last executing test programs: 14m3.253216232s ago: executing program 2 (id=1118): getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000009, 0x13, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='sub:*v', 0x6) 14m1.538442316s ago: executing program 2 (id=1119): prctl$PR_MCE_KILL(0x29, 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x450001, 0x4c) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) read$dsp(r3, &(0x7f0000000280)=""/189, 0xbd) 14m0.99897132s ago: executing program 2 (id=1122): syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000200)='./file0\x00', 0x1214080, &(0x7f0000000240)=ANY=[@ANYBLOB='dir_umask=00000000000000000000000,codepage=cp949,gid=', @ANYRESHEX=0x0, @ANYBLOB=',dir_umask=00000000000000000000004,iocharset=macinuit,quiet,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c00be1736e74957f80581414c"], 0x1, 0x32e, &(0x7f0000000b00)="$eJzs3U1r1E4cB/DvZLPb3XbpP/+2UvBYLXgqbT0oXixSBPENeJBibVcojRW0ggri6lmKngTBoze9ir4FvYhvQE89iCe9FA9GZiazSbaZ7ENj02W/H+g2D/Pwm0weZlZqQERD68Ly19end+WPKAMoATgHOACqgAvgGKard7e2N7b9xnpWQSWVQ/4I6JxiX5q1rUZaVplP5Qh5cs1FHe7OpRyaSJmC4FvHND8PJRIqjtDX/j4OMBJenWp/9dAj+zeaul3DJdbDYg97uIfxIsMhIqLihc9/J3xK1MPxu+MAs+HYfNCf/4nxzV5xcRwJree/o9cDIY/Pf2pXNN9TUzjZ+46ZJaaVpc+JenJjEB3uCvSZlegA0WlWqWJxajc2/MZcUxXwBOdDsWRT6nMdpiGKLdqK/jWTMjfNkNX2bGOqDWXZhkVL/JM91/jhO16kV7fyqYuYxEfxWawIDy+x3hr/uYGQB0cdH6+tp3T88/YSVSs9nSrRymhO/7+q5LjpgfdvolbWbMe1ipKMJY0sRbSP3z0T57OKPRcmEl81mNYt2Funck2m5lpsrf9OzTXVnqvmlv3G3NotP/OrlNykzujEjrgiZvAD77AcG/87MvUs7Fdm4s4vVMrwzMhsj6tSWvoxQV3AN1OuTKeLzEPtYmpHZ3uK6ziL8Tv3H2yu+n7jdk4Lz9/q4vvIbi6VXOPpf0GfiCJqjvwdS4OqXCgDyK3SP0EQ+L6pM7bLxWE0uayqPfMq0YOiqVcPVgWa+06JJXtiAEsAwi3mjtBP7Y9auUaiArvK/kv2gNqSfkKaqHLsgrpll6kqsauEka6ulFof8Vx+uLnq935LocETdTqmrxYdDBVBDq+Env/F5ivz6q4jP7yM2UjQqfBYiQuWGdCE+hztbgbXKtY6gxszCx3mXCdOASfbanRganzcXqwXxtk2pD8aev+nDLGML7jG7/+JiIiIiIiIiIiIiIiIiIiIiIiIiAZNr3+o0M+fEyRr3B3C/3iDiIiIiIiIiIiIiIiIiIiIiIiIiIiIiOhgYu//BUrqjTGVwt//WzLv/w03jKZkMu+lIKK+/Q0AAP//oLJZGA==") socket(0x1, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000002010104000000000000000002001000240002801400018008000100e000000108000200e00000010c0002800500"], 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844) io_submit(0x0, 0x0, &(0x7f0000000040)) 13m59.533956998s ago: executing program 2 (id=1125): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0xf4240) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000ec0)={0x2020}, 0x2020) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000013000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00f0ffffffffffff33001a800600000002"], 0x54}}, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r2, r4, 0x0, 0x7fffffffffffffff) 13m58.126057014s ago: executing program 2 (id=1128): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x82042, 0x19d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x3}, 0x94) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) open(0x0, 0x20381, 0x10dd722b6e14c3dd) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) symlink(&(0x7f00000012c0)='.\x00', &(0x7f0000001300)='./bus\x00') fanotify_mark(r1, 0x1, 0x10001040, r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r0, &(0x7f00000004c0)='./file0\x00', 0x2) 13m55.132625781s ago: executing program 2 (id=1133): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x2000) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x3858aa19bde2eb06, 0x0) ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x480, 0x0, 0x8}]}) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000080)=""/64) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./file0\x00'}, 0x18) r2 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x30, 0x0, 0x1fd, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) r4 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x1) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x40000, 0x8010002}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000600)={0xcba0, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000280)={0x8, {{0x2, 0x4e22, @multicast1}}}, 0x88) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r4, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r6, 0x89a2, &(0x7f0000000100)={'vxcan1\x00', @ifru_settings={0x5, 0x3, @fr=&(0x7f0000000040)={0x667, 0xd8b, 0x0, 0x74, 0x4, 0xfffd, 0x4e0}}}) 13m39.819541426s ago: executing program 32 (id=1133): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x2000) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x3858aa19bde2eb06, 0x0) ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x480, 0x0, 0x8}]}) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000080)=""/64) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./file0\x00'}, 0x18) r2 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x30, 0x0, 0x1fd, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) r4 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x1) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x40000, 0x8010002}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000600)={0xcba0, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000280)={0x8, {{0x2, 0x4e22, @multicast1}}}, 0x88) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r4, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r6, 0x89a2, &(0x7f0000000100)={'vxcan1\x00', @ifru_settings={0x5, 0x3, @fr=&(0x7f0000000040)={0x667, 0xd8b, 0x0, 0x74, 0x4, 0xfffd, 0x4e0}}}) 10m40.32195927s ago: executing program 3 (id=1539): syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000200)='./file0\x00', 0x1214080, &(0x7f0000000240)=ANY=[@ANYBLOB='dir_umask=00000000000000000000000,codepage=cp949,gid=', @ANYRESHEX=0x0, @ANYBLOB=',dir_umask=00000000000000000000004,iocharset=macinuit,quiet,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c00be1736e74957f80581414c"], 0x1, 0x32e, &(0x7f0000000b00)="$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") socket(0x1, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000002010104000000000000000002001000240002801400018008000100e000000108000200e00000010c0002800500"], 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x23, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0x203, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c030}, 0x20004080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844) io_submit(0x0, 0x0, &(0x7f0000000040)) io_getevents(0x0, 0x2, 0x0, 0x0, 0x0) 10m37.313786687s ago: executing program 3 (id=1548): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) setns(r3, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) setns(0xffffffffffffffff, 0x20000) 10m34.374330322s ago: executing program 3 (id=1551): r0 = fsopen(&(0x7f0000000080)='9p\x00', 0x0) syz_emit_vhci(&(0x7f0000000580)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_VOICE_SETTING={{0x1}, 0xd}}}, 0x7) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r5 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f00000008c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x408d0}], 0x1, 0x0) recvmsg(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/31, 0x1f}], 0x1}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 10m32.934541669s ago: executing program 3 (id=1554): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0xf4240) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r1, &(0x7f00000003c0)='file0', 0x5) read$FUSE(r1, &(0x7f0000000ec0)={0x2020}, 0x2020) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000013000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00f0ffffffffffff33001a80060000"], 0x54}}, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r2, r4, 0x0, 0x7fffffffffffffff) 10m31.239374753s ago: executing program 3 (id=1560): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000280)={{0x2, 0x4e24, @remote}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x16, {0x2, 0x4e22, @private=0xa010102}, 'vlan0\x00'}) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) creat(0x0, 0x48) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r3, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r2, &(0x7f0000000100), 0xb) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x28182, 0x0) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800"], 0x74}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000940)=ANY=[@ANYBLOB="180000850000002a000000181c00008fa6e7e634485e949f59c3e11bd65271d020ca46da526ffd80c1dc910d9c0e991cb1ff67d5a6341a9eed76633b74f402d8bb0000000000b002ff06b7740724e6e3111cbdaf360bd4efaed74250604c61032ae7b4ed70f9a42badb0", @ANYRES32, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x202021, 0x0) 10m29.622386235s ago: executing program 3 (id=1564): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = openat$panthor(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r0, 0xc0106441, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffeffff}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r1, &(0x7f0000019680), 0x0, 0x20004855) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000000)=0x7f, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r6 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r6, 0xb) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffa000/0x3000)=nil) shmat(r7, &(0x7f0000001000/0x3000)=nil, 0x0) shmctl$SHM_STAT(r7, 0xd, &(0x7f0000000100)=""/44) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2802) 10m14.111778154s ago: executing program 33 (id=1564): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = openat$panthor(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r0, 0xc0106441, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffeffff}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r1, &(0x7f0000019680), 0x0, 0x20004855) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000000)=0x7f, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r6 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r6, 0xb) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffa000/0x3000)=nil) shmat(r7, &(0x7f0000001000/0x3000)=nil, 0x0) shmctl$SHM_STAT(r7, 0xd, &(0x7f0000000100)=""/44) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2802) 10m11.819441613s ago: executing program 4 (id=1607): r0 = fsopen(&(0x7f0000000080)='9p\x00', 0x0) syz_emit_vhci(&(0x7f0000000580)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_VOICE_SETTING={{0x1}, 0xd}}}, 0x7) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r4 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000008c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x408d0}], 0x1, 0x0) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/31, 0x1f}], 0x1}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 10m10.77809044s ago: executing program 4 (id=1610): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = socket(0x200000000000011, 0x2, 0xd) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socket(0x1e, 0x4, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, r1, 0x25, 0x2, @val=@netfilter={0x0, 0x3, 0x2018}}, 0x20) syz_emit_ethernet(0x6c, &(0x7f00000002c0)=ANY=[], 0x0) 10m9.770106876s ago: executing program 4 (id=1612): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000800)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5bceeff800000000000000000000200", 0x17}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x37, 0x30, 0x64, 0x66, 0x30, 0x6c, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "56f6ec73384b466c22430d10ffd1797475c6639685e829e340a2194bde2314c7d5df320fa3d58208993f3a7e2343d2e858c0ef4a03fbe2da5bdbe4aa1497a013", 0x1e}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x58425c31ab49816a, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x67, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 10m9.139224922s ago: executing program 4 (id=1614): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0xf4240) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r1, &(0x7f00000003c0)='file0', 0x5) read$FUSE(r1, &(0x7f0000000ec0)={0x2020}, 0x2020) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001300010000000000000000000700", @ANYRES32=r3, @ANYBLOB="00f0ffffffffffff33001a800600000002"], 0x54}}, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r2, r4, 0x0, 0x7fffffffffffffff) 10m7.866833335s ago: executing program 4 (id=1617): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000280)={{0x2, 0x4e24, @remote}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x16, {0x2, 0x4e22, @private=0xa010102}, 'vlan0\x00'}) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) creat(0x0, 0x48) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r3, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r2, &(0x7f0000000100), 0xb) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x28182, 0x0) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800"], 0x74}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000940)=ANY=[@ANYBLOB="180000850000002a000000181c00008fa6e7e634485e949f59c3e11bd65271d020ca46da526ffd80c1dc910d9c0e991cb1ff67d5a6341a9eed76633b74f402d8bb0000000000b002ff06b7740724e6e3111cbdaf360bd4efaed74250604c61032ae7b4ed70f9a42badb0", @ANYRES32, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x202021, 0x0) 10m6.806277453s ago: executing program 4 (id=1618): syz_emit_ethernet(0x4a, &(0x7f0000000040)={@link_local, @empty, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x7}}}}}}}}, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSBRK(r0, 0x5427) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_dev$vim2m(0x0, 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xfffffffd, 0x59455247, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r7 = accept$alg(r6, 0x0, 0x0) r8 = dup3(r7, r6, 0x0) sendto$packet(r8, &(0x7f0000000540)="d0", 0x1, 0x240080c0, 0x0, 0x0) accept4(r8, 0x0, 0x0, 0x80800) setsockopt$IPT_SO_SET_REPLACE(r4, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x11, 0x148, 0x0, 0x0, 0x190, 0x2a8, 0x2a8, 0x190, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x6, 0xd04, 'netbios-ns\x00', {0x5}}}}, {{@ip={@multicast1, @private=0xa010102, 0xffffffff, 0xffffff00, 'nr0\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) 9m51.723094961s ago: executing program 34 (id=1618): syz_emit_ethernet(0x4a, &(0x7f0000000040)={@link_local, @empty, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x7}}}}}}}}, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSBRK(r0, 0x5427) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_dev$vim2m(0x0, 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xfffffffd, 0x59455247, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r7 = accept$alg(r6, 0x0, 0x0) r8 = dup3(r7, r6, 0x0) sendto$packet(r8, &(0x7f0000000540)="d0", 0x1, 0x240080c0, 0x0, 0x0) accept4(r8, 0x0, 0x0, 0x80800) setsockopt$IPT_SO_SET_REPLACE(r4, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x11, 0x148, 0x0, 0x0, 0x190, 0x2a8, 0x2a8, 0x190, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x6, 0xd04, 'netbios-ns\x00', {0x5}}}}, {{@ip={@multicast1, @private=0xa010102, 0xffffffff, 0xffffff00, 'nr0\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) 10.251494133s ago: executing program 5 (id=3298): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000100)=0x800, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) read(r0, &(0x7f0000001400)=""/4046, 0xffd8) 9.15452743s ago: executing program 5 (id=3303): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) mremap(&(0x7f0000e08000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000c80000/0x3000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 8.002233129s ago: executing program 0 (id=3307): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120127528e855067728d000000000010231207"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x900) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) 7.813671184s ago: executing program 1 (id=3311): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e657720757365723a73797a203030303030303030a72cfa0b303030303430393300"], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x4, 0x73}, 0x9c) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x3f9, 0x0, 0x70bd27, 0x25dfdbfd, {0x20001, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 6.732454341s ago: executing program 1 (id=3313): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x10000, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sigaltstack(0x0, 0x0) 6.731206531s ago: executing program 0 (id=3321): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e657720757365723a73797a203030303030303030a72cfa0b303030303430393300"], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x4, 0x73}, 0x9c) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x3f9, 0x0, 0x70bd27, 0x25dfdbfd, {0x20001, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 6.049750858s ago: executing program 5 (id=3317): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e657720757365723a73797a203030303030303030a72cfa0b303030303430393300"], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x4, 0x73}, 0x9c) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x3f9, 0x0, 0x70bd27, 0x25dfdbfd, {0x20001, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 5.116654171s ago: executing program 6 (id=3318): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 4.909986527s ago: executing program 0 (id=3319): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xda6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msgctl$IPC_RMID(0x0, 0x0) 4.650798283s ago: executing program 6 (id=3320): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) vmsplice(r0, 0x0, 0x0, 0x1) 4.648992473s ago: executing program 1 (id=3329): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) r4 = io_uring_setup(0x5143, &(0x7f0000000300)={0x0, 0x6d66, 0x380, 0x2, 0x2c2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) tgkill(r2, r0, 0x20) r5 = syz_open_dev$usbfs(0x0, 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f00000008c0)=0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x80000c, &(0x7f0000000a40)={[{@part={'part', 0x3d, 0x8}}, {}, {@barrier}, {@session={'session', 0x3d, 0xffffffffffffe74c}}, {@creator={'creator', 0x3d, "ddf2bd6c"}}, {@force}, {@uid}, {@umask={'umask', 0x3d, 0x3}}, {@creator={'creator', 0x3d, "85f19471"}}, {}, {@creator={'creator', 0x3d, "65fe04c2"}}, {}, {}, {@force}, {@nobarrier}, {@nls={'nls', 0x3d, 'macroman'}}, {@force}, {@nodecompose}], [{@dont_hash}, {@subj_role={'subj_role', 0x3d, '%[.['}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@smackfsroot={'smackfsroot', 0x3d, 'hfsplus\x00'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@dont_hash}]}, 0x1, 0x6fa, &(0x7f00000000c0)="$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") r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000026000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x42, 0x0, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, 0x0) 4.561039355s ago: executing program 5 (id=3322): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120127528e855067728d000000000010231207"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x900) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) 3.305780417s ago: executing program 1 (id=3323): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0xd, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0x1f, 0x6, 0xca11, 0xffff}}, @TCA_GRED_LIMIT={0x8, 0x5, 0xe6}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) 2.624451144s ago: executing program 6 (id=3324): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$MAP_CREATE(0x0, 0x0, 0x0) 2.566215336s ago: executing program 0 (id=3325): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x2}, 0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @remote, 0x9}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 2.293137133s ago: executing program 0 (id=3326): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRES64=r0], 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f00000012c0)={0x1c, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\v3'], 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000ac0)={0x44, &(0x7f0000000500)={0x0, 0xb, 0x1, 'x'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.145669056s ago: executing program 6 (id=3327): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0x10, &(0x7f00000003c0)={0x1, 0x6}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000, '\x00', r4, r0, 0x0, 0x1ffffffe, 0x4}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESDEC=0x0, @ANYRES32=r1], 0xc4}, 0x1, 0x0, 0x0, 0x28000081}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)="bb7252c9425f") r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r8, &(0x7f0000000080)='4', 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.142121951s ago: executing program 6 (id=3328): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e657720757365723a73797a203030303030303030a72cfa0b303030303430393300"], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x4, 0x73}, 0x9c) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x3f9, 0x0, 0x70bd27, 0x25dfdbfd, {0x20001, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 1.111393382s ago: executing program 1 (id=3330): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000400)={@local, @local, @val={@val={0x88a8, 0x5, 0x0, 0x4}, {0x8100, 0x4, 0x0, 0x1}}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x30, 0x58, 0x67, 0x0, 0x0, 0x2f, 0x0, @multicast1, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0x7, 0x1, 0x7, 0x1, 0x1, 0x3, 0x0, 0x81}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x3, 0x2, 0x8, 0x3, 0x0, 0x1, 0x4, 0x9}, 0x2, {0x0, 0x0, 0x2, 0x7, 0x0, 0x1, 0x3, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x0) 1.110633062s ago: executing program 0 (id=3338): syz_io_uring_setup(0xf, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x4, r0, &(0x7f00000011c0), 0xfffffffffffffffe) 195.930675ms ago: executing program 1 (id=3331): syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cdab01ef0001010203010902270001010080fa0904000003ff000000070581"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/usb/drivers/ushc/new_id\x00', 0x2, 0x0) write(r0, &(0x7f0000000800)='abcd ef01', 0x9) 166.265196ms ago: executing program 5 (id=3332): bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32], 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 72.475898ms ago: executing program 5 (id=3333): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={r2, 0x5}, &(0x7f0000000080)=0x8) 0s ago: executing program 6 (id=3334): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001700000008000a"], 0x24}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r2, &(0x7f0000000080)=ANY=[], 0x47) splice(r1, 0x0, r0, 0x0, 0x800, 0x0) kernel console output (not intermixed with test programs): thout journal. Quota mode: writeback. [ 985.936256][T13860] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 985.992337][T13860] Quota error (device loop5): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 986.014355][T13860] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 986.044792][T13860] EXT4-fs error (device loop5): ext4_acquire_dquot:6953: comm syz.5.2075: Failed to acquire dquot type 1 [ 986.155356][T11743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 986.389459][T13872] loop5: detected capacity change from 0 to 64 [ 988.908636][ T5789] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 989.140325][ T5789] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 992.312780][T13920] loop5: detected capacity change from 0 to 512 [ 993.106206][T13932] bond0: option active_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 994.789750][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.796325][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.990435][T13922] loop5: detected capacity change from 0 to 32768 [ 995.018218][T13922] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.2094 (13922) [ 995.170038][T13922] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 995.212772][T13922] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 995.233862][T13922] BTRFS info (device loop5): using free space tree [ 995.632529][T13922] BTRFS error (device loop5): open_ctree failed: -4 [ 995.917769][ T5789] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 996.149013][T13939] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by udevd (13939) [ 997.136489][T13971] netlink: 'syz.5.2108': attribute type 21 has an invalid length. [ 997.156640][T13971] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2108'. [ 997.356827][T13977] loop6: detected capacity change from 0 to 128 [ 998.000686][ T5789] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 998.961445][T13980] loop5: detected capacity change from 0 to 32768 [ 999.895172][T13980] ERROR: (device loop5): dbAlloc: the hint is outside the map [ 999.895172][T13980] [ 999.966067][T13980] ERROR: (device loop5): remounting filesystem as read-only [ 999.973896][T13980] ialloc: diAlloc returned -5! [ 1001.550475][T14010] loop6: detected capacity change from 0 to 1024 [ 1002.269836][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.291842][T14009] loop5: detected capacity change from 0 to 512 [ 1002.314363][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.322583][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.381693][T14009] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1002.394587][T14010] hfsplus: unable to load nls mapping "macroma" [ 1002.401109][T14010] hfsplus: unable to parse mount options [ 1002.525947][T14009] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1002.684723][T14009] Quota error (device loop5): find_block_dqentry: Quota for id 0 referenced but not present [ 1002.766652][T14009] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 1003.272027][T14009] EXT4-fs error (device loop5): ext4_acquire_dquot:6953: comm syz.5.2121: Failed to acquire dquot type 0 [ 1003.376436][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.387959][ T6143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.397207][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.412828][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.420950][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.488008][T11743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1003.656854][ T5789] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 1004.625773][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.888800][ T5789] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 1005.694424][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.901965][T14049] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2131'. [ 1005.934651][T14049] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2131'. [ 1006.037628][T14049] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2131'. [ 1008.646107][T12624] net_ratelimit: 2 callbacks suppressed [ 1008.646124][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.736194][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.945842][T14078] loop5: detected capacity change from 0 to 256 [ 1008.977304][T14078] exfat: Deprecated parameter 'namecase' [ 1008.993169][T14078] exfat: Deprecated parameter 'utf8' [ 1009.066747][T14078] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 1009.128257][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.137982][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.147116][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.282096][ T5789] Bluetooth: unknown link type 109 [ 1009.292425][ T5789] Bluetooth: hci0: connection err: -111 [ 1009.702144][T14086] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2143'. [ 1009.785956][T14086] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2143'. [ 1009.857942][T14086] netlink: 31 bytes leftover after parsing attributes in process `syz.5.2143'. [ 1010.455369][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.645259][ T5789] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 1011.021139][T14099] loop6: detected capacity change from 0 to 512 [ 1011.100604][T14099] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 1011.148908][T14099] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 1011.178869][T14099] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 1011.204209][T14099] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 1011.235624][T14099] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 1011.280917][T14099] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 1011.316249][T14099] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 1011.351649][T14099] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 1011.388009][T14099] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 1011.412475][T14099] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 1011.436638][T14099] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 1011.460518][T14099] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 1011.499194][T14099] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 1011.523738][T14099] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 1011.532845][T12620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.536382][T14099] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 1011.560296][T14099] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 1011.593179][T14099] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 1011.620358][T14099] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 1011.643348][T14099] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 1011.665737][T14099] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 1011.678699][T14099] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 1011.688185][T14099] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 1011.701654][T14099] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 1011.712057][T14099] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 1011.728526][T14099] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 1011.750633][T14099] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 1011.766510][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.778665][T14099] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 1011.797878][T14099] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 1011.813541][T14099] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 1011.851993][T14099] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 1011.885368][T14099] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 1011.908975][T14099] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 1011.956514][T14099] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 1011.985315][T14099] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 1012.009435][T14099] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 1013.152750][T14099] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 1013.161724][T12620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.196546][ T27] audit: type=1800 audit(1787962557.520:636): pid=14099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2147" name="file0" dev="loop6" ino=1048689 res=0 errno=0 [ 1013.472177][ T5789] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 1013.728986][ T5789] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 1014.204126][T12620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.562795][T14134] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2154'. [ 1014.599233][T14134] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2154'. [ 1014.637715][T14134] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2154'. [ 1014.736312][T14137] loop5: detected capacity change from 0 to 512 [ 1014.754651][T14137] EXT4-fs: Ignoring removed oldalloc option [ 1014.786748][T14137] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1014.807159][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.863123][T14137] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1014.897592][ T6143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.911847][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.921210][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.933325][T14137] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1015.022865][T14137] EXT4-fs error (device loop5): ext4_get_first_dir_block:3592: inode #12: block 32: comm syz.5.2160: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 1015.094196][T14137] EXT4-fs error (device loop5): ext4_get_first_dir_block:3595: inode #12: comm syz.5.2160: directory missing '.' [ 1015.149594][T11743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1015.236117][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.516973][ T5789] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 1016.162599][T14164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.203986][T14164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.218717][T14164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.228361][T14164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.963860][T14163] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2169'. [ 1016.986762][T14163] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2169'. [ 1017.032988][T14163] netlink: 31 bytes leftover after parsing attributes in process `syz.6.2169'. [ 1017.241040][ T5789] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 1017.730940][T14185] trusted_key: encrypted_key: insufficient parameters specified [ 1018.958182][ T5789] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 1019.030450][T14196] loop6: detected capacity change from 0 to 1024 [ 1019.187206][T14196] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1019.483833][T11952] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1019.637119][ T5789] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 1019.785074][T12624] net_ratelimit: 58 callbacks suppressed [ 1019.785092][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.048947][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.058010][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.067453][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.137046][ T5789] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 1020.763674][T14231] trusted_key: encrypted_key: insufficient parameters specified [ 1020.780182][T14231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.837731][T14231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.847631][T14231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.857384][T14231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.866967][T14231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.876365][T14231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.998240][T14230] loop6: detected capacity change from 0 to 512 [ 1021.279426][T14230] EXT4-fs error (device loop6): mb_free_blocks:1970: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1021.550340][T14230] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #11: comm syz.6.2190: corrupted inode contents [ 1021.576037][T14230] EXT4-fs error (device loop6): ext4_dirty_inode:6144: inode #11: comm syz.6.2190: mark_inode_dirty error [ 1021.604735][T14230] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.2190: invalid indirect mapped block 1 (level 1) [ 1021.676296][T14230] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #11: comm syz.6.2190: corrupted inode contents [ 1021.726049][T14230] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 1021.748939][T14230] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #11: comm syz.6.2190: corrupted inode contents [ 1021.778255][T14230] EXT4-fs error (device loop6): ext4_truncate:4302: inode #11: comm syz.6.2190: mark_inode_dirty error [ 1021.855525][T14230] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 1021.902260][T14230] EXT4-fs (loop6): 1 truncate cleaned up [ 1021.917867][T14238] loop5: detected capacity change from 0 to 256 [ 1021.927774][T14230] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1022.166145][T14230] EXT4-fs error (device loop6): ext4_find_dest_de:2115: inode #2: block 13: comm syz.6.2190: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 1022.359295][T11952] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1022.438650][ T5789] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 1023.539646][T14253] loop5: detected capacity change from 0 to 512 [ 1023.547062][T14253] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1023.639988][T14253] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1023.811247][T14253] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1024.139296][T14253] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 1024.176527][T14253] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 1024.186752][T14253] EXT4-fs error (device loop5): ext4_acquire_dquot:6953: comm syz.5.2199: Failed to acquire dquot type 1 [ 1024.300187][T11743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1024.318620][T14262] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2200'. [ 1024.361835][T14262] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2200'. [ 1024.432677][T14262] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2200'. [ 1025.472347][T14269] loop6: detected capacity change from 0 to 1024 [ 1026.205820][ T9043] net_ratelimit: 59 callbacks suppressed [ 1026.205837][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.268529][ T5789] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 1026.477021][T14269] hfsplus: unable to load nls mapping "macroma" [ 1026.483319][T14269] hfsplus: unable to parse mount options [ 1027.393452][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.503911][T12620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.778421][T14291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.795422][T14291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.805912][T14291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.817164][T14291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.827207][T14291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.836291][T14291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.856412][T14291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.736420][ T5789] Bluetooth: hci3: unexpected event for opcode 0x0c56 [ 1028.793785][T14297] ±ÿ: renamed from bond_slave_0 [ 1028.833951][T14299] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2214'. [ 1028.856451][T14299] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2214'. [ 1028.865494][T14299] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2214'. [ 1029.159173][T14302] loop5: detected capacity change from 0 to 4096 [ 1029.191102][T14302] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 1029.283601][T14302] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1029.364957][T14302] ntfs3: loop5: Failed to initialize $Extend/$ObjId. [ 1029.680950][T14302] ntfs3: loop5: failed to convert "c46c" to cp869 [ 1030.149046][ T5789] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 1031.987037][T14324] loop6: detected capacity change from 0 to 1024 [ 1032.754572][T12620] net_ratelimit: 11 callbacks suppressed [ 1032.754598][T12620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.785522][T14328] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2224'. [ 1032.819533][T14324] hfsplus: unable to load nls mapping "macroma" [ 1032.825861][T14324] hfsplus: unable to parse mount options [ 1032.983559][T14332] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2226'. [ 1032.996820][T14332] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2226'. [ 1033.005876][T14332] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2226'. [ 1033.270385][T14336] loop5: detected capacity change from 0 to 16 [ 1033.355629][T14336] erofs: (device loop5): mounted with root inode @ nid 36. [ 1034.068457][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.097969][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.727309][T12620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.829562][ T6832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.919635][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.930037][T12620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.176309][T12620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.296272][T14358] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2237'. [ 1035.322026][T14358] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2237'. [ 1035.380337][T14358] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2237'. [ 1035.642504][T14348] loop5: detected capacity change from 0 to 32768 [ 1035.692935][T14348] XFS (loop5): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent. [ 1035.773748][T14348] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1036.026981][T14366] loop6: detected capacity change from 0 to 32768 [ 1036.247775][T12620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.346216][T12620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.563383][T14400] trusted_key: encrypted_key: insufficient parameters specified [ 1037.819625][ T5789] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 1038.006307][ T8] net_ratelimit: 59 callbacks suppressed [ 1038.006323][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.064093][T14413] loop5: detected capacity change from 0 to 512 [ 1038.094899][T14413] EXT4-fs error (device loop5): mb_free_blocks:1970: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1038.123290][T14413] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #11: comm syz.5.2253: corrupted inode contents [ 1038.165033][T14413] EXT4-fs error (device loop5): ext4_dirty_inode:6144: inode #11: comm syz.5.2253: mark_inode_dirty error [ 1038.191595][T14419] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2256'. [ 1038.192854][T14413] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2253: invalid indirect mapped block 1 (level 1) [ 1038.232989][T14413] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #11: comm syz.5.2253: corrupted inode contents [ 1038.261900][T14413] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 1038.275415][T14413] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #11: comm syz.5.2253: corrupted inode contents [ 1038.296343][T14413] EXT4-fs error (device loop5): ext4_truncate:4302: inode #11: comm syz.5.2253: mark_inode_dirty error [ 1038.314434][T14413] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 1038.324197][T14413] EXT4-fs (loop5): 1 truncate cleaned up [ 1038.338929][T14413] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1038.418826][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.597861][T14413] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #2: block 13: comm syz.5.2253: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 1039.346408][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.354902][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.452401][T12620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.492917][T11743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1039.590602][T14433] trusted_key: encrypted_key: insufficient parameters specified [ 1040.014397][T14444] loop6: detected capacity change from 0 to 1024 [ 1040.208582][ T5789] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 1040.392932][T14453] loop6: detected capacity change from 0 to 1764 [ 1040.487049][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.499938][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.509229][T12620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.518252][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.613268][T14453] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1041.576283][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.648953][T14469] loop5: detected capacity change from 0 to 64 [ 1042.170843][T14478] trusted_key: encrypted_key: insufficient parameters specified [ 1042.419272][T14487] loop5: detected capacity change from 0 to 64 [ 1043.695010][ T970] net_ratelimit: 1 callbacks suppressed [ 1043.695025][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.708792][T12620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.703739][T12620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.247137][ T6144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.256483][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.265262][T12620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.426498][T14517] loop6: detected capacity change from 0 to 4096 [ 1046.454372][T14517] ntfs3: loop6: Different NTFS sector size (4096) and media sector size (512). [ 1046.501628][T14519] loop5: detected capacity change from 0 to 64 [ 1046.838911][T12620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.857850][T14521] trusted_key: encrypted_key: insufficient parameters specified [ 1047.846638][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.903336][ T5789] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 1048.820690][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.886806][T12620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.286269][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.457344][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.573633][T14530] loop6: detected capacity change from 0 to 40427 [ 1049.598777][T14530] F2FS-fs (loop6): invalid crc value [ 1049.635436][T14530] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1049.712483][T14530] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1049.926828][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.295648][T11952] syz-executor: attempt to access beyond end of device [ 1050.295648][T11952] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1050.358517][T11952] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1050.411698][T14560] loop5: detected capacity change from 0 to 64 [ 1050.704910][T14563] trusted_key: encrypted_key: insufficient parameters specified [ 1051.323497][ T9045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1052.326823][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1052.373565][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1052.391503][ T8673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1052.400043][T12620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1052.502391][T14573] loop5: detected capacity change from 0 to 16 [ 1052.547881][T14573] erofs: (device loop5): erofs_read_superblock: blkszbits 1 isn't supported [ 1053.333598][ T5789] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 1054.438153][T14601] loop6: detected capacity change from 0 to 64 [ 1054.656728][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.668908][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.696157][T12620] net_ratelimit: 2 callbacks suppressed [ 1054.696171][T12620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.423616][ T5789] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 1055.651941][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.344094][T12620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.278807][T14625] loop6: detected capacity change from 0 to 256 [ 1057.366295][T12620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.441983][T14627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.458007][T14627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.466666][T14627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.475183][T14627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.483452][T14627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.491967][T14627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.681782][T14630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2326'. [ 1057.737123][T14630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2326'. [ 1060.013426][T14647] loop5: detected capacity change from 0 to 32768 [ 1060.042796][T14647] XFS: attr2 mount option is deprecated. [ 1060.093459][T14647] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1060.159588][T14647] XFS (loop5): Ending clean mount [ 1060.191499][T14647] XFS (loop5): Quotacheck needed: Please wait. [ 1060.249518][T14647] XFS (loop5): Quotacheck: Done. [ 1060.375353][T11743] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1060.486536][ T9043] net_ratelimit: 59 callbacks suppressed [ 1060.486547][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.641236][T14676] netlink: 'syz.5.2338': attribute type 10 has an invalid length. [ 1060.712042][T14676] veth1_macvtap: entered allmulticast mode [ 1061.107298][ T5789] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 1062.036186][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.044307][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.573511][T14705] loop5: detected capacity change from 0 to 1024 [ 1064.339237][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.522333][T14705] hfsplus: unable to load nls mapping "macroma" [ 1064.528687][T14705] hfsplus: unable to parse mount options [ 1064.989176][T14719] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2353'. [ 1065.016597][T14719] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2353'. [ 1065.046432][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.064975][T14719] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2353'. [ 1065.375849][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.116471][ T970] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1066.350226][ T970] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1066.398757][ T970] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.415440][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.433106][ T970] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1066.480097][ T970] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1066.529472][ T970] usb 7-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 1066.553298][ T970] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.592596][ T970] usb 7-1: Product: syz [ 1066.612683][ T970] usb 7-1: Manufacturer: syz [ 1066.633132][ T970] usb 7-1: SerialNumber: syz [ 1066.727050][T14748] loop5: detected capacity change from 0 to 32768 [ 1066.736419][T14748] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.2351 (14748) [ 1066.838303][T14748] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1066.903300][T14748] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1066.937404][ T970] usb 7-1: 1:1 : no or invalid class specific endpoint descriptor [ 1066.945278][ T970] usb 7-1: 1:1 : sample bitwidth 62 in over sample bytes 3 [ 1066.960251][T14748] BTRFS info (device loop5): using free space tree [ 1066.998973][ T970] usb 7-1: 1:1 : unsupported format bits 0x33820006 [ 1067.005643][ T970] usb 7-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1067.064089][ T970] usb 7-1: unit 2 not found! [ 1067.076812][ T970] usb 7-1: unit 0 not found! [ 1067.182999][T14748] BTRFS info (device loop5): enabling ssd optimizations [ 1067.215235][T14748] BTRFS info (device loop5): auto enabling async discard [ 1067.286791][ T970] usb 7-1: USB disconnect, device number 6 [ 1067.457585][T12620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.523194][ T27] audit: type=1800 audit(1787962611.850:637): pid=14748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2351" name="file0" dev="loop5" ino=258 res=0 errno=0 [ 1067.724941][T14775] udevd[14775]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1067.996632][T14780] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2365'. [ 1068.014497][T14783] loop6: detected capacity change from 0 to 512 [ 1068.028415][T14780] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2365'. [ 1068.050049][T14780] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2365'. [ 1068.086333][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.106627][T14783] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1068.161378][T11743] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1068.179885][T14783] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1068.353432][T14783] EXT4-fs error (device loop6): ext4_validate_block_bitmap:421: comm syz.6.2366: bg 0: bad block bitmap checksum [ 1068.439120][T14783] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6655: Filesystem failed CRC [ 1068.513987][T12620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.614563][T14792] loop5: detected capacity change from 0 to 512 [ 1068.646462][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.672099][T11952] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1068.686762][T14792] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1068.787637][T14792] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1069.039296][T11743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1069.111346][ T5789] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 1070.046087][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.173087][T14805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.188023][T14805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.196542][T14805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.205019][T14805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.411257][T14808] veth1_macvtap: left promiscuous mode [ 1070.725789][T14815] loop5: detected capacity change from 0 to 128 [ 1071.461637][T12624] net_ratelimit: 56 callbacks suppressed [ 1071.461665][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.998705][T14830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.062136][T14830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.070787][T14830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.079497][T14830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.146437][T14830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.154860][T14830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.163251][T14830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.171717][T14830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.236354][T14830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.693792][ T5789] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 1074.761935][T14873] bond1: entered promiscuous mode [ 1076.488157][T14879] loop5: detected capacity change from 0 to 1024 [ 1076.546227][ T9043] net_ratelimit: 54 callbacks suppressed [ 1076.546253][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.603654][ T5436] veth1_macvtap: entered promiscuous mode [ 1076.872612][T14879] hfsplus: unable to load nls mapping "macroma" [ 1076.879115][T14879] hfsplus: unable to parse mount options [ 1077.018087][T13939] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1077.217978][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.633985][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.006861][T14918] loop6: detected capacity change from 0 to 2048 [ 1078.114250][T14918] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1078.766395][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.794326][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.992589][T14926] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1079.009569][T14918] syz.6.2408: attempt to access beyond end of device [ 1079.009569][T14918] loop6: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 1079.244901][T14918] syz.6.2408: attempt to access beyond end of device [ 1079.244901][T14918] loop6: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 1079.284701][T14933] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2412'. [ 1079.313947][T14933] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2412'. [ 1079.323537][T14918] NILFS (loop6): I/O error reading meta-data file (ino=6, block-offset=3) [ 1079.340712][T14918] NILFS (loop6): error -5 reading inode: ino=15 [ 1079.351562][T14933] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2412'. [ 1079.617154][ T5789] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 1080.347424][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.408290][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.808305][ T5789] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 1081.366361][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.916177][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.103878][T14974] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2424'. [ 1083.126632][T14974] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2424'. [ 1083.135625][T14974] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2424'. [ 1083.453707][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.312004][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.330750][T14984] loop6: detected capacity change from 0 to 128 [ 1084.847850][T14992] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2429'. [ 1085.416200][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.494817][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.503030][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.525526][T15035] netlink: 'syz.1.2447': attribute type 7 has an invalid length. [ 1086.830203][T15018] loop6: detected capacity change from 0 to 32768 [ 1086.867149][T15018] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 scanned by syz.6.2437 (15018) [ 1086.894547][T15018] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1086.925847][T15018] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 1086.936298][T15018] BTRFS info (device loop6): using free space tree [ 1087.050248][T15018] BTRFS info (device loop6): enabling ssd optimizations [ 1087.087778][T15018] BTRFS info (device loop6): auto enabling async discard [ 1087.545729][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.642536][ T27] audit: type=1800 audit(1787962631.940:638): pid=15018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2437" name="file0" dev="loop6" ino=258 res=0 errno=0 [ 1087.857388][T10047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.866804][T11952] BTRFS info (device loop6): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1088.186215][T10047] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1088.222297][T13939] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 10 /dev/loop6 scanned by udevd (13939) [ 1088.436336][T10047] usb 6-1: Using ep0 maxpacket: 8 [ 1088.464432][T10047] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1088.495483][T10047] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1088.542900][T10047] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1088.590670][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.599100][T10047] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1088.660822][T10047] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1088.712038][T10047] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1088.776312][T10047] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.843149][T10047] usb 6-1: config 0 descriptor?? [ 1088.882501][T15075] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1089.414232][T12624] usb 6-1: USB disconnect, device number 6 [ 1089.423638][ T5789] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 1089.526893][T10047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.622253][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.293104][T15106] trusted_key: encrypted_key: insufficient parameters specified [ 1090.303268][T15106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.320793][T15106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.329606][T15106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.338360][T15106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.346760][T15106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.355159][T15106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.363634][T15106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.642805][T15111] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2468'. [ 1091.727084][ T5789] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 1092.951877][T15134] netlink: 'syz.1.2475': attribute type 21 has an invalid length. [ 1093.114923][T15117] loop6: detected capacity change from 0 to 32768 [ 1093.182308][T15117] XFS: attr2 mount option is deprecated. [ 1093.292458][T15117] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1094.701031][T12624] net_ratelimit: 56 callbacks suppressed [ 1094.701048][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.904201][T10065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.913950][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.001945][T15117] XFS (loop6): Ending clean mount [ 1095.061890][T15117] XFS (loop6): Quotacheck needed: Please wait. [ 1095.141475][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.283257][T15117] XFS (loop6): Quotacheck: Done. [ 1095.360556][T11952] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1095.613566][T10047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.176353][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.021101][T15187] loop6: detected capacity change from 0 to 128 [ 1097.208519][T15187] loop6: detected capacity change from 0 to 512 [ 1097.382409][T15187] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1097.413846][T15187] EXT4-fs error (device loop6): ext4_orphan_get:1430: comm syz.6.2485: bad orphan inode 16 [ 1097.431325][T15187] ext4_test_bit(bit=15, block=18) = 1 [ 1097.437022][T15187] is_bad_inode(inode)=0 [ 1097.441269][T15187] NEXT_ORPHAN(inode)=83886080 [ 1097.446226][T15187] max_ino=32 [ 1097.449498][T15187] i_nlink=0 [ 1097.544092][T10073] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1097.759137][T10073] EXT4-fs error (device loop6): ext4_release_dquot:6989: comm kworker/u4:23: Failed to release dquot type 1 [ 1097.920821][T10047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.015570][T15187] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1098.194926][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.739187][T10047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.800199][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.927069][T15187] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1100.536566][ T5789] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 1101.594609][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1101.959369][T15229] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2495'. [ 1102.804835][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.299441][T10047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.464046][T15252] geneve1: entered promiscuous mode [ 1103.475718][T15252] geneve1: entered allmulticast mode [ 1104.067395][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.531045][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.557641][ T27] audit: type=1326 audit(1787962649.890:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15280 comm="syz.1.2508" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a5d19e159 code=0x7ffc0000 [ 1105.639666][ T27] audit: type=1326 audit(1787962649.890:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15280 comm="syz.1.2508" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a5d19e159 code=0x7ffc0000 [ 1105.723367][ T27] audit: type=1326 audit(1787962649.910:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15280 comm="syz.1.2508" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a5d19e159 code=0x7ffc0000 [ 1105.853277][ T27] audit: type=1326 audit(1787962649.920:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15280 comm="syz.1.2508" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a5d19e159 code=0x7ffc0000 [ 1105.952960][ T27] audit: type=1326 audit(1787962649.940:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15280 comm="syz.1.2508" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f4a5d19e159 code=0x7ffc0000 [ 1106.081272][ T27] audit: type=1326 audit(1787962649.940:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15280 comm="syz.1.2508" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a5d19e159 code=0x7ffc0000 [ 1106.125524][ T27] audit: type=1326 audit(1787962649.940:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15280 comm="syz.1.2508" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a5d19e159 code=0x7ffc0000 [ 1106.171013][ T27] audit: type=1326 audit(1787962649.960:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15280 comm="syz.1.2508" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4a5d19e159 code=0x7ffc0000 [ 1106.208125][ T27] audit: type=1326 audit(1787962649.960:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15280 comm="syz.1.2508" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4a5d19e159 code=0x7ffc0000 [ 1106.251174][T15300] loop5: detected capacity change from 0 to 256 [ 1106.357507][T10047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.135624][T10047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.143783][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.173888][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1109.227177][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1109.368577][T10047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1110.649251][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1110.884454][T15350] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2534'. [ 1111.099264][T15356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2536'. [ 1111.111737][T15352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.125971][T15352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.135062][T15352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.143770][T15352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.152177][T15352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.160557][T15352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.169050][T15352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.177381][T15352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.185663][T15352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.254289][T15356] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2536'. [ 1113.788480][T15385] mmap: syz.1.2547 (15385): VmData 49217536 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 1115.764308][ T9043] net_ratelimit: 55 callbacks suppressed [ 1115.764323][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.832363][T15417] loop5: detected capacity change from 0 to 256 [ 1115.916683][T15417] FAT-fs (loop5): Directory bread(block 64) failed [ 1115.923295][T15417] FAT-fs (loop5): Directory bread(block 65) failed [ 1115.946392][T15417] FAT-fs (loop5): Directory bread(block 66) failed [ 1115.964459][T15417] FAT-fs (loop5): Directory bread(block 67) failed [ 1115.995560][T15417] FAT-fs (loop5): Directory bread(block 68) failed [ 1116.019988][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.026593][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.046120][T15417] FAT-fs (loop5): Directory bread(block 69) failed [ 1116.077256][T15417] FAT-fs (loop5): Directory bread(block 70) failed [ 1116.104171][T15417] FAT-fs (loop5): Directory bread(block 71) failed [ 1116.114467][T15417] FAT-fs (loop5): Directory bread(block 72) failed [ 1116.124779][T15417] FAT-fs (loop5): Directory bread(block 73) failed [ 1117.330313][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1117.386406][T10047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1117.416676][ T5789] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 1118.095699][T15443] Cannot find set identified by id 0 to match [ 1118.415251][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.646669][T10047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.694519][T15457] loop5: detected capacity change from 0 to 128 [ 1118.977002][T15459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2571'. [ 1120.138123][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1121.034118][T15483] loop5: detected capacity change from 0 to 128 [ 1121.666794][ T9045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1121.686391][T10047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1121.808738][T15488] loop6: detected capacity change from 0 to 1024 [ 1121.917931][ T27] audit: type=1326 audit(1787962666.240:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15486 comm="syz.1.2588" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a5d19e159 code=0x0 [ 1123.369731][ T27] audit: type=1326 audit(1787962667.700:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15504 comm="syz.5.2594" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ecd9e159 code=0x50000 [ 1123.386431][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.515085][ T27] audit: type=1326 audit(1787962667.700:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15504 comm="syz.5.2594" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ecd9e159 code=0x50000 [ 1123.558169][ T27] audit: type=1326 audit(1787962667.700:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15504 comm="syz.5.2594" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ecd9e159 code=0x50000 [ 1123.583687][ T27] audit: type=1326 audit(1787962667.700:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15504 comm="syz.5.2594" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ecd9e159 code=0x50000 [ 1123.615242][ T27] audit: type=1326 audit(1787962667.700:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15504 comm="syz.5.2594" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ecd9e159 code=0x50000 [ 1123.641120][ T27] audit: type=1326 audit(1787962667.700:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15504 comm="syz.5.2594" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ecd9e159 code=0x50000 [ 1123.691004][ T27] audit: type=1326 audit(1787962667.700:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15504 comm="syz.5.2594" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ecd9e159 code=0x50000 [ 1123.851209][ T27] audit: type=1326 audit(1787962667.700:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15504 comm="syz.5.2594" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ecd9e159 code=0x50000 [ 1123.918796][ T27] audit: type=1326 audit(1787962667.700:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15504 comm="syz.5.2594" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ecd9e159 code=0x50000 [ 1124.652124][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.726571][T10047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.797627][T15523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2598'. [ 1125.956577][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1126.911706][T10047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1126.968064][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1126.995599][T15544] loop6: detected capacity change from 0 to 64 [ 1127.766476][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.011144][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.706637][T15562] loop5: detected capacity change from 0 to 128 [ 1128.801929][T15562] loop5: detected capacity change from 0 to 512 [ 1128.929349][T15562] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1128.972445][T15562] EXT4-fs error (device loop5): ext4_orphan_get:1430: comm syz.5.2612: bad orphan inode 16 [ 1131.088490][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1131.110043][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1131.154233][T15562] ext4_test_bit(bit=15, block=18) = 1 [ 1131.181452][T15562] is_bad_inode(inode)=0 [ 1131.220118][T15562] NEXT_ORPHAN(inode)=83886080 [ 1131.316696][T15562] max_ino=32 [ 1131.319938][T15562] i_nlink=0 [ 1131.413690][T15570] jffs2: notice: (15570) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1131.462788][ T8673] __quota_error: 55 callbacks suppressed [ 1131.462808][ T8673] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1131.525869][T15574] loop6: detected capacity change from 0 to 64 [ 1131.578151][ T8673] EXT4-fs error (device loop5): ext4_release_dquot:6989: comm kworker/u4:18: Failed to release dquot type 1 [ 1131.668888][T15562] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1132.567199][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1132.692751][T15562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1132.998886][T15588] loop5: detected capacity change from 0 to 64 [ 1133.776970][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.166351][T10047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.342763][T15601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.380996][T15601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.391045][T15601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.400938][T15601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.409460][T15601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.418876][T15601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.428287][T15601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1135.634615][T15612] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2628'. [ 1136.796382][T15620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2632'. [ 1137.325298][T15629] syz.5.2635 (15629): /proc/15625/oom_adj is deprecated, please use /proc/15625/oom_score_adj instead. [ 1137.616507][ T9043] net_ratelimit: 56 callbacks suppressed [ 1137.616532][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.147152][T12624] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1138.284664][T15642] loop6: detected capacity change from 0 to 64 [ 1138.396155][T12624] usb 6-1: Using ep0 maxpacket: 16 [ 1138.791904][T12624] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1139.280696][ T9045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.329835][T12624] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1139.385312][T12624] usb 6-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 1139.422372][T12624] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.535862][T12624] usb 6-1: config 0 descriptor?? [ 1140.012701][T12624] apple 0003:05AC:027C.0002: unknown main item tag 0x0 [ 1140.026282][T12624] apple 0003:05AC:027C.0002: unknown main item tag 0x1 [ 1140.050847][T12624] apple 0003:05AC:027C.0002: ignoring exceeding usage max [ 1140.166772][T12624] apple 0003:05AC:027C.0002: hidraw0: USB HID v0.81 Device [HID 05ac:027c] on usb-dummy_hcd.5-1/input0 [ 1140.249598][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.536756][ T9045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.887577][T12624] usb 6-1: USB disconnect, device number 7 [ 1141.131356][T15659] fido_id[15659]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1141.363485][T15669] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2650'. [ 1141.620429][T15671] loop6: detected capacity change from 0 to 64 [ 1142.512706][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.420449][T10047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.536608][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1145.398192][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1145.946756][T15702] trusted_key: encrypted_key: insufficient parameters specified [ 1146.086337][T10047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.095444][ T27] audit: type=1326 audit(1787962690.420:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15703 comm="syz.1.2662" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a5d19e159 code=0x7ffc0000 [ 1146.362778][ T27] audit: type=1326 audit(1787962690.450:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15703 comm="syz.1.2662" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a5d19e159 code=0x7ffc0000 [ 1146.443685][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.486465][T10047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.766206][ T27] audit: type=1326 audit(1787962690.490:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15703 comm="syz.1.2662" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a5d19e159 code=0x7ffc0000 [ 1147.062398][ T27] audit: type=1326 audit(1787962690.490:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15703 comm="syz.1.2662" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4a5d19e159 code=0x7ffc0000 [ 1147.971898][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1147.990421][ T27] audit: type=1326 audit(1787962690.490:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15703 comm="syz.1.2662" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a5d19e159 code=0x7ffc0000 [ 1148.086072][ T27] audit: type=1326 audit(1787962690.490:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15703 comm="syz.1.2662" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a5d19e159 code=0x7ffc0000 [ 1148.387619][ T27] audit: type=1326 audit(1787962690.500:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15703 comm="syz.1.2662" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a5d19e159 code=0x7ffc0000 [ 1148.545023][ T27] audit: type=1326 audit(1787962690.500:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15703 comm="syz.1.2662" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a5d19e159 code=0x7ffc0000 [ 1148.701555][ T27] audit: type=1326 audit(1787962690.500:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15703 comm="syz.1.2662" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a5d19e159 code=0x7ffc0000 [ 1148.834493][ T27] audit: type=1326 audit(1787962690.500:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15703 comm="syz.1.2662" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f4a5d19e159 code=0x7ffc0000 [ 1149.526717][T10047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1149.775941][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.083298][T15737] trusted_key: encrypted_key: insufficient parameters specified [ 1150.876808][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1151.794850][ T5789] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 1152.506559][ T9045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1152.663385][T15746] loop5: detected capacity change from 0 to 1024 [ 1152.726166][T10047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1154.590312][ T9045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1154.606433][T15746] hfsplus: unable to load nls mapping "macroma" [ 1154.612742][T15746] hfsplus: unable to parse mount options [ 1155.766746][T10047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1155.963882][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.006418][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.108351][T15783] (null): rxe_set_mtu: Set mtu to 256 [ 1156.115485][T15783] vcan0 speed is unknown, defaulting to 1000 [ 1156.253234][T15783] vcan0 speed is unknown, defaulting to 1000 [ 1156.314900][T15783] vcan0 speed is unknown, defaulting to 1000 [ 1156.516754][ T5789] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 1157.445402][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1157.478082][T15787] loop5: detected capacity change from 0 to 4096 [ 1157.758211][T15795] loop6: detected capacity change from 0 to 64 [ 1157.765677][T15787] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1158.055956][T15797] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2689'. [ 1158.646103][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1158.740348][T15787] ntfs3: loop5: Failed to load $Extend (-22). [ 1158.784833][T15787] ntfs3: loop5: Failed to initialize $Extend. [ 1158.849954][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1159.146277][ T9043] vcan0 speed is unknown, defaulting to 1000 [ 1160.318369][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1160.426414][T15783] infiniband syz0: set active [ 1160.487879][T15783] infiniband syz0: added vcan0 [ 1160.528684][T15783] syz0: rxe_create_cq: returned err = -12 [ 1160.535151][T15783] infiniband syz0: Couldn't create ib_mad CQ [ 1160.627060][T15783] infiniband syz0: Couldn't open port 1 [ 1160.847154][T15783] RDS/IB: syz0: added [ 1160.893724][T15783] smc: adding ib device syz0 with port count 1 [ 1160.927016][T15783] smc: ib device syz0 port 1 has pnetid [ 1160.949501][ T9043] vcan0 speed is unknown, defaulting to 1000 [ 1161.032741][T15783] vcan0 speed is unknown, defaulting to 1000 [ 1161.370944][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1161.447148][T15810] trusted_key: encrypted_key: insufficient parameters specified [ 1161.926390][T10047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.421544][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.831785][T15783] vcan0 speed is unknown, defaulting to 1000 [ 1163.544744][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.573827][ T9045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.643502][T15783] vcan0 speed is unknown, defaulting to 1000 [ 1164.886327][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 1164.886337][ T27] audit: type=1326 audit(1787962709.210:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15832 comm="syz.6.2701" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24a19e159 code=0x7ffc0000 [ 1164.972397][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1165.215770][ T27] audit: type=1326 audit(1787962709.210:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15832 comm="syz.6.2701" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24a19e159 code=0x7ffc0000 [ 1165.286869][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1165.376152][ T27] audit: type=1326 audit(1787962709.210:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15832 comm="syz.6.2701" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24a19e159 code=0x7ffc0000 [ 1165.626234][ T27] audit: type=1326 audit(1787962709.210:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15832 comm="syz.6.2701" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb24a19e159 code=0x7ffc0000 [ 1165.663978][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1165.693076][T15783] vcan0 speed is unknown, defaulting to 1000 [ 1165.790446][T15843] trusted_key: encrypted_key: insufficient parameters specified [ 1166.476371][ T27] audit: type=1326 audit(1787962709.210:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15832 comm="syz.6.2701" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24a19e159 code=0x7ffc0000 [ 1166.501477][ T27] audit: type=1326 audit(1787962709.210:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15832 comm="syz.6.2701" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24a19e159 code=0x7ffc0000 [ 1166.556345][ T27] audit: type=1326 audit(1787962709.210:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15832 comm="syz.6.2701" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24a19e159 code=0x7ffc0000 [ 1166.581253][ T27] audit: type=1326 audit(1787962709.260:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15832 comm="syz.6.2701" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fb24a19e159 code=0x7ffc0000 [ 1166.618008][ T27] audit: type=1326 audit(1787962709.260:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15832 comm="syz.6.2701" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24a19e159 code=0x7ffc0000 [ 1166.653050][ T27] audit: type=1326 audit(1787962709.260:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15832 comm="syz.6.2701" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24a19e159 code=0x7ffc0000 [ 1166.741149][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.998228][T15852] futex_wake_op: syz.5.2707 tries to shift op by 144; fix this program [ 1168.898975][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1168.964939][T15860] loop5: detected capacity change from 0 to 1024 [ 1169.034233][ T9045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1169.281444][T15783] vcan0 speed is unknown, defaulting to 1000 [ 1169.326247][T15860] hfsplus: unable to load nls mapping "macroma" [ 1169.332640][T15860] hfsplus: unable to parse mount options [ 1169.965587][T15783] vcan0 speed is unknown, defaulting to 1000 [ 1170.092109][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1170.456798][T15871] loop6: detected capacity change from 0 to 4096 [ 1170.551418][T15871] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1170.639106][T15871] ntfs3: loop6: Failed to load $Extend (-22). [ 1170.645268][T15871] ntfs3: loop6: Failed to initialize $Extend. [ 1171.100702][ T5789] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 1171.297672][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1172.046194][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1172.106361][T15886] tipc: Enabling of bearer rejected, failed to enable media [ 1172.206881][T15890] futex_wake_op: syz.1.2718 tries to shift op by 144; fix this program [ 1172.334434][T15894] tipc: Enabling of bearer rejected, failed to enable media [ 1172.482556][T15897] (null): rxe_set_mtu: Set mtu to 256 [ 1172.508014][T15897] rdma_rxe: rxe_newlink: failed to add vcan0 [ 1172.575385][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1174.104408][T15899] loop5: detected capacity change from 0 to 1024 [ 1174.104851][ T9045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1174.262821][T15899] hfsplus: unable to load nls mapping "macroma" [ 1174.269256][T15899] hfsplus: unable to parse mount options [ 1174.830946][T15913] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.886363][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.126669][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.135059][ T9045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.520901][T15931] loop6: detected capacity change from 0 to 512 [ 1175.742365][T15931] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1176.393909][ T9045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.467077][T15931] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1176.558610][T15931] ext4 filesystem being mounted at /252/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1176.755596][T11952] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1177.376216][ T970] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1177.442370][T15964] trusted_key: encrypted_key: insufficient parameters specified [ 1177.466255][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.472603][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.473566][ T9045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.587603][ T970] usb 6-1: Using ep0 maxpacket: 8 [ 1177.605877][ T970] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1177.640243][ T970] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1177.674232][ T970] usb 6-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 1177.693844][ T970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.717321][ T970] usb 6-1: config 0 descriptor?? [ 1177.917936][T15954] loop6: detected capacity change from 0 to 32768 [ 1178.011469][T15954] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1178.084646][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 1178.084661][ T27] audit: type=1800 audit(1787962722.410:739): pid=15954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2742" name="file1" dev="loop6" ino=17058 res=0 errno=0 [ 1178.166516][T10047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.196849][ T970] lg-g15 0003:046D:C22D.0003: unknown main item tag 0x7 [ 1178.215270][ T970] lg-g15 0003:046D:C22D.0003: ignoring exceeding usage max [ 1178.260707][ T970] lg-g15 0003:046D:C22D.0003: hidraw0: USB HID v0.81 Device [HID 046d:c22d] on usb-dummy_hcd.5-1/input0 [ 1178.395603][T11952] ocfs2: Unmounting device (7,6) on (node local) [ 1178.416675][ T9045] usb 6-1: USB disconnect, device number 8 [ 1178.546384][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.711174][ T9045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.749167][ T5789] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 1180.728247][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1181.206296][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1182.015569][T16011] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1182.038522][T16015] trusted_key: encrypted_key: insufficient parameters specified [ 1182.120492][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1182.274230][T16023] loop5: detected capacity change from 0 to 128 [ 1182.599696][T16023] loop5: detected capacity change from 0 to 512 [ 1183.127081][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.246297][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.461476][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.488602][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.571827][T16023] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1184.572165][T16023] EXT4-fs: failed to create workqueue [ 1184.968456][T16023] EXT4-fs (loop5): mount failed [ 1185.106156][ T8] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1185.317905][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1185.354606][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1185.387278][ T8] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1185.406772][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.640938][ T8] usb 7-1: config 0 descriptor?? [ 1185.645134][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.416323][ T8] hid-steam 0003:28DE:1142.0004: unbalanced collection at end of report description [ 1186.445196][ T8] hid-steam 0003:28DE:1142.0004: steam_probe:parse of hid interface failed [ 1186.479745][ T8] hid-steam: probe of 0003:28DE:1142.0004 failed with error -22 [ 1187.714905][T10047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1187.735423][T12623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1187.750091][ T970] usb 7-1: USB disconnect, device number 7 [ 1187.776135][ T9043] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1187.989177][ T9043] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1188.016447][ T9043] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1188.045613][T16078] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2775'. [ 1188.056372][ T9043] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1188.061323][T16078] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2775'. [ 1188.073880][ T9043] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.083082][T16078] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2775'. [ 1188.544351][ T9043] cxacru 6-1:1.0: invalid response length to cm 0x90: 0 [ 1188.553448][ T9043] cxacru 6-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 1188.561316][ T9043] cxacru: probe of 6-1:1.0 failed with error -22 [ 1189.128148][ T970] usb 6-1: USB disconnect, device number 9 [ 1189.426117][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1190.486764][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1190.778180][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.260049][T16114] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2784'. [ 1191.280366][T16114] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2784'. [ 1191.304488][T16114] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2784'. [ 1191.527059][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1192.652853][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1192.694820][T16131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2789'. [ 1192.888022][T16112] loop5: detected capacity change from 0 to 32768 [ 1193.766289][T16112] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2783 (16112) [ 1193.771469][ T9045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1193.847538][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1193.906093][T16112] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1193.940446][T16112] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1193.976307][T16112] BTRFS info (device loop5): setting nodatasum [ 1193.996332][T16112] BTRFS info (device loop5): force zlib compression, level 3 [ 1194.003773][T16112] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1194.066486][T16112] BTRFS info (device loop5): use lzo compression, level 0 [ 1194.073674][T16112] BTRFS info (device loop5): turning on flush-on-commit [ 1194.090969][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.134055][T16112] BTRFS info (device loop5): enabling auto defrag [ 1194.164131][T16112] BTRFS info (device loop5): max_inline at 4096 [ 1194.186468][T16112] BTRFS info (device loop5): using free space tree [ 1194.216891][T16112] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 1194.217745][T16112] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1194.277048][T16112] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1194.367958][T16112] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1194.427740][T16112] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1194.488145][T16156] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2793'. [ 1194.497223][T16112] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1194.497949][T16112] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1194.557331][T16112] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1194.581233][T16156] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2793'. [ 1194.596894][T16112] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1194.649448][T16156] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2793'. [ 1194.657579][T16112] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1194.708582][T16112] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1194.749973][T16112] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1194.795084][T16112] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1194.856121][T12623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.866307][T16112] BTRFS error (device loop5): open_ctree failed: -12 [ 1195.107198][ T9043] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1195.155954][T15952] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by udevd (15952) [ 1195.193730][T16176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1195.202719][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1195.356316][ T9043] usb 7-1: Using ep0 maxpacket: 8 [ 1195.372761][ T9043] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1195.406347][ T9043] usb 7-1: config 179 has no interface number 0 [ 1195.412719][ T9043] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1195.491696][ T9043] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1195.559878][ T9043] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1195.669397][ T9043] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1195.792979][ T9043] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1196.155670][ T9043] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1196.273378][ T9043] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.326350][ T9045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.394872][T16165] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1197.712472][T10047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.736261][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.837359][T10047] usb 7-1: USB disconnect, device number 8 [ 1197.837505][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1197.851516][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1198.131690][T16200] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2803'. [ 1198.173979][T16200] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2803'. [ 1198.206303][T16200] netlink: 31 bytes leftover after parsing attributes in process `syz.6.2803'. [ 1198.425454][T16209] loop6: detected capacity change from 0 to 164 [ 1198.489481][T16209] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1198.537741][T16209] isofs: isofs_export_get_parent(): child directory not normalized! [ 1198.719282][ T5789] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 1198.816508][ T9045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.845920][T16219] netlink: 332 bytes leftover after parsing attributes in process `syz.6.2810'. [ 1199.857257][ T9045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.165061][T10047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.173225][T10047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.607297][ T9045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1203.731558][T10067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1203.820494][ T9045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.176206][T10047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.886590][ T9045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.285585][T16263] loop6: detected capacity change from 0 to 128 [ 1207.216365][T10047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.433939][ T9045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1208.290959][T16255] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1208.527777][ T9045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1208.653382][ T5789] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 1209.626749][ T9045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.746946][T10047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.777760][ T6144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.836118][ T9045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.003833][T16295] loop6: detected capacity change from 0 to 512 [ 1211.047270][T16295] EXT4-fs: inline encryption not supported [ 1211.115352][T16295] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1211.231051][T16295] EXT4-fs (loop6): 1 truncate cleaned up [ 1211.296658][T16295] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1211.433384][T16300] loop5: detected capacity change from 0 to 128 [ 1211.521040][T16300] loop5: detected capacity change from 0 to 512 [ 1211.566546][T16300] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1211.576450][T16300] EXT4-fs error (device loop5): ext4_orphan_get:1430: comm syz.5.2837: bad orphan inode 16 [ 1211.589196][T16300] ext4_test_bit(bit=15, block=18) = 1 [ 1211.594617][T16300] is_bad_inode(inode)=0 [ 1211.598998][T16300] NEXT_ORPHAN(inode)=83886080 [ 1211.603709][T16300] max_ino=32 [ 1211.607030][T16300] i_nlink=0 [ 1211.734028][ T79] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1211.897673][ T79] EXT4-fs error (device loop5): ext4_release_dquot:6989: comm kworker/u4:5: Failed to release dquot type 1 [ 1213.471292][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.729145][T16300] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1213.786863][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.868805][T11952] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1214.083481][T16300] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1214.253062][ T5789] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 1214.589128][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.306138][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.525468][T10065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.630959][T16334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2844'. [ 1217.317023][T10047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.445267][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.889566][ T5789] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 1219.006250][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.564912][T16369] loop5: detected capacity change from 0 to 128 [ 1219.654360][T16369] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1219.696317][T16369] hpfs: filesystem error: improperly stopped [ 1219.716055][T16369] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1219.786355][T16369] hpfs: You really don't want any checks? You are crazy... [ 1219.816967][T16369] hpfs: Code page index out of array [ 1219.822415][T16369] hpfs: code page support is disabled [ 1219.846843][T16369] hpfs: hpfs_map_4sectors(): unaligned read [ 1219.927358][T16369] hpfs: hpfs_map_4sectors(): unaligned read [ 1219.963888][T16369] hpfs: filesystem error: unable to find root dir [ 1220.096698][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.326745][T10047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1221.514709][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.526582][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.590755][T10047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.608530][ T6830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.632124][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.245353][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1226.851001][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1226.880480][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.592118][T16431] loop6: detected capacity change from 0 to 1024 [ 1227.632634][T16431] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1227.697354][ T5789] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 1228.636542][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.727216][T16431] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c118, mo2=0002] [ 1228.801481][T16431] System zones: 0-1, 3-12 [ 1228.842274][ T6830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.894094][T16431] EXT4-fs (loop6): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1229.138255][T11952] EXT4-fs (loop6): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 1229.695862][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1229.766724][T12624] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1230.116056][T12624] usb 7-1: Using ep0 maxpacket: 32 [ 1230.293784][T12624] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1230.336217][T12624] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1230.373671][T12624] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1230.385672][T12624] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1230.440639][T10047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1230.481583][T12624] usb 7-1: Product: syz [ 1230.497490][T12624] usb 7-1: Manufacturer: syz [ 1230.597983][T12624] hub 7-1:4.0: USB hub found [ 1230.628656][ T5789] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 1230.792513][ T9045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1230.814588][T12624] hub 7-1:4.0: 9 ports detected [ 1230.824693][T12624] hub 7-1:4.0: insufficient power available to use all downstream ports [ 1231.665625][T16472] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2896'. [ 1231.827549][T12624] hub 7-1:4.0: set hub depth failed [ 1231.858456][ T9045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.873902][T12624] usb 7-1: USB disconnect, device number 9 [ 1232.171253][T16480] loop5: detected capacity change from 0 to 128 [ 1233.447208][T10047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.897407][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1234.014036][T16255] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1234.207141][T16479] loop5: detected capacity change from 0 to 512 [ 1234.219473][T16479] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1234.229549][T16479] EXT4-fs error (device loop5): ext4_orphan_get:1430: comm syz.5.2898: bad orphan inode 16 [ 1234.242281][T16479] ext4_test_bit(bit=15, block=18) = 1 [ 1234.247807][T16479] is_bad_inode(inode)=0 [ 1234.252090][T16479] NEXT_ORPHAN(inode)=83886080 [ 1234.256859][T16479] max_ino=32 [ 1234.260079][T16479] i_nlink=0 [ 1234.267600][ T6832] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1234.370600][ T6832] EXT4-fs error (device loop5): ext4_release_dquot:6989: comm kworker/u4:16: Failed to release dquot type 1 [ 1234.416463][ T6143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1234.623513][T16479] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1234.743473][T11743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1235.042854][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.029395][T10047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.072786][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.229886][T16500] loop5: detected capacity change from 0 to 4096 [ 1237.336298][T16508] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1237.361340][T16500] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 1237.432502][T16500] NILFS (loop5): mounting fs with errors [ 1238.064301][T16514] ipvlan0: entered promiscuous mode [ 1238.086666][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.130023][T16514] ipvlan0: left promiscuous mode [ 1239.497366][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.504000][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.515925][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.577051][T16523] tmpfs: Too small a size for current use [ 1239.600289][T16513] loop5: detected capacity change from 0 to 1024 [ 1239.896387][T16513] hfsplus: unable to load nls mapping "macroma" [ 1239.926561][T16513] hfsplus: unable to parse mount options [ 1240.059421][ T5789] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 1240.191855][ T6830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.205259][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.983140][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1241.426370][T12624] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1241.646244][T12624] usb 7-1: Using ep0 maxpacket: 32 [ 1241.685951][T12624] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1241.726236][T12624] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.806700][T12624] usb 7-1: config 0 descriptor?? [ 1241.849794][T12624] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1242.011572][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.487800][T16545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.670683][T12624] gspca_sunplus: reg_r err -71 [ 1242.696641][T12624] sunplus: probe of 7-1:0.0 failed with error -71 [ 1242.737828][T12624] usb 7-1: USB disconnect, device number 10 [ 1243.046430][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1243.334044][ T5789] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 1244.272956][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.380359][T16561] loop6: detected capacity change from 0 to 512 [ 1244.472785][T16561] EXT4-fs error (device loop6): ext4_orphan_get:1404: inode #15: comm syz.6.2926: iget: bad i_size value: 38620345925642 [ 1244.523374][T16561] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.2926: couldn't read orphan inode 15 (err -117) [ 1245.574931][T16554] loop5: detected capacity change from 0 to 1024 [ 1245.577019][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1245.587647][T16561] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1245.654646][T16554] hfsplus: unable to load nls mapping "macroma" [ 1245.684303][T16554] hfsplus: unable to parse mount options [ 1245.769491][T11952] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1245.933038][ T6143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1246.006682][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.768280][ T9045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1248.328434][ T27] audit: type=1326 audit(1787962792.650:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16590 comm="syz.0.2939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3679e159 code=0x7ffc0000 [ 1248.426537][ T27] audit: type=1326 audit(1787962792.680:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16590 comm="syz.0.2939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fdc3679e159 code=0x7ffc0000 [ 1248.480746][ T27] audit: type=1326 audit(1787962792.680:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16590 comm="syz.0.2939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3679e159 code=0x7ffc0000 [ 1248.586096][ T27] audit: type=1326 audit(1787962792.690:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16590 comm="syz.0.2939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3679e159 code=0x7ffc0000 [ 1248.677813][ T27] audit: type=1326 audit(1787962792.700:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16590 comm="syz.0.2939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7fdc3679e159 code=0x7ffc0000 [ 1248.817175][ T27] audit: type=1326 audit(1787962792.700:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16590 comm="syz.0.2939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3679e159 code=0x7ffc0000 [ 1248.822085][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1249.933976][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1249.955504][ T27] audit: type=1326 audit(1787962792.700:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16590 comm="syz.0.2939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3679e159 code=0x7ffc0000 [ 1250.066185][ T27] audit: type=1326 audit(1787962792.700:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16590 comm="syz.0.2939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fdc3679e159 code=0x7ffc0000 [ 1250.133446][ T27] audit: type=1326 audit(1787962792.700:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16590 comm="syz.0.2939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3679e159 code=0x7ffc0000 [ 1250.203764][ T27] audit: type=1326 audit(1787962792.700:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16590 comm="syz.0.2939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3679e159 code=0x7ffc0000 [ 1252.355397][T16634] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2953'. [ 1252.575239][T16640] vcan0 speed is unknown, defaulting to 1000 [ 1253.377183][T16659] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[11952] was attempted by ""[16659] [ 1254.713324][T16687] trusted_key: encrypted_key: insufficient parameters specified [ 1255.001754][T16695] 9pnet_fd: Insufficient options for proto=fd [ 1255.122852][T16693] loop5: detected capacity change from 0 to 128 [ 1255.660572][T16475] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1255.729117][T16698] loop5: detected capacity change from 0 to 512 [ 1255.868658][T16698] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1256.133518][T16698] EXT4-fs error (device loop5): ext4_orphan_get:1430: comm syz.5.2973: bad orphan inode 16 [ 1256.164822][T16698] ext4_test_bit(bit=15, block=18) = 1 [ 1256.170431][T16698] is_bad_inode(inode)=0 [ 1256.174694][T16698] NEXT_ORPHAN(inode)=83886080 [ 1256.179514][T16698] max_ino=32 [ 1256.182780][T16698] i_nlink=0 [ 1257.679348][ T6831] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1257.850094][ T6831] EXT4-fs error (device loop5): ext4_release_dquot:6989: comm kworker/u4:15: Failed to release dquot type 1 [ 1258.052506][T16698] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1258.268848][T11743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1263.607805][ T27] audit: type=1326 audit(1787962807.940:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16785 comm="syz.6.3003" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24a19e159 code=0x7ffc0000 [ 1263.709859][ T27] audit: type=1326 audit(1787962807.940:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16785 comm="syz.6.3003" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24a19e159 code=0x7ffc0000 [ 1263.805635][ T27] audit: type=1326 audit(1787962807.940:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16785 comm="syz.6.3003" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24a19e159 code=0x7ffc0000 [ 1263.830880][T16789] loop5: detected capacity change from 0 to 2048 [ 1263.900063][T16789] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 1263.911557][ T27] audit: type=1326 audit(1787962807.940:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16785 comm="syz.6.3003" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb24a19e159 code=0x7ffc0000 [ 1263.917108][T16789] UDF-fs: Scanning with blocksize 512 failed [ 1264.004896][ T27] audit: type=1326 audit(1787962807.940:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16785 comm="syz.6.3003" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24a19e159 code=0x7ffc0000 [ 1264.046461][T16789] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1264.152628][ T27] audit: type=1326 audit(1787962807.940:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16785 comm="syz.6.3003" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24a19e159 code=0x7ffc0000 [ 1264.270651][ T27] audit: type=1326 audit(1787962807.970:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16785 comm="syz.6.3003" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24a19e159 code=0x7ffc0000 [ 1264.329599][ T27] audit: type=1326 audit(1787962807.970:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16785 comm="syz.6.3003" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24a19e159 code=0x7ffc0000 [ 1264.362240][ T27] audit: type=1326 audit(1787962807.970:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16785 comm="syz.6.3003" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24a19e159 code=0x7ffc0000 [ 1264.416477][ T27] audit: type=1326 audit(1787962807.990:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16785 comm="syz.6.3003" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb24a19e159 code=0x7ffc0000 [ 1265.715749][T16822] loop5: detected capacity change from 0 to 512 [ 1265.827953][T16822] EXT4-fs error (device loop5): mb_free_blocks:1970: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1265.873972][T16822] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #11: comm syz.5.3014: corrupted inode contents [ 1265.906709][T16822] EXT4-fs error (device loop5): ext4_dirty_inode:6144: inode #11: comm syz.5.3014: mark_inode_dirty error [ 1265.962181][T16822] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.3014: invalid indirect mapped block 1 (level 1) [ 1265.993696][T16822] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #11: comm syz.5.3014: corrupted inode contents [ 1266.019317][T16822] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 1266.052691][T16822] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #11: comm syz.5.3014: corrupted inode contents [ 1266.074516][T16822] EXT4-fs error (device loop5): ext4_truncate:4302: inode #11: comm syz.5.3014: mark_inode_dirty error [ 1266.106781][T16822] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 1266.124577][T16822] EXT4-fs (loop5): 1 truncate cleaned up [ 1266.133364][T16822] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1266.221523][T16822] CacheFiles: mkdir cache failed with error -105 [ 1266.265751][T16822] CacheFiles: Failed to register: -105 [ 1266.319657][T11743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1266.436812][T16843] loop5: detected capacity change from 0 to 256 [ 1269.093934][T16868] loop6: detected capacity change from 0 to 1024 [ 1269.353079][T16868] hfsplus: unable to load nls mapping "macroma" [ 1269.360681][T16868] hfsplus: unable to parse mount options [ 1269.677627][T16880] loop5: detected capacity change from 0 to 256 [ 1269.743030][T16880] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1271.705676][T16904] loop5: detected capacity change from 0 to 64 [ 1275.213714][T16923] netlink: 'syz.6.3048': attribute type 30 has an invalid length. [ 1275.249173][T16923] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1275.258794][T16923] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1275.267740][T16923] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1275.330963][T16923] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1275.340524][T16923] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1275.349787][T16923] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1275.701580][T16926] loop6: detected capacity change from 0 to 512 [ 1275.737752][T16926] EXT4-fs: inline encryption not supported [ 1275.766441][T16926] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1275.773288][T16926] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1275.855193][T16926] EXT4-fs error (device loop6): ext4_orphan_get:1430: comm syz.6.3049: bad orphan inode 131083 [ 1275.877206][T16926] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1277.340089][T16926] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 1277.519932][T11952] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1278.909477][T16964] loop6: detected capacity change from 0 to 1024 [ 1279.024490][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 1279.024504][ T27] audit: type=1800 audit(1787962823.350:769): pid=16964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3059" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 1280.443673][T16977] loop6: detected capacity change from 0 to 64 [ 1284.214323][T17006] loop5: detected capacity change from 0 to 256 [ 1286.048922][T17023] trusted_key: encrypted_key: insufficient parameters specified [ 1287.866457][T10047] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1288.089334][T10047] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1288.166353][T10047] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1288.177543][T10047] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 1288.187119][T10047] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.219641][T10047] usb 6-1: probing VID:PID(0424:012C) [ 1288.236189][T10047] usb 6-1: vub300 testing BULK IN EndPoint(0) 81 [ 1288.245613][T10047] usb 6-1: vub300 testing BULK OUT EndPoint(1) 02 [ 1288.253461][T10047] usb 6-1: vub300 testing BULK IN EndPoint(2) 83 [ 1288.262371][T10047] usb 6-1: vub300 testing BULK OUT EndPoint(3) 04 [ 1288.270680][T10047] usb 6-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 1288.399107][T17039] syz.6.3083 (17039) used greatest stack depth: 16616 bytes left [ 1289.348179][T10047] vub300: probe of 6-1:1.0 failed with error -110 [ 1290.327587][T10047] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1290.424885][T12623] usb 6-1: USB disconnect, device number 10 [ 1290.498656][T17069] trusted_key: encrypted_key: insufficient parameters specified [ 1290.527908][T10047] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1290.576077][T10047] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1290.593925][T10047] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1290.610389][T10047] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.633963][T10047] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 1290.658852][T10047] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 1290.962190][T10047] usb 7-1: USB disconnect, device number 11 [ 1290.977416][T10047] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1290.991245][T10047] spcp8x5 7-1:1.0: device disconnected [ 1292.308313][T17091] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3100'. [ 1292.507839][T17096] trusted_key: encrypted_key: insufficient parameters specified [ 1293.908353][T17123] mtrr: base(0x10000) is not aligned on a size(0x0000) boundary [ 1294.337837][T17140] trusted_key: encrypted_key: insufficient parameters specified [ 1294.364922][T17142] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3119'. [ 1295.861810][T17161] loop6: detected capacity change from 0 to 64 [ 1295.868373][T17159] loop5: detected capacity change from 0 to 1024 [ 1296.065281][T17161] syz.6.3125: attempt to access beyond end of device [ 1296.065281][T17161] loop6: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 1296.082694][T17161] Buffer I/O error on dev loop6, logical block 161, lost async page write [ 1296.098290][T17161] syz.6.3125: attempt to access beyond end of device [ 1296.098290][T17161] loop6: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 1296.118619][ T6830] hfsplus: bad catalog file entry [ 1296.139194][T17161] Buffer I/O error on dev loop6, logical block 162, lost async page write [ 1296.167586][T17161] syz.6.3125: attempt to access beyond end of device [ 1296.167586][T17161] loop6: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 1296.232637][T17161] Buffer I/O error on dev loop6, logical block 163, lost async page write [ 1296.263119][T17161] syz.6.3125: attempt to access beyond end of device [ 1296.263119][T17161] loop6: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 1296.326255][T17161] Buffer I/O error on dev loop6, logical block 167, lost async page write [ 1296.345095][T17161] syz.6.3125: attempt to access beyond end of device [ 1296.345095][T17161] loop6: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 1296.393925][T17161] Buffer I/O error on dev loop6, logical block 169, lost async page write [ 1296.420472][T17161] syz.6.3125: attempt to access beyond end of device [ 1296.420472][T17161] loop6: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 1296.454921][T17161] Buffer I/O error on dev loop6, logical block 171, lost async page write [ 1296.474532][T17161] syz.6.3125: attempt to access beyond end of device [ 1296.474532][T17161] loop6: rw=2049, sector=172, nr_sectors = 1 limit=64 [ 1296.516099][T17161] Buffer I/O error on dev loop6, logical block 172, lost async page write [ 1297.269544][T17177] trusted_key: encrypted_key: insufficient parameters specified [ 1299.186391][T12624] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1299.686191][T12624] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1299.712585][T12624] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1299.735908][T12624] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1299.756473][T12624] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1299.774575][T12624] usb 7-1: SerialNumber: syz [ 1299.834433][T17214] trusted_key: encrypted_key: insufficient parameters specified [ 1300.052682][T12624] usb 7-1: 0:2 : does not exist [ 1300.111425][T12624] usb 7-1: USB disconnect, device number 12 [ 1300.199074][T16475] udevd[16475]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1300.330099][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.336879][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1303.959227][T10047] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1304.032070][T17257] loop5: detected capacity change from 0 to 4096 [ 1304.111346][T17259] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1304.196062][T10047] usb 7-1: Using ep0 maxpacket: 32 [ 1304.236232][T10047] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1304.248296][T10047] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.273783][T10047] usb 7-1: config 0 descriptor?? [ 1304.319332][T10047] as10x_usb: device has been detected [ 1304.325543][T10047] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1304.422147][T10047] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1304.610006][T10047] as10x_usb: error during firmware upload part1 [ 1304.630719][T10047] Registered device nBox DVB-T Dongle [ 1304.657102][T10047] usb 7-1: USB disconnect, device number 13 [ 1304.750849][T10047] Unregistered device nBox DVB-T Dongle [ 1305.432186][T10047] as10x_usb: device has been disconnected [ 1305.705720][T17271] trusted_key: encrypted_key: insufficient parameters specified [ 1306.301923][T17285] loop6: detected capacity change from 0 to 16 [ 1306.315340][T17285] erofs: (device loop6): mounted with root inode @ nid 36. [ 1306.370324][T17285] syz.6.3167: attempt to access beyond end of device [ 1306.370324][T17285] loop6: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 1307.097103][T17285] syz.6.3167: attempt to access beyond end of device [ 1307.097103][T17285] loop6: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 1307.225035][T17290] syz.6.3167: attempt to access beyond end of device [ 1307.225035][T17290] loop6: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1308.961010][T17310] loop5: detected capacity change from 0 to 1024 [ 1308.987935][T17312] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 1308.994536][T17312] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1309.008860][T17312] vhci_hcd vhci_hcd.0: Device attached [ 1309.276155][T12624] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 1309.286496][T12623] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 1309.883720][T12623] usb 7-1: config 0 has no interfaces? [ 1309.890145][T12623] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1309.911409][T12623] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.117404][T12623] usb 7-1: config 0 descriptor?? [ 1310.169124][T17329] trusted_key: encrypted_key: insufficient parameters specified [ 1310.340521][T17313] usb 45-1: recv xbuf, 0 [ 1310.341392][ T8] usb 7-1: USB disconnect, device number 14 [ 1310.354447][ T6830] vhci_hcd: stop threads [ 1310.368879][ T6830] vhci_hcd: release socket [ 1310.379261][ T6830] vhci_hcd: disconnect device [ 1310.426462][T12624] vhci_hcd: vhci_device speed not set [ 1315.505312][T17390] loop5: detected capacity change from 0 to 512 [ 1315.517120][T17390] EXT4-fs: Ignoring removed oldalloc option [ 1315.541938][T17390] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1315.648988][T17390] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1315.992579][T11743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1318.700859][T17443] loop5: detected capacity change from 0 to 1024 [ 1319.541669][T17447] vcan0 speed is unknown, defaulting to 1000 [ 1319.608485][T17443] hfsplus: unable to load nls mapping "macroma" [ 1319.614810][T17443] hfsplus: unable to parse mount options [ 1322.885138][T17497] vcan0 speed is unknown, defaulting to 1000 [ 1329.908994][T17549] loop6: detected capacity change from 0 to 1024 [ 1330.827956][T17549] hfsplus: unable to load nls mapping "macroma" [ 1330.834277][T17549] hfsplus: unable to parse mount options [ 1335.669704][T17591] loop5: detected capacity change from 0 to 2048 [ 1335.685931][T17591] EXT4-fs: Ignoring removed bh option [ 1335.748481][T17591] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1335.796657][T17591] ext4 filesystem being mounted at /364/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1335.974061][T17591] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.3264: bg 0: block 345: padding at end of block bitmap is not set [ 1336.035771][T17591] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 28 [ 1336.064100][T17591] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1336.064100][T17591] [ 1336.076667][T17591] EXT4-fs (loop5): Total free blocks count 0 [ 1336.082954][T17591] EXT4-fs (loop5): Free/Dirty block details [ 1336.091426][T17591] EXT4-fs (loop5): free_blocks=0 [ 1336.097049][T17591] EXT4-fs (loop5): dirty_blocks=16 [ 1336.102312][T17591] EXT4-fs (loop5): Block reservation details [ 1336.108600][T17591] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 1336.168100][T11743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1336.356152][T12624] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1336.568434][T12624] usb 7-1: config 0 has no interfaces? [ 1336.576715][T12624] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1336.596115][T12624] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1336.614425][T12624] usb 7-1: Product: syz [ 1336.624512][T12624] usb 7-1: Manufacturer: syz [ 1336.637660][T12624] usb 7-1: config 0 descriptor?? [ 1336.910732][T12624] usb 7-1: USB disconnect, device number 15 [ 1338.559581][T17648] loop5: detected capacity change from 0 to 512 [ 1338.598985][T17648] EXT4-fs: Ignoring removed bh option [ 1338.666589][T17648] EXT4-fs (loop5): 1 truncate cleaned up [ 1338.704024][T17648] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1338.964419][T11743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1339.231461][T17666] ip6erspan0: entered allmulticast mode [ 1339.375259][T17670] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3296'. [ 1340.404858][T17685] trusted_key: encrypted_key: insufficient parameters specified [ 1341.534531][T17700] loop6: detected capacity change from 0 to 1764 [ 1341.644979][ T27] audit: type=1800 audit(1787962885.970:770): pid=17700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3304" name="file0" dev="loop6" ino=1923 res=0 errno=0 [ 1341.905767][T17713] trusted_key: encrypted_key: insufficient parameters specified [ 1343.059475][T17727] trusted_key: encrypted_key: insufficient parameters specified [ 1344.645368][T17743] trusted_key: encrypted_key: insufficient parameters specified [ 1346.746114][ T8] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1346.956335][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 1346.984625][ T8] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1347.003081][ T8] usb 6-1: config 0 has no interface number 0 [ 1347.041979][ T8] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1347.061595][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.086143][ T8] usb 6-1: Product: syz [ 1347.090354][ T8] usb 6-1: Manufacturer: syz [ 1347.106108][ T8] usb 6-1: SerialNumber: syz [ 1347.117919][ T8] usb 6-1: config 0 descriptor?? [ 1347.137740][ T8] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1347.148756][T17761] FAULT_INJECTION: forcing a failure. [ 1347.148756][T17761] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1347.162334][T17761] CPU: 0 PID: 17761 Comm: syz.6.3324 Not tainted syzkaller #0 [ 1347.169836][T17761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1347.179937][T17761] Call Trace: [ 1347.183239][T17761] [ 1347.186191][T17761] dump_stack_lvl+0x18c/0x250 [ 1347.190887][T17761] ? show_regs_print_info+0x20/0x20 [ 1347.196095][T17761] ? load_image+0x420/0x420 [ 1347.200603][T17761] ? __might_fault+0xaa/0x120 [ 1347.205296][T17761] ? __lock_acquire+0x7d80/0x7d80 [ 1347.210332][T17761] should_fail_ex+0x394/0x4c0 [ 1347.215019][T17761] _copy_from_user+0x2f/0xe0 [ 1347.219633][T17761] __sys_bpf+0x23e/0x890 [ 1347.223902][T17761] ? bpf_link_show_fdinfo+0x390/0x390 [ 1347.229287][T17761] ? lock_chain_count+0x20/0x20 [ 1347.234179][T17761] __x64_sys_bpf+0x7c/0x90 [ 1347.238640][T17761] do_syscall_64+0x55/0xb0 [ 1347.243087][T17761] ? clear_bhb_loop+0x40/0x90 [ 1347.247785][T17761] ? clear_bhb_loop+0x40/0x90 [ 1347.252498][T17761] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1347.258418][T17761] RIP: 0033:0x7fb24a19e159 [ 1347.262850][T17761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1347.282566][T17761] RSP: 002b:00007fb24b081028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1347.291033][T17761] RAX: ffffffffffffffda RBX: 00007fb24a425fa0 RCX: 00007fb24a19e159 [ 1347.299039][T17761] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1347.307082][T17761] RBP: 00007fb24a235024 R08: 0000000000000000 R09: 0000000000000000 [ 1347.315064][T17761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1347.323045][T17761] R13: 00007fb24a426038 R14: 00007fb24a425fa0 R15: 00007ffe5a0faed8 [ 1347.331039][T17761] [ 1347.434565][ T8] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1347.518296][ T8] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1348.072541][T17757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1348.115549][T17757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1348.706173][T17777] trusted_key: encrypted_key: insufficient parameters specified [ 1348.778705][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1348.794735][ T8] usb 6-1: USB disconnect, device number 11 [ 1348.897459][ T8] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1349.171265][ T8] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1349.420961][ T8] quatech2 6-1:0.51: device disconnected [ 1349.792496][T17789] [ 1349.794881][T17789] ====================================================== [ 1349.801919][T17789] WARNING: possible circular locking dependency detected [ 1349.809051][T17789] syzkaller #0 Not tainted [ 1349.813484][T17789] ------------------------------------------------------ [ 1349.820518][T17789] syz.6.3334/17789 is trying to acquire lock: [ 1349.826596][T17789] ffffffff8e43c430 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 1349.834367][T17789] [ 1349.834367][T17789] but task is already holding lock: [ 1349.841725][T17789] ffff88805e2b0068 (&pipe->mutex/1){+.+.}-{3:3}, at: splice_to_socket+0x163/0x1270 [ 1349.851074][T17789] [ 1349.851074][T17789] which lock already depends on the new lock. [ 1349.851074][T17789] [ 1349.861480][T17789] [ 1349.861480][T17789] the existing dependency chain (in reverse order) is: [ 1349.870522][T17789] [ 1349.870522][T17789] -> #6 (&pipe->mutex/1){+.+.}-{3:3}: [ 1349.878096][T17789] __mutex_lock+0x135/0xc80 [ 1349.883134][T17789] iter_file_splice_write+0x1ba/0xcf0 [ 1349.889036][T17789] do_splice+0xe45/0x1b20 [ 1349.893909][T17789] __se_sys_splice+0x398/0x4a0 [ 1349.899241][T17789] do_syscall_64+0x55/0xb0 [ 1349.904188][T17789] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1349.910631][T17789] [ 1349.910631][T17789] -> #5 (sb_writers#5){.+.+}-{0:0}: [ 1349.918036][T17789] sb_start_write+0x4d/0x1c0 [ 1349.923179][T17789] mnt_want_write+0x41/0x90 [ 1349.928266][T17789] path_openat+0x768/0x3270 [ 1349.933321][T17789] do_filp_open+0x1f2/0x430 [ 1349.938365][T17789] filp_open+0x180/0x1e0 [ 1349.943148][T17789] fsg_lun_open+0x67/0xec0 [ 1349.948093][T17789] fsg_store_file+0x1a9/0x530 [ 1349.953310][T17789] configfs_write_iter+0x312/0x400 [ 1349.958985][T17789] vfs_write+0x474/0x9a0 [ 1349.963779][T17789] ksys_write+0x151/0x260 [ 1349.968659][T17789] do_syscall_64+0x55/0xb0 [ 1349.973623][T17789] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1349.980060][T17789] [ 1349.980060][T17789] -> #4 (&common->filesem){++++}-{3:3}: [ 1349.987810][T17789] down_read+0x46/0x2e0 [ 1349.992617][T17789] fsg_show_file+0x2d/0x130 [ 1349.997748][T17789] configfs_read_iter+0x29d/0x570 [ 1350.003334][T17789] __kernel_read+0x2e5/0x730 [ 1350.008471][T17789] integrity_kernel_read+0x8a/0xd0 [ 1350.014117][T17789] ima_calc_file_hash+0xb1f/0x1960 [ 1350.019744][T17789] ima_collect_measurement+0x4d4/0xa30 [ 1350.025723][T17789] process_measurement+0x123a/0x1d50 [ 1350.031591][T17789] ima_file_check+0xcc/0x110 [ 1350.036724][T17789] path_openat+0x2910/0x3270 [ 1350.041859][T17789] do_filp_open+0x1f2/0x430 [ 1350.047203][T17789] do_sys_openat2+0x134/0x1d0 [ 1350.052418][T17789] __x64_sys_openat+0x139/0x160 [ 1350.057809][T17789] do_syscall_64+0x55/0xb0 [ 1350.062760][T17789] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1350.069227][T17789] [ 1350.069227][T17789] -> #3 (&p->frag_sem){.+.+}-{3:3}: [ 1350.076615][T17789] down_read+0x46/0x2e0 [ 1350.081310][T17789] configfs_read_iter+0x1a5/0x570 [ 1350.086867][T17789] __kernel_read+0x2e5/0x730 [ 1350.091999][T17789] integrity_kernel_read+0x8a/0xd0 [ 1350.097660][T17789] ima_calc_file_hash+0xb1f/0x1960 [ 1350.103306][T17789] ima_collect_measurement+0x4d4/0xa30 [ 1350.109299][T17789] process_measurement+0x123a/0x1d50 [ 1350.115120][T17789] ima_file_check+0xcc/0x110 [ 1350.120251][T17789] path_openat+0x2910/0x3270 [ 1350.125383][T17789] do_filp_open+0x1f2/0x430 [ 1350.130451][T17789] do_sys_openat2+0x134/0x1d0 [ 1350.135660][T17789] __x64_sys_openat+0x139/0x160 [ 1350.141059][T17789] do_syscall_64+0x55/0xb0 [ 1350.146007][T17789] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1350.152454][T17789] [ 1350.152454][T17789] -> #2 (&buffer->mutex#2){+.+.}-{3:3}: [ 1350.160237][T17789] __mutex_lock+0x135/0xc80 [ 1350.165299][T17789] configfs_read_iter+0x72/0x570 [ 1350.170791][T17789] __kernel_read+0x2e5/0x730 [ 1350.175938][T17789] integrity_kernel_read+0x8a/0xd0 [ 1350.181588][T17789] ima_calc_file_hash+0xb1f/0x1960 [ 1350.187338][T17789] ima_collect_measurement+0x4d4/0xa30 [ 1350.193347][T17789] process_measurement+0x123a/0x1d50 [ 1350.199171][T17789] ima_file_check+0xcc/0x110 [ 1350.204287][T17789] path_openat+0x2910/0x3270 [ 1350.209425][T17789] do_filp_open+0x1f2/0x430 [ 1350.214452][T17789] do_sys_openat2+0x134/0x1d0 [ 1350.219645][T17789] __x64_sys_openat+0x139/0x160 [ 1350.225031][T17789] do_syscall_64+0x55/0xb0 [ 1350.229991][T17789] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1350.236420][T17789] [ 1350.236420][T17789] -> #1 (&iint_mutex_key[depth]){+.+.}-{3:3}: [ 1350.244702][T17789] __mutex_lock+0x135/0xc80 [ 1350.249829][T17789] process_measurement+0x739/0x1d50 [ 1350.255681][T17789] ima_file_check+0xcc/0x110 [ 1350.260802][T17789] path_openat+0x2910/0x3270 [ 1350.265960][T17789] do_file_open_root+0x2f3/0x5a0 [ 1350.271429][T17789] file_open_root+0x167/0x1c0 [ 1350.276684][T17789] kernel_read_file_from_path_initns+0x151/0x230 [ 1350.283555][T17789] _request_firmware+0xb43/0x1520 [ 1350.289113][T17789] request_firmware+0x36/0x50 [ 1350.294325][T17789] reg_reload_regdb+0x9a/0x490 [ 1350.299617][T17789] genl_family_rcv_msg_doit+0x21a/0x310 [ 1350.305783][T17789] genl_rcv_msg+0x611/0x7a0 [ 1350.310835][T17789] netlink_rcv_skb+0x235/0x4c0 [ 1350.316144][T17789] genl_rcv+0x28/0x40 [ 1350.320671][T17789] netlink_unicast+0x7b1/0x930 [ 1350.325975][T17789] netlink_sendmsg+0x8d0/0xbf0 [ 1350.331280][T17789] ____sys_sendmsg+0x61b/0x980 [ 1350.336570][T17789] ___sys_sendmsg+0x2a6/0x360 [ 1350.341767][T17789] __se_sys_sendmsg+0x1d0/0x2c0 [ 1350.347138][T17789] do_syscall_64+0x55/0xb0 [ 1350.352103][T17789] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1350.358553][T17789] [ 1350.358553][T17789] -> #0 (cb_lock){++++}-{3:3}: [ 1350.365517][T17789] __lock_acquire+0x37ef/0x7d80 [ 1350.370988][T17789] lock_acquire+0x19e/0x420 [ 1350.376031][T17789] down_read+0x46/0x2e0 [ 1350.380725][T17789] genl_rcv+0x19/0x40 [ 1350.385237][T17789] netlink_unicast+0x7b1/0x930 [ 1350.390587][T17789] netlink_sendmsg+0x8d0/0xbf0 [ 1350.395879][T17789] sock_sendmsg+0x23b/0x3a0 [ 1350.400919][T17789] splice_to_socket+0xb92/0x1270 [ 1350.406384][T17789] do_splice+0xe45/0x1b20 [ 1350.411252][T17789] __se_sys_splice+0x398/0x4a0 [ 1350.416562][T17789] do_syscall_64+0x55/0xb0 [ 1350.421519][T17789] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1350.427954][T17789] [ 1350.427954][T17789] other info that might help us debug this: [ 1350.427954][T17789] [ 1350.438196][T17789] Chain exists of: [ 1350.438196][T17789] cb_lock --> sb_writers#5 --> &pipe->mutex/1 [ 1350.438196][T17789] [ 1350.450318][T17789] Possible unsafe locking scenario: [ 1350.450318][T17789] [ 1350.457781][T17789] CPU0 CPU1 [ 1350.463240][T17789] ---- ---- [ 1350.468606][T17789] lock(&pipe->mutex/1); [ 1350.472952][T17789] lock(sb_writers#5); [ 1350.479639][T17789] lock(&pipe->mutex/1); [ 1350.486499][T17789] rlock(cb_lock); [ 1350.490336][T17789] [ 1350.490336][T17789] *** DEADLOCK *** [ 1350.490336][T17789] [ 1350.498521][T17789] 1 lock held by syz.6.3334/17789: [ 1350.503697][T17789] #0: ffff88805e2b0068 (&pipe->mutex/1){+.+.}-{3:3}, at: splice_to_socket+0x163/0x1270 [ 1350.513496][T17789] [ 1350.513496][T17789] stack backtrace: [ 1350.519392][T17789] CPU: 0 PID: 17789 Comm: syz.6.3334 Not tainted syzkaller #0 [ 1350.526866][T17789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1350.537108][T17789] Call Trace: [ 1350.540403][T17789] [ 1350.543343][T17789] dump_stack_lvl+0x18c/0x250 [ 1350.548052][T17789] ? load_image+0x420/0x420 [ 1350.552569][T17789] ? show_regs_print_info+0x20/0x20 [ 1350.557786][T17789] ? print_circular_bug+0x12b/0x1a0 [ 1350.563006][T17789] check_noncircular+0x2fc/0x400 [ 1350.567975][T17789] ? print_deadlock_bug+0x5d0/0x5d0 [ 1350.573181][T17789] ? lockdep_lock+0xf5/0x230 [ 1350.577774][T17789] ? _find_first_zero_bit+0xd6/0x100 [ 1350.583106][T17789] __lock_acquire+0x37ef/0x7d80 [ 1350.587998][T17789] ? _local_bh_enable+0xa0/0xa0 [ 1350.592865][T17789] ? verify_lock_unused+0x140/0x140 [ 1350.598148][T17789] ? ref_tracker_free+0x686/0x830 [ 1350.603173][T17789] ? refcount_inc+0x70/0x70 [ 1350.607682][T17789] lock_acquire+0x19e/0x420 [ 1350.612196][T17789] ? genl_rcv+0x19/0x40 [ 1350.616421][T17789] ? __might_sleep+0xe0/0xe0 [ 1350.621040][T17789] ? read_lock_is_recursive+0x20/0x20 [ 1350.626441][T17789] ? netlink_deliver_tap+0x2e/0x1b0 [ 1350.631668][T17789] ? __lock_acquire+0x7d80/0x7d80 [ 1350.636731][T17789] down_read+0x46/0x2e0 [ 1350.640935][T17789] ? genl_rcv+0x19/0x40 [ 1350.645146][T17789] genl_rcv+0x19/0x40 [ 1350.649163][T17789] netlink_unicast+0x7b1/0x930 [ 1350.653969][T17789] netlink_sendmsg+0x8d0/0xbf0 [ 1350.658765][T17789] ? netlink_getsockopt+0x590/0x590 [ 1350.663972][T17789] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1350.669536][T17789] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1350.674829][T17789] ? security_socket_sendmsg+0x80/0xa0 [ 1350.680293][T17789] ? netlink_getsockopt+0x590/0x590 [ 1350.685559][T17789] sock_sendmsg+0x23b/0x3a0 [ 1350.690085][T17789] ? read_lock_is_recursive+0x20/0x20 [ 1350.695490][T17789] ? __sock_tx_timestamp+0xb0/0xb0 [ 1350.700625][T17789] ? __asan_memset+0x22/0x40 [ 1350.705274][T17789] ? iov_iter_bvec+0xd4/0x1b0 [ 1350.709977][T17789] splice_to_socket+0xb92/0x1270 [ 1350.714949][T17789] ? iter_file_splice_write+0xcf0/0xcf0 [ 1350.720619][T17789] ? aa_path_link+0xf80/0xf80 [ 1350.725338][T17789] ? futex_wait+0x4a7/0x5c0 [ 1350.729950][T17789] ? common_file_perm+0x198/0x1f0 [ 1350.734976][T17789] ? fsnotify_perm+0x5d/0x5e0 [ 1350.739671][T17789] ? security_file_permission+0x79/0xa0 [ 1350.745235][T17789] ? iter_file_splice_write+0xcf0/0xcf0 [ 1350.750808][T17789] do_splice+0xe45/0x1b20 [ 1350.755356][T17789] ? vfs_write+0x5de/0x9a0 [ 1350.759890][T17789] ? __fget_files+0x28/0x460 [ 1350.764503][T17789] ? wait_for_space+0x2d0/0x2d0 [ 1350.769355][T17789] ? __fdget+0x180/0x210 [ 1350.773680][T17789] __se_sys_splice+0x398/0x4a0 [ 1350.778580][T17789] ? __x64_sys_splice+0xf0/0xf0 [ 1350.783430][T17789] ? __x64_sys_splice+0x21/0xf0 [ 1350.788292][T17789] do_syscall_64+0x55/0xb0 [ 1350.792722][T17789] ? clear_bhb_loop+0x40/0x90 [ 1350.797391][T17789] ? clear_bhb_loop+0x40/0x90 [ 1350.802060][T17789] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1350.807952][T17789] RIP: 0033:0x7fb24a19e159 [ 1350.812375][T17789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1350.832080][T17789] RSP: 002b:00007fb24b081028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1350.840519][T17789] RAX: ffffffffffffffda RBX: 00007fb24a425fa0 RCX: 00007fb24a19e159 [ 1350.848499][T17789] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1350.856483][T17789] RBP: 00007fb24a235024 R08: 0000000000000800 R09: 0000000000000000 [ 1350.864472][T17789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1350.872559][T17789] R13: 00007fb24a426038 R14: 00007fb24a425fa0 R15: 00007ffe5a0faed8 [ 1350.880553][T17789]