last executing test programs: 7m11.200311591s ago: executing program 0 (id=1299): epoll_create1(0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000180)={"458b8be0", 0x3aa1, 0x0, 0x0, 0x54, 0x5, "a4e112e6241ac421827f5d65ba4464", 'o\bm\b', "5aaed6a5", "9e1ddb75", ["a2a3aa137ebc2da6d6e49728", "4358abcecc46491af363fd91", "b19f708f2588be8bf258b93f", "e45edd1f34b6b4cc57901c97"]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r5, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050006000000140004"], 0x58}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x100000000000000) 7m10.393056831s ago: executing program 0 (id=1303): open(&(0x7f0000000000)='./file0\x00', 0x18900, 0x2) getdents(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000600)=""/189, 0xbd) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x0, 0x4c, 0x1a, 0x180, 0x73, 0x328, 0x258, 0x258, 0x328, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x23, 0x3, 0x2, 0x3, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x358) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x181080, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840), 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x187) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r3, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) 7m6.685643482s ago: executing program 0 (id=1310): bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=ANY=[], 0x48) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x3, 0x4, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() bind(0xffffffffffffffff, &(0x7f0000000000)=@ax25={{0x3, @default, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x62) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000003340)=[0x0]}) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000070601030000000000000000010000050900020073797a3100000000050001000700dd89baea3ed8c1"], 0x28}, 0x1, 0x0, 0x0, 0x40091}, 0x20000080) recvmsg(r4, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000c80), &(0x7f00000000c0)='./file0\x00', 0x401, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0xfd, 0x2ce, &(0x7f0000000980)="$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") 7m5.585443809s ago: executing program 0 (id=1312): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900), 0x0, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7m3.92177293s ago: executing program 0 (id=1314): socket(0x2, 0x3, 0xff) syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f00000001c0), 0x1, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x44, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x13, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6}]}]}, 0x44}}, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x110) pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0x8080c61) 7m1.747183133s ago: executing program 0 (id=1318): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={0x0, 0x0, 0x3a, 0x0, 0x0, 0x5}, 0x28) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) ioprio_set$pid(0x3, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) r4 = dup(r0) write$UHID_INPUT(r4, &(0x7f0000002340)={0xc, {"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", 0x1000}}, 0x1006) 6m46.306083364s ago: executing program 32 (id=1318): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={0x0, 0x0, 0x3a, 0x0, 0x0, 0x5}, 0x28) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) ioprio_set$pid(0x3, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) r4 = dup(r0) write$UHID_INPUT(r4, &(0x7f0000002340)={0xc, {"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", 0x1000}}, 0x1006) 23.587787249s ago: executing program 5 (id=2316): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3", 0x4}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e6", 0xae}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55", 0x38}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 21.327930964s ago: executing program 5 (id=2319): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x218, 0x3a8, 0x3a8, 0x218, 0x3a8, 0x3, 0x0, {[{{@ipv6={@remote, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0xe0, 0x128, 0x700, {}, [@common=@unspec=@time={{0x38}, {0x400, 0x101, 0x20000ea0, 0x9ab3, 0xfffffffd, 0x5, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@ipv6={@empty, @private1, [0xffffff00, 0xff, 0x0, 0xff], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'pimreg0\x00', 'bridge0\x00', {0xff}, {}, 0x33, 0xa, 0x0, 0x2}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x62ff, 0x7fff, 0x6, '\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000001680)={0x1, 0x0, [{0x40000092, 0x0, 0xfffffffffffffff7}]}) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket(0x22, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x341, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', r7, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x2c, '\x00', r7, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r9, r7, 0x25, 0x0, @val=@netkit={@void, @value=r8}}, 0x1c) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x30, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x5, {0x2, 0x6, '\x00', 0xff01, 0x2b, 0xff, @mcast1, @private2}}}}}}}, 0x0) 15.727485692s ago: executing program 5 (id=2329): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write(r4, &(0x7f0000000180)='tes', 0x3) sched_setaffinity(r2, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x8, 0x0) syz_emit_ethernet(0x76, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100"], 0x0) rename(0x0, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000140)={0xf00000000000000}, 0x48) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0xe20, 0x3040002, @mcast2, 0x2}, 0x1c) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 13.535748436s ago: executing program 5 (id=2333): epoll_create1(0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xc3) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x2) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0xc06855c8) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000015c0)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x1, 0x8}]}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$6lowpan_enable(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_enable(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x90, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xea0}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SYNPROXY={0x4c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x80}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x81}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x2408c843}, 0x0) r5 = syz_open_dev$vcsu(0x0, 0xffffffff, 0x0) sendmsg$kcm(r5, &(0x7f00000004c0)={&(0x7f0000000100)=@ax25={{0x3, @default, 0x4}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}, 0x80, &(0x7f0000000200)}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x80000, {0x7, 0x0, 0x0, 0x0, 0x80, 0x72}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x20000000) sched_setattr(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) 12.323959276s ago: executing program 2 (id=2334): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000500)={[{@utf8}, {@fat=@dos1xfloppy}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@fat=@check_normal}, {@shortname_win95}, {@uni_xlateno}, {@shortname_lower}, {@uni_xlateno}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@numtail}, {@shortname_winnt}, {@numtail}, {@fat=@discard}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}]}, 0xfd, 0x2c6, &(0x7f00000010c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x101042, 0x15) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x74, r4, 0x800, 0x20}, 0x74}, 0x1, 0x0, 0x0, 0x404c844}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r8, 0x541b, &(0x7f00000000c0)) socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r7, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e23, 0x2005, @loopback, 0x1}}, 0x0, 0x0, 0x6, 0x0, "10baa70a93289349d889de25b87376f6622d337642b89005000000000000001b7ef6619dd6b2ca4edb6b7debd38b6d889a8c986b33e249c3157f1f370dfd6700"}, 0xd8) close_range(r0, 0xffffffffffffffff, 0x10000000000000) 10.51741404s ago: executing program 4 (id=2347): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x29, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x3c, r3, 0x1, 0x70bd2b, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}]}, 0x3c}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x54, 0xd, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4805}, 0x4010) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r5, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.285301011s ago: executing program 4 (id=2338): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r1 = msgget$private(0x0, 0x208) msgsnd(r1, &(0x7f0000002880)={0x1}, 0x8, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) msgrcv(r1, &(0x7f00000001c0)={0x0, ""/18}, 0x1a, 0x1, 0x0) msgsnd(r1, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xb5, 0x800) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) ftruncate(0xffffffffffffffff, 0xb66f) sendmsg$inet(r0, 0x0, 0x4004045) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) sendto$inet(r0, &(0x7f0000000040)='@', 0x1, 0x4000000, 0x0, 0x0) 8.184786678s ago: executing program 4 (id=2339): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) write(0xffffffffffffffff, &(0x7f0000000b00), 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) 8.005636572s ago: executing program 4 (id=2342): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xff}}, {@dioread_lock}, {@jqfmt_vfsold}, {@discard}, {@lazytime}, {@data_err_ignore}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x553, &(0x7f0000000980)="$eJzs3U1vG0UfAPD/Ok7f0udpKlUVcECReqCo1GkSXorEoRwRVFSCe7GSbVTFqavYqZpQifZAL1xQhYQQlRAfgDvHii/Ap+iBShWqIjhwMVpnnbqNnbiJ27j495M2mdkdZ3Y8O+MZj50NYGhNZD8KEa9GxLdJxJG2Y8XID06sp1t7dGM225JoND77M4kk39dKn+S/x/LIKxHx29cRpwqb862trC6UK5V0KY9P1hevTtZWVk9fXizPp/PplemZmbPvzEy//967fSvrmxf+/uHTex+d/ebE2ve/PDh6J4lzcTg/1l6OXbjZHpmIifw5GY1zTyWc6kNmgyTZ6xNgR0bydj4aWR9wJEbyVg/8930VEQ1gSCXaPwyp1jigNbfv0zz4pfHww/UJ0ObyF9ffG4kDzbnRobXkiZlRNt8d70P+WR6//nH3TrZF/96HANjWzVsRcaZY3Nz/JXn/t3NnekjzdB76P3hx7mXjn7c6jX8KG+Of6DD+GevQdndi+/ZfeNCHbLrKxn8fdBz/bixajY/ksf81x3yjyaXLlTTr2/4fESdjdH8W32o95+za/Ua3Y+3jv2zL8m+NBfPzeFDc/+Rj5sr18m7K3O7hrYjXOo5/k436TzrUf/Z8XOgxj+Pp3de7Hdu+/M9X4+eINzrW/+MVrWTr9cnJ5vUw2boqNvvr9vHfu+W/1+XP6v/Q1uUfT9rXa2vPnsdPB/5Jux3b6fW/L/m8Gd6X77terteXpiL2JZ9s3j/9+LGteCt9Vv6TJ7bu/zpd/wcj4osey3/72O2uSQeh/ueeqf6fPXD/4y9/7JZ/b/X/djN0Mt/TS//X6wnu5rkDAAAAAACAQVOIiMORFEob4UKhVFr/fMexOFSoVGv1U5eqy1fmovld2fEYLbRWusfaPg8xlX8ethWffio+ExFHI+K7kYPNeGm2Wpnb68IDAAAAAAAAAAAAAAAAAADAgBjr9P3/1v9bH9njkwOeP7f8huG1bfvvx52egIHk9R+Gl/YPw0v7h+Gl/cPwKq7fzxgYQl7/YXhp/zC8tH8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqwvnz2dbY+3RjdksPndtZXmheu30XFpbKC0uz5Zmq0tXS/PV6nwlLc1WF7f7e5Vq9erUdCxfn6yntfpkbWX14mJ1+Ur94uXF8nx6MR19IaUCAAAAAAAAAAAAAAAAAACAl0ttZXWhXKmkSwICOwoUB+M0BPoc2OueCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe+zcAAP//eIg3rQ==") syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/318], 0x1, 0x242, &(0x7f0000000300)="$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") openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@quota}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000600)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) 7.055987926s ago: executing program 1 (id=2343): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a4, @local, 0x404f1}}}, 0x108) r4 = socket$unix(0x1, 0x1, 0x0) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1, &(0x7f0000000180)=ANY=[], 0x3, 0xa53, &(0x7f0000000bc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x173) connect$unix(r4, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x110) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108) setsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f0000000440)=@fragment={0x3a, 0x0, 0x0, 0x1, 0x0, 0x5, 0x66}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) 6.799494672s ago: executing program 1 (id=2344): landlock_create_ruleset(&(0x7f0000000180)={0x40, 0x1, 0x2}, 0x30, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket(0x23, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f00000007c0)={{0xf8, 0x6}, {0x28, 0x6}, 0x6, 0x4, 0x6}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 0x9}, 0xa) socket$key(0xf, 0x3, 0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file1/file2\x00', 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='schedstat\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socket$inet_udp(0x2, 0x2, 0x0) 5.773984177s ago: executing program 2 (id=2345): setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000840)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f00003ab000/0x1000)=nil, 0x1000, 0x1000001, 0x8010, 0xffffffffffffffff, 0x877bb000) r3 = mq_open(&(0x7f0000000480)='!selinuxwk1\x1f\xd0m\xc3\x7f9\xc9\x9e*\rT\x93\xfd\xe2\x91\xef\xaa\x16#j\x97\x8f\xbc\xdeY\x0f\xcc\xc5mV\xcb\x15vm(p\xc9-QZ#\xd2{\x84\xbf\x06\x00\x00\xd9', 0x840, 0x104, 0x0) finit_module(r3, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x38, 0x2d]}}}}]}) r4 = socket$inet_icmp(0x2, 0x2, 0x1) connect$inet(r4, &(0x7f0000000940)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 5.773025287s ago: executing program 3 (id=2348): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x200800, 0x154) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0186405, &(0x7f0000000100)={0xb, 0x5, {0xffffffffffffffff}, {0xee01}, 0xffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmget$private(0x0, 0x2000, 0x0, &(0x7f00000eb000/0x2000)=nil) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x0, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f0000000280)=0x3) ioctl$KVM_INTERRUPT(r9, 0x4004ae86, &(0x7f0000000240)=0x4) 5.702354179s ago: executing program 1 (id=2349): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) r1 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x140841, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCXONC(r1, 0x540a, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x175a978679bbbe1d, 0x80a0a1240160183d) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000000)={0x0, 0x2, 0x7, &(0x7f0000000240)={0x1d, "e922604a455494c905fd824393fe53e14fcab3d1eb00007456b15b0000000800"}}) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) mount_setattr(0xffffffffffffffff, 0x0, 0x800, &(0x7f0000000180)={0x7d, 0x3}, 0x20) sendmmsg$alg(r4, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)}], 0x1, 0x0, 0x0, 0x4008004}], 0x1, 0x20) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) r5 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000580)}, 0x10000) 5.636395121s ago: executing program 3 (id=2350): open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) open(0x0, 0xc2802, 0x181) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000000000000000008004500001c0000000010029078ac1e0001e000000111009078e0000001144a"], 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r1, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, 0x0, 0x0) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) 4.401454111s ago: executing program 2 (id=2351): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) write(0xffffffffffffffff, &(0x7f0000000b00), 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) 4.258435265s ago: executing program 4 (id=2352): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r3, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccf060089d5de4d4f2c3e000009", "3e360600"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70ad2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 4.256526095s ago: executing program 5 (id=2353): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) r3 = syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) lseek(r4, 0xfffffffffffffff5, 0x1) inotify_init() mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_reconf_req={{0x19, 0x3, 0xe}, {0xffbd, 0xff46, [0x0, 0xd, 0x8e, 0x9, 0x5]}}}}, 0x1b) syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x0, 0x68, 0x65, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@generic={0x88, 0xa, "315dcd4542a9187f"}]}}, {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "22995ac113fd02e7f376e7d6b2456c7ba350649f5116310d", "968826ce34c5f5d2a37b95275369010d2b4caf20b4ebfdfb61c7b8249315089f"}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e00010800074000000000080008400000000280000d8014000380060001"], 0x1f0}}, 0x0) 4.242910845s ago: executing program 1 (id=2354): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) write(0xffffffffffffffff, &(0x7f0000000b00), 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) 4.186771076s ago: executing program 3 (id=2355): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @empty}, 0x10001}, 0x1c) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',rootmode=00000000000000000', @ANYRESDEC=0x0]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000200)=ANY=[@ANYBLOB='b'], 0x9) preadv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 4.185943776s ago: executing program 2 (id=2356): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0xaed8e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r4, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) epoll_pwait(r5, 0x0, 0x0, 0xfffffffb, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r6, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r7, &(0x7f0000000800)='A', 0x1) close_range(r3, 0xffffffffffffffff, 0x0) 3.916609713s ago: executing program 1 (id=2357): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_open_dev$ptys(0xc, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f0000"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYBLOB="0100000002"], 0x40) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r6}, 0x0, &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r5}, &(0x7f00000000c0), 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 2.596572295s ago: executing program 3 (id=2358): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000480)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x10c00, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map=0x1, 0x20, 0x0, 0x9, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000840)={r6}, 0x4) futex(&(0x7f0000004000)=0x8007, 0x4, 0x0, 0x0, 0x0, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@map=r0, r4, 0x36, 0x10, 0x0, @void, @value, @void, @void, r5}, 0x20) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r7 = memfd_create(0x0, 0x4) ftruncate(r7, 0x200000) pread64(r7, 0x0, 0x0, 0x1fffff) mount$9p_fd(0x0, 0x0, 0x0, 0x200c01, 0x0) r8 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) setsockopt$sock_attach_bpf(r8, 0x1, 0xd, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) 2.543994217s ago: executing program 4 (id=2359): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x80c406, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"/895, @ANYBLOB="a8d21780adf9979b3c8b3471fb84b619a98a78d8744a4cd48064e74fb4f7965cf2c3ca917310902f6dbd0b19f756e4f3f0235ff472fe861a19f0aa52c589b4f73d3a6aa10c70f2027513f61625a63db51babed51b07ea16656d8405ff5de7b126f6c3d519528263122963463893decb36030e6b89623148f4bc0f4bef201847695959eb4567aa67451a77470e422d9da6f194843ad71879d6d46800a20c970", @ANYRESOCT], 0x1, 0x2b1, &(0x7f0000000100)="$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") ftruncate(0xffffffffffffffff, 0x5) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="041817aaee93183d38ea191735aaaaaaaa103c40eb4409794c"], 0x1a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x5) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r5, &(0x7f0000002f40)=""/4079, 0x7c4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) sendmsg$nl_route_sched(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.526904877s ago: executing program 2 (id=2360): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x200800, 0x154) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0186405, &(0x7f0000000100)={0xb, 0x5, {0xffffffffffffffff}, {0xee01}, 0xffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmget$private(0x0, 0x2000, 0x0, &(0x7f00000eb000/0x2000)=nil) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x0, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f0000000280)=0x3) ioctl$KVM_INTERRUPT(r9, 0x4004ae86, &(0x7f0000000240)=0x4) 1.235902399s ago: executing program 3 (id=2361): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x29, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x3c, r3, 0x1, 0x70bd2b, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}]}, 0x3c}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x54, 0xd, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4805}, 0x4010) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r5, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.171814051s ago: executing program 1 (id=2362): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000140)={0x1, 0x9, 0x0, &(0x7f0000000000)={0x20, "ee48b71ad5608a40000000ca09b87daf01570d51948976635ea48b3f5b1878e461"}}) setns(0xc9, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x35, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80044) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000040)={0x3ff, 0x0, {0x0, 0x0, 0xf, 0x0, 0xe000}, 0x9}) r5 = getpid() mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x144) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@loopback, 0x4e21, 0xa, 0x4e21, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x800, 0x5a, 0x2, 0xfffffffffffffe90, 0x7, 0x3, 0x980, 0x6}, {0x1, 0x3, 0x5, 0x1}, 0x9, 0x6e6bb4, 0x2, 0x0, 0x2, 0x2}, {{@in6=@private0, 0x4d4, 0x3c}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3503, 0x0, 0x0, 0x8, 0x80, 0x5, 0x5}}, 0xe8) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) 455.401848ms ago: executing program 5 (id=2363): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) add_key$fscrypt_provisioning(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1/bmaControls\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='0x01\x00', 0x4) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x13, 0x0, "ee9e8bf9b93129488f651a8de213eb94cd46e1839c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c78c129f79172dcba5700"}, 0xd8) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) r4 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, &(0x7f00000000c0)={0x7, 'erspan0\x00', {0xfffffff4}, 0xc}) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xd}, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x40c, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000200)={{0x84, @empty, 0x4e22, 0x803, 'fo\x00', 0x2, 0x9, 0x63}, {@local, 0x10, 0x4, 0x100000cd, 0x12d5f, 0x3}}, 0x44) sendmmsg$sock(r3, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x1, 0x20000000) socket(0xa, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) 124.075696ms ago: executing program 3 (id=2364): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xff}}, {@dioread_lock}, {@jqfmt_vfsold}, {@discard}, {@lazytime}, {@data_err_ignore}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x553, &(0x7f0000000980)="$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") syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/318], 0x1, 0x242, &(0x7f0000000300)="$eJzs3bFqFFEUBuBjskmWNKYWiwEbq0WtbBeJIA4IK1No5UC0SUSYNKPVPIbP4CP5GKnSjZhZsklcbczm7s58Hyz3wM/Cuc3eLc6d+fDw8/HRl9NP7c/vMR5nMYpo2jbiILZiOzr35uvWRb0bVzUBAGya2aycpu6B1aqqabkTEXt/JMWPJA0BAAAAAAAAAADw35bN/8e5+X8A6DPz//1XVdNyf/7/7Trz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA65217v/3HJ3V/AMDtc/4DwPA4/wFgeJz/ADA8b9+9fz3N88NZlo0jzpq6qItu7fKXr/LDJ9mFg8W3zuq62L7Mn3Z5dj3fif15/mxpvhuPH3X57+zFm/xGvhdHq98+AAAAAAAAAAAAAAAAAAAArIVJdmnp/f7J5G95V115PsCN+/ujeDC6s20AAAAAAAAAAAAAAAAAAADARjv9+u24PDn5WCl6U8TztWjjrouItWijL0XqXyYAAAAAAAAAAAAAAAAAABiexaXf1J0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQDqL9/+vroiIpu2k3i4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQY78CAAD//139ms4=") openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@quota}]}, 0xfd, 0x269, &(0x7f0000000a00)="$eJzs3U9oHFUcB/Df7B/jJotEvQjiHxARDYR4E7zEi0JAQhARVIiIeJJEiAnesp68eNCzSkDwEkpvTXssvYReWgo9pW0O6aXQhh4aemgPW3Znt2ySDW33b9n5fGCYmbz35r0J832zLMxsAJk1GRGzEZGPiKmIKEZE0lrh7XSZbOxulLYXI6rVL+4m9XrpfqrZbiIiKhHxUUShWba29c3e/Z3P3vtjtfju/1tflwZ1fq3293Y/P/h3/vczcx+uXb56ez6J2Sg3ylrPo5eSNn8rJBGv9KOz50RSGPYIeBoLv56+Vsv9qxHxTj3/xcg1IvvnygsXivHBPye1/evOldcHOVag96rVYu0eWKkCmZOLiHIkuemISLdzuenp9DP89fx47qfllV+mflxeXfph2DMV0CvlSHY/PTd2duJI/m/l0/wDo6scsfvlwuaN2vZBftijAfqm9dv2N9JVLf9T362/H/IPmSP/kF3yD9kl/zACOsyu/EN2dZP/F/s0JmAw3P9hhBWbG5W2xfIP2SX/MKL+a/fU6WHyD9nVmn8AIFuqY8N+AhkYlmHPPwAAAAAAAAAAAAAAAAAAwHEbpe3F5jKoPi/+HbH/SUQU2vWfr/8ecfNt4+P3klq1x5K0WVe+favLA3TpVM+evi511Oqlm73qvzOX3uzPcX87vHviP2d9KaJSqzxTKBy//pLG9de5l59QXvy+yw6e0dG3An781WD7P+rh5nD7n9uJOF+bf2bazT+5eK2+bj//lFtfsdyhnx90eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG5lEAAAD//4oibec=") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000600)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) 0s ago: executing program 2 (id=2365): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000480)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r3, 0x8941, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x4, 0xa, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, 0x8000, 0x80, 0x3, 0xbc8}}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="009b501d4d01e77fcea978cb7f9bc8e4b8313a6f5b75fbe99f655f168883fb361a3b9f59f7998da4ce8d19dd17748a1836e8471d396358222e91d591b891b7635a553abc4e9dee9473231216df3e31316986b1495c93f92995ea51553d8fe52b0e654a2fad6c4fcc5303206bd855d68b0c11000bf7fb9793cabf8340b0b8bc026f1006708a62a64ba44e9d6b0a7c29c13d82b30999f92815780d4b7e65dcb6ed20a067898ce8368fbb972d2d"], 0x3, 0x288, &(0x7f0000001000)="$eJzs3c9qM1UUAPAzTdIkn0KycCXCN6ALVx+tT9AiFcSCoGShLrTYFKQTCi0EqmLsyifwCXweN+IL+ACKO7sQRyYzSVOZtPZ/6ff7LdrLuef0npuZtqu588Ubo/3dg6O9k29/i04niZWN2IjTJPqxEjPfR61f/6iPAwCP3Gmex595qV2Gjs9ntJZUNlfuvDkA4E4s/v9/6F4AgPvx8SeffrC5vb31UZp2IkY/jAdJlN/L+c29+CqyGMZa9OLviHyuHL/3/vZWNNNCP94aTcaDonL0+c/Vz9/8PWJavx696NfXr6elhfrJeNCKZ9X6G1kMP/wpevFaff07NfUxWI233yzrnxXrv4he/PJlHEQWu1Vvs/rv1tP03fzHv775rIgW9clkPGjP86rsxr1eGAAAAAAAAAAAAAAAAAAAAAAAnrQX6Vz//Pk7s4P/L5i/4HygycL5PGtpmuZJmX9W34zXm9F8yL0DAAAAAAAAAAAAAAAAAADAY3F0/PX+TpYND291MHusv2Yq/jkfaUfE9dd6/v+TG9N+olG1liURV1urFe1p5eXJjSvuolv0MzxMmnF7lyCZR7qLU8+jXKuIdMvBQuTGq3diOpjdXfs7yWUXt1N3k2RZ3LSfvOb2ayytWv1vpFvtoCa5e8Hqq69cq+e8t2QqiYjW/MMsp16t/8SGrdv9Xb6/v0EAAAAAAAAAAAAAAAAAAEDp7KHfmsmT6Vfv6AcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgyTt7//8VBpOqeFlO3igGzagiD7xFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXgL/BgAA///ejGTs") open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) connect$unix(r1, 0x0, 0x0) execve(&(0x7f0000000500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000dc0)={[&(0x7f0000000680)='\xff\xff', 0x0]}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000380)=0xcf5) ioctl$TCSETS(r4, 0x40045431, 0x0) kernel console output (not intermixed with test programs): 05974][ T6477] batman_adv: batadv0: Removing interface: veth0 [ 243.010260][ T6477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.060170][ T6477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.102793][ T6477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.134106][ T6477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.241029][ T6492] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 245.590436][ T6547] loop0: detected capacity change from 0 to 512 [ 245.708741][ T4206] Bluetooth: Wrong link type (-57) [ 245.971434][ T6547] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 245.978841][ T6547] EXT4-fs (loop0): Unrecognized mount option "fscontext=system_u" or missing value [ 246.450486][ T6562] UBIFS error (pid: 6562): cannot open "(null)", error -22 [ 247.374422][ T6571] tcf_pedit_act: 22 callbacks suppressed [ 247.374437][ T6571] tc action pedit offset must be on 32 bit boundaries [ 247.749327][ T26] audit: type=1326 audit(1787172499.641:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6569 comm="syz.1.571" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88891500d9 code=0x7ffc0000 [ 248.109717][ T26] audit: type=1326 audit(1787172499.651:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6569 comm="syz.1.571" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f88891500d9 code=0x7ffc0000 [ 248.139721][ T26] audit: type=1326 audit(1787172499.651:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6569 comm="syz.1.571" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88891500d9 code=0x7ffc0000 [ 248.209461][ T26] audit: type=1326 audit(1787172499.651:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6569 comm="syz.1.571" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f88891500d9 code=0x7ffc0000 [ 248.243715][ T6584] loop0: detected capacity change from 0 to 512 [ 248.275448][ T26] audit: type=1326 audit(1787172499.651:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6569 comm="syz.1.571" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88891500d9 code=0x7ffc0000 [ 248.319315][ T26] audit: type=1326 audit(1787172499.651:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6569 comm="syz.1.571" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88891500d9 code=0x7ffc0000 [ 248.374107][ T6584] EXT4-fs (loop0): Unrecognized mount option "uid>00000000000000000000" or missing value [ 248.457437][ T26] audit: type=1326 audit(1787172499.651:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6569 comm="syz.1.571" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88891500d9 code=0x7ffc0000 [ 248.483619][ T26] audit: type=1326 audit(1787172499.651:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6569 comm="syz.1.571" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f88891500d9 code=0x7ffc0000 [ 249.275952][ T26] audit: type=1326 audit(1787172499.661:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6569 comm="syz.1.571" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88891500d9 code=0x7ffc0000 [ 249.307996][ T6587] loop3: detected capacity change from 0 to 4096 [ 249.311454][ T26] audit: type=1326 audit(1787172499.661:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6569 comm="syz.1.571" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f88891500d9 code=0x7ffc0000 [ 251.149624][ T6618] UBIFS error (pid: 6618): cannot open "(null)", error -22 [ 251.536965][ T6587] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 252.394449][ T6635] vcan0: tx drop: invalid sa for name 0x00000000000000fe [ 254.262621][ T6627] loop3: detected capacity change from 0 to 32768 [ 255.629115][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.644313][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.020908][ T6674] UBIFS error (pid: 6674): cannot open "(null)", error -22 [ 259.066217][ T6701] netlink: 'syz.1.604': attribute type 12 has an invalid length. [ 259.200731][ T6707] loop2: detected capacity change from 0 to 256 [ 260.396475][ T6707] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf168f48e, utbl_chksum : 0xe619d30d) [ 264.847045][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 265.889844][ T6767] netlink: 'syz.0.621': attribute type 12 has an invalid length. [ 271.717178][ T6813] o2cb: Local heartbeat has not been started. [ 271.753314][ T6813] o2cb: Cluster check failed. Fix errors before retrying. [ 271.837730][ T6813] (syz.4.633,6813,0):user_dlm_register:675 ERROR: status = -22 [ 272.061106][ T6813] (syz.4.633,6813,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "domain1" [ 272.978108][ T6825] netlink: 'syz.2.636': attribute type 12 has an invalid length. [ 278.621653][ T6862] loop0: detected capacity change from 0 to 512 [ 278.710596][ T6862] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 278.718610][ T6862] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 278.726973][ T6862] System zones: 0-1, 15-15, 18-18, 34-34 [ 278.737393][ T6862] EXT4-fs (loop0): orphan cleanup on readonly fs [ 278.744181][ T6862] __quota_error: 2 callbacks suppressed [ 278.744194][ T6862] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 278.759449][ T6862] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 278.774105][ T6862] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 278.781158][ T6862] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.642: bad orphan inode 16 [ 278.793264][ T6862] ext4_test_bit(bit=15, block=18) = 1 [ 278.798680][ T6862] is_bad_inode(inode)=0 [ 278.803043][ T6862] NEXT_ORPHAN(inode)=0 [ 278.807145][ T6862] max_ino=32 [ 278.811859][ T6862] i_nlink=2 [ 278.815155][ T6862] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 279.111751][ T6866] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 280.370599][ T6887] netlink: 24 bytes leftover after parsing attributes in process `syz.1.650'. [ 280.766330][ T6891] netlink: 'syz.4.651': attribute type 12 has an invalid length. [ 280.987726][ T6901] UBIFS error (pid: 6901): cannot open "(null)", error -22 [ 281.868832][ T6907] loop0: detected capacity change from 0 to 512 [ 283.457898][ T6907] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 285.506280][ T6907] EXT4-fs warning (device loop0): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop0. [ 287.038938][ T6954] UBIFS error (pid: 6954): cannot open "(null)", error -22 [ 288.699104][ T6969] netlink: 'syz.2.669': attribute type 21 has an invalid length. [ 288.714591][ T6969] netlink: 156 bytes leftover after parsing attributes in process `syz.2.669'. [ 290.039139][ T6993] loop2: detected capacity change from 0 to 4096 [ 290.211620][ T6993] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 290.232815][ T6993] ntfs: (device loop2): check_mft_mirror(): $MFTMirr location mismatch. Run chkdsk. [ 290.242592][ T6993] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 290.655200][ T6993] ntfs: volume version 3.1. [ 290.673340][ T6993] ntfs: (device loop2): ntfs_read_locked_inode(): $INDEX_ALLOCATION attribute is resident. [ 290.683673][ T6993] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x5 as bad. Run chkdsk. [ 290.697516][ T6993] ntfs: (device loop2): load_system_files(): Failed to load root directory. [ 290.710011][ T6993] ntfs: (device loop2): ntfs_fill_super(): Failed to load system files. [ 292.225896][ T7007] loop4: detected capacity change from 0 to 512 [ 292.304341][ T26] audit: type=1800 audit(1787172544.481:24): pid=7010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.686" name="nexus" dev="configfs" ino=46212 res=0 errno=0 [ 292.545163][ T7007] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 292.559082][ T7007] EXT4-fs (loop4): Unrecognized mount option "fscontext=system_u" or missing value [ 296.599677][ T7047] netlink: 'syz.0.693': attribute type 21 has an invalid length. [ 296.607875][ T7047] netlink: 156 bytes leftover after parsing attributes in process `syz.0.693'. [ 298.638113][ T23] libceph: connect (1)[c::]:6789 error -101 [ 299.118411][ T7089] loop4: detected capacity change from 0 to 4096 [ 299.177374][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 299.369036][ T7072] ceph: No mds server is up or the cluster is laggy [ 299.400057][ T7089] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 299.444867][ T7089] ntfs: (device loop4): check_mft_mirror(): $MFTMirr location mismatch. Run chkdsk. [ 299.454475][ T7089] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 299.560952][ T7089] ntfs: volume version 3.1. [ 299.568053][ T7089] ntfs: (device loop4): ntfs_read_locked_inode(): $INDEX_ALLOCATION attribute is resident. [ 299.578876][ T7089] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x5 as bad. Run chkdsk. [ 299.591961][ T7089] ntfs: (device loop4): load_system_files(): Failed to load root directory. [ 299.601804][ T7089] ntfs: (device loop4): ntfs_fill_super(): Failed to load system files. [ 299.671698][ T21] libceph: connect (1)[c::]:6789 error -101 [ 299.677819][ T21] libceph: mon0 (1)[c::]:6789 connect error [ 300.067233][ T7096] loop2: detected capacity change from 0 to 4096 [ 300.132382][ T7096] ntfs3: Unknown parameter 'ntfs3' [ 300.447549][ T21] libceph: connect (1)[c::]:6789 error -101 [ 300.453683][ T21] libceph: mon0 (1)[c::]:6789 connect error [ 300.650356][ T7103] loop2: detected capacity change from 0 to 512 [ 300.737628][ T7103] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 300.771003][ T7103] EXT4-fs (loop2): Unrecognized mount option "fscontext=system_u" or missing value [ 301.922001][ T7121] o2cb: Local heartbeat has not been started. [ 301.928241][ T7121] o2cb: Cluster check failed. Fix errors before retrying. [ 301.936684][ T7121] (syz.2.711,7121,1):user_dlm_register:675 ERROR: status = -22 [ 302.047238][ T7121] (syz.2.711,7121,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "domain1" [ 302.113052][ T7125] loop0: detected capacity change from 0 to 256 [ 302.869589][ T7125] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 305.192007][ T7162] loop4: detected capacity change from 0 to 4096 [ 305.424048][ T7162] ntfs3: Unknown parameter 'ntfs3' [ 306.471219][ T7184] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 311.346578][ T7243] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 311.541818][ T7246] loop4: detected capacity change from 0 to 4096 [ 312.707375][ T7246] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 313.694043][ T26] audit: type=1800 audit(1787172565.871:25): pid=7277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.739" name="file0" dev="loop4" ino=0 res=0 errno=0 [ 314.536211][ T4188] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 314.644164][ T7294] loop4: detected capacity change from 0 to 512 [ 314.688137][ T7294] EXT4-fs (loop4): error: journal path ./file0 is not a block device [ 315.857922][ T7299] loop4: detected capacity change from 0 to 256 [ 315.868347][ T7300] 9pnet: p9_fd_create_unix (7300): problem connecting socket: ./file0: -111 [ 317.055200][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.061629][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.969339][ T6966] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 318.459223][ T6966] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 318.468850][ T7339] loop2: detected capacity change from 0 to 1024 [ 318.488025][ T6966] usb 5-1: config 0 has no interface number 0 [ 318.541361][ T7339] EXT4-fs (loop2): Ignoring removed bh option [ 318.600510][ T7339] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,bh,nodioread_nolock,,errors=continue. Quota mode: none. [ 318.649706][ T7339] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.599887][ T6966] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 319.661534][ T6966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.765880][ T6966] usb 5-1: Product: syz [ 319.827694][ T6966] usb 5-1: Manufacturer: syz [ 319.891419][ T6966] usb 5-1: SerialNumber: syz [ 320.029319][ T6966] usb 5-1: config 0 descriptor?? [ 320.151848][ T6966] usb 5-1: selecting invalid altsetting 1 [ 320.180045][ T6966] dvb_ttusb_budget: ttusb_init_controller: error [ 320.220768][ T6966] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 320.420360][ T7357] device syzkaller0 entered promiscuous mode [ 320.432931][ T6966] DVB: Unable to find symbol stv0299_attach() [ 320.554924][ T6966] DVB: Unable to find symbol tda8083_attach() [ 320.561415][ T6966] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 321.443406][ T6966] usb 5-1: USB disconnect, device number 2 [ 324.168795][ T7397] gadgetfs: bound to dummy_udc driver [ 324.519192][ T6966] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 324.589008][ C0] gadgetfs: connected [ 324.594548][ T6966] gadgetfs: disconnected [ 326.796117][ T7415] loop3: detected capacity change from 0 to 32768 [ 326.849761][ T7415] gfs2: Unknown parameter '@' [ 327.924458][ T7421] loop0: detected capacity change from 0 to 40427 [ 329.133975][ T7430] loop3: detected capacity change from 0 to 2048 [ 330.010555][ T7421] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 330.017361][ T7421] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 330.115640][ T7421] F2FS-fs (loop0): invalid crc value [ 330.257205][ T7421] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 332.751242][ T7467] netlink: 256 bytes leftover after parsing attributes in process `syz.0.798'. [ 332.760825][ T7467] unsupported nlmsg_type 40 [ 333.846473][ T7484] netlink: 168 bytes leftover after parsing attributes in process `syz.4.804'. [ 334.135017][ T7497] loop3: detected capacity change from 0 to 4096 [ 335.493554][ T7497] ntfs3: Unknown parameter 'windows_names' [ 336.999402][ T7511] tc action pedit offset 0 out of bounds [ 337.414603][ T7524] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 343.131762][ T7592] loop3: detected capacity change from 0 to 512 [ 343.881450][ T7592] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 343.909042][ T7592] UDF-fs: Scanning with blocksize 512 failed [ 343.926341][ T7592] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 344.354886][ T7609] device vlan0 entered promiscuous mode [ 344.958254][ T7592] UDF-fs: Scanning with blocksize 1024 failed [ 344.989045][ T7592] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 345.029316][ T7592] UDF-fs: Scanning with blocksize 2048 failed [ 345.229507][ T7592] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 345.289113][ T7621] UBIFS error (pid: 7621): cannot open "ubi0", error -19 [ 346.622747][ T7592] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 348.917632][ T7649] loop0: detected capacity change from 0 to 256 [ 349.337965][ T7660] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4195] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7660] [ 349.827036][ T7657] jffs2: notice: (7657) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 350.216750][ T7668] loop2: detected capacity change from 0 to 8192 [ 351.222072][ T7668] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 351.232879][ T7668] REISERFS (device loop2): using ordered data mode [ 351.239584][ T7668] reiserfs: using flush barriers [ 351.254439][ T7668] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 351.274217][ T7668] REISERFS (device loop2): checking transaction log (loop2) [ 351.304241][ T7668] REISERFS (device loop2): Using r5 hash to sort names [ 351.318322][ T7668] REISERFS warning (device loop2): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 352.999804][ T7688] loop3: detected capacity change from 0 to 512 [ 354.238094][ T7688] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 354.260057][ T7688] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 354.268543][ T7688] System zones: 0-1, 15-15, 18-18, 34-34 [ 354.276600][ T7688] EXT4-fs (loop3): orphan cleanup on readonly fs [ 354.286400][ T7688] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 354.429244][ T7688] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 354.491699][ T7688] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 354.501313][ T7688] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.861: bad orphan inode 16 [ 354.512036][ T7688] ext4_test_bit(bit=15, block=18) = 1 [ 354.517460][ T7688] is_bad_inode(inode)=0 [ 354.521847][ T7688] NEXT_ORPHAN(inode)=0 [ 354.525945][ T7688] max_ino=32 [ 354.529319][ T7688] i_nlink=2 [ 354.579339][ T7688] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 355.124071][ T7709] loop4: detected capacity change from 0 to 2048 [ 355.214276][ T7706] Config c/2 of g1 needs at least one function. [ 355.228925][ T7709] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 355.319426][ T7706] udc dummy_udc.0: failed to start g1: -22 [ 355.877727][ T7724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.868'. [ 355.886798][ T7724] netlink: 288 bytes leftover after parsing attributes in process `syz.1.868'. [ 355.905960][ T7726] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 357.277500][ T7739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.872'. [ 357.292976][ T7739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.872'. [ 360.344346][ T7761] loop2: detected capacity change from 0 to 8192 [ 360.931994][ T7761] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 360.959084][ T7761] REISERFS (device loop2): using ordered data mode [ 360.971479][ T7761] reiserfs: using flush barriers [ 360.977825][ T7761] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 361.008239][ T7761] REISERFS (device loop2): checking transaction log (loop2) [ 361.050288][ T7761] REISERFS (device loop2): Using r5 hash to sort names [ 361.092340][ T7761] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 364.203496][ T21] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 364.496277][ T7814] device wlan0 entered promiscuous mode [ 364.569375][ T21] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 364.578485][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.604227][ T7813] loop2: detected capacity change from 0 to 8192 [ 364.626724][ T21] usb 1-1: config 0 descriptor?? [ 364.672347][ T7813] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 364.690874][ T7813] REISERFS (device loop2): using ordered data mode [ 364.698269][ T7813] reiserfs: using flush barriers [ 364.712928][ T7813] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 364.739330][ T7813] REISERFS (device loop2): checking transaction log (loop2) [ 364.760167][ T7813] REISERFS (device loop2): Using r5 hash to sort names [ 364.768089][ T7813] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 365.576847][ T7830] hugetlbfs: syz.3.899 (7830): Using mlock ulimits for SHM_HUGETLB is deprecated [ 365.876875][ T7837] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 365.891992][ T7837] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 365.906705][ T7837] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 366.000313][ T7837] device bridge_slave_0 left promiscuous mode [ 366.031860][ T7842] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 366.048261][ T7837] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.064376][ T7837] device bridge_slave_1 left promiscuous mode [ 366.082955][ T7837] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.162198][ T7837] bond0: (slave bond_slave_0): Releasing backup interface [ 366.215959][ T7837] bond0: (slave bond_slave_1): Releasing backup interface [ 366.373501][ T7837] team0: Port device team_slave_0 removed [ 366.382783][ T21] usb 1-1: Cannot set autoneg [ 366.388836][ T21] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -61 [ 366.446576][ T7837] team0: Port device team_slave_1 removed [ 366.720774][ T2308] usb 1-1: USB disconnect, device number 4 [ 367.654380][ T7875] netlink: 256 bytes leftover after parsing attributes in process `syz.2.913'. [ 370.716059][ T7913] loop2: detected capacity change from 0 to 512 [ 370.996870][ T7913] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 371.559025][ T7913] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 371.608321][ T7913] EXT4-fs (loop2): 1 truncate cleaned up [ 371.614495][ T7913] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 373.214603][ T7931] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 378.490908][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.497364][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.160248][ T8026] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 384.218455][ T8078] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 385.134410][ T26] audit: type=1800 audit(1787172637.311:26): pid=8083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.974" name="idProduct" dev="configfs" ino=50975 res=0 errno=0 [ 385.230575][ T26] audit: type=1800 audit(1787172637.331:27): pid=8083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.974" name="serialnumber" dev="configfs" ino=50976 res=0 errno=0 [ 385.264374][ T26] audit: type=1800 audit(1787172637.351:28): pid=8083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.974" name="manufacturer" dev="configfs" ino=50977 res=0 errno=0 [ 385.587564][ T8099] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 387.378128][ T8100] overlayfs: failed to clone upperpath [ 388.527675][ T8121] o2cb: Local heartbeat has not been started. [ 388.534110][ T8121] o2cb: Cluster check failed. Fix errors before retrying. [ 388.541331][ T8121] (syz.2.986,8121,0):user_dlm_register:675 ERROR: status = -22 [ 388.548976][ T8121] (syz.2.986,8121,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "domain1" [ 389.000155][ T8129] loop2: detected capacity change from 0 to 32768 [ 389.183137][ T8129] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.989 (8129) [ 389.673490][ T8129] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 389.683156][ T8129] BTRFS info (device loop2): turning on sync discard [ 389.690348][ T8129] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 389.700436][ T8129] BTRFS info (device loop2): use zstd compression, level 3 [ 389.707755][ T8129] BTRFS info (device loop2): turning on async discard [ 389.715267][ T8129] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 389.726044][ T8129] BTRFS info (device loop2): trying to use backup root at mount time [ 389.734228][ T8129] BTRFS info (device loop2): enabling auto defrag [ 389.735776][ T8128] loop0: detected capacity change from 0 to 8192 [ 389.740764][ T8129] BTRFS info (device loop2): using free space tree [ 389.740815][ T8129] BTRFS info (device loop2): has skinny extents [ 390.169284][ T8128] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 390.290368][ T8128] REISERFS (device loop0): using ordered data mode [ 390.444183][ T8128] reiserfs: using flush barriers [ 390.469835][ T4729] BTRFS warning (device loop2): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 390.714249][ T8128] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 390.752941][ T8129] BTRFS warning (device loop2): failed to read root (objectid=2): -5 [ 390.789821][ T8128] REISERFS (device loop0): checking transaction log (loop0) [ 390.810570][ T4747] BTRFS warning (device loop2): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 390.873501][ T8128] REISERFS (device loop0): Using r5 hash to sort names [ 390.881218][ T8128] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 390.890508][ T8129] BTRFS warning (device loop2): couldn't read tree root [ 390.898493][ T8129] BTRFS error (device loop2): parent transid verify failed on 5255168 wanted 5 found 7 [ 390.909224][ T8129] BTRFS warning (device loop2): couldn't read tree root [ 390.955066][ T8129] BTRFS info (device loop2): enabling ssd optimizations [ 390.970794][ T8129] BTRFS info (device loop2): clearing free space tree [ 390.978598][ T8129] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 390.988971][ T8129] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 391.035284][ T8129] BTRFS info (device loop2): creating free space tree [ 391.044665][ T8129] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 391.054337][ T8129] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 391.705365][ T8162] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 391.971829][ T8160] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 392.048229][ T8162] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 392.347221][ T8167] loop0: detected capacity change from 0 to 4096 [ 393.279793][ T8167] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 397.074676][ T4193] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 397.135245][ T8213] o2cb: Local heartbeat has not been started. [ 397.167155][ T8213] o2cb: Cluster check failed. Fix errors before retrying. [ 397.215991][ T8213] (syz.4.1003,8213,1):user_dlm_register:675 ERROR: status = -22 [ 397.256033][ T8213] (syz.4.1003,8213,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "domain1" [ 397.379339][ T8222] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1006'. [ 403.390236][ T8247] loop4: detected capacity change from 0 to 8 [ 403.824493][ T8254] loop3: detected capacity change from 0 to 512 [ 403.845548][ T8247] SQUASHFS error: lzo decompression failed, data probably corrupt [ 403.854199][ T8247] SQUASHFS error: Failed to read block 0x91: -5 [ 403.860511][ T8247] SQUASHFS error: Unable to read metadata cache entry [8f] [ 403.867794][ T8247] SQUASHFS error: Unable to read inode 0x11f [ 404.019137][ T8254] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 404.047325][ T8259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1017'. [ 404.103859][ T8254] EXT4-fs (loop3): 1 truncate cleaned up [ 404.123934][ T8254] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 404.152157][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1017'. [ 408.732497][ T8296] using random self ethernet address [ 408.737861][ T8296] using random host ethernet address [ 408.871953][ T8294] netlink: 'syz.3.1038': attribute type 11 has an invalid length. [ 410.205098][ T8296] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 410.274876][ T8296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.303559][ T8296] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 411.223993][ T8316] kAFS: bad VL server IP address [ 417.449084][ T4204] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 418.499012][ T4204] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 419.138664][ T4204] usb 1-1: config 0 has no interface number 0 [ 419.347473][ T4204] usb 1-1: string descriptor 0 read error: -71 [ 419.354239][ T4204] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 419.377301][ T4204] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.462247][ T4204] usb 1-1: config 0 descriptor?? [ 419.489310][ T4204] usb 1-1: can't set config #0, error -71 [ 419.528070][ T4204] usb 1-1: USB disconnect, device number 5 [ 420.577527][ T8390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1054'. [ 423.244453][ T8427] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1064'. [ 423.412560][ T8437] loop3: detected capacity change from 0 to 128 [ 423.496505][ T8437] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 423.924204][ T8445] tipc: Enabling of bearer rejected, failed to enable media [ 424.083611][ T4180] udevd[4180]: incorrect ext4 checksum on /dev/loop3 [ 426.205388][ T8470] loop3: detected capacity change from 0 to 1024 [ 426.453828][ T8474] capability: warning: `syz.1.1075' uses 32-bit capabilities (legacy support in use) [ 427.218870][ T8470] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 429.348191][ T8506] ubi0: attaching mtd0 [ 429.962705][ T8506] ubi0: scanning is finished [ 429.967424][ T8506] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 430.014559][ T8506] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 431.123225][ T8522] loop0: detected capacity change from 0 to 1024 [ 432.065900][ T8522] EXT4-fs (loop0): Ignoring removed bh option [ 432.499779][ T8535] loop2: detected capacity change from 0 to 512 [ 433.913198][ T8535] EXT4-fs (loop2): Test dummy encryption mode enabled [ 434.021276][ T8535] EXT4-fs (loop2): 1 truncate cleaned up [ 434.027102][ T8535] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 434.257622][ T8534] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 434.550969][ T8522] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,bh,nodioread_nolock,,errors=continue. Quota mode: none. [ 434.644900][ T8522] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.152394][ T8561] loop0: detected capacity change from 0 to 512 [ 436.186004][ T8561] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 436.267032][ T8561] EXT4-fs (loop0): 1 truncate cleaned up [ 436.278666][ T8561] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 436.379669][ T8567] overlayfs: failed to clone upperpath [ 437.001679][ T26] audit: type=1800 audit(1787172689.181:29): pid=8570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1093" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 440.009925][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.017272][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.843824][ T8621] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1112'. [ 443.106818][ T8658] loop2: detected capacity change from 0 to 128 [ 443.488520][ T8658] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 443.517425][ T4180] udevd[4180]: incorrect ext4 checksum on /dev/loop2 [ 445.790869][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1127'. [ 445.803790][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1127'. [ 446.649714][ T8688] loop4: detected capacity change from 0 to 4096 [ 446.778103][ T8688] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 447.796152][ T8703] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 449.921866][ T4188] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 450.284125][ T8723] loop0: detected capacity change from 0 to 8192 [ 450.349757][ T8723] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 450.372380][ T8723] REISERFS (device loop0): using ordered data mode [ 450.388974][ T8723] reiserfs: using flush barriers [ 450.395349][ T8723] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 450.412217][ T8723] REISERFS (device loop0): checking transaction log (loop0) [ 450.421174][ T8723] REISERFS (device loop0): Using r5 hash to sort names [ 450.428733][ T8723] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 451.588165][ T8741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1143'. [ 451.598006][ T8741] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1143'. [ 455.210928][ T8780] fuse: Unknown parameter '0x0000000000000004' [ 467.466211][ T8916] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 467.540129][ T8916] hpfs: hpfs_map_sector(): read error [ 469.729234][ T8932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1195'. [ 470.000424][ T8935] device syzkaller0 entered promiscuous mode [ 470.084105][ T8940] loop0: detected capacity change from 0 to 8192 [ 470.295173][ T8940] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 470.309051][ T8940] REISERFS (device loop0): using ordered data mode [ 470.322244][ T8940] reiserfs: using flush barriers [ 470.502225][ T8940] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 470.837444][ T8940] REISERFS (device loop0): checking transaction log (loop0) [ 470.946107][ T8940] REISERFS (device loop0): Using r5 hash to sort names [ 470.983024][ T8940] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 473.432322][ T8964] loop0: detected capacity change from 0 to 4096 [ 473.479506][ T8964] EXT4-fs (loop0): Test dummy encryption mode enabled [ 473.678362][ T8964] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,test_dummy_encryption=v1,,errors=continue. Quota mode: writeback. [ 476.195795][ T8993] loop3: detected capacity change from 0 to 8192 [ 476.422392][ T8999] loop2: detected capacity change from 0 to 32768 [ 476.493144][ T8999] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1216 (8999) [ 476.573827][ T8993] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 476.670960][ T8993] REISERFS (device loop3): using ordered data mode [ 476.717512][ T8993] reiserfs: using flush barriers [ 476.846478][ T8993] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 477.158147][ T8993] REISERFS (device loop3): checking transaction log (loop3) [ 477.268681][ T8993] REISERFS (device loop3): Using r5 hash to sort names [ 477.343402][ T8993] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 477.363929][ T8999] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 477.373619][ T8999] BTRFS info (device loop2): turning on sync discard [ 477.373646][ T8999] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 477.373713][ T8999] BTRFS info (device loop2): use zstd compression, level 3 [ 477.373739][ T8999] BTRFS info (device loop2): turning on async discard [ 477.373761][ T8999] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 477.373782][ T8999] BTRFS info (device loop2): trying to use backup root at mount time [ 477.373806][ T8999] BTRFS info (device loop2): enabling auto defrag [ 477.373848][ T8999] BTRFS info (device loop2): using free space tree [ 477.373865][ T8999] BTRFS info (device loop2): has skinny extents [ 478.012104][ T4689] BTRFS warning (device loop2): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 478.139859][ T8999] BTRFS warning (device loop2): failed to read root (objectid=2): -5 [ 478.153186][ T4689] BTRFS warning (device loop2): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 478.354376][ T8999] BTRFS warning (device loop2): couldn't read tree root [ 478.362188][ T8999] BTRFS error (device loop2): parent transid verify failed on 5255168 wanted 5 found 7 [ 478.374399][ T8999] BTRFS warning (device loop2): couldn't read tree root [ 478.454575][ T8999] BTRFS info (device loop2): enabling ssd optimizations [ 478.462307][ T8999] BTRFS info (device loop2): clearing free space tree [ 478.469325][ T8999] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 478.479039][ T8999] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 478.525219][ T8999] BTRFS info (device loop2): creating free space tree [ 478.533319][ T8999] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 478.543032][ T8999] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 481.766625][ T9087] device syzkaller0 entered promiscuous mode [ 481.804837][ T9087] tipc: Started in network mode [ 481.814109][ T9087] tipc: Node identity d6f5e04b0f8e, cluster identity 4711 [ 481.830931][ T9087] tipc: Enabled bearer , priority 0 [ 481.846003][ T9084] loop4: detected capacity change from 0 to 8192 [ 481.875513][ T9084] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 481.895832][ T9087] tipc: Resetting bearer [ 481.914211][ T9084] REISERFS (device loop4): using ordered data mode [ 481.921927][ T9086] tipc: Resetting bearer [ 481.968758][ T9084] reiserfs: using flush barriers [ 481.975734][ T9086] tipc: Disabling bearer [ 482.020451][ T9084] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 482.119290][ T9084] REISERFS (device loop4): checking transaction log (loop4) [ 482.139411][ T9084] REISERFS (device loop4): Using r5 hash to sort names [ 482.186913][ T9084] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 483.142364][ T9106] fuse: Unknown parameter 'group_i00000000000000000000' [ 484.114210][ T9115] loop4: detected capacity change from 0 to 512 [ 484.350688][ T9115] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 484.405920][ T9115] EXT4-fs (loop4): 1 truncate cleaned up [ 484.431552][ T9115] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 488.702482][ T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 489.299759][ T21] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 489.331201][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.395133][ T21] usb 4-1: Product: syz [ 489.427600][ T21] usb 4-1: Manufacturer: syz [ 489.453276][ T21] usb 4-1: SerialNumber: syz [ 489.779032][ T21] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 489.849115][ T21] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 489.973226][ T21] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 490.184732][ T21] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 490.486982][ T21] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 490.553635][ T21] lan78xx: probe of 4-1:1.0 failed with error -71 [ 490.623917][ T21] usb 4-1: USB disconnect, device number 2 [ 490.903615][ T9177] loop2: detected capacity change from 0 to 512 [ 490.963615][ T9177] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 491.023964][ T9175] loop3: detected capacity change from 0 to 8192 [ 491.039991][ T9177] EXT4-fs (loop2): 1 truncate cleaned up [ 491.045721][ T9177] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 491.372213][ T9175] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 491.885896][ T9175] REISERFS (device loop3): using ordered data mode [ 491.947723][ T9175] reiserfs: using flush barriers [ 492.006168][ T9193] loop0: detected capacity change from 0 to 1024 [ 492.019106][ T9175] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 492.058537][ T9175] REISERFS (device loop3): checking transaction log (loop3) [ 492.349105][ T9193] EXT4-fs (loop0): quotafile must be on filesystem root [ 492.369909][ T9175] REISERFS (device loop3): Using r5 hash to sort names [ 492.377128][ T9175] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 497.323988][ T9246] siw: device registration error -23 [ 498.833963][ T9264] loop4: detected capacity change from 0 to 8192 [ 499.113031][ T9264] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 499.274743][ T9264] REISERFS (device loop4): using ordered data mode [ 499.498592][ T9264] reiserfs: using flush barriers [ 499.533073][ T9264] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 499.815821][ T9264] REISERFS (device loop4): checking transaction log (loop4) [ 500.594850][ T9264] REISERFS (device loop4): Using r5 hash to sort names [ 500.694998][ T9264] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 501.409561][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.415966][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.651188][ T9303] siw: device registration error -23 [ 503.013751][ T9314] loop0: detected capacity change from 0 to 512 [ 503.090495][ T9314] EXT4-fs (loop0): Ignoring removed nobh option [ 503.097033][ T9314] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 503.482899][ T9324] loop4: detected capacity change from 0 to 1764 [ 504.366026][ T9314] EXT4-fs (loop0): 1 truncate cleaned up [ 504.371935][ T9314] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 506.849259][ T9328] loop3: detected capacity change from 0 to 8192 [ 506.947696][ T9343] netlink: 'syz.0.1299': attribute type 11 has an invalid length. [ 506.984648][ T9328] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 507.062384][ T9328] REISERFS (device loop3): using ordered data mode [ 507.126249][ T9328] reiserfs: using flush barriers [ 507.136999][ T9328] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 507.153954][ T9328] REISERFS (device loop3): checking transaction log (loop3) [ 507.203504][ T9328] REISERFS (device loop3): Using r5 hash to sort names [ 507.221950][ T9328] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 511.658154][ T9381] loop0: detected capacity change from 0 to 128 [ 511.800019][ T9381] FAT-fs (loop0): Directory bread(block 414) failed [ 511.807457][ T9381] FAT-fs (loop0): Directory bread(block 415) failed [ 511.814350][ T9381] FAT-fs (loop0): Directory bread(block 416) failed [ 511.821163][ T9381] FAT-fs (loop0): Directory bread(block 417) failed [ 511.827919][ T9381] FAT-fs (loop0): Directory bread(block 418) failed [ 511.834898][ T9381] FAT-fs (loop0): Directory bread(block 419) failed [ 511.841980][ T9381] FAT-fs (loop0): Directory bread(block 420) failed [ 511.848759][ T9381] FAT-fs (loop0): Directory bread(block 421) failed [ 512.376219][ T9387] loop4: detected capacity change from 0 to 1024 [ 512.488737][ T9387] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 514.723522][ T9403] loop0: detected capacity change from 0 to 8192 [ 514.856891][ T9403] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 514.930613][ T9403] REISERFS (device loop0): using ordered data mode [ 514.937292][ T9403] reiserfs: using flush barriers [ 515.075790][ T9403] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 515.185040][ T9403] REISERFS (device loop0): checking transaction log (loop0) [ 515.220513][ T9403] REISERFS (device loop0): Using r5 hash to sort names [ 515.227758][ T9403] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 516.941556][ T9418] xt_hashlimit: max too large, truncated to 1048576 [ 517.707677][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1319'. [ 524.035111][ T9470] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 524.578659][ T9472] loop2: detected capacity change from 0 to 4096 [ 524.638582][ T9472] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 524.746326][ T9472] ntfs: volume version 3.1. [ 524.773355][ T9425] team0: Port device team_slave_0 removed [ 526.863256][ T9491] loop4: detected capacity change from 0 to 4096 [ 527.687468][ T9491] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 528.037216][ T9500] xt_hashlimit: max too large, truncated to 1048576 [ 528.044885][ T9500] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 528.332329][ T9504] ipt_REJECT: ECHOREPLY no longer supported. [ 528.345421][ T9504] IPv6: NLM_F_CREATE should be specified when creating new route [ 528.607570][ T4188] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 528.997181][ T9506] device syzkaller0 entered promiscuous mode [ 529.032336][ T9506] tipc: Enabled bearer , priority 0 [ 529.253901][ T9506] tipc: Resetting bearer [ 529.284603][ T9506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.293748][ T9506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.302456][ T9506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.310622][ T9506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.318742][ T9506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.326898][ T9506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.335045][ T9506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.421285][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.429996][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.662624][ T9505] tipc: Resetting bearer [ 530.314168][ T9505] tipc: Disabling bearer [ 530.447615][ T9517] siw: device registration error -23 [ 533.762051][ T9536] loop4: detected capacity change from 0 to 24 [ 536.009022][ T5739] Bluetooth: hci5: command 0x0409 tx timeout [ 537.077619][ T9538] chnl_net:caif_netlink_parms(): no params data found [ 537.192579][ T9569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1358'. [ 538.594165][ T4232] Bluetooth: hci5: command 0x041b tx timeout [ 538.720854][ T9569] team0: Port device team_slave_0 removed [ 538.828553][ T9588] loop3: detected capacity change from 0 to 4096 [ 538.846635][ T9588] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 538.943378][ T9588] ntfs: volume version 3.1. [ 538.974848][ T9538] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.046350][ T9538] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.090326][ T9586] loop2: detected capacity change from 0 to 8192 [ 539.098010][ T9538] device bridge_slave_0 entered promiscuous mode [ 539.133361][ T9573] loop4: detected capacity change from 0 to 32768 [ 539.208137][ T9538] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.220537][ T9538] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.236529][ T9586] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 539.269818][ T9586] REISERFS (device loop2): using ordered data mode [ 540.004771][ T9588] ntfs: (device loop3): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set maciceland. You might want to try to use the mount option nls=utf8. [ 540.020514][ T9538] device bridge_slave_1 entered promiscuous mode [ 540.024870][ T9588] ntfs: (device loop3): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 540.059567][ T9586] reiserfs: using flush barriers [ 540.068846][ T9573] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.1359 (9573) [ 540.176365][ T9586] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 540.209939][ T9586] REISERFS (device loop2): checking transaction log (loop2) [ 540.226828][ T9538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.239807][ T9573] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 540.248968][ T9586] REISERFS (device loop2): Using r5 hash to sort names [ 540.256170][ T9586] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 540.260473][ T9573] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 540.285670][ T9573] BTRFS info (device loop4): use zstd compression, level 3 [ 540.310309][ T9538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.331231][ T9573] BTRFS info (device loop4): force clearing of disk cache [ 540.355551][ T9573] BTRFS info (device loop4): enabling disk space caching [ 540.375345][ T9573] BTRFS info (device loop4): disk space caching is enabled [ 540.402815][ T9573] BTRFS info (device loop4): has skinny extents [ 540.642542][ T9538] team0: Port device team_slave_0 added [ 540.986589][ T9538] team0: Port device team_slave_1 added [ 541.122770][ T3994] Bluetooth: hci5: command 0x040f tx timeout [ 541.135550][ T9538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.150550][ T9538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.176543][ C0] vkms_vblank_simulate: vblank timer overrun [ 541.213965][ T9573] BTRFS error (device loop4): open_ctree failed: -12 [ 541.320664][ T9538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.357747][ T9538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.369780][ T9538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.532349][ T4180] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by udevd (4180) [ 542.784843][ T9538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.036932][ T9644] loop3: detected capacity change from 0 to 1024 [ 543.051945][ T9538] device hsr_slave_0 entered promiscuous mode [ 543.060693][ T9639] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 543.082317][ T9538] device hsr_slave_1 entered promiscuous mode [ 543.170675][ T9644] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 543.198980][ T4204] Bluetooth: hci5: command 0x0419 tx timeout [ 543.335305][ T9538] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 543.343414][ T9538] Cannot create hsr debugfs directory [ 543.619761][ T9654] misc userio: Invalid payload size [ 543.640358][ T9654] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1376'. [ 545.113794][ T9538] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 545.152468][ T9538] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 546.298989][ T9538] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 546.516610][ T9538] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 546.756363][ T9669] loop4: detected capacity change from 0 to 8192 [ 546.866792][ T9669] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 546.973914][ T9669] REISERFS (device loop4): using ordered data mode [ 546.986043][ T9669] reiserfs: using flush barriers [ 547.042661][ T9669] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 547.060235][ T9669] REISERFS (device loop4): checking transaction log (loop4) [ 547.070841][ T9669] REISERFS (device loop4): Using r5 hash to sort names [ 547.079311][ T9669] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 548.932658][ T9687] loop2: detected capacity change from 0 to 128 [ 549.133666][ T9538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.320470][ T9691] sctp: [Deprecated]: syz.3.1384 (pid 9691) Use of int in maxseg socket option. [ 549.320470][ T9691] Use struct sctp_assoc_value instead [ 551.074832][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 551.094123][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 551.315486][ T9538] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.354229][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 552.107868][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 552.186576][ T4381] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.193841][ T4381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.201797][ T9708] udc dummy_udc.0: failed to start g1: -19 [ 553.568299][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 554.175071][ T9724] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 554.685866][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 554.835188][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 554.907800][ T4381] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.915030][ T4381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.130604][ T9736] loop2: detected capacity change from 0 to 16 [ 555.159452][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 555.192700][ T9736] erofs: (device loop2): mounted with root inode @ nid 36. [ 555.212709][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 555.243790][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 555.288901][ T5739] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 555.315533][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 555.328571][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 555.493209][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 555.578183][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 555.589025][ T5739] usb 5-1: Using ep0 maxpacket: 8 [ 555.709590][ T5739] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 555.933272][ T5739] usb 5-1: config 0 has no interface number 0 [ 556.036770][ T5739] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 556.277302][ T5739] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 556.295420][ T5739] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 556.309087][ T5739] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 556.319484][ T5739] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.340075][ T5739] usb 5-1: config 0 descriptor?? [ 556.400990][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 556.405693][ T5739] ldusb 5-1:0.55: Interrupt in endpoint not found [ 556.441535][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 556.462446][ T9538] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 556.551406][ T9538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 556.699666][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 556.708343][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 557.059222][ T4267] usb 5-1: USB disconnect, device number 3 [ 558.476647][ T9755] overlayfs: missing 'workdir' [ 560.423144][ T9777] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 562.133162][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 562.143435][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 562.305081][ T9538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.887480][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.902444][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.698284][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 563.801253][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 563.853725][ T9801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1413'. [ 563.867387][ T9801] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.876961][ T9801] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.885726][ T9801] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.894498][ T9801] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.904397][ T9805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1413'. [ 563.914292][ T9805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1413'. [ 564.046451][ T9538] device veth0_vlan entered promiscuous mode [ 564.306839][ T9538] device veth1_vlan entered promiscuous mode [ 564.590311][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 564.633040][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 564.698272][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 564.758072][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 564.980475][ T9814] loop2: detected capacity change from 0 to 64 [ 565.008079][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 566.976099][ T26] audit: type=1800 audit(1787172819.151:30): pid=9814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1416" name="file1" dev="loop2" ino=21 res=0 errno=0 [ 567.003304][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 567.015133][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 567.059400][ T9538] device veth0_macvtap entered promiscuous mode [ 567.108209][ T9538] device veth1_macvtap entered promiscuous mode [ 567.269309][ T9538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.340454][ T9538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.392671][ T9538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.451048][ T9538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.466818][ T9538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.486505][ T9538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.497745][ T9538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.536529][ T9538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.602501][ T4198] hfs: node 4:3 still has 1 user(s)! [ 567.609700][ T9538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 567.892194][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 567.909832][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 567.918770][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 567.946759][ T9538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.977626][ T9538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.105457][ T9538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.122396][ T9538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.138938][ T9538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.455873][ T9538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.623992][ T9538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.708714][ T9538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.755984][ T9538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.855110][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 570.889662][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 571.096846][ T9875] input: syz1 as /devices/virtual/input/input5 [ 571.630615][ T9872] device syzkaller0 entered promiscuous mode [ 572.102596][ T9538] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.121276][ T9867] loop4: detected capacity change from 0 to 8192 [ 572.138957][ T9538] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.226112][ T9885] xt_hashlimit: max too large, truncated to 1048576 [ 572.239038][ T9885] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 572.955665][ T9867] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 572.966385][ T9538] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.999229][ T9867] REISERFS (device loop4): using ordered data mode [ 573.030297][ T9538] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.158469][ T9867] reiserfs: using flush barriers [ 573.347416][ T9867] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 573.425824][ T9867] REISERFS (device loop4): checking transaction log (loop4) [ 573.681239][ T9867] REISERFS (device loop4): Using r5 hash to sort names [ 573.688636][ T9867] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 574.429546][ T9893] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 575.035718][ T4747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.060956][ T4747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.097849][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 576.120394][ T9911] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 577.206806][ T4751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.774410][ T4751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.957243][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 580.514259][ T9930] loop2: detected capacity change from 0 to 8192 [ 580.600887][ T9930] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 580.629003][ T9930] REISERFS (device loop2): using ordered data mode [ 580.635705][ T9930] reiserfs: using flush barriers [ 580.701266][ T9930] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 580.837539][ T9930] REISERFS (device loop2): checking transaction log (loop2) [ 580.905552][ T9930] REISERFS (device loop2): Using r5 hash to sort names [ 580.912905][ T9930] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 582.364511][ T9968] "syz.5.1455" (9968) uses obsolete ecb(arc4) skcipher [ 582.387888][ T9968] syz.5.1455 sent an empty control message without MSG_MORE. [ 584.877590][ T9981] loop3: detected capacity change from 0 to 2048 [ 585.687020][ T9984] loop2: detected capacity change from 0 to 1024 [ 586.127557][ T9981] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 586.139467][ T9981] ext4 filesystem being mounted at /294/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 586.843883][ T9984] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 589.392133][T10011] loop4: detected capacity change from 0 to 8192 [ 589.698618][T10011] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 589.709090][T10011] REISERFS (device loop4): using ordered data mode [ 589.715644][T10011] reiserfs: using flush barriers [ 589.722636][T10011] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 589.739354][T10011] REISERFS (device loop4): checking transaction log (loop4) [ 589.765624][T10011] REISERFS (device loop4): Using r5 hash to sort names [ 589.772992][T10011] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 592.522367][T10049] loop4: detected capacity change from 0 to 32768 [ 593.148683][T10058] using random self ethernet address [ 593.154316][T10058] using random host ethernet address [ 593.298026][T10049] XFS (loop4): Mounting V5 Filesystem [ 593.504332][T10048] md/raid:md0: not clean -- starting background reconstruction [ 593.621001][T10048] md/raid:md0: couldn't allocate thread. [ 593.683743][T10049] XFS (loop4): Ending clean mount [ 593.735257][T10049] XFS (loop4): Quotacheck needed: Please wait. [ 593.752963][T10048] md: pers->run() failed ... [ 593.876269][T10049] XFS (loop4): Quotacheck: Done. [ 594.600558][ T26] audit: type=1800 audit(1787172846.781:31): pid=10071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1476" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4430 res=0 errno=0 [ 594.909968][ T4188] XFS (loop4): Unmounting Filesystem [ 595.158248][T10084] loop5: detected capacity change from 0 to 256 [ 595.213912][T10084] exFAT-fs (loop5): failed to load alloc-bitmap [ 595.220441][T10084] exFAT-fs (loop5): failed to recognize exfat type [ 596.078107][ T26] audit: type=1326 audit(1787172848.251:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10090 comm="syz.1.1489" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88891500d9 code=0x7ffc0000 [ 596.166345][ T26] audit: type=1326 audit(1787172848.251:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10090 comm="syz.1.1489" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f88891500d9 code=0x7ffc0000 [ 596.191521][ T26] audit: type=1326 audit(1787172848.251:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10090 comm="syz.1.1489" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88891500d9 code=0x7ffc0000 [ 596.216191][ T26] audit: type=1326 audit(1787172848.251:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10090 comm="syz.1.1489" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88891500d9 code=0x7ffc0000 [ 596.244732][ T26] audit: type=1326 audit(1787172848.251:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10090 comm="syz.1.1489" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f88891500d9 code=0x7ffc0000 [ 596.349085][T10093] loop3: detected capacity change from 0 to 8 [ 596.369099][ T26] audit: type=1326 audit(1787172848.251:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10090 comm="syz.1.1489" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f888914fe42 code=0x7ffc0000 [ 596.419849][ T26] audit: type=1326 audit(1787172848.251:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10090 comm="syz.1.1489" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f888911090e code=0x7ffc0000 [ 596.498112][T10093] SQUASHFS error: Unable to read inode 0x11f [ 596.740723][T10098] loop5: detected capacity change from 0 to 4096 [ 596.755608][ T26] audit: type=1326 audit(1787172848.281:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10090 comm="syz.1.1489" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f888914ff07 code=0x7ffc0000 [ 596.805407][T10098] ntfs3: Unknown parameter 'fmas_aeTlsk' [ 598.429656][ T26] audit: type=1326 audit(1787172848.281:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10090 comm="syz.1.1489" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f888911090e code=0x7ffc0000 [ 599.160992][T10115] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 600.416327][ T3994] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 600.823748][T10134] loop4: detected capacity change from 0 to 1024 [ 602.221384][T10138] loop5: detected capacity change from 0 to 64 [ 602.267441][T10134] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 602.970567][T10138] MINIX-fs: bad superblock [ 603.748980][ T3994] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 603.829739][ T3994] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.837807][ T3994] usb 4-1: Product: syz [ 603.842304][ T3994] usb 4-1: Manufacturer: syz [ 603.870378][ T3994] usb 4-1: can't set config #1, error -71 [ 603.881707][ T3994] usb 4-1: USB disconnect, device number 3 [ 605.108018][T10160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1510'. [ 606.463858][T10182] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 606.531819][T10177] netlink: 'syz.1.1515': attribute type 29 has an invalid length. [ 606.665307][T10177] netlink: 'syz.1.1515': attribute type 29 has an invalid length. [ 606.862285][T10180] netlink: 'syz.1.1515': attribute type 29 has an invalid length. [ 607.759923][T10198] loop3: detected capacity change from 0 to 512 [ 608.823397][T10198] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 608.835508][T10198] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 609.037109][T10198] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.1522: Invalid block bitmap block 0 in block_group 0 [ 609.764582][T10198] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 609.795079][T10198] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.1522: attempt to clear invalid blocks 983261 len 1 [ 609.996277][T10198] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.1522: Invalid inode table block 0 in block_group 0 [ 610.013352][T10198] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 610.025613][T10198] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 610.126048][T10191] loop2: detected capacity change from 0 to 8192 [ 610.247176][T10198] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.1522: Invalid inode table block 0 in block_group 0 [ 611.884842][T10198] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 611.896025][T10198] EXT4-fs error (device loop3): ext4_truncate:4286: inode #11: comm syz.3.1522: mark_inode_dirty error [ 611.907993][T10198] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 611.917564][T10198] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.1522: Invalid inode table block 0 in block_group 0 [ 611.932462][T10198] EXT4-fs (loop3): 1 truncate cleaned up [ 611.938153][T10198] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none. [ 612.183634][T10225] loop5: detected capacity change from 0 to 1024 [ 612.350136][T10227] loop4: detected capacity change from 0 to 512 [ 612.716255][T10227] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 614.469032][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 614.469072][ T26] audit: type=1800 audit(1787172866.321:61): pid=10240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1532" name="file1" dev="loop4" ino=1048603 res=0 errno=0 [ 614.584044][T10240] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 616.846048][T10256] loop4: detected capacity change from 0 to 8192 [ 617.273216][T10275] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10275] [ 617.443567][ T9540] Bluetooth: Wrong link type (-22) [ 617.567606][T10256] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 617.766654][T10256] REISERFS (device loop4): using ordered data mode [ 617.887728][T10256] reiserfs: using flush barriers [ 617.950222][T10269] loop5: detected capacity change from 0 to 8192 [ 617.989048][T10256] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 618.187310][T10280] loop3: detected capacity change from 0 to 32768 [ 618.232530][T10256] REISERFS (device loop4): checking transaction log (loop4) [ 618.259887][T10256] REISERFS (device loop4): Using r5 hash to sort names [ 618.271068][T10256] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 618.441743][T10269] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 618.476774][T10280] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 619.352826][T10269] REISERFS (device loop5): using ordered data mode [ 619.429559][ T4195] ocfs2: Unmounting device (7,3) on (node local) [ 619.485783][T10269] reiserfs: using flush barriers [ 619.498314][T10269] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 619.799350][T10269] REISERFS (device loop5): checking transaction log (loop5) [ 619.819235][T10269] REISERFS (device loop5): Using r5 hash to sort names [ 620.299334][T10269] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 623.223459][T10334] loop4: detected capacity change from 0 to 8192 [ 623.294447][T10334] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 623.310786][T10334] REISERFS (device loop4): using ordered data mode [ 623.317417][T10334] reiserfs: using flush barriers [ 623.359296][T10334] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 623.459981][T10341] comedi comedi0: pcmda12: I/O port conflict (0x5,16) [ 623.517580][T10334] REISERFS (device loop4): checking transaction log (loop4) [ 623.603859][T10334] REISERFS (device loop4): Using r5 hash to sort names [ 623.645415][T10342] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 623.726660][T10342] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 623.727414][T10334] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 624.240602][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.247723][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.440028][T10349] loop3: detected capacity change from 0 to 4096 [ 624.542033][T10349] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 625.517832][T10360] xt_hashlimit: max too large, truncated to 1048576 [ 625.525338][T10360] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 625.688941][ T26] audit: type=1800 audit(1787172877.851:62): pid=10360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1564" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 625.855666][T10353] loop5: detected capacity change from 0 to 8192 [ 625.903777][T10353] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 625.937353][T10353] REISERFS (device loop5): using ordered data mode [ 625.965891][T10353] reiserfs: using flush barriers [ 625.983653][T10353] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 626.036269][T10353] REISERFS (device loop5): checking transaction log (loop5) [ 626.057382][T10353] REISERFS (device loop5): Using r5 hash to sort names [ 626.078342][T10353] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 626.098421][ T4195] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 629.072096][T10402] loop4: detected capacity change from 0 to 8192 [ 629.173173][T10402] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 629.187751][T10402] REISERFS (device loop4): using ordered data mode [ 629.204711][T10402] reiserfs: using flush barriers [ 629.211383][T10402] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 629.229261][T10402] REISERFS (device loop4): checking transaction log (loop4) [ 629.240283][T10402] REISERFS (device loop4): Using r5 hash to sort names [ 629.247579][T10402] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 631.969138][T10433] udc dummy_udc.0: failed to start g1: -19 [ 633.701309][T10463] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1597'. [ 633.870823][T10463] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 633.879133][T10463] IPv6: NLM_F_CREATE should be set when creating new route [ 634.118985][T10463] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1597'. [ 635.612005][T10482] xt_hashlimit: size too large, truncated to 1048576 [ 635.618856][T10482] xt_hashlimit: max too large, truncated to 1048576 [ 636.092785][T10480] loop2: detected capacity change from 0 to 8192 [ 637.203673][T10480] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 637.245924][T10480] REISERFS (device loop2): using ordered data mode [ 637.326775][T10480] reiserfs: using flush barriers [ 637.556363][T10480] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 637.829179][T10480] REISERFS (device loop2): checking transaction log (loop2) [ 637.833367][T10498] read descriptors [ 637.906414][T10480] REISERFS (device loop2): Using r5 hash to sort names [ 637.940799][ T9538] ffs_data_put(): freeing [ 637.968198][T10480] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 638.940973][T10502] loop3: detected capacity change from 0 to 8192 [ 639.008433][T10502] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 639.105856][T10502] REISERFS (device loop3): using ordered data mode [ 639.138923][T10502] reiserfs: using flush barriers [ 639.168949][T10502] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 639.272168][T10502] REISERFS (device loop3): checking transaction log (loop3) [ 639.300503][T10502] REISERFS (device loop3): Using r5 hash to sort names [ 639.307727][T10502] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 640.801687][T10528] netlink: 'syz.1.1615': attribute type 8 has an invalid length. [ 642.320193][T10545] overlayfs: failed to clone upperpath [ 642.959624][T10550] loop3: detected capacity change from 0 to 128 [ 643.029255][T10550] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 643.301154][T10551] loop2: detected capacity change from 0 to 8192 [ 643.757560][T10551] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 643.958937][T10551] REISERFS (device loop2): using ordered data mode [ 644.026548][T10551] reiserfs: using flush barriers [ 644.109242][T10551] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 644.139196][T10551] REISERFS (device loop2): checking transaction log (loop2) [ 644.170370][T10551] REISERFS (device loop2): Using r5 hash to sort names [ 644.215352][T10559] loop5: detected capacity change from 0 to 8192 [ 644.228377][T10551] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 645.282940][T10559] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 645.380318][T10559] REISERFS (device loop5): using ordered data mode [ 645.426946][T10559] reiserfs: using flush barriers [ 645.538573][T10559] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 645.829041][T10559] REISERFS (device loop5): checking transaction log (loop5) [ 645.947276][T10559] REISERFS (device loop5): Using r5 hash to sort names [ 646.045868][T10559] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 647.510466][T10593] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1637'. [ 649.231973][T10600] input: syz0 as /devices/virtual/input/input7 [ 649.369589][T10600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 649.377077][T10600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 649.419773][T10600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 649.427760][T10600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 650.721235][T10625] loop4: detected capacity change from 0 to 512 [ 650.774111][T10625] EXT4-fs (loop4): error: journal path ./file0 is not a block device [ 650.784252][T10629] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1646'. [ 653.568031][T10639] loop5: detected capacity change from 0 to 8192 [ 653.664603][T10639] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 653.725975][T10639] REISERFS (device loop5): using ordered data mode [ 653.775640][T10643] loop4: detected capacity change from 0 to 8192 [ 653.788388][T10639] reiserfs: using flush barriers [ 653.839770][T10639] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 653.889224][T10639] REISERFS (device loop5): checking transaction log (loop5) [ 653.900452][T10643] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 653.955026][T10643] REISERFS (device loop4): using ordered data mode [ 653.977566][T10639] REISERFS (device loop5): Using r5 hash to sort names [ 653.994480][T10643] reiserfs: using flush barriers [ 654.019172][T10639] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 654.046579][T10643] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 654.296719][T10643] REISERFS (device loop4): checking transaction log (loop4) [ 654.752857][T10643] REISERFS (device loop4): Using r5 hash to sort names [ 654.775189][T10643] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 655.243568][T10656] loop2: detected capacity change from 0 to 8192 [ 655.653378][T10656] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 655.689654][T10656] REISERFS (device loop2): using ordered data mode [ 655.720339][T10656] reiserfs: using flush barriers [ 655.729577][T10656] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 655.746947][T10656] REISERFS (device loop2): checking transaction log (loop2) [ 655.768191][T10656] REISERFS (device loop2): Using r5 hash to sort names [ 655.784107][T10656] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 656.010082][ T26] audit: type=1326 audit(1787172908.191:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10677 comm="syz.1.1660" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88891500d9 code=0x7ffc0000 [ 656.629174][ T26] audit: type=1326 audit(1787172908.191:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10677 comm="syz.1.1660" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88891500d9 code=0x7ffc0000 [ 656.776849][ T26] audit: type=1326 audit(1787172908.211:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10677 comm="syz.1.1660" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f88891500d9 code=0x7ffc0000 [ 656.819474][ T26] audit: type=1326 audit(1787172908.211:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10677 comm="syz.1.1660" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88891500d9 code=0x7ffc0000 [ 656.888978][T10675] overlayfs: missing 'lowerdir' [ 657.332714][ T26] audit: type=1326 audit(1787172908.211:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10677 comm="syz.1.1660" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88891500d9 code=0x7ffc0000 [ 657.357124][ T26] audit: type=1326 audit(1787172908.211:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10677 comm="syz.1.1660" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f88891500d9 code=0x7ffc0000 [ 657.381458][ T26] audit: type=1326 audit(1787172908.211:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10677 comm="syz.1.1660" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88891500d9 code=0x7ffc0000 [ 657.969436][ T26] audit: type=1326 audit(1787172908.211:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10677 comm="syz.1.1660" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88891500d9 code=0x7ffc0000 [ 658.212712][ T26] audit: type=1326 audit(1787172908.211:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10677 comm="syz.1.1660" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f88891500d9 code=0x7ffc0000 [ 658.237660][ T26] audit: type=1326 audit(1787172908.211:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10677 comm="syz.1.1660" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88891500d9 code=0x7ffc0000 [ 658.321755][T10699] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1665'. [ 659.426631][T10712] loop2: detected capacity change from 0 to 16 [ 659.858325][T10704] loop4: detected capacity change from 0 to 8192 [ 661.665167][T10712] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 669.769765][T10780] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 671.244974][T10797] loop4: detected capacity change from 0 to 8192 [ 671.355821][T10797] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 671.409106][T10797] REISERFS (device loop4): using ordered data mode [ 671.416370][T10797] reiserfs: using flush barriers [ 671.581256][T10797] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 671.709227][T10797] REISERFS (device loop4): checking transaction log (loop4) [ 671.718201][T10797] REISERFS (device loop4): Using r5 hash to sort names [ 671.730505][T10797] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 675.912051][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 677.341010][T10855] loop4: detected capacity change from 0 to 8192 [ 677.519232][T10855] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 677.600990][T10855] REISERFS (device loop4): using ordered data mode [ 677.608028][T10855] reiserfs: using flush barriers [ 677.678838][T10855] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 677.739341][T10855] REISERFS (device loop4): checking transaction log (loop4) [ 677.787598][T10855] REISERFS (device loop4): Using r5 hash to sort names [ 677.826911][T10855] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 678.770544][T10863] loop2: detected capacity change from 0 to 8192 [ 678.844600][T10863] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 678.909939][T10863] REISERFS (device loop2): using ordered data mode [ 678.916582][T10863] reiserfs: using flush barriers [ 678.947410][T10863] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 679.046687][T10882] loop5: detected capacity change from 0 to 512 [ 679.059488][T10882] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 679.102200][T10863] REISERFS (device loop2): checking transaction log (loop2) [ 679.158464][T10863] REISERFS (device loop2): Using r5 hash to sort names [ 679.186293][T10863] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 679.650932][ T4206] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 679.680541][T10889] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 679.701315][T10890] netlink: 'syz.4.1714': attribute type 2 has an invalid length. [ 679.712661][ T4206] CPU: 0 PID: 4206 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 679.720286][ T4206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 679.730390][ T4206] Workqueue: hci0 hci_rx_work [ 679.735332][ T4206] Call Trace: [ 679.738660][ T4206] [ 679.741625][ T4206] dump_stack_lvl+0x188/0x250 [ 679.746417][ T4206] ? show_regs_print_info+0x20/0x20 [ 679.751683][ T4206] ? load_image+0x410/0x410 [ 679.756313][ T4206] sysfs_create_dir_ns+0x26a/0x290 [ 679.761516][ T4206] ? sysfs_warn_dup+0xa0/0xa0 [ 679.766227][ T4206] ? kthread+0x42e/0x520 [ 679.770670][ T4206] ? do_raw_spin_unlock+0x11d/0x230 [ 679.775994][ T4206] kobject_add_internal+0x5ba/0xcd0 [ 679.781336][ T4206] kobject_add+0x160/0x230 [ 679.785808][ T4206] ? kobject_init+0x1c0/0x1c0 [ 679.790541][ T4206] ? __raw_spin_lock_init+0x41/0x100 [ 679.795864][ T4206] ? klist_children_get+0x50/0x50 [ 679.801004][ T4206] ? get_device_parent+0x121/0x3e0 [ 679.806150][ T4206] device_add+0x470/0x1050 [ 679.810597][ T4206] ? device_initialize+0x2a5/0x4d0 [ 679.815917][ T4206] hci_conn_add_sysfs+0xd1/0x1e0 [ 679.820967][ T4206] le_conn_complete_evt+0xc2e/0x14d0 [ 679.826336][ T4206] ? cs_le_create_conn+0x5e0/0x5e0 [ 679.831493][ T4206] ? __mutex_trylock_common+0x15c/0x260 [ 679.837134][ T4206] hci_le_meta_evt+0x285/0x3ca0 [ 679.842037][ T4206] ? hci_event_packet+0x363/0x1310 [ 679.847203][ T4206] ? __lock_acquire+0x7b50/0x7b50 [ 679.852281][ T4206] ? hci_remote_host_features_evt+0x240/0x240 [ 679.858375][ T4206] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 679.864145][ T4206] ? mark_lock+0x94/0x320 [ 679.868516][ T4206] ? mutex_unlock+0x10/0x10 [ 679.873068][ T4206] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 679.879098][ T4206] ? lock_chain_count+0x20/0x20 [ 679.883992][ T4206] ? __rwlock_init+0x140/0x140 [ 679.888805][ T4206] hci_event_packet+0xe0b/0x1310 [ 679.893798][ T4206] ? _raw_spin_unlock+0x40/0x40 [ 679.898689][ T4206] ? rcu_lock_release+0x20/0x20 [ 679.903584][ T4206] ? hci_send_to_monitor+0x9c/0x4a0 [ 679.908814][ T4206] hci_rx_work+0x255/0xa10 [ 679.913276][ T4206] process_one_work+0x867/0xff0 [ 679.918262][ T4206] ? worker_detach_from_pool+0x240/0x240 [ 679.923930][ T4206] ? lockdep_hardirqs_off+0x70/0x100 [ 679.929327][ T4206] ? _raw_spin_lock_irq+0xb7/0xf0 [ 679.934410][ T4206] ? _raw_spin_lock_irqsave+0x100/0x100 [ 679.939990][ T4206] ? wq_worker_running+0x97/0x170 [ 679.945047][ T4206] worker_thread+0xad7/0x12a0 [ 679.949788][ T4206] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 679.955729][ T4206] kthread+0x42e/0x520 [ 679.959823][ T4206] ? rcu_lock_release+0x20/0x20 [ 679.964706][ T4206] ? kthread_blkcg+0xd0/0xd0 [ 679.969345][ T4206] ret_from_fork+0x1f/0x30 [ 679.973857][ T4206] [ 680.045585][ T4206] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 680.060294][ T4206] Bluetooth: hci0: failed to register connection device [ 682.975437][T10933] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 683.401384][T10921] loop2: detected capacity change from 0 to 8192 [ 683.531328][T10947] Device name cannot be null; rc = [-22] [ 683.559771][T10947] overlayfs: overlapping lowerdir path [ 683.603285][T10948] overlayfs: overlapping lowerdir path [ 683.765634][T10921] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 683.909428][T10921] REISERFS (device loop2): using ordered data mode [ 684.089933][T10921] reiserfs: using flush barriers [ 684.325130][T10921] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 684.441536][T10921] REISERFS (device loop2): checking transaction log (loop2) [ 684.450924][T10921] REISERFS (device loop2): Using r5 hash to sort names [ 684.458360][T10921] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 684.992220][T10954] loop4: detected capacity change from 0 to 8192 [ 685.140629][T10954] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 685.228167][T10954] REISERFS (device loop4): using ordered data mode [ 685.307425][T10954] reiserfs: using flush barriers [ 685.369209][T10954] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 685.508214][T10954] REISERFS (device loop4): checking transaction log (loop4) [ 685.677959][T10954] REISERFS (device loop4): Using r5 hash to sort names [ 685.691133][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.697486][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.041364][T10954] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 686.493522][ T4236] Bluetooth: hci0: command 0x0406 tx timeout [ 690.906023][T11021] xt_hashlimit: max too large, truncated to 1048576 [ 690.916834][T11021] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 692.463825][T11028] loop4: detected capacity change from 0 to 8192 [ 692.741519][T11028] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 692.832437][T11028] REISERFS (device loop4): using ordered data mode [ 692.908576][T11028] reiserfs: using flush barriers [ 693.255719][T11034] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1751'. [ 693.266719][T11028] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 693.287069][T11034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1751'. [ 693.413806][T11028] REISERFS (device loop4): checking transaction log (loop4) [ 693.686450][T11028] REISERFS (device loop4): Using r5 hash to sort names [ 693.729375][T11028] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 694.348414][T11041] loop5: detected capacity change from 0 to 8192 [ 694.459124][T11041] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 694.487464][T11041] REISERFS (device loop5): using ordered data mode [ 694.512294][T11041] reiserfs: using flush barriers [ 694.521986][T11041] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 694.549286][T11041] REISERFS (device loop5): checking transaction log (loop5) [ 694.572848][T11041] REISERFS (device loop5): Using r5 hash to sort names [ 694.582454][T11041] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 696.608336][T11069] overlayfs: failed to clone lowerpath [ 697.381414][T11087] loop4: detected capacity change from 0 to 8192 [ 697.412641][T11087] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 697.412864][T11087] REISERFS (device loop4): using ordered data mode [ 697.431212][T11087] reiserfs: using flush barriers [ 697.447605][T11087] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 697.468351][T11087] REISERFS (device loop4): checking transaction log (loop4) [ 697.479717][T11087] REISERFS (device loop4): Using r5 hash to sort names [ 697.487405][T11087] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 746.455945][T11613] loop5: detected capacity change from 0 to 8192 [ 746.632800][T11613] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 746.645756][T11613] REISERFS (device loop5): using ordered data mode [ 746.733194][T11613] reiserfs: using flush barriers [ 747.469064][T11613] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 747.536683][T11613] REISERFS (device loop5): checking transaction log (loop5) [ 747.551222][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.557724][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.598812][T11613] REISERFS (device loop5): Using r5 hash to sort names [ 747.606182][T11613] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 748.411127][T11637] loop4: detected capacity change from 0 to 8192 [ 750.357460][T11637] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 750.402260][T11637] REISERFS (device loop4): using ordered data mode [ 750.409245][T11637] reiserfs: using flush barriers [ 750.528919][T11637] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 750.624730][T11637] REISERFS (device loop4): checking transaction log (loop4) [ 750.639189][T11637] REISERFS (device loop4): Using r5 hash to sort names [ 750.646601][T11637] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 760.145976][T11724] loop2: detected capacity change from 0 to 8192 [ 760.247283][T11724] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 760.289006][T11724] REISERFS (device loop2): using ordered data mode [ 760.296893][T11724] reiserfs: using flush barriers [ 760.330168][ T3994] Bluetooth: hci5: command 0x0406 tx timeout [ 761.176299][T11724] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 761.243753][T11724] REISERFS (device loop2): checking transaction log (loop2) [ 761.285447][T11724] REISERFS (device loop2): Using r5 hash to sort names [ 761.314575][T11724] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 771.497892][T11832] loop5: detected capacity change from 0 to 8192 [ 771.695376][T11832] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 771.711233][T11832] REISERFS (device loop5): using ordered data mode [ 771.717919][T11832] reiserfs: using flush barriers [ 772.382710][T11832] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 772.466587][T11832] REISERFS (device loop5): checking transaction log (loop5) [ 772.508531][T11832] REISERFS (device loop5): Using r5 hash to sort names [ 772.639195][T11832] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 782.560371][T11950] loop4: detected capacity change from 0 to 8192 [ 782.676876][T11950] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 782.709521][T11950] REISERFS (device loop4): using ordered data mode [ 782.716207][T11950] reiserfs: using flush barriers [ 782.782446][T11950] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 782.871013][T11950] REISERFS (device loop4): checking transaction log (loop4) [ 782.903252][T11950] REISERFS (device loop4): Using r5 hash to sort names [ 782.943747][T11950] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 783.190251][T11953] loop5: detected capacity change from 0 to 8192 [ 783.574312][T11953] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 783.598181][T11953] REISERFS (device loop5): using ordered data mode [ 783.652755][T11953] reiserfs: using flush barriers [ 783.698425][T11953] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 783.799273][T11953] REISERFS (device loop5): checking transaction log (loop5) [ 783.818472][T11953] REISERFS (device loop5): Using r5 hash to sort names [ 783.827635][T11953] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 786.989696][T11972] netlink: 'syz.2.2015': attribute type 29 has an invalid length. [ 787.052704][T11972] netlink: 'syz.2.2015': attribute type 29 has an invalid length. [ 787.064954][T11972] netlink: 'syz.2.2015': attribute type 29 has an invalid length. [ 787.074515][T11972] netlink: 'syz.2.2015': attribute type 29 has an invalid length. [ 788.877757][T12005] loop2: detected capacity change from 0 to 32768 [ 789.090234][T12005] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 789.236679][T12008] loop5: detected capacity change from 0 to 8192 [ 789.711293][T12008] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 789.763364][T12008] REISERFS (device loop5): using ordered data mode [ 789.771465][T12019] overlayfs: missing 'lowerdir' [ 789.829614][T12008] reiserfs: using flush barriers [ 789.879245][T12008] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 789.954122][T12008] REISERFS (device loop5): checking transaction log (loop5) [ 790.163636][T12008] REISERFS (device loop5): Using r5 hash to sort names [ 790.275882][T12008] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 791.313904][ T4198] ocfs2: Unmounting device (7,2) on (node local) [ 795.586706][T12054] loop5: detected capacity change from 0 to 8192 [ 796.758999][T12054] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 796.778515][T12054] REISERFS (device loop5): using ordered data mode [ 796.785412][T12054] reiserfs: using flush barriers [ 796.792043][T12054] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 796.899279][T12054] REISERFS (device loop5): checking transaction log (loop5) [ 797.224490][T12054] REISERFS (device loop5): Using r5 hash to sort names [ 797.908249][T12054] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 801.796250][T12108] loop2: detected capacity change from 0 to 128 [ 802.059506][T12097] loop4: detected capacity change from 0 to 8192 [ 803.167755][T12113] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4198] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[12113] [ 803.386634][T12097] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 803.434302][T12097] REISERFS (device loop4): using ordered data mode [ 803.488597][T12097] reiserfs: using flush barriers [ 803.517204][T12097] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 803.633127][T12097] REISERFS (device loop4): checking transaction log (loop4) [ 803.705658][T12118] loop5: detected capacity change from 0 to 4096 [ 803.738986][T12097] REISERFS (device loop4): Using r5 hash to sort names [ 803.746299][T12097] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 803.826385][T12118] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 804.267537][T12129] xt_hashlimit: max too large, truncated to 1048576 [ 804.276805][T12129] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 804.692386][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 804.692404][ T26] audit: type=1800 audit(1787173056.871:86): pid=12129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2054" name="file1" dev="loop5" ino=30 res=0 errno=0 [ 804.928078][ T9538] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 808.679940][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.691469][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.167216][T12167] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2064'. [ 814.565650][T12204] loop4: detected capacity change from 0 to 8192 [ 814.732716][T12204] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 814.778982][T12204] REISERFS (device loop4): using ordered data mode [ 814.818800][T12204] reiserfs: using flush barriers [ 814.841651][T12204] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 815.015862][T12204] REISERFS (device loop4): checking transaction log (loop4) [ 815.123846][T12204] REISERFS (device loop4): Using r5 hash to sort names [ 815.328231][T12204] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 817.314669][T12222] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2078'. [ 820.935388][T12269] tmpfs: Unknown parameter 'gid0x000000000000ee01' [ 822.893151][T12286] loop4: detected capacity change from 0 to 4096 [ 823.108183][T12286] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 823.175137][T12300] netlink: 'syz.1.2099': attribute type 10 has an invalid length. [ 823.183232][T12300] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2099'. [ 823.783764][T12300] team0: Port device geneve0 added [ 824.191353][T12310] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4195] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[12310] [ 824.387025][ T9540] Bluetooth: Wrong link type (-22) [ 824.786680][T12312] xt_hashlimit: max too large, truncated to 1048576 [ 824.793957][T12312] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 825.840425][ T4188] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 827.810062][T12345] udc-core: couldn't find an available UDC or it's busy [ 830.795763][T12375] overlayfs: failed to clone lowerpath [ 832.803957][T12405] futex_wake_op: syz.1.2131 tries to shift op by 144; fix this program [ 833.824884][T12416] tmpfs: Unknown parameter 'gid0x000000000000ee01' [ 834.646853][T12415] loop2: detected capacity change from 0 to 4096 [ 834.671935][T12415] ntfs3: Unknown parameter '6Svj' [ 837.684611][T12433] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2140'. [ 837.738575][T12433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2140'. [ 838.927072][T12452] netem: change failed [ 841.302929][T12472] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 841.319385][T12472] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 843.362290][T12492] loop5: detected capacity change from 0 to 64 [ 844.885882][ T26] audit: type=1326 audit(1787173097.061:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12510 comm="syz.3.2165" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0bf7f0d9 code=0x7ffc0000 [ 845.487156][ T26] audit: type=1326 audit(1787173097.061:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12510 comm="syz.3.2165" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0bf7f0d9 code=0x7ffc0000 [ 845.525609][T12504] loop2: detected capacity change from 0 to 8192 [ 845.599005][ T26] audit: type=1326 audit(1787173097.091:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12510 comm="syz.3.2165" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f9d0bf7f0d9 code=0x7ffc0000 [ 846.309358][ T26] audit: type=1326 audit(1787173097.091:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12510 comm="syz.3.2165" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0bf7f0d9 code=0x7ffc0000 [ 846.427330][T12504] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 846.467720][T12504] REISERFS (device loop2): using ordered data mode [ 846.507323][T12504] reiserfs: using flush barriers [ 846.513598][ T26] audit: type=1326 audit(1787173097.091:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12510 comm="syz.3.2165" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0bf7f0d9 code=0x7ffc0000 [ 846.575163][T12504] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 847.564159][ T26] audit: type=1326 audit(1787173097.571:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12510 comm="syz.3.2165" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9d0bf7f0d9 code=0x7ffc0000 [ 847.597998][ T26] audit: type=1326 audit(1787173097.571:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12510 comm="syz.3.2165" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0bf7f0d9 code=0x7ffc0000 [ 847.710257][T12504] REISERFS (device loop2): checking transaction log (loop2) [ 847.725253][T12504] REISERFS (device loop2): Using r5 hash to sort names [ 847.739209][T12504] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 848.607767][ T26] audit: type=1326 audit(1787173097.571:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12510 comm="syz.3.2165" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0bf7f0d9 code=0x7ffc0000 [ 848.686798][ T26] audit: type=1326 audit(1787173097.571:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12510 comm="syz.3.2165" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f9d0bf7f0d9 code=0x7ffc0000 [ 848.722653][ T26] audit: type=1326 audit(1787173097.571:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12510 comm="syz.3.2165" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0bf7f0d9 code=0x7ffc0000 [ 850.416288][T12579] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[12579] [ 850.440757][T12579] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2180'. [ 850.450358][T12579] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2180'. [ 850.459663][T12579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2180'. [ 850.848248][ T4206] Bluetooth: Wrong link type (-22) [ 851.053733][T12581] loop2: detected capacity change from 0 to 128 [ 851.159108][T12581] EXT4-fs (loop2): Test dummy encryption mode enabled [ 851.166626][T12581] EXT4-fs (loop2): Test dummy encryption mode enabled [ 851.185132][T12581] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 851.201085][T12581] ext4 filesystem being mounted at /399/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 858.137005][T12647] loop4: detected capacity change from 0 to 256 [ 861.515432][T12663] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 861.979688][T12663] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 861.988720][T12678] hub 8-0:1.0: USB hub found [ 861.996600][T12678] hub 8-0:1.0: 1 port detected [ 864.289207][T12698] overlayfs: failed to clone upperpath [ 867.302105][T12728] loop2: detected capacity change from 0 to 32768 [ 868.692493][T12728] XFS (loop2): Mounting V5 Filesystem [ 868.812335][T12745] netlink: 'syz.1.2224': attribute type 2 has an invalid length. [ 868.820949][T12745] netlink: 'syz.1.2224': attribute type 1 has an invalid length. [ 868.921513][T12751] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2225'. [ 868.968292][T12728] XFS (loop2): Ending clean mount [ 868.978192][T12728] XFS (loop2): Quotacheck needed: Please wait. [ 869.002054][T12752] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2225'. [ 869.070357][T12728] XFS (loop2): Quotacheck: Done. [ 869.792902][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 869.812049][ T26] audit: type=1800 audit(1787173121.701:108): pid=12760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2220" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4428 res=0 errno=0 [ 870.098547][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.105080][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.156121][ T4198] XFS (loop2): Unmounting Filesystem [ 873.141377][T12790] futex_wake_op: syz.3.2237 tries to shift op by 144; fix this program [ 876.093434][T12810] loop5: detected capacity change from 0 to 32768 [ 877.564048][T12832] xt_hashlimit: max too large, truncated to 1048576 [ 877.571950][T12810] XFS (loop5): Mounting V5 Filesystem [ 878.204583][T12810] XFS (loop5): Ending clean mount [ 878.225193][T12810] XFS (loop5): Quotacheck needed: Please wait. [ 879.729506][T12810] XFS (loop5): Quotacheck: Done. [ 879.766334][ T9538] XFS (loop5): Unmounting Filesystem [ 881.283523][T12861] overlayfs: failed to clone upperpath [ 882.647701][T12869] loop4: detected capacity change from 0 to 128 [ 882.709535][T12869] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 882.720446][T12869] ext4 filesystem being mounted at /401/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 883.069549][T12877] rnbd_client L211: map_device: Parameters missing [ 888.992991][T12914] loop2: detected capacity change from 0 to 512 [ 890.169263][T12914] EXT4-fs (loop2): Test dummy encryption mode enabled [ 890.176216][T12914] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 891.042245][T12914] EXT4-fs (loop2): 1 truncate cleaned up [ 891.048945][T12914] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000007,dioread_lock,test_dummy_encryption=v1,errors=remount-ro,nogrpid,. Quota mode: none. [ 893.652345][T12943] loop5: detected capacity change from 0 to 1024 [ 893.785173][T12943] EXT4-fs (loop5): Mount option "dioread_lock" incompatible with ext3 [ 893.962722][T12943] loop5: detected capacity change from 0 to 512 [ 896.581608][T12967] loop2: detected capacity change from 0 to 40427 [ 896.930020][T12967] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x1ffff [ 896.938459][T12967] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0xe4 [ 896.949201][T12967] F2FS-fs (loop2): invalid crc value [ 897.403380][T12976] loop5: detected capacity change from 0 to 512 [ 897.427800][T12967] F2FS-fs (loop2): Found nat_bits in checkpoint [ 897.535176][T12967] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x44e/0xaa0 [ 898.260570][T12967] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 898.281362][T12964] F2FS-fs (loop2) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x180/0x8e0 [ 898.304477][ T26] audit: type=1800 audit(1787173150.481:109): pid=12978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2280" name="idVendor" dev="configfs" ino=69577 res=0 errno=0 [ 898.344693][T12976] EXT4-fs (loop5): Ignoring removed bh option [ 898.538408][ T4198] attempt to access beyond end of device [ 898.538408][ T4198] loop2: rw=2049, want=45104, limit=40427 [ 898.617339][T12976] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.2281: corrupted in-inode xattr [ 898.727143][T12976] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.2281: couldn't read orphan inode 15 (err -117) [ 898.784932][T12976] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000005,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 899.124764][T12990] hub 8-0:1.0: USB hub found [ 899.776463][T12990] hub 8-0:1.0: 1 port detected [ 911.152994][ T26] audit: type=1800 audit(1787173163.271:110): pid=13073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2307" name="local" dev="configfs" ino=70785 res=0 errno=0 [ 912.120284][T13086] loop4: detected capacity change from 0 to 128 [ 913.005832][T13093] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4188] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[13093] [ 913.044459][T13093] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2311'. [ 913.053814][T13093] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2311'. [ 913.258559][T13093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2311'. [ 917.259184][T13120] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 917.923706][T13129] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2320'. [ 928.980327][T13201] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 929.239302][T13203] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4195] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[13203] [ 929.264249][T13203] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2336'. [ 929.273909][T13203] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2336'. [ 929.283243][T13203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2336'. [ 929.298710][ T9540] Bluetooth: Wrong link type (-22) [ 929.304724][ T9540] Bluetooth: hci3: link tx timeout [ 929.310748][ T9540] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 929.319431][ T9540] Bluetooth: hci3: link tx timeout [ 929.324872][ T9540] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 930.691673][T13208] netlink: 'syz.3.2340': attribute type 2 has an invalid length. [ 930.699460][T13208] netlink: 'syz.3.2340': attribute type 1 has an invalid length. [ 930.742203][T13212] loop4: detected capacity change from 0 to 1024 [ 930.844820][T13212] EXT4-fs (loop4): Mount option "dioread_lock" incompatible with ext3 [ 930.989784][T13220] loop2: detected capacity change from 0 to 256 [ 931.004414][T13212] loop4: detected capacity change from 0 to 128 [ 931.022767][T13217] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 931.056424][T13217] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 931.091437][T13212] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,quota,,errors=continue. Quota mode: writeback. [ 931.267818][T13212] ext4 filesystem being mounted at /425/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 931.389557][ T4233] Bluetooth: hci3: command 0x0406 tx timeout [ 931.599863][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.607760][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.501891][T13238] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 13238 comm: syz.2.2345) [ 932.516652][T13238] tmpfs: Bad value for 'mpol' [ 933.617206][T13247] loop5: detected capacity change from 0 to 128 [ 934.497705][T13262] gadgetfs: bound to dummy_udc driver [ 935.301003][T13269] loop4: detected capacity change from 0 to 128 [ 935.953450][T13270] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[9538] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[13270] [ 936.441723][T13276] netlink: 260 bytes leftover after parsing attributes in process `syz.5.2353'. [ 936.450991][T13276] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2353'. [ 936.460359][T13276] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2353'. [ 936.473014][ T4206] Bluetooth: Wrong link type (-22) [ 937.766099][T13294] loop2: detected capacity change from 0 to 512 [ 938.044996][T13294] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 938.606129][T13296] [ 938.608529][T13296] ====================================================== [ 938.615562][T13296] WARNING: possible circular locking dependency detected [ 938.622703][T13296] syzkaller #0 Not tainted [ 938.627142][T13296] ------------------------------------------------------ [ 938.634176][T13296] syz.5.2363/13296 is trying to acquire lock: [ 938.640263][T13296] ffffffff8cecf2f0 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: uvcg_mjpeg_bma_controls_show+0x49/0x130 [ 938.651269][T13296] [ 938.651269][T13296] but task is already holding lock: [ 938.658654][T13296] ffff8880228cdc78 (&p->frag_sem){++++}-{3:3}, at: configfs_read_iter+0x19e/0x560 [ 938.667933][T13296] [ 938.667933][T13296] which lock already depends on the new lock. [ 938.667933][T13296] [ 938.678363][T13296] [ 938.678363][T13296] the existing dependency chain (in reverse order) is: [ 938.687540][T13296] [ 938.687540][T13296] -> #3 (&p->frag_sem){++++}-{3:3}: [ 938.694997][T13296] down_write_killable+0x46/0x90 [ 938.700498][T13296] configfs_rmdir+0x3e0/0x980 [ 938.705730][T13296] vfs_rmdir+0x19d/0x410 [ 938.710711][T13296] do_rmdir+0x27f/0x710 [ 938.715420][T13296] __x64_sys_unlinkat+0xc0/0xe0 [ 938.720823][T13296] do_syscall_64+0x4c/0xa0 [ 938.725793][T13296] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 938.732310][T13296] [ 938.732310][T13296] -> #2 (&sb->s_type->i_mutex_key#23){++++}-{3:3}: [ 938.741043][T13296] down_write+0x38/0x60 [ 938.745757][T13296] configfs_depend_item_unlocked+0x14f/0x430 [ 938.752318][T13296] usbg_make_tpg+0x1f3/0x580 [ 938.757536][T13296] target_fabric_make_tpg+0xa0/0x6d0 [ 938.763458][T13296] configfs_mkdir+0x511/0x9e0 [ 938.768816][T13296] vfs_mkdir+0x386/0x570 [ 938.773624][T13296] do_mkdirat+0x1dd/0x5c0 [ 938.778515][T13296] __x64_sys_mkdirat+0x85/0x90 [ 938.783830][T13296] do_syscall_64+0x4c/0xa0 [ 938.788802][T13296] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 938.795250][T13296] [ 938.795250][T13296] -> #1 (&opts->dep_lock){+.+.}-{3:3}: [ 938.802920][T13296] __mutex_lock_common+0x1e5/0x2400 [ 938.808669][T13296] mutex_lock_nested+0x17/0x20 [ 938.813981][T13296] tcm_set_name+0x26/0x90 [ 938.818888][T13296] function_make+0x195/0x350 [ 938.824108][T13296] configfs_mkdir+0x511/0x9e0 [ 938.829380][T13296] vfs_mkdir+0x386/0x570 [ 938.834176][T13296] do_mkdirat+0x1dd/0x5c0 [ 938.839059][T13296] __x64_sys_mkdirat+0x85/0x90 [ 938.844372][T13296] do_syscall_64+0x4c/0xa0 [ 938.849338][T13296] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 938.855784][T13296] [ 938.855784][T13296] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 938.864069][T13296] __lock_acquire+0x2c66/0x7b50 [ 938.869479][T13296] lock_acquire+0x19e/0x400 [ 938.874525][T13296] __mutex_lock_common+0x1e5/0x2400 [ 938.880274][T13296] mutex_lock_nested+0x17/0x20 [ 938.885594][T13296] uvcg_mjpeg_bma_controls_show+0x49/0x130 [ 938.891967][T13296] configfs_read_iter+0x296/0x560 [ 938.897562][T13296] __kernel_read+0x51d/0x980 [ 938.902743][T13296] integrity_kernel_read+0x86/0xd0 [ 938.908477][T13296] ima_calc_file_hash+0x946/0x1940 [ 938.914146][T13296] ima_collect_measurement+0x335/0x7e0 [ 938.920173][T13296] process_measurement+0x1185/0x1c20 [ 938.926012][T13296] ima_file_check+0xc7/0x110 [ 938.931153][T13296] path_openat+0x27cf/0x2fb0 [ 938.936303][T13296] do_filp_open+0x1df/0x400 [ 938.941364][T13296] do_sys_openat2+0x14b/0x500 [ 938.946622][T13296] __x64_sys_openat+0x135/0x160 [ 938.952052][T13296] do_syscall_64+0x4c/0xa0 [ 938.957034][T13296] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 938.963495][T13296] [ 938.963495][T13296] other info that might help us debug this: [ 938.963495][T13296] [ 938.973754][T13296] Chain exists of: [ 938.973754][T13296] gadget_subsys.su_mutex --> &sb->s_type->i_mutex_key#23 --> &p->frag_sem [ 938.973754][T13296] [ 938.988230][T13296] Possible unsafe locking scenario: [ 938.988230][T13296] [ 938.995719][T13296] CPU0 CPU1 [ 939.001112][T13296] ---- ---- [ 939.006501][T13296] lock(&p->frag_sem); [ 939.010694][T13296] lock(&sb->s_type->i_mutex_key#23); [ 939.018734][T13296] lock(&p->frag_sem); [ 939.025446][T13296] lock(gadget_subsys.su_mutex); [ 939.030512][T13296] [ 939.030512][T13296] *** DEADLOCK *** [ 939.030512][T13296] [ 939.038680][T13296] 3 locks held by syz.5.2363/13296: [ 939.043911][T13296] #0: ffff88807ea6eae8 (&iint_mutex_key[depth]){+.+.}-{3:3}, at: process_measurement+0x724/0x1c20 [ 939.054689][T13296] #1: ffff888078e54088 (&buffer->mutex){+.+.}-{3:3}, at: configfs_read_iter+0x6e/0x560 [ 939.064498][T13296] #2: ffff8880228cdc78 (&p->frag_sem){++++}-{3:3}, at: configfs_read_iter+0x19e/0x560 [ 939.074215][T13296] [ 939.074215][T13296] stack backtrace: [ 939.080128][T13296] CPU: 1 PID: 13296 Comm: syz.5.2363 Not tainted syzkaller #0 [ 939.087618][T13296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 939.097702][T13296] Call Trace: [ 939.101011][T13296] [ 939.103973][T13296] dump_stack_lvl+0x188/0x250 [ 939.108727][T13296] ? load_image+0x410/0x410 [ 939.113289][T13296] ? show_regs_print_info+0x20/0x20 [ 939.118543][T13296] ? print_circular_bug+0x12b/0x1a0 [ 939.123779][T13296] check_noncircular+0x296/0x330 [ 939.128766][T13296] ? add_chain_block+0x9b0/0x9b0 [ 939.133738][T13296] ? lockdep_lock+0xf1/0x1f0 [ 939.138368][T13296] ? mark_lock+0x94/0x320 [ 939.142733][T13296] ? _find_first_zero_bit+0xd1/0xf0 [ 939.148002][T13296] __lock_acquire+0x2c66/0x7b50 [ 939.152902][T13296] ? __reset_page_owner+0x180/0x180 [ 939.158251][T13296] ? verify_lock_unused+0x140/0x140 [ 939.163498][T13296] ? mark_lock+0x94/0x320 [ 939.167862][T13296] ? __lock_acquire+0x13dc/0x7b50 [ 939.172938][T13296] lock_acquire+0x19e/0x400 [ 939.177478][T13296] ? uvcg_mjpeg_bma_controls_show+0x49/0x130 [ 939.183498][T13296] ? __might_sleep+0xf0/0xf0 [ 939.188189][T13296] ? read_lock_is_recursive+0x10/0x10 [ 939.193601][T13296] ? __alloc_pages+0x11b/0x480 [ 939.198432][T13296] __mutex_lock_common+0x1e5/0x2400 [ 939.203675][T13296] ? uvcg_mjpeg_bma_controls_show+0x49/0x130 [ 939.209692][T13296] ? uvcg_mjpeg_bma_controls_show+0x49/0x130 [ 939.215711][T13296] ? mutex_lock_io_nested+0x60/0x60 [ 939.220950][T13296] ? __alloc_pages+0x282/0x480 [ 939.225755][T13296] ? zone_statistics+0x170/0x170 [ 939.230731][T13296] mutex_lock_nested+0x17/0x20 [ 939.235534][T13296] uvcg_mjpeg_bma_controls_show+0x49/0x130 [ 939.241386][T13296] configfs_read_iter+0x296/0x560 [ 939.246482][T13296] ? uvcg_mjpeg_bm_interface_flags_show+0x110/0x110 [ 939.253111][T13296] __kernel_read+0x51d/0x980 [ 939.257728][T13296] ? __kasan_kmalloc+0xc6/0xe0 [ 939.262629][T13296] ? __kasan_kmalloc+0xaf/0xe0 [ 939.267428][T13296] ? rw_verify_area+0x1b0/0x1b0 [ 939.272430][T13296] integrity_kernel_read+0x86/0xd0 [ 939.277576][T13296] ? integrity_inode_free+0x170/0x170 [ 939.282987][T13296] ima_calc_file_hash+0x946/0x1940 [ 939.288139][T13296] ? mark_lock+0x94/0x320 [ 939.292511][T13296] ? __lock_acquire+0x13dc/0x7b50 [ 939.297571][T13296] ? 0xffffffffa0010354 [ 939.301758][T13296] ? ima_alloc_tfm+0x2f0/0x2f0 [ 939.306560][T13296] ? __kernel_text_address+0x9a/0x100 [ 939.312003][T13296] ? __mutex_trylock_common+0x15c/0x260 [ 939.317620][T13296] ? rcu_lock_release+0x20/0x20 [ 939.322516][T13296] ima_collect_measurement+0x335/0x7e0 [ 939.328023][T13296] ? ima_get_action+0xa0/0xa0 [ 939.332866][T13296] ? is_bad_inode+0x9/0x40 [ 939.337390][T13296] process_measurement+0x1185/0x1c20 [ 939.342721][T13296] ? ima_file_mmap+0x140/0x140 [ 939.347516][T13296] ? sync_rcu_exp_done_unlocked+0x140/0x140 [ 939.353546][T13296] ima_file_check+0xc7/0x110 [ 939.358165][T13296] ? ima_bprm_check+0x200/0x200 [ 939.363085][T13296] ? vfs_open+0x2b/0x80 [ 939.367713][T13296] path_openat+0x27cf/0x2fb0 [ 939.372356][T13296] ? do_filp_open+0x400/0x400 [ 939.377080][T13296] do_filp_open+0x1df/0x400 [ 939.381622][T13296] ? vfs_tmpfile+0x300/0x300 [ 939.386253][T13296] ? _raw_spin_unlock+0x24/0x40 [ 939.391137][T13296] ? alloc_fd+0x59e/0x650 [ 939.395500][T13296] do_sys_openat2+0x14b/0x500 [ 939.400213][T13296] ? __lock_acquire+0x7b50/0x7b50 [ 939.405271][T13296] ? do_sys_open+0xe0/0xe0 [ 939.409719][T13296] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 939.415737][T13296] ? lock_chain_count+0x20/0x20 [ 939.420628][T13296] __x64_sys_openat+0x135/0x160 [ 939.425520][T13296] do_syscall_64+0x4c/0xa0 [ 939.429964][T13296] ? clear_bhb_loop+0x30/0x80 [ 939.434681][T13296] ? clear_bhb_loop+0x30/0x80 [ 939.439383][T13296] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 939.445334][T13296] RIP: 0033:0x7fadf9d6b0d9 [ 939.449775][T13296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 939.469417][T13296] RSP: 002b:00007fadf7fc3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 939.477868][T13296] RAX: ffffffffffffffda RBX: 00007fadf9ff2fa0 RCX: 00007fadf9d6b0d9 [ 939.485878][T13296] RDX: 0000000000000002 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 939.493873][T13296] RBP: 00007fadf9e02024 R08: 0000000000000000 R09: 0000000000000000 [ 939.501866][T13296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 939.509866][T13296] R13: 00007fadf9ff3038 R14: 00007fadf9ff2fa0 R15: 00007fff2a98d428 [ 939.517895][T13296] [ 939.538981][ T26] audit: type=1800 audit(1787173191.721:111): pid=13296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2363" name="bmaControls" dev="configfs" ino=71259 res=0 errno=0 [ 939.557276][T13294] EXT4-fs (loop2): 1 truncate cleaned up [ 939.565395][T13294] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback.