last executing test programs: 16.020865762s ago: executing program 1 (id=1730): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000300)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x1c, 0x4, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x26}, {[@generic={0x82, 0x12, "bd78e0c9650041bb23566edeb8eada44"}, @generic={0x94, 0x5, "f62d06"}, @timestamp_addr={0x44, 0x44, 0x92, 0x1, 0x4, [{@rand_addr=0x64010102, 0x9}, {@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0xad3}, {@loopback, 0x4}, {@multicast1, 0x8001}, {@loopback, 0xe}, {@multicast2, 0x81}, {@private=0xa010100}]}]}}, @time_exceeded={0x2b, 0x1, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ptrace(0x10, r3) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r4}, 0x4) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000104000000000000000000000b00", @ANYRES32=r8, @ANYBLOB="0000000000000000240012800b00010067656e657665000014000280080001000000000005000c"], 0x44}, 0x1, 0x2}, 0x0) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000013000200e9dce620547d90132d0000464e244e2001000000090000000b00000002000000679d00080600000002000000090000001139ae32001dc807f5c4de099c3b143c30516097c13282b04c51d46bd5a8", @ANYRES32=r8, @ANYBLOB="1000000004000000888a0000ff030000"], 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x10) syz_open_dev$MSR(&(0x7f0000000280), 0x3, 0x0) 14.835722868s ago: executing program 0 (id=1733): syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000540)={&(0x7f00000005c0)=""/143, 0x8f, 0x1, 0xe}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x44, &(0x7f00000006c0)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x4, 0x0, 0x6, 0x2, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x0, 0x4, @void, @value, @void, @value}, 0x50) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x2) getdents(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000500), 0xff, 0x482, &(0x7f0000001040)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x26e1, 0x109) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406d0422c20000000000010902240001000000000904000001030000000921000000012202e0ffffffffffffff0000"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0xff00}], 0x1, 0x7ffffe, 0x0, 0x0) 13.280497536s ago: executing program 1 (id=1735): syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000540)={&(0x7f00000005c0)=""/143, 0x8f, 0x1, 0xe}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000030000000500000004050000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000040000009300000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRES64], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x4, 0x0, 0x6, 0x2, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x0, 0x4, @void, @value, @void, @value}, 0x50) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0xa, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)='e\'.\x00') getdents(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) 11.401541914s ago: executing program 0 (id=1741): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x961, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) poll(0x0, 0x0, 0x688) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) fcntl$lock(r3, 0x7, &(0x7f00000006c0)={0x1}) 11.067271856s ago: executing program 4 (id=1742): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) socket$kcm(0x29, 0x7, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) 9.604996033s ago: executing program 4 (id=1745): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40186f40, &(0x7f0000000080)={0x0, 0x0, 0x7}) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000006c00011c8500"/20, @ANYRES32=r4, @ANYBLOB="000000000000000018003480140035"], 0x38}}, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000)={[{@norecovery}, {@grpquota}, {@nombcache}, {@user_xattr}, {@nomblk_io_submit}]}, 0x1, 0xbbc, &(0x7f00000017c0)="$eJzs3N9rW2UYAOD3nKZZu3WmExHnjRWRDcSsnXS4IbjJxBsvBL0VVrp0lGY/aCuzXS9S/QdEvRa8EdSheOGud6PorTc6bxUvhCF1VRDRykmTtq5N17lkp3bPA1/O950vyfu+OSTnfJAkgHvWQHaTRuyPiFNJRKmxP42IYr3XE1Fbvt/iwtzo7wtzo0ksLb38SxJJRNxYmBttPlfS2O5pDHoi4pvnkrj/zfVxp2ZmJ0aq1cpkY3xo+uyFQ1Mzs0+Onx05UzlTOTd05Onhw8NHBo8Ot63WP344fuW3R1/4qfbnR39d/vWdD5I4Hn2NubV1tMtADKy8JmsVImKk3cFy0tWoZ22dSeEWD0o7nBQAAC2la67hHoxSdMXqxVspvvg21+QAAACAtljqilgCAAAAdrjE+h8AAAB2uOb3AG4szI02W77fSLi7rp+IiP7l+hcbbXmmELX6tie6I2L3jSTW/qw1WX7YHRuIiB+/P/pp1qJDv0PeTG0+Ih7a6Pgn9fr767/iXl9/GhGDbYg/cNP4/1T/8TbEz7t+AO5NV08sn8jWn//Sleuf2OD8V9jg3PVf5H3+a17/La67/lutv6vF9d9LW4xx6cP3Lraay+p/5srznzRbFj/b3lFRt+H6fMTDhY3qT1bqT1rUf2qLMUp/X6y0msu7/qX3Iw7ExvU3JZv/P9GhsfFqZXD5dsMY818Pf9wqft71Z8d/d4v6m///1Or4X9hijFdPnvys1dzA3sZCtGX96c/F5JV6r9jY8/rI9PTkUEQxeXH9/sOb59K8T/M5svoPPrb5+3+j+rPPhFrjdcjWAvONbTZ+46aYz16+9HmLdOr/hJSt/fI8/qdbHP+19X9VWH/839pijMe/fPtgq7m169+sZfGba2EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaEojoi+StLzST9NyOWJPRDwQu9Pq+anpJ8bOv3budDYX0R/d6dh4tTIYEaXlcZKNh+r91fHhm8ZPRcS+iHi31Fsfl0fPV0/nXTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAr9kREXyRpOSLSiFgspWm5nHdWAAAAQNv1550AAAAA0HHW/wAAALDzWf8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQYfseuXotiYjasd56yxQbc925ZgZ0Wpp3AkBuuvJOAMhNIe8EgNzc5hrf5QLsQMkt5ntazuxqey4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbF8H9l+9lkRE7VhvvWWKjbnuXDMDOi3NOwEgN12bTRbuXh7A3ectDvcua3wgucV8z+p9av+e2dWxnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYfvrqLUnLEVFs7CuXI/ZGRH90J2Pj1cpgRNwXEd+Vundl46GccwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKD9pmZmJ0aq1cpk1kmj0VnZo7MtOpFEbIM0dlinGDlG743t8SK07OT9yQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQB6mZmYnRqrVyuRU3pkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeZuamZ0YqVYrkx3s5F0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD5+ScAAP//u5IOww==") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="00a3d9feb86e02e3b0bd5e574a822aa023060829d9f570706daaf7e64385f4c757c8c1509cbd06003c6d03000074ffdde116534a3e539068b679d93c646500b71c53966a788a93af70a9e8378a4dff15e4a14b5a4b6c14d2feff8ec10a64ffffba586557115ae1b2470a06d95ecae4ea3b76e646ef7b00f8bcbad403b0c1e7cefe950fa2f87bae1c91858fdee78fd19866212b8aedf818fea039932b8d5f454cf4fa9f9c1c0bd1c3f8c00104c7f4d6359eb8be446f88b77ce92c3d943828ecbf09040049d635eb6fb887ed9e56e2fbf982ea3443c9c30d40c4dd06767f0000004173e49a2c4100efeb8fc6570ce5feb7d4c9ab5c4cc09ba9ae6276845ff55c7fdaab25776edddef50000000064dadb122182564d38cae5597ef4d5a2bf63415fdfe0867dee339da4a49e99fcf977e3be588fb6a8e4ee0d5395982f374f3802e1cf12c5849a07af1ad1e9f1f52725eab00af283cbfbd18fdc8e1951ba26508eb3781117b3a5263e3671d0b9e5aedd4e9261654e7cd5213600a77f55f0ab706a787ac204fff298dc72be1e80389d8f55f42c3b92acaee0df6b6bea8459d98d7bdc8e99b33022a2474d5527b68ba085ce52bf894f86c0f0f2f76c1ffe1e7ecbf2f1d7f8de553ebd38a1ad1f67e43da56f853f594b16be3822b97389b248dd3079e41ce185206267e9f174fd6ba01f9cc52c465608000048d0ad524a70f1688d1f30ca729963f14d140bf06f6060f42a9794eafd65187fef9b44e884699a5bda981b07000000000000009a74a84388dc82ed1ba29abafd6b9f6e11ea249e4870494ede40f7bc48dc2a14669c1b94b32209f16b4246a6f14f44e22c4b7d5422322a2f8d967532b133014da9c571ffc2664e0831391e0242bcacaa0c00358bdefaf2bc00000000010000009cf213c3365c64493f3ed9866c4994c119363dec364813d2a1f3732323d6fde44b8178d35f936200a96118889bc34d1800779c82b877ba24d7aadec4abe72a3b5e9280cc12d3f3b60fa0163fc3ccdce18ced9a8ccf33122055f8870f804fb91d9f91ba8db505d020c01f532c9307117f34693dd535e1fc52ccc94ba178aaf524117c214fa858d6da2f91c14ab5ea3080500366075694cf317cdad3e61d17bfa4490124e3616a0d581cf05cf2cecc0a9b83fe000000000000000000000000ed9111e3396fea123d15ff825b66e25945cb3fd6d31773af0634a155fe85159a643b064fba1135ff23d713431f3cf8587d8778f7eb1a02d155fb6185d105d26844d111c85fd6321fc4a9a368c04cd3f29a8badfb8a0152e7bb8b10a8e680292eb9ab00d3efd86111ca430dcfbf1910b235e636e99b615163989a3779e520b59d2e7db309a3710d5b11ae9c21ad7e4c7d000000000000000000000024aafb0479e8ea0ab8bfd97c2186a3a784ce996d63c42c31e3a211c284f7c0187429d7f01748d6f04519921b9d81a510de2ff2f21e7423328036d45adf7df77a0572a6dfba1e0e7dbed9aeebb7cd806f3685459be46dc69d314fd3ea633b1539f466c8d32a2e9392d1620656958900ffbf0c3f5139c03580f83516f02c1adbb6e16040f273456e982741fe40b3f6a3e9c8237f9da13572c209968b40dd6bf4fbb056d303698c74cdbd4c38c54e945e8e93ff946aa2a1fc940646fc7dbcb3455221cf6192c986eb7a087af45e68868f8495d2831c34ae5a824b2a6df8a5bc1226ee0df921d96b025025dc921c45c936143daf882a17ee99eda6b2b93d8562e873d002499c9522d4eb42852e056db1350bf022d421bc6ac4385fe27d070423bf91dd40ea42b486e905b974e79554d0371358fc8cfd1d460643b654954ea1ea02e804f9befabe3d494e8d2677cd5cd9853f5cb86c1e9be53bfadd33be19efdbf5e59d5384a1fc1c371a634729e2846747e5afa095747995a7107a7624ed3bfffbb7a4cdc6c9baa42357efa64076196252673e63ceefa996582036af9a55e500b073360726ab5ffc282e545f8527cc51ca6a5b5cffb31dae02c43dde5701861b388101b61a9d2835a7dae293220932", @ANYRESOCT, @ANYRESHEX, @ANYRES64], 0x2, 0x1d1, &(0x7f0000000040)="$eJzKKC4sZmdgYPj7sSaZQYABDBgZeBguMDAysDAwMKgzQsQYmCDUeij/BZSeCZW2gfKbofRCKF1xS3vdmlN+Z0566motk2VmaPXUlpdBEpNL7TFyk1zMI8HMEJp6ZFFxZVV2Yk5OalExO0PFrVsMDAwnGFiu23OoNEtwOvyR53BI0nTQYTri45E1o7GRc5KUphgbW6bC2TMf5NexaRxheLSCeWOdZ15jXSH71Ly0vKSqrKqseRMnbpzZ2NnYuHJiXVSa3yrGlhSXTU2djEwOW9QENjMbqk+y0Z7wrn3VwyQH1h4Pv+ZTxkqvU5kvGS8skjq1omrmhC9KsxkNvzPc4SlbIaGh4SRxRcKiwYThSJ1tgytDxa3klAaGNIUwxiQ1NrG2LWfmhDCzMjAwKLQkn2AKPcqxdKaExQGhqpM/LTXfOiS6zdj21IHtDM/h4zxrCvoEjY5LMDgtFPwvAzImoaGhTGMt01LbBV+KNP5KeK02dspgcLdnWgYLUJYGELkSypMF60lIXuGho6lplJKc0LBJIiHJrcBQmWHrHs7VAg0MSNGmwsDAsJ0RFrcQcA3GGAWjYBSMglEwCkbBKBgFo2AUjIJRMCIAIAAA//8CFpSS") r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {}, {0x5, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000500)={'#! ', './file1', [{0x20, '\\*i:,\xbd\x8c\x9c\x14\xa5t\x8d\t;G\xe3\x9f\xd6\b\xc1T\x9a\x85\xc3\xfe\x8b\x1e\aX[x\xfb\xf6\xe7\xed\xea\xd6\x99\x9d\xd6\xf1\xf5\xfc\xb6\xd6w\xd21\xca'}]}, 0x42) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r8, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @aes256, 0x4, @auto="0da5466d630a1d6d"}) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 9.582027934s ago: executing program 3 (id=1746): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000300)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x1c, 0x4, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x26}, {[@generic={0x82, 0x12, "bd78e0c9650041bb23566edeb8eada44"}, @generic={0x94, 0x5, "f62d06"}, @timestamp_addr={0x44, 0x44, 0x92, 0x1, 0x4, [{@rand_addr=0x64010102, 0x9}, {@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0xad3}, {@loopback, 0x4}, {@multicast1, 0x8001}, {@loopback, 0xe}, {@multicast2, 0x81}, {@private=0xa010100}]}]}}, @time_exceeded={0x2b, 0x1, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ptrace(0x10, r3) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r4}, 0x4) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000104000000000000000000000b00", @ANYRES32=r8, @ANYBLOB="0000000000000000240012800b00010067656e657665000014000280080001000000000005000c"], 0x44}, 0x1, 0x2}, 0x0) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000013000200e9dce620547d90132d0000464e244e2001000000090000000b00000002000000679d00080600000002000000090000001139ae32001dc807f5c4de099c3b143c30516097c13282b04c51d46bd5a8", @ANYRES32=r8, @ANYBLOB="1000000004000000888a0000ff030000"], 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x10) syz_open_dev$MSR(&(0x7f0000000280), 0x3, 0x0) 9.545001734s ago: executing program 0 (id=1747): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x7) syz_mount_image$udf(&(0x7f0000000a40), &(0x7f00000003c0)='./file1\x00', 0x4400, &(0x7f00000004c0)=ANY=[@ANYBLOB='dmode=00000000000000000000006,rootdir=00000000000000000002,novrs,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c0000f1ffff071f1feea11e18ca67080dbf049f823016a5c7c47a3a3bb51f45eae4ad555aac29d4ec3686001e841ef39ec33701a5af414b075ddfc590e3020072233bf9fdc46d307eeac0d4dc7747d25891b39628dbf1eb25a11806b39a9c2c8f6d945ec2b7f50000000000003735d84a084013fa9de28d6c73c9b8547b8a866dd076e0b970531b8820bcae1200cdf884a9a2329c128dfbe875aa9b9102a133dbf8a7c42e0d3a0e561e0f75f0ab2b1467e90f2285f763bcdca0ebcf308971c01e788c8c04f6e501be393be94e"], 0x1, 0xa1b, &(0x7f0000001540)="$eJzs209sm+d9B/Dfw1eyaadrFbd1kzbLWLQIPKUN5P9KvAH2rApt5iZGZWXzZTBlyQ4R/askF043tB42oAjQg1FgPWzAkMsOA3bwDrvsFOwwDBg2GDsMxYp2Wrpm6Y3BBuS0aXhfPpQoWY7VOLZk+/Mx7C/58veSzx+afMmHbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEb/1lVNDB9N2twIAuJ9eGvvG0GHv/wDwSDnn8z8AAAAAAAAAAAAAAOx0KYr4s0jx6k/a6UJ1vaN+pjV75er4yOjmu+1JkaIWRVVf/q0fPHT4yNFjx4e7+cH7f9SejJfHzp1qnJ6bmV+YWlycmmyMz7Yuzk1Obfke7nb/jQarAWjMvHZl8tKlxcah5w6vu/nqwDu7H9s/cOL4i+f3dWvHR0ZHx3pq+vo/9KPf4nZneOyKIn4WKerfezc1I6IWdz8Wd3ju3Gt7qk4MVp0YHxmtOjLdas4ulTemWq6qRQz07HSyO0b3YS7uSiPiWtn8ssGDZffG5psLzYnpqcbZ5sJSa6k1N5tqndaW/RmIWgyniPmIaBe33l1/FPHvkeL777fTREQU3XF4tjox+M7tqd2DPm5BX9m3IuJmPABztoPtjiLeiBQ/OD8UF/O4VsP2TMTXy3w64ptlLkdcz9dT+QR5KuK9TZ5PPFj6ooh/ihRzqZ0mu3Nfva6ceaXxtdlLcz213deVB/794X7a4a9N9ShionrFb6cPf7ADAAAAAMDOU8TfRoobMwfSfPSuKbZmLzfONSemO98Kd7/7b+S9VlZWVgZSJxs5h3KezHk254Wc8zmv5bye882cN3K+lfNmzuWc7ZxRy4+fs5FzKOfJnGdzXsg5n/Nazus538x5I+dbOW/mXM7ZzhnWvQAAAAAAAADYYfZEET+OFF/4m29V5xVHdV76J04MH/jqF3vPGf/MHe6nrH0uIm7E1s7J7c+nDqda+eej7xdbU48ivpPP//vD7W4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwrWpRxGcixQ/faKdIEdGIuBCdXC62u3UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAh1FPRZyOFL/4Sr26fjMiPhsR/7dS/omI5ZUNtrvFAAAAAAAAAMAtUhFDkeLxJ9tpICKuDryz+7H9AyeOv3h+XxFFpLKkt/7lsXOnGqfnZuYXphYXpyYb47Oti3OTU1t9uPqZ1uyVq+Mjo/ekM3e05x63f0/99Nz86wuty68ubXr73vqpicWlhebFzW+OPVGLGOrdMlg1eHxktGr0dKs5W+2aardpYC2isdXOAAAAAAAAAPDQ2JuKOBopXm0dSd11477Omv+vdK4Vq7V/8QdrvwWY3pBdvb8f2MrltNWGDlYL743xkdHRsZ7Nff23lpZtSqmIv44Un/vdJ6r18BR7N10bL+t2RYpj3zqS6wY+V9adXFdVHxwfGW28NDf75VPT03MXm0vNiempxth88+KWfzgAAAAAAAAAAPfQ3lTEn0eK3xu6mbrnnef1/77OtZ71/9+oltAr9bQ+V1Vr+x+v1vY7lz9xYrgx+mu3234v1v/LNqVUxL9Fisd//4nqfPru+v/Qhtqy7r8jxb/+41O5rrarrDvY7U7nHi+1pqeGUh6rzz/brY2q9niu/eRa7cGy9vOR4i+fWV87nGs/tVZ7qKz940jxv0c3r/30Wu3hsvaPIsVvv93o1u4ta8/k2v1rtc9dnJuevNOwlvP/d5Hi7C++mrp9vu389/z+49qGXHXLnH/w5Y9q/gd6tl3L8/rjPP8H7zD/fx8p/uSnT+W6ztgfyrc/Xv27Nv+/Eyn+61fX1x7LtfvWag9utVvbrZz/L0WKEz/60Wqf8/znkV2bod75/2zf+lx9lmzT/D/es20gt+vwLzkWj6LF17/9WnN6emrBBRdccGH1wna/MnE/lO///xwpXjhTS93jmPz+/7HOtbXjv/e/s/b+/8KGXLVN7//7era9kI9a+vsi6ksz8/37I+qLr3/7y62Z5uWpy1Ozw8eOHnl++Nix5/t3dY/t1i5teegeCuX8n4kUr/z0X1Y/x6w//tv8+H/vhly1TfP/yd4+rTuu2fJQPJLK+b8eKb779rurnzc/6Pi/+/n/wBfW5+r/v22a/0/1bKt+4//xiOd7th34dMSprT4WAAAAPGT25nXyP/31f1g953395//4Yre29/uf29kJ5/8DAAAAAMCjbm8q4q8ixf8MfSl1zyHbyu8/Jzfkqm36/d/+nm2T9+m8li0PMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADADpSiiKcjxas/aaflorzeUT/Tmr1ydXxkdPPd9qRIUYuiqi//1g8eOnzk6LHjw9384P0/ak/Gy2PnTjVOz83ML0wtLk5NNsZnWxfnJqe2fA93u/9Gg9UANGZeuzJ56dJi49Bzh9fdfHXgnd2P7R84cfzF8/u6teMjo6NjPTV9/R/60W+RbrN9VxRxKVLUv/du+o8iohZ3PxZ3eO7ca3uqTgxWnRgfGa06Mt1qzi6VN6ZarqpFDPTsdLI7RvdhLu5KI+Ja2fyywYNl98bmmwvNiempxtnmwlJrqTU3m2qd1pb9GYhaDKeI+YhoF7feXX8UMREpvv9+O71dRBTdcXj2pbFvDB2+c3tq96CPvVa+u+nmvrJvRcTNeADmbAfbHUV8LFL84PxQ/KzojGs1bM9EfL3MpyO+WeZyxPV8PZVPkKci3tvk+cSDpS+KOBsp5lI7/WeR5756XTnzSuNrs5fmemq7rysP/PvD/bTDX5vqUcTPq1f8dvq5/88AAAAAAA+RIn4zUtyYOZCq9cHVNcXW7OXGuebEdOdr/e53/42818rKyspA6mQj51DOkznP5ryQcz7ntZzXc76Z80bOt3LezLmcs50zavnxczZyDuU8mfNszgs553Ney3k955s5b+R8K+fNnMs52znD9+QAAAAAAADADlSLIp6IFD98o51Wis4C74Xo5LJ1zofe/wcAAP//Vsw/Lg==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file7\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40007fffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="3a0400007d0000000524010000000000000000000000002000000000000000000000000000000000000000000000000000002e00046e6f645a3dbf640237fc6225ffffff8005000000000000ff03ff92e91600059b65712c93cb3db6c231d119aaa139007002007dfa673effeb09b5351f5bde054000000000187b82d9b56928fbbf0b00002b595fcb14034354b9fd9ef196a51cd5157adc8106b494e13500cf60372d61cceab8c88641eb93b4ccf6002ab87bfc012796093f68305c4d2220837e0108e2a200000000000000281843f4000000005500f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f174a666a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1cbe36f4fd1a4cdb80e8d407000000370001036f6465762f6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f475daf03b1172d97badc7095afd76fe4f0c41f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa75f8246bcc42eaa8c631c0c500959a74f51685f506ae894806878267d5a1298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d7238593aed3b42ee7cac07de09d1d68a60333a882467d2b31aafb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664c0fb4e4c90570a70049f399f061f75"], 0x43a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000014000580"], 0x5c}}, 0x0) 9.493359604s ago: executing program 1 (id=1748): syz_open_procfs(0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x10f27f, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf91c1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e03}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0103002000000000000034000378"], 0x14}}, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x44, 0x800000, 0x8, 0x7, 0x2}) write$bt_hci(r0, &(0x7f0000000280)=ANY=[], 0x6) io_setup(0x2004, &(0x7f0000000680)) pipe2$9p(&(0x7f00000001c0), 0x0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x18448, &(0x7f00000000c0)=ANY=[], 0x1, 0x61d6, &(0x7f0000006940)="$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") 6.409498259s ago: executing program 2 (id=1750): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14, 0x0, 0x1, 0x0, 0x0, 0xc005}, 0x0) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000000)=""/245, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)={0x50000008}) mount$tmpfs(0x0, 0x0, 0x0, 0x1210020, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lstat(&(0x7f0000000380)='./file0\x00', 0x0) setresgid(0x0, 0xee00, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0xffff, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, 'hsr0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000001cc0), 0x400000000000026, 0x0) 6.368235529s ago: executing program 4 (id=1751): syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000540)={&(0x7f00000005c0)=""/143, 0x8f, 0x1, 0xe}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x44, &(0x7f00000006c0)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x4, 0x0, 0x6, 0x2, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x0, 0x4, @void, @value, @void, @value}, 0x50) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x2) getdents(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000500), 0xff, 0x482, &(0x7f0000001040)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x26e1, 0x109) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406d0422c20000000000010902240001000000000904000001030000000921000000012202e0ffffffffffffff0000"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0xff00}], 0x1, 0x7ffffe, 0x0, 0x0) 6.25228963s ago: executing program 1 (id=1752): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={r1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x3, r0, 0x5}) 6.069306411s ago: executing program 3 (id=1753): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x4000000000002, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r2], 0x4c}}, 0x0) 5.357463574s ago: executing program 3 (id=1754): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) pipe2$watch_queue(0x0, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 5.274971904s ago: executing program 2 (id=1755): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32], 0x18}}], 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x34, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x87}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40404}, 0x100) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r7, 0x8004745a, 0x2000000c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 4.253015189s ago: executing program 3 (id=1756): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[], 0xfa, 0x27c, &(0x7f0000001240)="$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") mkdir(0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$eJzsmb2LE0EYxp+Z3eydhyg2FjYWHniit9ndqFxzxQmWgnCKWgZvPU73LpKskAQEg42NpYVga2NpYWFl4V9gq4UKgoUp7YSR+djdyWYT4gdG9P3BzT7z9c68L9yzsAFBEP8tHz98ff/w3NqlUwD2YxkLZvyzo5/i4Oj6d4/vnHy0fv7J87dPX+8duPuyHI/JPWL28z0ArzYcpGCuOXFk93IRNtO4DI4TRl8Bg6/lN6HQnRgM18yam5Zu7TMiif3rrWTrxk4SB7IJZRPJpmGfLy81HDBsAVhUtxOCWfOdXv9WM0nidlnURHbO2NSPimn1U/fb4FhHVj0hOICrD+4PZN/UBgF4Xr8QHKHRDTBsGr2GBfi+X5TEyv+IW8R3Zsl/vuKZEodW/9Sh4Locf0Pu/7Co/ZY4rDwi/6HzkcPDzAPtNZ/mnvvPC2VcAMam3iwlyYVfiOxVFCoXhT9JZz9u+ZMLN/ePerp7u97p9Vd3dpvb8Xa8F0WNs8HpIDgT1ZUR6XaK/y0qf1qy4tcmrPWYh24zTdthF0jbYd6PdGs57uaL1he1hyv/41g5pmMw887KX5QlmPnj6inVilO98t7EnAiCIAiCIAiCIAiCIAiCIKo5Cgb9S5hg5oNoFdFF9YXyewAAAP//L0Rm/Q==") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(0x0, 0x0) 4.024458571s ago: executing program 2 (id=1757): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) 3.909529011s ago: executing program 1 (id=1758): syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$eJzs3c1rXFUbAPDnTpKmb9r3TV4QbF0FBA2UTkyNrYKLigsRLBR0bTtMpqFmkimZSWlCoBYR3AhaXAi66dqPunPrx1b/Bd2ISEvVtFhxISN3PjqTZiadtvloze8Htz3n3jM595l77zln5h7mBrBjjab/ZCL2R8R7ScRwY30SEQO1VH/E0Xq5myvL+XRJolp99bekVubGynI+2l6T2tPI7IuIb96OOJBZW295cWkmVywW5hv58crsmfHy4tLB07O56cJ0Ye7wxOTkoSPPHBncuFj/+H5p79X3X3ry86N/vfXo5Xe/TeJo7G1sa49jo4zGaOM9GUjfwlVe3OjKtlmy3TvAPUkvzb76VR77Yzj6aqne9F4SAHiQnI+IKgCwwyT6fwDYYZrfA9xYWc6nS/X89n4fsdWuvRARu+vxN+9v1rf0N+7Z7a7dBx26kay635FExMgG1D8aER9/+fqn6RKbdB8SoJM3L0TEyZHRZvvfan+SNXMW6nqfkPFUD2VGb8tr/2DrfJWOf55tjf9a11/m1vgnOox/Bjtcu/diNGJXe37t9Z+5sgHVdJWO/54faM1tu9kWf8NIXyP339qYbyA5dbpYSNu2/0XEWAwMpvmJdeoYu/739VUr+lrJ9vHf7xff+CStP/2/VSJzpf+2JncqV8ndb9xN1y5EPNbfKf7k1vFPuox/j/dYx8vPvfNRt21p/Gm8zWV1/Js/q6x6KeKJ6Bx/U7Le/MTD47XTYbx5UnTwxU8fDnWrv/34p0taf/OzwFZIj//Q+vGPJO3zNct3X8d3l4a/7rbtzvF3Pv93Ja/V0s3G41yuUpmfiNiVvLJ2/aHWa5v5Zvk0/rHHO1//653/6WfCkz3G33/118/uPf7NlcY/dVfH/+4Tl2/O9HWrv7fjP1lLjTXW9NL+9bqD9/PeAQAAAAAAAAAAAAAAAAAAAAAAAECvMhGxN5JM9lY6k8lm68/wfiSGMsVSuXLgVGlhbipqz8oeiYFM86cuh9t+D3Wi8Xv4zfyh2/JPR8T/I+KDwf/U8tl8qTi13cEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMOeLs//T/0yuN17BwBsmt13LHG9sCU7AgBsmTv3/wDAv43+HwB2Hv0/AOw8+n8A2Hn0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGyy48eOpUv1z5XlfJqfOru4MFM6e3CqUJ7Jzi7ks/nS/JnsdKk0XSxk86XZtpf+0OnvFUulM5Mxt3BuvFIoV8bLi0snZksLc5UTp2dz04UThYEtiwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeldeXJrJFYuFeYmHJVEdrh+6B2V/Nj/x88Ef961X5qLTeOMT290yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwc/gkAAP//skMoxA==") ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000540)={&(0x7f00000005c0)=""/143, 0x8f, 0x1, 0xe}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000030000000500000004050000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000040000009300000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRES64], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x4, 0x0, 0x6, 0x2, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x0, 0x4, @void, @value, @void, @value}, 0x50) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0xa, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)='e\'.\x00') getdents(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) 3.907917721s ago: executing program 0 (id=1759): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r5, r5, r5}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}}) sendto$inet(r1, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x429a, 0x4) sendmmsg$inet(r1, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000bc0)="23004e4ee760d48ddc6b7a1ebfc6e0", 0xf}], 0x1}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@ipmr_newroute={0x3c, 0x18, 0x8, 0x70bd26, 0x25dfdbfe, {0x80, 0x38, 0x10, 0x4, 0xff, 0x0, 0x0, 0x1, 0x2e00}, [@RTA_PRIORITY={0x8, 0x6, 0x1}, @RTA_DST={0x8, 0x1, @local}, @RTA_IIF={0x8}, @RTA_IP_PROTO={0x5, 0x1b, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040880}, 0x20048000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000004300)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="dbac5ed42c62066d1da54d3bcca8df6cc7693666c8b67690f339a7abe94b37aef59251c0383d4425393020947c8bd2bae8c7408d8788ebdbe532936761467b5205b2da8b1164b9e05bc2090a624b7b5b22f2e2a528d4e82075de260da70be6d894f29f9b917ff7101d9d8883d2a8a1242703b50cbc5619ef47fca8d1fde0559c51edf7293f7bbff4513d6b4b4b53249f650dbb59820211fb1ad1660bf7a5c51d1477077adc4ff886e0e55a85c8aa9b", @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRESDEC, @ANYBLOB="08000200f1fc66001d0000000000000000000000cb1e26debe93eea92f17a7aa0117f0a5ce43e99692ce7f57aa88a8b8350014a289293d7c856b7e709c779fdff3cb3d3279853c80529f089525a01738549e3e12f36773a77f4fc02cdbe5b87ddc777bcaee7d3d8b332308b44d0eca65a7f2113a1d533a27d6eaae9e7475a8c88fc8f20010c8e87e270af5e1688041739053bc3294bd0dcfae4c328183edc57b3965aeea7f80beda352e507b3c9e4eca0c5a9fd7942a0a41c1f9c7d415", @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRESOCT=r0, @ANYRES8, @ANYBLOB='\x00\x00\x00'], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x810) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) socket(0x10, 0x3, 0x0) 3.001703615s ago: executing program 2 (id=1760): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000200", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@random="6ea88d319b8c", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x43, 0x4e22, 0x8}}}}}, 0x0) 3.000787045s ago: executing program 3 (id=1761): syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) openat$binfmt_register(0xffffff9c, &(0x7f0000000240), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf91c1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e03}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01030020000000000000340003782bd1d264c81e76c0b0bb"], 0x14}}, 0x0) 1.402163794s ago: executing program 3 (id=1762): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40186f40, &(0x7f0000000080)={0x0, 0x0, 0x7}) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000006c00011c8500"/20, @ANYRES32=r4, @ANYBLOB="000000000000000018003480140035"], 0x38}}, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000)={[{@norecovery}, {@grpquota}, {@nombcache}, {@user_xattr}, {@nomblk_io_submit}]}, 0x1, 0xbbc, &(0x7f00000017c0)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRESHEX, @ANYRES64], 0x2, 0x1d1, &(0x7f0000000040)="$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") r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {}, {0x5, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000500)={'#! ', './file1', [{0x20, '\\*i:,\xbd\x8c\x9c\x14\xa5t\x8d\t;G\xe3\x9f\xd6\b\xc1T\x9a\x85\xc3\xfe\x8b\x1e\aX[x\xfb\xf6\xe7\xed\xea\xd6\x99\x9d\xd6\xf1\xf5\xfc\xb6\xd6w\xd21\xca'}]}, 0x42) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r8, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @aes256, 0x4, @auto="0da5466d630a1d6d"}) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 1.311170424s ago: executing program 4 (id=1763): syz_open_procfs(0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x10f27f, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf91c1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e03}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0103002000000000"], 0x14}}, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x44, 0x800000, 0x8, 0x7, 0x2}) write$bt_hci(r0, &(0x7f0000000280)=ANY=[], 0x6) io_setup(0x2004, &(0x7f0000000680)) pipe2$9p(&(0x7f00000001c0), 0x0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x18448, &(0x7f00000000c0)=ANY=[], 0x1, 0x61d6, &(0x7f0000006940)="$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") 1.189182094s ago: executing program 2 (id=1764): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ptrace(0x10, r3) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r4}, 0x4) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000104000000000000000000000b00", @ANYRES32=r8, @ANYBLOB="0000000000000000240012800b00010067656e657665000014000280080001000000000005000c"], 0x44}, 0x1, 0x2}, 0x0) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000013000200e9dce620547d90132d0000464e244e2001000000090000000b00000002000000679d00080600000002000000090000001139ae32001dc807f5c4de099c3b143c30516097c13282b04c51d46bd5a8", @ANYRES32=r8, @ANYBLOB="1000000004000000888a0000ff030000"], 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x10) syz_open_dev$MSR(&(0x7f0000000280), 0x3, 0x0) 945.481276ms ago: executing program 0 (id=1765): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x4000000000002, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r2], 0x4c}}, 0x0) 901.958486ms ago: executing program 1 (id=1766): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) pipe2$watch_queue(0x0, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 91.66889ms ago: executing program 2 (id=1767): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x80041285, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033a0000001f030000ef000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 35.69563ms ago: executing program 4 (id=1768): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={r1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x3, r0, 0x5}) 9.4921ms ago: executing program 4 (id=1769): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, 0xffffffffffffffff, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) 0s ago: executing program 0 (id=1770): socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x15) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x2, 0x0, 0x0, &(0x7f0000000200)=""/19, &(0x7f0000000240)=""/11, 0x1}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000001880)={{}, 0x0, 0x0, @unused=[0x7, 0xf, 0x427, 0x2], @devid}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x48ec422b0af11ece, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = dup(r1) ftruncate(r6, 0x400f80) write$binfmt_script(r2, &(0x7f0000000100), 0xfcb8) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x4040, &(0x7f0000000040)={0xa, 0x4e26, 0x0, @local, 0x6}, 0x1c) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r9, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) kernel console output (not intermixed with test programs): change from 0 to 128 [ 266.649681][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.480'. [ 269.962356][ T6389] ubi0: attaching mtd0 [ 270.003436][ T6389] ubi0 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71) [ 270.259272][ T6389] loop4: detected capacity change from 0 to 4096 [ 270.339847][ T6389] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 270.373493][ T1107] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 270.424956][ T6389] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,grpquota,nombcache,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 270.763578][ T1107] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 270.774080][ T1107] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 270.799016][ T1107] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 270.837147][ T1107] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 270.895041][ T1107] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 270.933325][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.977124][ T1107] usb 3-1: config 0 descriptor?? [ 271.038946][ T6380] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 271.622825][ T6453] netlink: 32 bytes leftover after parsing attributes in process `syz.0.489'. [ 272.150575][ T6380] sp0: Synchronizing with TNC [ 272.325928][ T1107] usbhid 3-1:0.0: can't add hid device: -71 [ 272.339607][ T1107] usbhid: probe of 3-1:0.0 failed with error -71 [ 272.360940][ T1107] usb 3-1: USB disconnect, device number 6 [ 274.725423][ T6469] device vlan2 entered promiscuous mode [ 275.072362][ T6479] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 275.725755][ T6487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.500'. [ 279.770470][ T6573] device vlan2 entered promiscuous mode [ 283.629203][ T6599] loop0: detected capacity change from 0 to 256 [ 283.866883][ T6599] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 287.596354][ T6620] hub 6-0:1.0: USB hub found [ 287.606426][ T6620] hub 6-0:1.0: 1 port detected [ 292.760203][ T6664] loop1: detected capacity change from 0 to 128 [ 293.214620][ T6669] hub 6-0:1.0: USB hub found [ 293.223671][ T6669] hub 6-0:1.0: 1 port detected [ 297.829509][ T6707] loop4: detected capacity change from 0 to 128 [ 299.622336][ T6720] hub 6-0:1.0: USB hub found [ 299.628250][ T6720] hub 6-0:1.0: 1 port detected [ 306.032638][ T6768] loop0: detected capacity change from 0 to 128 [ 311.678161][ T6826] hub 6-0:1.0: USB hub found [ 311.683975][ T6826] hub 6-0:1.0: 1 port detected [ 314.265744][ T1334] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 314.291304][ T6841] device wg2 entered promiscuous mode [ 314.474716][ T6850] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 315.833867][ T1334] usb 4-1: device descriptor read/all, error -71 [ 316.522120][ T6876] affs: No valid root block on device loop0 [ 317.039670][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.048266][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.408737][ T26] audit: type=1326 audit(1732353203.926:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6879 comm="syz.4.598" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f95346819 code=0x0 [ 317.471070][ T6874] loop3: detected capacity change from 0 to 4096 [ 317.605029][ T6888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.600'. [ 317.625880][ T6874] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 317.713997][ T6874] ntfs3: loop3: failed to convert "c46c" to cp775 [ 317.860963][ T6891] device wg2 left promiscuous mode [ 317.916894][ T6893] device wg2 entered promiscuous mode [ 320.078256][ T23] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 320.328523][ T6920] loop1: detected capacity change from 0 to 128 [ 320.379890][ T6923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.612'. [ 320.453662][ T23] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 320.466858][ T6925] loop2: detected capacity change from 0 to 4096 [ 320.489534][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 320.501445][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 320.514817][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 320.538630][ T6925] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 320.551677][ T23] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 320.698787][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.735537][ T23] usb 4-1: config 0 descriptor?? [ 320.754653][ T6899] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 320.919982][ T6925] ntfs3: loop2: failed to convert "c46c" to cp775 [ 321.275820][ T23] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 321.276030][ T23] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 321.276102][ T23] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 321.276227][ T23] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 321.276351][ T23] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 321.276583][ T23] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 321.276654][ T23] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 321.276768][ T23] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 321.276882][ T23] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 321.276996][ T23] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 321.277110][ T23] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 321.277194][ T23] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 321.277338][ T23] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 321.277454][ T23] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 321.277661][ T23] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 321.290195][ T23] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 321.568361][ T6899] sp0: Synchronizing with TNC [ 321.670551][ T23] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 321.876813][ T1334] usb 4-1: USB disconnect, device number 8 [ 321.977840][ T6938] xt_TCPMSS: Only works on TCP SYN packets [ 321.987851][ T6938] CIFS mount error: No usable UNC path provided in device string! [ 321.987851][ T6938] [ 321.998812][ T6938] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 322.229210][ T6936] device wg2 left promiscuous mode [ 322.635357][ T6936] device wg2 entered promiscuous mode [ 326.638303][ T6975] loop0: detected capacity change from 0 to 128 [ 326.798968][ T6976] loop2: detected capacity change from 0 to 4096 [ 327.019959][ T6976] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 327.121903][ T6982] xt_TCPMSS: Only works on TCP SYN packets [ 327.131821][ T6982] CIFS mount error: No usable UNC path provided in device string! [ 327.131821][ T6982] [ 327.141931][ T6982] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 327.155081][ T2361] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 327.433362][ T2361] usb 5-1: Using ep0 maxpacket: 8 [ 327.734343][ T2361] usb 5-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 64 [ 327.803364][ T2361] usb 5-1: config 1 interface 0 has no altsetting 0 [ 327.956362][ T6976] ntfs3: loop2: failed to convert "c46c" to cp775 [ 328.014654][ T2361] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 328.144439][ T2361] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.165845][ T6986] device vlan2 entered promiscuous mode [ 328.191508][ T2361] usb 5-1: Product: syz [ 328.197234][ T2361] usb 5-1: Manufacturer: syz [ 328.225128][ T2361] usb 5-1: SerialNumber: syz [ 329.182192][ T6978] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 329.280731][ T6989] loop1: detected capacity change from 0 to 32768 [ 329.389433][ T6989] [ 329.389433][ T6989] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 329.389433][ T6989] [ 329.457655][ T6978] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 329.744361][ T2361] usb 5-1: USB disconnect, device number 8 [ 330.470490][ T4172] [ 330.470490][ T4172] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 330.470490][ T4172] [ 330.520156][ T4172] [ 330.520156][ T4172] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 330.520156][ T4172] [ 333.344267][ T7026] loop2: detected capacity change from 0 to 736 [ 334.626906][ T7031] loop4: detected capacity change from 0 to 32768 [ 334.645937][ T7026] loop2: detected capacity change from 0 to 4096 [ 334.690137][ T7026] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 334.720102][ T7031] [ 334.720102][ T7031] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 334.720102][ T7031] [ 334.788890][ T7026] ntfs3: loop2: failed to convert "c46c" to cp775 [ 334.877715][ T7035] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 335.178456][ T4167] [ 335.178456][ T4167] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 335.178456][ T4167] [ 335.218183][ T4167] [ 335.218183][ T4167] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 335.218183][ T4167] [ 335.479349][ T7044] x_tables: duplicate underflow at hook 2 [ 338.558613][ T7063] loop1: detected capacity change from 0 to 128 [ 339.744655][ T7074] loop3: detected capacity change from 0 to 128 [ 340.150767][ T7082] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 340.217167][ T7079] loop1: detected capacity change from 0 to 736 [ 341.738584][ T7079] loop1: detected capacity change from 0 to 4096 [ 341.850191][ T7079] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 341.969984][ T7079] ntfs3: loop1: failed to convert "c46c" to cp775 [ 341.997773][ T7101] hub 6-0:1.0: USB hub found [ 342.002761][ T7101] hub 6-0:1.0: 1 port detected [ 343.263006][ T7116] loop4: detected capacity change from 0 to 128 [ 343.989919][ T7131] loop4: detected capacity change from 0 to 128 [ 347.162622][ T7158] device vlan2 entered promiscuous mode [ 347.182969][ T7159] loop3: detected capacity change from 0 to 128 [ 350.361745][ T7188] loop2: detected capacity change from 0 to 4096 [ 350.723814][ T7197] x_tables: duplicate underflow at hook 2 [ 351.426020][ T7188] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 351.507115][ T7188] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,grpquota,nombcache,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 351.837308][ T7206] loop1: detected capacity change from 0 to 736 [ 352.158692][ T7206] loop1: detected capacity change from 0 to 4096 [ 352.227071][ T7206] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 352.279123][ T7210] device vlan2 entered promiscuous mode [ 353.636445][ T7217] loop2: detected capacity change from 0 to 2048 [ 353.823813][ T7217] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 354.392260][ T1110] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 356.238769][ T26] audit: type=1326 audit(1732353242.756:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7244 comm="syz.3.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2d544819 code=0x7ffc0000 [ 356.324539][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.707'. [ 356.343279][ T26] audit: type=1326 audit(1732353242.836:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7244 comm="syz.3.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae2d544819 code=0x7ffc0000 [ 356.423436][ T1110] usb 3-1: device not accepting address 7, error -71 [ 357.199967][ T26] audit: type=1326 audit(1732353242.836:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7244 comm="syz.3.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2d544819 code=0x7ffc0000 [ 357.246294][ T26] audit: type=1326 audit(1732353242.836:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7244 comm="syz.3.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2d544819 code=0x7ffc0000 [ 357.540144][ T26] audit: type=1326 audit(1732353242.836:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7244 comm="syz.3.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae2d544819 code=0x7ffc0000 [ 357.757422][ T26] audit: type=1326 audit(1732353242.836:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7244 comm="syz.3.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2d544819 code=0x7ffc0000 [ 357.779858][ T26] audit: type=1326 audit(1732353242.836:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7244 comm="syz.3.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2d544819 code=0x7ffc0000 [ 357.823065][ T26] audit: type=1326 audit(1732353242.836:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7244 comm="syz.3.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae2d544819 code=0x7ffc0000 [ 357.916959][ T7264] loop2: detected capacity change from 0 to 736 [ 357.961623][ T7266] loop3: detected capacity change from 0 to 128 [ 357.971460][ T26] audit: type=1326 audit(1732353242.836:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7244 comm="syz.3.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2d544819 code=0x7ffc0000 [ 358.006972][ T26] audit: type=1326 audit(1732353242.836:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7244 comm="syz.3.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2d544819 code=0x7ffc0000 [ 360.711219][ T7288] loop3: detected capacity change from 0 to 32768 [ 360.829531][ T7276] loop2: detected capacity change from 0 to 4096 [ 360.841286][ T7288] [ 360.841286][ T7288] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 360.841286][ T7288] [ 362.357396][ T4168] [ 362.357396][ T4168] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 362.357396][ T4168] [ 362.419701][ T4168] [ 362.419701][ T4168] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 362.419701][ T4168] [ 362.432812][ T26] kauditd_printk_skb: 31 callbacks suppressed [ 362.432853][ T26] audit: type=1326 audit(1732353248.946:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7291 comm="syz.0.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f96be2819 code=0x7ffc0000 [ 362.487788][ T7292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.719'. [ 362.677319][ T26] audit: type=1326 audit(1732353248.996:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7291 comm="syz.0.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f96be2819 code=0x7ffc0000 [ 362.859679][ T26] audit: type=1326 audit(1732353248.996:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7291 comm="syz.0.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f96be2819 code=0x7ffc0000 [ 363.734552][ T26] audit: type=1326 audit(1732353249.006:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7291 comm="syz.0.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f96be2819 code=0x7ffc0000 [ 363.869151][ T26] audit: type=1326 audit(1732353249.006:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7291 comm="syz.0.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f96be2819 code=0x7ffc0000 [ 364.104791][ T26] audit: type=1326 audit(1732353249.006:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7291 comm="syz.0.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6f96be2819 code=0x7ffc0000 [ 364.173306][ T26] audit: type=1326 audit(1732353249.006:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7291 comm="syz.0.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f96be2819 code=0x7ffc0000 [ 364.380188][ T26] audit: type=1326 audit(1732353249.006:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7291 comm="syz.0.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6f96be2819 code=0x7ffc0000 [ 364.402790][ T26] audit: type=1326 audit(1732353249.136:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7291 comm="syz.0.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f96be2819 code=0x7ffc0000 [ 364.442060][ T26] audit: type=1326 audit(1732353249.136:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7291 comm="syz.0.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f96be2819 code=0x7ffc0000 [ 364.974733][ T7323] loop4: detected capacity change from 0 to 128 [ 365.490346][ T7333] x_tables: duplicate underflow at hook 2 [ 366.862569][ T7339] device vlan2 entered promiscuous mode [ 369.453230][ C0] hrtimer: interrupt took 48003 ns [ 369.633930][ T7375] x_tables: duplicate underflow at hook 2 [ 370.345262][ T7379] loop4: detected capacity change from 0 to 128 [ 371.101545][ T7388] device vlan2 entered promiscuous mode [ 375.502216][ T7475] loop3: detected capacity change from 0 to 2048 [ 375.618873][ T7475] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 376.913259][ T2361] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 377.621800][ T7503] loop0: detected capacity change from 0 to 128 [ 377.887624][ T7507] netlink: 48 bytes leftover after parsing attributes in process `syz.4.768'. [ 379.047276][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.053661][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.273564][ T2361] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 379.281230][ T2361] usb 4-1: can't read configurations, error -71 [ 384.745891][ T7608] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.783'. [ 385.196541][ T7661] netlink: 'syz.0.786': attribute type 10 has an invalid length. [ 385.266945][ T7661] netlink: 40 bytes leftover after parsing attributes in process `syz.0.786'. [ 385.941852][ T7661] bridge0: port 3(macvlan1) entered blocking state [ 386.077402][ T7661] bridge0: port 3(macvlan1) entered disabled state [ 386.110043][ T7661] device macvlan1 entered promiscuous mode [ 386.131048][ T7661] bridge0: port 3(macvlan1) entered blocking state [ 386.138023][ T7661] bridge0: port 3(macvlan1) entered forwarding state [ 386.170235][ T7666] netlink: 'syz.2.787': attribute type 10 has an invalid length. [ 386.178160][ T7666] netlink: 40 bytes leftover after parsing attributes in process `syz.2.787'. [ 386.187713][ T7666] bridge0: port 3(macvlan1) entered blocking state [ 386.194356][ T7666] bridge0: port 3(macvlan1) entered disabled state [ 386.202046][ T7666] device macvlan1 entered promiscuous mode [ 386.210150][ T7666] bridge0: port 3(macvlan1) entered blocking state [ 386.216828][ T7666] bridge0: port 3(macvlan1) entered forwarding state [ 386.396647][ T7672] input: syz0 as /devices/virtual/input/input8 [ 387.788321][ T7685] netlink: 48 bytes leftover after parsing attributes in process `syz.2.793'. [ 388.307439][ T7698] affs: No valid root block on device loop1 [ 390.941057][ T7769] loop1: detected capacity change from 0 to 128 [ 391.875064][ T7779] netlink: 48 bytes leftover after parsing attributes in process `syz.3.806'. [ 397.767361][ T7820] loop3: detected capacity change from 0 to 128 [ 399.088376][ T7833] netlink: 48 bytes leftover after parsing attributes in process `syz.2.820'. [ 399.562171][ T7835] netlink: 'syz.0.819': attribute type 10 has an invalid length. [ 399.570209][ T7835] netlink: 40 bytes leftover after parsing attributes in process `syz.0.819'. [ 402.486157][ T7850] device wg2 left promiscuous mode [ 403.671340][ T7851] device wg2 entered promiscuous mode [ 403.682115][ T7869] ubi0: attaching mtd0 [ 403.797610][ T7869] ubi0 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71) [ 403.837704][ T7875] loop3: detected capacity change from 0 to 128 [ 405.174905][ T7882] loop2: detected capacity change from 0 to 32768 [ 405.281073][ T7882] [ 405.281073][ T7882] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 405.281073][ T7882] [ 405.691813][ T7870] loop4: detected capacity change from 0 to 4096 [ 406.321973][ T7887] x_tables: duplicate underflow at hook 2 [ 406.612577][ T7870] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 406.653438][ T4169] [ 406.653438][ T4169] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 406.653438][ T4169] [ 406.696299][ T7870] EXT4-fs: failed to create workqueue [ 406.730604][ T4169] [ 406.730604][ T4169] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 406.730604][ T4169] [ 406.818975][ T7870] EXT4-fs (loop4): mount failed [ 410.413793][ T7964] device wg2 left promiscuous mode [ 410.429317][ T7963] netlink: 'syz.4.839': attribute type 5 has an invalid length. [ 410.437780][ T7965] device wg2 entered promiscuous mode [ 411.459532][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 411.459548][ T26] audit: type=1326 audit(1732353297.976:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7972 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e2bec819 code=0x7ffc0000 [ 412.195869][ T7973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.847'. [ 413.220292][ T26] audit: type=1326 audit(1732353298.706:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7972 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08e2bec819 code=0x7ffc0000 [ 413.243641][ T26] audit: type=1326 audit(1732353298.706:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7972 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e2bec819 code=0x7ffc0000 [ 413.263535][ T7973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.265900][ T26] audit: type=1326 audit(1732353298.716:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7972 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08e2bec819 code=0x7ffc0000 [ 413.302280][ T26] audit: type=1326 audit(1732353298.716:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7972 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e2bec819 code=0x7ffc0000 [ 413.326607][ T26] audit: type=1326 audit(1732353298.716:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7972 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f08e2bec819 code=0x7ffc0000 [ 413.353054][ T26] audit: type=1326 audit(1732353298.716:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7972 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e2bec819 code=0x7ffc0000 [ 413.362825][ T7982] ubi0: attaching mtd0 [ 413.416774][ T7983] netlink: 'syz.2.848': attribute type 10 has an invalid length. [ 413.424717][ T7983] netlink: 40 bytes leftover after parsing attributes in process `syz.2.848'. [ 413.609831][ T7982] ubi0 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71) [ 413.611542][ T26] audit: type=1326 audit(1732353298.716:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7972 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f08e2bec819 code=0x7ffc0000 [ 413.755376][ T26] audit: type=1326 audit(1732353299.636:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7972 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e2bec819 code=0x7ffc0000 [ 413.778124][ T26] audit: type=1326 audit(1732353299.636:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7972 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e2bec819 code=0x7ffc0000 [ 414.051367][ T7982] loop4: detected capacity change from 0 to 4096 [ 414.266468][ T7990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.852'. [ 414.292150][ T7990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.306565][ T7982] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 414.368341][ T7995] input: syz0 as /devices/virtual/input/input9 [ 414.392438][ T7982] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,grpquota,nombcache,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 416.103748][ T8012] netlink: 'syz.1.859': attribute type 10 has an invalid length. [ 416.111530][ T8012] netlink: 40 bytes leftover after parsing attributes in process `syz.1.859'. [ 416.206811][ T8012] bridge0: port 4(macvlan1) entered blocking state [ 416.214127][ T8012] bridge0: port 4(macvlan1) entered disabled state [ 416.223762][ T8012] device macvlan1 entered promiscuous mode [ 416.231666][ T8012] bridge0: port 4(macvlan1) entered blocking state [ 416.238394][ T8012] bridge0: port 4(macvlan1) entered forwarding state [ 416.247753][ T8013] netlink: 'syz.3.858': attribute type 10 has an invalid length. [ 416.255996][ T8013] netlink: 40 bytes leftover after parsing attributes in process `syz.3.858'. [ 416.268005][ T8013] bridge0: port 3(macvlan1) entered blocking state [ 416.274872][ T8013] bridge0: port 3(macvlan1) entered disabled state [ 416.284267][ T8013] device macvlan1 entered promiscuous mode [ 416.292207][ T8013] bridge0: port 3(macvlan1) entered blocking state [ 416.298938][ T8013] bridge0: port 3(macvlan1) entered forwarding state [ 416.690697][ T8014] device wg2 left promiscuous mode [ 416.755353][ T8014] device wg2 entered promiscuous mode [ 416.911741][ T8019] netlink: 'syz.2.860': attribute type 10 has an invalid length. [ 416.922826][ T8019] netlink: 40 bytes leftover after parsing attributes in process `syz.2.860'. [ 417.193463][ T8021] netlink: 'syz.0.862': attribute type 10 has an invalid length. [ 417.201260][ T8021] netlink: 40 bytes leftover after parsing attributes in process `syz.0.862'. [ 418.824676][ T8031] loop1: detected capacity change from 0 to 128 [ 419.340938][ T8032] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 420.307389][ T7471] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 420.944125][ T8062] loop2: detected capacity change from 0 to 2048 [ 421.191591][ T8067] input: syz0 as /devices/virtual/input/input10 [ 421.423959][ T7471] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 421.574493][ T7471] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 421.714300][ T8062] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 421.809210][ T7471] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 421.821360][ T7471] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 421.839298][ T7471] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 421.849817][ T7471] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.861041][ T7471] usb 5-1: config 0 descriptor?? [ 421.894522][ T8043] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 423.717803][ T23] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 424.205717][ T8043] sp0: Synchronizing with TNC [ 424.297580][ T7471] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 424.323271][ T23] usb 3-1: device not accepting address 9, error -71 [ 424.330717][ T7471] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 424.641243][ T7471] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 425.020843][ T7471] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 425.078361][ T7471] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 425.230468][ T8137] netlink: 'syz.2.880': attribute type 10 has an invalid length. [ 425.238329][ T8137] netlink: 40 bytes leftover after parsing attributes in process `syz.2.880'. [ 425.252310][ T7471] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 425.265129][ T7471] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 425.299110][ T7471] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 425.506139][ T7471] usb 5-1: USB disconnect, device number 9 [ 426.106568][ T8157] loop4: detected capacity change from 0 to 128 [ 426.260322][ T8159] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 429.444104][ T8176] input: syz0 as /devices/virtual/input/input11 [ 431.653073][ T7] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 432.061822][ T8197] input: syz0 as /devices/virtual/input/input12 [ 432.983989][ T8203] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 433.043574][ T7] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 433.173141][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 433.287357][ T8202] loop3: detected capacity change from 0 to 736 [ 433.350875][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 433.537477][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 433.819144][ T7] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 433.831059][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.843951][ T7] usb 5-1: config 0 descriptor?? [ 433.864526][ T8186] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 433.942866][ T8211] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 435.144067][ T8226] ubi0: attaching mtd0 [ 435.148292][ T8226] ubi0 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71) [ 435.973358][ T7] usbhid 5-1:0.0: can't add hid device: -71 [ 435.979383][ T7] usbhid: probe of 5-1:0.0 failed with error -71 [ 436.033408][ T7] usb 5-1: USB disconnect, device number 10 [ 436.058796][ T23] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 436.124800][ T8202] loop3: detected capacity change from 0 to 4096 [ 436.138811][ T8226] loop0: detected capacity change from 0 to 4096 [ 436.230355][ T8202] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 436.313279][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 436.323688][ T8226] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 436.408328][ T8226] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,grpquota,nombcache,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 437.281653][ T23] usb 3-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 64 [ 437.305002][ T23] usb 3-1: config 1 interface 0 has no altsetting 0 [ 437.660375][ T8246] input: syz0 as /devices/virtual/input/input13 [ 437.783827][ T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 437.972906][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.394921][ T23] usb 3-1: Product: syz [ 438.399137][ T23] usb 3-1: Manufacturer: syz [ 438.405257][ T23] usb 3-1: SerialNumber: syz [ 438.443348][ T23] usb 3-1: can't set config #1, error -71 [ 438.464664][ T23] usb 3-1: USB disconnect, device number 11 [ 439.918181][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.937984][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.973343][ T4246] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 445.263403][ T4246] usb 5-1: Using ep0 maxpacket: 8 [ 446.503763][ T4246] usb 5-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 64 [ 446.514960][ T4246] usb 5-1: config 1 interface 0 has no altsetting 0 [ 446.734931][ T4246] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 446.800118][ T4246] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.901853][ T4246] usb 5-1: Product: syz [ 446.958704][ T4246] usb 5-1: Manufacturer: syz [ 447.017286][ T4246] usb 5-1: SerialNumber: syz [ 447.436378][ T4246] usb 5-1: can't set config #1, error -71 [ 447.464432][ T4246] usb 5-1: USB disconnect, device number 11 [ 451.724169][ T8437] input: syz0 as /devices/virtual/input/input14 [ 452.109746][ T8439] netlink: 32 bytes leftover after parsing attributes in process `syz.4.940'. [ 452.136870][ T8440] xt_TCPMSS: Only works on TCP SYN packets [ 452.153801][ T8440] CIFS mount error: No usable UNC path provided in device string! [ 452.153801][ T8440] [ 452.163926][ T8440] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 452.961824][ T8444] loop4: detected capacity change from 0 to 512 [ 453.026989][ T8447] loop1: detected capacity change from 0 to 2048 [ 453.510517][ T8444] EXT4-fs (loop4): Ignoring removed nobh option [ 453.527405][ T8444] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 453.598258][ T8444] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 453.734194][ T8444] EXT4-fs (loop4): 1 truncate cleaned up [ 453.742085][ T8444] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 453.909410][ T8463] netlink: 'syz.3.946': attribute type 10 has an invalid length. [ 453.917450][ T8463] netlink: 40 bytes leftover after parsing attributes in process `syz.3.946'. [ 454.176719][ T8447] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 455.063407][ T1107] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 456.481390][ T1334] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 457.030160][ T1107] usb 2-1: device not accepting address 5, error -71 [ 457.036960][ T1334] usb 3-1: Using ep0 maxpacket: 8 [ 457.300617][ T8487] xt_TCPMSS: Only works on TCP SYN packets [ 457.320952][ T8487] CIFS mount error: No usable UNC path provided in device string! [ 457.320952][ T8487] [ 457.331160][ T8487] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 457.371739][ T8486] netlink: 32 bytes leftover after parsing attributes in process `syz.3.952'. [ 458.593362][ T1334] usb 3-1: unable to get BOS descriptor or descriptor too short [ 458.688422][ T1334] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 458.699632][ T1334] usb 3-1: can't read configurations, error -71 [ 458.878441][ T8495] loop2: detected capacity change from 0 to 512 [ 458.982297][ T8496] netlink: 'syz.4.950': attribute type 10 has an invalid length. [ 458.991636][ T8496] netlink: 40 bytes leftover after parsing attributes in process `syz.4.950'. [ 459.001309][ T8496] bridge0: port 3(macvlan1) entered blocking state [ 459.007908][ T8496] bridge0: port 3(macvlan1) entered disabled state [ 459.016443][ T8496] device macvlan1 entered promiscuous mode [ 459.023071][ T8496] bridge0: port 3(macvlan1) entered blocking state [ 459.029713][ T8496] bridge0: port 3(macvlan1) entered forwarding state [ 459.328318][ T8495] EXT4-fs (loop2): Ignoring removed nobh option [ 459.353944][ T8495] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 459.967574][ T8495] EXT4-fs (loop2): 1 truncate cleaned up [ 459.992582][ T8495] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 460.033963][ T8515] netlink: 'syz.3.959': attribute type 10 has an invalid length. [ 460.043495][ T8515] netlink: 40 bytes leftover after parsing attributes in process `syz.3.959'. [ 462.463311][ T5019] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 463.873629][ T2361] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 464.156704][ T8545] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 464.283948][ T5019] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 464.305428][ T5019] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 464.382551][ T5019] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 464.455916][ T5019] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 464.534626][ T5019] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 464.597811][ T5019] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.725130][ T5019] usb 5-1: config 0 descriptor?? [ 464.815382][ T8526] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 465.073412][ T2361] usb 3-1: Using ep0 maxpacket: 8 [ 465.253372][ T5019] usbhid 5-1:0.0: can't add hid device: -71 [ 465.266103][ T5019] usbhid: probe of 5-1:0.0 failed with error -71 [ 465.333471][ T5019] usb 5-1: USB disconnect, device number 12 [ 465.667905][ T2361] usb 3-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 64 [ 466.062594][ T2361] usb 3-1: config 1 interface 0 has no altsetting 0 [ 467.029734][ T8559] loop1: detected capacity change from 0 to 128 [ 467.055470][ T2361] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 467.102947][ T2361] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.108413][ T8566] netlink: 'syz.0.973': attribute type 10 has an invalid length. [ 467.119271][ T8566] netlink: 40 bytes leftover after parsing attributes in process `syz.0.973'. [ 467.119929][ T2361] usb 3-1: Product: syz [ 467.863464][ T2361] usb 3-1: can't set config #1, error -71 [ 468.056284][ T2361] usb 3-1: USB disconnect, device number 14 [ 470.713251][ T2361] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 471.072935][ T8611] loop3: detected capacity change from 0 to 512 [ 471.123349][ T2361] usb 2-1: Using ep0 maxpacket: 8 [ 471.164172][ T8611] EXT4-fs (loop3): Ignoring removed nobh option [ 471.192046][ T8611] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 471.213266][ T8611] EXT4-fs (loop3): 1 truncate cleaned up [ 471.219172][ T8611] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 471.376938][ T8615] loop0: detected capacity change from 0 to 128 [ 471.468744][ T2361] usb 2-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 64 [ 471.478972][ T2361] usb 2-1: config 1 interface 0 has no altsetting 0 [ 471.884680][ T2361] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 472.383327][ T2361] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.391380][ T2361] usb 2-1: Product: syz [ 472.402661][ T2361] usb 2-1: Manufacturer: syz [ 472.407753][ T2361] usb 2-1: SerialNumber: syz [ 472.444255][ T8601] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 473.073316][ T8632] net_ratelimit: 66 callbacks suppressed [ 473.073337][ T8632] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 473.085499][ T8632] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 473.092068][ T8632] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 473.098501][ T8632] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 473.105104][ T8632] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 473.111483][ T8632] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 473.118161][ T8632] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 473.124585][ T8632] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 473.131118][ T8632] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 473.137522][ T8632] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 474.657367][ T8637] CIFS mount error: No usable UNC path provided in device string! [ 474.657367][ T8637] [ 474.667546][ T8637] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 474.955326][ T2361] usb 2-1: USB disconnect, device number 7 [ 475.106603][ T8642] device vlan3 entered promiscuous mode [ 478.101489][ T8665] loop4: detected capacity change from 0 to 128 [ 478.408525][ T8670] net_ratelimit: 66 callbacks suppressed [ 478.408544][ T8670] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 478.420752][ T8670] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 478.536238][ T8673] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1007'. [ 479.112640][ T8670] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 479.119224][ T8670] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 479.183545][ T8670] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 479.190101][ T8670] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 479.237363][ T8670] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 479.243876][ T8670] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 479.276965][ T8670] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 479.283419][ T8670] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 479.385003][ T26] kauditd_printk_skb: 26 callbacks suppressed [ 479.385021][ T26] audit: type=1326 audit(1732353365.906:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8674 comm="syz.3.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2d544819 code=0x7ffc0000 [ 479.432205][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1009'. [ 479.545084][ T26] audit: type=1326 audit(1732353365.946:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8674 comm="syz.3.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2d544819 code=0x7ffc0000 [ 479.593812][ T26] audit: type=1326 audit(1732353365.946:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8674 comm="syz.3.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae2d544819 code=0x7ffc0000 [ 479.644656][ T8675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.653368][ T26] audit: type=1326 audit(1732353365.946:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8674 comm="syz.3.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2d544819 code=0x7ffc0000 [ 479.751840][ T26] audit: type=1326 audit(1732353365.946:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8674 comm="syz.3.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2d544819 code=0x7ffc0000 [ 479.774720][ T1107] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 479.805095][ T26] audit: type=1326 audit(1732353365.946:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8674 comm="syz.3.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae2d544819 code=0x7ffc0000 [ 479.873373][ T26] audit: type=1326 audit(1732353365.946:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8674 comm="syz.3.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2d544819 code=0x7ffc0000 [ 479.923609][ T26] audit: type=1326 audit(1732353365.946:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8674 comm="syz.3.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2d544819 code=0x7ffc0000 [ 479.983440][ T26] audit: type=1326 audit(1732353365.946:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8674 comm="syz.3.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae2d544819 code=0x7ffc0000 [ 480.033327][ T1107] usb 3-1: Using ep0 maxpacket: 8 [ 480.054475][ T26] audit: type=1326 audit(1732353365.946:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8674 comm="syz.3.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2d544819 code=0x7ffc0000 [ 480.372693][ T8689] input: syz0 as /devices/virtual/input/input15 [ 481.120404][ T1107] usb 3-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 64 [ 481.163776][ T1107] usb 3-1: config 1 interface 0 has no altsetting 0 [ 481.520411][ T1107] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 481.520446][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.520468][ T1107] usb 3-1: Product: syz [ 481.520484][ T1107] usb 3-1: Manufacturer: syz [ 481.520500][ T1107] usb 3-1: SerialNumber: syz [ 481.553654][ T8678] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 481.561673][ T8694] device vlan2 entered promiscuous mode [ 482.799236][ T8705] CIFS mount error: No usable UNC path provided in device string! [ 482.799236][ T8705] [ 482.809289][ T8705] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 483.184578][ T1107] usb 3-1: USB disconnect, device number 15 [ 483.670428][ T8716] net_ratelimit: 66 callbacks suppressed [ 483.670446][ T8716] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 483.682707][ T8716] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 483.690316][ T8716] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 483.696992][ T8716] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 483.703867][ T8716] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 483.710357][ T8716] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 483.717076][ T8716] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 483.723603][ T8716] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 483.730286][ T8716] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 483.736795][ T8716] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 483.844975][ T8719] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1019'. [ 485.560926][ T8710] loop1: detected capacity change from 0 to 32768 [ 485.757447][ T8710] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1018 (8710) [ 485.796787][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 485.796807][ T26] audit: type=1326 audit(1732353372.316:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.0.1025" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f96be2819 code=0x0 [ 486.024269][ T8710] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 486.094185][ T8710] BTRFS info (device loop1): metadata ratio 2 [ 486.100584][ T8710] BTRFS info (device loop1): force zlib compression, level 3 [ 486.406732][ T8710] BTRFS info (device loop1): use zlib compression, level 3 [ 486.738844][ T8710] BTRFS info (device loop1): enabling auto defrag [ 486.813599][ T8710] BTRFS info (device loop1): max_inline at 0 [ 486.846833][ T8710] BTRFS info (device loop1): using free space tree [ 486.920619][ T8710] BTRFS info (device loop1): has skinny extents [ 487.934268][ T8602] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 487.941970][ T23] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 488.764253][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 488.778183][ T8710] BTRFS error (device loop1): open_ctree failed [ 489.001638][ T8792] CIFS mount error: No usable UNC path provided in device string! [ 489.001638][ T8792] [ 489.011777][ T8792] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 489.732383][ T8794] net_ratelimit: 66 callbacks suppressed [ 489.732409][ T8794] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 489.744589][ T8794] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 489.751184][ T8794] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 489.757611][ T8794] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 489.764282][ T8794] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 489.770662][ T8794] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 489.777328][ T8794] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 489.783758][ T8794] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 489.790316][ T8794] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 489.796728][ T8794] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 489.903711][ T8602] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 489.926516][ T8602] usb 1-1: can't read configurations, error -71 [ 489.983409][ T23] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 489.991017][ T23] usb 3-1: can't read configurations, error -71 [ 491.315806][ T8813] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1034'. [ 493.381109][ T8838] CIFS mount error: No usable UNC path provided in device string! [ 493.381109][ T8838] [ 493.391322][ T8838] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 495.023304][ T4213] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 495.424645][ T4213] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 495.444515][ T4213] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 495.511642][ T4213] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 495.536426][ T4213] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 495.552417][ T4213] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 495.585994][ T4213] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.725456][ T4213] usb 2-1: config 0 descriptor?? [ 495.753785][ T8833] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 497.223698][ T1107] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 497.472270][ T4213] usb 2-1: can't set config #0, error -71 [ 497.514354][ T4213] usb 2-1: USB disconnect, device number 8 [ 498.593519][ T8865] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1053'. [ 498.748903][ T8871] netlink: 'syz.3.1055': attribute type 10 has an invalid length. [ 498.758760][ T8871] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1055'. [ 499.398607][ T26] audit: type=1326 audit(1732353385.916:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz.4.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f95346819 code=0x7ffc0000 [ 499.434784][ T8882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1059'. [ 499.510966][ T26] audit: type=1326 audit(1732353385.946:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz.4.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f95346819 code=0x7ffc0000 [ 499.603669][ T8888] CIFS mount error: No usable UNC path provided in device string! [ 499.603669][ T8888] [ 499.613829][ T8888] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 500.506170][ T26] audit: type=1326 audit(1732353385.946:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz.4.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f95346819 code=0x7ffc0000 [ 500.523314][ T8882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.529594][ T26] audit: type=1326 audit(1732353385.946:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz.4.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f95346819 code=0x7ffc0000 [ 501.357186][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.363627][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.516296][ T26] audit: type=1326 audit(1732353385.946:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz.4.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f95346819 code=0x7ffc0000 [ 501.637178][ T26] audit: type=1326 audit(1732353385.946:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz.4.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f95346819 code=0x7ffc0000 [ 501.659553][ C1] vkms_vblank_simulate: vblank timer overrun [ 501.704704][ T26] audit: type=1326 audit(1732353385.946:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz.4.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f95346819 code=0x7ffc0000 [ 501.735235][ T26] audit: type=1326 audit(1732353385.956:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz.4.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f95346819 code=0x7ffc0000 [ 502.625650][ T26] audit: type=1326 audit(1732353385.956:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz.4.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6f95346819 code=0x7ffc0000 [ 504.099440][ T8900] netlink: 'syz.3.1064': attribute type 10 has an invalid length. [ 504.107342][ T8900] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1064'. [ 504.152233][ T26] audit: type=1326 audit(1732353385.956:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz.4.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f95346819 code=0x7ffc0000 [ 504.493111][ T8911] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1068'. [ 505.317135][ T4213] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 505.470783][ T8917] netlink: 'syz.2.1070': attribute type 10 has an invalid length. [ 505.478833][ T8917] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1070'. [ 505.955566][ T8921] netlink: 'syz.3.1069': attribute type 10 has an invalid length. [ 505.963551][ T8921] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1069'. [ 506.077636][ T4213] usb 5-1: Using ep0 maxpacket: 8 [ 506.111675][ T8924] loop2: detected capacity change from 0 to 512 [ 506.636721][ T8933] CIFS mount error: No usable UNC path provided in device string! [ 506.636721][ T8933] [ 506.646890][ T8933] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 506.809006][ T8924] EXT4-fs (loop2): Ignoring removed nobh option [ 506.853736][ T4213] usb 5-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 64 [ 507.044575][ T4213] usb 5-1: config 1 interface 0 has no altsetting 0 [ 507.051467][ T8924] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 507.285195][ T8924] EXT4-fs (loop2): 1 truncate cleaned up [ 507.297621][ T8924] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 507.309864][ T8937] loop3: detected capacity change from 0 to 512 [ 507.373319][ T4213] usb 5-1: string descriptor 0 read error: -71 [ 507.382212][ T4213] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 507.406853][ T4213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.408109][ T8937] EXT4-fs (loop3): Ignoring removed nobh option [ 507.446144][ T8937] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 507.493464][ T4213] usb 5-1: can't set config #1, error -71 [ 507.517955][ T4213] usb 5-1: USB disconnect, device number 13 [ 507.690421][ T8946] loop0: detected capacity change from 0 to 512 [ 507.712740][ T8937] EXT4-fs (loop3): 1 truncate cleaned up [ 507.721509][ T8937] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 509.993401][ T8946] EXT4-fs (loop0): too many log groups per flexible block group [ 510.001482][ T8946] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 510.009734][ T8946] EXT4-fs (loop0): mount failed [ 510.207711][ T8970] netlink: 'syz.1.1084': attribute type 10 has an invalid length. [ 510.216711][ T8970] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1084'. [ 512.301148][ T8982] CIFS mount error: No usable UNC path provided in device string! [ 512.301148][ T8982] [ 512.311244][ T8982] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 512.943360][ T4213] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 513.243321][ T4213] usb 2-1: Using ep0 maxpacket: 8 [ 513.454511][ T4213] usb 2-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 64 [ 513.474198][ T4213] usb 2-1: config 1 interface 0 has no altsetting 0 [ 514.223519][ T4213] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 514.232606][ T4213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.245355][ T4213] usb 2-1: Product: syz [ 514.250483][ T4213] usb 2-1: Manufacturer: syz [ 514.259249][ T4213] usb 2-1: SerialNumber: syz [ 514.273538][ T8984] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 514.602844][ T4213] usb 2-1: USB disconnect, device number 9 [ 515.145307][ T9013] netlink: 'syz.1.1097': attribute type 10 has an invalid length. [ 515.165862][ T9013] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1097'. [ 515.308039][ T9016] netlink: 'syz.4.1098': attribute type 10 has an invalid length. [ 515.316257][ T9016] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1098'. [ 518.728782][ T4246] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 519.033275][ T4246] usb 1-1: Using ep0 maxpacket: 8 [ 519.476424][ T9056] hub 6-0:1.0: USB hub found [ 519.483699][ T9056] hub 6-0:1.0: 1 port detected [ 519.999488][ T4246] usb 1-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 64 [ 520.032959][ T4246] usb 1-1: config 1 interface 0 has no altsetting 0 [ 520.048689][ T9062] loop1: detected capacity change from 0 to 512 [ 520.223824][ T4246] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 520.251652][ T9062] EXT4-fs (loop1): Ignoring removed nobh option [ 520.268444][ T9062] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 520.284972][ T4246] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.340885][ T9062] EXT4-fs (loop1): 1 truncate cleaned up [ 520.349566][ T4246] usb 1-1: Product: syz [ 520.363927][ T4246] usb 1-1: Manufacturer: syz [ 520.369099][ T4246] usb 1-1: SerialNumber: syz [ 520.370847][ T9062] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 521.943325][ T4246] usb 1-1: can't set config #1, error -71 [ 521.963652][ T4246] usb 1-1: USB disconnect, device number 11 [ 526.098147][ T9101] loop3: detected capacity change from 0 to 512 [ 526.177363][ T9101] EXT4-fs (loop3): Ignoring removed nobh option [ 526.191889][ T9101] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 526.228491][ T9111] loop0: detected capacity change from 0 to 2048 [ 526.277823][ T9101] EXT4-fs (loop3): 1 truncate cleaned up [ 526.292353][ T9101] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 526.585244][ T9120] xt_TCPMSS: Only works on TCP SYN packets [ 526.591910][ T9120] CIFS mount error: No usable UNC path provided in device string! [ 526.591910][ T9120] [ 526.602821][ T9120] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 528.373267][ T23] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 528.544877][ T9111] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 528.643223][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 530.193273][ T13] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 530.253286][ T23] usb 5-1: unable to get BOS descriptor or descriptor too short [ 530.503506][ T23] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 530.614841][ T23] usb 5-1: can't read configurations, error -71 [ 533.473272][ T9164] xt_TCPMSS: Only works on TCP SYN packets [ 533.480642][ T9164] CIFS mount error: No usable UNC path provided in device string! [ 533.480642][ T9164] [ 533.490801][ T9164] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 533.520222][ T9165] netlink: 'syz.2.1136': attribute type 10 has an invalid length. [ 533.528694][ T9165] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1136'. [ 534.190909][ T9168] loop0: detected capacity change from 0 to 512 [ 534.240042][ T9172] loop2: detected capacity change from 0 to 512 [ 534.287763][ T9173] loop3: detected capacity change from 0 to 512 [ 534.410715][ T9168] EXT4-fs (loop0): Ignoring removed nobh option [ 534.423912][ T9172] EXT4-fs (loop2): Ignoring removed nobh option [ 534.432992][ T9168] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 534.440541][ T9172] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 534.468533][ T9168] EXT4-fs (loop0): 1 truncate cleaned up [ 534.476061][ T9172] EXT4-fs (loop2): 1 truncate cleaned up [ 534.482143][ T9172] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 534.502496][ T9168] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 534.503008][ T9173] EXT4-fs (loop3): too many log groups per flexible block group [ 534.623644][ T9173] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 534.630757][ T9173] EXT4-fs (loop3): mount failed [ 534.690868][ T4213] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 535.758534][ T9185] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 535.843444][ T4213] usb 5-1: Using ep0 maxpacket: 8 [ 538.122567][ T9215] netlink: 'syz.1.1152': attribute type 10 has an invalid length. [ 538.130593][ T9215] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1152'. [ 538.726974][ T4213] usb 5-1: unable to read config index 0 descriptor/all [ 538.743975][ T4213] usb 5-1: can't read configurations, error -71 [ 538.911325][ T9225] netlink: 'syz.4.1153': attribute type 10 has an invalid length. [ 538.919373][ T9225] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1153'. [ 539.082481][ T9224] loop3: detected capacity change from 0 to 128 [ 540.237214][ T26] kauditd_printk_skb: 35 callbacks suppressed [ 540.237231][ T26] audit: type=1326 audit(1732353426.756:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9221 comm="syz.1.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e2bec819 code=0x7ffc0000 [ 540.266489][ C0] vkms_vblank_simulate: vblank timer overrun [ 540.311534][ T9231] loop4: detected capacity change from 0 to 736 [ 540.326490][ T26] audit: type=1326 audit(1732353426.806:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9221 comm="syz.1.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08e2bec819 code=0x7ffc0000 [ 540.359639][ T26] audit: type=1326 audit(1732353426.806:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9221 comm="syz.1.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e2bec819 code=0x7ffc0000 [ 540.371743][ T9232] ubi0: attaching mtd0 [ 540.382335][ T9223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.629571][ T26] audit: type=1326 audit(1732353426.806:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9221 comm="syz.1.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08e2bec819 code=0x7ffc0000 [ 540.652760][ T9232] ubi0 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71) [ 540.659319][ T26] audit: type=1326 audit(1732353426.806:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9221 comm="syz.1.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e2bec819 code=0x7ffc0000 [ 540.678627][ T9232] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1157'. [ 540.683691][ C0] vkms_vblank_simulate: vblank timer overrun [ 540.691523][ T26] audit: type=1326 audit(1732353426.806:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9221 comm="syz.1.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f08e2bec819 code=0x7ffc0000 [ 541.419991][ T9232] loop0: detected capacity change from 0 to 4096 [ 541.534878][ T26] audit: type=1326 audit(1732353426.836:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9221 comm="syz.1.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e2bec819 code=0x7ffc0000 [ 541.558988][ T26] audit: type=1326 audit(1732353426.836:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9221 comm="syz.1.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e2bec819 code=0x7ffc0000 [ 541.581483][ T26] audit: type=1326 audit(1732353426.876:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9221 comm="syz.1.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f08e2bec819 code=0x7ffc0000 [ 541.598910][ T9232] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 541.612400][ T26] audit: type=1326 audit(1732353426.876:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9221 comm="syz.1.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e2bec819 code=0x7ffc0000 [ 541.769300][ T9232] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,grpquota,nombcache,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 541.866280][ T9231] loop4: detected capacity change from 0 to 4096 [ 541.913575][ T9231] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 542.235852][ T9247] loop1: detected capacity change from 0 to 128 [ 542.267184][ T9231] ntfs3: loop4: failed to convert "c46c" to cp775 [ 543.810577][ T9267] netlink: 'syz.1.1166': attribute type 10 has an invalid length. [ 543.818555][ T9267] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1166'. [ 543.827464][ T7] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 546.083555][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 546.126018][ T9282] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 546.224812][ T9284] ubi0: attaching mtd0 [ 546.241210][ T9284] ubi0 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71) [ 546.374742][ T9284] loop1: detected capacity change from 0 to 4096 [ 546.403427][ T7] usb 4-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 64 [ 546.416795][ T7] usb 4-1: config 1 interface 0 has no altsetting 0 [ 546.502377][ T9284] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 546.584338][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 546.615498][ T9284] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,grpquota,nombcache,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 546.635303][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.303486][ T7] usb 4-1: Product: syz [ 547.313938][ T7] usb 4-1: Manufacturer: syz [ 547.318579][ T7] usb 4-1: SerialNumber: syz [ 547.350587][ T9298] loop4: detected capacity change from 0 to 736 [ 547.368996][ T7] usb 4-1: can't set config #1, error -71 [ 547.381481][ T7] usb 4-1: USB disconnect, device number 11 [ 548.672695][ T9298] loop4: detected capacity change from 0 to 4096 [ 548.748365][ T9317] loop2: detected capacity change from 0 to 2048 [ 548.984397][ T9298] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 549.283362][ T9317] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 549.672612][ T9298] ntfs3: loop4: failed to convert "c46c" to cp775 [ 549.923211][ T8775] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 550.474078][ T8775] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 550.841583][ T8775] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.870421][ T8775] usb 3-1: config 0 descriptor?? [ 551.823321][ T8775] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 551.897934][ T9339] udc-core: couldn't find an available UDC or it's busy [ 551.914849][ T9339] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 552.075951][ T8775] gs_usb 3-1:0.0: Couldn't get bit timing const for channel (err=-71) [ 552.094599][ T8775] gs_usb: probe of 3-1:0.0 failed with error -71 [ 552.105259][ T8775] usb 3-1: USB disconnect, device number 19 [ 554.872878][ T9380] input: syz0 as /devices/virtual/input/input16 [ 555.505973][ T9381] netlink: 'syz.3.1194': attribute type 10 has an invalid length. [ 555.589495][ T9384] loop4: detected capacity change from 0 to 736 [ 555.596213][ T9381] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1194'. [ 555.689815][ T9386] loop2: detected capacity change from 0 to 512 [ 555.939537][ T9386] EXT4-fs (loop2): too many log groups per flexible block group [ 557.484368][ T9386] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 557.510941][ T9386] EXT4-fs (loop2): mount failed [ 558.223046][ T9384] loop4: detected capacity change from 0 to 4096 [ 558.232562][ T9400] syz.0.1201[9400] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 558.233252][ T9400] syz.0.1201[9400] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 558.901193][ T9384] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 559.114696][ T9410] loop2: detected capacity change from 0 to 2048 [ 559.504584][ T9410] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 560.096566][ T4213] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 560.731719][ T9424] loop0: detected capacity change from 0 to 512 [ 561.055835][ T9432] affs: No valid root block on device loop1 [ 561.226339][ T9424] EXT4-fs (loop0): Ignoring removed nobh option [ 561.298753][ T9424] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 562.039192][ T9424] EXT4-fs (loop0): 1 truncate cleaned up [ 562.051139][ T9424] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 562.133496][ T4213] usb 3-1: unable to read config index 0 descriptor/all [ 562.140525][ T4213] usb 3-1: can't read configurations, error -71 [ 562.882734][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.889934][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.263291][ T9451] loop4: detected capacity change from 0 to 736 [ 564.301915][ T9452] netlink: 'syz.3.1215': attribute type 10 has an invalid length. [ 564.310022][ T9452] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1215'. [ 564.535614][ T9458] input: syz0 as /devices/virtual/input/input17 [ 567.087449][ T9451] loop4: detected capacity change from 0 to 4096 [ 567.165417][ T9451] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 567.216558][ T9471] affs: No valid root block on device loop2 [ 568.353906][ T9477] loop2: detected capacity change from 0 to 2048 [ 568.592130][ T9477] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 568.893458][ T4213] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 568.950670][ T9490] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.973534][ T9490] loop3: detected capacity change from 0 to 2048 [ 569.070177][ T9490] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 569.293586][ T4213] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 569.310676][ T4213] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.334057][ T4213] usb 3-1: config 0 descriptor?? [ 569.444986][ T9499] loop1: detected capacity change from 0 to 512 [ 569.528858][ T9499] EXT4-fs (loop1): Ignoring removed nobh option [ 569.544802][ T9499] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 569.588493][ T9499] EXT4-fs (loop1): 1 truncate cleaned up [ 569.598132][ T9499] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 569.863622][ T4213] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 569.995352][ T9505] input: syz0 as /devices/virtual/input/input18 [ 570.844086][ T9477] udc-core: couldn't find an available UDC or it's busy [ 570.851071][ T9477] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 570.895438][ T4213] gs_usb 3-1:0.0: Couldn't get bit timing const for channel (err=-110) [ 570.914820][ T4213] gs_usb: probe of 3-1:0.0 failed with error -110 [ 571.904880][ T8772] usb 3-1: USB disconnect, device number 22 [ 572.069378][ T9522] netlink: 'syz.0.1234': attribute type 10 has an invalid length. [ 572.077458][ T9522] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1234'. [ 573.769627][ T9533] loop2: detected capacity change from 0 to 128 [ 576.298308][ T9544] netlink: 'syz.1.1240': attribute type 10 has an invalid length. [ 576.337444][ T9544] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1240'. [ 579.540102][ T9561] loop3: detected capacity change from 0 to 2048 [ 579.874427][ T9561] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 580.028166][ T9575] loop4: detected capacity change from 0 to 512 [ 580.108634][ T9575] EXT4-fs (loop4): Ignoring removed nobh option [ 580.117714][ T9575] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 580.144146][ T9575] EXT4-fs (loop4): 1 truncate cleaned up [ 580.150736][ T9575] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 580.183230][ T8775] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 580.590748][ T9581] loop0: detected capacity change from 0 to 128 [ 580.707979][ T9585] netlink: 'syz.1.1250': attribute type 10 has an invalid length. [ 580.725592][ T9585] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1250'. [ 580.873470][ T8775] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 581.646464][ T8775] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.679957][ T8775] usb 4-1: config 0 descriptor?? [ 584.802649][ T9603] ubi0: attaching mtd0 [ 584.842333][ T9603] ubi0 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71) [ 584.863741][ T8775] gs_usb 4-1:0.0: Couldn't get device config: (err=-71) [ 584.871255][ T8775] gs_usb: probe of 4-1:0.0 failed with error -71 [ 584.884716][ T8775] usb 4-1: USB disconnect, device number 12 [ 584.899447][ T9603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1258'. [ 586.080630][ T9603] loop2: detected capacity change from 0 to 4096 [ 586.425115][ T9603] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 586.524832][ T9603] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,grpquota,nombcache,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 586.581220][ T9625] loop0: detected capacity change from 0 to 512 [ 586.768739][ T9625] EXT4-fs (loop0): too many log groups per flexible block group [ 586.787483][ T9625] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 586.811038][ T9625] EXT4-fs (loop0): mount failed [ 588.257520][ T9638] loop3: detected capacity change from 0 to 128 [ 588.510724][ T9643] loop4: detected capacity change from 0 to 2048 [ 590.700161][ T9643] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 591.004065][ T5019] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 591.031267][ T9655] ieee802154 phy0 wpan0: encryption failed: -22 [ 591.157518][ T9655] loop2: detected capacity change from 0 to 2048 [ 592.387646][ T9655] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 593.219228][ T9679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1272'. [ 593.379729][ T5019] usb 5-1: device not accepting address 18, error -71 [ 593.584325][ T9685] syz.3.1275[9685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 593.585033][ T9685] syz.3.1275[9685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 594.309558][ T9679] loop4: detected capacity change from 0 to 4096 [ 595.068680][ T9679] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 595.624942][ T9679] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,grpquota,nombcache,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 595.825485][ T9704] loop1: detected capacity change from 0 to 128 [ 598.456032][ T9717] syz.1.1284[9717] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 598.456546][ T9717] syz.1.1284[9717] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 603.429495][ T9744] loop1: detected capacity change from 0 to 128 [ 603.505364][ T9747] loop4: detected capacity change from 0 to 128 [ 603.893899][ T9760] syz.3.1295[9760] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 603.894506][ T9760] syz.3.1295[9760] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 604.536094][ T9766] loop1: detected capacity change from 0 to 128 [ 606.011871][ T9773] loop3: detected capacity change from 0 to 736 [ 606.293652][ T9774] syz.2.1297[9774] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 606.293760][ T9774] syz.2.1297[9774] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 606.348126][ T9773] loop3: detected capacity change from 0 to 4096 [ 606.444083][ T9773] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 606.505271][ T9773] ntfs3: loop3: failed to convert "c46c" to cp775 [ 608.375334][ T9792] input: syz0 as /devices/virtual/input/input19 [ 609.571396][ T9803] loop1: detected capacity change from 0 to 128 [ 609.744502][ T9806] netlink: 'syz.4.1310': attribute type 10 has an invalid length. [ 609.752380][ T9806] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1310'. [ 610.810148][ T9818] x_tables: duplicate underflow at hook 2 [ 614.663158][ T9850] x_tables: duplicate underflow at hook 2 [ 616.427689][ T9860] loop2: detected capacity change from 0 to 128 [ 618.388201][ T9877] netlink: 'syz.4.1329': attribute type 10 has an invalid length. [ 618.396172][ T9877] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1329'. [ 619.619280][ T9885] loop0: detected capacity change from 0 to 512 [ 619.702116][ T9889] loop1: detected capacity change from 0 to 2048 [ 619.976745][ T9885] EXT4-fs (loop0): Ignoring removed nobh option [ 620.050174][ T9895] x_tables: duplicate underflow at hook 2 [ 620.123732][ T9885] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 620.215453][ T9889] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 620.442877][ T9885] EXT4-fs (loop0): 1 truncate cleaned up [ 620.668092][ T9885] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 623.032150][ T1107] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 623.122641][ T9908] loop2: detected capacity change from 0 to 512 [ 623.179208][ T9908] EXT4-fs (loop2): Ignoring removed nobh option [ 623.203461][ T9908] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 625.067640][ T9908] EXT4-fs (loop2): 1 truncate cleaned up [ 625.186884][ T9908] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 625.476274][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.482597][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.592340][ T9925] netlink: 'syz.0.1342': attribute type 15 has an invalid length. [ 625.827623][ T9925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1342'. [ 628.767517][ T9938] netlink: 'syz.0.1346': attribute type 10 has an invalid length. [ 628.775476][ T9938] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1346'. [ 631.831454][ T9969] hub 6-0:1.0: USB hub found [ 631.840487][ T9969] hub 6-0:1.0: 1 port detected [ 632.259228][ T9979] syz.0.1355[9979] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 632.259806][ T9979] syz.0.1355[9979] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 633.528052][ T9976] netlink: 'syz.2.1356': attribute type 15 has an invalid length. [ 633.607443][ T9976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1356'. [ 633.705007][ T9993] netlink: 'syz.0.1358': attribute type 10 has an invalid length. [ 633.712939][ T9993] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1358'. [ 633.821628][ T9995] loop1: detected capacity change from 0 to 128 [ 634.119626][T10001] netlink: 'syz.3.1363': attribute type 10 has an invalid length. [ 634.130048][T10001] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1363'. [ 636.219197][T10012] loop0: detected capacity change from 0 to 512 [ 637.287050][T10022] hub 6-0:1.0: USB hub found [ 637.292136][T10022] hub 6-0:1.0: 1 port detected [ 637.373961][T10012] EXT4-fs (loop0): Ignoring removed nobh option [ 637.613438][T10012] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 637.651813][T10012] EXT4-fs (loop0): 1 truncate cleaned up [ 637.658229][T10012] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 640.352899][T10039] netlink: 'syz.4.1375': attribute type 10 has an invalid length. [ 640.360798][T10039] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1375'. [ 640.792274][T10050] netlink: 'syz.3.1376': attribute type 15 has an invalid length. [ 640.809185][T10050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1376'. [ 641.210830][T10061] net_ratelimit: 66 callbacks suppressed [ 641.210855][T10061] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 641.223317][T10061] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 641.230372][T10061] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 641.236891][T10061] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 641.244713][T10061] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 641.251180][T10061] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 641.262215][T10061] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 641.268738][T10061] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 641.276439][T10061] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 641.282927][T10061] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 643.105377][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 643.105396][ T26] audit: type=1326 audit(1732353529.616:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10065 comm="syz.1.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e2bec819 code=0x7ffc0000 [ 643.155656][ T26] audit: type=1326 audit(1732353529.616:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10065 comm="syz.1.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e2bec819 code=0x7ffc0000 [ 643.178080][ T26] audit: type=1326 audit(1732353529.616:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10065 comm="syz.1.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08e2bec819 code=0x7ffc0000 [ 643.248061][ T26] audit: type=1326 audit(1732353529.616:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10065 comm="syz.1.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e2bec819 code=0x7ffc0000 [ 644.343325][T10066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 644.432225][ T26] audit: type=1326 audit(1732353529.616:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10065 comm="syz.1.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e2bec819 code=0x7ffc0000 [ 644.544132][ T26] audit: type=1326 audit(1732353529.726:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10065 comm="syz.1.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08e2bec819 code=0x7ffc0000 [ 644.575361][ T26] audit: type=1326 audit(1732353529.726:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10065 comm="syz.1.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e2bec819 code=0x7ffc0000 [ 644.599570][ T26] audit: type=1326 audit(1732353529.726:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10065 comm="syz.1.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e2bec819 code=0x7ffc0000 [ 644.631545][ T26] audit: type=1326 audit(1732353529.726:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10065 comm="syz.1.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f08e2bec819 code=0x7ffc0000 [ 644.655397][T10075] ubi0: attaching mtd0 [ 644.659509][T10075] ubi0 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71) [ 644.670137][ T26] audit: type=1326 audit(1732353529.726:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10065 comm="syz.1.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e2bec819 code=0x7ffc0000 [ 645.741291][T10075] loop3: detected capacity change from 0 to 4096 [ 646.413353][T10075] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 646.809359][T10075] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,grpquota,nombcache,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 647.382030][T10102] netlink: 'syz.1.1390': attribute type 10 has an invalid length. [ 647.389937][T10102] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1390'. [ 647.519353][T10106] ieee802154 phy0 wpan0: encryption failed: -22 [ 647.573502][T10106] loop1: detected capacity change from 0 to 2048 [ 647.860788][T10105] syz.2.1392[10105] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 647.860888][T10105] syz.2.1392[10105] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 647.895518][T10106] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 647.906589][T10121] loop0: detected capacity change from 0 to 128 [ 647.996928][T10122] syz.4.1394[10122] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 647.997894][T10122] syz.4.1394[10122] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 648.770558][T10127] loop4: detected capacity change from 0 to 128 [ 650.121385][T10136] loop1: detected capacity change from 0 to 512 [ 651.621067][T10136] EXT4-fs (loop1): orphan cleanup on readonly fs [ 651.699765][T10136] EXT4-fs (loop1): 1 orphan inode deleted [ 651.741332][T10136] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 651.989737][T10153] ubi0: attaching mtd0 [ 652.002154][T10153] ubi0 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71) [ 653.618059][T10161] netlink: 'syz.3.1405': attribute type 10 has an invalid length. [ 653.627089][T10161] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1405'. [ 653.644408][T10153] loop2: detected capacity change from 0 to 4096 [ 653.730054][T10153] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 653.935917][T10170] loop4: detected capacity change from 0 to 512 [ 655.014108][T10153] EXT4-fs: error -4 creating inode table initialization thread [ 655.230691][T10170] EXT4-fs (loop4): orphan cleanup on readonly fs [ 655.277470][T10170] EXT4-fs (loop4): 1 orphan inode deleted [ 655.300876][T10170] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 655.493551][T10153] EXT4-fs (loop2): mount failed [ 658.019940][T10186] netlink: 'syz.2.1413': attribute type 10 has an invalid length. [ 658.027836][T10186] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1413'. [ 658.310417][T10193] loop1: detected capacity change from 0 to 2048 [ 659.010863][T10205] netlink: 'syz.0.1418': attribute type 10 has an invalid length. [ 659.018957][T10205] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1418'. [ 659.321328][T10193] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 659.369544][T10210] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1419'. [ 659.653228][ T13] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 662.923134][ T13] usb 2-1: device not accepting address 11, error -71 [ 663.134332][T10235] netlink: 'syz.3.1427': attribute type 10 has an invalid length. [ 663.142309][T10235] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1427'. [ 663.820302][T10240] loop1: detected capacity change from 0 to 512 [ 664.065426][T10240] EXT4-fs (loop1): orphan cleanup on readonly fs [ 664.101826][T10240] EXT4-fs (loop1): 1 orphan inode deleted [ 664.125369][T10240] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 665.219588][T10250] netlink: 'syz.1.1430': attribute type 10 has an invalid length. [ 665.227655][T10250] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1430'. [ 665.262270][T10246] netlink: 'syz.4.1429': attribute type 10 has an invalid length. [ 665.270192][T10246] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1429'. [ 665.710762][T10258] netlink: 'syz.1.1432': attribute type 17 has an invalid length. [ 665.742600][T10258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1432'. [ 665.808635][T10260] loop4: detected capacity change from 0 to 512 [ 666.012062][T10260] EXT4-fs (loop4): too many log groups per flexible block group [ 666.042885][T10260] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 666.052272][T10260] EXT4-fs (loop4): mount failed [ 667.532506][T10277] netlink: 'syz.0.1437': attribute type 10 has an invalid length. [ 667.540503][T10277] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1437'. [ 668.368036][T10291] input: syz0 as /devices/virtual/input/input20 [ 669.512045][T10295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1444'. [ 669.531660][T10295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1444'. [ 669.613907][T10298] netlink: 'syz.3.1443': attribute type 10 has an invalid length. [ 669.621966][T10298] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1443'. [ 670.639789][T10309] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 670.933845][T10314] loop0: detected capacity change from 0 to 512 [ 670.990625][T10315] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1448'. [ 671.835805][T10314] EXT4-fs (loop0): orphan cleanup on readonly fs [ 671.846534][T10314] EXT4-fs (loop0): 1 orphan inode deleted [ 671.853869][T10314] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 672.098181][T10324] syz.2.1450[10324] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 672.098285][T10324] syz.2.1450[10324] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 673.377092][T10331] loop4: detected capacity change from 0 to 512 [ 673.576307][T10331] EXT4-fs (loop4): Ignoring removed nobh option [ 673.590772][T10331] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 673.664416][T10331] EXT4-fs (loop4): 1 truncate cleaned up [ 673.680243][T10331] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 673.944415][T10343] x_tables: duplicate underflow at hook 2 [ 677.813914][T10370] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1460'. [ 679.526736][T10382] netlink: 'syz.3.1466': attribute type 10 has an invalid length. [ 679.534809][T10382] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1466'. [ 682.766029][T10406] loop4: detected capacity change from 0 to 256 [ 682.977262][T10406] exfat: Unknown parameter 'namecaseÌ' [ 683.228644][T10410] loop1: detected capacity change from 0 to 512 [ 684.290898][T10421] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1477'. [ 684.777807][T10410] EXT4-fs (loop1): Ignoring removed nobh option [ 684.849094][T10410] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 685.131412][T10410] EXT4-fs (loop1): 1 truncate cleaned up [ 685.149198][T10429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1479'. [ 685.173256][T10410] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 685.678604][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.686505][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.509360][T10449] loop4: detected capacity change from 0 to 512 [ 687.702969][T10448] loop0: detected capacity change from 0 to 512 [ 688.562835][T10448] EXT4-fs (loop0): orphan cleanup on readonly fs [ 688.562883][T10449] EXT4-fs (loop4): orphan cleanup on readonly fs [ 688.608187][T10449] EXT4-fs (loop4): 1 orphan inode deleted [ 688.759919][T10458] netlink: 'syz.2.1482': attribute type 10 has an invalid length. [ 688.768585][T10458] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1482'. [ 688.980132][T10448] EXT4-fs (loop0): 1 orphan inode deleted [ 689.137863][T10449] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 690.280616][T10448] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 690.687345][T10468] syz.3.1489[10468] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 690.688146][T10468] syz.3.1489[10468] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 691.815921][T10471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1491'. [ 691.928305][T10478] loop0: detected capacity change from 0 to 128 [ 692.081204][T10480] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1488'. [ 692.604001][T10491] loop0: detected capacity change from 0 to 128 [ 694.086200][T10500] loop4: detected capacity change from 0 to 2048 [ 694.529200][T10500] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 694.695403][T10512] loop1: detected capacity change from 0 to 512 [ 694.880100][T10512] EXT4-fs (loop1): orphan cleanup on readonly fs [ 694.920399][T10512] EXT4-fs (loop1): 1 orphan inode deleted [ 695.030529][T10512] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 695.375752][ T13] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 695.504255][T10519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1503'. [ 695.602808][T10524] net_ratelimit: 66 callbacks suppressed [ 695.602831][T10524] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 695.615236][T10524] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 695.622078][T10524] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 695.628569][T10524] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 695.635422][T10524] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 695.641835][T10524] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 695.648655][T10524] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 695.655309][T10524] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 695.662937][T10524] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 695.669420][T10524] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 696.433279][ T13] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 696.458727][ T13] usb 5-1: can't read configurations, error -71 [ 696.518813][T10532] loop3: detected capacity change from 0 to 256 [ 696.609947][T10532] exfat: Unknown parameter 'namecaseÌ' [ 696.681590][T10537] loop1: detected capacity change from 0 to 128 [ 697.015338][T10542] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1508'. [ 697.757919][T10549] netlink: 'syz.3.1511': attribute type 10 has an invalid length. [ 697.765970][T10549] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1511'. [ 698.958423][T10558] loop2: detected capacity change from 0 to 256 [ 699.280482][T10563] x_tables: duplicate underflow at hook 2 [ 699.324482][T10558] exfat: Unknown parameter 'namecaseÌ' [ 700.734247][T10574] net_ratelimit: 66 callbacks suppressed [ 700.734265][T10574] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 700.746682][T10574] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 700.753304][T10574] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 700.759795][T10574] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 700.766320][T10574] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 700.772726][T10574] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 700.779271][T10574] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 700.785779][T10574] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 700.792644][T10574] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 700.799236][T10574] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 702.411769][T10569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1517'. [ 703.986341][T10589] loop4: detected capacity change from 0 to 128 [ 704.123616][T10591] loop2: detected capacity change from 0 to 256 [ 704.264063][T10591] exfat: Unknown parameter 'namecaseÌ' [ 704.456992][T10598] loop3: detected capacity change from 0 to 512 [ 704.539575][T10593] syz.0.1523[10593] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 704.539686][T10593] syz.0.1523[10593] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 704.602053][T10598] EXT4-fs (loop3): too many log groups per flexible block group [ 704.674752][T10598] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 704.703883][T10598] EXT4-fs (loop3): mount failed [ 705.185772][T10607] netlink: 'syz.2.1525': attribute type 10 has an invalid length. [ 705.193887][T10607] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1525'. [ 708.559275][T10636] net_ratelimit: 66 callbacks suppressed [ 708.559293][T10636] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 708.571446][T10636] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 708.578061][T10636] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 708.584494][T10636] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 708.591042][T10636] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 708.597489][T10636] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 708.604068][T10636] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 708.610594][T10636] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 708.660316][T10636] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 708.666789][T10636] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 709.805549][T10639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1534'. [ 710.314328][T10645] loop0: detected capacity change from 0 to 128 [ 715.051347][T10682] loop4: detected capacity change from 0 to 512 [ 721.693965][T10717] loop2: detected capacity change from 0 to 512 [ 721.807604][T10717] EXT4-fs (loop2): Ignoring removed nobh option [ 721.824362][T10717] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 721.934566][T10717] EXT4-fs (loop2): 1 truncate cleaned up [ 721.953886][T10717] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 723.925697][T10735] netlink: 'syz.0.1559': attribute type 10 has an invalid length. [ 723.933721][T10735] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1559'. [ 728.069838][T10763] loop1: detected capacity change from 0 to 512 [ 728.156435][T10765] loop0: detected capacity change from 0 to 128 [ 728.376892][T10763] EXT4-fs (loop1): Ignoring removed nobh option [ 729.176754][T10763] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 729.191204][T10769] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1569'. [ 729.259042][T10763] EXT4-fs (loop1): 1 truncate cleaned up [ 729.268758][T10763] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 731.388634][T10782] loop4: detected capacity change from 0 to 512 [ 731.665961][T10782] EXT4-fs (loop4): orphan cleanup on readonly fs [ 731.773354][T10782] EXT4-fs (loop4): 1 orphan inode deleted [ 731.827241][T10782] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 731.954171][T10795] loop2: detected capacity change from 0 to 512 [ 732.060033][T10795] EXT4-fs (loop2): Ignoring removed nobh option [ 732.285638][T10795] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 733.628563][T10795] EXT4-fs (loop2): 1 truncate cleaned up [ 733.634399][T10795] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 735.698335][T10815] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1580'. [ 735.832535][T10814] loop2: detected capacity change from 0 to 2048 [ 737.661335][T10814] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 737.732275][T10831] ubi0: attaching mtd0 [ 737.757110][T10831] ubi0 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71) [ 737.829016][T10831] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1584'. [ 737.939280][T10833] input: syz0 as /devices/virtual/input/input21 [ 738.810007][T10831] loop1: detected capacity change from 0 to 4096 [ 738.819682][T10836] loop4: detected capacity change from 0 to 512 [ 738.840282][ T4247] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 738.873451][T10831] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 738.881272][T10836] EXT4-fs (loop4): Ignoring removed nobh option [ 738.887775][T10836] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 738.937788][T10836] EXT4-fs (loop4): 1 truncate cleaned up [ 738.967747][T10831] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,grpquota,nombcache,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 739.028339][T10836] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 743.342495][T10867] loop3: detected capacity change from 0 to 512 [ 743.421472][T10870] x_tables: duplicate underflow at hook 2 [ 744.507548][T10867] EXT4-fs (loop3): orphan cleanup on readonly fs [ 745.671441][T10880] loop4: detected capacity change from 0 to 32768 [ 745.797397][T10880] [ 745.797397][T10880] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 745.797397][T10880] [ 746.152987][T10867] EXT4-fs (loop3): 1 orphan inode deleted [ 746.176738][ T4167] [ 746.176738][ T4167] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 746.176738][ T4167] [ 746.203166][ T4167] [ 746.203166][ T4167] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 746.203166][ T4167] [ 746.227956][T10876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 746.253842][T10867] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 746.553440][T10889] loop3: detected capacity change from 0 to 2048 [ 746.740666][T10889] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 747.053220][ T7] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 747.116529][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.125026][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.378814][T10905] loop1: detected capacity change from 0 to 256 [ 747.433806][T10905] exfat: Unknown parameter 'namecaseÌ' [ 747.474675][ T7] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 747.508284][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.563006][ T7] usb 4-1: config 0 descriptor?? [ 747.828777][T10909] ubi0: attaching mtd0 [ 747.832899][T10909] ubi0 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71) [ 747.849253][T10909] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1603'. [ 747.920826][T10909] loop0: detected capacity change from 0 to 4096 [ 748.017994][T10909] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 748.051749][T10909] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,grpquota,nombcache,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 748.135584][T10889] udc-core: couldn't find an available UDC or it's busy [ 748.156748][T10889] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 748.273435][ T7] gs_usb 4-1:0.0: Couldn't get device config: (err=-71) [ 748.280470][ T7] gs_usb: probe of 4-1:0.0 failed with error -71 [ 748.331172][ T7] usb 4-1: USB disconnect, device number 13 [ 749.592605][T10921] netlink: 'syz.4.1608': attribute type 10 has an invalid length. [ 749.600579][T10921] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1608'. [ 750.719458][T10933] loop0: detected capacity change from 0 to 512 [ 751.782914][T10934] loop3: detected capacity change from 0 to 32768 [ 752.219681][T10934] [ 752.219681][T10934] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 752.219681][T10934] [ 753.142503][T10933] EXT4-fs (loop0): orphan cleanup on readonly fs [ 753.181416][T10933] EXT4-fs (loop0): 1 orphan inode deleted [ 753.196356][T10933] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 753.443797][ T4168] [ 753.443797][ T4168] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 753.443797][ T4168] [ 753.461984][T10940] loop2: detected capacity change from 0 to 128 [ 753.582204][ T4168] [ 753.582204][ T4168] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 753.582204][ T4168] [ 755.989009][T10955] ubi0: attaching mtd0 [ 756.003273][T10955] ubi0 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71) [ 756.030414][T10955] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1616'. [ 756.099148][T10957] loop4: detected capacity change from 0 to 2048 [ 756.154365][T10955] loop0: detected capacity change from 0 to 4096 [ 756.197445][T10955] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 756.220678][T10962] loop3: detected capacity change from 0 to 128 [ 756.251496][T10957] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 756.268247][T10955] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,grpquota,nombcache,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 757.329366][T10972] overlayfs: missing 'lowerdir' [ 757.573292][ T7] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 757.729876][T10977] x_tables: duplicate underflow at hook 2 [ 759.725220][T10988] loop2: detected capacity change from 0 to 32768 [ 760.268780][T10988] [ 760.268780][T10988] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 760.268780][T10988] [ 760.313269][ T7] usb 5-1: device descriptor read/all, error -71 [ 762.120592][ T4169] [ 762.120592][ T4169] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 762.120592][ T4169] [ 762.159382][ T4169] [ 762.159382][ T4169] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 762.159382][ T4169] [ 762.235010][T11002] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 762.260758][T11002] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 763.306777][T11017] ubi0: attaching mtd0 [ 763.310897][T11017] ubi0 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71) [ 763.325561][T11016] loop3: detected capacity change from 0 to 128 [ 763.420864][T11017] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1630'. [ 764.646556][T11031] loop4: detected capacity change from 0 to 128 [ 764.735578][T11032] input: syz0 as /devices/virtual/input/input22 [ 764.943952][T11017] loop2: detected capacity change from 0 to 4096 [ 765.566373][T11017] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 765.705992][T11017] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,grpquota,nombcache,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 766.816824][T11040] loop3: detected capacity change from 0 to 2048 [ 769.158527][T11040] EXT4-fs warning (device loop3): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop3. [ 769.336156][T11057] loop4: detected capacity change from 0 to 512 [ 769.408904][T11057] EXT4-fs (loop4): orphan cleanup on readonly fs [ 769.421307][T11057] EXT4-fs (loop4): 1 orphan inode deleted [ 769.428250][T11057] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 769.816342][T11071] net_ratelimit: 66 callbacks suppressed [ 769.816362][T11071] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 769.828643][T11071] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 769.835662][T11071] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 769.842224][T11071] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 769.849191][T11071] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 769.855719][T11071] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 769.862558][T11071] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 769.869133][T11071] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 769.876250][T11071] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 769.882698][T11071] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 770.926558][T11082] input: syz0 as /devices/virtual/input/input23 [ 772.392117][T11078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 774.285625][T11107] loop3: detected capacity change from 0 to 128 [ 774.350120][T11103] loop4: detected capacity change from 0 to 2048 [ 775.154163][T11103] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 775.618195][ T13] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 776.434073][ T13] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 776.443362][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.454654][ T13] usb 5-1: config 0 descriptor?? [ 776.560263][T11129] input: syz0 as /devices/virtual/input/input24 [ 777.468794][ T13] usb 5-1: can't set config #0, error -71 [ 777.520107][T11136] loop1: detected capacity change from 0 to 512 [ 777.541898][ T13] usb 5-1: USB disconnect, device number 24 [ 778.267200][T11136] EXT4-fs (loop1): orphan cleanup on readonly fs [ 778.346050][T11136] EXT4-fs (loop1): 1 orphan inode deleted [ 778.372615][T11136] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 778.729190][T11134] netlink: 'syz.3.1663': attribute type 10 has an invalid length. [ 778.737544][T11134] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1663'. [ 782.211666][T11164] loop2: detected capacity change from 0 to 128 [ 782.598822][T11162] loop3: detected capacity change from 0 to 2048 [ 783.053612][T11162] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 783.370203][T11180] loop4: detected capacity change from 0 to 2048 [ 784.164214][T11188] input: syz0 as /devices/virtual/input/input25 [ 784.918493][ T8770] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 785.626733][T11180] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 786.038468][ T8770] usb 4-1: device descriptor read/all, error -71 [ 787.655937][ T4246] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 788.246271][T11214] overlayfs: missing 'lowerdir' [ 789.749035][T11220] loop3: detected capacity change from 0 to 512 [ 789.778454][T11226] loop4: detected capacity change from 0 to 128 [ 789.843407][T11228] loop0: detected capacity change from 0 to 128 [ 789.908102][T11220] EXT4-fs (loop3): orphan cleanup on readonly fs [ 790.163717][T11220] EXT4-fs (loop3): 1 orphan inode deleted [ 790.338130][T11220] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 791.627965][T11233] loop1: detected capacity change from 0 to 2048 [ 791.933768][T11242] loop4: detected capacity change from 0 to 512 [ 792.168468][T11242] EXT4-fs (loop4): orphan cleanup on readonly fs [ 792.181796][T11233] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 792.213710][T11242] EXT4-fs (loop4): 1 orphan inode deleted [ 792.305610][T11242] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 792.802659][T11248] loop3: detected capacity change from 0 to 2048 [ 792.892228][T11252] loop4: detected capacity change from 0 to 512 [ 793.024153][ T1107] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 793.053271][T11252] EXT4-fs (loop4): Ignoring removed nobh option [ 793.077834][T11252] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 793.115637][T11248] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 793.177825][T11252] EXT4-fs (loop4): 1 truncate cleaned up [ 793.217759][T11252] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 793.423810][ T1107] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 793.442660][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.481176][ T1107] usb 2-1: config 0 descriptor?? [ 793.663320][ T13] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 794.975392][ T1107] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 794.993320][ T1107] gs_usb 2-1:0.0: Couldn't get bit timing const for channel (err=-71) [ 795.001586][ T1107] gs_usb: probe of 2-1:0.0 failed with error -71 [ 795.111131][ T1107] usb 2-1: USB disconnect, device number 13 [ 795.138189][ T13] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 795.210532][T11275] x_tables: duplicate underflow at hook 2 [ 795.233965][ T13] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 795.502624][ T13] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 795.654171][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.833924][ T13] usb 4-1: config 0 descriptor?? [ 796.063185][ T13] usb 4-1: can't set config #0, error -71 [ 796.070202][ T13] usb 4-1: USB disconnect, device number 16 [ 796.806749][T11287] netlink: 'syz.1.1701': attribute type 10 has an invalid length. [ 796.814821][T11287] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1701'. [ 798.356391][T11299] net_ratelimit: 66 callbacks suppressed [ 798.356409][T11299] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 798.368669][T11299] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 798.534034][T11299] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 798.540559][T11299] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 798.547200][T11299] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 798.553812][T11299] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 798.560381][T11299] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 798.566975][T11299] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 798.573820][T11299] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 798.580275][T11299] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 798.826128][T11296] ubi0: attaching mtd0 [ 798.830248][T11296] ubi0 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71) [ 800.181605][T11296] loop3: detected capacity change from 0 to 4096 [ 801.101554][T11324] loop2: detected capacity change from 0 to 128 [ 801.214909][T11326] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1711'. [ 801.261385][T11296] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 801.327098][T11296] EXT4-fs: failed to create workqueue [ 801.337240][T11296] EXT4-fs (loop3): mount failed [ 802.836549][T11339] loop3: detected capacity change from 0 to 2048 [ 804.883374][T11356] net_ratelimit: 66 callbacks suppressed [ 804.883403][T11356] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 804.895637][T11356] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 804.902118][T11356] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 804.908637][T11356] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 804.915161][T11356] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 804.921649][T11356] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 804.928176][T11356] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 804.934636][T11356] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 804.941104][T11356] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 804.947538][T11356] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 805.261598][T11359] netlink: 'syz.2.1722': attribute type 10 has an invalid length. [ 805.269700][T11359] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1722'. [ 805.332898][T11360] loop1: detected capacity change from 0 to 128 [ 805.406864][T11364] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1724'. [ 805.580924][T11366] ubi0: attaching mtd0 [ 805.600479][T11366] ubi0 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71) [ 806.417973][T11366] loop4: detected capacity change from 0 to 4096 [ 806.658079][T11366] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 807.415938][T11366] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,grpquota,nombcache,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 807.909771][T11397] loop0: detected capacity change from 0 to 2048 [ 808.404844][T11401] loop3: detected capacity change from 0 to 32768 [ 808.566120][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.577661][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.993063][T11397] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 809.072548][T11401] [ 809.072548][T11401] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 809.072548][T11401] [ 809.435990][T11407] loop1: detected capacity change from 0 to 2048 [ 810.132558][T11414] net_ratelimit: 66 callbacks suppressed [ 810.132578][T11414] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 810.144754][T11414] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 810.151328][T11414] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 810.157768][T11414] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 810.164282][T11414] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 810.170659][T11414] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 810.177285][T11414] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 810.183727][T11414] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 810.190185][T11414] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 810.196806][T11414] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 810.390143][ T8773] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 810.436088][ T4168] [ 810.436088][ T4168] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 810.436088][ T4168] [ 810.462648][ T4168] [ 810.462648][ T4168] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 810.462648][ T4168] [ 810.689693][T11422] netlink: 'syz.4.1739': attribute type 10 has an invalid length. [ 810.698012][T11422] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1739'. [ 811.023467][ T8773] usb 1-1: device descriptor read/all, error -71 [ 811.038851][T11407] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 811.042320][T11424] loop2: detected capacity change from 0 to 128 [ 811.353199][ T13] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 811.471242][T11433] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1737'. [ 812.896749][T11440] ubi0: attaching mtd0 [ 812.929325][ T13] usb 2-1: unable to read config index 0 descriptor/all [ 812.953486][ T13] usb 2-1: can't read configurations, error -71 [ 812.973597][T11440] ubi0 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71) [ 813.009296][T11446] loop0: detected capacity change from 0 to 1024 [ 813.129898][T11446] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 813.883870][T11440] loop4: detected capacity change from 0 to 4096 [ 814.151005][T11440] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 814.172243][T11456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1747'. [ 814.181432][T11456] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1747'. [ 815.216072][T11458] loop1: detected capacity change from 0 to 32768 [ 815.380107][T11458] [ 815.380107][T11458] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 815.380107][T11458] [ 816.013386][T11440] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,grpquota,nombcache,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 816.266232][ T4172] [ 816.266232][ T4172] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 816.266232][ T4172] [ 816.334323][ T4172] [ 816.334323][ T4172] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 816.334323][ T4172] [ 816.380326][T11468] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1753'. [ 816.477211][T11469] net_ratelimit: 66 callbacks suppressed [ 816.477231][T11469] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 816.489518][T11469] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 816.497595][T11469] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 816.504276][T11469] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 816.511084][T11469] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 816.517540][T11469] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 816.524277][T11469] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 816.530760][T11469] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 816.537459][T11469] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 816.543912][T11469] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 817.232602][T11471] loop4: detected capacity change from 0 to 2048 [ 817.622952][T11471] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 818.398358][T11486] loop3: detected capacity change from 0 to 128 [ 818.496518][T11490] loop1: detected capacity change from 0 to 2048 [ 819.176376][T11490] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 819.213141][ T1107] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 819.672246][ T13] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 821.140268][T11509] ubi0: attaching mtd0 [ 821.188986][T11509] ubi0 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71) [ 821.388899][ T1107] usb 5-1: device descriptor read/all, error -71 [ 821.407146][T11509] loop3: detected capacity change from 0 to 4096 [ 821.464038][T11514] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1765'. [ 821.510985][T11509] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 821.695282][T11518] hub 6-0:1.0: USB hub found [ 821.701319][T11518] hub 6-0:1.0: 1 port detected [ 822.342073][T11509] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,grpquota,nombcache,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 822.508595][T11509] [ 822.510972][T11509] ====================================================== [ 822.518018][T11509] WARNING: possible circular locking dependency detected [ 822.525051][T11509] 5.15.173-syzkaller #0 Not tainted [ 822.530257][T11509] ------------------------------------------------------ [ 822.537280][T11509] syz.3.1762/11509 is trying to acquire lock: [ 822.543355][T11509] ffff888074565ae8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x57/0x510 [ 822.552438][T11509] [ 822.552438][T11509] but task is already holding lock: [ 822.559805][T11509] ffff888061118278 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x9a2/0x1c70 [ 822.569348][T11509] [ 822.569348][T11509] which lock already depends on the new lock. [ 822.569348][T11509] [ 822.579773][T11509] [ 822.579773][T11509] the existing dependency chain (in reverse order) is: [ 822.588814][T11509] [ 822.588814][T11509] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 822.596670][T11509] lock_acquire+0x1db/0x4f0 [ 822.601728][T11509] down_read+0x45/0x2e0 [ 822.606448][T11509] ext4_map_blocks+0x391/0x1c70 [ 822.611855][T11509] ext4_getblk+0x19f/0x710 [ 822.616822][T11509] ext4_bread+0x2a/0x170 [ 822.621608][T11509] ext4_quota_read+0x1a1/0x2c0 [ 822.626957][T11509] find_tree_dqentry+0x192/0xb60 [ 822.632435][T11509] find_tree_dqentry+0x41a/0xb60 [ 822.637914][T11509] qtree_read_dquot+0x13f/0x650 [ 822.643398][T11509] v2_read_dquot+0xbe/0x100 [ 822.648442][T11509] dquot_acquire+0x188/0x680 [ 822.653604][T11509] ext4_acquire_dquot+0x2eb/0x4a0 [ 822.659162][T11509] dqget+0x762/0xe90 [ 822.663682][T11509] __dquot_initialize+0x2d9/0xea0 [ 822.669325][T11509] ext4_process_orphan+0x57/0x2d0 [ 822.674889][T11509] ext4_orphan_cleanup+0x9d9/0x1240 [ 822.680661][T11509] ext4_fill_super+0x98de/0xa110 [ 822.686145][T11509] mount_bdev+0x2c9/0x3f0 [ 822.691025][T11509] legacy_get_tree+0xeb/0x180 [ 822.696255][T11509] vfs_get_tree+0x88/0x270 [ 822.701208][T11509] do_new_mount+0x2ba/0xb40 [ 822.706337][T11509] __se_sys_mount+0x2d5/0x3c0 [ 822.711557][T11509] do_syscall_64+0x3b/0xb0 [ 822.716693][T11509] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 822.723230][T11509] [ 822.723230][T11509] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 822.731513][T11509] lock_acquire+0x1db/0x4f0 [ 822.736560][T11509] down_read+0x45/0x2e0 [ 822.741259][T11509] v2_read_dquot+0x4a/0x100 [ 822.746308][T11509] dquot_acquire+0x188/0x680 [ 822.751441][T11509] ext4_acquire_dquot+0x2eb/0x4a0 [ 822.757095][T11509] dqget+0x762/0xe90 [ 822.761546][T11509] __dquot_initialize+0x2d9/0xea0 [ 822.767109][T11509] ext4_create+0xb1/0x550 [ 822.771983][T11509] path_openat+0x130a/0x2f20 [ 822.777109][T11509] do_filp_open+0x21c/0x460 [ 822.782157][T11509] do_sys_openat2+0x13b/0x4f0 [ 822.787378][T11509] __x64_sys_openat+0x243/0x290 [ 822.792770][T11509] do_syscall_64+0x3b/0xb0 [ 822.797726][T11509] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 822.804176][T11509] [ 822.804176][T11509] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 822.811842][T11509] validate_chain+0x1649/0x5930 [ 822.817309][T11509] __lock_acquire+0x1295/0x1ff0 [ 822.822702][T11509] lock_acquire+0x1db/0x4f0 [ 822.827747][T11509] __mutex_lock_common+0x1da/0x25a0 [ 822.833490][T11509] mutex_lock_nested+0x17/0x20 [ 822.838803][T11509] dquot_commit+0x57/0x510 [ 822.843933][T11509] ext4_write_dquot+0x1fd/0x360 [ 822.849315][T11509] mark_all_dquot_dirty+0xf7/0x400 [ 822.854962][T11509] __dquot_alloc_space+0xdd8/0x1090 [ 822.860696][T11509] ext4_mb_new_blocks+0x12d8/0x4d60 [ 822.866430][T11509] ext4_ext_map_blocks+0x1b01/0x7630 [ 822.872260][T11509] ext4_map_blocks+0xa66/0x1c70 [ 822.877664][T11509] ext4_getblk+0x19f/0x710 [ 822.882628][T11509] ext4_bread+0x2a/0x170 [ 822.887409][T11509] ext4_append+0x31f/0x5c0 [ 822.892371][T11509] ext4_init_new_dir+0x33a/0xa20 [ 822.897892][T11509] ext4_mkdir+0x4f2/0xce0 [ 822.898380][T11533] netlink: 'syz.2.1767': attribute type 10 has an invalid length. [ 822.902758][T11509] vfs_mkdir+0x3b6/0x590 [ 822.910604][T11533] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1767'. [ 822.915303][T11509] do_mkdirat+0x260/0x520 [ 822.915326][T11509] __x64_sys_mkdirat+0x85/0x90 [ 822.915342][T11509] do_syscall_64+0x3b/0xb0 [ 822.915362][T11509] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 822.945875][T11509] [ 822.945875][T11509] other info that might help us debug this: [ 822.945875][T11509] [ 822.956281][T11509] Chain exists of: [ 822.956281][T11509] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 822.956281][T11509] [ 822.970003][T11509] Possible unsafe locking scenario: [ 822.970003][T11509] [ 822.977471][T11509] CPU0 CPU1 [ 822.982849][T11509] ---- ---- [ 822.988238][T11509] lock(&ei->i_data_sem/2); [ 822.992852][T11509] lock(&s->s_dquot.dqio_sem); [ 823.000327][T11509] lock(&ei->i_data_sem/2); [ 823.007464][T11509] lock(&dquot->dq_lock); [ 823.011983][T11509] [ 823.011983][T11509] *** DEADLOCK *** [ 823.011983][T11509] [ 823.020127][T11509] 4 locks held by syz.3.1762/11509: [ 823.025338][T11509] #0: ffff888056b80460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 823.034519][T11509] #1: ffff88805e2067a0 (&type->i_mutex_dir_key#4/1){+.+.}-{3:3}, at: filename_create+0x25c/0x530 [ 823.045179][T11509] #2: ffff888061118278 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x9a2/0x1c70 [ 823.055147][T11509] #3: ffffffff8ca43c58 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 823.064412][T11509] [ 823.064412][T11509] stack backtrace: [ 823.070320][T11509] CPU: 0 PID: 11509 Comm: syz.3.1762 Not tainted 5.15.173-syzkaller #0 [ 823.078608][T11509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 823.088683][T11509] Call Trace: [ 823.091980][T11509] [ 823.094918][T11509] dump_stack_lvl+0x1e3/0x2d0 [ 823.099617][T11509] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 823.105273][T11509] ? print_circular_bug+0x12b/0x1a0 [ 823.110746][T11509] check_noncircular+0x2f8/0x3b0 [ 823.115700][T11509] ? add_chain_block+0x850/0x850 [ 823.120649][T11509] ? lockdep_lock+0x11f/0x2a0 [ 823.125343][T11509] ? check_path+0x40/0x40 [ 823.129693][T11509] ? noop_count+0x30/0x30 [ 823.134031][T11509] ? _find_first_zero_bit+0xcf/0xf0 [ 823.139244][T11509] validate_chain+0x1649/0x5930 [ 823.144112][T11509] ? add_chain_block+0x850/0x850 [ 823.149066][T11509] ? lockdep_unlock+0x166/0x300 [ 823.153923][T11509] ? reacquire_held_locks+0x660/0x660 [ 823.159309][T11509] ? add_chain_block+0x850/0x850 [ 823.164323][T11509] ? validate_chain+0x112/0x5930 [ 823.169280][T11509] ? mark_lock+0x98/0x340 [ 823.173624][T11509] __lock_acquire+0x1295/0x1ff0 [ 823.178494][T11509] lock_acquire+0x1db/0x4f0 [ 823.183006][T11509] ? dquot_commit+0x57/0x510 [ 823.187610][T11509] ? read_lock_is_recursive+0x10/0x10 [ 823.192999][T11509] ? __might_sleep+0xc0/0xc0 [ 823.197601][T11509] ? __lock_acquire+0x1295/0x1ff0 [ 823.202644][T11509] __mutex_lock_common+0x1da/0x25a0 [ 823.207858][T11509] ? dquot_commit+0x57/0x510 [ 823.212462][T11509] ? dquot_commit+0x57/0x510 [ 823.217073][T11509] ? __might_sleep+0xc0/0xc0 [ 823.221686][T11509] ? mutex_lock_io_nested+0x60/0x60 [ 823.227087][T11509] mutex_lock_nested+0x17/0x20 [ 823.231866][T11509] dquot_commit+0x57/0x510 [ 823.236340][T11509] ? __ext4_journal_start_sb+0x1cb/0x370 [ 823.241990][T11509] ext4_write_dquot+0x1fd/0x360 [ 823.246893][T11509] mark_all_dquot_dirty+0xf7/0x400 [ 823.252026][T11509] __dquot_alloc_space+0xdd8/0x1090 [ 823.257249][T11509] ? vfs_mkdir+0x3b6/0x590 [ 823.261691][T11509] ? do_mkdirat+0x260/0x520 [ 823.266298][T11509] ? __dquot_drop+0x420/0x420 [ 823.270976][T11509] ? percpu_counter_add_batch+0x142/0x160 [ 823.276793][T11509] ext4_mb_new_blocks+0x12d8/0x4d60 [ 823.282019][T11509] ? __kmalloc+0x168/0x300 [ 823.286433][T11509] ? ext4_find_extent+0x378/0xe20 [ 823.291452][T11509] ? reacquire_held_locks+0x660/0x660 [ 823.296828][T11509] ? ext4_mb_pa_callback+0xd0/0xd0 [ 823.301969][T11509] ? ext4_find_extent+0xcdb/0xe20 [ 823.307074][T11509] ? ext4_ext_search_right+0x4a7/0x860 [ 823.312527][T11509] ? ext4_ext_check_overlap+0x180/0x5b0 [ 823.318076][T11509] ? ext4_inode_to_goal_block+0x312/0x450 [ 823.323794][T11509] ext4_ext_map_blocks+0x1b01/0x7630 [ 823.329096][T11509] ? __lock_acquire+0x1295/0x1ff0 [ 823.334135][T11509] ? ext4_ext_release+0x10/0x10 [ 823.339040][T11509] ? ext4_es_lookup_extent+0x621/0xa40 [ 823.344524][T11509] ext4_map_blocks+0xa66/0x1c70 [ 823.349406][T11509] ? ext4_issue_zeroout+0x250/0x250 [ 823.354629][T11509] ext4_getblk+0x19f/0x710 [ 823.359086][T11509] ? ext4_get_block_unwritten+0x30/0x30 [ 823.364643][T11509] ? rcu_is_watching+0x11/0xa0 [ 823.369416][T11509] ext4_bread+0x2a/0x170 [ 823.373660][T11509] ext4_append+0x31f/0x5c0 [ 823.378095][T11509] ? ext4_init_new_dir+0xa20/0xa20 [ 823.383222][T11509] ext4_init_new_dir+0x33a/0xa20 [ 823.388159][T11509] ? ext4_init_dot_dotdot+0x4e0/0x4e0 [ 823.393538][T11509] ext4_mkdir+0x4f2/0xce0 [ 823.397974][T11509] ? ext4_symlink+0xed0/0xed0 [ 823.402669][T11509] ? inode_permission+0xf7/0x450 [ 823.407609][T11509] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 823.412636][T11509] ? security_inode_mkdir+0xb4/0x100 [ 823.417927][T11509] vfs_mkdir+0x3b6/0x590 [ 823.422193][T11509] do_mkdirat+0x260/0x520 [ 823.426533][T11509] ? vfs_mkdir+0x590/0x590 [ 823.430956][T11509] ? getname_flags+0x1ec/0x4e0 [ 823.435746][T11509] __x64_sys_mkdirat+0x85/0x90 [ 823.440531][T11509] do_syscall_64+0x3b/0xb0 [ 823.444946][T11509] ? clear_bhb_loop+0x15/0x70 [ 823.449751][T11509] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 823.455656][T11509] RIP: 0033:0x7fae2d5430b7 [ 823.460071][T11509] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 823.479717][T11509] RSP: 002b:00007fae2b3bbe68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 823.488150][T11509] RAX: ffffffffffffffda RBX: 00007fae2b3bbef0 RCX: 00007fae2d5430b7 [ 823.496121][T11509] RDX: 00000000000001ff RSI: 00000000200000c0 RDI: 00000000ffffff9c [ 823.504095][T11509] RBP: 0000000020000080 R08: 0000000020000080 R09: 0000000000000000 [ 823.512067][T11509] R10: 0000000020000080 R11: 0000000000000246 R12: 00000000200000c0 [ 823.520032][T11509] R13: 00007fae2b3bbeb0 R14: 0000000000000000 R15: 0000000000000000 [ 823.528004][T11509] [ 824.513273][ T13] usb 2-1: device not accepting address 16, error -71