80002, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0x80d, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x5, 0x8, 0xffffffffffffffff, 0x4, 0x8}}, @TCA_CT_MARK={0x8, 0x5, 0x100002}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)={0xb0, 0x4, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_CHAIN_USERDATA={0x9a, 0xc, "85db659d6b15e8f315730dd715cf9a067c00870c7f5f30daf7e1e89e670d6dc81cbfcf3cb5b51a27a440b226936c8881a44b373e5725868c29115a2f3e3dd9c52e3eb974409b06cb489c34defff040dc0751dd17e741ce300c199fb7c67cc9ad9242acc433ab073363fe12a108e414ad316f9cdaa9d5d68d3ea6c1a2df820dcdd3e5b265487b4d3a1fd85f892ca1e63ad2ea879dfd20"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x100d0}, 0x400c0) 5.653002172s ago: executing program 6 (id=954): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x25, 0x6, @void}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@ld={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}, {0x5}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000180)='GPL\x00', 0x9}, 0x94) 4.80662522s ago: executing program 1 (id=955): mkdirat(0xffffffffffffff9c, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) getpriority(0x1, r1) r2 = landlock_create_ruleset(0x0, 0x0, 0x3) landlock_restrict_self(r2, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x43) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000000)='./file0\x00', 0x3) 3.974343814s ago: executing program 2 (id=956): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x8a701, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) getrlimit(0x5, &(0x7f0000000080)) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getegid() r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x4}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r4, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200, 0x489c}, 0x3c) lchown(0x0, 0x0, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 3.800876329s ago: executing program 1 (id=957): syz_pidfd_open(0x0, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1200800, &(0x7f00000008c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303031302c6e6c733d69736f383835392d332c747970653d78fa42012c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="00000000f5", @ANYRESHEX=0x0, @ANYBLOB="056c"], 0x3, 0x6ae, &(0x7f0000000e40)="$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") syz_open_dev$admmidi(0x0, 0x20, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000040)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r4 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) memfd_create(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405668, &(0x7f0000000080)={0xb, 0x1, 0x0, "1c13ebdaf2f20d55800000000000000000000009234700", 0x584e4f53}) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) 3.797022686s ago: executing program 3 (id=958): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x400, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008051}, 0x4000) 1.967767341s ago: executing program 2 (id=959): socket(0x29, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000eaff", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x5) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) 1.388995515s ago: executing program 2 (id=960): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) r0 = userfaultfd(0x80800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_vlan={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0xd}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) truncate(&(0x7f0000000140)='./file0\x00', 0x9) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) pwrite64(r0, &(0x7f0000000100)="5f3367a718a893aeab71e72cfc9c4dd8de05e9aeaaa338cc3d3f4264c709898b7357cf6626f1c9ff3d55f08a2aafc22b12", 0x31, 0x800) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x4, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x93c37d624c907074}, 0x8000) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x80, 0x10, 0x400204, 0x2000000, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x4000, 0x0, 0x2, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102}}}}) 558.844013ms ago: executing program 1 (id=961): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES16=r3, @ANYBLOB="010000000000fedbdf2505000000180001801400020073797a5f74756e0000000000000000001800038014000380100001800c00020073797a5f74756e00"], 0x44}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_procfs(0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, 0x0, &(0x7f0000000180)) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c00d}, 0x20000000) 157.462828ms ago: executing program 3 (id=962): socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x20, 0x0, @fd_index=0x4, 0x6, 0x0, 0xfffffffc, 0x4, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 5 (id=963): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000400)={0x3}, 0x10) sendmsg$nl_route(r0, 0x0, 0x24008818) kernel console output (not intermixed with test programs): 244AAB9EB3E9' already exists in 'ocfs2' [ 201.232058][ T7163] JBD2: journal reset failed [ 201.328732][ T7163] (syz.0.277,7163,1):ocfs2_journal_load:1167 ERROR: Failed to load journal! [ 201.490616][ T7163] (syz.0.277,7163,0):ocfs2_check_volume:2374 ERROR: ocfs2 journal load failed! -4 [ 201.929960][ T5872] ocfs2: Unmounting device (7,3) on (node local) [ 203.395823][ T7227] netlink: 'syz.1.297': attribute type 10 has an invalid length. [ 203.504633][ T7227] team0: Port device team_slave_0 removed [ 205.090513][ T7243] loop2: detected capacity change from 0 to 8192 [ 207.671722][ T30] audit: type=1326 audit(1754775124.652:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7251 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758198ebe9 code=0x7fc00000 [ 208.501595][ T5916] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 208.840610][ T5916] usb 1-1: Using ep0 maxpacket: 32 [ 208.880316][ T5916] usb 1-1: config 8 has an invalid interface number: 203 but max is 0 [ 208.919358][ T5916] usb 1-1: config 8 has 2 interfaces, different from the descriptor's value: 1 [ 208.949807][ T5916] usb 1-1: config 8 has no interface number 1 [ 208.970612][ T5916] usb 1-1: config 8 interface 203 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83 [ 209.020579][ T5916] usb 1-1: config 8 interface 203 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 1024 [ 209.078040][ T5916] usb 1-1: config 8 interface 203 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 209.136617][ T5916] usb 1-1: config 8 interface 203 has no altsetting 0 [ 209.162552][ T5916] usb 1-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 209.174439][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.234374][ T5916] usb 1-1: Product: syz [ 209.238604][ T5916] usb 1-1: Manufacturer: syz [ 209.261354][ T5916] usb 1-1: SerialNumber: syz [ 209.334891][ T7270] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 209.638055][ T5916] port100 1-1:8.203: NFC: Could not find bulk-in or bulk-out endpoint [ 209.687047][ T5916] port100 1-1:8.0: NFC: Could not find bulk-in or bulk-out endpoint [ 209.807237][ T5916] usb 1-1: USB disconnect, device number 2 [ 210.496512][ T7294] netlink: 'syz.2.311': attribute type 10 has an invalid length. [ 211.734925][ T7276] loop3: detected capacity change from 0 to 32768 [ 211.858513][ T7276] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 211.875413][ T7279] Bluetooth: hci1: command 0x0406 tx timeout [ 211.891076][ T7279] Bluetooth: hci2: command 0x0406 tx timeout [ 211.897640][ T5866] Bluetooth: hci4: command 0x0406 tx timeout [ 211.953489][ T7299] loop0: detected capacity change from 0 to 2048 [ 212.112028][ T7299] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.189788][ T7299] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.285356][ T7299] overlayfs: failed to resolve './bus': -2 [ 212.300770][ T7276] XFS (loop3): Ending clean mount [ 212.374186][ T7276] XFS (loop3): Quotacheck needed: Please wait. [ 212.539136][ T5867] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.584816][ T7276] XFS (loop3): Quotacheck: Done. [ 212.836194][ T5872] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 213.919676][ T7323] loop1: detected capacity change from 0 to 32768 [ 213.941571][ T7323] XFS: noikeep mount option is deprecated. [ 214.010062][ T7346] loop5: detected capacity change from 0 to 128 [ 214.164947][ T7330] loop2: detected capacity change from 0 to 32768 [ 214.186516][ T7346] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 214.235826][ T7323] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 214.262767][ T7330] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.321 (7330) [ 214.312739][ T7346] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 214.379936][ T7330] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 214.421887][ T7330] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 214.498976][ T7330] BTRFS info (device loop2): using free-space-tree [ 214.573364][ T7323] XFS (loop1): Ending clean mount [ 214.609164][ T6283] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 214.659406][ T7323] XFS (loop1): Quotacheck needed: Please wait. [ 214.904247][ T7323] XFS (loop1): Quotacheck: Done. [ 215.212751][ T5869] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 216.479692][ T7398] netlink: 'syz.5.327': attribute type 10 has an invalid length. [ 216.529005][ T5863] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 217.058899][ T7405] loop3: detected capacity change from 0 to 4096 [ 217.305265][ T7414] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 218.575714][ T7427] loop3: detected capacity change from 0 to 256 [ 218.624228][ T7427] FAT-fs (loop3): Directory bread(block 64) failed [ 218.631132][ T7427] FAT-fs (loop3): Directory bread(block 65) failed [ 218.637712][ T7427] FAT-fs (loop3): Directory bread(block 66) failed [ 218.644323][ T7427] FAT-fs (loop3): Directory bread(block 67) failed [ 218.650983][ T7427] FAT-fs (loop3): Directory bread(block 68) failed [ 218.658053][ T7427] FAT-fs (loop3): Directory bread(block 69) failed [ 218.664725][ T7427] FAT-fs (loop3): Directory bread(block 70) failed [ 218.671284][ T7427] FAT-fs (loop3): Directory bread(block 71) failed [ 218.677874][ T7427] FAT-fs (loop3): Directory bread(block 72) failed [ 218.684598][ T7427] FAT-fs (loop3): Directory bread(block 73) failed [ 220.690529][ T982] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 220.893871][ T982] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 220.969551][ T982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.048233][ T982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.110821][ T982] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 221.257496][ T982] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 221.347949][ T982] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 221.380641][ T982] usb 2-1: Manufacturer: syz [ 221.421911][ T982] usb 2-1: config 0 descriptor?? [ 222.066918][ T982] usbhid 2-1:0.0: can't add hid device: -71 [ 222.172663][ T982] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 222.485547][ T982] usb 2-1: USB disconnect, device number 2 [ 222.609171][ T7465] loop0: detected capacity change from 0 to 512 [ 222.706505][ T7465] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.728899][ T7465] ext4 filesystem being mounted at /77/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.820011][ T7465] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #4: comm syz.0.344: corrupted inode contents [ 222.851044][ T7465] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #4: comm syz.0.344: mark_inode_dirty error [ 222.867866][ T7465] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #4: comm syz.0.344: corrupted inode contents [ 222.895944][ T7465] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #4: comm syz.0.344: mark_inode_dirty error [ 222.933987][ T7465] Quota error (device loop0): write_blk: dquota write failed [ 222.979060][ T7465] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 223.000587][ T7465] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 223.013781][ T7465] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.344: Failed to acquire dquot type 1 [ 224.089477][ T7487] loop5: detected capacity change from 0 to 164 [ 224.694640][ T7487] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 224.729551][ T7486] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 224.772748][ T7485] netlink: 'syz.1.349': attribute type 2 has an invalid length. [ 224.780935][ T7485] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.349'. [ 224.790601][ T7485] nbd: must specify at least one socket [ 224.958753][ T5867] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.390195][ T7468] loop2: detected capacity change from 0 to 16384 [ 225.544749][ T7495] loop0: detected capacity change from 0 to 2048 [ 225.898179][ T7468] workqueue: Failed to create a rescuer kthread for wq "bcachefs_btree_read_complete": -EINTR [ 226.090673][ T7495] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.198625][ T7468] bcachefs: bch2_fs_get_tree() error: ENOMEM_fs_other_alloc [ 226.256714][ T7502] netlink: 'syz.1.352': attribute type 2 has an invalid length. [ 226.360677][ T7502] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.352'. [ 226.493916][ T7502] nbd: must specify at least one socket [ 227.773549][ T7513] binder: BINDER_SET_CONTEXT_MGR already set [ 227.873795][ T7513] binder: 7512:7513 ioctl 4018620d 2000000002c0 returned -16 [ 229.311047][ T7524] loop5: detected capacity change from 0 to 1024 [ 229.450188][ T7530] netlink: 40 bytes leftover after parsing attributes in process `syz.0.360'. [ 230.123665][ T7534] hfsplus: cannot replace xattr [ 231.162723][ T7542] netlink: 'syz.1.362': attribute type 2 has an invalid length. [ 231.170719][ T7542] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.362'. [ 231.180196][ T7542] nbd: must specify at least one socket [ 231.215410][ T7542] QAT: failed to copy from user cfg_data. [ 231.766213][ T7552] siw: device registration error -23 [ 233.302198][ T7563] loop5: detected capacity change from 0 to 2048 [ 233.401707][ T7563] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 234.230870][ T7574] loop3: detected capacity change from 0 to 2048 [ 234.526847][ T7578] loop0: detected capacity change from 0 to 1024 [ 234.565346][ T7574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.680698][ T7574] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.949001][ T7595] netlink: 'syz.2.374': attribute type 2 has an invalid length. [ 235.957191][ T7595] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.374'. [ 235.969457][ T7595] nbd: must specify at least one socket [ 236.023644][ T7595] QAT: failed to copy from user cfg_data. [ 236.399041][ T7574] overlayfs: conflicting lowerdir path [ 236.872739][ T7600] loop0: detected capacity change from 0 to 32768 [ 236.886818][ T7600] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.375 (7600) [ 236.897962][ T5872] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.915946][ T7600] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 236.926612][ T7600] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 236.935923][ T7600] BTRFS info (device loop0): disk space caching is enabled [ 236.943220][ T7600] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 237.103341][ T7600] BTRFS info (device loop0): rebuilding free space tree [ 237.118537][ T7600] BTRFS info (device loop0): disabling free space tree [ 237.126630][ T7600] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 237.136597][ T7600] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 238.899269][ T5867] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 238.934991][ T7627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.378'. [ 239.295250][ T7629] loop1: detected capacity change from 0 to 4096 [ 239.345370][ T7629] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 243.455708][ T7648] bond_slave_0: entered promiscuous mode [ 243.461710][ T7648] bond_slave_1: entered promiscuous mode [ 243.794250][ T7648] vlan2: entered promiscuous mode [ 243.855420][ T7648] bond0: entered promiscuous mode [ 244.298308][ T7655] loop0: detected capacity change from 0 to 2048 [ 244.603211][ T7655] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.658666][ T7655] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.426607][ T7655] overlayfs: conflicting lowerdir path [ 245.454301][ T7667] loop3: detected capacity change from 0 to 2048 [ 245.620363][ T7670] siw: device registration error -23 [ 246.060245][ T7671] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 246.186425][ T5867] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.405489][ T7672] wg1 speed is unknown, defaulting to 1000 [ 246.669395][ T7678] batadv_slave_1: entered promiscuous mode [ 247.600264][ T7677] batadv_slave_1: left promiscuous mode [ 249.305448][ T7689] loop5: detected capacity change from 0 to 2048 [ 249.445415][ T7691] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 250.584637][ T7696] loop2: detected capacity change from 0 to 1024 [ 250.620369][ T7700] netlink: 16 bytes leftover after parsing attributes in process `syz.1.403'. [ 250.680023][ T7700] loop1: detected capacity change from 0 to 8 [ 252.177728][ T7707] netlink: 'syz.2.404': attribute type 2 has an invalid length. [ 252.185822][ T7707] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.404'. [ 252.195709][ T7707] nbd: must specify at least one socket [ 252.242745][ T7707] QAT: failed to copy from user cfg_data. [ 252.829682][ T7711] siw: device registration error -23 [ 252.845025][ T5992] Bluetooth: hci3: command 0x0406 tx timeout [ 255.482259][ T7732] loop5: detected capacity change from 0 to 1024 [ 256.513764][ T13] hfsplus: b-tree write err: -5, ino 4 [ 256.694037][ T7742] netlink: 16 bytes leftover after parsing attributes in process `syz.1.417'. [ 256.805781][ T7742] loop1: detected capacity change from 0 to 8 [ 256.980151][ T7746] netlink: 'syz.5.416': attribute type 2 has an invalid length. [ 256.988664][ T7746] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.416'. [ 256.999259][ T7746] nbd: must specify at least one socket [ 257.032392][ T7746] QAT: failed to copy from user cfg_data. [ 257.573786][ T7750] siw: device registration error -23 [ 258.099826][ T7752] loop1: detected capacity change from 0 to 1024 [ 259.492375][ T36] hfsplus: b-tree write err: -5, ino 4 [ 260.410480][ T7779] netlink: 16 bytes leftover after parsing attributes in process `syz.1.429'. [ 260.492530][ T7779] loop1: detected capacity change from 0 to 8 [ 260.678316][ T7783] loop2: detected capacity change from 0 to 1024 [ 260.998902][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.699444][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.078719][ T6041] hfsplus: b-tree write err: -5, ino 4 [ 262.329670][ T7791] loop5: detected capacity change from 0 to 1024 [ 263.765602][ T12] hfsplus: b-tree write err: -5, ino 4 [ 263.888315][ T7801] vlan2: entered promiscuous mode [ 264.280874][ T7815] loop5: detected capacity change from 0 to 256 [ 264.514853][ T7818] comedi comedi0: Minor 3 could not be opened [ 265.097703][ T7819] loop0: detected capacity change from 0 to 512 [ 265.242433][ T7819] EXT4-fs: Ignoring removed oldalloc option [ 265.699089][ T7819] EXT4-fs (loop0): 1 truncate cleaned up [ 265.745481][ T7819] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.806900][ T30] audit: type=1800 audit(1754775182.782:66): pid=7819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.442" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 265.863626][ T7826] netlink: 16 bytes leftover after parsing attributes in process `syz.2.444'. [ 265.945087][ T30] audit: type=1804 audit(1754775182.912:67): pid=7827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.442" name="/newroot/97/file1/file1" dev="loop0" ino=15 res=1 errno=0 [ 266.020589][ T7826] loop2: detected capacity change from 0 to 8 [ 266.599786][ T7831] loop5: detected capacity change from 0 to 512 [ 266.613650][ T7819] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.442: invalid indirect mapped block 234881024 (level 0) [ 266.631917][ T7819] EXT4-fs (loop0): Remounting filesystem read-only [ 266.670959][ T7831] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.733898][ T7831] ext4 filesystem being mounted at /63/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.745434][ T7805] loop3: detected capacity change from 0 to 32768 [ 266.799447][ T5867] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.855528][ T7831] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #4: comm syz.5.445: corrupted inode contents [ 266.894572][ T7805] JBD2: journal reset failed [ 266.910112][ T7805] (syz.3.438,7805,0):ocfs2_journal_load:1167 ERROR: Failed to load journal! [ 266.947941][ T7831] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #4: comm syz.5.445: mark_inode_dirty error [ 266.967353][ T7831] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #4: comm syz.5.445: corrupted inode contents [ 266.979517][ T7805] (syz.3.438,7805,1):ocfs2_check_volume:2374 ERROR: ocfs2 journal load failed! -4 [ 267.017861][ T7831] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #4: comm syz.5.445: mark_inode_dirty error [ 267.077171][ T7831] Quota error (device loop5): write_blk: dquota write failed [ 267.086168][ T7831] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 267.105730][ T7841] netlink: 24 bytes leftover after parsing attributes in process `syz.0.446'. [ 267.130939][ T7831] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 267.223257][ T7848] siw: device registration error -23 [ 267.659083][ T7846] loop1: detected capacity change from 0 to 512 [ 267.667550][ T7831] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.445: Failed to acquire dquot type 1 [ 268.763635][ T6283] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.814207][ T7870] loop3: detected capacity change from 0 to 512 [ 269.827066][ T7870] EXT4-fs: Ignoring removed oldalloc option [ 269.939563][ T7870] EXT4-fs (loop3): 1 truncate cleaned up [ 269.947772][ T7870] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.980348][ T7874] loop5: detected capacity change from 0 to 256 [ 269.994925][ T30] audit: type=1800 audit(1754775186.972:68): pid=7870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.456" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 270.349031][ T7877] netlink: 'syz.0.457': attribute type 10 has an invalid length. [ 271.126487][ T7877] team0: Port device wlan1 added [ 271.618963][ T30] audit: type=1804 audit(1754775188.582:69): pid=7881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.456" name="/newroot/81/file1/file1" dev="loop3" ino=15 res=1 errno=0 [ 272.152350][ T7870] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.456: invalid indirect mapped block 234881024 (level 0) [ 272.167419][ T7870] EXT4-fs (loop3): Remounting filesystem read-only [ 272.319943][ T5872] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.363282][ T7883] netlink: 16 bytes leftover after parsing attributes in process `syz.2.458'. [ 272.375152][ T7883] loop2: detected capacity change from 0 to 8 [ 273.247832][ T7894] netlink: 24 bytes leftover after parsing attributes in process `syz.1.462'. [ 273.632432][ T7885] loop5: detected capacity change from 0 to 32768 [ 273.709144][ T7885] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 274.084663][ T7908] loop2: detected capacity change from 0 to 512 [ 274.180508][ T6283] ocfs2: Unmounting device (7,5) on (node local) [ 274.228547][ T7908] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.299080][ T7908] ext4 filesystem being mounted at /104/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.357446][ T7908] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #4: comm syz.2.465: corrupted inode contents [ 275.811471][ T7908] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #4: comm syz.2.465: mark_inode_dirty error [ 276.377877][ T7908] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #4: comm syz.2.465: corrupted inode contents [ 276.413667][ T7908] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #4: comm syz.2.465: mark_inode_dirty error [ 276.433869][ T7908] Quota error (device loop2): write_blk: dquota write failed [ 276.468130][ T7908] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 276.554564][ T7908] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 276.589666][ T7908] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.465: Failed to acquire dquot type 1 [ 277.052076][ T7924] netlink: 'syz.5.468': attribute type 10 has an invalid length. [ 277.792408][ T5869] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.587392][ T7938] netlink: 'syz.5.471': attribute type 10 has an invalid length. [ 279.239713][ T7941] netlink: 16 bytes leftover after parsing attributes in process `syz.5.473'. [ 279.306017][ T7941] loop5: detected capacity change from 0 to 8 [ 279.814758][ T7949] loop3: detected capacity change from 0 to 256 [ 279.826410][ T7949] exfat: Bad value for 'gid' [ 279.831241][ T7949] exfat: Bad value for 'gid' [ 282.407560][ T7960] loop0: detected capacity change from 0 to 4096 [ 282.465998][ T7960] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 282.565301][ T7960] ntfs3(loop0): ino=3, mi_enum_attr [ 282.583520][ T7964] loop1: detected capacity change from 0 to 512 [ 282.706480][ T7964] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.828848][ T7964] ext4 filesystem being mounted at /93/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.953123][ T7953] loop5: detected capacity change from 0 to 32768 [ 283.005092][ T7964] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #4: comm syz.1.480: corrupted inode contents [ 283.036335][ T7953] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 283.125689][ T7964] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #4: comm syz.1.480: mark_inode_dirty error [ 283.393645][ T7964] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #4: comm syz.1.480: corrupted inode contents [ 283.535084][ T7975] netlink: 'syz.0.481': attribute type 10 has an invalid length. [ 284.380623][ T7964] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #4: comm syz.1.480: mark_inode_dirty error [ 284.727874][ T7964] Quota error (device loop1): write_blk: dquota write failed [ 284.743348][ T7964] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 284.756836][ T7964] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 284.864536][ T7964] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.480: Failed to acquire dquot type 1 [ 285.012829][ T6283] ocfs2: Unmounting device (7,5) on (node local) [ 285.046918][ T5863] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.601568][ T7993] netlink: 'syz.1.484': attribute type 10 has an invalid length. [ 287.330207][ T7993] team0: Port device wlan1 added [ 287.628707][ T7996] loop1: detected capacity change from 0 to 512 [ 287.689432][ T7996] EXT4-fs: Ignoring removed oldalloc option [ 287.718017][ T7996] EXT4-fs (loop1): 1 truncate cleaned up [ 287.751788][ T7996] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.862575][ T30] audit: type=1800 audit(1754775204.842:70): pid=7996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.487" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 287.898383][ T7999] loop5: detected capacity change from 0 to 1024 [ 287.926122][ T7999] EXT4-fs: Ignoring removed mblk_io_submit option [ 287.937381][ T7999] ext2: Unknown parameter 'erro' [ 289.393205][ T30] audit: type=1804 audit(1754775205.962:71): pid=8004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.487" name="/newroot/95/file1/file1" dev="loop1" ino=15 res=1 errno=0 [ 289.425147][ T8004] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.487: invalid indirect mapped block 234881024 (level 0) [ 289.446977][ T8004] EXT4-fs (loop1): Remounting filesystem read-only [ 289.503130][ T8006] loop5: detected capacity change from 0 to 256 [ 289.522969][ T8006] vfat: Unknown parameter 'iocha ' [ 289.626142][ T5863] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.622931][ T8013] netlink: 'syz.1.492': attribute type 2 has an invalid length. [ 290.641875][ T8013] netlink: 143072 bytes leftover after parsing attributes in process `syz.1.492'. [ 290.662592][ T8013] nbd: must specify at least one socket [ 290.944858][ T8015] loop5: detected capacity change from 0 to 2048 [ 291.035189][ T8020] loop2: detected capacity change from 0 to 256 [ 291.086400][ T8015] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 291.149420][ T8021] loop1: detected capacity change from 0 to 512 [ 292.046478][ T8021] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.087053][ T8021] ext4 filesystem being mounted at /97/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.122064][ T8021] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #4: comm syz.1.495: corrupted inode contents [ 292.174655][ T8021] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #4: comm syz.1.495: mark_inode_dirty error [ 292.302180][ T8031] netlink: 'syz.3.499': attribute type 2 has an invalid length. [ 292.310017][ T8031] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.499'. [ 292.319928][ T8031] nbd: must specify at least one socket [ 292.365240][ T8031] QAT: failed to copy from user cfg_data. [ 292.678127][ T8021] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #4: comm syz.1.495: corrupted inode contents [ 292.761150][ T8021] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #4: comm syz.1.495: mark_inode_dirty error [ 292.780834][ T8021] Quota error (device loop1): write_blk: dquota write failed [ 292.788601][ T8021] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 292.800895][ T8021] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 292.811615][ T8021] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.495: Failed to acquire dquot type 1 [ 293.472235][ T5863] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.655853][ T8037] autofs: Unknown parameter '00000000000000000000' [ 294.006524][ T8047] comedi comedi0: Minor 3 could not be opened [ 295.046073][ T8054] bond_slave_0: entered promiscuous mode [ 295.051842][ T8054] bond_slave_1: entered promiscuous mode [ 295.058744][ T8054] vlan2: entered promiscuous mode [ 295.065499][ T8049] loop3: detected capacity change from 0 to 2048 [ 295.071279][ T8054] bond0: entered promiscuous mode [ 295.125463][ T8057] netlink: 'syz.2.505': attribute type 10 has an invalid length. [ 295.359358][ T8055] loop5: detected capacity change from 0 to 4096 [ 295.373180][ T8049] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 295.398987][ T8055] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 295.622239][ T8055] ntfs3(loop5): ino=3, mi_enum_attr [ 296.006168][ T8057] team0: Port device wlan1 added [ 296.327723][ T8064] loop3: detected capacity change from 0 to 256 [ 296.553687][ T8069] netlink: 'syz.1.510': attribute type 2 has an invalid length. [ 296.561511][ T8069] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.510'. [ 296.572803][ T8069] nbd: must specify at least one socket [ 296.639599][ T8069] QAT: failed to copy from user cfg_data. [ 297.137356][ T8075] loop2: detected capacity change from 0 to 2048 [ 297.242413][ T8075] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.321924][ T8075] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.420501][ T8083] netlink: 24 bytes leftover after parsing attributes in process `syz.3.514'. [ 297.674103][ T8084] netlink: 'syz.3.514': attribute type 10 has an invalid length. [ 297.832095][ T8080] autofs: Unknown parameter '00000000000000000000' [ 297.872882][ T8084] team0: Port device team_slave_0 removed [ 297.881440][ T30] audit: type=1804 audit(1754775214.852:72): pid=8075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.513" name="/newroot/114/file0/bus" dev="loop2" ino=19 res=1 errno=0 [ 297.965801][ T5869] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.164127][ T8097] loop1: detected capacity change from 0 to 256 [ 300.800697][ T8104] vlan2: entered promiscuous mode [ 301.143586][ T8106] loop3: detected capacity change from 0 to 4096 [ 301.168167][ T8106] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 301.865181][ T8106] ntfs3(loop3): ino=3, mi_enum_attr [ 301.901400][ T8112] loop5: detected capacity change from 0 to 256 [ 302.324485][ T8116] loop2: detected capacity change from 0 to 2048 [ 302.405047][ T8116] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 302.451981][ T8126] autofs: Unknown parameter '00000000000000000000' [ 302.614167][ T8125] loop0: detected capacity change from 0 to 2048 [ 303.214356][ T8133] loop3: detected capacity change from 0 to 256 [ 303.415332][ T8133] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 304.080613][ T8125] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 306.335237][ T8140] loop2: detected capacity change from 0 to 256 [ 307.176223][ T8149] bond_slave_0: entered promiscuous mode [ 307.182067][ T8149] bond_slave_1: entered promiscuous mode [ 307.190327][ T8149] vlan2: entered promiscuous mode [ 307.196958][ T8141] loop5: detected capacity change from 0 to 4096 [ 307.210598][ T8149] bond0: entered promiscuous mode [ 307.670310][ T8156] loop2: detected capacity change from 0 to 256 [ 307.678639][ T8141] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 307.744610][ T8141] ntfs3(loop5): ino=1a, mi_enum_attr [ 307.750086][ T8141] ntfs3(loop5): ino=1a, mi_enum_attr [ 307.814498][ T8141] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 308.970772][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 308.982698][ T8151] loop0: detected capacity change from 0 to 32768 [ 309.107309][ T8151] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 309.124858][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 309.153911][ T9] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 309.175876][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.220664][ T9] usb 6-1: config 0 has no interfaces? [ 309.228663][ T9] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 309.246577][ T9] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 309.260707][ T9] usb 6-1: Product: syz [ 309.267365][ T9] usb 6-1: Manufacturer: syz [ 309.272278][ T9] usb 6-1: SerialNumber: syz [ 309.281782][ T9] usb 6-1: config 0 descriptor?? [ 309.287981][ T8151] XFS (loop0): Ending clean mount [ 309.295693][ T8151] XFS (loop0): Quotacheck needed: Please wait. [ 309.453149][ T8151] XFS (loop0): Quotacheck: Done. [ 309.671747][ T5867] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 309.684558][ T9] usb 6-1: USB disconnect, device number 2 [ 310.677843][ T8191] siw: device registration error -23 [ 311.158664][ T8188] loop1: detected capacity change from 0 to 256 [ 311.959906][ T8196] loop1: detected capacity change from 0 to 256 [ 312.182190][ T8198] bond_slave_0: entered promiscuous mode [ 312.188045][ T8198] bond_slave_1: entered promiscuous mode [ 312.224712][ T8198] vlan2: entered promiscuous mode [ 312.260621][ T8198] bond0: entered promiscuous mode [ 313.040155][ T8206] loop1: detected capacity change from 0 to 2048 [ 313.065560][ T8206] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 314.522643][ T8219] netlink: 'syz.3.554': attribute type 9 has an invalid length. [ 314.530350][ T8219] netlink: 211988 bytes leftover after parsing attributes in process `syz.3.554'. [ 316.398990][ T8227] loop0: detected capacity change from 0 to 256 [ 316.454928][ T8227] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 317.482487][ T8225] loop2: detected capacity change from 0 to 256 [ 318.903672][ T8244] netlink: 24 bytes leftover after parsing attributes in process `syz.2.562'. [ 319.016106][ T8249] netlink: 'syz.0.564': attribute type 10 has an invalid length. [ 319.125288][ T8251] loop1: detected capacity change from 0 to 2048 [ 319.203726][ T8251] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 319.438265][ T8249] team0: Port device team_slave_0 removed [ 319.733646][ T8255] 8021q: VLANs not supported on vcan0 [ 321.668832][ T8264] loop2: detected capacity change from 0 to 164 [ 321.702574][ T8264] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 321.714813][ T8263] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 322.398583][ T8266] comedi comedi0: Minor 3 could not be opened [ 322.444613][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.454961][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.667980][ T8271] loop2: detected capacity change from 0 to 256 [ 323.277553][ T8272] loop5: detected capacity change from 0 to 2048 [ 323.485962][ T8272] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.567007][ T8282] loop0: detected capacity change from 0 to 256 [ 323.639073][ T8272] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.181890][ T8272] overlayfs: failed to resolve './bus': -2 [ 324.188932][ T8288] netlink: 24 bytes leftover after parsing attributes in process `syz.1.578'. [ 324.305189][ T6283] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.345010][ T8290] loop3: detected capacity change from 0 to 2048 [ 324.412166][ T8290] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 325.214426][ T8298] loop5: detected capacity change from 0 to 32768 [ 325.245190][ T8298] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.580 (8298) [ 325.263006][ T8298] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 325.273255][ T8298] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 325.282591][ T8298] BTRFS info (device loop5): disk space caching is enabled [ 325.289812][ T8298] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 325.700644][ T8318] loop1: detected capacity change from 0 to 164 [ 325.761398][ T8318] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 325.775847][ T8318] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 326.440919][ T8298] BTRFS info (device loop5): rebuilding free space tree [ 326.482409][ T8298] BTRFS info (device loop5): disabling free space tree [ 326.489462][ T8298] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 326.499366][ T8298] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 327.637097][ T6283] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 329.016876][ T8335] loop2: detected capacity change from 0 to 32768 [ 329.131031][ T8335] BTRFS info: device /dev/loop2 (7:2) using temp-fsid b262c12c-b3c9-4ab0-9a5c-8b1bf6931200 [ 329.141501][ T8335] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.587 (8335) [ 329.158821][ T8335] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 329.169335][ T8335] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 329.178805][ T8335] BTRFS info (device loop2): disk space caching is enabled [ 329.186259][ T8335] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 329.465198][ T8335] BTRFS info (device loop2): rebuilding free space tree [ 329.519418][ T8335] BTRFS info (device loop2): disabling free space tree [ 329.526515][ T8335] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 329.536278][ T8335] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 330.612028][ T5869] BTRFS info (device loop2): last unmount of filesystem b262c12c-b3c9-4ab0-9a5c-8b1bf6931200 [ 330.633340][ T8358] loop5: detected capacity change from 0 to 256 [ 331.936896][ T8371] loop5: detected capacity change from 0 to 256 [ 332.033381][ T8371] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 333.814080][ T8373] netlink: 24 bytes leftover after parsing attributes in process `syz.5.591'. [ 334.305066][ T8377] loop5: detected capacity change from 0 to 2048 [ 334.405815][ T8377] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 334.847691][ T8383] netlink: 'syz.2.593': attribute type 10 has an invalid length. [ 336.063582][ T8386] loop1: detected capacity change from 0 to 164 [ 336.074227][ T8386] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 336.084014][ T8386] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 336.339150][ T8391] loop5: detected capacity change from 0 to 4096 [ 340.094557][ T8418] loop1: detected capacity change from 0 to 2048 [ 340.453292][ T8418] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 340.504102][ T8406] loop3: detected capacity change from 0 to 32768 [ 340.517139][ T8406] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.601 (8406) [ 340.657008][ T8406] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 342.008737][ T8406] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 342.020508][ T8406] BTRFS info (device loop3): using free-space-tree [ 342.030093][ T8406] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 342.032156][ T8406] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 342.046220][ T8406] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 342.059111][ T8406] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 342.091416][ T8406] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 342.101640][ T8406] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 342.121840][ T8406] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 342.133493][ T8406] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 342.143410][ T8406] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 342.161423][ T8406] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 342.181543][ T8406] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 342.192641][ T8406] BTRFS error (device loop3): open_ctree failed: -12 [ 344.202480][ T8462] loop0: detected capacity change from 0 to 164 [ 344.280290][ T8462] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 344.297954][ T8462] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 346.874053][ T8468] loop0: detected capacity change from 0 to 4096 [ 346.896792][ T8468] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 346.973435][ T8468] ntfs3(loop0): ino=3, mi_enum_attr [ 347.022450][ T8478] loop3: detected capacity change from 0 to 256 [ 347.067674][ T8478] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 348.226766][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 348.252600][ T8481] loop5: detected capacity change from 0 to 2048 [ 348.315977][ T8481] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 348.420575][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 348.480797][ T24] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 348.489027][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.567328][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 348.607959][ T24] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 348.638740][ T8468] ntfs3(loop0): Failed to read $UpCase (-4). [ 348.691275][ T24] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 348.733481][ T24] usb 3-1: Product: syz [ 348.737802][ T24] usb 3-1: Manufacturer: syz [ 348.804186][ T24] usb 3-1: SerialNumber: syz [ 348.866677][ T24] usb 3-1: config 0 descriptor?? [ 348.923304][ T24] ldusb 3-1:0.0: Interrupt in endpoint not found [ 349.130745][ T5924] usb 3-1: USB disconnect, device number 4 [ 349.249162][ T8487] netlink: 24 bytes leftover after parsing attributes in process `syz.3.620'. [ 349.366252][ T8490] loop0: detected capacity change from 0 to 256 [ 349.377865][ T8490] exfat: Bad value for 'gid' [ 349.382675][ T8490] exfat: Bad value for 'gid' [ 350.334838][ T8492] loop5: detected capacity change from 0 to 1024 [ 350.433963][ T8492] EXT4-fs: Ignoring removed mblk_io_submit option [ 350.511930][ T8492] ext2: Unknown parameter 'erro' [ 351.216197][ T8500] loop2: detected capacity change from 0 to 256 [ 351.341621][ T8500] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 352.218679][ T8502] loop1: detected capacity change from 0 to 2048 [ 352.294086][ T8502] udf: Bad value for 'volume' [ 354.041638][ T8519] loop0: detected capacity change from 0 to 512 [ 354.092730][ T8519] EXT4-fs: Ignoring removed oldalloc option [ 354.133482][ T8519] EXT4-fs (loop0): 1 truncate cleaned up [ 354.149769][ T8519] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.173970][ T8516] loop5: detected capacity change from 0 to 2048 [ 354.187293][ T30] audit: type=1800 audit(1754775271.162:73): pid=8519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.629" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 354.494153][ T8516] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.602571][ T8516] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.858353][ T30] audit: type=1804 audit(1754775271.812:74): pid=8525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.629" name="/newroot/129/file1/file1" dev="loop0" ino=15 res=1 errno=0 [ 354.927765][ T8516] overlayfs: conflicting lowerdir path [ 356.195515][ T6283] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.529602][ T8532] netlink: 24 bytes leftover after parsing attributes in process `syz.1.632'. [ 356.551024][ T8519] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.629: invalid indirect mapped block 234881024 (level 0) [ 356.567610][ T8519] EXT4-fs (loop0): Remounting filesystem read-only [ 356.727728][ T5867] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.084475][ T5938] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 357.510049][ T5938] usb 3-1: Using ep0 maxpacket: 32 [ 357.656543][ T8538] loop1: detected capacity change from 0 to 4096 [ 357.660521][ T5938] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 357.688003][ T5938] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.700584][ T5938] usb 3-1: config 0 interface 0 has no altsetting 0 [ 357.708284][ T8538] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 357.719836][ T5938] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 357.729797][ T5938] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 357.738504][ T5938] usb 3-1: Product: syz [ 357.743127][ T5938] usb 3-1: Manufacturer: syz [ 357.747750][ T5938] usb 3-1: SerialNumber: syz [ 357.769486][ T8538] ntfs3(loop1): ino=3, mi_enum_attr [ 357.771957][ T5938] usb 3-1: config 0 descriptor?? [ 357.792879][ T5938] ldusb 3-1:0.0: Interrupt in endpoint not found [ 358.061685][ T5938] usb 3-1: USB disconnect, device number 5 [ 358.189520][ T8550] loop1: detected capacity change from 0 to 1024 [ 358.228042][ T8550] EXT4-fs: Ignoring removed mblk_io_submit option [ 358.247223][ T8550] ext2: Unknown parameter 'erro' [ 360.454629][ T8548] loop5: detected capacity change from 0 to 32768 [ 360.481504][ T8560] comedi comedi0: Minor 3 could not be opened [ 360.505967][ T8548] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.637 (8548) [ 360.623172][ T8548] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 360.729737][ T8548] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 360.789577][ T8548] BTRFS info (device loop5): using free-space-tree [ 360.985859][ T8584] netlink: 24 bytes leftover after parsing attributes in process `syz.2.645'. [ 361.232272][ T8548] ubi31: attaching mtd0 [ 361.299608][ T8548] ubi31: scanning is finished [ 361.304648][ T8548] ubi31: empty MTD device detected [ 361.338963][ T30] audit: type=1800 audit(1754775278.272:75): pid=8588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.637" name="file2" dev="loop5" ino=261 res=0 errno=0 [ 361.422286][ T8591] netlink: 'syz.2.646': attribute type 9 has an invalid length. [ 361.430087][ T8591] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.646'. [ 362.298969][ T8548] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 362.306731][ T8548] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 362.314262][ T8548] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 362.321760][ T8548] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 362.329245][ T8548] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 362.336171][ T8548] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 362.344306][ T8548] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4150036663 [ 362.354537][ T8548] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 362.366529][ T8590] ubi31: background thread "ubi_bgt31d" started, PID 8590 [ 362.420473][ T8588] BTRFS info (device loop5): setting compat-ro feature flag for VERITY (0x4) [ 363.464419][ T6283] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 364.011992][ T8595] netlink: 'syz.0.644': attribute type 10 has an invalid length. [ 365.810592][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 365.994540][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 366.075354][ T24] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 366.245630][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.257254][ T24] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 366.420676][ T24] usb 2-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 366.474149][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 366.488217][ T24] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 366.498090][ T24] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 366.508254][ T24] usb 2-1: Product: syz [ 366.512920][ T24] usb 2-1: Manufacturer: syz [ 366.517659][ T24] usb 2-1: SerialNumber: syz [ 366.617240][ T24] usb 2-1: config 0 descriptor?? [ 366.646469][ T24] ldusb 2-1:0.0: Interrupt in endpoint not found [ 366.849269][ T24] usb 2-1: USB disconnect, device number 3 [ 369.811110][ T8633] netlink: 24 bytes leftover after parsing attributes in process `syz.3.656'. [ 369.883887][ T8635] bond_slave_0: entered promiscuous mode [ 369.889678][ T8635] bond_slave_1: entered promiscuous mode [ 369.932041][ T8635] vlan2: entered promiscuous mode [ 369.958499][ T8635] bond0: entered promiscuous mode [ 371.060772][ T8639] loop3: detected capacity change from 0 to 2048 [ 371.103817][ T8639] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 371.113668][ T8639] NILFS (loop3): mounting unchecked fs [ 371.121999][ T8639] NILFS (loop3): invalid segment: Checksum error in segment payload [ 371.130291][ T8639] NILFS (loop3): unable to fall back to spare super block [ 371.137462][ T8639] NILFS (loop3): error -22 while searching super root [ 373.690644][ T5916] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 373.961105][ T5916] usb 2-1: Using ep0 maxpacket: 32 [ 374.073187][ T5916] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 374.128018][ T5916] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.159782][ T5916] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 374.187416][ T5916] usb 2-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 374.296563][ T5916] usb 2-1: config 0 interface 0 has no altsetting 0 [ 374.344753][ T5916] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 374.372375][ T5916] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 374.454999][ T5916] usb 2-1: Product: syz [ 374.459400][ T5916] usb 2-1: Manufacturer: syz [ 374.464491][ T5916] usb 2-1: SerialNumber: syz [ 374.486606][ T5916] usb 2-1: config 0 descriptor?? [ 374.496898][ T5916] ldusb 2-1:0.0: Interrupt in endpoint not found [ 374.699992][ T5916] usb 2-1: USB disconnect, device number 4 [ 375.782385][ T8673] netlink: 24 bytes leftover after parsing attributes in process `syz.3.669'. [ 375.939507][ T8677] loop5: detected capacity change from 0 to 256 [ 376.819704][ T8677] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 378.881822][ T8687] loop5: detected capacity change from 0 to 256 [ 378.929755][ T8687] exfat: Deprecated parameter 'namecase' [ 378.962484][ T8689] vlan2: entered promiscuous mode [ 379.206988][ T8687] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 379.694307][ T8697] netlink: 'syz.2.677': attribute type 2 has an invalid length. [ 379.729398][ T8697] netlink: 143072 bytes leftover after parsing attributes in process `syz.2.677'. [ 379.844969][ T8697] nbd: must specify at least one socket [ 381.800880][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 382.004609][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 382.054746][ T8716] loop1: detected capacity change from 0 to 4096 [ 382.104708][ T9] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 382.217838][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.356395][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 382.455068][ T9] usb 3-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 382.546816][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 382.623761][ T9] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 382.643912][ T9] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 382.656859][ T9] usb 3-1: Product: syz [ 382.664195][ T9] usb 3-1: Manufacturer: syz [ 382.668823][ T9] usb 3-1: SerialNumber: syz [ 382.686711][ T9] usb 3-1: config 0 descriptor?? [ 382.701880][ T9] ldusb 3-1:0.0: Interrupt in endpoint not found [ 382.909905][ T5924] usb 3-1: USB disconnect, device number 6 [ 383.124298][ T8732] vlan2: entered promiscuous mode [ 383.881185][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.890482][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.985261][ T8746] loop2: detected capacity change from 0 to 512 [ 385.162363][ T8748] netlink: 'syz.5.691': attribute type 2 has an invalid length. [ 385.203150][ T8748] netlink: 143072 bytes leftover after parsing attributes in process `syz.5.691'. [ 385.269705][ T8748] nbd: must specify at least one socket [ 385.444235][ T8746] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.461584][ T8746] ext4 filesystem being mounted at /148/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 386.414769][ T8746] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #4: comm syz.2.690: corrupted inode contents [ 386.455081][ T8746] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #4: comm syz.2.690: mark_inode_dirty error [ 386.540047][ T8746] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #4: comm syz.2.690: corrupted inode contents [ 386.692350][ T8746] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #4: comm syz.2.690: mark_inode_dirty error [ 387.175820][ T8746] Quota error (device loop2): write_blk: dquota write failed [ 387.183441][ T8746] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 387.199524][ T8746] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 387.215194][ T8746] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.690: Failed to acquire dquot type 1 [ 387.623030][ T5869] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.857847][ T8771] loop5: detected capacity change from 0 to 512 [ 388.950497][ T8771] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.029185][ T8771] ext4 filesystem being mounted at /121/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.151263][ T8780] loop0: detected capacity change from 0 to 164 [ 389.151309][ T8778] loop2: detected capacity change from 0 to 256 [ 389.197066][ T8780] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 389.240523][ T8779] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 390.227720][ T8778] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 391.151211][ T8771] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #4: comm syz.5.698: corrupted inode contents [ 391.340644][ T8771] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #4: comm syz.5.698: mark_inode_dirty error [ 391.496713][ T8771] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #4: comm syz.5.698: corrupted inode contents [ 391.547680][ T8771] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #4: comm syz.5.698: mark_inode_dirty error [ 391.666077][ T8787] netlink: 'syz.1.704': attribute type 2 has an invalid length. [ 391.677882][ T8771] Quota error (device loop5): write_blk: dquota write failed [ 391.686132][ T8787] netlink: 143072 bytes leftover after parsing attributes in process `syz.1.704'. [ 391.705563][ T8787] nbd: must specify at least one socket [ 391.826767][ T8771] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 391.864042][ T8771] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 391.904890][ T8771] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.698: Failed to acquire dquot type 1 [ 392.652131][ T6283] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.761117][ T8797] FAULT_INJECTION: forcing a failure. [ 392.761117][ T8797] name failslab, interval 1, probability 0, space 0, times 0 [ 392.850535][ T8797] CPU: 1 UID: 0 PID: 8797 Comm: syz.1.705 Not tainted 6.16.0-next-20250808-syzkaller #0 PREEMPT(full) [ 392.850570][ T8797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 392.850591][ T8797] Call Trace: [ 392.850600][ T8797] [ 392.850610][ T8797] dump_stack_lvl+0x189/0x250 [ 392.850657][ T8797] ? __pfx____ratelimit+0x10/0x10 [ 392.850687][ T8797] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.850712][ T8797] ? __pfx__printk+0x10/0x10 [ 392.850749][ T8797] ? __pfx___might_resched+0x10/0x10 [ 392.850768][ T8797] ? fs_reclaim_acquire+0x7d/0x100 [ 392.850794][ T8797] should_fail_ex+0x414/0x560 [ 392.850829][ T8797] should_failslab+0xa8/0x100 [ 392.850864][ T8797] __kmalloc_cache_noprof+0x70/0x3d0 [ 392.850895][ T8797] ? get_mountpoint+0x2cc/0x510 [ 392.850931][ T8797] get_mountpoint+0x2cc/0x510 [ 392.850968][ T8797] do_lock_mount+0x31b/0x590 [ 392.851002][ T8797] ? __pfx_do_lock_mount+0x10/0x10 [ 392.851047][ T8797] do_move_mount+0xb4/0x820 [ 392.851073][ T8797] ? apparmor_move_mount+0x17b/0x1f0 [ 392.851104][ T8797] ? __pfx_do_move_mount+0x10/0x10 [ 392.851128][ T8797] ? bpf_lsm_move_mount+0x9/0x20 [ 392.851164][ T8797] ? vfs_move_mount+0x57/0x890 [ 392.851201][ T8797] __se_sys_move_mount+0x456/0x5d0 [ 392.851231][ T8797] ? __pfx___se_sys_move_mount+0x10/0x10 [ 392.851254][ T8797] ? __pfx_ksys_write+0x10/0x10 [ 392.851281][ T8797] ? rcu_is_watching+0x15/0xb0 [ 392.851310][ T8797] ? do_syscall_64+0xbe/0x3b0 [ 392.851341][ T8797] ? __x64_sys_move_mount+0x20/0xc0 [ 392.851366][ T8797] do_syscall_64+0xfa/0x3b0 [ 392.851396][ T8797] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.851426][ T8797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.851449][ T8797] ? clear_bhb_loop+0x60/0xb0 [ 392.851476][ T8797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.851504][ T8797] RIP: 0033:0x7f51de58ebe9 [ 392.851528][ T8797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.851547][ T8797] RSP: 002b:00007f51dc7d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 392.851574][ T8797] RAX: ffffffffffffffda RBX: 00007f51de7b6090 RCX: 00007f51de58ebe9 [ 392.851591][ T8797] RDX: ffffffffffffff9c RSI: 0000000000000000 RDI: 0000000000000003 [ 392.851606][ T8797] RBP: 00007f51dc7d5090 R08: 0000000000000045 R09: 0000000000000000 [ 392.851620][ T8797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.851633][ T8797] R13: 00007f51de7b6128 R14: 00007f51de7b6090 R15: 00007fff5cfce778 [ 392.851669][ T8797] [ 393.231764][ T8800] loop5: detected capacity change from 0 to 256 [ 393.377404][ T8800] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 393.725177][ T8809] loop1: detected capacity change from 0 to 256 [ 394.110636][ T8809] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 394.257693][ T8813] loop3: detected capacity change from 0 to 2048 [ 394.361793][ T8813] udf: Bad value for 'volume' [ 394.482632][ T8816] vlan2: entered promiscuous mode [ 394.566782][ T8813] loop3: detected capacity change from 0 to 1024 [ 395.644993][ T8832] loop5: detected capacity change from 0 to 4096 [ 395.710872][ T8832] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 396.430324][ T8832] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 396.495290][ T8832] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 396.903053][ T8830] loop3: detected capacity change from 0 to 32768 [ 396.948915][ T8830] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.715 (8830) [ 397.025352][ T8830] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 397.080521][ T8830] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 397.089215][ T8830] workqueue: max_active 16777219 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 397.157661][ T8830] workqueue: max_active 16777219 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 397.264342][ T8830] workqueue: max_active 16777219 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 397.309106][ T8830] workqueue: max_active 16777219 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 397.340321][ T8830] workqueue: max_active 16777219 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 397.430037][ T8830] workqueue: max_active 16777219 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 397.466843][ T8830] workqueue: max_active 16777219 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048 [ 397.826702][ T8830] BTRFS info (device loop3): rebuilding free space tree [ 398.334124][ T8865] tipc: Started in network mode [ 398.342869][ T8865] tipc: Node identity 4, cluster identity 4711 [ 398.351555][ T8830] BTRFS info (device loop3): disabling free space tree [ 398.371657][ T8830] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 398.384740][ T8865] tipc: Node number set to 4 [ 398.401667][ T8838] loop1: detected capacity change from 0 to 32768 [ 398.409250][ T8830] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 398.567954][ T8838] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 398.791761][ T5872] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 398.894312][ T8838] XFS (loop1): Ending clean mount [ 399.433477][ T8838] XFS (loop1): Quotacheck needed: Please wait. [ 399.525539][ T8838] XFS (loop1): Quotacheck: Done. [ 399.695549][ T8883] loop0: detected capacity change from 0 to 2048 [ 399.748066][ T5863] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 399.756624][ T8883] udf: Bad value for 'volume' [ 399.828160][ T8882] netlink: 36 bytes leftover after parsing attributes in process `syz.3.724'. [ 399.952993][ T8883] loop0: detected capacity change from 0 to 1024 [ 400.325886][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.728'. [ 401.235869][ T8899] loop1: detected capacity change from 0 to 256 [ 401.397780][ T8899] exfat: Unknown parameter '0x00000000000000030x0000000000000003' [ 401.529294][ T8906] loop5: detected capacity change from 0 to 64 [ 402.426319][ T8917] loop1: detected capacity change from 0 to 4096 [ 402.488020][ T8917] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 402.527900][ T8921] loop5: detected capacity change from 0 to 1024 [ 402.569633][ T8917] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 402.603334][ T8924] loop3: detected capacity change from 0 to 64 [ 402.616916][ T8917] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 402.722492][ T8917] FAULT_INJECTION: forcing a failure. [ 402.722492][ T8917] name failslab, interval 1, probability 0, space 0, times 0 [ 402.800142][ T8917] CPU: 0 UID: 0 PID: 8917 Comm: syz.1.734 Not tainted 6.16.0-next-20250808-syzkaller #0 PREEMPT(full) [ 402.800176][ T8917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 402.800191][ T8917] Call Trace: [ 402.800199][ T8917] [ 402.800209][ T8917] dump_stack_lvl+0x189/0x250 [ 402.800242][ T8917] ? __pfx____ratelimit+0x10/0x10 [ 402.800274][ T8917] ? __pfx_dump_stack_lvl+0x10/0x10 [ 402.800301][ T8917] ? __pfx__printk+0x10/0x10 [ 402.800335][ T8917] ? __pfx___might_resched+0x10/0x10 [ 402.800357][ T8917] ? fs_reclaim_acquire+0x7d/0x100 [ 402.800385][ T8917] should_fail_ex+0x414/0x560 [ 402.800418][ T8917] should_failslab+0xa8/0x100 [ 402.800453][ T8917] kmem_cache_alloc_noprof+0x73/0x3c0 [ 402.800482][ T8917] ? getname_flags+0xb8/0x540 [ 402.800509][ T8917] getname_flags+0xb8/0x540 [ 402.800535][ T8917] __x64_sys_rename+0x5d/0x90 [ 402.800569][ T8917] do_syscall_64+0xfa/0x3b0 [ 402.800599][ T8917] ? lockdep_hardirqs_on+0x9c/0x150 [ 402.800629][ T8917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.800651][ T8917] ? clear_bhb_loop+0x60/0xb0 [ 402.800678][ T8917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.800700][ T8917] RIP: 0033:0x7f51de58ebe9 [ 402.800719][ T8917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.800738][ T8917] RSP: 002b:00007f51dc7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 402.800762][ T8917] RAX: ffffffffffffffda RBX: 00007f51de7b5fa0 RCX: 00007f51de58ebe9 [ 402.800779][ T8917] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000200000000400 [ 402.800793][ T8917] RBP: 00007f51dc7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 402.800807][ T8917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.800820][ T8917] R13: 00007f51de7b6038 R14: 00007f51de7b5fa0 R15: 00007fff5cfce778 [ 402.800854][ T8917] [ 403.007820][ T30] audit: type=1800 audit(1754775319.982:76): pid=8924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.737" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 403.032129][ T8924] FAULT_INJECTION: forcing a failure. [ 403.032129][ T8924] name failslab, interval 1, probability 0, space 0, times 0 [ 403.046056][ T8924] CPU: 0 UID: 0 PID: 8924 Comm: syz.3.737 Not tainted 6.16.0-next-20250808-syzkaller #0 PREEMPT(full) [ 403.046085][ T8924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 403.046099][ T8924] Call Trace: [ 403.046107][ T8924] [ 403.046116][ T8924] dump_stack_lvl+0x189/0x250 [ 403.046147][ T8924] ? __pfx____ratelimit+0x10/0x10 [ 403.046177][ T8924] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.046204][ T8924] ? __pfx__printk+0x10/0x10 [ 403.046237][ T8924] ? __pfx___might_resched+0x10/0x10 [ 403.046259][ T8924] ? fs_reclaim_acquire+0x7d/0x100 [ 403.046284][ T8924] should_fail_ex+0x414/0x560 [ 403.046317][ T8924] should_failslab+0xa8/0x100 [ 403.046351][ T8924] __kmalloc_cache_noprof+0x70/0x3d0 [ 403.046382][ T8924] ? alloc_pipe_info+0xe9/0x4d0 [ 403.046418][ T8924] alloc_pipe_info+0xe9/0x4d0 [ 403.046453][ T8924] splice_direct_to_actor+0xa5d/0xcc0 [ 403.046488][ T8924] ? __lock_acquire+0xab9/0xd20 [ 403.046543][ T8924] ? __pfx_aa_file_perm+0x10/0x10 [ 403.046565][ T8924] ? __lock_acquire+0xab9/0xd20 [ 403.046596][ T8924] ? __pfx_direct_splice_actor+0x10/0x10 [ 403.046628][ T8924] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 403.046690][ T8924] do_splice_direct+0x181/0x270 [ 403.046729][ T8924] ? __pfx_do_splice_direct+0x10/0x10 [ 403.046761][ T8924] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 403.046790][ T8924] ? rw_verify_area+0x255/0x4d0 [ 403.046821][ T8924] do_sendfile+0x4da/0x7e0 [ 403.046848][ T8924] ? __pfx_vfs_write+0x10/0x10 [ 403.046888][ T8924] ? __pfx_do_sendfile+0x10/0x10 [ 403.046918][ T8924] ? __fget_files+0x3a0/0x420 [ 403.046954][ T8924] __se_sys_sendfile64+0x13e/0x190 [ 403.046979][ T8924] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 403.046998][ T8924] ? rcu_is_watching+0x15/0xb0 [ 403.047026][ T8924] ? do_syscall_64+0xbe/0x3b0 [ 403.047062][ T8924] do_syscall_64+0xfa/0x3b0 [ 403.047092][ T8924] ? lockdep_hardirqs_on+0x9c/0x150 [ 403.047122][ T8924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.047144][ T8924] ? clear_bhb_loop+0x60/0xb0 [ 403.047170][ T8924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.047191][ T8924] RIP: 0033:0x7f758198ebe9 [ 403.047211][ T8924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.047230][ T8924] RSP: 002b:00007f75828aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 403.047254][ T8924] RAX: ffffffffffffffda RBX: 00007f7581bb5fa0 RCX: 00007f758198ebe9 [ 403.047270][ T8924] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 403.047282][ T8924] RBP: 00007f75828aa090 R08: 0000000000000000 R09: 0000000000000000 [ 403.047294][ T8924] R10: 0000000020fffe82 R11: 0000000000000246 R12: 0000000000000001 [ 403.047307][ T8924] R13: 00007f7581bb6038 R14: 00007f7581bb5fa0 R15: 00007fff9fafd0c8 [ 403.047339][ T8924] [ 403.867511][ T30] audit: type=1326 audit(1754775320.842:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.2.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e1b8ebe9 code=0x7fc00000 [ 404.033196][ T36] hfsplus: b-tree write err: -5, ino 4 [ 404.256617][ T8934] netlink: 'syz.1.741': attribute type 2 has an invalid length. [ 404.313070][ T8934] netlink: 143072 bytes leftover after parsing attributes in process `syz.1.741'. [ 404.327550][ T8931] loop2: detected capacity change from 0 to 2048 [ 404.327608][ T8936] netlink: 36 bytes leftover after parsing attributes in process `syz.3.739'. [ 404.356395][ T8934] nbd: must specify at least one socket [ 404.422344][ T8931] udf: Bad value for 'volume' [ 405.926404][ T8949] netlink: 32 bytes leftover after parsing attributes in process `syz.1.745'. [ 407.418719][ T8951] loop0: detected capacity change from 0 to 32768 [ 407.460934][ T8951] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.744 (8951) [ 407.518262][ T8951] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 407.557479][ T8951] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 407.592451][ T8963] loop3: detected capacity change from 0 to 1024 [ 407.600305][ T8951] BTRFS info (device loop0): using free-space-tree [ 407.775069][ T8953] loop2: detected capacity change from 0 to 32768 [ 407.896426][ T8958] loop1: detected capacity change from 0 to 32768 [ 408.131782][ T8953] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 408.281774][ T8958] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 408.393000][ T30] audit: type=1326 audit(1754775325.322:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.5.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea358ebe9 code=0x7fc00000 [ 408.459646][ T8958] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 408.570505][ T152] hfsplus: b-tree write err: -5, ino 4 [ 408.653208][ T8953] XFS (loop2): Ending clean mount [ 408.705152][ T8953] XFS (loop2): Quotacheck needed: Please wait. [ 408.808122][ T9005] netlink: 'syz.5.752': attribute type 2 has an invalid length. [ 408.874713][ T9005] netlink: 143068 bytes leftover after parsing attributes in process `syz.5.752'. [ 408.880061][ T8953] XFS (loop2): Quotacheck: Done. [ 408.919799][ T9005] nbd: must specify at least one socket [ 408.942051][ T8958] XFS (loop1): Ending clean mount [ 408.947264][ T30] audit: type=1800 audit(1754775325.922:79): pid=8953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.746" name="file2" dev="loop2" ino=9287 res=0 errno=0 [ 409.101772][ T5867] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 409.430939][ T5869] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 409.734642][ T5863] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 410.795442][ T9022] loop2: detected capacity change from 0 to 2048 [ 410.816741][ T9022] udf: Bad value for 'volume' [ 411.327017][ T9028] loop1: detected capacity change from 0 to 2048 [ 411.463364][ T9031] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 411.488829][ T9009] loop3: detected capacity change from 0 to 32768 [ 411.501264][ T9032] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 411.523323][ T30] audit: type=1800 audit(1754775328.502:80): pid=9028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.757" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 411.532236][ T9028] FAULT_INJECTION: forcing a failure. [ 411.532236][ T9028] name failslab, interval 1, probability 0, space 0, times 0 [ 411.587845][ T9009] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.753 (9009) [ 411.619748][ T9031] netlink: 36 bytes leftover after parsing attributes in process `syz.2.760'. [ 411.638766][ T9028] CPU: 0 UID: 0 PID: 9028 Comm: syz.1.757 Not tainted 6.16.0-next-20250808-syzkaller #0 PREEMPT(full) [ 411.638799][ T9028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 411.638813][ T9028] Call Trace: [ 411.638822][ T9028] [ 411.638832][ T9028] dump_stack_lvl+0x189/0x250 [ 411.638864][ T9028] ? __pfx____ratelimit+0x10/0x10 [ 411.638905][ T9028] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.638932][ T9028] ? __pfx__printk+0x10/0x10 [ 411.638970][ T9028] ? __pfx___might_resched+0x10/0x10 [ 411.638991][ T9028] ? fs_reclaim_acquire+0x7d/0x100 [ 411.639017][ T9028] should_fail_ex+0x414/0x560 [ 411.639053][ T9028] should_failslab+0xa8/0x100 [ 411.639089][ T9028] kmem_cache_alloc_noprof+0x73/0x3c0 [ 411.639118][ T9028] ? __blockdev_direct_IO+0x242/0x3490 [ 411.639156][ T9028] __blockdev_direct_IO+0x242/0x3490 [ 411.639201][ T9028] ? __pfx_nilfs_get_block+0x10/0x10 [ 411.639246][ T9028] ? __lock_acquire+0xab9/0xd20 [ 411.639284][ T9028] ? __pfx___blockdev_direct_IO+0x10/0x10 [ 411.639338][ T9028] ? __pfx_filemap_write_and_wait_range+0x10/0x10 [ 411.639372][ T9028] ? aa_file_perm+0x44d/0x1550 [ 411.639416][ T9028] ? __pfx_aa_file_perm+0x10/0x10 [ 411.639439][ T9028] ? __lock_acquire+0xab9/0xd20 [ 411.639482][ T9028] ? atime_needs_update+0x1e1/0x6d0 [ 411.639519][ T9028] nilfs_direct_IO+0xed/0x120 [ 411.639557][ T9028] generic_file_read_iter+0x319/0x510 [ 411.639592][ T9028] vfs_read+0x557/0xa30 [ 411.639620][ T9028] ? fdget_pos+0x247/0x320 [ 411.639648][ T9028] ? __pfx_vfs_read+0x10/0x10 [ 411.639688][ T9028] ? __fget_files+0x2a/0x420 [ 411.639717][ T9028] ksys_read+0x145/0x250 [ 411.639753][ T9028] ? __pfx_ksys_read+0x10/0x10 [ 411.639780][ T9028] ? rcu_is_watching+0x15/0xb0 [ 411.639809][ T9028] ? do_syscall_64+0xbe/0x3b0 [ 411.639845][ T9028] do_syscall_64+0xfa/0x3b0 [ 411.639876][ T9028] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.639913][ T9028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.639936][ T9028] ? clear_bhb_loop+0x60/0xb0 [ 411.639963][ T9028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.639985][ T9028] RIP: 0033:0x7f51de58ebe9 [ 411.640005][ T9028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.640024][ T9028] RSP: 002b:00007f51dc7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 411.640048][ T9028] RAX: ffffffffffffffda RBX: 00007f51de7b5fa0 RCX: 00007f51de58ebe9 [ 411.640064][ T9028] RDX: 0000000000001000 RSI: 0000200000001400 RDI: 0000000000000004 [ 411.640078][ T9028] RBP: 00007f51dc7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 411.640092][ T9028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.640105][ T9028] R13: 00007f51de7b6038 R14: 00007f51de7b5fa0 R15: 00007fff5cfce778 [ 411.640140][ T9028] [ 411.646630][ T9031] netlink: 16 bytes leftover after parsing attributes in process `syz.2.760'. [ 411.792510][ T9009] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 411.943012][ T9031] netlink: 36 bytes leftover after parsing attributes in process `syz.2.760'. [ 411.986387][ T9031] netlink: 36 bytes leftover after parsing attributes in process `syz.2.760'. [ 412.031938][ T9009] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 412.158306][ T9009] BTRFS info (device loop3): using free-space-tree [ 412.196330][ T9009] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 412.197276][ T9009] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 412.217926][ T9009] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 412.230056][ T9009] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 412.241062][ T9009] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 412.254428][ T9009] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 412.264604][ T9009] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 412.290612][ T9009] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 412.330927][ T9009] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 412.398699][ T9009] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 412.467563][ T9009] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 412.498035][ T9009] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 412.601006][ T9009] BTRFS error (device loop3): open_ctree failed: -12 [ 412.895640][ T9060] loop1: detected capacity change from 0 to 164 [ 412.944125][ T9060] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 412.962371][ T9060] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 414.013950][ T9070] loop2: detected capacity change from 0 to 8 [ 414.027938][ T9070] SQUASHFS error: xz decompression failed, data probably corrupt [ 414.036243][ T9070] SQUASHFS error: Failed to read block 0x108: -5 [ 414.042824][ T9070] SQUASHFS error: Unable to read metadata cache entry [106] [ 414.050297][ T9070] SQUASHFS error: Unable to read inode 0x0 [ 415.346511][ T9079] loop2: detected capacity change from 0 to 2048 [ 415.375716][ T9079] udf: Bad value for 'volume' [ 416.310946][ T9079] loop2: detected capacity change from 0 to 1024 [ 416.524684][ T9089] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 416.536360][ T982] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 416.714098][ T982] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 416.753607][ T982] usb 6-1: config 0 interface 0 has no altsetting 0 [ 416.790471][ T982] usb 6-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 416.832615][ T982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.874016][ T982] usb 6-1: config 0 descriptor?? [ 416.899170][ T9085] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 416.934435][ T9094] 9pnet: p9_errstr2errno: server reported unknown error @cF S+ [ 416.980309][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.775'. [ 417.020339][ T9095] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (234) [ 417.844734][ T982] uclogic 0003:5543:0042.0002: item fetching failed at offset 0/3 [ 417.874888][ T982] uclogic 0003:5543:0042.0002: parse failed [ 417.882299][ T982] uclogic 0003:5543:0042.0002: probe with driver uclogic failed with error -22 [ 417.897077][ T982] usb 6-1: USB disconnect, device number 3 [ 418.221475][ T9109] siw: device registration error -23 [ 419.186857][ T9118] 9pnet_fd: Insufficient options for proto=fd [ 419.505513][ T9125] loop5: detected capacity change from 0 to 2048 [ 420.276532][ T9125] udf: Bad value for 'volume' [ 420.330493][ T5938] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 420.560842][ T9129] loop1: detected capacity change from 0 to 8 [ 420.582944][ T9129] SQUASHFS error: Failed to read block 0xe000000000001ea: -5 [ 420.599983][ T5938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 420.610654][ T9129] unable to read xattr id index table [ 420.634862][ T5938] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 420.665348][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.677364][ T5938] usb 1-1: config 0 descriptor?? [ 420.961984][ T9134] loop1: detected capacity change from 0 to 2048 [ 421.311885][ T9134] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 421.712496][ T5938] aquacomputer_d5next 0003:0C70:F0BD.0003: item fetching failed at offset 0/3 [ 421.729723][ T5938] aquacomputer_d5next 0003:0C70:F0BD.0003: probe with driver aquacomputer_d5next failed with error -22 [ 421.822987][ T9134] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 421.893388][ T5938] usb 1-1: USB disconnect, device number 3 [ 422.066821][ T9121] loop3: detected capacity change from 0 to 32768 [ 422.519526][ T9146] siw: device registration error -23 [ 423.830809][ T5924] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 424.290523][ T5924] usb 2-1: Using ep0 maxpacket: 8 [ 424.302308][ T5924] usb 2-1: config 128 has an invalid interface number: 99 but max is 1 [ 424.319070][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.337857][ T5924] usb 2-1: config 128 contains an unexpected descriptor of type 0x1, skipping [ 424.402802][ T5924] usb 2-1: config 128 has an invalid descriptor of length 204, skipping remainder of the config [ 424.442036][ T5924] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 2 [ 424.474820][ T5924] usb 2-1: config 128 has no interface number 0 [ 424.490737][ T5924] usb 2-1: config 128 interface 99 altsetting 8 endpoint 0x5 has invalid maxpacket 36256, setting to 64 [ 424.535238][ T5924] usb 2-1: config 128 interface 99 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 424.579647][ T5924] usb 2-1: config 128 interface 99 has no altsetting 0 [ 424.602378][ T5924] usb 2-1: New USB device found, idVendor=0b05, idProduct=17eb, bcdDevice=59.1c [ 424.626546][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.645440][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.655066][ T5924] usb 2-1: Product: ഁ㖊㍽ﺘ㓫兓子氻Ṭꤻ饥᪉ږ朑㶰胫撟畸툡鐅郫岲ᇈ؅硢㒜঍㯽쌾⧈抜䏷痽蛹묛⼃孔ᨷ퀜咨㴈娠쐍襝첤翌꠩⪔쑲ᇅ䒛共ံ灋孠簼೰訌穑ᔽ蚐 [ 424.744527][ T5924] usb 2-1: Manufacturer: Џ [ 424.756550][ T5924] usb 2-1: SerialNumber: 䊻歗肏垸먹ᡜ戺頊苺㔀貈劌묠蹣꯷ꅂ⯃ᆢ㺷튰⛫⋈㲆乙큇䮅๒厗✱쥽ۆ㫹ﱼ︯ꀧꖕ팃垷탴뵍⪮䮌埖ጄꐬᅺ螷稡㙴䒰ꏾ屓ᒿ娺ᾤ慕愋랤귡ů뭽뚜렩㍈ਥ녮묜렬垑먆᯻垬㉀ [ 424.850217][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.020913][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.084944][ T9163] loop3: detected capacity change from 0 to 2048 [ 425.101847][ T5924] usb 2-1: USB disconnect, device number 5 [ 425.112189][ T9163] udf: Bad value for 'volume' [ 425.188599][ T9150] loop2: detected capacity change from 0 to 40427 [ 425.283957][ T9150] F2FS-fs (loop2): Image doesn't support compression [ 425.315987][ T9150] F2FS-fs (loop2): build fault injection rate: 690 [ 425.412582][ T9150] F2FS-fs (loop2): invalid crc value [ 425.764498][ T37] bridge_slave_1: left allmulticast mode [ 425.790586][ T37] bridge_slave_1: left promiscuous mode [ 425.821280][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.843046][ T9150] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 426.173736][ T37] bridge_slave_0: left allmulticast mode [ 426.218908][ T37] bridge_slave_0: left promiscuous mode [ 426.275953][ T9150] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 426.299980][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.527689][ T5186] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 426.572471][ T5186] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 426.590933][ T5186] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 426.612024][ T5186] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 426.620865][ T5186] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 426.738227][ T9184] netlink: 36 bytes leftover after parsing attributes in process `syz.1.803'. [ 426.909736][ T9188] input: syz1 as /devices/virtual/input/input6 [ 426.944217][ T9161] loop5: detected capacity change from 0 to 32768 [ 427.001306][ T9161] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.799 (9161) [ 427.038907][ T9161] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 427.072638][ T9161] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 427.093092][ T9161] BTRFS info (device loop5): using free-space-tree [ 427.521204][ T6283] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 428.670581][ T5186] Bluetooth: hci1: command tx timeout [ 428.952414][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.961724][ T37] bond_slave_0: left promiscuous mode [ 428.969411][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.980014][ T37] bond_slave_1: left promiscuous mode [ 428.987479][ T37] bond0 (unregistering): Released all slaves [ 429.208479][ T9177] wg1 speed is unknown, defaulting to 1000 [ 429.540557][ T5939] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 429.761937][ T5939] usb 6-1: Using ep0 maxpacket: 32 [ 429.785113][ T5939] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 429.839269][ T5939] usb 6-1: config 0 has no interface number 0 [ 429.913517][ T5939] usb 6-1: config 0 interface 184 has no altsetting 0 [ 429.943780][ T5939] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 429.964033][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.019445][ T5939] usb 6-1: Product: syz [ 430.045130][ T5939] usb 6-1: Manufacturer: syz [ 430.057148][ T5939] usb 6-1: SerialNumber: syz [ 430.235755][ T5939] usb 6-1: config 0 descriptor?? [ 430.266565][ T5939] smsc75xx v1.0.0 [ 430.750467][ T5186] Bluetooth: hci1: command tx timeout [ 431.075361][ T9234] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 431.317398][ T5939] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 431.360980][ T5939] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 431.383644][ T37] team0: Port device wlan1 removed [ 431.403018][ T5939] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 431.439990][ T5939] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 431.482993][ T5939] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 431.487551][ T9177] chnl_net:caif_netlink_parms(): no params data found [ 431.513695][ T5939] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 431.546280][ T5939] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 431.609036][ T5939] usb 6-1: USB disconnect, device number 4 [ 431.639439][ T9236] loop1: detected capacity change from 0 to 32768 [ 431.742214][ T9236] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 431.842529][ T5938] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 431.959703][ T9236] XFS (loop1): Ending clean mount [ 432.020450][ T5938] usb 3-1: Using ep0 maxpacket: 8 [ 432.027432][ T9236] XFS (loop1): Quotacheck needed: Please wait. [ 432.041733][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 432.060475][ T5938] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 432.070988][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 432.087917][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 432.134818][ T5938] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 432.219872][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 432.591831][ T5938] usb 3-1: New USB device found, idVendor=0499, idProduct=1055, bcdDevice= 1.a4 [ 432.616554][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.628902][ T5938] usb 3-1: Product: syz [ 432.645445][ T5938] usb 3-1: Manufacturer: syz [ 432.668419][ T5938] usb 3-1: SerialNumber: syz [ 432.689152][ T5938] usb 3-1: config 0 descriptor?? [ 432.842119][ T5186] Bluetooth: hci1: command tx timeout [ 432.892469][ T37] hsr_slave_0: left promiscuous mode [ 432.896801][ T9236] XFS (loop1): Quotacheck: Done. [ 433.100668][ T37] hsr_slave_1: left promiscuous mode [ 433.751429][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.762785][ T5863] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 433.764432][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.784839][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.792918][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.921447][ T37] veth1_macvtap: left promiscuous mode [ 433.942252][ T37] veth0_macvtap: left promiscuous mode [ 433.948109][ T37] veth1_vlan: left promiscuous mode [ 433.964026][ T37] veth0_vlan: left promiscuous mode [ 434.910603][ T5186] Bluetooth: hci1: command tx timeout [ 435.637536][ T9287] loop1: detected capacity change from 0 to 256 [ 435.686521][ T9287] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 436.470218][ T37] team0 (unregistering): Port device team_slave_1 removed [ 437.358741][ T9266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.366122][ T9266] bond0: (slave ip6_vti0): The slave device specified does not support setting the MAC address [ 437.377603][ T9266] bond0: (slave ip6_vti0): Error -95 calling set_mac_address [ 437.549905][ T5938] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 438.004003][ T9293] comedi comedi0: Minor -2147450880 is invalid! [ 438.592173][ T9177] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.670160][ T9177] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.706759][ T9177] bridge_slave_0: entered allmulticast mode [ 438.754280][ T9177] bridge_slave_0: entered promiscuous mode [ 438.787528][ T5938] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 438.808373][ T9177] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.836650][ T9177] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.874649][ T9177] bridge_slave_1: entered allmulticast mode [ 438.893497][ T5938] usb 3-1: USB disconnect, device number 7 [ 438.911972][ T9177] bridge_slave_1: entered promiscuous mode [ 438.932109][ T9308] loop2: detected capacity change from 0 to 512 [ 438.973994][ T9308] EXT4-fs: Ignoring removed oldalloc option [ 439.161833][ T9304] loop3: detected capacity change from 0 to 32768 [ 439.179364][ T9177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.190058][ T9308] EXT4-fs (loop2): 1 truncate cleaned up [ 439.198616][ T9304] (syz.3.821,9304,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #66: rec_len is too small for name_len - offset=132, inode=71, rec_len=16, name_len=13 [ 439.227353][ T9308] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.237827][ T9177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.275125][ T9304] (syz.3.821,9304,0):ocfs2_init_global_system_inodes:465 ERROR: status = -22 [ 439.307455][ T9304] (syz.3.821,9304,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 4, possibly corrupt fs? [ 439.307498][ T9304] (syz.3.821,9304,0):ocfs2_init_global_system_inodes:476 ERROR: status = -22 [ 439.319809][ T30] audit: type=1800 audit(1754775356.272:81): pid=9308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.822" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 439.418691][ T5909] udevd[5909]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 439.449172][ T9304] (syz.3.821,9304,0):ocfs2_initialize_super:2196 ERROR: status = -22 [ 439.592784][ T30] audit: type=1804 audit(1754775356.572:82): pid=9324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.822" name="/newroot/169/file1/file1" dev="loop2" ino=15 res=1 errno=0 [ 439.627149][ T9304] (syz.3.821,9304,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 440.342479][ T9308] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.822: invalid indirect mapped block 234881024 (level 0) [ 440.362046][ T9308] EXT4-fs (loop2): Remounting filesystem read-only [ 440.458439][ T9177] team0: Port device team_slave_0 added [ 440.491263][ T9177] team0: Port device team_slave_1 added [ 440.491574][ T9330] loop1: detected capacity change from 0 to 512 [ 440.506871][ T5869] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.524981][ T9330] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 440.780676][ T44] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 440.851000][ T9330] UDF-fs: Scanning with blocksize 512 failed [ 440.919950][ T9330] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 440.992201][ T9330] UDF-fs: Scanning with blocksize 1024 failed [ 441.031206][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 441.130997][ T44] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 441.160920][ T9330] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 441.168380][ T9330] UDF-fs: Scanning with blocksize 2048 failed [ 441.200582][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.249501][ T9330] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 441.292858][ T44] usb 4-1: config 0 descriptor?? [ 441.336996][ T9330] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 441.357568][ T9177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.377530][ T9177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.474355][ T9177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.514982][ T9346] loop2: detected capacity change from 0 to 256 [ 441.545870][ T9346] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 441.651555][ T9177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.684258][ T9177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.908752][ T9177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.126466][ T44] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 442.138432][ T44] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 442.153809][ T5938] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 442.237191][ T44] asix 4-1:0.0: probe with driver asix failed with error -71 [ 442.332589][ T44] usb 4-1: USB disconnect, device number 3 [ 442.355893][ T5938] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 442.386963][ T5938] usb 2-1: config 0 has no interface number 0 [ 442.589659][ T5938] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 443.451332][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.516417][ T5938] usb 2-1: Product: syz [ 443.600703][ T5938] usb 2-1: Manufacturer: syz [ 443.607068][ T5938] usb 2-1: SerialNumber: syz [ 443.620221][ T9177] hsr_slave_0: entered promiscuous mode [ 443.623358][ T5938] usb 2-1: config 0 descriptor?? [ 443.667708][ T9177] hsr_slave_1: entered promiscuous mode [ 443.686007][ T9177] debugfs: 'hsr0' already exists in 'hsr' [ 443.696161][ T9177] Cannot create hsr debugfs directory [ 444.127458][ T9351] loop1: detected capacity change from 0 to 40427 [ 444.134863][ T9351] f2fs: Unknown parameter '00000000000000000000005' [ 444.281256][ T5938] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 444.304359][ T5938] usb 2-1: USB disconnect, device number 6 [ 444.806238][ T9367] comedi comedi0: Minor -2147450880 is invalid! [ 445.230139][ T9375] autofs: Unknown parameter 'f' [ 445.261667][ T9375] autofs: Unknown parameter 'f' [ 445.315528][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.322552][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.324226][ T9376] vim2m vim2m.0: vidioc_s_fmt queue busy [ 445.391508][ T9371] loop2: detected capacity change from 0 to 4096 [ 445.398910][ T9371] ntfs3: Unknown parameter 'Discard' [ 445.613988][ T9177] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 445.702378][ T892] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 445.716784][ T9177] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 445.794092][ T9177] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 445.900750][ T892] usb 3-1: Using ep0 maxpacket: 8 [ 445.916260][ T892] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 445.943181][ T892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.008431][ T9177] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 446.023184][ T892] pvrusb2: Hardware description: Terratec Grabster AV400 [ 446.104344][ T892] pvrusb2: ********** [ 446.114588][ T892] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 446.157110][ T892] pvrusb2: Important functionality might not be entirely working. [ 446.173752][ T892] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 446.188834][ T892] pvrusb2: ********** [ 446.254930][ T2348] pvrusb2: Invalid write control endpoint [ 446.627647][ T2348] pvrusb2: Invalid write control endpoint [ 446.686858][ T2348] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 446.705213][ T9371] loop2: detected capacity change from 0 to 4096 [ 446.711718][ T2348] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 446.721894][ T9371] ntfs3: Unknown parameter '' [ 446.737894][ T2348] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 446.781499][ T2348] pvrusb2: Device being rendered inoperable [ 446.849478][ T9] usb 3-1: USB disconnect, device number 8 [ 446.867062][ T9414] loop5: detected capacity change from 0 to 256 [ 446.907771][ T9414] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 446.992555][ T2348] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 447.461408][ T2348] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 447.523640][ T9177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.582727][ T2348] pvrusb2: Attached sub-driver cx25840 [ 447.627863][ T2348] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 447.709925][ T2348] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 447.921284][ T9177] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.736728][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.743966][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.062980][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.070253][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.048937][ T9446] netlink: 'syz.1.847': attribute type 9 has an invalid length. [ 451.056780][ T9446] netlink: 211988 bytes leftover after parsing attributes in process `syz.1.847'. [ 452.512536][ T9460] loop2: detected capacity change from 0 to 256 [ 452.585660][ T9460] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 453.139609][ T9464] loop5: detected capacity change from 0 to 164 [ 453.688197][ T9464] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 453.713522][ T9464] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 453.934750][ T9177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.125542][ T9471] netlink: 'syz.1.853': attribute type 10 has an invalid length. [ 454.514933][ T9468] loop2: detected capacity change from 0 to 1024 [ 455.913618][ T67] hfsplus: b-tree write err: -5, ino 4 [ 456.261354][ T9489] loop2: detected capacity change from 0 to 256 [ 456.346734][ T9490] loop1: detected capacity change from 0 to 164 [ 456.949256][ T9490] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 456.992557][ T9487] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 457.102870][ T9489] syz.2.857 uses obsolete (PF_INET,SOCK_PACKET) [ 457.818142][ T9507] loop3: detected capacity change from 0 to 2048 [ 457.861790][ T9514] loop2: detected capacity change from 0 to 256 [ 458.088659][ T9177] veth0_vlan: entered promiscuous mode [ 458.146666][ T9177] veth1_vlan: entered promiscuous mode [ 458.180521][ T30] audit: type=1326 audit(1754775375.122:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9517 comm="syz.5.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea358ebe9 code=0x7ffc0000 [ 458.257894][ T30] audit: type=1326 audit(1754775375.122:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9517 comm="syz.5.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f4ea358ebe9 code=0x7ffc0000 [ 458.282106][ T9177] veth0_macvtap: entered promiscuous mode [ 459.039491][ T30] audit: type=1326 audit(1754775375.122:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9517 comm="syz.5.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea358ebe9 code=0x7ffc0000 [ 459.070988][ T30] audit: type=1326 audit(1754775375.132:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9517 comm="syz.5.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea358ebe9 code=0x7ffc0000 [ 459.088637][ T9514] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 459.124543][ T30] audit: type=1326 audit(1754775375.132:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9517 comm="syz.5.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f4ea358ebe9 code=0x7ffc0000 [ 459.651973][ T30] audit: type=1326 audit(1754775375.132:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9517 comm="syz.5.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea358ebe9 code=0x7ffc0000 [ 459.675148][ T30] audit: type=1326 audit(1754775375.132:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9517 comm="syz.5.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea358ebe9 code=0x7ffc0000 [ 459.744903][ T30] audit: type=1326 audit(1754775375.132:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9517 comm="syz.5.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4ea358ebe9 code=0x7ffc0000 [ 459.761137][ T9177] veth1_macvtap: entered promiscuous mode [ 459.768260][ T30] audit: type=1326 audit(1754775375.132:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9517 comm="syz.5.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea358ebe9 code=0x7ffc0000 [ 459.793340][ T9507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.803709][ T30] audit: type=1326 audit(1754775375.132:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9517 comm="syz.5.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ea358ebe9 code=0x7ffc0000 [ 459.947358][ T9507] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.991122][ T9177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.036097][ T9177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.044340][ T9527] loop2: detected capacity change from 0 to 256 [ 460.059767][ T9517] delete_channel: no stack [ 460.089322][ T9528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.862'. [ 460.106114][ T9527] vfat: Unknown parameter 'codepawe' [ 460.150660][ T9528] netlink: 24 bytes leftover after parsing attributes in process `syz.3.862'. [ 460.208908][ T9528] netlink: 24 bytes leftover after parsing attributes in process `syz.3.862'. [ 460.223458][ T9527] loop2: detected capacity change from 0 to 1024 [ 460.225836][ T152] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.353368][ T37] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.378991][ T9527] EXT4-fs: Ignoring removed mblk_io_submit option [ 460.448678][ T9533] netlink: 'syz.1.866': attribute type 10 has an invalid length. [ 460.490967][ T9527] EXT4-fs: Ignoring removed orlov option [ 460.608846][ T37] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.880492][ T5939] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 460.920506][ T37] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.942328][ T9527] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.043652][ T9538] loop5: detected capacity change from 0 to 1024 [ 461.147501][ T5939] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 461.171906][ T5939] usb 4-1: can't read configurations, error -71 [ 461.756430][ T5869] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.049808][ T5872] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.085281][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.121135][ T12] hfsplus: b-tree write err: -5, ino 4 [ 462.170467][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.448275][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.485863][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.246588][ T9575] loop2: detected capacity change from 0 to 256 [ 464.298758][ T9575] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 464.801096][ T982] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 465.817220][ T982] usb 7-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice=f0.ee [ 465.853617][ T982] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.880601][ T982] usb 7-1: config 0 descriptor?? [ 466.033834][ T9591] netlink: 'syz.1.878': attribute type 10 has an invalid length. [ 466.404064][ T982] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 466.434407][ T982] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 466.553779][ T5982] udevd[5982]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 466.593987][ T9593] 9pnet_fd: Insufficient options for proto=fd [ 466.786771][ T9597] loop2: detected capacity change from 0 to 1024 [ 467.806435][ T9608] overlayfs: overlapping lowerdir path [ 467.899853][ T9609] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 467.911909][ T9609] overlayfs: missing 'lowerdir' [ 468.265899][ T9610] loop1: detected capacity change from 0 to 32768 [ 468.366343][ T67] hfsplus: b-tree write err: -5, ino 4 [ 468.465452][ T9613] loop5: detected capacity change from 0 to 512 [ 468.474198][ T982] usb 7-1: USB disconnect, device number 2 [ 468.489425][ T9613] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 468.553270][ T9613] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 468.668220][ T9621] netlink: 'syz.2.883': attribute type 2 has an invalid length. [ 468.804318][ T9621] netlink: 143072 bytes leftover after parsing attributes in process `syz.2.883'. [ 468.827917][ T9613] EXT4-fs (loop5): 1 truncate cleaned up [ 468.882600][ T9613] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.900569][ T9621] nbd: must specify at least one socket [ 469.292390][ T9632] loop6: detected capacity change from 0 to 256 [ 469.372195][ T9613] EXT4-fs error (device loop5): ext4_empty_dir:3122: inode #2: block 13: comm syz.5.885: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 469.399922][ T9632] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 469.518935][ T9613] EXT4-fs (loop5): Remounting filesystem read-only [ 470.559088][ T6283] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.689645][ T9627] team_slave_1: entered promiscuous mode [ 470.695722][ T9627] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 470.804264][ T9627] vlan2: entered promiscuous mode [ 470.845437][ T9627] team0: entered promiscuous mode [ 471.012949][ T9647] warning: `syz.6.890' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 471.620923][ T9649] netlink: 'syz.5.889': attribute type 11 has an invalid length. [ 471.742072][ T9652] 8021q: adding VLAN 0 to HW filter on device bond1 [ 471.875480][ T9663] loop6: detected capacity change from 0 to 1024 [ 472.227125][ T9673] loop1: detected capacity change from 0 to 40427 [ 472.265026][ T9673] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 472.272952][ T9673] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 472.286267][ T9673] F2FS-fs (loop1): invalid crc value [ 472.415318][ T9673] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 472.538027][ T9673] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 472.545718][ T9673] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 473.680796][ T12] hfsplus: b-tree write err: -5, ino 4 [ 473.992392][ T9695] netlink: 'syz.6.898': attribute type 2 has an invalid length. [ 474.048860][ T9695] netlink: 143072 bytes leftover after parsing attributes in process `syz.6.898'. [ 474.063378][ T9696] loop3: detected capacity change from 0 to 1024 [ 474.095654][ T9695] nbd: must specify at least one socket [ 474.254520][ T9696] __quota_error: 48 callbacks suppressed [ 474.254543][ T9696] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 474.342161][ T9696] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 474.380605][ T9696] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.899: Failed to acquire dquot type 0 [ 474.486516][ T9696] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 474.577142][ T9696] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.899: corrupted inode contents [ 474.695555][ T9696] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #13: comm syz.3.899: mark_inode_dirty error [ 474.805811][ T9696] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.899: corrupted inode contents [ 474.880762][ T9696] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.899: mark_inode_dirty error [ 475.321815][ T9696] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.899: corrupted inode contents [ 475.491513][ T9696] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 475.535559][ T9696] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.899: corrupted inode contents [ 475.632072][ T9696] EXT4-fs error (device loop3): ext4_truncate:4666: inode #13: comm syz.3.899: mark_inode_dirty error [ 475.688516][ T9696] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 476.270566][ T9696] EXT4-fs (loop3): 1 truncate cleaned up [ 476.276502][ T9726] siw: device registration error -23 [ 476.732072][ T9696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.303061][ T5872] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.561621][ T9741] loop1: detected capacity change from 0 to 1024 [ 478.770232][ T1142] hfsplus: b-tree write err: -5, ino 4 [ 479.311390][ T9760] netlink: 'syz.1.912': attribute type 2 has an invalid length. [ 479.319144][ T9760] netlink: 143072 bytes leftover after parsing attributes in process `syz.1.912'. [ 479.388787][ T9760] nbd: must specify at least one socket [ 480.254597][ T9765] loop5: detected capacity change from 0 to 4096 [ 480.271109][ T5939] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 480.385945][ T9765] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.532414][ T5939] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 480.577052][ T5939] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 480.627314][ T5939] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 480.666058][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 480.702681][ T5939] usb 4-1: SerialNumber: syz [ 480.829654][ T9787] loop6: detected capacity change from 0 to 1024 [ 480.850451][ T982] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 480.968992][ T9791] loop2: detected capacity change from 0 to 512 [ 481.092251][ T9791] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.161938][ T9791] ext4 filesystem being mounted at /194/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 481.183793][ T982] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 481.216050][ T982] usb 6-1: config 0 has no interface number 0 [ 481.655740][ T9791] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #4: comm syz.2.920: corrupted inode contents [ 481.804195][ T982] usb 6-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice=59.7a [ 481.813614][ T982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.822379][ T982] usb 6-1: Product: syz [ 481.826585][ T982] usb 6-1: Manufacturer: syz [ 481.831510][ T982] usb 6-1: SerialNumber: syz [ 481.834255][ T1142] hfsplus: b-tree write err: -5, ino 4 [ 481.839549][ T982] usb 6-1: config 0 descriptor?? [ 481.860048][ T9791] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #4: comm syz.2.920: mark_inode_dirty error [ 481.977133][ T9791] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #4: comm syz.2.920: corrupted inode contents [ 481.993959][ T9791] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #4: comm syz.2.920: mark_inode_dirty error [ 482.018223][ T9791] Quota error (device loop2): write_blk: dquota write failed [ 482.027092][ T9791] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 482.037853][ T9791] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 482.049548][ T9791] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.920: Failed to acquire dquot type 1 [ 482.652768][ T982] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/input/input7 [ 482.734042][ T5221] bcm5974 6-1:0.1: could not read from device [ 482.757957][ T5869] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.808842][ T5939] usb 4-1: 0:2 : does not exist [ 482.887365][ T5221] bcm5974 6-1:0.1: could not read from device [ 482.936817][ T982] usb 6-1: USB disconnect, device number 5 [ 482.960791][ T5939] usb 4-1: USB disconnect, device number 6 [ 483.021984][ T6283] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.655503][ T9820] overlay: ./file1 is not a directory [ 484.303038][ T9828] netlink: 'syz.5.926': attribute type 2 has an invalid length. [ 484.312311][ T9828] netlink: 143072 bytes leftover after parsing attributes in process `syz.5.926'. [ 484.330605][ T9831] netlink: 24 bytes leftover after parsing attributes in process `syz.6.928'. [ 484.360009][ T9828] nbd: must specify at least one socket [ 484.507355][ T9328] udevd[9328]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 485.628028][ T9849] loop1: detected capacity change from 0 to 512 [ 485.763741][ T9851] loop6: detected capacity change from 0 to 1024 [ 485.810268][ T9849] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.856236][ T9849] ext4 filesystem being mounted at /201/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 485.881485][ T9849] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #4: comm syz.1.933: corrupted inode contents [ 485.912152][ T9849] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #4: comm syz.1.933: mark_inode_dirty error [ 486.605106][ T9849] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #4: comm syz.1.933: corrupted inode contents [ 487.055395][ T37] hfsplus: b-tree write err: -5, ino 4 [ 487.080795][ T9849] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #4: comm syz.1.933: mark_inode_dirty error [ 487.216916][ T9849] Quota error (device loop1): write_blk: dquota write failed [ 487.247762][ T9849] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 487.295144][ T9849] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 487.697203][ T9849] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.933: Failed to acquire dquot type 1 [ 487.778132][ T9872] netlink: 8 bytes leftover after parsing attributes in process `syz.6.936'. [ 487.985412][ T9872] loop6: detected capacity change from 0 to 512 [ 488.098244][ T5863] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.366902][ T9880] loop1: detected capacity change from 0 to 256 [ 488.446410][ T9880] FAT-fs (loop1): Directory bread(block 64) failed [ 488.498461][ T9880] FAT-fs (loop1): Directory bread(block 65) failed [ 488.562728][ T9880] FAT-fs (loop1): Directory bread(block 66) failed [ 488.602959][ T9880] FAT-fs (loop1): Directory bread(block 67) failed [ 488.656837][ T9880] FAT-fs (loop1): Directory bread(block 68) failed [ 488.700677][ T9880] FAT-fs (loop1): Directory bread(block 69) failed [ 488.724345][ T9872] EXT4-fs (loop6): failed to open journal device unknown-block(0,0) -6 [ 488.773504][ T9880] FAT-fs (loop1): Directory bread(block 70) failed [ 488.807744][ T9880] FAT-fs (loop1): Directory bread(block 71) failed [ 488.820685][ T9880] FAT-fs (loop1): Directory bread(block 72) failed [ 488.827370][ T9880] FAT-fs (loop1): Directory bread(block 73) failed [ 490.283283][ T9894] loop6: detected capacity change from 0 to 1024 [ 490.444933][ T9894] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.531145][ T9894] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 491.238481][ T9899] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 491.415398][ T9894] netlink: 24 bytes leftover after parsing attributes in process `syz.6.941'. [ 491.432669][ T9899] EXT4-fs (loop6): Remounting filesystem read-only [ 491.561247][ T9894] netlink: 4 bytes leftover after parsing attributes in process `syz.6.941'. [ 491.617817][ T9908] netlink: 24 bytes leftover after parsing attributes in process `syz.2.943'. [ 492.469889][ T9919] loop5: detected capacity change from 0 to 1024 [ 493.532558][ T67] hfsplus: b-tree write err: -5, ino 4 [ 493.944522][ T9930] netlink: 27 bytes leftover after parsing attributes in process `syz.2.948'. [ 494.685323][ T9936] loop5: detected capacity change from 0 to 256 [ 494.815470][ T9936] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 494.854855][ T9936] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 494.877469][ T9940] loop3: detected capacity change from 0 to 512 [ 494.901303][ T9936] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 495.071750][ T9949] netlink: 204 bytes leftover after parsing attributes in process `syz.5.947'. [ 495.091774][ T9949] netlink: 36 bytes leftover after parsing attributes in process `syz.5.947'. [ 495.129170][ T9940] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.181556][ T9944] netlink: 'syz.2.953': attribute type 1 has an invalid length. [ 495.231715][ T9940] ext4 filesystem being mounted at /183/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 495.910834][ T9940] EXT4-fs (loop3): shut down requested (0) [ 495.974962][ T9949] exFAT-fs (loop5): error, invalid access to FAT (entry 0xffffffff) [ 496.040955][ T9949] exFAT-fs (loop5): Filesystem has been set read-only [ 496.062287][ T9177] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.113877][ T9949] exFAT-fs (loop5): error, invalid access to FAT (entry 0xffffffff) [ 496.122323][ T982] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 496.181181][ T9949] exFAT-fs (loop5): error, invalid access to FAT (entry 0xffffffff) [ 496.602748][ T982] usb 6-1: Using ep0 maxpacket: 32 [ 496.779850][ T982] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.00 [ 496.825168][ T982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.881807][ T982] usb 6-1: config 0 descriptor?? [ 497.027794][ T5872] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.023899][ T982] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 498.817949][ T982] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 498.838183][ T982] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 498.840707][ T13] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 498.853753][ T982] usb 6-1: media controller created [ 499.028903][ T982] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 499.043510][ T9972] loop1: detected capacity change from 0 to 1024 [ 500.246523][ T9949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.285891][ T1142] hfsplus: b-tree write err: -5, ino 4 [ 500.331159][ T9979] netlink: 24 bytes leftover after parsing attributes in process `syz.3.958'. [ 500.354044][ T9949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.694172][ T982] az6027: usb out operation failed. (-71) [ 500.736698][ T982] stb0899_attach: Driver disabled by Kconfig [ 500.804265][ T982] az6027: no front-end attached [ 500.804265][ T982] [ 500.837052][ T982] az6027: usb out operation failed. (-71) [ 500.869955][ T5916] ------------[ cut here ]------------ [ 500.875860][ T5916] WARNING: kernel/rcu/sync.c:177 at rcu_sync_dtor+0xcd/0x180, CPU#1: kworker/1:3/5916 [ 500.885547][ T5916] Modules linked in: [ 500.889647][ T5916] CPU: 1 UID: 0 PID: 5916 Comm: kworker/1:3 Not tainted 6.16.0-next-20250808-syzkaller #0 PREEMPT(full) [ 500.900880][ T5916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 500.911060][ T5916] Workqueue: events destroy_super_work [ 500.916547][ T5916] RIP: 0010:rcu_sync_dtor+0xcd/0x180 [ 500.921867][ T5916] Code: 18 e8 87 c7 00 00 43 0f b6 44 25 00 84 c0 0f 85 82 00 00 00 83 3b 00 75 1f 5b 41 5c 41 5d 41 5e 41 5f 5d e9 85 f6 d7 09 cc 90 <0f> 0b 90 e9 66 ff ff ff 90 0f 0b 90 eb 8a 90 0f 0b 90 eb db 89 d9 [ 500.941750][ T5916] RSP: 0018:ffffc9000435f9e8 EFLAGS: 00010246 [ 500.947863][ T5916] RAX: 0000000000000002 RBX: ffff88802f3c0358 RCX: 53d43b5f4919e000 [ 500.955968][ T5916] RDX: 0000000000000000 RSI: ffffffff8be346e0 RDI: ffff88802f3c0358 [ 500.963983][ T5916] RBP: 0000000000000261 R08: ffffffff8dfdd3cf R09: 1ffffffff1bfba79 [ 500.972308][ T5916] R10: dffffc0000000000 R11: fffffbfff1bfba7a R12: dffffc0000000000 [ 500.980289][ T5916] R13: 1ffff11005e7806b R14: ffff88802f3c0358 R15: dffffc0000000000 [ 500.988527][ T5916] FS: 0000000000000000(0000) GS:ffff888125d15000(0000) knlGS:0000000000000000 [ 500.997715][ T5916] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 501.004378][ T5916] CR2: 00007f4ea42e56c0 CR3: 000000006ca9e000 CR4: 00000000003526f0 [ 501.012410][ T5916] Call Trace: [ 501.015750][ T5916] [ 501.018731][ T5916] percpu_free_rwsem+0x40/0x80 [ 501.023612][ T5916] destroy_super_work+0xee/0x130 [ 501.028607][ T5916] ? process_scheduled_works+0x9ef/0x17b0 [ 501.034387][ T5916] process_scheduled_works+0xade/0x17b0 [ 501.039964][ T5916] ? __pfx_process_scheduled_works+0x10/0x10 [ 501.046002][ T5916] worker_thread+0x8a0/0xda0 [ 501.050632][ T5916] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 501.056979][ T5916] ? __kthread_parkme+0x7b/0x200 [ 501.062050][ T5916] kthread+0x711/0x8a0 [ 501.066134][ T5916] ? __pfx_worker_thread+0x10/0x10 [ 501.071292][ T5916] ? __pfx_kthread+0x10/0x10 [ 501.076264][ T5916] ? _raw_spin_unlock_irq+0x23/0x50 [ 501.081672][ T5916] ? lockdep_hardirqs_on+0x9c/0x150 [ 501.086917][ T5916] ? __pfx_kthread+0x10/0x10 [ 501.091587][ T5916] ret_from_fork+0x3f9/0x770 [ 501.096210][ T5916] ? __pfx_ret_from_fork+0x10/0x10 [ 501.101359][ T5916] ? __switch_to_asm+0x39/0x70 [ 501.106136][ T5916] ? __switch_to_asm+0x33/0x70 [ 501.110929][ T5916] ? __pfx_kthread+0x10/0x10 [ 501.115528][ T5916] ret_from_fork_asm+0x1a/0x30 [ 501.120309][ T5916] [ 501.123374][ T5916] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 501.130669][ T5916] CPU: 1 UID: 0 PID: 5916 Comm: kworker/1:3 Not tainted 6.16.0-next-20250808-syzkaller #0 PREEMPT(full) [ 501.141889][ T5916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 501.151952][ T5916] Workqueue: events destroy_super_work [ 501.157437][ T5916] Call Trace: [ 501.160739][ T5916] [ 501.163675][ T5916] dump_stack_lvl+0x99/0x250 [ 501.168287][ T5916] ? __asan_memcpy+0x40/0x70 [ 501.172899][ T5916] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.178119][ T5916] ? __pfx__printk+0x10/0x10 [ 501.182753][ T5916] vpanic+0x281/0x750 [ 501.186775][ T5916] ? __pfx_vpanic+0x10/0x10 [ 501.191297][ T5916] ? is_bpf_text_address+0x292/0x2b0 [ 501.196605][ T5916] ? is_bpf_text_address+0x26/0x2b0 [ 501.201839][ T5916] panic+0xb9/0xc0 [ 501.205602][ T5916] ? __pfx_panic+0x10/0x10 [ 501.210126][ T5916] ? ret_from_fork_asm+0x1a/0x30 [ 501.215083][ T5916] __warn+0x334/0x4c0 [ 501.219075][ T5916] ? rcu_sync_dtor+0xcd/0x180 [ 501.223770][ T5916] ? rcu_sync_dtor+0xcd/0x180 [ 501.228471][ T5916] report_bug+0x2be/0x4f0 [ 501.232820][ T5916] ? rcu_sync_dtor+0xcd/0x180 [ 501.237520][ T5916] ? rcu_sync_dtor+0xcd/0x180 [ 501.242211][ T5916] ? rcu_sync_dtor+0xcf/0x180 [ 501.246903][ T5916] handle_bug+0x84/0x160 [ 501.251170][ T5916] exc_invalid_op+0x1a/0x50 [ 501.255684][ T5916] asm_exc_invalid_op+0x1a/0x20 [ 501.260729][ T5916] RIP: 0010:rcu_sync_dtor+0xcd/0x180 [ 501.266036][ T5916] Code: 18 e8 87 c7 00 00 43 0f b6 44 25 00 84 c0 0f 85 82 00 00 00 83 3b 00 75 1f 5b 41 5c 41 5d 41 5e 41 5f 5d e9 85 f6 d7 09 cc 90 <0f> 0b 90 e9 66 ff ff ff 90 0f 0b 90 eb 8a 90 0f 0b 90 eb db 89 d9 [ 501.285658][ T5916] RSP: 0018:ffffc9000435f9e8 EFLAGS: 00010246 [ 501.291757][ T5916] RAX: 0000000000000002 RBX: ffff88802f3c0358 RCX: 53d43b5f4919e000 [ 501.299774][ T5916] RDX: 0000000000000000 RSI: ffffffff8be346e0 RDI: ffff88802f3c0358 [ 501.307776][ T5916] RBP: 0000000000000261 R08: ffffffff8dfdd3cf R09: 1ffffffff1bfba79 [ 501.315778][ T5916] R10: dffffc0000000000 R11: fffffbfff1bfba7a R12: dffffc0000000000 [ 501.323762][ T5916] R13: 1ffff11005e7806b R14: ffff88802f3c0358 R15: dffffc0000000000 [ 501.331762][ T5916] ? destroy_super_work+0xe2/0x130 [ 501.336896][ T5916] percpu_free_rwsem+0x40/0x80 [ 501.341675][ T5916] destroy_super_work+0xee/0x130 [ 501.346634][ T5916] ? process_scheduled_works+0x9ef/0x17b0 [ 501.352376][ T5916] process_scheduled_works+0xade/0x17b0 [ 501.357979][ T5916] ? __pfx_process_scheduled_works+0x10/0x10 [ 501.364002][ T5916] worker_thread+0x8a0/0xda0 [ 501.368617][ T5916] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 501.374982][ T5916] ? __kthread_parkme+0x7b/0x200 [ 501.379961][ T5916] kthread+0x711/0x8a0 [ 501.384067][ T5916] ? __pfx_worker_thread+0x10/0x10 [ 501.389192][ T5916] ? __pfx_kthread+0x10/0x10 [ 501.393802][ T5916] ? _raw_spin_unlock_irq+0x23/0x50 [ 501.399016][ T5916] ? lockdep_hardirqs_on+0x9c/0x150 [ 501.404229][ T5916] ? __pfx_kthread+0x10/0x10 [ 501.408846][ T5916] ret_from_fork+0x3f9/0x770 [ 501.413464][ T5916] ? __pfx_ret_from_fork+0x10/0x10 [ 501.418590][ T5916] ? __switch_to_asm+0x39/0x70 [ 501.423366][ T5916] ? __switch_to_asm+0x33/0x70 [ 501.428175][ T5916] ? __pfx_kthread+0x10/0x10 [ 501.432794][ T5916] ret_from_fork_asm+0x1a/0x30 [ 501.437583][ T5916] [ 501.440986][ T5916] Kernel Offset: disabled [ 501.445315][ T5916] Rebooting in 86400 seconds..