last executing test programs: 2m53.471841115s ago: executing program 3 (id=429): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r0, &(0x7f0000000780)}, 0x20) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x10) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x80) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000001c00), 0x12) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000000080)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f7ac9b36096eff7fc6e5539b428f0e1ac6e7049b346d959b189a242a9b3ff3988f7ef319520100ffe8d178708c523c921b1b25470a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00300300000000000000b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490843bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e90af2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0f1f4f674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ffc4ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a7315c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a5869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe8a3c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be1200fdc4e9134f77020000f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d594c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df34959eaef6572e1e007fa55a2999f596d0673f586749b25f5a448427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3eff1b0ff034ef655b253ca050083815b1b6fc6522d4e4fdcf3a38cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d0100d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441984cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfd7b2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f236c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426db6fe29068c0ca3d3414442e863a154504b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071b9397b033a53faf46366e7205dd8d6f37525c1a0e94610dd94223f6c15d07f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef928ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971f41488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd1cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f87a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17cb51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799ecb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c069595e4e98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb92c2ed3de5a8a8f0011e80e0082d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a10010549820a73c8839475f732ae00398e4bd1f4908b7807fb33b72685ec37a2d3f766b13a60459716246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f487e1ff7408c60edddab652f2ef91d4f2b01987b0f46e4034e5c3f745a7ee81087dc746b0827cbf652f406c6b95f2722e58c05f352ceee26596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f0cfc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea62839b4a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe520629b40d7cee65802cb5e930ed624806c4380b6dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30842b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2bbb935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f7150b704c971439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c0bec664bff000000000000005d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e975be53f8d2a1dfb1c6000204b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f04817fb909729a7db6ff9576abc9ede7886294ff1aa7082ead01a9b03c37b0969be0bff60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf6c9c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bccf8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000000000000000000000000000000370f00", 0x5bb1f126059684ef}}, 0x1006) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@dax_inode}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") 2m49.631870109s ago: executing program 3 (id=450): socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x26, 0x0, @void}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x2, 0x4, 0x6, 0x8, 0x1014}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0x1, 0xfffffffc}, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r3, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r4, 0x1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, r7, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) 2m48.003285576s ago: executing program 3 (id=456): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) unshare(0x400) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24008015, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0xa, &(0x7f0000000240), 0x2, 0x8}}, 0x20) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40)=@newqdisc={0x434, 0x24, 0xd0f, 0x70bd28, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x3, 0x9, 0x4, 0x6, 0x40, 0x4, 0x40, 0x6, 0x482e3068, 0xff, 0xfffffbea, 0x6, 0x542, 0x400040, 0xe0000, 0x1, 0xc, 0x1, 0x800, 0xd, 0x0, 0x7ff, 0xb3e, 0x3ff, 0x7, 0x7, 0x400, 0x7, 0xa45, 0xc, 0x7f, 0x401, 0x5, 0xfffffff7, 0xfffffff2, 0xdf8, 0x9, 0x7436, 0x7, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x5, 0x1, 0x1, 0x2bf7, 0x6, 0x7, 0x0, 0x3, 0x3, 0x1, 0x9, 0x1, 0x4, 0x4, 0x6, 0x3, 0x10000, 0x7, 0x5, 0x3, 0x80000001, 0x9, 0x5, 0x1cb, 0x5, 0x7, 0x7, 0x7, 0xfff, 0x2, 0x7, 0x9, 0xffff, 0x1, 0x3, 0x4, 0x8, 0xe1cc, 0x9, 0xc7, 0x7, 0x55, 0x6, 0x75a, 0x8, 0x2, 0x6, 0x40, 0x8, 0x7, 0x5, 0x0, 0xf03, 0x7, 0x8, 0x9, 0x3, 0x7, 0x21931f93, 0x1, 0x800, 0x10, 0xfffffffd, 0x0, 0x2, 0xffffffc0, 0x2, 0x7ff, 0x6ed4, 0xffffff80, 0x3, 0x200, 0xcc4, 0x2, 0x3, 0x10b, 0x2, 0x9, 0xac21, 0x0, 0x8, 0xc33, 0xff, 0x1, 0x8, 0x85, 0x2, 0xf1c6, 0x8, 0x5, 0x6, 0x40, 0x4, 0x2, 0xa, 0x80000001, 0x7, 0x7, 0x3, 0x9, 0x7, 0xa93, 0x80000000, 0x80000001, 0x7f, 0x1ff, 0x0, 0x3, 0x870, 0x67bae144, 0x9, 0x4, 0x6a8, 0xe4b, 0x1, 0x13, 0x1, 0x6, 0x4a68, 0xe, 0x10, 0xffffffff, 0x7f, 0x0, 0xa0a, 0x9, 0x3, 0xffffffe8, 0xc71, 0x8, 0xffffff5b, 0x8, 0x0, 0x80000001, 0x5, 0x6, 0x0, 0x30869cc6, 0x0, 0x3ff, 0x4, 0x80, 0x5, 0x15bf41b1, 0xf, 0x6, 0xfffffffe, 0x8, 0x0, 0x943, 0x7, 0xe, 0x5, 0x9, 0x2, 0x0, 0x1, 0x1000, 0x1000, 0x7ff, 0x6, 0x2, 0x0, 0x7, 0xb263, 0x1, 0x7, 0x4, 0x1, 0xc, 0x1, 0x200, 0x8001, 0x5, 0x303f, 0x5d, 0x3, 0x4, 0x3, 0x4, 0x2, 0x7, 0x39b1e32c, 0x0, 0x8a84, 0x9, 0x40, 0x10000, 0x1, 0xb, 0xfffffffd, 0x4, 0x6, 0x5, 0xf2, 0x1834, 0x10000, 0x7ff, 0x1, 0xeb7, 0x67f1, 0x9, 0xffff, 0x3ff, 0x80000000, 0xd, 0x3, 0x10001, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000880)=ANY=[], 0x32600) fgetxattr(0xffffffffffffffff, &(0x7f00000001c0)=@known='trusted.overlay.redirect\x00', &(0x7f0000000200)=""/122, 0x7a) ioctl$TIOCSIG(r0, 0x40045436, 0x29) 2m34.912498978s ago: executing program 3 (id=488): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@noinit_itable}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x46a, &(0x7f0000000980)="$eJzs3MtvG0UYAPDPm1efJEB5tLQQKIiKR9KkzwOXIpA4gITEpYhTSNKqNG2gCRKtIho4lCOqxL3iiMRfwAkuCDghcYU7QqpQLi2VkBbtejc1ju3WjVMX/PtJdma8Y+98Ozve2VlvAuhZo9lTJWJbRPwaEcPV7L8LjFb/XF9Zmv5rZWm6Emn61p+VvNy1laXpsmj5vq3VTJoW+aEG6730TsTU3NzsuSI/vnjm/fGF8xdePHVm6uTsydmzk0ePHjywZ/Dw5KGOxJnFdW3Xx/O7d7729uU3po9ffvfHr7P6biuW18bRKaPVrdvQM51eWZdtr0lX+rtYEdrSFxFZcw3k/X84+mLz6rLhePXTrlYO2FBpmqaNjs+F5RT4H6tEt2sAdEd5oM/Of8vHXRp63BOuHov44Eg1/uvFo7qkP5KizEDd+W0njUbE8eUbV7JHbNA8BABArW+PRcQLjcZ/STxcU+6+4hrKSETcHxEPRMSDEbEjIh6KyMs+EhGPtrn++iska8c/G3sxIRv/vVRc21od//2d5vEXRvqK3PY8/oHKiVNzs/uLbbIvBoay/ESLdXz3yi+fN1tWO/47vnxja6wsTZdjwarkj/66CbqZqcWpdYa96uonEbv66+LPVVa3fCUidkbErrY++eYZxqnnvtrdrFRd/Feur4m/hQ7sGumXEc9W23856uIvVZpen5w4cnjy0PimmJvdP17uFWv99POlN5utf13xd0DW/lvq9//cavwjlU0RC+cvnM6v1y60v45Lv33W9Jzm1vE33v8Hi+oNFq99NLW4eG4iYrDy+trXJ2++t8yX5bP49+1tFH+Sf8eVW+KxiMh24j0R8XhEPFHU/cmIeCoi9raI/4eXn36v/fhbzMp3UBb/zK3aP2rbv/1E3+nvv2k//lLW/gfz1L7ildv5/rvdCq5n2wEAAMB/RZL/Br6SjK2mk2RsrPob/h2xJZmbX1h8/sT8h2dnqr+VH4mBpJzpGq6ZD50o5obL/GRd/kAxb/xF3+Y8PzY9Pzdzc44V6IKtTfp/5ve+7Plil2sIbCj3a0Hv0v+hd7Xo/5vuZj2Au8/xH3qX/g+9q1H/N+0PvcHxH3qX/g+9S/+H3qX/Q09qem98sq5b/iVunUjT9GLLJri3E5G0/67+uEcqvyGJzRHRZFE6dOef3H/b/8ziDhNDDRd1+5sJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgM/4JAAD//9fk6nQ=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="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", 0x501}], 0x1, 0x0, 0x0, 0x24040050}}], 0x1, 0x20000880) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) epoll_create(0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0x80000000, 0xf, 0x8, 0x80, 0x2, 0x318, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0xbc5b, 0x80000001, 0x25, 0x11, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x2, 0x8, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x7fffffff, 0x6, 0x6, 0x2, 0x9, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x6, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x9, 0x5, 0xfffffff7, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0xfffff001, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x4, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x0, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0x5, 0xffff, 0x2, 0x4, 0x5, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0xf94, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x3, 0x5, 0x1, 0x486, 0x3, 0x303c, 0x3e7, 0x4, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d04, 0x6, 0x38, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x9, 0x5, 0x1c, 0x120000, 0x3, 0x7f, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x69d9, 0xb, 0x5, 0x4, 0x6, 0x0, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb74, 0x101, 0x10000, 0x4, 0x7fff, 0x14000, 0x7f, 0x2, 0x5, 0x7, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x7fffffff, 0x1, 0x98, 0xa1f, 0xf40, 0x2, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7]}, 0x45c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r2, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 2m31.416147051s ago: executing program 3 (id=495): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) close(r0) 2m30.263926771s ago: executing program 3 (id=499): personality(0xfe47fef9f5ef7379) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x8082) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) 2m28.275964387s ago: executing program 32 (id=499): personality(0xfe47fef9f5ef7379) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x8082) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) 1m38.121683469s ago: executing program 5 (id=650): socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgid(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) syz_pidfd_open(r0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1m36.782096867s ago: executing program 5 (id=652): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004801}, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r6 = fanotify_init(0x81, 0x40000) fanotify_mark(r6, 0x105, 0x40001032, r5, 0x0) read$FUSE(r6, &(0x7f0000002300)={0x2020}, 0x2020) 1m35.045006871s ago: executing program 5 (id=654): socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x2000000000000021, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x801) socket$kcm(0x2, 0x3, 0x2) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x13b) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0xa, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1m33.984654599s ago: executing program 5 (id=660): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@noinit_itable}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x46a, &(0x7f0000000980)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="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", 0x501}], 0x1, 0x0, 0x0, 0x24040050}}], 0x1, 0x20000880) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) epoll_create(0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0x80000000, 0xf, 0x8, 0x80, 0x2, 0x318, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0xbc5b, 0x80000001, 0x25, 0x11, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x2, 0x8, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x7fffffff, 0x6, 0x6, 0x2, 0x9, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x6, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x9, 0x5, 0xfffffff7, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0xfffff001, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x4, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x0, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0x5, 0xffff, 0x2, 0x4, 0x5, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0xf94, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x3, 0x5, 0x1, 0x486, 0x3, 0x303c, 0x3e7, 0x4, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d04, 0x6, 0x38, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x9, 0x5, 0x1c, 0x120000, 0x3, 0x7f, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x69d9, 0xb, 0x5, 0x4, 0x6, 0x0, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb74, 0x101, 0x10000, 0x4, 0x7fff, 0x14000, 0x7f, 0x2, 0x5, 0x7, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x7fffffff, 0x1, 0x98, 0xa1f, 0xf40, 0x2, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7]}, 0x45c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) sendto$inet(r2, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x805, 0x0, 0x6) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m33.490225221s ago: executing program 5 (id=663): io_uring_setup(0xf07, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x100000002) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000000e0c0)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073118800000000008510000002000000850000004100000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, 0x0, 0x0) syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[], 0xf, 0xae, &(0x7f00000004c0)="$eJzs1zFKA0EABdDPirpgZSOChfU23sGjiKU2YqUI3kC8iFfxCNunSLFtCJnAZkNYUgY2EN4rBv58Bn47/4u/u98mKd9JaW7fZmXn/ePz5el1cya5CienSs4vk9RJ7q/7nPnjqE/bfT233dn+44ufSbcCAACHqfIwzqsyXCyHX2AfbrZ9PfE+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGNbBwAA//8UKyia") socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) 1m33.039258311s ago: executing program 5 (id=667): openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x5, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x8, 0x9, 0x6, 0x6, 0x7, 0x0}) r2 = socket$inet6(0xa, 0x5, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000340)={r5, 0x101, 0x3, 0x0, 0x0, [], [0x0, 0x7, 0x0, 0xfffffffc], [0x0, 0x80000006, 0x2], [0x5, 0x0, 0x1, 0x5]}) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x5a, @dev={0xfe, 0x80, '\x00', 0x24}, @empty, 0x7800, 0x7f, 0xfffffffc, 0xdc66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', r7, 0x0, 0x0, 0x1, 0x0, 0xd, @empty, @empty, 0x700, 0x0, 0xfffffffc}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setsockopt$inet_int(r2, 0x0, 0xf, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}], 0x1c) syz_open_procfs$namespace(r1, &(0x7f0000000640)='ns/time_for_children\x00') 1m31.899999382s ago: executing program 33 (id=667): openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x5, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x8, 0x9, 0x6, 0x6, 0x7, 0x0}) r2 = socket$inet6(0xa, 0x5, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000340)={r5, 0x101, 0x3, 0x0, 0x0, [], [0x0, 0x7, 0x0, 0xfffffffc], [0x0, 0x80000006, 0x2], [0x5, 0x0, 0x1, 0x5]}) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x5a, @dev={0xfe, 0x80, '\x00', 0x24}, @empty, 0x7800, 0x7f, 0xfffffffc, 0xdc66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', r7, 0x0, 0x0, 0x1, 0x0, 0xd, @empty, @empty, 0x700, 0x0, 0xfffffffc}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setsockopt$inet_int(r2, 0x0, 0xf, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}], 0x1c) syz_open_procfs$namespace(r1, &(0x7f0000000640)='ns/time_for_children\x00') 52.164434506s ago: executing program 6 (id=765): socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgid(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) syz_pidfd_open(r0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x4}}, 0x20) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 52.089676837s ago: executing program 7 (id=670): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x0, 0xfa93}]}) fanotify_mark(0xffffffffffffffff, 0x1, 0x1033, r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="10080400895504002c001280110001006272696467655f736c6176650000000014000580050028"], 0x4c}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4040010) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x113, @tick=0x1000d, 0x2, {0x15, 0x9}, 0x7, 0x0, 0xeb}) 51.214476459s ago: executing program 6 (id=768): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c000000050a010100000000000000000a00000a0900010073797a31000000000c0002"], 0x61}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890) 50.911282868s ago: executing program 7 (id=770): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x800082, &(0x7f00000021c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES64, @ANYRES16=r0, @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x8, 0x4031022, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x40, 0xfff7bffe}}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f000000b040)={0x2020}, 0x2020) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000002240)={0x0, &(0x7f00000022c0)=0xffffffffffffffff, 0x0, 0x0, {0x17}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) sendmmsg$inet6(r3, &(0x7f0000001c00)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x5, @private1, 0x5}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="14", 0x1}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e20, 0x2db4, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1}, 0x1c, &(0x7f0000001b80)=[{&(0x7f0000000640)='\"', 0x1}], 0x1}}], 0x2, 0x200400c4) shutdown(r3, 0x1) open_by_handle_at(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0xfedff7fe) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc}) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 50.746675663s ago: executing program 6 (id=772): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 49.636159665s ago: executing program 6 (id=775): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@noinit_itable}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x46a, &(0x7f0000000980)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="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", 0x501}], 0x1, 0x0, 0x0, 0x24040050}}], 0x1, 0x20000880) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) epoll_create(0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0x80000000, 0xf, 0x8, 0x80, 0x2, 0x318, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0xbc5b, 0x80000001, 0x25, 0x11, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x2, 0x8, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x7fffffff, 0x6, 0x6, 0x2, 0x9, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x6, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x9, 0x5, 0xfffffff7, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0xfffff001, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x4, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x0, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0x5, 0xffff, 0x2, 0x4, 0x5, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0xf94, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x3, 0x5, 0x1, 0x486, 0x3, 0x303c, 0x3e7, 0x4, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d04, 0x6, 0x38, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x9, 0x5, 0x1c, 0x120000, 0x3, 0x7f, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x69d9, 0xb, 0x5, 0x4, 0x6, 0x0, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb74, 0x101, 0x10000, 0x4, 0x7fff, 0x14000, 0x7f, 0x2, 0x5, 0x7, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x7fffffff, 0x1, 0x98, 0xa1f, 0xf40, 0x2, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7]}, 0x45c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x805, 0x0, 0x6) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 49.610136018s ago: executing program 7 (id=776): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r4, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000480)=@security={'security\x00', 0x4, 0x4, 0x418, 0xffffffff, 0xd0, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x348, 0x348, 0x348, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xfffa, 0x8}}}, {{@ipv6={@private1, @private2, [], [0xffffff00, 0xffffff00], 'geneve1\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x2, 0x3, 0x5}, 0x0, 0x138, 0x1a8, 0x0, {}, [@common=@srh1={{0x90}, {0x16, 0xb7, 0xe, 0x8, 0x7, @local, @private2, @private1={0xfc, 0x1, '\x00', 0xfd}, [0xff000000, 0xff000000, 0xff, 0xff], [0xff, 0xffffffff, 0xff000000, 0xffffff00], [0xffffffff, 0xff000000, 0xffffffff, 0xff], 0x604, 0x208}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x3, 0x8, 0x0, 0x0, "cf3523f6abea0ac59f38e4cee2d4e02b4433ada4369fbb16cedc9b2a2cbc46c2804dc8c41ce7aba48504d24e8bc4e7d304000000db2882bc827158e95f1a87e8"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) 47.703155812s ago: executing program 7 (id=778): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x62040200) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0xac}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000000c0)={[{@i_version}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x5707}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 47.08377823s ago: executing program 6 (id=782): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/131, 0x83}], 0x1, 0x9, 0xe9) read$FUSE(0xffffffffffffffff, &(0x7f0000002740)={0x2020}, 0x2020) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b0000850000002300000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r3, r4, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000002c0)={r5, r2, 0x4, r3}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') read$FUSE(r7, &(0x7f0000000340)={0x2020}, 0xcb0a) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f00000000c0)=0x1) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00A\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r9}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x28}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) 46.263620249s ago: executing program 6 (id=783): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x30000, 0x1, 0x7}) close_range(r0, 0xffffffffffffffff, 0x0) 45.387766764s ago: executing program 34 (id=783): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x30000, 0x1, 0x7}) close_range(r0, 0xffffffffffffffff, 0x0) 32.580190009s ago: executing program 35 (id=778): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x62040200) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0xac}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000000c0)={[{@i_version}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x5707}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 20.840172403s ago: executing program 4 (id=823): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)={0x40, 0x15, 0x4, "3b3359b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x40, 0xd, 0x4, "fef890a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c40)={0x2c, &(0x7f0000000980)={0x20, 0x10, 0x4, "12d6e82d"}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 17.645197817s ago: executing program 1 (id=829): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019c80)=""/102400, 0x19000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0xf0, 0x67) 14.27480255s ago: executing program 1 (id=830): r0 = socket(0x10, 0x3, 0x0) recvmsg$unix(r0, 0x0, 0x341473322e8e8e07) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x8000, 0x0, 0x0, 0xfff}, 0x10) write(r0, &(0x7f0000000000)="1800000016005f0214fffffffffbff0000000000000000", 0x17) recvmmsg$unix(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20, 0x0) 14.14057138s ago: executing program 4 (id=832): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x30000, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 13.89649407s ago: executing program 4 (id=833): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x43, 0x0, 0x0) write$tun(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="00006558ffffffffffffaaaaaaaaaaaa88a854018100340086dd6900001012082c"], 0x4a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x0, 0x300) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="21032abd7000fbdbdf2501000000100002800c000180080001000700000004000180"], 0x28}, 0x1, 0x0, 0x0, 0x20040815}, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r4], 0x1c}}, 0x20044050) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002140)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6000841}, 0x4008000) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) 13.116629769s ago: executing program 0 (id=834): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) sched_setattr(r1, &(0x7f0000001200)={0x38, 0x0, 0x10000028, 0x8f7, 0x3, 0x100, 0x7, 0x9, 0x0, 0x7fff}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r3, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40, 0x0) 11.734492171s ago: executing program 4 (id=835): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6465636f6d706f73652c6e6f626172726965722c6e6c733d6b6f69382d752c008c52757b"], 0x1, 0x5c8, &(0x7f00000006c0)="$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") syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x206420, 0x0, 0x7, 0x0, &(0x7f0000006380)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r1, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040), 0x400002, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x40040) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) stat(&(0x7f0000000500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) 10.913903905s ago: executing program 2 (id=836): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) r6 = fsmount(r0, 0x1, 0xe) fchdir(r6) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r5}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) pread64(0xffffffffffffffff, &(0x7f0000002240)=""/131, 0x83, 0xe5d7) 10.608160753s ago: executing program 0 (id=837): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) r6 = fsmount(r0, 0x1, 0xe) fchdir(r6) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r5}, 0x18) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r7, &(0x7f0000002240)=""/131, 0x83, 0xe5d7) 10.598129947s ago: executing program 4 (id=838): openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x5, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x8, 0x9, 0x6, 0x6, 0x7, 0x0}) r2 = socket$inet6(0xa, 0x5, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000340)={r5, 0x101, 0x3, 0x0, 0x0, [], [0x0, 0x7, 0x0, 0xfffffffc], [0x0, 0x80000006, 0x2], [0x5, 0x0, 0x1, 0x5]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x5a, @dev={0xfe, 0x80, '\x00', 0x24}, @empty, 0x7800, 0x7f, 0xfffffffc, 0xdc66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', r7, 0x0, 0x0, 0x1, 0x0, 0xd, @empty, @empty, 0x700, 0x0, 0xfffffffc}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getxattr(0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, 0x0, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000640)='ns/time_for_children\x00') 8.871292397s ago: executing program 2 (id=839): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000001fd8)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x10}, [@ldst={0x7, 0xff05, 0x0, 0x0, 0xa}]}, 0x0, 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1, 0x7}, 0x1c) socket$inet6(0xa, 0x80002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) pipe(&(0x7f00000000c0)) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x200488c9) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000180)={0x1, 0x8003}, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1, 0x0, 0x0, 0x400c400}], 0x1, 0xf0ff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) 8.849077355s ago: executing program 4 (id=840): r0 = timerfd_create(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) listen(0xffffffffffffffff, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x401, r4, 0x0, 0x100000000000000}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) syz_emit_ethernet(0x42, &(0x7f0000000380)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x0, 0x0, @void}}}}}}}}, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) r5 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000180)={0x3}) clock_adjtime(0x0, &(0x7f0000000000)={0x3fe, 0xf6d, 0x0, 0x4000000000001, 0x7ffffffe, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0xcf2c, 0x0, 0x9, 0x5, 0x3, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0xb, 0x3, 0x8000000000005a, 0x3}) epoll_wait(r5, &(0x7f0000000100)=[{}], 0x1, 0x80000001) 7.959760032s ago: executing program 1 (id=841): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x43, 0x0, 0x0) write$tun(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="00006558ffffffffffffaaaaaaaaaaaa88a854018100340086dd6900001012082c"], 0x4a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x0, 0x300) syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="21032abd7000fbdbdf2501000000100002800c000180080001000700000004000180"], 0x28}, 0x1, 0x0, 0x0, 0x20040815}, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r4], 0x1c}}, 0x20044050) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r3) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002140)={0x1c, r8, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6000841}, 0x4008000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) 7.902390138s ago: executing program 2 (id=842): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)={0x40, 0x15, 0x4, "3b3359b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x40, 0xd, 0x4, "fef890a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c40)={0x2c, &(0x7f0000000980)={0x20, 0x10, 0x4, "12d6e82d"}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 7.055981648s ago: executing program 1 (id=843): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000c0000156080fbe3a3a6ea464bf098a5fc6221d60bc3bd8868bc5ced0497741b04e65b86eaec9abc6b10b99adc0713802132"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0xae}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001880)={0xffffffffffffffff, r4}, 0xc) 4.390397591s ago: executing program 0 (id=844): r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, r0, 0x0, 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000006940)={r2, 0x9, 0x8, 0x2, 0x3, [], [0x75a, 0xfffffffc, 0x4, 0x10000], [0x9b7, 0x87f, 0x5c, 0xc3c3], [0x8, 0x4, 0x3ff, 0x8000000000000000]}) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r6}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3020, 0x1000004, 0x13, r3, 0x100000000) 4.256381519s ago: executing program 0 (id=845): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) r6 = fsmount(r0, 0x1, 0xe) fchdir(r6) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r5}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) pread64(0xffffffffffffffff, &(0x7f0000002240)=""/131, 0x83, 0xe5d7) 4.11468886s ago: executing program 2 (id=846): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x800082, &(0x7f00000021c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES64, @ANYRES16=r0, @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x8, 0x4031022, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x40, 0xfff7bffe}}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f000000b040)={0x2020}, 0x2020) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000002240)={0x0, &(0x7f00000022c0)=0xffffffffffffffff, 0x0, 0x0, {0x17}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) sendmmsg$inet6(r3, &(0x7f0000001c00)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x5, @private1, 0x5}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="14", 0x1}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e20, 0x2db4, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1}, 0x1c, &(0x7f0000001b80)=[{&(0x7f0000000640)='\"', 0x1}], 0x1}}], 0x2, 0x200400c4) shutdown(r3, 0x1) open_by_handle_at(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0xfedff7fe) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 3.852132352s ago: executing program 1 (id=847): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.91648958s ago: executing program 0 (id=848): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6465636f6d706f73652c6e6f626172726965722c6e6c733d6b6f69382d752c008c52757b"], 0x1, 0x5c8, &(0x7f00000006c0)="$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") syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x206420, 0x0, 0x7, 0x0, &(0x7f0000006380)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r1, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040), 0x400002, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x40040) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) stat(&(0x7f0000000500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) 2.811166123s ago: executing program 2 (id=849): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r3 = fanotify_init(0x81, 0x40000) fanotify_mark(r3, 0x105, 0x40001032, r2, 0x0) read$FUSE(r3, &(0x7f0000002300)={0x2020}, 0x2020) 466.323438ms ago: executing program 2 (id=850): openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x5, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x8, 0x9, 0x6, 0x6, 0x7, 0x0}) r2 = socket$inet6(0xa, 0x5, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000340)={r5, 0x101, 0x3, 0x0, 0x0, [], [0x0, 0x7, 0x0, 0xfffffffc], [0x0, 0x80000006, 0x2], [0x5, 0x0, 0x1, 0x5]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x1, 0x0, 0xd, @empty, @empty, 0x700, 0x0, 0xfffffffc}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getxattr(0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, 0x0, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000640)='ns/time_for_children\x00') 16.137817ms ago: executing program 1 (id=851): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) fsmount(r0, 0x1, 0xe) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r5}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r6, &(0x7f0000002240)=""/131, 0x83, 0xe5d7) 0s ago: executing program 0 (id=852): openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) kernel console output (not intermixed with test programs): batadv_slave_1 [ 89.151122][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.186162][ T5624] veth1_vlan: entered promiscuous mode [ 89.196805][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.208189][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.218665][ T79] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.247572][ T79] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.257137][ T79] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.270139][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.282036][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.300324][ T79] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.309861][ T79] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.333505][ T79] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.388679][ T5619] veth0_vlan: entered promiscuous mode [ 89.498134][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.515399][ T5624] veth0_macvtap: entered promiscuous mode [ 89.524176][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.540551][ T5619] veth1_vlan: entered promiscuous mode [ 89.610772][ T5624] veth1_macvtap: entered promiscuous mode [ 89.728459][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.758338][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.835455][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.858222][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.877763][ T5872] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 89.901174][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.924373][ T5871] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 89.959912][ T5619] veth0_macvtap: entered promiscuous mode [ 89.971566][ T5836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.992252][ T5836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.019301][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.032062][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.044344][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.057609][ T5871] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 90.070686][ T5619] veth1_macvtap: entered promiscuous mode [ 90.101474][ T5836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.114152][ T5836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.161014][ T5836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.194019][ T5836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.306296][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.402316][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.491472][ T5836] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.513810][ T5836] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.606799][ T5836] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.633541][ T5836] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.699775][ T5836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.736720][ T5836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.778736][ T5883] loop4: detected capacity change from 0 to 512 [ 90.808980][ T5883] ======================================================= [ 90.808980][ T5883] WARNING: The mand mount option has been deprecated and [ 90.808980][ T5883] and is ignored by this kernel. Remove the mand [ 90.808980][ T5883] option from the mount to silence this warning. [ 90.808980][ T5883] ======================================================= [ 90.909504][ T5883] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 90.931853][ T5836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.967252][ T5836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.001000][ T5886] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.109883][ T5819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.142737][ T5819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.255451][ T5819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.302058][ T5819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.642094][ T49] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 92.661578][ T5916] overlayfs: missing 'workdir' [ 93.680998][ T5947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.31'. [ 93.746061][ T5951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.33'. [ 94.116108][ T5962] overlayfs: missing 'workdir' [ 94.526413][ T5972] loop4: detected capacity change from 0 to 128 [ 94.765598][ T5972] syz.4.40: attempt to access beyond end of device [ 94.765598][ T5972] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 94.861925][ T5972] syz.4.40: attempt to access beyond end of device [ 94.861925][ T5972] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 94.955800][ T5972] syz.4.40: attempt to access beyond end of device [ 94.955800][ T5972] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 95.611951][ T5972] syz.4.40: attempt to access beyond end of device [ 95.611951][ T5972] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 95.708345][ T5972] syz.4.40: attempt to access beyond end of device [ 95.708345][ T5972] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 95.787031][ T5972] syz.4.40: attempt to access beyond end of device [ 95.787031][ T5972] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 95.857229][ T5972] syz.4.40: attempt to access beyond end of device [ 95.857229][ T5972] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 95.904259][ T5972] syz.4.40: attempt to access beyond end of device [ 95.904259][ T5972] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 95.965794][ T5972] syz.4.40: attempt to access beyond end of device [ 95.965794][ T5972] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 96.039041][ T5972] syz.4.40: attempt to access beyond end of device [ 96.039041][ T5972] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 96.237770][ T5998] overlayfs: missing 'workdir' [ 96.631331][ T6013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.57'. [ 97.954790][ T6036] Zero length message leads to an empty skb [ 98.081363][ T6045] overlayfs: missing 'lowerdir' [ 98.558859][ T6060] loop3: detected capacity change from 0 to 512 [ 98.616371][ T6060] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 99.716307][ T137] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 99.937404][ T6075] loop0: detected capacity change from 0 to 512 [ 99.961744][ T6075] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 100.023619][ T6075] EXT4-fs (loop0): orphan cleanup on readonly fs [ 100.035236][ T6075] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 100.050338][ T6075] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 100.057263][ T6075] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.72: couldn't read orphan inode 26 (err -116) [ 100.069190][ T6075] loop0: lost filesystem error report for type 5 error -116 [ 100.072274][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 100.086759][ C0] EXT4-fs (loop0): initial error at time 1778874908: ext4_orphan_get:1402 [ 100.095321][ C0] EXT4-fs (loop0): last error at time 1778874908: ext4_orphan_get:1402 [ 100.113782][ T6075] EXT4-fs (loop0): Remounting filesystem read-only [ 100.142722][ T6075] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.681081][ T6084] netlink: 'syz.3.80': attribute type 10 has an invalid length. [ 101.122331][ T6096] overlayfs: missing 'lowerdir' [ 101.660607][ T6084] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.696053][ T5620] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.785223][ T6094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.84'. [ 101.833379][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.84'. [ 101.898155][ T6094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.84'. [ 101.939151][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.84'. [ 102.207228][ T6124] loop2: detected capacity change from 0 to 512 [ 102.239317][ T6124] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 102.754739][ T6129] Illegal XDP return value 158 on prog (id 11) dev N/A, expect packet loss! [ 103.329615][ T5914] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 103.590356][ T6152] overlayfs: missing 'lowerdir' [ 103.979375][ T6165] warning: `syz.1.106' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.211632][ T6187] loop1: detected capacity change from 0 to 512 [ 105.243146][ T6188] netlink: 'syz.5.113': attribute type 39 has an invalid length. [ 105.255118][ T6187] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 105.587817][ T6195] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 105.619021][ T6195] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 105.652638][ T6195] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 106.228662][ T5913] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 107.549075][ T6237] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 107.594221][ T6237] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 107.650005][ T6237] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 108.296262][ T6262] netlink: 'syz.4.144': attribute type 29 has an invalid length. [ 108.535593][ T6262] netlink: 'syz.4.144': attribute type 29 has an invalid length. [ 109.544700][ T6277] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 109.581037][ T6277] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 109.626381][ T6277] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 109.870504][ T6290] netlink: 132 bytes leftover after parsing attributes in process `syz.3.155'. [ 110.169278][ T6297] loop4: detected capacity change from 0 to 1024 [ 110.201526][ T6297] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.447971][ T6297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.465686][ T6306] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.160'. [ 110.529372][ T6306] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.160'. [ 112.216737][ T6332] netlink: 'syz.3.170': attribute type 39 has an invalid length. [ 112.757185][ T6353] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.180'. [ 112.810334][ T5628] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.193057][ T6367] netlink: 'syz.3.185': attribute type 29 has an invalid length. [ 113.204498][ T6363] netlink: 'syz.3.185': attribute type 29 has an invalid length. [ 113.335342][ T6363] netlink: 'syz.3.185': attribute type 29 has an invalid length. [ 114.197952][ T6382] netlink: 'syz.0.192': attribute type 39 has an invalid length. [ 115.124856][ T6402] loop1: detected capacity change from 0 to 1024 [ 115.141994][ T6402] EXT4-fs: Ignoring removed nomblk_io_submit option [ 115.244211][ T6404] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.196'. [ 115.296027][ T6402] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.621058][ T5626] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.672390][ T6433] netlink: 60 bytes leftover after parsing attributes in process `syz.5.205'. [ 116.711002][ T6433] netlink: 60 bytes leftover after parsing attributes in process `syz.5.205'. [ 116.742830][ T6440] netlink: 60 bytes leftover after parsing attributes in process `syz.4.208'. [ 116.752915][ T6433] netlink: 60 bytes leftover after parsing attributes in process `syz.5.205'. [ 116.766639][ T6440] netlink: 60 bytes leftover after parsing attributes in process `syz.4.208'. [ 116.795118][ T6438] loop3: detected capacity change from 0 to 512 [ 116.851771][ T6438] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 117.043221][ T6449] netlink: 14593 bytes leftover after parsing attributes in process `syz.5.212'. [ 117.078583][ T6448] netlink: 'syz.4.210': attribute type 29 has an invalid length. [ 117.134160][ T6454] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.214'. [ 117.143817][ T6452] netlink: 'syz.4.210': attribute type 29 has an invalid length. [ 117.298111][ T6179] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 118.912477][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 119.732237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 120.452578][ T6478] loop5: detected capacity change from 0 to 64 [ 120.464171][ T6478] bfs: Unknown parameter 'ÿ' [ 120.916192][ T6482] netlink: 16 bytes leftover after parsing attributes in process `syz.4.223'. [ 120.976383][ T6482] netlink: 108 bytes leftover after parsing attributes in process `syz.4.223'. [ 121.133925][ T6482] netlink: 16 bytes leftover after parsing attributes in process `syz.4.223'. [ 121.265811][ T6488] loop4: detected capacity change from 0 to 1024 [ 121.391235][ T6488] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 121.645596][ T6488] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 121.657493][ T6488] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 121.679101][ T6488] EXT4-fs (loop4): mount failed [ 124.421571][ T6503] loop5: detected capacity change from 0 to 32768 [ 124.428802][ T6503] btrfs: Deprecated parameter 'usebackuproot' [ 124.435069][ T6503] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 124.449727][ T6503] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.231 (6503) [ 124.468892][ T6503] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 124.479096][ T6503] BTRFS info (device loop5): using crc32c checksum algorithm [ 124.568768][ T137] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 124.585383][ T6503] BTRFS error (device loop5): failed to load root extent [ 124.592501][ T6503] BTRFS warning (device loop5): try to load backup roots slot 1 [ 124.600472][ T49] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 124.699897][ T6503] BTRFS warning (device loop5): couldn't read tree root [ 124.707050][ T6503] BTRFS warning (device loop5): try to load backup roots slot 2 [ 124.715494][ T137] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 124.755831][ T6517] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.232'. [ 124.766558][ T6503] BTRFS warning (device loop5): couldn't read tree root [ 124.773730][ T6503] BTRFS warning (device loop5): try to load backup roots slot 3 [ 124.821882][ T6503] BTRFS info (device loop5): rebuilding free space tree [ 124.858360][ T6503] BTRFS info (device loop5): checking UUID tree [ 124.865425][ T6503] BTRFS info (device loop5): enabling ssd optimizations [ 124.872463][ T6503] BTRFS info (device loop5): turning on async discard [ 124.880052][ T6503] BTRFS info (device loop5): enabling free space tree [ 124.886846][ T6503] BTRFS info (device loop5): force clearing of disk cache [ 124.894468][ T6503] BTRFS info (device loop5): enabling auto defrag [ 124.900885][ T6503] BTRFS info (device loop5): trying to use backup root at mount time [ 124.909024][ T6503] BTRFS info (device loop5): use lzo compression, level 1 [ 125.584166][ T5619] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 127.063496][ T6547] loop4: detected capacity change from 0 to 1024 [ 130.539925][ T6547] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 130.661146][ T6547] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 130.705294][ T6547] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 130.800037][ T6547] EXT4-fs (loop4): mount failed [ 130.910998][ T6558] loop5: detected capacity change from 0 to 128 [ 130.950696][ T6558] EXT4-fs: Ignoring removed nobh option [ 131.031220][ T6558] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.134634][ T6558] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 131.172881][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 131.380121][ T24] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 131.384789][ T5619] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.413896][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.447839][ T24] usb 4-1: Product: syz [ 131.464362][ T24] usb 4-1: Manufacturer: syz [ 131.486103][ T24] usb 4-1: SerialNumber: syz [ 131.630496][ T24] r8152-cfgselector 4-1: Unknown version 0x0000 [ 131.657378][ T24] r8152-cfgselector 4-1: config 0 descriptor?? [ 132.085740][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.095417][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.907347][ T803] r8152-cfgselector 4-1: USB disconnect, device number 2 [ 133.148490][ T6582] loop0: detected capacity change from 0 to 1024 [ 135.714271][ T6599] loop3: detected capacity change from 0 to 512 [ 135.780752][ T6599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.809925][ T6599] EXT4-fs error (device loop3): ext4_readdir:225: inode #2: comm syz.3.260: path (unknown): directory fails checksum at offset 0 [ 136.188759][ T5624] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.350435][ T6619] loop2: detected capacity change from 0 to 1024 [ 138.982821][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 139.960774][ T6656] loop3: detected capacity change from 0 to 512 [ 140.083798][ T6656] EXT4-fs (loop3): orphan cleanup on readonly fs [ 140.101166][ T6656] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 140.118516][ T6656] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 140.126705][ T6656] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.277: couldn't read orphan inode 26 (err -116) [ 140.138565][ T6656] loop3: lost filesystem error report for type 5 error -116 [ 140.142159][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 140.155940][ C0] EXT4-fs (loop3): initial error at time 1778874948: ext4_orphan_get:1402 [ 140.164509][ C0] EXT4-fs (loop3): last error at time 1778874948: ext4_orphan_get:1402 [ 140.817956][ T6656] EXT4-fs (loop3): Remounting filesystem read-only [ 140.827898][ T6656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 141.826824][ T5624] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.043907][ T6660] loop4: detected capacity change from 0 to 512 [ 142.145058][ T6660] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.248941][ T6660] EXT4-fs error (device loop4): ext4_readdir:225: inode #2: comm syz.4.279: path (unknown): directory fails checksum at offset 0 [ 142.422268][ T5760] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 142.519611][ T5628] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.615391][ T5760] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 142.649112][ T5760] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.680955][ T5760] usb 4-1: Product: syz [ 142.701219][ T5760] usb 4-1: Manufacturer: syz [ 142.727122][ T5760] usb 4-1: SerialNumber: syz [ 142.779522][ T5760] usb 4-1: config 0 descriptor?? [ 142.854514][ T5760] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 143.011964][ T6662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.280'. [ 143.119522][ T5760] usb 4-1: USB disconnect, device number 3 [ 143.239975][ T6658] loop2: detected capacity change from 0 to 32768 [ 143.422613][ T31] audit: type=1800 audit(1778874951.806:2): pid=6684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.278" name="bus" dev="loop2" ino=9 res=0 errno=0 [ 143.611820][ T6687] netlink: 16 bytes leftover after parsing attributes in process `syz.4.287'. [ 144.364777][ T6705] loop1: detected capacity change from 0 to 512 [ 147.254448][ T6705] EXT4-fs (loop1): orphan cleanup on readonly fs [ 147.262520][ T6705] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 147.278560][ T6705] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 147.285469][ T6705] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.293: couldn't read orphan inode 26 (err -116) [ 147.297266][ T6705] loop1: lost filesystem error report for type 5 error -116 [ 147.298484][ T6705] EXT4-fs (loop1): Remounting filesystem read-only [ 147.305838][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 147.305891][ C0] EXT4-fs (loop1): initial error at time 1778874955: ext4_orphan_get:1402 [ 147.305922][ C0] EXT4-fs (loop1): last error at time 1778874955: ext4_orphan_get:1402 [ 147.341119][ T6705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 147.710628][ T5626] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.827340][ T6715] loop0: detected capacity change from 0 to 512 [ 147.938721][ T6715] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.043140][ T6715] EXT4-fs error (device loop0): ext4_readdir:225: inode #2: comm syz.0.296: path (unknown): directory fails checksum at offset 0 [ 148.058313][ T6728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.304'. [ 148.352392][ T5620] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.717229][ T6752] loop5: detected capacity change from 0 to 64 [ 149.724382][ T6752] bfs: Unknown parameter 'ÿ' [ 149.969222][ T6759] netlink: 'syz.2.313': attribute type 39 has an invalid length. [ 150.651891][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.318'. [ 150.818737][ T6732] loop4: detected capacity change from 0 to 32768 [ 150.935312][ T31] audit: type=1800 audit(1778874959.326:3): pid=6732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.302" name="bus" dev="loop4" ino=9 res=0 errno=0 [ 151.732293][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 151.921468][ T9] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 151.969009][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.003856][ T9] usb 2-1: Product: syz [ 152.020795][ T9] usb 2-1: Manufacturer: syz [ 152.038158][ T9] usb 2-1: SerialNumber: syz [ 152.088010][ T9] r8152-cfgselector 2-1: Unknown version 0x0000 [ 152.107872][ T9] r8152-cfgselector 2-1: config 0 descriptor?? [ 152.107883][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 152.280813][ T6794] netlink: 'syz.4.330': attribute type 39 has an invalid length. [ 152.285638][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.322471][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 152.335263][ T24] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 152.349669][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.367874][ T24] usb 3-1: Product: syz [ 152.400357][ T24] usb 3-1: Manufacturer: syz [ 152.414169][ T24] usb 3-1: SerialNumber: syz [ 152.439455][ T24] usb 3-1: config 0 descriptor?? [ 152.451832][ T6799] veth1_to_bond: entered allmulticast mode [ 152.472776][ T24] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 152.696870][ T5760] r8152-cfgselector 2-1: USB disconnect, device number 2 [ 152.762999][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 152.775806][ T24] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 152.785357][ T24] usb 3-1: media controller created [ 152.808868][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 153.429715][ T6809] loop0: detected capacity change from 0 to 1024 [ 153.437576][ T6809] EXT4-fs: Ignoring removed nomblk_io_submit option [ 153.496520][ T6809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.637802][ T6806] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.645750][ T6806] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.780603][ T24] DVB: Unable to find symbol tda10046_attach() [ 153.796114][ T5620] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.819316][ T24] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 153.867522][ T24] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 154.139003][ T24] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 154.144286][ T6806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.207581][ T6806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.209983][ T24] usb 3-1: USB disconnect, device number 2 [ 154.757408][ T6813] loop5: detected capacity change from 0 to 32768 [ 154.921351][ T6796] veth1_to_bond: left allmulticast mode [ 154.968486][ T31] audit: type=1800 audit(1778874963.356:4): pid=6813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.335" name="bus" dev="loop5" ino=9 res=0 errno=0 [ 155.016456][ T1161] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.065029][ T1161] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.111602][ T6844] loop0: detected capacity change from 0 to 128 [ 155.121332][ T1161] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.171664][ T6844] EXT4-fs: Ignoring removed nobh option [ 155.184651][ T1161] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.272527][ T6844] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 155.299777][ T6844] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 155.609757][ T5620] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 155.772522][ T5621] Bluetooth: hci4: command tx timeout [ 156.525932][ T6867] loop5: detected capacity change from 0 to 1024 [ 156.535417][ T6867] EXT4-fs: Ignoring removed nomblk_io_submit option [ 156.575927][ T6867] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.906684][ T5619] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.251408][ T6884] veth1_to_bond: entered allmulticast mode [ 158.034181][ T6887] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.041934][ T6887] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.087194][ T6893] blktrace: Concurrent blktraces are not allowed on loop5 [ 159.374303][ T6887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.411784][ T6887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.424253][ T6898] loop4: detected capacity change from 0 to 128 [ 159.471733][ T6898] EXT4-fs: Ignoring removed nobh option [ 159.568135][ T6898] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 159.678577][ T6898] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 160.702396][ T5628] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 160.808891][ T6883] veth1_to_bond: left allmulticast mode [ 160.839452][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.884320][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.927217][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.975449][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.114078][ T6932] loop3: detected capacity change from 0 to 1024 [ 162.115305][ T6932] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.149742][ T6932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.632340][ T6947] loop0: detected capacity change from 0 to 128 [ 162.659341][ T6947] EXT4-fs: Ignoring removed nobh option [ 162.698217][ T6947] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 162.741671][ T6947] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 163.313565][ T6952] loop5: detected capacity change from 0 to 32768 [ 163.590233][ T6952] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 163.599538][ T6952] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 163.637546][ T5624] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.648452][ T5620] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 163.686442][ T6952] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 163.706536][ T5760] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 163.752117][ T5760] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 164.253320][ T5760] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 501ms [ 164.362815][ T5760] gfs2: fsid=syz:syz.0: jid=0: Done [ 164.365758][ T6961] veth1_to_bond: entered allmulticast mode [ 164.408458][ T6952] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 164.729997][ T6952] gfs2: fsid=syz:syz.0: found 1 quota changes [ 165.160020][ T6967] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.167759][ T6967] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.804214][ T6987] ucma_write: process 162 (syz.3.389) changed security contexts after opening file descriptor, this is not allowed. [ 166.430982][ T6967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.496679][ T6967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.759665][ T6969] loop2: detected capacity change from 0 to 32768 [ 167.071141][ T6992] loop4: detected capacity change from 0 to 64 [ 167.111438][ T6992] bfs: Unknown parameter 'ÿ' [ 167.447366][ T31] audit: type=1800 audit(1778874975.836:5): pid=6969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.384" name="bus" dev="loop2" ino=9 res=0 errno=0 [ 167.594472][ T6996] loop1: detected capacity change from 0 to 128 [ 167.603481][ T6996] EXT4-fs: Ignoring removed nobh option [ 167.679920][ T6996] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.726717][ T6996] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 167.943005][ T5626] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.742412][ T6958] veth1_to_bond: left allmulticast mode [ 169.012540][ T1161] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.228410][ T7007] loop2: detected capacity change from 0 to 1024 [ 169.235921][ T7007] EXT4-fs: Ignoring removed nomblk_io_submit option [ 169.395379][ T5819] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.415821][ T5819] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.436401][ T5819] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.451404][ T7007] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.757645][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.685048][ T7015] loop1: detected capacity change from 0 to 64 [ 170.691887][ T7015] bfs: Unknown parameter 'ÿ' [ 170.916484][ T7031] xt_l2tp: missing protocol rule (udp|l2tpip) [ 171.031197][ T7031] netlink: 20 bytes leftover after parsing attributes in process `syz.4.403'. [ 171.396246][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.407'. [ 172.729383][ T7045] loop0: detected capacity change from 0 to 64 [ 172.753754][ T7045] bfs: Unknown parameter 'ÿ' [ 173.398385][ T7058] netlink: 'syz.2.414': attribute type 39 has an invalid length. [ 173.519545][ T5635] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 174.760186][ T7064] loop3: detected capacity change from 0 to 1024 [ 174.767702][ T7064] EXT4-fs: Ignoring removed nomblk_io_submit option [ 175.341183][ T7064] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.611475][ T5624] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.364800][ T7081] blktrace: Concurrent blktraces are not allowed on loop5 [ 177.840003][ T7097] loop3: detected capacity change from 0 to 64 [ 177.860023][ T7097] bfs: Unknown parameter 'ÿ' [ 178.415711][ T7109] netlink: 'syz.1.428': attribute type 39 has an invalid length. [ 178.941038][ T7123] netlink: 'syz.1.434': attribute type 1 has an invalid length. [ 178.975910][ T7123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.434'. [ 180.107789][ T7115] loop4: detected capacity change from 0 to 32768 [ 180.139009][ T31] audit: type=1800 audit(1778874988.526:6): pid=7115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.431" name="bus" dev="loop4" ino=9 res=0 errno=0 [ 181.527135][ T7149] loop0: detected capacity change from 0 to 64 [ 181.546382][ T7149] bfs: Unknown parameter 'ÿ' [ 182.126063][ T7160] blktrace: Concurrent blktraces are not allowed on loop5 [ 182.247518][ T7162] netlink: 'syz.4.447': attribute type 39 has an invalid length. [ 183.016860][ T7171] loop5: detected capacity change from 0 to 64 [ 183.080255][ T7171] bfs: Unknown parameter 'ÿ' [ 183.120277][ T7182] blktrace: Concurrent blktraces are not allowed on loop5 [ 186.609119][ T7201] loop1: detected capacity change from 0 to 64 [ 186.639173][ T7201] bfs: Unknown parameter 'ÿ' [ 188.332212][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 188.519692][ T7218] syz.4.463 (7218): drop_caches: 2 [ 188.656310][ T7224] blktrace: Concurrent blktraces are not allowed on loop5 [ 190.498405][ T7234] blktrace: Concurrent blktraces are not allowed on loop5 [ 191.675770][ T7238] loop4: detected capacity change from 0 to 512 [ 191.752085][ T7238] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.742478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 193.560525][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.574172][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.865112][ T5628] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.719727][ T7265] syz.4.481 (7265): drop_caches: 2 [ 196.833152][ T7282] blktrace: Concurrent blktraces are not allowed on loop5 [ 197.273893][ T5760] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 197.574687][ T7290] loop3: detected capacity change from 0 to 512 [ 197.646374][ T7290] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.488: corrupted in-inode xattr: overlapping e_value [ 197.667196][ T5760] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 197.674596][ T7290] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 197.680561][ T5760] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.711049][ T5760] usb 1-1: Product: syz [ 197.715619][ T5760] usb 1-1: Manufacturer: syz [ 197.720246][ T5760] usb 1-1: SerialNumber: syz [ 197.736241][ T7290] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.488: couldn't read orphan inode 15 (err -117) [ 197.743497][ T5760] usb 1-1: config 0 descriptor?? [ 197.748127][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 197.758862][ T5760] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 002 [ 197.760558][ C1] EXT4-fs (loop3): initial error at time 1778875006: ext4_iget_extra_inode:5128: inode 15 [ 197.760598][ C1] EXT4-fs (loop3): last error at time 1778875006: ext4_iget_extra_inode:5128: inode 15 [ 197.872242][ T7290] loop3: lost filesystem error report for type 5 error -117 [ 197.884574][ T7290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.987897][ T7290] overlayfs: upper fs needs to support d_type. [ 199.696769][ T5760] (null): failure reading functionality [ 200.053433][ T5760] i2c i2c-2: connected i2c-tiny-usb device [ 200.055175][ T7279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.106549][ T7279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.134267][ T5760] usb 1-1: USB disconnect, device number 2 [ 200.381383][ T5624] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 200.410433][ T5624] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 200.467307][ T7308] loop1: detected capacity change from 0 to 512 [ 200.532811][ T7308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.746835][ T7308] EXT4-fs error (device loop1): ext4_readdir:225: inode #2: comm syz.1.494: path (unknown): directory fails checksum at offset 0 [ 201.145189][ T7314] loop5: detected capacity change from 0 to 64 [ 201.182842][ T7314] bfs: Unknown parameter 'ÿ' [ 201.325233][ T5624] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.409757][ T5626] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.578385][ T7331] blktrace: Concurrent blktraces are not allowed on loop5 [ 203.599514][ T7332] loop0: detected capacity change from 0 to 1024 [ 204.410542][ T7332] loop0: detected capacity change from 0 to 4096 [ 204.534102][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 204.547939][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 204.557011][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 204.572547][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 204.582563][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 204.744497][ T7353] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 204.777067][ T7332] NILFS (loop0): corrupt root inode [ 205.060930][ T7357] loop4: detected capacity change from 0 to 1024 [ 205.361810][ T7363] loop1: detected capacity change from 0 to 512 [ 207.087441][ T5636] Bluetooth: hci1: command 0x0406 tx timeout [ 207.087476][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 207.093581][ T5636] Bluetooth: hci3: command 0x0406 tx timeout [ 207.093627][ T5636] Bluetooth: hci4: command 0x0406 tx timeout [ 207.093657][ T5636] Bluetooth: hci0: command 0x0406 tx timeout [ 207.093719][ T5636] Bluetooth: hci2: command tx timeout [ 207.241615][ T7363] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.407617][ T7363] EXT4-fs error (device loop1): ext4_readdir:225: inode #2: comm syz.1.510: path (unknown): directory fails checksum at offset 0 [ 207.608400][ T5626] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.838222][ T7390] blktrace: Concurrent blktraces are not allowed on loop5 [ 208.850235][ T7401] loop1: detected capacity change from 0 to 128 [ 208.895805][ T7403] loop0: detected capacity change from 0 to 1024 [ 208.976810][ T7401] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 209.067809][ T7401] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 209.135403][ T5625] Bluetooth: hci2: command tx timeout [ 210.272220][ T7419] loop5: detected capacity change from 0 to 64 [ 210.305897][ T7419] bfs: Unknown parameter 'ÿ' [ 210.519591][ T7416] loop0: detected capacity change from 0 to 1024 [ 210.540040][ T7415] loop2: detected capacity change from 0 to 1024 [ 210.607517][ T7416] EXT4-fs: Ignoring removed i_version option [ 210.975146][ T7415] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.312265][ T5625] Bluetooth: hci2: command tx timeout [ 212.917863][ T7430] loop5: detected capacity change from 0 to 64 [ 212.981689][ T7430] bfs: Unknown parameter 'ÿ' [ 213.093177][ T7444] blktrace: Concurrent blktraces are not allowed on loop5 [ 213.434761][ T5625] Bluetooth: hci2: command tx timeout [ 213.962368][ T5760] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 214.122836][ T5760] usb 2-1: Using ep0 maxpacket: 32 [ 214.156779][ T5760] usb 2-1: config 0 has an invalid interface number: 14 but max is 0 [ 214.196921][ T7346] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.227042][ T5760] usb 2-1: config 0 has no interface number 0 [ 214.243560][ T7346] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.279467][ T5760] usb 2-1: config 0 interface 14 has no altsetting 0 [ 214.281420][ T7346] bridge_slave_0: entered allmulticast mode [ 214.330286][ T5760] usb 2-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10 [ 214.533583][ T5760] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.745622][ T7346] bridge_slave_0: entered promiscuous mode [ 214.746316][ T7460] loop0: detected capacity change from 0 to 256 [ 214.780797][ T5760] usb 2-1: Product: syz [ 214.791922][ T5760] usb 2-1: Manufacturer: syz [ 214.794800][ T7346] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.798855][ T7460] vfat: Bad value for 'dmask' [ 214.876145][ T5760] usb 2-1: SerialNumber: syz [ 214.900398][ T7346] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.918219][ T5760] usb 2-1: config 0 descriptor?? [ 214.939851][ T7346] bridge_slave_1: entered allmulticast mode [ 214.986748][ T7346] bridge_slave_1: entered promiscuous mode [ 215.382502][ T7465] loop0: detected capacity change from 0 to 512 [ 215.393815][ T7465] EXT4-fs: Ignoring removed mblk_io_submit option [ 216.065349][ T7465] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 216.109464][ T7465] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.537: bg 0: block 384: padding at end of block bitmap is not set [ 216.124367][ T7465] loop0: lost filesystem error report for type 5 error -117 [ 216.126976][ T7465] EXT4-fs (loop0): Remounting filesystem read-only [ 216.134531][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 216.134556][ C1] EXT4-fs (loop0): initial error at time 1778875024: ext4_validate_block_bitmap:441 [ 216.134585][ C1] EXT4-fs (loop0): last error at time 1778875024: ext4_validate_block_bitmap:441 [ 216.171506][ T7465] EXT4-fs (loop0): 1 truncate cleaned up [ 216.190442][ T7465] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.487116][ T7346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.517849][ T5620] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.519456][ T7346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.660257][ T7471] loop4: detected capacity change from 0 to 128 [ 216.694140][ T7471] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 217.112829][ T7474] loop0: detected capacity change from 0 to 64 [ 217.346602][ T7471] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 217.449646][ T5760] usb-storage 2-1:0.14: USB Mass Storage device detected [ 217.497137][ T5760] usb-storage 2-1:0.14: Quirks match for vid 04b3 pid 4001: 2000 [ 217.497196][ T7346] team0: Port device team_slave_0 added [ 218.108651][ T7346] team0: Port device team_slave_1 added [ 218.114069][ T5760] usb 2-1: USB disconnect, device number 3 [ 218.310902][ T7346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.364431][ T7346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.411955][ T7346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.448362][ T7346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.455530][ T7346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.511506][ T7346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.754716][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.883069][ T7346] hsr_slave_0: entered promiscuous mode [ 218.914658][ T7346] hsr_slave_1: entered promiscuous mode [ 218.927145][ T7492] loop0: detected capacity change from 0 to 128 [ 218.943969][ T7346] debugfs: 'hsr0' already exists in 'hsr' [ 218.962398][ T7346] Cannot create hsr debugfs directory [ 218.970431][ T7492] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 219.011040][ T7492] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 219.031665][ T7498] netlink: 'syz.5.549': attribute type 1 has an invalid length. [ 219.057864][ T7498] netlink: 12 bytes leftover after parsing attributes in process `syz.5.549'. [ 219.812843][ T7501] loop4: detected capacity change from 0 to 512 [ 219.819934][ T7501] EXT4-fs: inline encryption not supported [ 219.845038][ T7501] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.548: bad orphan inode 15 [ 219.855085][ T7501] loop4: lost filesystem error report for type 5 error -117 [ 219.855504][ T7501] ext4_test_bit(bit=14, block=5) = 0 [ 219.862838][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 219.862855][ C1] EXT4-fs (loop4): initial error at time 1778875028: ext4_orphan_get:1423 [ 219.862878][ C1] EXT4-fs (loop4): last error at time 1778875028: ext4_orphan_get:1423 [ 219.894494][ T7501] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.942218][ T7500] EXT4-fs error (device loop4): __ext4_new_inode:1079: comm syz.4.548: reserved inode found cleared - inode=1 [ 220.578327][ T5628] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.714942][ T7510] blktrace: Concurrent blktraces are not allowed on loop5 [ 221.016230][ T7511] loop1: detected capacity change from 0 to 1024 [ 221.928839][ T7534] loop0: detected capacity change from 0 to 64 [ 221.940815][ T7534] bfs: Unknown parameter 'ÿ' [ 222.163747][ T5752] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 222.237063][ T7538] loop5: detected capacity change from 0 to 256 [ 222.249602][ T7538] exfat: Deprecated parameter 'utf8' [ 222.263077][ T7538] exfat: Bad value for 'umask' [ 222.603061][ T7542] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5619] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[7542] [ 222.614533][ T5752] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 223.046348][ T5752] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.073136][ T7546] blktrace: Concurrent blktraces are not allowed on loop5 [ 223.590221][ T5752] usb 2-1: Product: syz [ 223.615440][ T5752] usb 2-1: Manufacturer: syz [ 223.648821][ T5752] usb 2-1: SerialNumber: syz [ 223.696551][ T5752] usb 2-1: config 0 descriptor?? [ 223.734307][ T5752] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 223.771970][ T7346] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 223.813113][ T7346] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 223.821506][ T7346] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 223.842828][ T7346] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 223.851718][ T7346] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 223.906833][ T7346] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 223.946279][ T5752] usb 2-1: USB disconnect, device number 4 [ 223.966029][ T7346] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 224.127587][ T7346] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 224.604803][ T7562] netlink: 'syz.5.566': attribute type 1 has an invalid length. [ 224.655529][ T7562] netlink: 12 bytes leftover after parsing attributes in process `syz.5.566'. [ 227.620371][ T7346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.795644][ T7346] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.835230][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.842435][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.338168][ T7582] blktrace: Concurrent blktraces are not allowed on loop5 [ 228.484540][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.491893][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.597120][ T7584] loop4: detected capacity change from 0 to 1024 [ 229.784213][ T7600] blktrace: Concurrent blktraces are not allowed on loop5 [ 231.267573][ T7614] loop4: detected capacity change from 0 to 512 [ 231.279854][ T7614] EXT4-fs: inline encryption not supported [ 231.434450][ T7614] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.578: bad orphan inode 15 [ 231.444624][ T7614] loop4: lost filesystem error report for type 5 error -117 [ 231.450095][ T7614] ext4_test_bit(bit=14, block=5) = 0 [ 231.457458][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 231.457480][ C1] EXT4-fs (loop4): initial error at time 1778875039: ext4_orphan_get:1423 [ 231.457509][ C1] EXT4-fs (loop4): last error at time 1778875039: ext4_orphan_get:1423 [ 231.500698][ T7614] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.587345][ T7614] EXT4-fs error (device loop4): __ext4_new_inode:1079: comm syz.4.578: reserved inode found cleared - inode=1 [ 232.082056][ T5628] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.170982][ T7621] loop2: detected capacity change from 0 to 256 [ 232.194000][ T7621] exfat: Deprecated parameter 'utf8' [ 232.216920][ T7621] exfat: Bad value for 'umask' [ 232.354485][ T7626] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5629] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[7626] [ 233.239645][ T7632] netlink: 'syz.5.583': attribute type 1 has an invalid length. [ 233.294675][ T7632] netlink: 12 bytes leftover after parsing attributes in process `syz.5.583'. [ 233.614027][ T7641] blktrace: Concurrent blktraces are not allowed on loop5 [ 234.977691][ T7346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.167556][ T7656] loop4: detected capacity change from 0 to 1024 [ 235.250753][ T7658] blktrace: Concurrent blktraces are not allowed on loop5 [ 235.937628][ T5642] Bluetooth: hci1: unexpected event for opcode 0x0c7d [ 236.262496][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 238.878050][ T31] audit: type=1326 audit(1778875047.266:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.4.595" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6240b9ce59 code=0x7ffc0000 [ 239.023770][ T31] audit: type=1326 audit(1778875047.316:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.4.595" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6240b9ce59 code=0x7ffc0000 [ 239.103098][ T31] audit: type=1326 audit(1778875047.326:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.4.595" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6240b9ce59 code=0x7ffc0000 [ 239.135542][ T31] audit: type=1326 audit(1778875047.346:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.4.595" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f6240b9ce59 code=0x7ffc0000 [ 239.168114][ T31] audit: type=1326 audit(1778875047.346:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.4.595" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6240b9ce59 code=0x7ffc0000 [ 239.201044][ T31] audit: type=1326 audit(1778875047.346:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.4.595" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6240b9ce59 code=0x7ffc0000 [ 239.225453][ T7346] veth0_vlan: entered promiscuous mode [ 239.234734][ T31] audit: type=1326 audit(1778875047.346:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.4.595" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6240b9ce59 code=0x7ffc0000 [ 239.285092][ T7346] veth1_vlan: entered promiscuous mode [ 239.304340][ T31] audit: type=1326 audit(1778875047.346:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.4.595" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6240b9ce59 code=0x7ffc0000 [ 239.322255][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 239.330314][ T31] audit: type=1326 audit(1778875047.346:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.4.595" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6240b9ce59 code=0x7ffc0000 [ 239.363593][ T31] audit: type=1326 audit(1778875047.386:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.4.595" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f6240b9ce59 code=0x7ffc0000 [ 239.427468][ T7346] veth0_macvtap: entered promiscuous mode [ 239.442029][ T7346] veth1_macvtap: entered promiscuous mode [ 239.473907][ T7346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.494365][ T7346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.519806][ T137] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.545656][ T137] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.563713][ T803] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 239.570740][ T137] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.573257][ T5773] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 239.586731][ T137] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.679254][ T5819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.695975][ T5819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.733572][ T803] usb 3-1: Using ep0 maxpacket: 32 [ 239.749007][ T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.757197][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 239.772584][ T5773] usb 2-1: unable to get BOS descriptor or descriptor too short [ 239.786460][ T9] usb 6-1: config 63 has an invalid interface number: 66 but max is 0 [ 239.796071][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.804735][ T5773] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 239.813836][ T803] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 239.823137][ T9] usb 6-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 239.833953][ T803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.842033][ T5773] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 239.853532][ T9] usb 6-1: config 63 has no interface number 0 [ 239.859765][ T803] usb 3-1: Product: syz [ 239.864691][ T9] usb 6-1: config 63 interface 66 has no altsetting 0 [ 239.871514][ T5773] usb 2-1: config 63 has no interface number 0 [ 239.877932][ T803] usb 3-1: Manufacturer: syz [ 239.882740][ T803] usb 3-1: SerialNumber: syz [ 239.892496][ T5773] usb 2-1: config 63 interface 66 has no altsetting 0 [ 239.901860][ T9] usb 6-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 239.912903][ T7691] blktrace: Concurrent blktraces are not allowed on loop5 [ 239.921466][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.931026][ T803] usb 3-1: config 0 descriptor?? [ 239.936541][ T9] usb 6-1: Product: syz [ 239.943006][ T5773] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 239.956161][ T9] usb 6-1: Manufacturer: syz [ 239.960871][ T5773] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.969042][ T9] usb 6-1: SerialNumber: syz [ 239.973783][ T5773] usb 2-1: Product: syz [ 239.979789][ T5773] usb 2-1: Manufacturer: syz [ 239.994160][ T5773] usb 2-1: SerialNumber: syz [ 240.727943][ T9] uvcvideo 6-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 240.743526][ T803] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 003 [ 240.765204][ T5773] uvcvideo 2-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 240.776300][ T9] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 240.795845][ T5773] uvcvideo 2-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 240.817509][ T9] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 240.834189][ T5773] uvcvideo 2-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 240.859832][ T9] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 240.878714][ T5773] uvcvideo 2-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 240.897392][ T9] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 240.930924][ T5773] uvcvideo 2-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 240.947673][ T9] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 240.961078][ T9] uvcvideo 6-1:63.66: No streaming interface found for terminal 29. [ 240.969365][ T5773] uvcvideo 2-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 240.986838][ T9] uvcvideo 6-1:63.66: Entity type for entity Output 32773 was not initialized! [ 240.998539][ T5773] uvcvideo 2-1:63.66: No streaming interface found for terminal 29. [ 241.014316][ T5773] uvcvideo 2-1:63.66: Entity type for entity Output 32773 was not initialized! [ 241.043572][ T9] usb 6-1: USB disconnect, device number 2 [ 241.104188][ T5773] usb 2-1: USB disconnect, device number 5 [ 241.752559][ T7704] loop0: detected capacity change from 0 to 128 [ 241.769130][ T7704] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 241.830144][ T7704] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 242.242874][ T5773] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 242.552316][ T9] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 242.648475][ T803] usb 3-1: USB disconnect, device number 3 [ 243.095467][ T7721] loop1: detected capacity change from 0 to 64 [ 243.346341][ T7725] loop4: detected capacity change from 0 to 1024 [ 243.368605][ T7730] loop6: detected capacity change from 0 to 256 [ 243.411983][ T7730] exfat: Deprecated parameter 'utf8' [ 243.433742][ T7730] exfat: Bad value for 'umask' [ 243.764913][ T5642] Bluetooth: hci5: unexpected event for opcode 0x042d [ 244.974077][ T7751] blktrace: Concurrent blktraces are not allowed on loop5 [ 245.748837][ T7754] loop0: detected capacity change from 0 to 256 [ 245.773228][ T7754] exfat: Deprecated parameter 'utf8' [ 245.778896][ T7754] exfat: Bad value for 'umask' [ 245.843060][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 246.277919][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 246.292429][ T5781] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 246.308488][ T9] usb 6-1: config 63 has an invalid interface number: 66 but max is 0 [ 246.353521][ T9] usb 6-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 246.377840][ T9] usb 6-1: config 63 has no interface number 0 [ 246.393279][ T9] usb 6-1: config 63 interface 66 has no altsetting 0 [ 246.406840][ T9] usb 6-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 246.421065][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.432762][ T9] usb 6-1: Product: syz [ 246.439846][ T9] usb 6-1: Manufacturer: syz [ 246.455595][ T9] usb 6-1: SerialNumber: syz [ 246.472207][ T5781] usb 7-1: Using ep0 maxpacket: 32 [ 246.509190][ T5781] usb 7-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 246.542642][ T5781] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.561758][ T5781] usb 7-1: Product: syz [ 246.571914][ T5781] usb 7-1: Manufacturer: syz [ 246.587639][ T5781] usb 7-1: SerialNumber: syz [ 246.617266][ T5781] usb 7-1: config 0 descriptor?? [ 246.763801][ T7774] loop1: detected capacity change from 0 to 512 [ 246.771365][ T7774] EXT4-fs: inline encryption not supported [ 247.202363][ T7774] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.625: bad orphan inode 15 [ 247.212498][ T7774] loop1: lost filesystem error report for type 5 error -117 [ 247.214261][ T7774] ext4_test_bit(bit=14, block=5) = 0 [ 247.227482][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 247.227509][ C1] EXT4-fs (loop1): initial error at time 1778875055: ext4_orphan_get:1423 [ 247.227538][ C1] EXT4-fs (loop1): last error at time 1778875055: ext4_orphan_get:1423 [ 247.267627][ T7774] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.395336][ T7774] EXT4-fs error (device loop1): __ext4_new_inode:1079: comm syz.1.625: reserved inode found cleared - inode=1 [ 247.640438][ T9] uvcvideo 6-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 247.675892][ T9] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 247.727057][ T5781] RobotFuzz Open Source InterFace, OSIF 7-1:0.0: version d4.15 found at bus 007 address 002 [ 247.753376][ T9] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 247.774039][ T5626] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.818575][ T9] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 248.356948][ T9] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 248.502589][ T9] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 248.782775][ T9] uvcvideo 6-1:63.66: No streaming interface found for terminal 29. [ 249.042744][ T7787] loop2: detected capacity change from 0 to 64 [ 249.049370][ T9] uvcvideo 6-1:63.66: Entity type for entity Output 32773 was not initialized! [ 249.150162][ T9] usb 6-1: USB disconnect, device number 4 [ 249.162894][ T5618] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 249.371473][ T5781] usb 7-1: USB disconnect, device number 2 [ 249.376054][ T5618] usb 2-1: unable to get BOS descriptor or descriptor too short [ 249.430327][ T5618] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 249.477196][ T5618] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 249.515563][ T5618] usb 2-1: config 63 has no interface number 0 [ 249.549893][ T5618] usb 2-1: config 63 interface 66 has no altsetting 0 [ 249.584956][ T5618] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 249.618529][ T5618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.646651][ T5618] usb 2-1: Product: syz [ 249.667763][ T5618] usb 2-1: Manufacturer: syz [ 249.691922][ T5618] usb 2-1: SerialNumber: syz [ 249.791553][ T7805] blktrace: Concurrent blktraces are not allowed on loop5 [ 249.949966][ T7809] loop5: detected capacity change from 0 to 512 [ 249.960642][ T7809] EXT4-fs: inline encryption not supported [ 250.770561][ T7809] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.636: bad orphan inode 15 [ 250.780633][ T7809] loop5: lost filesystem error report for type 5 error -117 [ 250.788211][ T7809] ext4_test_bit(bit=14, block=5) = 0 [ 250.795579][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 250.795603][ C1] EXT4-fs (loop5): initial error at time 1778875059: ext4_orphan_get:1423 [ 250.795632][ C1] EXT4-fs (loop5): last error at time 1778875059: ext4_orphan_get:1423 [ 250.826938][ T7809] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.870634][ T7808] EXT4-fs error (device loop5): __ext4_new_inode:1079: comm syz.5.636: reserved inode found cleared - inode=1 [ 251.420908][ T5619] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.495456][ T5618] uvcvideo 2-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 251.550114][ T5618] uvcvideo 2-1:63.66: No valid video chain found. [ 251.598578][ T5618] usb 2-1: USB disconnect, device number 7 [ 252.368189][ T7825] loop2: detected capacity change from 0 to 512 [ 252.436561][ T7825] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.641: corrupted in-inode xattr: overlapping e_value [ 252.461447][ T7825] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 252.462212][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 252.463535][ T7825] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.641: couldn't read orphan inode 15 (err -117) [ 252.471489][ C0] EXT4-fs (loop2): initial error at time 1778875060: ext4_iget_extra_inode:5128: inode 15 [ 252.499748][ C0] EXT4-fs (loop2): last error at time 1778875060: ext4_iget_extra_inode:5128: inode 15 [ 252.572945][ T7825] loop2: lost filesystem error report for type 5 error -117 [ 252.578143][ T7825] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.836240][ T7834] loop6: detected capacity change from 0 to 512 [ 252.850384][ T7836] loop4: detected capacity change from 0 to 64 [ 253.276401][ T7834] EXT4-fs: inline encryption not supported [ 253.372376][ T5781] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 253.443569][ T7834] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.642: bad orphan inode 15 [ 253.454303][ T7834] loop6: lost filesystem error report for type 5 error -117 [ 253.458014][ T7834] ext4_test_bit(bit=14, block=5) = 0 [ 253.465403][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 253.465424][ C1] EXT4-fs (loop6): initial error at time 1778875061: ext4_orphan_get:1423 [ 253.465452][ C1] EXT4-fs (loop6): last error at time 1778875061: ext4_orphan_get:1423 [ 253.511740][ T7834] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.546232][ T7834] EXT4-fs error (device loop6): __ext4_new_inode:1079: comm syz.6.642: reserved inode found cleared - inode=1 [ 253.572906][ T5781] usb 1-1: Using ep0 maxpacket: 32 [ 253.578596][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.584338][ T5781] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 253.659934][ T5781] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.700166][ T5781] usb 1-1: Product: syz [ 253.721710][ T5781] usb 1-1: Manufacturer: syz [ 253.739221][ T5781] usb 1-1: SerialNumber: syz [ 253.786587][ T7846] blktrace: Concurrent blktraces are not allowed on loop5 [ 253.804527][ T5781] usb 1-1: config 0 descriptor?? [ 254.501108][ T5781] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 003 [ 254.975882][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.987841][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.099362][ T7859] blktrace: Concurrent blktraces are not allowed on loop5 [ 257.334895][ T7844] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 257.444793][ T5781] usb 1-1: USB disconnect, device number 3 [ 257.527684][ T7868] netlink: 'syz.1.655': attribute type 39 has an invalid length. [ 257.615123][ T7873] loop2: detected capacity change from 0 to 128 [ 257.645086][ T7873] EXT4-fs: Ignoring removed nobh option [ 257.794903][ T7873] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 257.836467][ T7877] loop5: detected capacity change from 0 to 512 [ 257.862334][ T7873] ext4 filesystem being mounted at /113/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 257.894237][ T7877] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.660: corrupted in-inode xattr: overlapping e_value [ 257.917493][ T7877] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 257.918083][ T7877] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.660: couldn't read orphan inode 15 (err -117) [ 257.927382][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 257.927408][ C1] EXT4-fs (loop5): initial error at time 1778875066: ext4_iget_extra_inode:5128: inode 15 [ 257.927448][ C1] EXT4-fs (loop5): last error at time 1778875066: ext4_iget_extra_inode:5128: inode 15 [ 257.966451][ T7877] loop5: lost filesystem error report for type 5 error -117 [ 258.042462][ T7877] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.094000][ T7877] overlayfs: upper fs needs to support d_type. [ 258.100959][ T5629] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 258.121415][ T7877] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz.5.660: invalid fast symlink length 39 [ 258.319098][ T5619] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 258.390159][ T5619] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 258.616352][ T5619] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.938710][ T137] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.153849][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 259.643068][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 259.827997][ T9] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 259.839608][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.914024][ T9] usb 3-1: Product: syz [ 259.925115][ T9] usb 3-1: Manufacturer: syz [ 259.930370][ T9] usb 3-1: SerialNumber: syz [ 259.948447][ T7346] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.969623][ T9] usb 3-1: config 0 descriptor?? [ 260.020551][ T7902] loop1: detected capacity change from 0 to 128 [ 260.041687][ T7902] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 260.138131][ T7902] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 260.168334][ T137] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.227613][ T7904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.671'. [ 260.358792][ T9] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 004 [ 260.555059][ T7909] loop6: detected capacity change from 0 to 1024 [ 260.617541][ T7909] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 261.007577][ T7909] __quota_error: 192 callbacks suppressed [ 261.007610][ T7909] Quota error (device loop6): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 261.025209][ T7909] EXT4-fs warning (device loop6): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 261.048443][ T7909] EXT4-fs (loop6): mount failed [ 261.607397][ T137] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.717095][ T7917] loop1: detected capacity change from 0 to 128 [ 261.725816][ T7917] EXT4-fs: Ignoring removed nobh option [ 261.769123][ T7917] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 261.836055][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 261.846523][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 261.863186][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 261.879938][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 261.915975][ T137] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.929763][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 261.931525][ T7917] ext4 filesystem being mounted at /111/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 261.989244][ T9] usb 3-1: USB disconnect, device number 4 [ 263.671299][ T5626] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 263.956645][ T7935] loop2: detected capacity change from 0 to 64 [ 264.082575][ T5642] Bluetooth: hci0: command tx timeout [ 264.332515][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 264.492324][ T137] bridge_slave_1: left allmulticast mode [ 264.504870][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 264.517934][ T137] bridge_slave_1: left promiscuous mode [ 264.529199][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.551202][ T137] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.571876][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 264.601415][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 264.632927][ T137] bridge_slave_0: left allmulticast mode [ 264.643148][ T137] bridge_slave_0: left promiscuous mode [ 264.650332][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 264.668989][ T137] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.680223][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 264.736685][ T9] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 264.748984][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 264.772332][ T5781] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 264.779002][ T9] usb 1-1: Product: syz [ 264.799357][ T9] usb 1-1: Manufacturer: syz [ 264.817075][ T9] usb 1-1: SerialNumber: syz [ 264.858729][ T9] usb 1-1: config 0 descriptor?? [ 264.952259][ T5781] usb 5-1: Using ep0 maxpacket: 8 [ 264.992806][ T5781] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.011909][ T5781] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 265.024372][ T5781] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 265.035600][ T5781] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 265.046656][ T5781] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 265.067425][ T5781] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 265.078410][ T5781] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 265.087486][ T5781] usb 5-1: Product: syz [ 265.091764][ T5781] usb 5-1: Manufacturer: syz [ 265.095112][ T9] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 265.097011][ T5781] usb 5-1: SerialNumber: syz [ 265.134164][ T9] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 265.147928][ T5781] usb 5-1: config 0 descriptor?? [ 265.296281][ T9] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 265.321108][ T9] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 265.363981][ T9] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 265.420140][ T5781] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 265.450207][ T5781] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 265.497875][ T9] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 265.622655][ T5781] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 265.649976][ T5781] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 265.705138][ T9] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 265.707809][ T5781] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 265.757891][ T9] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 265.789829][ T137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.823258][ T9] usb 1-1: USB disconnect, device number 4 [ 265.828173][ T5781] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 265.847183][ T137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.887679][ T137] bond0 (unregistering): Released all slaves [ 266.033540][ T5781] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 266.129085][ T5781] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 266.162233][ T5642] Bluetooth: hci0: command tx timeout [ 266.223901][ T5781] usb 5-1: USB disconnect, device number 3 [ 266.502827][ T7970] netlink: 12 bytes leftover after parsing attributes in process `syz.6.686'. [ 266.515620][ T7972] loop1: detected capacity change from 0 to 128 [ 266.555275][ T7972] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 266.598205][ T7972] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 266.820368][ T7977] loop0: detected capacity change from 0 to 512 [ 266.827479][ T7977] EXT4-fs: inline encryption not supported [ 266.843928][ T7977] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.688: bad orphan inode 15 [ 266.853951][ T7977] loop0: lost filesystem error report for type 5 error -117 [ 266.856756][ T7977] ext4_test_bit(bit=14, block=5) = 0 [ 266.864088][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 266.864113][ C1] EXT4-fs (loop0): initial error at time 1778875075: ext4_orphan_get:1423 [ 266.864143][ C1] EXT4-fs (loop0): last error at time 1778875075: ext4_orphan_get:1423 [ 266.894988][ T7977] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.914361][ T7977] EXT4-fs error (device loop0): __ext4_new_inode:1079: comm syz.0.688: reserved inode found cleared - inode=1 [ 266.928368][ T7977] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 267.171625][ T7982] loop6: detected capacity change from 0 to 1024 [ 267.345214][ T7982] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 267.670699][ T5620] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.542374][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 269.563041][ T5642] Bluetooth: hci0: command tx timeout [ 269.657629][ T7982] Quota error (device loop6): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 269.668869][ T7982] EXT4-fs warning (device loop6): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 269.688774][ T7982] EXT4-fs (loop6): mount failed [ 270.734840][ T7998] sg_write: data in/out 12288/136 bytes for SCSI command 0x0-- guessing data in; [ 270.734840][ T7998] program syz.0.691 not setting count and/or reply_len properly [ 272.102644][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 272.512182][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 272.867748][ T5642] Bluetooth: hci0: command tx timeout [ 273.240298][ T137] hsr_slave_0: left promiscuous mode [ 273.263593][ T137] hsr_slave_1: left promiscuous mode [ 273.288096][ T137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.311655][ T137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.353265][ T137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.376508][ T137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.455542][ T137] veth1_macvtap: left promiscuous mode [ 273.480400][ T137] veth0_macvtap: left promiscuous mode [ 273.505054][ T137] veth1_vlan: left promiscuous mode [ 273.522804][ T137] veth0_vlan: left promiscuous mode [ 274.172225][ T8033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.700'. [ 274.598635][ T137] team0 (unregistering): Port device team_slave_1 removed [ 274.610336][ T8037] loop1: detected capacity change from 0 to 128 [ 274.627631][ T8037] EXT4-fs: Ignoring removed nobh option [ 274.658648][ T8037] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 274.689523][ T137] team0 (unregistering): Port device team_slave_0 removed [ 274.786809][ T8037] ext4 filesystem being mounted at /116/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 274.806434][ T8043] loop4: detected capacity change from 0 to 512 [ 274.860307][ T8043] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 274.906872][ T8043] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 274.951080][ T8043] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.703: Failed to acquire dquot type 1 [ 275.003410][ T5626] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 275.018526][ T8043] loop4: lost filesystem error report for type 5 error -117 [ 275.020406][ T8043] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 275.027795][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 275.027817][ C1] EXT4-fs (loop4): last error at time 1778875083: ext4_acquire_dquot:7034 [ 275.084068][ T8043] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 275.094722][ T8043] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.703: Failed to acquire dquot type 1 [ 275.108831][ T8043] loop4: lost filesystem error report for type 5 error -117 [ 275.141499][ T8043] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.703: bg 0: block 248: padding at end of block bitmap is not set [ 275.168368][ T8043] loop4: lost filesystem error report for type 5 error -117 [ 275.168900][ T8043] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 275.186843][ T8043] loop4: lost filesystem error report for type 5 error -117 [ 275.188890][ T8043] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 275.209240][ T8043] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 275.219898][ T8043] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.703: Failed to acquire dquot type 1 [ 275.255363][ T8043] loop4: lost filesystem error report for type 5 error -117 [ 275.264870][ T8043] EXT4-fs (loop4): 1 orphan inode deleted [ 275.305611][ T8043] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.332309][ T8043] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.822685][ T8054] loop0: detected capacity change from 0 to 1024 [ 275.856016][ T8054] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 275.878711][ T5628] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.017863][ T8054] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 276.029195][ T8054] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 276.046452][ T8054] EXT4-fs (loop0): mount failed [ 276.382963][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 278.563358][ T5780] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 279.283709][ T5780] usb 5-1: Using ep0 maxpacket: 32 [ 279.318518][ T5780] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 279.358649][ T5780] usb 5-1: config 0 has no interface number 0 [ 279.370763][ T8078] netlink: 20 bytes leftover after parsing attributes in process `syz.1.712'. [ 279.382384][ T5780] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 279.419198][ T5780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.452600][ T5780] usb 5-1: Product: syz [ 279.480335][ T5780] usb 5-1: Manufacturer: syz [ 279.522644][ T5780] usb 5-1: SerialNumber: syz [ 279.563969][ T5780] usb 5-1: config 0 descriptor?? [ 279.921238][ T8095] loop1: detected capacity change from 0 to 128 [ 279.945648][ T8095] EXT4-fs: Ignoring removed nobh option [ 280.017014][ T5780] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 280.026303][ T8095] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 280.047171][ T8095] ext4 filesystem being mounted at /120/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 280.114474][ T5780] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 280.233264][ T7915] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.320765][ T7915] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.409426][ T7915] bridge_slave_0: entered allmulticast mode [ 280.416856][ T5781] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 280.447703][ T7915] bridge_slave_0: entered promiscuous mode [ 280.457017][ T7915] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.471068][ T7915] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.485384][ T7915] bridge_slave_1: entered allmulticast mode [ 280.518148][ T5626] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 280.527186][ T7915] bridge_slave_1: entered promiscuous mode [ 280.640525][ T8108] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 280.656704][ T5781] usb 3-1: Using ep0 maxpacket: 32 [ 280.693294][ T7915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.697042][ T5781] usb 3-1: config 0 has an invalid interface number: 14 but max is 0 [ 280.766466][ T5781] usb 3-1: config 0 has no interface number 0 [ 280.770332][ T7915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.794134][ T5781] usb 3-1: config 0 interface 14 has no altsetting 0 [ 280.839827][ T5781] usb 3-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10 [ 280.876828][ T5781] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.909799][ T5781] usb 3-1: Product: syz [ 280.923182][ T5781] usb 3-1: Manufacturer: syz [ 280.936865][ T5781] usb 3-1: SerialNumber: syz [ 280.983740][ T5781] usb 3-1: config 0 descriptor?? [ 281.018756][ T7915] team0: Port device team_slave_0 added [ 281.051183][ T7915] team0: Port device team_slave_1 added [ 281.112419][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 281.159800][ T7915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.167093][ T7915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.195371][ T7915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.222321][ T7915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.234104][ T7915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.267148][ T7915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.282637][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 281.289933][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.317808][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 281.342281][ T5618] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 281.361083][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 281.389823][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.410576][ T24] usb 2-1: Product: syz [ 281.423451][ T24] usb 2-1: Manufacturer: syz [ 281.433676][ T24] usb 2-1: SerialNumber: syz [ 281.484180][ T24] usb 2-1: 0:2 : does not exist [ 281.502821][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 281.512387][ T5618] usb 7-1: Using ep0 maxpacket: 8 [ 281.519633][ T5618] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.525419][ T7915] hsr_slave_0: entered promiscuous mode [ 281.538017][ T7915] hsr_slave_1: entered promiscuous mode [ 281.545098][ T7915] debugfs: 'hsr0' already exists in 'hsr' [ 281.547036][ T5618] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 281.551089][ T7915] Cannot create hsr debugfs directory [ 281.569667][ T5618] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 281.587170][ T5618] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 281.597988][ T5618] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 281.670908][ T5618] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 281.682452][ T5618] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 281.690406][ T24] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 281.692084][ T5618] usb 7-1: Product: syz [ 281.702760][ T5618] usb 7-1: Manufacturer: syz [ 281.709462][ T5618] usb 7-1: SerialNumber: syz [ 281.758637][ T5618] usb 7-1: config 0 descriptor?? [ 281.801945][ T5780] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32 [ 281.822966][ T5780] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 281.911698][ T5780] usb 5-1: USB disconnect, device number 4 [ 282.518623][ T5618] radio-si470x 7-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 282.616303][ T5618] radio-si470x 7-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 282.667860][ T5618] radio-si470x 7-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 282.691967][ T5618] radio-si470x 7-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 282.757901][ T5618] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -5 [ 282.900391][ T5618] usb 7-1: USB disconnect, device number 3 [ 283.573396][ T24] usb 2-1: USB disconnect, device number 8 [ 283.782165][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 285.781691][ T5781] usb-storage 3-1:0.14: USB Mass Storage device detected [ 285.865139][ T5781] usb-storage 3-1:0.14: Quirks match for vid 04b3 pid 4001: 2000 [ 285.986469][ T8145] loop0: detected capacity change from 0 to 128 [ 285.999427][ T8145] EXT4-fs: Ignoring removed nobh option [ 286.015099][ T5781] usb 3-1: USB disconnect, device number 5 [ 286.116835][ T8145] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 286.185333][ T8145] ext4 filesystem being mounted at /141/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 286.447807][ T30] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 286.776176][ T7934] udevd[7934]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 286.830544][ T30] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 286.885943][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.938881][ T30] usb 2-1: Product: syz [ 286.968494][ T30] usb 2-1: Manufacturer: syz [ 286.980719][ T30] usb 2-1: SerialNumber: syz [ 287.000542][ T5620] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 287.043336][ T30] r8152-cfgselector 2-1: Unknown version 0x0000 [ 287.093374][ T30] r8152-cfgselector 2-1: config 0 descriptor?? [ 287.214008][ T7915] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 287.265518][ T8163] loop2: detected capacity change from 0 to 256 [ 287.265548][ T7915] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 287.303530][ T8163] exfat: Deprecated parameter 'utf8' [ 287.314969][ T7915] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 287.332377][ T8163] exfat: Bad value for 'umask' [ 287.359102][ T7915] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 287.455976][ T7915] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 287.543308][ T5618] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 288.023680][ T7915] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 288.047180][ T5618] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.066969][ T7915] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 288.079955][ T5618] usb 7-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 288.095062][ T30] r8152-cfgselector 2-1: USB disconnect, device number 9 [ 288.116146][ T5618] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.125598][ T7915] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 288.146923][ T5618] usb 7-1: Product: syz [ 288.170238][ T5618] usb 7-1: Manufacturer: syz [ 288.197255][ T5618] usb 7-1: SerialNumber: syz [ 288.224768][ T5618] usb 7-1: config 0 descriptor?? [ 288.267699][ T5618] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 288.284890][ T5780] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 288.446887][ T7915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.462606][ T5780] usb 1-1: Using ep0 maxpacket: 16 [ 288.481003][ T5780] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 288.499393][ T5780] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.517041][ T5780] usb 1-1: config 0 descriptor?? [ 288.519892][ T7915] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.532099][ T5780] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 288.558538][ T6179] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.565868][ T6179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.586890][ T6179] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.595329][ T6179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.666750][ T803] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 288.697864][ T5281] 8021q: adding VLAN 0 to HW filter on device eth4 [ 288.867579][ T803] usb 3-1: unable to get BOS descriptor or descriptor too short [ 288.892215][ T803] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 288.922459][ T803] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 288.945465][ T803] usb 3-1: config 63 has no interface number 0 [ 288.963745][ T803] usb 3-1: config 63 interface 66 has no altsetting 0 [ 288.985111][ T803] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 289.002280][ T803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.023779][ T803] usb 3-1: Product: syz [ 289.035766][ T803] usb 3-1: Manufacturer: syz [ 289.054814][ T803] usb 3-1: SerialNumber: syz [ 289.055954][ T30] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 289.086812][ T5618] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 289.103135][ T5618] gspca_pac7302 7-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 289.161607][ T5618] usb 7-1: USB disconnect, device number 4 [ 289.263169][ T30] usb 2-1: Using ep0 maxpacket: 32 [ 289.290287][ T30] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 289.307863][ T803] uvcvideo 3-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 289.327415][ T803] uvcvideo 3-1:63.66: No valid video chain found. [ 289.339360][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.358046][ T803] usb 3-1: USB disconnect, device number 6 [ 289.378237][ T30] usb 2-1: Product: syz [ 289.394723][ T30] usb 2-1: Manufacturer: syz [ 289.415103][ T30] usb 2-1: SerialNumber: syz [ 289.449193][ T30] usb 2-1: config 0 descriptor?? [ 289.472069][ T30] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 289.852585][ T5752] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 290.032598][ T5752] usb 5-1: Using ep0 maxpacket: 32 [ 290.221940][ T5752] usb 5-1: config 0 has an invalid interface number: 14 but max is 0 [ 290.357863][ T5752] usb 5-1: config 0 has no interface number 0 [ 290.457237][ T5752] usb 5-1: config 0 interface 14 has no altsetting 0 [ 290.628482][ T5752] usb 5-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10 [ 290.663896][ T5752] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.677740][ T5752] usb 5-1: Product: syz [ 290.682116][ T5752] usb 5-1: Manufacturer: syz [ 290.692574][ T5752] usb 5-1: SerialNumber: syz [ 290.801512][ T5752] usb 5-1: config 0 descriptor?? [ 290.985224][ T30] gspca_ov534_9: reg_r err -71 [ 291.026006][ T7915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.061198][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 291.300674][ T30] gspca_ov534_9: Unknown sensor 0000 [ 291.303374][ T30] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 291.537570][ T5780] gspca_sonixj: reg_w err -71 [ 291.613829][ T5780] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 291.841865][ T30] usb 2-1: USB disconnect, device number 10 [ 291.851389][ T5780] usb 1-1: USB disconnect, device number 5 [ 294.573433][ T5752] usb-storage 5-1:0.14: USB Mass Storage device detected [ 294.633711][ T5752] usb-storage 5-1:0.14: Quirks match for vid 04b3 pid 4001: 2000 [ 294.852431][ T5625] Bluetooth: hci4: unexpected event for opcode 0x0c7d [ 294.995169][ T5752] usb 5-1: USB disconnect, device number 5 [ 295.083673][ T7915] veth0_vlan: entered promiscuous mode [ 295.482784][ T8277] fuse: Bad value for 'user_id' [ 295.483123][ T7915] veth1_vlan: entered promiscuous mode [ 295.637072][ T8277] fuse: Bad value for 'user_id' [ 296.219414][ T7915] veth0_macvtap: entered promiscuous mode [ 296.322864][ T5625] Bluetooth: hci0: command tx timeout [ 296.335852][ T7915] veth1_macvtap: entered promiscuous mode [ 296.421526][ T7915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.507344][ T7915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.750306][ T1161] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.761979][ T1161] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.788692][ T1161] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.809731][ T1161] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.686455][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.694454][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.866634][ T8305] fuse: Bad value for 'fd' [ 299.241688][ T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.292246][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.815342][ T8318] loop0: detected capacity change from 0 to 512 [ 299.853658][ T31] audit: type=1326 audit(1778875108.236:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz.7.670" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff82679ce59 code=0x0 [ 299.937680][ T8318] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.002316][ T8318] EXT4-fs error (device loop0): ext4_readdir:225: inode #2: comm syz.0.748: path (unknown): directory fails checksum at offset 0 [ 300.527990][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.7.670'. [ 300.663289][ T5620] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.018495][ T8339] netlink: 20 bytes leftover after parsing attributes in process `syz.0.769'. [ 301.117325][ T8341] fuse: Bad value for 'user_id' [ 301.137609][ T8341] fuse: Bad value for 'user_id' [ 301.192298][ T5780] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 301.411238][ T5780] usb 5-1: unable to get BOS descriptor or descriptor too short [ 301.447859][ T5780] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 301.464922][ T5744] block nbd64: NBD_DISCONNECT [ 301.478768][ T5780] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 301.505639][ T5780] usb 5-1: config 63 has no interface number 0 [ 301.520937][ T5780] usb 5-1: config 63 interface 66 has no altsetting 0 [ 301.581406][ T5780] usb 5-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 301.637776][ T5780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.670422][ T5780] usb 5-1: Product: syz [ 301.689587][ T5780] usb 5-1: Manufacturer: syz [ 301.709378][ T5780] usb 5-1: SerialNumber: syz [ 302.073461][ T5780] uvcvideo 5-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 302.115698][ T5780] uvcvideo 5-1:63.66: No valid video chain found. [ 302.165333][ T5780] usb 5-1: USB disconnect, device number 6 [ 302.215100][ T7934] udevd[7934]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 302.357812][ T8360] loop6: detected capacity change from 0 to 512 [ 304.120658][ T8360] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.775: corrupted in-inode xattr: overlapping e_value [ 304.152826][ T8360] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 304.155554][ T8360] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.775: couldn't read orphan inode 15 (err -117) [ 304.165089][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 304.165114][ C0] EXT4-fs (loop6): initial error at time 1778875112: ext4_iget_extra_inode:5128: inode 15 [ 304.165155][ C0] EXT4-fs (loop6): last error at time 1778875112: ext4_iget_extra_inode:5128: inode 15 [ 304.258723][ T8360] loop6: lost filesystem error report for type 5 error -117 [ 304.283388][ T8360] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.440390][ T8360] overlayfs: upper fs needs to support d_type. [ 304.614559][ T8373] loop0: detected capacity change from 0 to 512 [ 304.671917][ T8373] EXT4-fs: inline encryption not supported [ 304.685587][ T7346] EXT4-fs error (device loop6): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 304.715977][ T5780] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 304.729068][ T7346] EXT4-fs error (device loop6): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 304.765537][ T8376] fuse: Unknown parameter '0x0000000000000003' [ 304.786905][ T8373] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.779: bad orphan inode 15 [ 304.902235][ T5780] usb 2-1: Using ep0 maxpacket: 16 [ 304.912719][ T8373] loop0: lost filesystem error report for type 5 error -117 [ 304.913903][ T8373] ext4_test_bit(bit=14, block=5) = 0 [ 304.926586][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 304.926606][ C1] EXT4-fs (loop0): initial error at time 1778875113: ext4_orphan_get:1423 [ 304.926637][ C1] EXT4-fs (loop0): last error at time 1778875113: ext4_orphan_get:1423 [ 304.967899][ T5780] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.991884][ T5780] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 305.030871][ T5780] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 305.043101][ T8373] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.062513][ T5780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.071627][ T5780] usb 2-1: Product: syz [ 305.078788][ T5780] usb 2-1: Manufacturer: syz [ 305.084237][ T5780] usb 2-1: SerialNumber: syz [ 305.119347][ T5780] usb 2-1: 0:2 : does not exist [ 305.148309][ T8373] EXT4-fs error (device loop0): __ext4_new_inode:1079: comm syz.0.779: reserved inode found cleared - inode=1 [ 305.254546][ T8373] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 305.256438][ T7346] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.339937][ T5780] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 305.410396][ T5819] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.603846][ T5780] usb 2-1: USB disconnect, device number 11 [ 305.809098][ T7934] udevd[7934]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 305.944657][ T5819] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.238625][ T5819] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.556746][ T5819] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.612737][ T8400] fuse: Bad value for 'user_id' [ 306.643651][ T8400] fuse: Bad value for 'user_id' [ 306.774624][ T30] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 307.380927][ T5642] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 307.406348][ T5642] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 307.417103][ T5642] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 307.429187][ T5642] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 307.429455][ T30] usb 2-1: unable to get BOS descriptor or descriptor too short [ 307.449217][ T5642] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 307.545667][ T30] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 307.725685][ T30] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 307.736936][ T30] usb 2-1: config 63 has no interface number 0 [ 307.745577][ T30] usb 2-1: config 63 interface 66 has no altsetting 0 [ 307.759071][ T30] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 307.770617][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.788990][ T30] usb 2-1: Product: syz [ 307.815096][ T30] usb 2-1: Manufacturer: syz [ 308.154200][ T8419] loop7: detected capacity change from 0 to 512 [ 308.169100][ T8419] EXT4-fs: Ignoring removed i_version option [ 308.861077][ T30] usb 2-1: SerialNumber: syz [ 309.524822][ T5642] Bluetooth: hci2: command tx timeout [ 309.810817][ T8419] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.824208][ T8419] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.731505][ T30] usb 2-1: can't set config #63, error -71 [ 310.740975][ T30] usb 2-1: USB disconnect, device number 12 [ 310.963241][ T5780] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 311.060204][ T5819] bridge_slave_1: left allmulticast mode [ 311.082726][ T5819] bridge_slave_1: left promiscuous mode [ 311.167555][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.172929][ T5780] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 311.189923][ T5780] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.244920][ T5780] usb 3-1: Product: syz [ 311.277660][ T5780] usb 3-1: Manufacturer: syz [ 311.335029][ T5780] usb 3-1: SerialNumber: syz [ 311.339605][ T5819] bridge_slave_0: left allmulticast mode [ 311.589693][ T5819] bridge_slave_0: left promiscuous mode [ 311.593149][ T5780] usb 3-1: config 0 descriptor?? [ 311.604774][ T5642] Bluetooth: hci2: command tx timeout [ 311.647184][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.708166][ T5780] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 007 [ 312.068710][ T5780] (null): failure reading functionality [ 312.134323][ T5780] i2c i2c-2: connected i2c-tiny-usb device [ 312.367491][ T5780] usb 3-1: USB disconnect, device number 7 [ 312.375862][ T5620] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.731755][ T8445] loop1: detected capacity change from 0 to 512 [ 312.747641][ T8445] EXT4-fs: Ignoring removed i_version option [ 313.029149][ T8445] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.043288][ T8445] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.909810][ T5642] Bluetooth: hci2: command tx timeout [ 315.400087][ T8450] loop4: detected capacity change from 0 to 1024 [ 315.988500][ T5625] Bluetooth: hci2: command tx timeout [ 316.226845][ T5819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.254801][ T5819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.290268][ T5819] bond0 (unregistering): Released all slaves [ 316.406786][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.414499][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.128287][ T7915] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.633738][ T8479] fuse: Unknown parameter '0x0000000000000003' [ 319.711861][ T5626] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.787680][ T5642] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 319.801888][ T5642] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 319.827794][ T5642] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 319.841098][ T5642] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 319.851062][ T8486] fuse: Bad value for 'user_id' [ 319.857286][ T5642] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 319.905896][ T8486] fuse: Bad value for 'user_id' [ 320.000013][ T8492] loop0: detected capacity change from 0 to 128 [ 320.033470][ T8492] EXT4-fs: Ignoring removed nobh option [ 320.222657][ T8492] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 320.353816][ T5819] hsr_slave_0: left promiscuous mode [ 320.363630][ T8492] ext4 filesystem being mounted at /152/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 320.422307][ T5819] hsr_slave_1: left promiscuous mode [ 322.136046][ T5625] Bluetooth: hci6: command tx timeout [ 322.173398][ T5819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.769126][ T5819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.496457][ T5625] Bluetooth: hci6: command tx timeout [ 324.534083][ T5819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.555512][ T5819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.634748][ T5620] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 324.675122][ T5819] veth1_macvtap: left promiscuous mode [ 324.683828][ T5819] veth0_macvtap: left promiscuous mode [ 324.692539][ T5819] veth1_vlan: left promiscuous mode [ 324.701580][ T5819] veth0_vlan: left promiscuous mode [ 324.713062][ T8515] blktrace: Concurrent blktraces are not allowed on loop5 [ 325.053443][ T8523] loop0: detected capacity change from 0 to 128 [ 325.147265][ T8523] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 325.213125][ T8523] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 325.876428][ T8529] loop2: detected capacity change from 0 to 256 [ 326.018842][ T8529] FAT-fs (loop2): Directory bread(block 64) failed [ 326.042704][ T8529] FAT-fs (loop2): Directory bread(block 65) failed [ 326.083832][ T8529] FAT-fs (loop2): Directory bread(block 66) failed [ 326.102048][ T8529] FAT-fs (loop2): Directory bread(block 67) failed [ 326.156160][ T8529] FAT-fs (loop2): Directory bread(block 68) failed [ 326.174503][ T8531] loop0: detected capacity change from 0 to 128 [ 326.185869][ T8529] FAT-fs (loop2): Directory bread(block 69) failed [ 326.211144][ T8529] FAT-fs (loop2): Directory bread(block 70) failed [ 326.211608][ T8531] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 326.253421][ T8529] FAT-fs (loop2): Directory bread(block 71) failed [ 326.257095][ T8531] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 326.299203][ T8529] FAT-fs (loop2): Directory bread(block 72) failed [ 326.322320][ T8529] FAT-fs (loop2): Directory bread(block 73) failed [ 326.562895][ T5625] Bluetooth: hci6: command tx timeout [ 326.572937][ T8529] netlink: 64 bytes leftover after parsing attributes in process `syz.2.811'. [ 327.013631][ T5819] team0 (unregistering): Port device team_slave_1 removed [ 327.099156][ T5819] team0 (unregistering): Port device team_slave_0 removed [ 327.120722][ T8537] loop0: detected capacity change from 0 to 256 [ 327.221206][ T8537] FAT-fs (loop0): Directory bread(block 64) failed [ 327.249419][ T8537] FAT-fs (loop0): Directory bread(block 65) failed [ 327.284913][ T8537] FAT-fs (loop0): Directory bread(block 66) failed [ 327.309675][ T8537] FAT-fs (loop0): Directory bread(block 67) failed [ 327.351089][ T8537] FAT-fs (loop0): Directory bread(block 68) failed [ 327.381873][ T8537] FAT-fs (loop0): Directory bread(block 69) failed [ 327.411360][ T8537] FAT-fs (loop0): Directory bread(block 70) failed [ 327.443443][ T8537] FAT-fs (loop0): Directory bread(block 71) failed [ 327.483813][ T8537] FAT-fs (loop0): Directory bread(block 72) failed [ 327.508089][ T8537] FAT-fs (loop0): Directory bread(block 73) failed [ 327.596101][ T8539] loop1: detected capacity change from 0 to 128 [ 327.624045][ T8539] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 327.694625][ T8539] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 328.387461][ T8549] fuse: Unknown parameter '0x0000000000000003' [ 330.334457][ T5625] Bluetooth: hci6: command tx timeout [ 330.917980][ T8572] binder_alloc: 8571: binder_alloc_buf, no vma [ 331.820483][ T8585] input: syz1 as /devices/virtual/input/input5 [ 331.921575][ T8588] blktrace: Concurrent blktraces are not allowed on loop5 [ 331.926085][ T79] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.984772][ T5618] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 332.278751][ T5618] usb 5-1: Using ep0 maxpacket: 32 [ 332.328175][ T5618] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 332.346946][ T5618] usb 5-1: config 0 has no interface number 0 [ 332.371348][ T5618] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 332.393323][ T5618] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.436998][ T5618] usb 5-1: Product: syz [ 332.475642][ T5618] usb 5-1: Manufacturer: syz [ 332.653855][ T5618] usb 5-1: SerialNumber: syz [ 332.772804][ T5618] usb 5-1: config 0 descriptor?? [ 335.104293][ T5618] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 335.136429][ T5618] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 337.517023][ T79] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.563190][ T8407] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.594062][ T8407] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.617724][ T8407] bridge_slave_0: entered allmulticast mode [ 337.632439][ T5618] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 337.664640][ T8407] bridge_slave_0: entered promiscuous mode [ 337.679515][ T5618] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 337.691937][ T8407] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.699231][ T31] audit: type=1326 audit(1778875146.076:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8614 comm="syz.0.831" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd15e39ce59 code=0x0 [ 337.732429][ T8407] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.735713][ T5618] usb 5-1: USB disconnect, device number 7 [ 337.754483][ T8407] bridge_slave_1: entered allmulticast mode [ 337.771134][ T8407] bridge_slave_1: entered promiscuous mode [ 337.883642][ T79] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.265633][ T8623] fuse: Bad value for 'user_id' [ 338.287569][ T8623] fuse: Bad value for 'user_id' [ 338.655479][ T8407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.777429][ T79] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.042811][ T8407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.301430][ T8637] loop4: detected capacity change from 0 to 1024 [ 341.287279][ T8407] team0: Port device team_slave_0 added [ 341.305932][ T8407] team0: Port device team_slave_1 added [ 341.351190][ T8407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.423870][ T8407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.525576][ T8644] blktrace: Concurrent blktraces are not allowed on loop5 [ 342.080347][ T8407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.367876][ T8407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.434151][ T8407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.601844][ T8407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.322968][ T8407] hsr_slave_0: entered promiscuous mode [ 343.603083][ T8407] hsr_slave_1: entered promiscuous mode [ 343.663295][ T8407] debugfs: 'hsr0' already exists in 'hsr' [ 343.676858][ T8407] Cannot create hsr debugfs directory [ 344.572823][ T5781] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 344.753595][ T5781] usb 3-1: Using ep0 maxpacket: 32 [ 344.784312][ T5781] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 344.795353][ T8482] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.802821][ T8482] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.810374][ T8482] bridge_slave_0: entered allmulticast mode [ 344.819704][ T8482] bridge_slave_0: entered promiscuous mode [ 344.822851][ T5781] usb 3-1: config 0 has no interface number 0 [ 344.930306][ T79] bridge_slave_1: left allmulticast mode [ 344.939583][ T79] bridge_slave_1: left promiscuous mode [ 344.954728][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.977770][ T79] bridge_slave_0: left allmulticast mode [ 344.992284][ T79] bridge_slave_0: left promiscuous mode [ 345.003034][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.067632][ T5781] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 345.081192][ T5781] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.089306][ T5781] usb 3-1: Product: syz [ 345.093741][ T5781] usb 3-1: Manufacturer: syz [ 345.098930][ T5781] usb 3-1: SerialNumber: syz [ 345.106703][ T5781] usb 3-1: config 0 descriptor?? [ 346.497227][ T5781] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 346.541689][ T5781] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 347.743327][ T5781] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 347.772525][ T5781] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 347.939758][ T8698] fuse: Bad value for 'user_id' [ 347.966980][ T8698] fuse: Bad value for 'user_id' [ 348.040011][ T5781] usb 3-1: USB disconnect, device number 8 [ 348.183032][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.197810][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.214776][ T79] bond0 (unregistering): Released all slaves [ 348.230927][ T8482] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.252680][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 348.277215][ T8482] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.296568][ T8482] bridge_slave_1: entered allmulticast mode [ 348.321721][ T8482] bridge_slave_1: entered promiscuous mode [ 348.449899][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 348.470516][ T10] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 348.530576][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.555120][ T10] usb 2-1: Product: syz [ 348.571281][ T10] usb 2-1: Manufacturer: syz [ 348.586379][ T10] usb 2-1: SerialNumber: syz [ 348.605588][ T10] usb 2-1: config 0 descriptor?? [ 348.630947][ T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 348.638285][ T8482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.711540][ T8482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.575463][ T8712] loop0: detected capacity change from 0 to 1024 [ 350.531944][ T10] gspca_ov534_9: reg_w failed -110 [ 351.472401][ T10] gspca_ov534_9: Unknown sensor 0000 [ 351.473150][ T10] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 351.655631][ T8482] team0: Port device team_slave_0 added [ 351.719813][ T8482] team0: Port device team_slave_1 added [ 351.733194][ T10] usb 2-1: USB disconnect, device number 13 [ 351.977546][ T79] hsr_slave_0: left promiscuous mode [ 352.006440][ T79] hsr_slave_1: left promiscuous mode [ 352.053961][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.974089][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.401765][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.410935][ T37] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000016: 0000 [#1] SMP KASAN NOPTI [ 353.423115][ T37] KASAN: null-ptr-deref in range [0x00000000000000b0-0x00000000000000b7] [ 353.431546][ T37] CPU: 1 UID: 0 PID: 37 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 353.440839][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 353.442293][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.450918][ T37] Workqueue: bat_events batadv_bla_periodic_work [ 353.464348][ T37] RIP: 0010:arp_create+0xb1/0x980 [ 353.469387][ T37] Code: 89 4c 24 78 4a 89 04 21 e8 8c f7 a0 f7 44 89 b4 24 a0 00 00 00 89 9c 24 b0 00 00 00 49 8d bf b4 00 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 15 06 00 00 41 0f b7 9f b4 00 00 00 49 [ 353.488995][ T37] RSP: 0018:ffffc90000ad7720 EFLAGS: 00010213 [ 353.495244][ T37] RAX: 0000000000000016 RBX: 0000000000000000 RCX: ffff8880202edc40 [ 353.503212][ T37] RDX: 0000000000000000 RSI: 0000000000000806 RDI: 00000000000000b4 [ 353.511353][ T37] RBP: ffffc90000ad7840 R08: 0000000000000000 R09: 0000000000000000 [ 353.519320][ T37] R10: dffffc0000000000 R11: fffff5200015af20 R12: dffffc0000000000 [ 353.527288][ T37] R13: ffff88806501d0a0 R14: 0000000000000000 R15: 0000000000000000 [ 353.535259][ T37] FS: 0000000000000000(0000) GS:ffff88812538a000(0000) knlGS:0000000000000000 [ 353.544216][ T37] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 353.550902][ T37] CR2: 0000200000032000 CR3: 0000000022ee7000 CR4: 0000000000350ef0 [ 353.558868][ T37] Call Trace: [ 353.562142][ T37] [ 353.565064][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.570694][ T37] ? lockdep_hardirqs_on+0x7a/0x110 [ 353.575898][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.581527][ T37] ? irqentry_exit+0x218/0x760 [ 353.586290][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.591918][ T37] ? trace_irq_disable+0x3b/0x140 [ 353.596954][ T37] ? __pfx_arp_create+0x10/0x10 [ 353.601825][ T37] batadv_bla_send_claim+0x183/0xeb0 [ 353.607114][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.612759][ T37] ? __pfx_batadv_bla_send_claim+0x10/0x10 [ 353.618576][ T37] ? batadv_bla_periodic_work+0x5cb/0xae0 [ 353.624462][ T37] ? batadv_bla_periodic_work+0x5e5/0xae0 [ 353.630204][ T37] batadv_bla_periodic_work+0x654/0xae0 [ 353.635746][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.641387][ T37] ? batadv_bla_periodic_work+0x32e/0xae0 [ 353.647120][ T37] ? __pfx_batadv_bla_periodic_work+0x10/0x10 [ 353.653192][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.658827][ T37] ? process_scheduled_works+0xa70/0x1860 [ 353.664538][ T37] ? process_scheduled_works+0xa70/0x1860 [ 353.670253][ T37] process_scheduled_works+0xb5d/0x1860 [ 353.675792][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.681436][ T37] ? __pfx_process_scheduled_works+0x10/0x10 [ 353.687421][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.693055][ T37] ? assign_work+0x3d5/0x5e0 [ 353.697640][ T37] worker_thread+0xa53/0xfc0 [ 353.702224][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.707862][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.713501][ T37] kthread+0x389/0x470 [ 353.717567][ T37] ? __pfx_worker_thread+0x10/0x10 [ 353.722671][ T37] ? __pfx_kthread+0x10/0x10 [ 353.727266][ T37] ret_from_fork+0x514/0xb70 [ 353.731903][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 353.737017][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.742651][ T37] ? __switch_to+0xc79/0x1410 [ 353.747336][ T37] ? __pfx_kthread+0x10/0x10 [ 353.751928][ T37] ret_from_fork_asm+0x1a/0x30 [ 353.756709][ T37] [ 353.759717][ T37] Modules linked in: [ 353.764403][ T37] ---[ end trace 0000000000000000 ]--- [ 353.902287][ T37] RIP: 0010:arp_create+0xb1/0x980 [ 353.907431][ T37] Code: 89 4c 24 78 4a 89 04 21 e8 8c f7 a0 f7 44 89 b4 24 a0 00 00 00 89 9c 24 b0 00 00 00 49 8d bf b4 00 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 15 06 00 00 41 0f b7 9f b4 00 00 00 49 [ 353.943742][ T37] RSP: 0018:ffffc90000ad7720 EFLAGS: 00010213 [ 353.963109][ T37] RAX: 0000000000000016 RBX: 0000000000000000 RCX: ffff8880202edc40 [ 354.031451][ T37] RDX: 0000000000000000 RSI: 0000000000000806 RDI: 00000000000000b4 [ 354.093334][ T37] RBP: ffffc90000ad7840 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 354.139439][ T37] R10: dffffc0000000000 R11: fffff5200015af20 R12: dffffc0000000000 [ 354.154431][ T37] R13: ffff88806501d0a0 R14: 0000000000000000 R15: 0000000000000000 [ 354.172269][ T37] FS: 0000000000000000(0000) GS:ffff88812538a000(0000) knlGS:0000000000000000 [ 354.202201][ T37] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 354.212233][ T37] CR2: 0000200000032000 CR3: 0000000022ee7000 CR4: 0000000000350ef0 [ 354.242196][ T37] Kernel panic - not syncing: Fatal exception [ 354.248779][ T37] Kernel Offset: disabled [ 354.253103][ T37] Rebooting in 86400 seconds..