last executing test programs: 12m48.989353676s ago: executing program 3 (id=4): io_setup(0x8, &(0x7f0000000100)) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x810, 0xffffffffffffffff, 0x73ebede493e81d72) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCGPGRP(r1, 0x5437, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x3, &(0x7f00000024c0)=ANY=[@ANYBLOB="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"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000067000aac14140ce000000d49e832f0", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe2(&(0x7f0000000080), 0x0) syz_emit_ethernet(0xfc0, &(0x7f0000001280)={@local, @broadcast, @void, {@llc_tr={0x11, {@llc={0xfe, 0xd4, "ca", "82fceb294d2afbe4efd0894fe8d8eb89afde50cc1917e0044f21aa13e54c8093149a916b3e562cb5ab3257ed2a672702bbc797d67b41bd247a7e3125f5609d01e028b2c37c2d882724ff6bdc2113c0b529c257c41cad8b8149c491fe25176a6455f85416e259d48df34d38bce97d575bc9ba6d4bd6b944c9f2502329fb72edd7e561e1ddf0a287b3b4dfc54e79cdbca6df23b1299b0b3e042edeaf5b6da7719a9ac5f8e6ae5682d58111c224dab88aac96aeed1f1ce314f52055b78d27c57f4a6afdd3ce47fb600c855d745ae41718405f06cb45c779cf12047387d16ed940c0fd812719e30d80d4d62c3a8bcf69e818fc984174c327c807b6901e7392cb3011b3081605af28aaf99ae0519359331d7939d75dc376e0cfaefe6a9d4645a757d5550abc3524d4828b4603d17810a39bb0624185684df52f596fc722dcfe6d1244e0d01d207d75fd848ac7dd231fb7261c0a29af217419ab1e3d119bb79010bee585030235cb1ca5d10d7e8aa0769305fe6b7c7f2ffa8cf1a518dafd862d0e3cbc2486a2c8db3c5a80f67d91c26612ac0bc13c39b94d27f9ba4a06168c33b86890ad358c89e17c67bfdc0f3f605c360fcfb763901853bc8ced8b9dc14f86f580b66d5016d3a28c64baa941c081e9aa901e1cae407d895707cb1c9af84e20d0eb90c7deafa0c755f92457c0ce25caf64c5b3113aa0af2e9aeaf0da004138edc5b0c51b4d3d6c648c786ca45832add4fa8997f93af64d6beeb308c45ff6319686e538554f3fef800ce7fbf179298264918bff0dee474791bb2aeb8775498dbb87c2c079a71b724a02949aaec50b2c30d748bb88c700cb6991c5b27be3771ed33b9a818f652fd4c6ffd9befc66084907c996dc3d5d01c4dab20f4f2b79270ecf6271a98fce8bd8627429dd86fc827ee5510f783bb5c1d0a9860d5fe27a2862304138d3474ffb6e6d64e1db9b6e2389ff36e915205f9a8376cfeb1836e0d6578c79b64c80b797371274a7f3bc35aabcdde504a71db9ced8ce656560bcc6bbcf4d682767ffd8c311f110abcabe2e9721cdd77cbb479084aac055a2702071b3ccc3c90e7212afa586175bf2fc0d0c5decc1889f1bb3ed4efbada3de7db81d3abf05d9a13965361f65f36ca708d00a0e37a32a9ce5a5199bb78c713d3f246e801726609154117f8c782f9f088dbf3022301c3d079c4480e34dfeda7e0d9c85fe27df31e2893cf911f346193b73b795291a50aacf38075bac9de1c1dfc058c0da62be852ee78800bf4f0cf3767f8c430a21388a7895b1e6435b3b581b164fa4bc7940099f0c8a0dcda92071ceb9ddb4ac13e49211eb7e49673cf91f48c2e556d73485ed8f395553ac4c5dc3d0c2f0d0e84f87dc607e1473b730063cd625a384a88b9099a75d013a4772ae7664dd39c8fd2cfa0e243b3b8b7d95819cb55c3c16e1d2b846d25004102e9c714c4363742677873dc0b484ab1424d15ed634acd821f4bd44ccff642d212767c1e95e6289c03bc56817bb7c2d7d0eb4d6702e60b864ec0b466c371ac09f1611172eb6a94c06cb2f7bec23b29ec22ebb131a9fd29df0791005cd0212e981fd57ca67372255df33d32268d9ebc423368dd1f9120fc3bdd6cf9145e32477474b2c9ad9bdd13982533ef43a842cd5df58410a37df0de4c5c0b5a90b4ae24cdd689d6dcfe2b9db5ad0fd4098c527d38ad9373af6244a9d54d38f5f7f1391509e1e2e3cd2de4538fdafeefe1cc9cc965718770e6d130c4c17efb7b20985f03ca04c19b4200a5d1236038deca001d312d30ae108bbd65747623b2d7e32e16b7b26e9db0a736850ba5fa0d119916bf2af9ea3956c5c548a544a8df400e41d353c325b4755f6d9f0e282eec2a249741d1debf9e5cd374a0b39359f793d8f8fab54e08f0fc5723adc9f5f96a9e2c3177eab5539e676b99ee71affc38ef88a6e3652344836070616aceeebed3aa894d8c600287d9afb98d4ff4f908e49acc3a24f11d39939ea8901f209c1e589ea3e2b984e12fec7adc808e23fb99979af959e959c524777e002b59e3e1705ecf2b0a79f73201b5777dbdd8f4fd982b03f33220220f57e1f407669ebefb66f343a2eb72afd0d2bffe01ca3270603506e641d0451cd4596257a74ec9f5f464918322a9f47e68ffb8761cf365a01deaf53978bbc8be0d07c3b52c765a41bf3861fbf802e5fa4d263e2fa53364da7918426cea8dac1564beb01694d1f456b4c9a05d0616221b8f37251742c1c8d758b1e8f5c59967547656e986c320483c43662898751babb36c286109c7ade66f371324ef0b5132b8ed9e1ab22ba2d131d8286f14fad0f095a8715a71c4ba2feced3a92207a808f5e727804f844a0b6ebf7b65e651683fcfcc10886faa08f9ca56f5dd3be61148fc27642415e6547144f90ae91565c3483d57cb0d5a927fe5538eb7370baa04d381116087d5ceaf0e335e83aca519191ee6355773501862863d99b676007a1d432e624829c6d9adedeca9594254a8f839da211586a05d5972d165200bf2238d0cdc154f1d6947548911a4d2dbffec5cb38016ba17b7218711f2f8ef72d59ed3218efdc2f090c5c8986f4b57707243886561186ec2f97e8c595b6d4af44c0f66519ec2050d26717e793eb38908fb2f6e3ca9584246674432895be5ff63d0cc68bd35e2209d8083f4db98c694524be06cb7b2ca327f5e077744716d9b8687e55ce24b3ba5ce6b9df63c8571bda65b7b7bb526e1d11d5d76ce5544a44ee49375e11394a05b105de1e4e58929fdafbfff0d9fe441514a9acf854b8c44cc89e19fc409aa61aff11460a91cc44f6bf1dfa082cad3a99f0b737ea3ae4dc3eccd5968cb5820c9ce916dd92a54800f8f30603ea5a59131610fc78ed2801da642d2e1ea378dd63c789d66a312e7b0f86b0cfeb2cb2c700c30a6853514d3d8eb27831b230e5ed47584d9583d9b62f1b96813acf445fe2e8c29c2e0ad68ef9e729bb5e49f47da22a6be943d7e5b1bb8a1b6533666aeae381ecd8c6ee5b7c88b1d62dca086ebfa1d89c47d993eb9e6a54f6c1f2350eac86208460397e3ca42832a5acb10e4bb2e0e0eb533d8ab26ccafcdf7a156e9478eab3ebe073287aa73b200803d02a501f0fc8c4079798f7b52197b06d87bf5209c4a57266bacd8b05bd8fa5c3ca07502292ebe330c6d54ec98591ecbcdd98eaedd542187471d5003a7eba7f88df977a988a1fb39de8fcd7a025db929d32eb1a88b1431422e3b66c2f4bb85dcbb26818791dcf56576f62bf02779288f5838b53264e59139c32fe6987666782f66b703864c3de0840665343358225c87ccac2431f4843bf8d4f1cab3d90cb83f789dca47746066b5e09c9e8b4598f7b4e05edcc921fb483d5ee186f12c80d8adb886c3737ac3873c26d3b37ec97d5de952b8fd3a6c00d7a17baf1040bcef84c241adf67279b63508d6d9507c398ddaaadd0e995a1c467cc1aea254f48239eab233b0bd4ae650a03bd488b100e9373b198b6c60d1bb494ec2a7cdbc18c73818ded794d4b2667e6af4b6ffa1a459227d4ca82d1d2cc4f3512d9103d4996df5f49543a33670ea1909ffe2d5038c9919994e43f9752cd07a830887555e12cea69cadcd491fc53d3b7f41a000205c4c2ea9359caa24117be33e3ff0367b778c7c35a260f80cbedcd685925e33d8f36cb5c269ff0749ce59f5dcec078508d2811c0f29e135677c52be42cd56ae2c1f43d88bf8afb7337fd8b5c1767d7f7f1ea8ebebcaa6da966a9f6e63d5a402047ea214ebd5ac6b41efe386f42dc16bf88747a494e0f475c75c0ee185b109b94a83426657a87f35f3f490f5dff7f98442401aac29809f6c56638cc305010f1cfd70bd23e04df8aa5f6b83051e2caaca30899bf6aa07ca02485aff451dcc6bd67792be16a437f2388fad147ec47e8c9ac9e427737d386d9cd84b3ac3a895063c3a91392bed95fc3cfab51c28c701327a8f874ea9a9c640f90b66296cbafc8216c0a03c49ad6519b279bc1f9451dafe78c08c35468ad5e601bc5d403a263aad452313d0ab37f37bff96da130e6ddcafbe3780df04be505376b0c260552fbb7bd50f1b303a45d258a2ede29094007108cd7110cac9b5371f214ed54cde1b386ca97f9697c17b33f36c0cfb4020a837058a9a7ad52a44429cafe19e2dd41b0a9305af40b9a43c618d28b7bbe03aea6ab2c46d138ffaa5c046498d685507abc084881f87d9026109ef7c25886ec4f053f2961e29f185d198c4bc1dda2f0a3144f05e3909f6e9e00cb0c74ca45bd6e6997b7c27248242e8e5e5f8baf9634977ab47dd16f362022e4a46f6e6f481a79557376b30bcdb23ee2146b987e105bc64ab99e38b78ce79b33532b1cac6bf683f62ca4e3f97e855188509fe64d03a8a8918da901d19aea2832302f33e81509167b74e71ee9109c5408ba6b27080e31cfe40a1b33ad09a78530259c8a3913cf36db700c9f7cdb1dcd8032b68781b1e1fe5a0712919bd3f640f41e14342bac88b0e1b6ed820fc02dd73ec3c001ae9d1d5b2f66aee7df730a7843359d66e4b93fab0128fabe8205cc8ce2d96f4a50a6a32f83118ded3a0fc0be3458779b9661e167e293ff3a6c873c4dd07e475d6b4e6d29a9455f704b04edd6b7df4169c0151232802a0f8e580ae8bdae47288135b95e187f042b60f699ad9fb582bd9fd5bef3341712f9a2d21af9b92cda69d6a63b786b8a47434dbedd0bb61e6db96150ae623e90f65da7d177f68718d477b0cca1bcd349b3931e0fdbe9c9d1acd999b894efef915a39484449d2beaf0cfdb3e7954f9266df3891327ccf75b4cc8a1679cb9ba2e20cb313a797a444ea3fb553edcfdf7efffddd17a24076f41e1b5951487bf7fead41941b54ef3ca49e553ad9082e4eec5ab6091ebf1a74ad0ffebc2ea2df84fa262a4a26f5d0bef07d7ba1a98de90c3a63be78eb7185a92ab16c074e7459e7aa400fe89ffae7aa142f276c64f0634394edad2af9a4e89ff08d063f17126e58f09a01ef061e9da832ff82de5b4b9d56c2dcb0850399f24eafd580d3a43f386705c3ab4afd98f6440aa3191b94242539af3c6093f12063400a57239cc15d928b7eaab4a826edd63a2542692f97044052768e96daed464015f653244841f6890f256a01760566340977273137882fec2c69a40f2ba97f656bb6621e7a6cfc020fa506dc92435ee4bab28a1f640826d491e55b81446a9f8f33d897155c62bee352d5aaa3e1d6952892ff44be02a654f023898c574365b63f186ed4cd8923ee1244ca6142d4f22f5c6e7d687a25c53dd4af6805415ef7309c55ee151a05dabd5c20e7aa705df4c78e532a5c68f389ff555741b252a18473f1289f33445b97107914244bdb2f3ab9d2c0deb34d08edb42fca875748e9ce7a2816ec679ce8c2148b4958ead66e0709657e308844ca234be268ea165199850d59b478621bb5b1f5068c1b433c9bff795cb011889e81080fcabc34c40924f42bdaadf20584d3efac1673d2a19d2432f82ffdc43e7ba57dfb55a28e2995616c9f13d4befae5d00c472321437c9db1fec3781e9791ccf521a8756d99ec492a50216a9ad91f4381b4b7891321dcb82815e196164bac0ec628037ab69b883ec1f0b27ef164ab1d57ba3b44e0b4e3c59f88ae88fec77bd28171b83ea4aaa999d4066effd12249f2909e90d8"}}}}}, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x12b6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)={0x0, 0x6, 0x7, {0x7, 0x23, "3d91419da5"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000200)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}}, 0x0, 0x0, 0x0) 12m45.259744013s ago: executing program 3 (id=9): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1c8, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) statx(r5, &(0x7f0000000300)='./file0\x00', 0x6000, 0x20, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet(0x2, 0x3, 0x8d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x4, &(0x7f00000006c0)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r7, @ANYRES8=r7, @ANYRESHEX=r6, @ANYRES16=r7, @ANYRESDEC, @ANYBLOB="98d6c8837ccbd4ecf2bc4874d8360a53f035187c0add6b7e55d81ccb053c4256c978f97cf2ef42cf4d42b1dbfeb1f5975a7807399afbfe1b98c0512a38c3510ca2f21effc0ac6dddb5f670d8c3b35f48c4bf8cff6e3a7da4029a1d85df57517a19e3a4bec7e8e16ec30c988447aa10138958cc9f488033fd2b4c0573877cd23826c0833374571f9ebb3f9e"], &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendto$inet6(r6, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x385200280, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a310000"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 12m29.572878053s ago: executing program 32 (id=9): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1c8, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) statx(r5, &(0x7f0000000300)='./file0\x00', 0x6000, 0x20, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet(0x2, 0x3, 0x8d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x4, &(0x7f00000006c0)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r7, @ANYRES8=r7, @ANYRESHEX=r6, @ANYRES16=r7, @ANYRESDEC, @ANYBLOB="98d6c8837ccbd4ecf2bc4874d8360a53f035187c0add6b7e55d81ccb053c4256c978f97cf2ef42cf4d42b1dbfeb1f5975a7807399afbfe1b98c0512a38c3510ca2f21effc0ac6dddb5f670d8c3b35f48c4bf8cff6e3a7da4029a1d85df57517a19e3a4bec7e8e16ec30c988447aa10138958cc9f488033fd2b4c0573877cd23826c0833374571f9ebb3f9e"], &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendto$inet6(r6, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x385200280, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a310000"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 11m3.547763552s ago: executing program 1 (id=92): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x30, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xf}]}, 0x30}, 0x1, 0x0, 0x0, 0x34000047}, 0x240000d0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x80805, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) io_getevents(0x0, 0x6, 0x6, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r6 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r7 = fanotify_init(0xf00, 0x1) fanotify_mark(r7, 0x105, 0x40009975, r6, 0x0) fallocate(r5, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0) 10m55.874950167s ago: executing program 1 (id=105): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_LABELS={0x4}]}, 0x68}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x80, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)={0x7, 0x0, @auto=[0x2f, 0x35, 0x39, 0x13]}, 0xc, 0xfffffffffffffffa) r4 = request_key(&(0x7f0000000480)='encrypted\x00', &(0x7f0000001900)={'syz', 0x2}, &(0x7f0000001940)='./binderfs/binder0\x00', 0x0) keyctl$instantiate_iov(0x14, r3, &(0x7f0000001880)=[{0x0}, {&(0x7f0000000880)="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", 0xffe}, {&(0x7f0000000140)="7294ac1ab2826e6517bdfee20f446733b428d7c2600b474aeb464a2a146d54f8367368eddadd6d22c4637bac90f61b649e91c606a0940c8a", 0x38}, {&(0x7f0000000600)="2173717dbfd936d1c82d23747a63a41c3255be7ee0157e8212f083b2809b13ea107a2e12030b7aad8d0739ea14d22ec9e1b796896e321fefcbf9f811a575cb82738b24d42e32755859c3f3e53337ac7c88014d673ad912e91a07fe49a2c41dc8868d78c588a99c5d4af4435da8e11a6ac2d761fe64712a18f06d5877b3ebc71b7206d35c7c84d15d9f8256c2dc9063348ab715d544b08ae686ed07bed207abbccffce97e8bca1f2e6108553aa40f", 0xae}, {&(0x7f00000006c0)="ecffe148ae4307db342414d631764c07d3ced74a87025bfca02842e27f926a6abe499a36de7badee1f0b78bef97db93ea299667374c6cfabc66ce12e3ce17eed446f9e416047c5256e3e79195c103543cd6581304391d54a2bfeb2def680b9c5da70628dcb03", 0x66}, {&(0x7f0000000340)="558a2331d9b68031908b7f0b619a61", 0xf}, {&(0x7f00000007c0)}], 0x7, r4) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xcb7c81791c937a57}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x8044) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f0000000040)={'hsr0\x00', @remote}) syz_open_procfs(0x0, &(0x7f00000001c0)='net/mcfilter\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1c4) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f0000002140)={0x2020}, 0x2020) 10m51.653050649s ago: executing program 1 (id=109): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r7, 0x1, 0x42, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r5, 0x0, 0x23, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaab6aaaaaaffff84b8ffff08004520001c000000400002907c00e00003003100907800000000443285c3bbf6b96eb1"], 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(0x0, 0x2, 0x131a02) open(&(0x7f0000000000)='./bus\x00', 0x142b42, 0x84) syz_io_uring_complete(0x0) 10m50.194431457s ago: executing program 1 (id=103): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kcmp(r1, r1, 0x2, r3, r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080001000900010073797a30000000000800034000000001140000001100010000000000000000000000000a910d0bf52477891ba17560a73b4b8fe004abaf66620a2c511bfb6e53a0e9cf8cb0878d81afa2911ba80a2fe19ad53c26de9ed3651ec97b36c8620ec5d9f1cd4e1f3a5da3950573e1f96ae90e5dd3b6c494df93ec81811f070348fcdaf2426fc0ce0d94"], 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_PEC(r5, 0x708, 0xffffffff) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000100)={0x1, 0xfd, 0x1, &(0x7f0000000000)={0xb, "e89bc5d748e8290e3619f6201f98cad6d3bf3734cdb92f5963a07b61dedbd29410"}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) close(0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r7, 0x29, 0x50, 0x0, &(0x7f0000001840)=0x1c) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000}}, 0x120) add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 10m38.085595318s ago: executing program 1 (id=114): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) syz_io_uring_complete(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x931e, 0x7780, 0x8000, 0xd6}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaa1686dd60f53a0400403a00fe880000000000000000000000000001ff24adfd474d02000000000000000000000000000102009078000005026050835900000000fc010000000000000000000000000000fe8000000000000000000000000000bb3a00000000000000000100"], 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r9, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014}) 10m33.929440115s ago: executing program 1 (id=126): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x38}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000200)=@req={0xc, 0x0, 0x4, 0x8a6}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(0xffffffffffffffff, &(0x7f0000000840), 0x1000000000000059) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x18, 0x10, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x50, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x80, '\x00', 0x7cb, 0x5, 0xfffffffd, 0x9}}}}, @TCA_RATE={0x6, 0x5, {0xff, 0x51}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40098}, 0x4048840) socket$inet(0x2, 0x80001, 0x84) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x12ba00, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0xd90, 0x0, 0x7}]}) socket(0x10, 0x3, 0x0) 10m18.558426398s ago: executing program 33 (id=126): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x38}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000200)=@req={0xc, 0x0, 0x4, 0x8a6}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(0xffffffffffffffff, &(0x7f0000000840), 0x1000000000000059) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x18, 0x10, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x50, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x80, '\x00', 0x7cb, 0x5, 0xfffffffd, 0x9}}}}, @TCA_RATE={0x6, 0x5, {0xff, 0x51}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40098}, 0x4048840) socket$inet(0x2, 0x80001, 0x84) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x12ba00, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0xd90, 0x0, 0x7}]}) socket(0x10, 0x3, 0x0) 7m31.829820707s ago: executing program 4 (id=536): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f00000003c0)={0x0, 0x6}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x7f, 0x4, {0x0}, {0xee00}, 0x8, 0x1ff}) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) socket(0xa, 0x1, 0x84) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x358, 0xfffffe7fffffffff) r5 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) r6 = syz_pidfd_open(0x0, 0x0) setns(r6, 0x24020000) umount2(0x0, 0x2) 7m30.706341036s ago: executing program 4 (id=539): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d800000018008105e00212ba0d8105040a020200020f100b067c55a1bc000900b80006990200000015000500fc038178a80015000338004002000c0901ac040000d67f6f947a7100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) 7m30.538943221s ago: executing program 4 (id=541): r0 = syz_mount_image$btrfs(&(0x7f00000000c0), &(0x7f00000015c0)='./file0\x00', 0x2000000, &(0x7f0000001400), 0x0, 0x559e, &(0x7f0000001600)="$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") ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000006bc0)={{r0}, 0x0, 0x4, @inherit={0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000ecbb"]}, @name="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"}) 7m27.768332034s ago: executing program 4 (id=550): syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000040)='./file0\x00', 0x1008408, &(0x7f0000000ac0)=ANY=[@ANYBLOB='nojoliet,dmode=0x000000007fffffff,dmode=0x0000000000000009,check=relaxed,overriderockperm,utf8,mode=0x0000000000000000,nojoliet,hide,nocompress,utf8,norock,overriderockperm,mode=0xffffffffffffffff,cruft,map=off,iocharset=macinuit,fund=BPRM_CHECK,\x00', @ANYRESDEC], 0xff, 0x5ac, &(0x7f0000002940)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 7m25.819482076s ago: executing program 4 (id=555): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = add_key$fscrypt_v1(&(0x7f0000001000), &(0x7f0000000180)={'fscrypt:', @auto=[0x36, 0x33, 0x35, 0x38, 0x33, 0x37, 0x66, 0x34, 0x66, 0x30, 0x38, 0x34, 0x64, 0x62, 0x63, 0x61]}, &(0x7f0000001080)={0x0, "ddbccf095fdf7a3f745794103017e211332fbf001eb127ffbed6ccc50daa5600000000000000000000000000000000009100", 0x33}, 0x48, 0xfffffffffffffffe) request_key(&(0x7f00000001c0)='asymmetric\x00', 0x0, 0x0, r6) keyctl$setperm(0x5, r6, 0x1) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) fanotify_mark(0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x3, r1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r8}, &(0x7f00000007c0), &(0x7f0000000640)=r7}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r8}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7m22.149886129s ago: executing program 4 (id=566): r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x1, 0x11}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x0) 7m20.830311785s ago: executing program 34 (id=566): r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x1, 0x11}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x0) 5m14.266755401s ago: executing program 5 (id=1027): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f00000003c0)={0x0, 0x6}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x7f, 0x4, {}, {0xee00}, 0x8, 0x1ff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) socket(0xa, 0x1, 0x84) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x358, 0xfffffe7fffffffff) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r5 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) r6 = syz_pidfd_open(0x0, 0x0) setns(r6, 0x24020000) umount2(0x0, 0x2) 5m11.193404601s ago: executing program 5 (id=1035): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf250f0000001c0007800c00040040000000000000400c0003"], 0x30}, 0x1, 0x0, 0x0, 0x20008014}, 0x44000) 5m11.000190908s ago: executing program 5 (id=1036): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x74}}, 0x0) 5m10.830005603s ago: executing program 5 (id=1038): r0 = syz_clone(0x21200600, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$ARCH_SET_GS(0x1e, r0, 0x0, 0x1001) 5m10.571263746s ago: executing program 5 (id=1039): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) syz_read_part_table(0x1062, &(0x7f0000000000)="$eJzsz7FNBDEUBNC503rtDUgIth6agDYgJYJ6KICAapCgCqSVkQ01wAXvBSP90ciSw78qSbYl9/t1r+lr8vg6u9PbyBy997n7vBq5j6hrS2pOs/96LslNknUb51Pej9+Xl6TlfG4lbd41pedhrO7qz+Ijty9//2MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuDzfAQAA//83nRHZ") 5m9.791718384s ago: executing program 5 (id=1043): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f00000003c0)={0x0, 0x6}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x7f, 0x4, {}, {0xee00}, 0x8, 0x1ff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) socket(0xa, 0x1, 0x84) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x358, 0xfffffe7fffffffff) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r5 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) r6 = syz_pidfd_open(0x0, 0x0) setns(r6, 0x24020000) umount2(0x0, 0x2) 4m54.700658232s ago: executing program 35 (id=1043): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f00000003c0)={0x0, 0x6}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x7f, 0x4, {}, {0xee00}, 0x8, 0x1ff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) socket(0xa, 0x1, 0x84) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x358, 0xfffffe7fffffffff) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r5 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) r6 = syz_pidfd_open(0x0, 0x0) setns(r6, 0x24020000) umount2(0x0, 0x2) 4m47.227330289s ago: executing program 6 (id=1114): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f0000005880)={[{@barrier}, {@autodefrag}, {@noacl}, {@compress_algo={'compress', 0x3d, 'no'}}, {@max_inline={'max_inline', 0x3d, [0x30, 0x30, 0x32, 0x74, 0x74, 0x0]}}, {@noautodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x34, 0x6d]}}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x98) open_by_handle_at(r0, &(0x7f0000000000)=@xfs={0x1c, 0x81, {0xb92a, 0x101, 0x3e, 0x9}}, 0x141000) 4m45.251025824s ago: executing program 6 (id=1120): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x292, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x4, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xb, {[@local=@item_4={0x3, 0x2, 0x3, "5f65d870"}, @main=@item_012={0x2, 0x0, 0x8, "a449"}, @global=@item_012={0x2, 0x1, 0x4, "89bd"}]}}, 0x0}, 0x0) 4m42.317086181s ago: executing program 6 (id=1130): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='pids.current\x00', 0x300, 0x0) read$FUSE(r1, &(0x7f000001aa80)={0x2020}, 0x2020) 4m41.855747742s ago: executing program 6 (id=1131): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0032006c00ae1ecebf96fccb8a69f4a8ea113bda4a1e87a726a9dcf01d4bf4543b835eb2b9e6066dc6b060d90b6ca4385a4244aa53e0a0acaebd0c1dd5d380385e85b29008b29f2fb4a93ebe5ace1c105e684d1fd61659e8decea319f675e039904905a8130e2f3c8d5c7a22b4487a331c727612ff1ddd6aabd0e4ab29212632a15e835fac77a7c827"], 0x1, 0x198, &(0x7f00000006c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 4m41.219429168s ago: executing program 6 (id=1136): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000580)='q', 0x1}], 0x1) 4m40.137829953s ago: executing program 6 (id=1137): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000f90010000300"/20, @ANYRES32=0x0, @ANYBLOB="00a3000000000000280012"], 0x50}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 4m39.445079884s ago: executing program 36 (id=1137): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000f90010000300"/20, @ANYRES32=0x0, @ANYBLOB="00a3000000000000280012"], 0x50}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 6.551984854s ago: executing program 7 (id=1992): socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 6.319963414s ago: executing program 7 (id=1993): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x9e, &(0x7f00000000c0)={[{@orlov}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLYgv2xF/MEPtYrGxh8tLagcvGg04WJiogc81lIIslBDayKESDUGj4a/QD2a+Bd40otRTxqvejcmxHARPZgxszsDS7tbd7tbtrCfTzLtezNv973vzLzdN/N2AhhYY/mfJGJ7RPwaESP17M0Fxur/rl29MPv31QuzSWTZG38mtXJ/Xb0wWxYtX7etyIynEenHSextUu/CufOnZqrVubNFfnLx9LuTC+fOP3vy9MyJuRNzZ6YPHz50cOqF56ef60mcO/K27vlgft/uI29dfm326OW3f/gqb+/2YntjHHWjXdc5FmM378sGT3T97hvLjoZ0MtTHhtCRSkTkh2u41v9HohI3Dt5IvPpRXxsHrKssy7LNK9ZWysRSBtzBkuh3C4D+KL/o8+vfcrmFw4++u/JS/QIoj/tasdS3DEValBledn3bS2MRcXTpn8/yJZrehwAA6K1v8vHPM83Gf2nc31Du7mJuaDQi7omInRFxb0Tsioj7ImplH4iIBzusf2xZfuX45+ctawqsTfn478Vibuvm8V85+ovRSpHbUYt/ODl+sjp3oNgn4zG8Oc9PrVLHt6/88mmrbY3jv3zJ6y/HgkU7/hhadoPu2MziTDcxN7ryYcSeoWbxJ9fnrvL/uyNizxreP99nJ5/6cl+r7f8f/yp6MM+UfRHxZP34L8Wy+EvJ6vOTk3dFde7AZHlWrPTjT5deb1V/V/H3QH78tzY9/6/HP5o0ztcudF7Hpd8+aXlNs9bzf1PyZi29qVj3/szi4tmpiE3J0sr10zdeW+bL8nn84/ub9/+dEf9+Xrxub0TkJ/FDEfFwRDxStP3RiHgsIvavEv/3Lz/+ztrjX195/Mc6Ov6dJyqnvvu6Vf3tHf9DtdR4saadz792G9jNvgMAAIDbRVr7DXySTlxPp+nERP03/Ltia1qdX1h8+vj8e2eO1X8rPxrDaXmna6ThfuhUcW+4zE8vyx+s3TfOsizbUstPzM5X12tOHWjPthb9P/d7pd+tA9ZdR/NorZ5oA25LnteEwaX/w+DS/2Fw6f8wuJr1/4sR1/rQFOAW8/0Pg0v/h8Gl/8Pg0v9hIHXzXP9qiZ1H1uud77REZWM0o+NEpBuiGWtLpBujGfXE5ohot/DFuFUN6/cnEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQG/8FwAA//8Hl+jb") r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="510003000000", 0x6) 5.310413193s ago: executing program 0 (id=1998): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newtfilter={0x88c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0xe, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x860, 0x2, [@TCA_FW_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x9, 0x8000, 0x7, 0xe7ac, 0x8, 0x1, 0x7, 0x7, 0x4, 0xff, 0x8d3c, 0x8, 0x7, 0x1, 0x1, 0x4, 0x8, 0x9c, 0x6, 0x80, 0x7, 0x3, 0x44, 0x1000, 0x8, 0x80000000, 0x100, 0x8, 0x7, 0x8cc, 0xe3ad, 0x7, 0x7, 0x1b, 0x7f, 0x0, 0x2, 0x16, 0x8372, 0x4, 0x7, 0x9, 0x8, 0x7fffffff, 0x3, 0xc64, 0x4, 0x3, 0x7fff, 0x2f, 0xe, 0x7480, 0x7, 0x1, 0x2, 0x5, 0x1a700000, 0x2, 0x3ff, 0x5, 0x40, 0x401, 0x6, 0x1, 0x2, 0x0, 0x0, 0x5, 0x2, 0x5, 0x5a90, 0x9, 0x400, 0x8, 0x8000, 0x3, 0x80000000, 0x8000, 0x200, 0xfffffff9, 0x7, 0x6, 0x7, 0x9, 0xb0, 0x3f1, 0x80000000, 0x7, 0x8, 0xfffffff3, 0x8, 0x40, 0xfffffff6, 0x4, 0xfffffffa, 0xffffff0c, 0x1000, 0xb1, 0xfff, 0xffff8001, 0xffffffc0, 0x5, 0x8001, 0x3, 0x340, 0x9, 0x6, 0x7, 0x7, 0x3ff, 0xfffffeff, 0x3, 0x4, 0x9, 0xfffffffd, 0x5, 0x0, 0x1, 0xfffffffe, 0xff, 0x200, 0x4, 0x20000000, 0x8, 0x0, 0x5, 0xffffffff, 0x8001, 0x2, 0x6, 0x8, 0xffff, 0x8, 0x1, 0x40, 0x2, 0xffffffff, 0xffff8000, 0x1, 0x69b, 0xfffffffa, 0x2, 0x63f4, 0xb534, 0x899, 0x9, 0x7fff, 0x400, 0x4, 0x9, 0x0, 0xfffffff8, 0x0, 0x0, 0x101, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0xd, 0xfffffffb, 0x40, 0x6, 0x3ff, 0x4, 0x4c08, 0x1, 0x80, 0x1000, 0x5, 0x3, 0x6, 0x9, 0x3, 0x3, 0x10000, 0x7fff, 0x1d3c, 0x0, 0x2ee3, 0x9a, 0x8, 0x10000, 0xf3a5, 0x0, 0x2, 0x2, 0x2, 0x80000000, 0x4, 0x0, 0xffffffff, 0x100, 0x8, 0x3, 0x6, 0xfffffffd, 0x3, 0xd, 0x5, 0x6, 0x10000, 0x7, 0x1, 0x7, 0x7fff, 0x5, 0x77a6, 0x0, 0x7, 0x400, 0x10000, 0x7f, 0x0, 0x0, 0x6, 0x5, 0x4, 0x80, 0x47, 0xaa, 0xe, 0x8, 0x7ff, 0x800, 0x7, 0x1893, 0x4, 0x1, 0x1, 0x8, 0x80000001, 0x0, 0x10, 0x80000001, 0x1, 0x8001, 0x9b6f, 0x2, 0x2f, 0x61, 0x8, 0x5, 0x8001, 0x401, 0x4, 0x31268a4e, 0x7fffffff, 0x1, 0x4, 0x2, 0x8, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x60e9, 0x8, 0xa, 0xf3a, 0x0, {0xb, 0x0, 0x1, 0x7, 0x7, 0x1}, {0x6, 0x0, 0xe, 0xfffd, 0x9, 0x2}, 0x7fffffff, 0x2, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0x8000, 0x67, 0x9, 0x8, 0x3ff, 0x10, 0x840, 0x7fff, 0x68, 0x1, 0x2, 0xdb3, 0x5, 0x40, 0x6, 0x400, 0xd, 0x2537, 0x4, 0x4, 0x8, 0x100, 0x5, 0x8, 0x0, 0xffff, 0x7, 0x9, 0x7, 0xb, 0x3, 0x0, 0x400, 0x2, 0x10001, 0x7ff, 0xfffffffe, 0xffff8930, 0x2, 0x5, 0xffffffff, 0x8, 0x7, 0xa4, 0x401, 0x2, 0x100, 0x5, 0x3, 0x10000, 0x5, 0x0, 0x2, 0xa, 0x1, 0x8001, 0x4, 0x7, 0x8001, 0xc, 0x8, 0x10001, 0xa63, 0x3, 0x6, 0x4, 0x80, 0x2, 0x6, 0x7, 0x1, 0x8000, 0x7, 0x9, 0x9, 0xd7dd, 0xe2b, 0xe9ee, 0xfffffffd, 0x3, 0xffff, 0x3, 0x6, 0x3, 0x62, 0xa9, 0x20000, 0x0, 0x80, 0xd1c, 0xfffffff8, 0x10, 0x53e, 0xb2, 0x4, 0x8e, 0xd, 0x5, 0x1, 0x101, 0x8, 0x3, 0xfffffe00, 0x3ff, 0x0, 0x8, 0x1, 0x10, 0x3, 0xfff, 0x5, 0x6, 0xfffffff7, 0xa, 0x0, 0x10001, 0x81, 0xa, 0x9f6, 0x1ff, 0x0, 0x10, 0x40, 0x8, 0x7, 0x8, 0x800, 0x8, 0x10001, 0x4, 0x7, 0x3, 0x5, 0x80, 0x2, 0x1000, 0x7, 0x800, 0x81, 0x80000000, 0xa, 0xec32, 0x1, 0x0, 0x4f, 0x2, 0x7, 0x200, 0xd4b0, 0x9, 0x0, 0x2, 0x5, 0x9, 0x6, 0x1, 0x5, 0x7ff, 0x9, 0xfffffffb, 0x8, 0x1, 0xc, 0x1, 0x2, 0x1, 0xfffffff9, 0x8, 0x3, 0x4aec5ca0, 0x0, 0x2, 0x5, 0x26e8, 0xcf5b, 0xffff, 0x3, 0x2800, 0xffffffff, 0x9, 0x1, 0xfffffffe, 0x10001, 0x4, 0x67, 0x6, 0x4e, 0x0, 0xf40, 0x3, 0x10001, 0xffffffff, 0x0, 0x2, 0xfffff504, 0x9, 0xfffffff9, 0x4, 0x2, 0x80, 0x80000001, 0x7, 0x200, 0x7, 0x5, 0x4, 0x10001, 0x1ff, 0x2, 0x8e9d, 0x191, 0x5, 0x80000000, 0x5, 0x7, 0x401, 0x1, 0x7, 0x8, 0x5, 0x7, 0x8, 0x9, 0x4, 0x3, 0x5, 0x8001, 0x3, 0x9, 0x4, 0x5, 0x1, 0x2342, 0x6cf, 0x4, 0x3, 0x6, 0x9, 0x5, 0x9, 0x3, 0xa7, 0x0, 0x6, 0x30, 0x81, 0x1, 0xfff, 0x1, 0xb, 0x200, 0x4, 0x5, 0x759, 0xd, 0x4]}]}, @TCA_FW_INDEV={0x14, 0x3, 'vlan0\x00'}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 5.141128878s ago: executing program 7 (id=2000): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pipe2(&(0x7f0000000580), 0x0) 4.872666992s ago: executing program 0 (id=2002): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f00000003c0)={0x0, 0x6}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x7f, 0x4, {0x0}, {0xee00}, 0x8, 0x1ff}) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) socket(0xa, 0x1, 0x84) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) syz_open_procfs(0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x358, 0xfffffe7fffffffff) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r6 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r6, 0x0, 0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) r7 = syz_pidfd_open(0x0, 0x0) setns(r7, 0x24020000) umount2(0x0, 0x2) 3.950727363s ago: executing program 0 (id=2003): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000d80)={0x2020}, 0x2020) pread64(r0, &(0x7f0000000040)=""/241, 0xf1, 0x7ff) read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) 3.765627389s ago: executing program 0 (id=2005): syz_mount_image$exfat(&(0x7f0000000140), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x3f, 0x151a, &(0x7f0000001a40)="$eJzs3AvYTdX2MPAx5pxLL0k7yX2OORY7uUySJJeERJIkSZJbQpIkSUi85JaEJOSe5B6SW0ju91vuSXIkSRISEub36HQ+p9M5X+f8T9/f/3/e8Xue9Zhjrz3GHst4n73XWs+732/aDahUp3KFWswM/xb88z+pAJACAL0B4GoAiACgeObimQEHQ3qNqf/ei4g/1oOTL3cH4nKS+adtMv+0Teaftsn80zaZf9om80/bZP5pm8xfiLRs85Qc18iWdrf/vvv/IPf//8eRz///IAcLj/xibeHr2v8LKTL/tE3mn7bJ/NM2mX+aov72AZl/WnP+V5HM/z9cBFD+/7Fb5p+2yfyFSMv+S/eNS1z++9ay/THb5f75E0IIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgiRNpwJlxgA+Mv6cvclhBBCCCGEEEKIP0644nJ3IIQQQgghhBBCiP//EBRoMBBBOrgCUiA9ZIArISNcBZngakjANZAZroUscB1khWyQHXJATsgFucECgQOGGPJAXkjC9ZAPboD8UAAKQiHwUBiKwI1QFG6CYnAzFIdboATcCiWhFJSGMnAblIXboRyUhwpwB1SEO6ESVIa7oArcDVXhHqgG90J1uA9qwP1QEx6AWvAg1IaHoA48DHXhEagH9aEBNIRG/6X8F6ATvAidoQukQlfoBi9Bd+gBPaEX9IaXoQ+8An3hVegH/WEAvAYD4XUYBG/AYBgCQ+FNGAbDYQSMhFEwGsbAWzAW3oZx8A6MhwkwESbBZJgCU+FdmAbTYQa8BzPhfZgFs2EOzIV58AHMhwWwED6ERfARLIYlsBSWwXJYASthFayGNbAW1sF62AAbYRNsho9hC2yFbbAddsBO2AWfwG74FPbAZ7AXPv8X80//TX57BARUqNCgwXSYDlMwBTNgBsyIGTETZsIEJjAzZsYsmAWzYlbMjtkxJ+bE3JgbCQkZGfNgHkxiEvNhPsyP+bEgFkSPHotgESyKN2ExLIbFsTiWwBJYEkthKSyDZbAslsVyWA4rYAWsiBWxElbCu/AuvBurYlWshtWwOlbHGlgDa2JNrIW1sDbWxjpYB+tiXayH9bABNsBG2AgbY2Nsgk2wGTbD5tgcW2ALbIktsRW2wtbYGttgG2yLbbEdtsP22AE74Av4Ar6IL2IXrKi6Yjfsht2xO/bEXtgLX8Y++Aq+gq9iP+yPA/A1fA1fx0F4CgfjEByKQ7GsGo4jcCSyGo1jcAyOxbE4DsfheJyAE3ASTsYpOBWn4jScjtPxPZyJ7+P7OBtn41ych/NwPi7AhbgQF+FpXIxLcCkuw+W4ApfjKlyNq3AtrsO1uAE34CbchB/jx7gVt+J23I47cSd+gp/gp/gp9sO9uBf34T7cj/vxAB7Ag3gQD+EhPIyH8QgewaN4FI/hcTyBx/EknsRTeBrP4Bk8i2fxHD6X86vaOwus6QfqIqOMSqfSqRSVojKoDCqjyqgyqUwqoRIqs8qssqgsKqvKqrKr7Cqnyqlyq9yKFClWscqj8qikSqp8Kp/Kr/Krgqqg8sqrIqqIKqqKqmKqmCqublEl1K2qpCqlmvoyqowqq5r5cqq8qqAqqIrqTlVJVVaVVRVVRVVVVVU1VU1VV9VVDXW/qqm6Yk98UF2cTB3VH+uqAVhP1VcNVEP1Oj6qGqtB2EQ1Vc3U42oIDsYWqrFvqZ5SrdQIbK2eUSPxWdVWjcZ26nnVXnVQHdULqpNq4jun++UtUE3C7qqH6ql6qWl4p7o4sUrqVdVP9VcD1GtqLr6uBqk31GA1RA1Vb6phargaoUaqUWq0GqPeUmPV22qcekeNVxPURDVJTVZT1FT1rpqmpqsZ6j01U72vZqnZao6aq+apD9R8tUAtVB+qReojtVgtUUvVMrVcrVAr1Sq1Wq1Ra9U6tV5tUBvVJrVZfay2qK1qm9qudqidapf6RO1Wn6o96jO1V32u9qk/qf3qC3VAfakOqq/UIfW1Oqy+UUfUt+qo+k4dU8fVCfW9Oql+UKfUaXVG/ajOqp/UOXVeXVBBgUattNZGRzqdvkKn6PQ6g75SZ9RX6Uz6ap3Q1+jM+lqdRV+ns+psOrvOoXPqXDq3tpq006xjnUfn1Ul9vc6nb9D5dQFdUBfSXhfWRfSNuqi+SRfTN+vi+hZdQt+qS+pSurQuo2/TZfXtupwuryvoO3RFfaeupCvru3QVfbeuqu/R1fS9urq+T9fQ9+ua+gFdSz+oa+uHdB39sK6rH9H1dH3dQDfUjfSjurF+TDfRTXUz/bhurp/QLfSTuqV+SrfST+vW+hndRj+r2+rndDv9vG6vO+iO+ry+oIPurLvoVN1Vd9Mv6e66h+6pe+ne+mXdR7+i++pXdT/dXw/Qr+mB+nU9SL+hB+sheqh+Uw/Tw/UIPVKP0qP1GP2WHqvf1uP0O3q8nqAn6kl6sp6ie/5SacY/kf/238nv+/Orb9Kb9cd6i96qt+nteofeqXfpXXq33q336D16r96r9+l9er/erw/oA/qgPqgP6UP6sD6sj+gj+qg+qo/p4/pH/b0+qX/Qp/RpfVr/qM/qs/rcL/8HYNAoo40xkUlnrjApJr3JYK40Gc1VJpO52iTMNSazudZkMdeZrCabyW5ymJwml8ltrCHjDJvY5DF5TdJcb/KZG0x+U8AUNIWMN4VNEXPjv53/e/01Mo1MY9PYNDFNTDPTzDQ3zU0L08K0NC1NK9PKtDatTRvTxrQ1bU070860N+1NR9PRdDKdTGfT2aSaVNPNvGS6mx6mp+llepuXTR/Tx/Q1fU0/088MMAPMQDPQDDKDzGAz2Aw1Q80wM8yMMCPMKDPKjDFjzFgz1owz48x4M95MNBPNZDPZTDVTzTQzzcwwM8xMM9PMMrPMHDPHzDPzzHwz3yw0C80is8gsNkvMErPMLDMrzAqzyqwya8was86sMxvMBrPYbDabzRazxWwz28wOs8PsMrvMbrPb7DF7zF6z1+wz+8x+s98cMAfMQXPQHDKHzGFz2BwxR8xRc9QcM8fMCXPCnDQnzSlzypwxZ8xZc9acM+fMBXPh4mlfpCIVmchE6aJ0UUqUEmWIMkQZo4xRpihTlIgSUeYoc5Qlui7KGmWLskc5opxRrigVbESRiziKozxR3igZXR/li26I8kcFooJRochHhaMi0Y1R0eimqFh0c1Q8uiUqEd0alYxKRaWjMtFtUdno9qhcVD6qEN0RVYzujCpFlaO7oirR3VHV6J6oWnRvVD26L6oR3R/VjB6IakUPRrWjh6I60cNR3eiRqF5UP2oQNYwa/aH1QziV7THf2Xaxqbar7WZfst1tD9vT9rK97cu2j33F9rWv2n62vx1gX7MD7et2kH3DDrZD7FD7ph1mh9sRdqQdZUfbMfYtO9a+bcfZd+x4O8FOtJPsZDvFTrXv2ml2up1h37Mz7ft2lp1t59i5dp79wM63C+xC+6FdZD+yi+0Su9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9Fuspvtx3aL3Wq32e12h91pd9lP7G77qd1jP7N77ed2n/2T3W+/sAfsl/ag/coesl/bw/Ybe8R+a4/a7+wxe9yesN/bk/YHe8qetmfsj/as/cmes+ftBRsuntxf/HgnQ4bSUTpKoRTKQBkoI2WkTJSJEpSgzJSZslAWykpZKTtlp5yUk3JTbrqIiSkP5aEkJSkf5aP8lJ8KUkHy5KkIFaGiVJSKUTEqTsWpBJWgklSSSlNpuo1uo9vpdipP5ekOuoPupDupMlWmKlSFqlJVqkbVqDpVpxpUg2pSTapFtag21aY6VIfqUl2qR/WoATWgRtSIGlNjakJNqBk1o+bUnFpQC2pJLakVtaLW1JraUBtqS22pHbWj9tSeOlJH6kSdqDN1plRKpW7UjbpTd+pJPak39aY+1If6Ul/qR/1oAA2ggTSQBtEgGkxDaCi9ScNoOI2gkTSKRtMYGkNjaSyNo3E0nsbTRJpIk2kyTaWpNI2m0QyaQTNpJs2iWTSH5tA8mkfzaT4tpIW0iBbRYlpMS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaAtto220g3bQLtpFu2k37aE9tJf20j7aR/tpPx2gA3SQDtIhOkSH6TAdoSN0lI7SMTpGJ+gEnaSTdIpO0Rk6Q2fpJzpH5+kCBUpxCjK4K11Gd5XL5K52KS69uxhHAHAxzu5yuJwul8vtrMvqsv0qJudcflfAFXSFnHeFXRF342/ikq6UK+3KuNtcWXe7K/ebuIq721V197hq7l5X2d31q7i6u8/VcA+7mu4RV8vVd7VdQ1fHPezqukdcPVffNXANXXP3hGvhnnQt3VOulXv6N/F8t8CtdmvcWrfO7XafujPuR3fYfePOup9cZ9fF9XYvuz7uFdfXver6uf6/iYe6N90wN9yNcCPdKDf6N/FEN8lNdlPcVPeum+am/yae5z5wM91CN8vNdnPc3J/jiz0tdB+6Re4jt9gtcUvdMrfcrXAr3ar/2+syt8FtdJvcLveJ2+K2um1uu9vhdv4cXzyOPe4zt9d97g65r91+94U74I64g+6rn+OLx3fEfeuOuu/cMXfcnXDfu5PuB3fKnf75+C8e+/fuvLvgggNGVqzZcMTp+ApO4fScga/kjHwVZ+KrOcHXcGa+lrPwdZyVs3F2zsE5ORfnZsvEjpljzsN5OcnXcz6+gfNzAS7IhdhzYS7CN3JRvomL8c1cnG/hEnwrl+RSXJrL8G1clm/nclyeK/AdXDEErsSV+S6uwndzVb6Hq/G9XJ3v4xp8P9fkB7gWP8i1+SGuww9zXX6E63F9bsANuRE/yo35MW7CTbkZP87N+QluwU9yS36KW/HT3Jqf4Tb8LLfl57gdP8/tuQN35Be4E7/InbkLp3JX7sYvcXfuwT25F/fml7kPv8J9+VXux/15AL/GA/l1HsRv8GAewkP5TR7Gw3kEj+RRPJrH8Fs8lt/mcfwOj+cJPJEn8WSewlP5XZ7G03kGv8cz+X2exbN5Ds/lefwBz+cFvJA/5EX8ES/mJbyUl/FyXsEreRWv5jW8ltfxet7AG3kTb+aPeQtv5W28nXfwTt7Fn/Bu/pT38Ge8lz/nffwn3s9f8AH+kg/yV3yIv+bD/A0f4W/5KH/Hx/g4n+Dv+ST/wKf4NJ/hH/ks/8Tn+Dxf4MAQY6xiHZs4itPFV8Qpcfo4Q3xlnDG+Ks4UXx0n4mvizPG1cZb4ujhrnC3OHueIc8a54tyxjSl2McdxnCfOGyfj6+N88Q1x/rhAXDAuFPu4cFwkvjEuGt8UF4tvjovHt8Ql4lvjknGp+OF7y8S3xWXj2+Nycfm4QnxHXDG+M64UV47viqvEd8dV43viavG9cbH4vrhGfH9cM34grhU/GNeOH4rrxA/HdeNH4npx/bhB3DBuFD8aN44fi5vETeNm8eNx8/iJuEX8ZNwyfipuFT/9u/tT465xt/il+KU4hHv0nOTc5LzkB8n5yQXJhckPk4uSHyUXJ5cklyaXJZcnVyRXJlclVyfXJNcm1yXXJzckNyY3JUOofAV49Mrrv3ydxqf49D6Dv9Jn9Ff5TP5qn/DX+Mz+Wp/FX+ez+mw+u8/hc/pcPre3nrzz7GOfx+f1SX+9z+dv8Pl9AV/QF/LeF/ZFfEPfyDfyjf1jvolv6pv5x/3j/gn/hH/SP+mf8q380761f8a38c/6tv45/5x/3rf3HXzHq1/wnfyLvrPv4lN9qu/mu/nuvrvv6Xv63r637+P7+L6+r+/n+/kBfoAf6Af6QX6QH+wH+6F+qB/mh/kRfoQf5Uf5MX6MH+vH+nF+nB/vx/uJfqKf7Cf7qX6qn+an+Rl+hp+Zf6af5Wf5OX6On+fn+fl+vl/oF/pFfpFf7Bf7pX6pX+6X+5V+pV/tV/u1fq1f79f7jX6j3+w3+y1+i9/mt/kdfoff5Xf53X633+P3+L1+r9/n9/n9fr8/4L/0B/1X/pD/2h/23/gj/lt/1H/nj/nj/oT/3p/0P/hT/rQ/43/0Z/1P/pw/7y/44Mck3kqMTbydGJd4JzE+MSExMTEpMTkxJTE18W5iWmJ6YkbivcTMxPuJWYnZiTmJuYl5iQ8S8xMLEgsTHyYWJT5KLE4sSSxNLEssT6xIhJBrSxzyhLwhGa4P+cINIX8oEAqGQsGHwqFIuDEUDTeFYuHmUDzcEkqEW0PJUCqUDo+EeqF+aBAahkbh0dA4PBaahKahWXg8NA9PhBbhydAyPBVahadD6/BMaBOeDW3Dc6FdeD60Dx1Cx/BC6BReDJ1Dl5AauoZu4aXQPfQIPUOv0Du8HPqEV0Lf8GroF/qHAeG1MDC8HgaFN8LgMCQMDW+GYWF4GBFGhlFhdBgT3gpjw9thXHgnjA8TwsQwKUwOU8LU8G6YFqaHGeG9MDO8H2aF2WFOmBvmhQ/C/LAgLAwfhkXho7A4LAlLw7KwPKwIK8OqsDqsCWvDurA+bAgbw6awOXwctoStYVvYHnaEnWFX+CTsDp+GPeGzsDd8HvaFP4X94YtwIHwZDoavwqHwdTgcvglHwrfhaPguHAvHw4nwfTgZfginwulwJvwYzoafwrlwPlyQ76wJIYQQQvxT9O/s7/p3HksHAOqXdTcAuGprjoN/W3N91j+ve6iczRMA8FSXdg/+ZatYMTU19ZfnLtYQ5Z0NAIlf1/9LvASawRPQEppC0b/bXw/V4Sz/Tv3kLQAZ/ionBS7Fl+rf9A/qP/r40Pkl4jOZf10/+uv6swHy572Ukx4uxZfqF/sH9bM1/p3+038xBqDJX+VkhEvxpfpF4DF4Glr+6plCCCGEEEIIIcSf9VCl21y6/nT/8Po8p7mUcwVcin/v+lwIIYQQQgghhBCX37MdOj75aMuWTdv8cwv85b7Av5Yli392kQ7+R7Qhi/+1ixT4gwr+/nvHefmNayGEEEIIIf5XuXTSf7k7EUIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQggh0q7/jj9LdrmPUQghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhLjc/k8AAAD//3jlOqI=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', r0, &(0x7f00000004c0)='./file0\x00', 0x0) 2.979283568s ago: executing program 0 (id=2008): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[], 0x1, 0x291, &(0x7f0000000280)="$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") truncate(&(0x7f0000000040)='./file0\x00', 0x2) 2.754016638s ago: executing program 2 (id=2009): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 2.565905905s ago: executing program 0 (id=2010): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)) 2.5098226s ago: executing program 7 (id=2011): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[@ANYBLOB="12010306000000086b1d010140000102030509025f0003010620020904000000010100000a24010000c6", @ANYRES8, @ANYRESHEX, @ANYRESOCT], &(0x7f00000000c0)={0x0, 0x0, 0x1a, &(0x7f0000000200)={0x5, 0xf, 0xfffffffffffffdbd, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xe5, 0x52, 0x7}, @generic={0x0, 0x10, 0x4, "21bb2f978be034328637b0f286ce793eb611493885193bfcf66e8a2c89d0ca6a3cdf9ed3dbabcce029171fb801252af622fdad9064000000"}]}, 0x2, [{0x0, 0x0}, {0x29, &(0x7f0000000040)=@string={0x29, 0x3, "15655d19ee67e169d61514576aef5995ade31574f1d7792dbdf933fc06ab128eaadcf72e478553"}}]}) 2.383987731s ago: executing program 2 (id=2012): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x22020600) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) 2.240366943s ago: executing program 2 (id=2013): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0xf4, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x2c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x88, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 2.120698554s ago: executing program 2 (id=2014): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)={0x2c, r1, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a0d4e01051d6ff63"}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.032328741s ago: executing program 2 (id=2015): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x88, &(0x7f0000000080)={[{@barrier}, {@autodefrag}, {@noacl}, {@compress_algo={'compress', 0x3d, 'no'}}, {@clear_cache}, {@noacl}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x36, 0x74]}}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$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") r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f00000010c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000004140)=ANY=[@ANYRES16=r6, @ANYRES64=r4, @ANYRES16=r3, @ANYRES16=r6, @ANYRESDEC=r5, @ANYRES16=r2, @ANYRES16, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES32=r1], 0x5, 0x0, &(0x7f0000000000)) 1.895932254s ago: executing program 8 (id=2016): mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000240)="df85", 0x2, 0x0) 1.149027109s ago: executing program 8 (id=2017): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x50, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x20, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0x7, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x9}, @random="589733b902f1", @broadcast, @device_a, {0x2, 0x500}, "", @void, @value=@ver_80211n={0x0, 0x5f, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @a_msdu}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.03148694s ago: executing program 8 (id=2018): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000340)=ANY=[], 0x27) 956.654096ms ago: executing program 8 (id=2019): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800190003000200060018c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x1000000) 780.051512ms ago: executing program 8 (id=2020): syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000400)='./file2\x00', 0x8002, &(0x7f0000000040)=ANY=[], 0x1, 0x1f3, &(0x7f0000000700)="$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") munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 613.603186ms ago: executing program 8 (id=2021): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e26, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x40000}}], 0x18}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xd0a55000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0) socket(0x10, 0x3, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r4, 0x5412, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000240)=0x7f) ioctl$TIOCSTI(r4, 0x5412, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x7e) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0xc01, 0x3, 0x2298, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x2200, 0x3c8, 0x3c8, 0x2200, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x6, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x1, './cgroup.net/syz1\x00', 0x2, {0x5}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc9, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x22f8) r5 = dup(r2) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x60, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x2c, 0x2, [@TCA_U32_ACT={0x4}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000000)="0142d90a740caf5be7262ea0cc9915873f6a4884b81c5c7a741989336fab6e5d4fae19cbd057f59350b57c0edac5dc346c76912a22c62d7929b31f3a10514b91457642140b1fce26b2f99a25c62e7baee13afab6818cf8880942121d4929663a4759aa805d1736c702c2b9b208f85c965cde013db73b1352dcf19d481894a7a521442bd23abf669b5b3f75fd7a95ce17805d4ff4ea43ef38d82517443b17ef4f539851d25fe3e5fa63d4fd18d22e1b372b03ff095d91727549a034cdcaf49c3d50fe3f5ccd88ca", 0xc7}, {&(0x7f0000000100)="5623a55397d2d21e09a0be6e7b37f3b4f7792f96d5ea1c0f0703efc97bccfbc45bc6386df2300b0c6b77261fbc76ae6390abcd908d251f7be34266e5439d94c24fba420d1729425a6b0f18716e61b9708c97d8cb2cbee2c37dc2acaad9aa63e3a0849f92ade20f45d67fc161ed898c2797a9a948830cc53839d1695b673f644f92fc59a5ecea9db46a599ebef12a35db46d0750974edc5e494a67d41018e08ff678794cd9fdde863620924d0ad7d0d98dc3637225fdcc0b3e46738e43e18c2ea6b1e06b2edabf803b946df9c24ef3431c64f91b0a4919f3162c0bd6a53b1892a7a1397b1b8145fb42a8ab02149", 0xed}, {&(0x7f0000000200)="3fff2096a966a1411b4bd88abb36493193a9b3b2769671b38897b90c9ec7c6601c03f69b88583eceffd0cfaec1a366fcb6cb9f1198a55e61db8e8922f59e4eb60ddfd98810a4e1f9a473e496a6f7c9f8c88e34abf1d8fbdd3837eb97305b52efa3efa9cfb1ca276b5b8178e701b354bc7d03d0d21265f4046ca25e3a85f144e634c06b7b46b1f85b7b95a543f407fd9a4711", 0x92}, {&(0x7f00000002c0)="8ea63dbda4c19ca9e6c824f045b6316cee2c76bede654d19d850647c13698a91b4580d694cc2dabb76a79133d632032aef8b022f32611a64fd3289a6b6fc1457cc5351de072e655d67cbe1257c6f524333223b18c466adc2d6e9cf578c7d0d5e86cb9ae8e44db5f35df39c48c33dfeeb006e0a3588a2e7e84b65574547f77c2c0545a27ed387ebdc9727e779ab3d5a5898db9d86c25720a8f9073c5e9698c5b209b68ec2ea14bee79ac8", 0xaa}], 0x4) 612.481977ms ago: executing program 7 (id=2022): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012000007a18208"], 0x50}}, 0x0) 503.706826ms ago: executing program 2 (id=2023): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x101, "abac0400ab2c7b9ca50907006a5a18e6000000c7e042000000001d0000000100"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x9, "b546ba0500000d3033de259c29968179b959ebab028deda501009bdeffafde25"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x9, "87987ea4f0e8d2efc032917650708fa3c5705d802240a63faca24c94cfcff165"}) 0s ago: executing program 7 (id=2024): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000400)="f6", 0x1}], 0x1, 0x5, 0x1000) kernel console output (not intermixed with test programs): dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 681.925565][ T5832] usb 3-1: USB disconnect, device number 19 [ 681.974101][T12162] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 682.245389][ T5832] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 682.885056][T10800] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.964219][T12180] loop2: detected capacity change from 0 to 8192 [ 683.188514][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 683.301073][T12191] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1442'. [ 683.647367][ T23] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 683.977552][ T23] usb 9-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 684.227198][ T23] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.237608][ T23] usb 9-1: Product: syz [ 684.241829][ T23] usb 9-1: Manufacturer: syz [ 684.246601][ T23] usb 9-1: SerialNumber: syz [ 684.943495][ T23] usb 9-1: config 0 descriptor?? [ 685.015404][T12208] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 685.029098][T12208] cramfs: wrong magic [ 685.166136][T12206] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 685.211017][ T23] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 685.311496][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 685.325880][ T23] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 685.349328][T12206] cramfs: wrong magic [ 685.397854][ T23] usb 9-1: media controller created [ 685.609160][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 686.193049][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.204755][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.230305][ T23] DVB: Unable to find symbol mt352_attach() [ 686.608495][ T23] DVB: Unable to find symbol nxt6000_attach() [ 686.635386][ T23] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 687.377997][T12227] xt_cgroup: invalid path, errno=-2 [ 687.563053][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input25 [ 687.758647][ T23] dvb-usb: schedule remote query interval to 1000 msecs. [ 687.765830][ T23] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 687.817951][ T23] dvb-usb: bulk message failed: -22 (7/0) [ 688.077218][ T23] dvb-usb: bulk message failed: -22 (7/0) [ 688.126512][ T23] usb 9-1: USB disconnect, device number 5 [ 688.403768][ T23] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 688.807438][ T5814] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 689.167511][ T5814] usb 8-1: Using ep0 maxpacket: 8 [ 689.244010][ T5814] usb 8-1: config 2 has an invalid interface number: 31 but max is 0 [ 689.296087][ T5814] usb 8-1: config 2 has no interface number 0 [ 689.326547][ T5814] usb 8-1: config 2 interface 31 has no altsetting 0 [ 689.387204][ T5814] usb 8-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 689.458069][ T5814] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.466364][ T5814] usb 8-1: Product: syz [ 689.499007][ T5814] usb 8-1: Manufacturer: syz [ 689.503686][ T5814] usb 8-1: SerialNumber: syz [ 689.689804][T12258] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 689.704630][T12258] cramfs: wrong magic [ 689.927282][ T9] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 690.162318][ T9] usb 9-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 690.467926][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.841581][ T5814] ch9200: probe of 8-1:2.31 failed with error -22 [ 690.871012][ T5814] usb 8-1: USB disconnect, device number 8 [ 691.233464][ T9] usb 9-1: config 0 descriptor?? [ 692.455300][ T9] pantherlord 0003:0F30:0111.0016: hidraw0: USB HID v0.02 Device [HID 0f30:0111] on usb-dummy_hcd.8-1/input0 [ 692.490331][ T9] pantherlord 0003:0F30:0111.0016: no output reports found [ 692.726607][ T9] usb 9-1: USB disconnect, device number 6 [ 692.817593][ T5814] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 693.099065][T12289] xt_cgroup: invalid path, errno=-2 [ 693.114549][ T5814] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 693.132434][ T5814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.262491][ T5814] usb 1-1: config 0 descriptor?? [ 693.291191][ T5814] gspca_main: spca508-2.14.0 probing 8086:0110 [ 693.512584][ T5814] gspca_spca508: reg_read err -32 [ 693.732331][ T5814] gspca_spca508: reg_read err -71 [ 693.797272][ T5814] gspca_spca508: reg_read err -71 [ 693.817274][ T5814] gspca_spca508: reg_read err -71 [ 693.840418][ T5814] gspca_spca508: reg write: error -71 [ 693.845940][ T5814] spca508: probe of 1-1:0.0 failed with error -71 [ 693.877547][ T5814] usb 1-1: USB disconnect, device number 17 [ 694.912416][T12319] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 694.935669][T12319] cramfs: wrong magic [ 696.018044][T11929] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 696.238374][T11929] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 696.267499][T11929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.275661][T11929] usb 1-1: Product: syz [ 696.300284][T11929] usb 1-1: Manufacturer: syz [ 696.310403][T11929] usb 1-1: SerialNumber: syz [ 696.335708][T11929] usb 1-1: config 0 descriptor?? [ 696.360802][T11929] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 696.415467][T11929] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 696.446169][T11929] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 696.476214][T12338] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1472'. [ 696.496096][T11929] usb 1-1: media controller created [ 696.523465][T12338] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1472'. [ 696.591316][T12316] loop2: detected capacity change from 0 to 32768 [ 696.637264][T11929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 696.648587][T12327] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 696.697268][T12327] dvb-usb: bulk message failed: -22 (7/0) [ 696.779325][T12316] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 697.316319][T12354] xt_cgroup: invalid path, errno=-2 [ 697.388006][T12316] XFS (loop2): Ending clean mount [ 697.469437][T11929] DVB: Unable to find symbol mt352_attach() [ 697.661002][ T5773] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 697.752373][T11929] DVB: Unable to find symbol nxt6000_attach() [ 697.792524][T11929] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 697.841244][T12362] loop8: detected capacity change from 0 to 64 [ 697.867483][T11929] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input26 [ 697.990169][T12365] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 698.014905][T12365] cramfs: wrong magic [ 698.055946][T11929] dvb-usb: schedule remote query interval to 1000 msecs. [ 698.096893][T11929] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 698.117289][T11929] dvb-usb: bulk message failed: -22 (7/0) [ 698.125460][T11929] dvb-usb: bulk message failed: -22 (7/0) [ 698.187387][T11929] usb 1-1: USB disconnect, device number 18 [ 698.759790][T11929] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 699.167341][T11929] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 700.234808][T11929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 700.259021][T11929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.289829][T11929] usb 1-1: New USB device found, idVendor=056a, idProduct=233b, bcdDevice= 0.00 [ 700.317515][T11929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.351147][T11929] usb 1-1: config 0 descriptor?? [ 701.339632][T11929] wacom 0003:056A:233B.0017: Unknown device_type for 'HID 056a:233b'. Ignoring. [ 701.576371][T10872] usb 1-1: USB disconnect, device number 19 [ 701.652952][T12401] loop8: detected capacity change from 0 to 4096 [ 702.278203][T12419] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 702.328380][T12419] cramfs: wrong magic [ 702.508895][T12426] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 702.520696][T12426] cramfs: wrong magic [ 704.192804][T12446] loop7: detected capacity change from 0 to 2048 [ 704.248297][T12446] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 704.414019][T12446] EXT4-fs error (device loop7): ext4_find_extent:936: inode #2: comm syz.7.1494: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 704.578402][T12456] xt_cgroup: invalid path, errno=-2 [ 705.001625][T12446] EXT4-fs (loop7): Remounting filesystem read-only [ 705.360732][T10580] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.436373][T12473] loop0: detected capacity change from 0 to 8 [ 706.181570][T12473] SQUASHFS error: Unable to read directory block [629:46] [ 706.978480][T12497] unsupported nla_type 52263 [ 707.100142][T12498] loop2: detected capacity change from 0 to 2048 [ 707.213420][T12503] loop8: detected capacity change from 0 to 1024 [ 707.232913][T12498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 707.301442][T12503] hfsplus: bad catalog entry type [ 707.370613][ T1136] hfsplus: b-tree write err: -5, ino 4 [ 707.386344][T12498] EXT4-fs error (device loop2): ext4_find_extent:936: inode #2: comm syz.2.1516: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 707.447564][T12498] EXT4-fs (loop2): Remounting filesystem read-only [ 707.541817][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.344283][T12478] loop7: detected capacity change from 0 to 32768 [ 708.665538][T12514] xt_cgroup: invalid path, errno=-2 [ 708.716543][T12478] JBD2: Ignoring recovery information on journal [ 709.008865][T12529] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 709.032517][T12529] cramfs: wrong magic [ 709.479327][T12478] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 709.681167][T10580] ocfs2: Unmounting device (7,7) on (node local) [ 712.115957][T12534] loop8: detected capacity change from 0 to 32768 [ 712.165154][T12534] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 712.242655][T12534] XFS (loop8): Ending clean mount [ 712.267462][T12534] XFS (loop8): Quotacheck needed: Please wait. [ 712.392444][T12534] XFS (loop8): Quotacheck: Done. [ 712.543895][T10800] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 712.894865][T12575] netlink: 'syz.0.1529': attribute type 7 has an invalid length. [ 713.227185][T12575] netlink: 'syz.0.1529': attribute type 8 has an invalid length. [ 713.916483][T12589] netlink: 'syz.7.1523': attribute type 1 has an invalid length. [ 714.348495][T12594] xt_cgroup: invalid path, errno=-2 [ 715.058234][T11929] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 715.274470][T12605] xt_cgroup: invalid path, errno=-2 [ 715.279349][T11929] usb 1-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 715.292519][T11929] usb 1-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 715.326459][T11929] usb 1-1: config 0 interface 0 has no altsetting 0 [ 715.359001][T11929] usb 1-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00 [ 715.377196][T11929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.409868][T11929] usb 1-1: config 0 descriptor?? [ 715.421095][T12604] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 716.393879][T11929] wacom 0003:056A:0333.0018: unknown main item tag 0x0 [ 716.467355][T11929] wacom 0003:056A:0333.0018: unknown main item tag 0x0 [ 716.512612][T11929] wacom 0003:056A:0333.0018: unknown main item tag 0x0 [ 716.557777][T11929] wacom 0003:056A:0333.0018: unknown main item tag 0x0 [ 716.566325][T11929] wacom 0003:056A:0333.0018: unknown main item tag 0x0 [ 716.629191][T11929] wacom 0003:056A:0333.0018: hidraw0: USB HID v0.03 Device [HID 056a:0333] on usb-dummy_hcd.0-1/input0 [ 716.698944][T11929] usb 1-1: USB disconnect, device number 20 [ 716.906897][T12622] fido_id[12622]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 718.976881][T12668] xt_cgroup: invalid path, errno=-2 [ 719.412757][T12670] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 719.460160][T12670] cramfs: wrong magic [ 720.986427][T12681] loop2: detected capacity change from 0 to 4096 [ 721.337496][T12687] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1549'. [ 721.754457][T12698] usb usb9: usbfs: process 12698 (syz.2.1554) did not claim interface 3 before use [ 723.693791][T12720] loop0: detected capacity change from 0 to 4096 [ 723.725467][T12720] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 724.072255][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 726.220985][ T8556] Bluetooth: hci0: command 0x0406 tx timeout [ 726.280763][T11705] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.593596][T11705] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.683086][T11705] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.825984][T12749] loop8: detected capacity change from 0 to 512 [ 726.853638][T11705] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.910407][T12753] loop0: detected capacity change from 0 to 512 [ 726.936020][T12753] journal_path: Lookup failure for './file2' [ 726.978596][T12753] EXT4-fs: error: could not find journal device path [ 727.299243][T12758] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1576'. [ 727.358192][T11705] tipc: Left network mode [ 729.482618][T12780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 729.517360][T12780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 729.526650][T12780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 729.543573][T12780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 729.574831][T12780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 729.583762][T12780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 729.933598][T12785] loop0: detected capacity change from 0 to 4096 [ 730.570245][T12785] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 730.776412][T12785] ntfs3: loop0: Failed to load $Extend (-22). [ 730.804053][T12785] ntfs3: loop0: Failed to initialize $Extend. [ 731.627479][T12780] Bluetooth: hci2: command tx timeout [ 731.643784][T12777] chnl_net:caif_netlink_parms(): no params data found [ 732.835336][T12806] loop7: detected capacity change from 0 to 32768 [ 733.837337][T12780] Bluetooth: hci2: command tx timeout [ 733.903669][T12806] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 734.060192][T12806] XFS (loop7): Ending clean mount [ 734.073574][T12806] XFS (loop7): Quotacheck needed: Please wait. [ 734.088738][T12847] pim6reg: entered allmulticast mode [ 734.205946][T12806] XFS (loop7): Quotacheck: Done. [ 734.262863][T12777] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.297999][T12777] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.307038][T12777] bridge_slave_0: entered allmulticast mode [ 734.326312][T12777] bridge_slave_0: entered promiscuous mode [ 734.339716][T10580] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 734.355522][T12777] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.390154][T12777] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.419137][T12777] bridge_slave_1: entered allmulticast mode [ 734.426716][T12777] bridge_slave_1: entered promiscuous mode [ 734.580132][ T27] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 734.712804][T12777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 734.775257][T11705] hsr_slave_0: left promiscuous mode [ 734.789015][T11705] hsr_slave_1: left promiscuous mode [ 734.799885][T11705] team0: left allmulticast mode [ 734.809898][T11705] bridge0: port 1(team0) entered disabled state [ 734.821662][ T27] usb 9-1: Using ep0 maxpacket: 32 [ 734.868310][ T27] usb 9-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 734.884404][ T27] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.913529][ T27] usb 9-1: Product: syz [ 734.927287][ T27] usb 9-1: Manufacturer: syz [ 734.937725][ T27] usb 9-1: SerialNumber: syz [ 734.952970][ T27] usb 9-1: config 0 descriptor?? [ 734.959709][T12863] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1594'. [ 734.972511][ T27] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 734.982557][T11705] veth1_macvtap: left promiscuous mode [ 734.984730][ T27] dvb-usb: bulk message failed: -22 (4/0) [ 734.998143][T11705] veth0_macvtap: left promiscuous mode [ 735.003870][T11705] veth1_vlan: left promiscuous mode [ 735.005485][ T27] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 735.037337][ T27] dvb-usb: bulk message failed: -22 (5/0) [ 735.047346][T11705] veth0_vlan: left promiscuous mode [ 735.052768][ T27] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 735.126260][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 735.169373][ T27] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 735.208540][ T27] usb 9-1: media controller created [ 735.218179][T12852] ttusb2: i2c wr len=8192 too high [ 735.276052][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 735.369205][ T27] usb 9-1: selecting invalid altsetting 3 [ 735.383376][ T27] ttusb2: set interface to alts=3 failed [ 735.404810][T12868] loop7: detected capacity change from 0 to 4096 [ 735.638462][ T27] DVB: Unable to find symbol tda10086_attach() [ 735.644705][ T27] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 735.654593][ T27] dvb-usb: bulk message failed: -22 (4/0) [ 735.660549][ T27] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 735.675820][T12868] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 735.686081][ T27] dvb-usb: bulk message failed: -22 (5/0) [ 735.692883][ T27] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 735.724387][ T27] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 735.736983][ T27] usb 9-1: USB disconnect, device number 7 [ 735.786043][T12868] ntfs3: loop7: Failed to load $Extend (-22). [ 735.966049][T12780] Bluetooth: hci2: command tx timeout [ 735.986589][T12868] ntfs3: loop7: Failed to initialize $Extend. [ 736.434973][ T27] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 738.027464][T12780] Bluetooth: hci2: command tx timeout [ 739.330741][T11705] bond0 (unregistering): Released all slaves [ 739.464617][T12777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 739.921452][T12777] team0: Port device team_slave_0 added [ 739.962608][T12777] team0: Port device team_slave_1 added [ 740.067486][T12777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 740.074559][T12777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 740.102510][T12777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 740.131118][ T27] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 740.143218][T12777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 740.147926][T10808] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 740.180467][T12777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 740.209939][T12777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 740.306391][T12777] hsr_slave_0: entered promiscuous mode [ 740.313630][T11705] IPVS: stop unused estimator thread 0... [ 740.322655][T12777] hsr_slave_1: entered promiscuous mode [ 740.330786][ T27] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 740.339382][T10808] usb 9-1: Using ep0 maxpacket: 32 [ 740.343301][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.366510][T12777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 740.374473][T10808] usb 9-1: config 0 has an invalid interface number: 35 but max is 0 [ 740.378328][ T27] usb 1-1: config 0 descriptor?? [ 740.387728][T12777] Cannot create hsr debugfs directory [ 740.404052][ T27] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 740.404774][T10808] usb 9-1: config 0 has no interface number 0 [ 740.430903][T10808] usb 9-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 740.449860][T10808] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.464824][T10808] usb 9-1: Product: syz [ 740.480659][T10808] usb 9-1: Manufacturer: syz [ 740.485478][T10808] usb 9-1: SerialNumber: syz [ 740.523130][T10808] usb 9-1: config 0 descriptor?? [ 740.822642][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 740.842128][ T27] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 740.868113][ T27] usb 1-1: media controller created [ 740.925110][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 740.956718][ T27] gp8psk_fe: Frontend attached [ 740.967022][ T27] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 740.988415][T10808] radio-si470x 9-1:0.35: DeviceID=0x6ccb ChipID=0x8061 [ 740.988481][ T27] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 741.099988][ T27] gp8psk: usb in 138 operation failed. [ 741.112420][ T27] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 741.125212][ T27] gp8psk: found Genpix USB device pID = 203 (hex) [ 741.154227][ T27] usb 1-1: USB disconnect, device number 21 [ 741.233055][T10808] radio-si470x 9-1:0.35: si470x_get_report: usb_control_msg returned -71 [ 741.244004][T10808] radio-si470x 9-1:0.35: si470x_get_scratch: si470x_get_report returned -71 [ 741.254249][T10808] radio-si470x: probe of 9-1:0.35 failed with error -5 [ 741.321671][T10808] radio-raremono 9-1:0.35: this is not Thanko's Raremono. [ 741.322012][ T27] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 741.396384][T10808] usb 9-1: USB disconnect, device number 8 [ 741.596244][T12777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 741.608159][T12777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 741.639139][T12777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 741.663513][T12777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 741.844842][T12777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 741.899792][T12777] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.950333][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.957711][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 742.002440][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.009754][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 742.171496][T12777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 742.297378][ T9] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 742.545455][ T9] usb 9-1: New USB device found, idVendor=056a, idProduct=00ef, bcdDevice= 0.00 [ 742.556640][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.582482][ T9] usb 9-1: config 0 descriptor?? [ 743.819836][ T9] wacom 0003:056A:00EF.0019: unknown main item tag 0x0 [ 743.826874][ T9] wacom 0003:056A:00EF.0019: unknown main item tag 0x0 [ 743.834329][ T9] wacom 0003:056A:00EF.0019: unknown main item tag 0x0 [ 743.841671][ T9] wacom 0003:056A:00EF.0019: unknown main item tag 0x0 [ 743.905655][T12777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 743.923075][ T9] wacom 0003:056A:00EF.0019: unknown main item tag 0x0 [ 744.002838][ T9] wacom 0003:056A:00EF.0019: unknown main item tag 0x0 [ 744.031201][T12777] veth0_vlan: entered promiscuous mode [ 744.067447][ T9] wacom 0003:056A:00EF.0019: hidraw0: USB HID v10.00 Device [HID 056a:00ef] on usb-dummy_hcd.8-1/input0 [ 744.103153][ T9] usb 9-1: USB disconnect, device number 9 [ 744.185489][T12777] veth1_vlan: entered promiscuous mode [ 744.337560][T12777] veth0_macvtap: entered promiscuous mode [ 744.922323][T12777] veth1_macvtap: entered promiscuous mode [ 744.950155][T12961] fido_id[12961]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 745.061072][T12777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 745.131878][T12777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.157162][T12777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 745.174022][T12777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.189288][T12777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 745.254629][T12777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.290144][T12777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.335860][T12777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.380182][T12777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.418775][T12777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 745.501229][T12777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.523291][T12777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.563763][T12777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.588933][T12777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.678142][T12980] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 745.711023][T12980] cramfs: wrong magic [ 747.283990][ T1328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.468348][ T1328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.634080][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.640930][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.206317][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.261050][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.139454][T13012] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 749.180630][T13012] cramfs: wrong magic [ 749.521419][T13014] netlink: 'syz.2.1573': attribute type 1 has an invalid length. [ 749.787562][ T8556] Bluetooth: hci1: command 0x0406 tx timeout [ 750.077689][ T5771] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 750.477839][ T5771] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 750.937612][ T5771] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.994007][ T5771] usb 9-1: config 0 descriptor?? [ 751.201955][ T5771] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 751.365681][T13031] loop7: detected capacity change from 0 to 8192 [ 751.415371][T13034] loop0: detected capacity change from 0 to 131072 [ 751.423756][T13034] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 751.432079][T13034] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 751.448393][T13034] F2FS-fs (loop0): invalid crc value [ 751.473040][T13042] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1630'. [ 751.494882][T13034] F2FS-fs (loop0): Found nat_bits in checkpoint [ 751.600839][T13034] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 751.608258][T13034] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 751.672255][ T5771] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 751.728310][ T5771] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 751.758924][ T5771] usb 9-1: media controller created [ 751.812490][ T5771] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 751.948730][ T5771] gp8psk_fe: Frontend attached [ 751.979433][ T5771] usb 9-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 752.026852][ T5771] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 752.287649][ T5771] gp8psk: usb in 138 operation failed. [ 752.293372][ T5771] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 752.324677][ T5771] gp8psk: found Genpix USB device pID = 203 (hex) [ 752.401007][T13060] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 752.431526][T13060] cramfs: wrong magic [ 752.588145][ T5771] usb 9-1: USB disconnect, device number 10 [ 753.664720][ T5771] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 754.647435][T13086] block nbd0: server does not support multiple connections per device. [ 754.701772][T13086] block nbd0: shutting down sockets [ 756.499508][T13109] loop8: detected capacity change from 0 to 4096 [ 756.561742][T13109] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 756.827510][ T27] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 756.849395][T10800] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.051317][ T27] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 4361, setting to 64 [ 757.080021][T13107] loop2: detected capacity change from 0 to 32768 [ 757.099962][ T27] usb 8-1: config 0 interface 0 has no altsetting 0 [ 757.111402][T13125] netlink: 'syz.8.1648': attribute type 2 has an invalid length. [ 757.132117][ T27] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 757.135389][T13125] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1648'. [ 757.151492][ T27] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 757.171004][ T27] usb 8-1: Product: syz [ 757.192787][ T27] usb 8-1: Manufacturer: syz [ 757.255954][ T27] usb 8-1: SerialNumber: syz [ 757.264991][ T27] usb 8-1: config 0 descriptor?? [ 757.275911][T13107] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 757.316324][T13112] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 757.344789][ T27] usb 8-1: selecting invalid altsetting 0 [ 757.461438][T13107] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 757.593608][T13107] CIFS mount error: No usable UNC path provided in device string! [ 757.593608][T13107] [ 757.657169][T13107] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 757.885656][ T27] usb 8-1: USB disconnect, device number 9 [ 757.917614][T12777] ocfs2: Unmounting device (7,2) on (node local) [ 758.120357][T13138] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1651'. [ 758.660971][T13144] program syz.2.1650 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 760.041089][T13165] netlink: 'syz.2.1657': attribute type 25 has an invalid length. [ 760.052098][T13164] loop7: detected capacity change from 0 to 1024 [ 760.083342][T13165] netlink: 'syz.2.1657': attribute type 1 has an invalid length. [ 760.117367][T13165] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.602607][T13164] hfsplus: keylen 65060 too large [ 760.644151][T13164] hfsplus: xattr searching failed [ 761.141036][T13189] loop8: detected capacity change from 0 to 64 [ 761.497326][ T5771] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 761.739193][ T5771] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.847573][ T5771] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 762.077384][ T5771] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 762.142558][ T5771] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.191571][ T5771] usb 3-1: config 0 descriptor?? [ 763.104687][ T5771] hid-led: probe of 0003:0FC5:B080.001A failed with error -71 [ 763.174873][T13219] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 763.182508][T13219] cramfs: wrong magic [ 763.216226][ T5771] usb 3-1: USB disconnect, device number 20 [ 764.452560][T13218] loop0: detected capacity change from 0 to 32768 [ 764.462498][T13218] (syz.0.1673,13218,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 764.531592][T13218] (syz.0.1673,13218,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 764.632667][T13231] loop2: detected capacity change from 0 to 128 [ 764.700370][T13218] JBD2: Ignoring recovery information on journal [ 764.810569][T13218] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 765.520180][T13234] loop7: detected capacity change from 0 to 32768 [ 765.579352][T13248] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 765.636034][T13248] cramfs: wrong magic [ 765.692346][T13234] JBD2: Ignoring recovery information on journal [ 765.702369][ T5770] ocfs2: Unmounting device (7,0) on (node local) [ 766.170270][T13234] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 766.840360][T13257] binfmt_misc: register: failed to install interpreter file ./file1 [ 766.932533][T13258] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1686'. [ 767.079700][T10580] ocfs2: Unmounting device (7,7) on (node local) [ 767.590831][T13276] loop7: detected capacity change from 0 to 16 [ 767.607701][T13276] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 768.094299][T13266] loop0: detected capacity change from 0 to 32768 [ 768.164296][T13266] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 768.257736][T13294] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 768.273054][T13294] cramfs: wrong magic [ 769.073156][T13266] XFS (loop0): Ending clean mount [ 769.118745][T13266] XFS (loop0): Quotacheck needed: Please wait. [ 769.185557][T13308] loop7: detected capacity change from 0 to 2048 [ 769.224783][T13266] XFS (loop0): Quotacheck: Done. [ 769.267310][ T27] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 769.517147][ T27] usb 9-1: Using ep0 maxpacket: 16 [ 769.535024][ T27] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 769.547781][ T27] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 769.566323][ T27] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 769.583599][ T27] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 769.601978][ T27] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.607531][T13311] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 769.633649][ T27] usb 9-1: config 0 descriptor?? [ 769.657234][T13309] xt_cgroup: invalid path, errno=-2 [ 770.047624][T13266] XFS (loop0): User initiated shutdown received. [ 770.070354][T13266] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 770.143575][T13266] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 770.203045][ T27] microsoft 0003:045E:07DA.001B: ignoring exceeding usage max [ 770.233221][T13311] NILFS (loop7): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 770.237905][ T27] microsoft 0003:045E:07DA.001B: unsupported Resolution Multiplier 0 [ 770.260786][T13311] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=4) [ 770.283804][ T27] microsoft 0003:045E:07DA.001B: implement() called with n (152) > 32! (kworker/1:1) [ 770.298845][ T5770] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 770.335040][T13311] Remounting filesystem read-only [ 770.341394][ T7003] NILFS (loop7): discard dirty page: offset=4096, ino=6 [ 770.348654][ T7003] NILFS (loop7): discard dirty block: blocknr=39, size=1024 [ 770.356607][ T7003] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 770.387241][ T7003] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 770.417479][ T27] microsoft 0003:045E:07DA.001B: No inputs registered, leaving [ 770.433158][ T7003] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 770.459508][ T7003] NILFS (loop7): discard dirty page: offset=0, ino=2 [ 770.466531][ T7003] NILFS (loop7): discard dirty block: blocknr=18, size=1024 [ 770.468242][ T27] microsoft 0003:045E:07DA.001B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 770.497391][ T7003] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 770.514834][ T27] microsoft 0003:045E:07DA.001B: no inputs found [ 770.521702][ T7003] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 770.553835][ T27] microsoft 0003:045E:07DA.001B: could not initialize ff, continuing anyway [ 770.564911][ T7003] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 770.587412][ T27] usb 9-1: USB disconnect, device number 11 [ 770.619600][ T7003] NILFS (loop7): discard dirty page: offset=0, ino=5 [ 770.633410][ T7003] NILFS (loop7): discard dirty block: blocknr=41, size=1024 [ 770.687309][ T7003] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 770.696340][ T7003] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 770.730710][T13318] fido_id[13318]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 770.753658][ T7003] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 770.787983][ T7003] NILFS (loop7): discard dirty page: offset=0, ino=3 [ 770.810549][ T7003] NILFS (loop7): discard dirty block: blocknr=42, size=1024 [ 770.844432][ T7003] NILFS (loop7): discard dirty block: blocknr=43, size=1024 [ 770.870040][ T7003] NILFS (loop7): discard dirty block: blocknr=44, size=1024 [ 770.900784][ T7003] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 770.928964][ T7003] NILFS (loop7): discard dirty page: offset=196608, ino=3 [ 770.947556][ T7003] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 770.967150][ T7003] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 770.976178][ T7003] NILFS (loop7): discard dirty block: blocknr=49, size=1024 [ 770.999884][T13323] loop0: detected capacity change from 0 to 256 [ 771.008576][ T7003] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 771.028394][ T7003] NILFS (loop7): discard dirty page: offset=0, ino=4 [ 771.035239][ T7003] NILFS (loop7): discard dirty block: blocknr=40, size=1024 [ 771.043959][ T7003] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 771.059146][ T7003] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 771.070810][ T7003] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 771.092783][T10580] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer [ 771.102664][T10580] NILFS (loop7): discard dirty page: offset=0, ino=6 [ 771.123259][T10580] NILFS (loop7): discard dirty block: blocknr=35, size=1024 [ 771.132828][T10580] NILFS (loop7): discard dirty block: blocknr=36, size=1024 [ 771.142298][T13323] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 771.147003][T10580] NILFS (loop7): discard dirty block: blocknr=37, size=1024 [ 771.169604][T10580] NILFS (loop7): discard dirty block: blocknr=38, size=1024 [ 771.532706][T13328] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 771.545478][T13328] cramfs: wrong magic [ 771.707512][ T27] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 771.744072][T13321] loop2: detected capacity change from 0 to 32768 [ 771.815155][ T28] audit: type=1800 audit(1771862374.034:164): pid=13321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1708" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=7 res=0 errno=0 [ 771.872979][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 771.900599][ T27] usb 8-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 771.930119][ T27] usb 8-1: config 0 interface 0 has no altsetting 0 [ 771.943240][ T27] usb 8-1: New USB device found, idVendor=056a, idProduct=0031, bcdDevice= 0.00 [ 771.990365][ T27] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.028101][ T27] usb 8-1: config 0 descriptor?? [ 772.121710][ T9] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 772.160132][ T9] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 772.190055][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.216282][ T9] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 772.539912][ T27] wacom 0003:056A:0031.001C: hidraw0: USB HID v0.05 Device [HID 056a:0031] on usb-dummy_hcd.7-1/input0 [ 772.814810][ T5771] usb 8-1: USB disconnect, device number 10 [ 773.204606][T13347] netlink: 'syz.2.1715': attribute type 2 has an invalid length. [ 773.337943][ T9] stv0680 1-1:4.0: Could not get descriptor 0200 [ 773.500229][T13352] tun0: tun_chr_ioctl cmd 1074025692 [ 773.544851][ T9] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 773.570793][T13357] loop2: detected capacity change from 0 to 1024 [ 773.574207][ T9] stv0680 1-1:4.0: last error: 34, command = 0x21 [ 773.607646][ T9] usb 1-1: USB disconnect, device number 22 [ 773.681000][T13357] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 773.746016][T13363] misc userio: Can't change port type on an already running userio instance [ 773.762935][T13357] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 773.795608][T13357] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.1719: bg 0: block 112: padding at end of block bitmap is not set [ 773.820276][T13357] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 42 with max blocks 1 with error 117 [ 773.835350][T13357] EXT4-fs (loop2): This should not happen!! Data will be lost [ 773.835350][T13357] [ 773.928123][T12777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 773.966276][T13369] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 774.016194][T13369] cramfs: wrong magic [ 774.609980][T13383] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 774.621733][T13383] cramfs: wrong magic [ 775.181187][T13388] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 775.188859][T13388] cramfs: wrong magic [ 775.228582][T13389] program syz.0.1729 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 775.798565][ T5847] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 775.973794][T13406] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1736'. [ 776.017148][ T5847] usb 9-1: Using ep0 maxpacket: 32 [ 776.048298][ T5847] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 776.077208][ T5847] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.117471][ T5847] usb 9-1: config 0 descriptor?? [ 776.176426][T13410] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 776.184533][T13410] cramfs: wrong magic [ 776.330828][ T5847] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 776.368827][ T5847] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 776.398461][ T5847] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 776.417624][ T5847] usb 9-1: media controller created [ 776.479283][ T5847] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 776.546703][ T5847] az6027: usb out operation failed. (-71) [ 776.570264][ T5847] az6027: usb out operation failed. (-71) [ 776.592592][ T5847] stb0899_attach: Driver disabled by Kconfig [ 776.606026][ T5847] az6027: no front-end attached [ 776.606026][ T5847] [ 776.624065][ T5847] az6027: usb out operation failed. (-71) [ 776.637452][ T5847] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 776.657768][ T5847] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input40 [ 776.699347][ T5847] dvb-usb: schedule remote query interval to 400 msecs. [ 776.716772][ T5847] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 776.760620][ T5847] usb 9-1: USB disconnect, device number 12 [ 776.789690][T13402] loop2: detected capacity change from 0 to 32768 [ 776.913326][ T5847] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 776.975629][T13402] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 777.293965][T13402] XFS (loop2): Ending clean mount [ 777.462764][T13402] XFS (loop2): Quotacheck needed: Please wait. [ 777.655415][T13402] XFS (loop2): Quotacheck: Done. [ 777.904265][T13402] XFS (loop2): User initiated shutdown received. [ 777.934685][T13402] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 777.962800][T13402] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 778.076151][T12777] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 778.779334][T13466] loop2: detected capacity change from 0 to 2048 [ 778.780730][T13467] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 778.793233][T13467] cramfs: wrong magic [ 778.801731][T13466] EXT4-fs: Ignoring removed mblk_io_submit option [ 779.670274][T13466] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 779.721337][T13466] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.1756: bg 0: block 234: padding at end of block bitmap is not set [ 779.775854][T13466] EXT4-fs (loop2): Remounting filesystem read-only [ 779.901572][T13480] loop8: detected capacity change from 0 to 512 [ 779.912754][T13480] EXT4-fs: Ignoring removed mblk_io_submit option [ 779.933999][T12777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.952049][T13480] EXT4-fs (loop8): Test dummy encryption mode enabled [ 780.002468][T13480] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 780.042654][T13480] EXT4-fs (loop8): 1 truncate cleaned up [ 780.076932][T13480] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 780.485235][T13483] loop2: detected capacity change from 0 to 8192 [ 780.750994][T13480] fscrypt (loop8): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 781.031288][T10800] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.833582][T13531] loop0: detected capacity change from 0 to 2048 [ 781.865998][T13531] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 782.217764][T13539] loop2: detected capacity change from 0 to 1024 [ 782.530492][ T28] audit: type=1800 audit(1771862384.734:165): pid=13539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1774" name="file1" dev="loop2" ino=3 res=0 errno=0 [ 783.176466][T13548] loop0: detected capacity change from 0 to 64 [ 783.499768][ T1071] hfsplus: b-tree write err: -5, ino 3 [ 783.797218][ T5847] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 784.017162][ T5847] usb 8-1: Using ep0 maxpacket: 8 [ 784.038050][ T5847] usb 8-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 784.057665][ T5847] usb 8-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 784.076216][ T5847] usb 8-1: Product: syz [ 784.086422][ T5847] usb 8-1: Manufacturer: syz [ 784.096613][ T5847] usb 8-1: SerialNumber: syz [ 784.109474][ T5847] usb 8-1: config 0 descriptor?? [ 784.135758][T10872] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 784.147445][ T5847] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 784.302051][T13567] ªªªªªª: renamed from vlan0 (while UP) [ 784.337460][T10872] usb 3-1: Using ep0 maxpacket: 8 [ 784.358495][T10872] usb 3-1: unable to get BOS descriptor or descriptor too short [ 784.378800][T10872] usb 3-1: config 140 has an invalid interface number: 182 but max is 1 [ 784.397186][T10872] usb 3-1: config 140 has no interface number 1 [ 784.424595][T10872] usb 3-1: config 140 interface 182 has no altsetting 0 [ 784.470168][T10872] usb 3-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 784.480020][T10872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.488353][T10872] usb 3-1: Product: syz [ 784.493023][T10872] usb 3-1: Manufacturer: syz [ 784.497909][T10872] usb 3-1: SerialNumber: syz [ 784.809791][ T5847] input: gspca_zc3xx as /devices/platform/dummy_hcd.7/usb8/8-1/input/input41 [ 784.850512][T10872] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 784.991001][ T5832] usb 8-1: USB disconnect, device number 11 [ 785.114032][T13577] loop8: detected capacity change from 0 to 512 [ 785.128551][T13577] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 785.316364][T13577] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 785.348304][T13577] EXT4-fs (loop8): 1 truncate cleaned up [ 785.355365][T13577] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 785.432476][T10872] usb 3-1: reset high-speed USB device number 21 using dummy_hcd [ 785.999182][T10872] usb 3-1: unable to get BOS descriptor or descriptor too short [ 786.109856][T10872] usb 3-1: device firmware changed [ 786.191828][T10872] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware [ 786.221632][T10872] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 786.233213][ T5835] usb 3-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 786.267008][T10800] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.317414][ T5835] usb 3-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 786.329505][T10872] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 786.367353][T10872] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware [ 786.405685][T10872] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 786.430896][T10872] usb 3-1: USB disconnect, device number 21 [ 786.460173][T10872] usb 3-1: [ueagle-atm] ADSL device removed [ 786.723041][ T1197] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 786.877185][ T5832] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 786.917238][ T1197] usb 1-1: Using ep0 maxpacket: 32 [ 786.931277][ T1197] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.943420][ T1197] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.953596][ T1197] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 786.966222][ T1197] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.979337][ T1197] usb 1-1: config 0 descriptor?? [ 787.081461][ T5832] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.119751][ T5832] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.162456][ T5832] usb 9-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 787.201223][ T5832] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.224237][ T5832] usb 9-1: config 0 descriptor?? [ 787.374846][T13595] loop2: detected capacity change from 0 to 40427 [ 787.427711][T13595] F2FS-fs (loop2): invalid crc value [ 787.431279][ T1197] logitech 0003:046D:C29C.001D: unknown main item tag 0x0 [ 787.447307][ T1197] logitech 0003:046D:C29C.001D: unknown main item tag 0x0 [ 787.454807][ T1197] logitech 0003:046D:C29C.001D: unknown main item tag 0x0 [ 787.472401][ T1197] logitech 0003:046D:C29C.001D: unknown main item tag 0x0 [ 787.488016][T13595] F2FS-fs (loop2): Found nat_bits in checkpoint [ 787.497157][ T1197] logitech 0003:046D:C29C.001D: unknown main item tag 0x0 [ 787.504520][ T1197] logitech 0003:046D:C29C.001D: unknown main item tag 0x0 [ 787.562665][ T1197] logitech 0003:046D:C29C.001D: hidraw0: USB HID vb4.30 Device [HID 046d:c29c] on usb-dummy_hcd.0-1/input0 [ 787.667262][T13595] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 787.831925][ T1197] logitech 0003:046D:C29C.001D: no inputs found [ 787.867314][ T1197] usb 1-1: USB disconnect, device number 23 [ 787.970487][T12777] syz-executor: attempt to access beyond end of device [ 787.970487][T12777] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 788.004074][T12777] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 788.093685][ T5832] hid-led: probe of 0003:0FC5:B080.001E failed with error -71 [ 788.136675][ T5832] usb 9-1: USB disconnect, device number 13 [ 788.515934][T13606] loop7: detected capacity change from 0 to 256 [ 788.536731][T13606] exfat: Deprecated parameter 'utf8' [ 788.551041][T13606] exfat: Deprecated parameter 'namecase' [ 788.563672][T13606] exfat: Deprecated parameter 'utf8' [ 788.586654][T13606] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 788.663867][T13606] syz.7.1797: attempt to access beyond end of device [ 788.663867][T13606] loop7: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 788.694342][T13606] syz.7.1797: attempt to access beyond end of device [ 788.694342][T13606] loop7: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 788.730090][T13611] syz.7.1797: attempt to access beyond end of device [ 788.730090][T13611] loop7: rw=0, sector=34359738488, nr_sectors = 1 limit=256 [ 788.745244][ T28] audit: type=1800 audit(1771862390.974:166): pid=13606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1797" name="file1" dev="loop7" ino=1048666 res=0 errno=0 [ 788.901621][T13615] loop7: detected capacity change from 0 to 512 [ 788.916057][T13615] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 788.936829][T13615] EXT4-fs (loop7): orphan cleanup on readonly fs [ 788.944302][T13615] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:512: comm syz.7.1799: Block bitmap for bg 0 marked uninitialized [ 788.973697][T13615] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 788.983309][T13615] EXT4-fs (loop7): 1 orphan inode deleted [ 788.987203][ T1197] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 788.990446][T13615] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 789.068671][T13615] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 789.081024][T13615] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 789.092845][T13615] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:512: comm syz.7.1799: Block bitmap for bg 0 marked uninitialized [ 789.107225][T10872] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 789.131721][T10580] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.169585][ T1197] usb 3-1: unable to get BOS descriptor or descriptor too short [ 789.179023][ T1197] usb 3-1: not running at top speed; connect to a high speed hub [ 789.189896][ T1197] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 789.200800][ T1197] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 789.222875][ T1197] usb 3-1: string descriptor 0 read error: -22 [ 789.231535][ T1197] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 789.244836][ T1197] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.255042][T13619] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1800'. [ 789.280128][ T1197] usb 3-1: 0:2 : does not exist [ 789.290203][T10872] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 789.299941][T10872] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.314766][T10872] usb 9-1: config 0 descriptor?? [ 789.813110][T10872] [drm] Initialized udl 0.0.1 20120220 for 9-1:0.0 on minor 2 [ 789.844284][T10872] [drm] Initialized udl on minor 2 [ 789.953047][T10872] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 790.011036][T10872] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 790.215922][ T27] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 790.216134][ T9] usb 9-1: USB disconnect, device number 14 [ 790.243920][ T27] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 790.274697][ T1197] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 790.352141][ T1197] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 790.407495][ T1197] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 790.487712][ T1197] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 790.537207][ T1197] usb 3-1: USB disconnect, device number 22 [ 790.985578][T13632] loop8: detected capacity change from 0 to 2048 [ 790.995702][T13632] EXT4-fs: Ignoring removed i_version option [ 791.061102][T13632] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 791.112752][T13632] EXT4-fs error (device loop8): ext4_find_extent:936: inode #2: comm syz.8.1804: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 791.160888][T13632] EXT4-fs (loop8): Remounting filesystem read-only [ 791.221829][T10800] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.647387][T13639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 791.982631][T13646] loop2: detected capacity change from 0 to 64 [ 792.296475][T13652] loop7: detected capacity change from 0 to 512 [ 792.340056][T13652] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 792.429675][T13652] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 792.485597][T13652] ext4 filesystem being mounted at /172/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 792.676933][T10580] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 792.995455][T13650] loop2: detected capacity change from 0 to 32768 [ 793.139021][T13650] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 793.356594][T13650] XFS (loop2): Ending clean mount [ 793.376989][T13650] XFS (loop2): Quotacheck needed: Please wait. [ 793.511497][T13650] XFS (loop2): Quotacheck: Done. [ 793.681620][T13654] loop0: detected capacity change from 0 to 32768 [ 793.766586][T13654] JBD2: Ignoring recovery information on journal [ 793.778966][T13660] loop8: detected capacity change from 0 to 32768 [ 793.798241][T13660] (syz.8.1814,13660,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 793.855711][T13660] (syz.8.1814,13660,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 793.894032][T12777] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 793.910691][T13654] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 794.003511][T13660] JBD2: Ignoring recovery information on journal [ 794.174031][T13660] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 794.405294][ T5770] ocfs2: Unmounting device (7,0) on (node local) [ 794.704629][T10800] ocfs2: Unmounting device (7,8) on (node local) [ 794.887379][ T27] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 795.020792][T13682] loop7: detected capacity change from 0 to 1024 [ 795.082489][ T27] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 795.119145][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 795.150928][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 795.177191][ T27] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 795.177942][T13684] Bluetooth: MGMT ver 1.22 [ 795.212486][ T27] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 795.224881][ T1071] hfsplus: b-tree write err: -5, ino 4 [ 795.251441][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.291621][ T27] usb 3-1: config 0 descriptor?? [ 795.727809][ T27] wacom 0003:056A:0331.001F: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.2-1/input0 [ 795.779206][T13692] loop8: detected capacity change from 0 to 8192 [ 795.817198][ T9] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 795.837169][T13680] loop0: detected capacity change from 0 to 40427 [ 795.842886][T13692] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 795.846915][T13680] F2FS-fs (loop0): build fault injection attr: rate: 25, type: 0x7ffff [ 795.866954][T13680] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x7698c [ 795.901988][T13680] F2FS-fs (loop0): invalid crc value [ 795.902739][T13692] REISERFS (device loop8): found reiserfs format "3.5" with non-standard journal [ 795.916352][T11929] usb 3-1: USB disconnect, device number 23 [ 795.916815][T13692] REISERFS (device loop8): using ordered data mode [ 795.930922][T13692] reiserfs: using flush barriers [ 795.940541][T13692] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 795.964696][T13692] REISERFS (device loop8): checking transaction log (loop8) [ 795.974221][T13680] F2FS-fs (loop0): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x21d/0x9b0 [ 795.993646][T13680] F2FS-fs (loop0): Found nat_bits in checkpoint [ 796.006958][T13692] REISERFS (device loop8): Using rupasov hash to sort names [ 796.028505][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 796.048965][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 796.069125][T13692] REISERFS (device loop8): using 3.5.x disk format [ 796.076015][T13692] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 796.091153][T13680] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0 [ 796.097155][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 796.126763][T13692] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 796.153453][ T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 796.177524][T13692] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 796.189757][ T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 246 [ 796.194738][T13680] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 796.207187][T13692] REISERFS warning (device loop8): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 796.237166][ T9] usb 8-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 796.246295][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.265869][T13692] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 796.283627][T13680] F2FS-fs (loop0): inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0xda/0x1d0 [ 796.306265][ T9] usb 8-1: config 0 descriptor?? [ 796.330869][T13690] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 796.370380][T13680] F2FS-fs (loop0): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x187/0x910 [ 796.462631][T13692] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 796.492075][T13692] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 796.492703][ T5770] syz-executor: attempt to access beyond end of device [ 796.492703][ T5770] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 796.516004][T13692] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 796.544393][T13692] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 796.556979][ T5770] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 796.597399][T13692] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 796.937400][T13705] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 796.945826][T13705] IPv6: NLM_F_CREATE should be set when creating new route [ 796.953323][T13705] IPv6: NLM_F_CREATE should be set when creating new route [ 796.960639][T13705] IPv6: NLM_F_CREATE should be set when creating new route [ 796.975033][ T27] usb 8-1: USB disconnect, device number 12 [ 796.982228][T12780] Bluetooth: hci4: Opcode 0x0c03 failed: -19 [ 797.002413][T13705] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 797.341648][T13712] loop0: detected capacity change from 0 to 256 [ 797.361679][T13712] exfat: Deprecated parameter 'namecase' [ 797.393425][T13712] exfat: Deprecated parameter 'utf8' [ 797.464190][T13712] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 797.727145][T13715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1830'. [ 797.797143][T13715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1830'. [ 797.848293][T13715] netlink: 'syz.2.1830': attribute type 14 has an invalid length. [ 797.944714][T13717] loop7: detected capacity change from 0 to 2048 [ 798.098878][T13717] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 798.192284][T13717] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 798.491709][T10580] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 798.556924][T13710] loop8: detected capacity change from 0 to 131072 [ 798.641005][T13710] F2FS-fs (loop8): Found nat_bits in checkpoint [ 798.717194][T13710] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 798.880171][T13710] F2FS-fs (loop8): access invalid blkaddr:0 [ 798.886951][T13710] CPU: 1 PID: 13710 Comm: syz.8.1829 Not tainted syzkaller #0 [ 798.894555][T13710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 798.904670][T13710] Call Trace: [ 798.907987][T13710] [ 798.910951][T13710] dump_stack_lvl+0x18c/0x250 [ 798.915911][T13710] ? show_regs_print_info+0x20/0x20 [ 798.921181][T13710] ? __up_read+0x2b6/0x6b0 [ 798.925939][T13710] f2fs_is_valid_blkaddr+0xef8/0x1580 [ 798.931368][T13710] sanity_check_extent_cache+0xfc/0x1f0 [ 798.936981][T13710] f2fs_iget+0x33c5/0x47e0 [ 798.941575][T13710] f2fs_lookup+0x37f/0x780 [ 798.946042][T13710] ? f2fs_encrypted_symlink_getattr+0x50/0x50 [ 798.952146][T13710] ? d_hash_and_lookup+0x1b0/0x1b0 [ 798.957317][T13710] ? __init_waitqueue_head+0xa9/0x150 [ 798.962740][T13710] __lookup_slow+0x2a1/0x400 [ 798.967393][T13710] ? lookup_one_len+0x2e0/0x2e0 [ 798.972297][T13710] ? try_to_unlazy+0x34c/0x5a0 [ 798.977099][T13710] ? down_read+0x1ac/0x2e0 [ 798.981622][T13710] lookup_slow+0x53/0x70 [ 798.985926][T13710] walk_component+0x2be/0x3f0 [ 798.990640][T13710] ? path_lookupat+0x15c/0x440 [ 798.995455][T13710] path_lookupat+0x169/0x440 [ 799.000104][T13710] filename_lookup+0x228/0x560 [ 799.004925][T13710] ? hashlen_string+0x110/0x110 [ 799.009960][T13710] ? __might_fault+0xaa/0x120 [ 799.014685][T13710] vfs_statx+0x112/0x680 [ 799.019064][T13710] ? __check_object_size+0x506/0xa20 [ 799.024402][T13710] ? strncpy_from_user+0x197/0x2d0 [ 799.029556][T13710] ? vfs_fstatat+0x1b0/0x1b0 [ 799.034293][T13710] ? getname_flags+0x20a/0x500 [ 799.039113][T13710] __x64_sys_newstat+0x12d/0x1e0 [ 799.044187][T13710] ? __ia32_sys_fstat+0x250/0x250 [ 799.049369][T13710] ? lockdep_hardirqs_on+0x98/0x150 [ 799.054613][T13710] do_syscall_64+0x55/0xa0 [ 799.059083][T13710] ? clear_bhb_loop+0x40/0x90 [ 799.063944][T13710] ? clear_bhb_loop+0x40/0x90 [ 799.068666][T13710] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 799.074600][T13710] RIP: 0033:0x7f4443f9c629 [ 799.079050][T13710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 799.099269][T13710] RSP: 002b:00007f4444edd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 799.107738][T13710] RAX: ffffffffffffffda RBX: 00007f4444215fa0 RCX: 00007f4443f9c629 [ 799.115781][T13710] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000005640 [ 799.123908][T13710] RBP: 00007f4444032b39 R08: 0000000000000000 R09: 0000000000000000 [ 799.132103][T13710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 799.140539][T13710] R13: 00007f4444216038 R14: 00007f4444215fa0 R15: 00007fffaa14b2c8 [ 799.148572][T13710] [ 799.152983][T13710] F2FS-fs (loop8): sanity_check_extent_cache: inode (ino=4) extent info [0, 0, 5178624] is incorrect, run fsck to fix [ 799.994282][T13735] loop7: detected capacity change from 0 to 32768 [ 800.191597][T13730] loop2: detected capacity change from 0 to 32768 [ 800.262888][T13735] XFS (loop7): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 800.621446][T13730] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 800.904210][T13735] XFS (loop7): Starting recovery (logdev: internal) [ 800.985071][T13730] XFS (loop2): Ending clean mount [ 801.009659][T13735] XFS (loop7): Ending recovery (logdev: internal) [ 801.023164][T13730] XFS (loop2): Quotacheck needed: Please wait. [ 801.217552][T13730] XFS (loop2): Quotacheck: Done. [ 801.298148][T10580] XFS (loop7): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 801.477303][ T28] audit: type=1800 audit(1771862403.684:167): pid=13730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1835" name="file1" dev="loop2" ino=9286 res=0 errno=0 [ 801.644206][T13766] loop0: detected capacity change from 0 to 256 [ 801.842842][T12777] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 802.104076][T13769] loop0: detected capacity change from 0 to 1024 [ 802.128593][T13769] EXT4-fs: Ignoring removed nomblk_io_submit option [ 802.156488][T13769] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 802.185793][T13771] loop7: detected capacity change from 0 to 512 [ 802.208284][T13771] EXT4-fs: Ignoring removed mblk_io_submit option [ 802.222827][T13769] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 802.247018][T13771] EXT4-fs (loop7): Test dummy encryption mode enabled [ 802.254063][T13771] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 802.275301][T13769] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854c01c, mo2=0003] [ 802.295334][T13769] System zones: 0-1, 3-36 [ 802.353693][T13771] EXT4-fs (loop7): 1 truncate cleaned up [ 802.369773][T13769] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 802.391731][T13771] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 802.821942][T13771] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 802.874304][T10580] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 802.934482][T13786] loop8: detected capacity change from 0 to 256 [ 803.122575][T13789] loop7: detected capacity change from 0 to 64 [ 803.124941][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 803.205952][T13790] loop2: detected capacity change from 0 to 512 [ 803.250933][ T28] audit: type=1800 audit(1771862405.474:168): pid=13789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1847" name="file1" dev="loop7" ino=21 res=0 errno=0 [ 803.424277][ T7003] kworker/u4:15: attempt to access beyond end of device [ 803.424277][ T7003] loop7: rw=1, sector=65, nr_sectors = 1 limit=64 [ 803.425941][T13794] loop0: detected capacity change from 0 to 8 [ 803.467700][ T7003] Buffer I/O error on dev loop7, logical block 65, lost async page write [ 803.482643][ T7003] kworker/u4:15: attempt to access beyond end of device [ 803.482643][ T7003] loop7: rw=1, sector=66, nr_sectors = 1 limit=64 [ 803.506845][ T7003] Buffer I/O error on dev loop7, logical block 66, lost async page write [ 803.510342][T13794] SQUASHFS error: Failed to read block 0x4de: -5 [ 803.520097][ T7003] kworker/u4:15: attempt to access beyond end of device [ 803.520097][ T7003] loop7: rw=1, sector=67, nr_sectors = 1 limit=64 [ 803.533988][T13794] SQUASHFS error: Failed to read block 0x4de: -5 [ 803.537101][ T7003] Buffer I/O error on dev loop7, logical block 67, lost async page write [ 803.551184][ T7003] kworker/u4:15: attempt to access beyond end of device [ 803.551184][ T7003] loop7: rw=1, sector=68, nr_sectors = 1 limit=64 [ 803.564942][ T7003] Buffer I/O error on dev loop7, logical block 68, lost async page write [ 803.594136][ T7003] kworker/u4:15: attempt to access beyond end of device [ 803.594136][ T7003] loop7: rw=1, sector=72, nr_sectors = 1 limit=64 [ 803.605834][T13794] SQUASHFS error: Failed to read block 0x4de: -5 [ 803.610530][ T7003] Buffer I/O error on dev loop7, logical block 72, lost async page write [ 803.632631][T13794] SQUASHFS error: Failed to read block 0x4de: -5 [ 803.648590][ T7003] kworker/u4:15: attempt to access beyond end of device [ 803.648590][ T7003] loop7: rw=1, sector=73, nr_sectors = 1 limit=64 [ 803.667633][ T7003] Buffer I/O error on dev loop7, logical block 73, lost async page write [ 803.674275][T13794] SQUASHFS error: Failed to read block 0x4de: -5 [ 803.684227][ T7003] kworker/u4:15: attempt to access beyond end of device [ 803.684227][ T7003] loop7: rw=1, sector=76, nr_sectors = 1 limit=64 [ 803.689031][T13797] loop2: detected capacity change from 0 to 1024 [ 803.698851][ T7003] Buffer I/O error on dev loop7, logical block 76, lost async page write [ 803.719097][ T28] audit: type=1800 audit(1771862405.934:169): pid=13794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1851" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 803.741015][ T7003] kworker/u4:15: attempt to access beyond end of device [ 803.741015][ T7003] loop7: rw=1, sector=77, nr_sectors = 1 limit=64 [ 803.755505][ T7003] Buffer I/O error on dev loop7, logical block 77, lost async page write [ 803.767811][ T7003] kworker/u4:15: attempt to access beyond end of device [ 803.767811][ T7003] loop7: rw=1, sector=78, nr_sectors = 24 limit=64 [ 803.779291][T13797] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 803.797327][ T9] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 803.917672][T13803] loop7: detected capacity change from 0 to 1024 [ 803.980642][T12777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 804.005824][ T9] usb 9-1: config 0 has an invalid interface number: 237 but max is 0 [ 804.037405][ T9] usb 9-1: config 0 has no interface number 0 [ 804.043825][ T9] usb 9-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 804.073866][ T9] usb 9-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 804.129083][T13803] hfsplus: request for non-existent node 16777216 in B*Tree [ 804.142194][ T9] usb 9-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 804.145677][T13803] hfsplus: request for non-existent node 16777216 in B*Tree [ 804.179580][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.194316][T13803] hfsplus: request for non-existent node 16777216 in B*Tree [ 804.201588][ T9] usb 9-1: Product: syz [ 804.217558][T13803] hfsplus: request for non-existent node 16777216 in B*Tree [ 804.220430][ T9] usb 9-1: Manufacturer: syz [ 804.261152][ T9] usb 9-1: SerialNumber: syz [ 804.283046][ T9] usb 9-1: config 0 descriptor?? [ 804.309482][ T12] hfsplus: request for non-existent node 16777216 in B*Tree [ 804.330598][ T12] hfsplus: request for non-existent node 16777216 in B*Tree [ 804.589963][ T27] usb 9-1: USB disconnect, device number 15 [ 804.659485][T13817] loop2: detected capacity change from 0 to 1024 [ 805.655009][T13826] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1862'. [ 805.876683][T13829] loop8: detected capacity change from 0 to 256 [ 805.938033][T13829] exfat: Deprecated parameter 'namecase' [ 805.962257][T13829] exfat: Deprecated parameter 'utf8' [ 805.980378][T13812] loop0: detected capacity change from 0 to 40427 [ 806.009901][T13812] F2FS-fs (loop0): invalid crc value [ 806.035225][T13812] F2FS-fs (loop0): Found nat_bits in checkpoint [ 806.055536][T13829] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 806.247592][T13812] F2FS-fs (loop0): Start checkpoint disabled! [ 806.266935][T13832] loop7: detected capacity change from 0 to 4096 [ 806.282931][T13834] loop2: detected capacity change from 0 to 4096 [ 806.296590][T13812] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 806.324646][T13832] ntfs: (device loop7): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 806.374839][T13832] ntfs: (device loop7): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 806.426002][T13836] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 806.450172][T13832] ntfs: (device loop7): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 806.535457][T13832] ntfs: (device loop7): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 806.592330][T13832] ntfs: (device loop7): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 806.633026][T13838] loop8: detected capacity change from 0 to 1024 [ 806.635112][T13832] ntfs: volume version 3.1. [ 806.702602][T13832] ntfs: (device loop7): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 806.722445][T13838] hfsplus: xattr searching failed [ 806.736442][T13832] ntfs: (device loop7): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 806.761928][ T28] audit: type=1800 audit(1771862408.974:170): pid=13838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1866" name="file1" dev="loop8" ino=20 res=0 errno=0 [ 806.776622][T13838] hfsplus: xattr searching failed [ 806.802269][T13832] ntfs: (device loop7): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 806.818651][ T1328] kworker/u4:9: attempt to access beyond end of device [ 806.818651][ T1328] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 806.859164][T13834] syz.2.1865 (13834) used greatest stack depth: 19920 bytes left [ 806.871648][T13838] hfsplus: xattr searching failed [ 806.882529][T13832] ntfs: (device loop7): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 806.899067][ T1328] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 806.917214][ T1328] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 806.926415][T13832] ntfs: (device loop7): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 807.003271][T13832] ntfs: (device loop7): load_and_init_quota(): Failed to load $Quota/$Q index. [ 807.028489][T13832] ntfs: (device loop7): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 807.222779][T13843] loop8: detected capacity change from 0 to 256 [ 807.303845][T13843] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x8277d129, utbl_chksum : 0xe619d30d) [ 807.784302][T13848] loop7: detected capacity change from 0 to 512 [ 807.864093][T13848] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 807.905164][T13848] EXT4-fs (loop7): orphan cleanup on readonly fs [ 807.935341][T13848] EXT4-fs error (device loop7): mb_free_blocks:1954: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 808.008088][T13848] EXT4-fs (loop7): Remounting filesystem read-only [ 808.042202][T13848] EXT4-fs (loop7): 1 truncate cleaned up [ 808.069613][T13848] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 808.180371][T13854] sp0: Synchronizing with TNC [ 808.436343][T10580] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.947366][T13841] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 809.062578][T13873] set_capacity_and_notify: 1 callbacks suppressed [ 809.062596][T13873] loop7: detected capacity change from 0 to 256 [ 809.077940][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.084449][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.154207][T13841] XFS (loop2): Ending clean mount [ 809.245282][T13841] XFS (loop2): Quotacheck needed: Please wait. [ 809.402315][T13841] XFS (loop2): Quotacheck: Done. [ 809.544113][T12777] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 810.328891][T10872] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 810.607219][T10872] usb 1-1: Using ep0 maxpacket: 8 [ 810.620415][T10872] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 810.637142][T10872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.658672][T10872] pvrusb2: Hardware description: Terratec Grabster AV400 [ 810.671897][T10872] pvrusb2: ********** [ 810.675971][T10872] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 810.699136][T10872] pvrusb2: Important functionality might not be entirely working. [ 810.707406][T10872] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 810.734203][T10872] pvrusb2: ********** [ 810.898388][ T2322] pvrusb2: Invalid write control endpoint [ 810.983995][ T5771] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 811.101788][ T2322] pvrusb2: Invalid write control endpoint [ 811.128158][ T2322] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 811.163994][ T2322] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 811.172605][T13887] loop7: detected capacity change from 0 to 40427 [ 811.181000][ T2322] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 811.193513][ T2322] pvrusb2: Device being rendered inoperable [ 811.199936][ T5771] usb 9-1: Using ep0 maxpacket: 16 [ 811.211464][T13887] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 811.216901][T13877] pvrusb2: Attempted to execute control transfer when device not ok [ 811.235384][T13887] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 811.240838][ T5771] usb 9-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.262239][ T2322] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 811.266688][T13887] F2FS-fs (loop7): invalid crc value [ 811.270234][ T5771] usb 9-1: config 0 interface 0 has no altsetting 0 [ 811.281116][ T27] usb 1-1: USB disconnect, device number 24 [ 811.282608][ T2322] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 811.295933][ T5771] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 811.324890][ T5771] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.350736][T13887] F2FS-fs (loop7): Found nat_bits in checkpoint [ 811.391466][ T5771] usb 9-1: config 0 descriptor?? [ 811.412993][ T2322] pvrusb2: Attached sub-driver cx25840 [ 811.435236][ T2322] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 811.455711][ T2322] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 811.522136][T13887] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 811.538491][T13887] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 812.085277][T13900] loop0: detected capacity change from 0 to 64 [ 812.160199][T13900] Trying to free block not in datazone [ 812.196634][T13900] Trying to free block not in datazone [ 812.229149][T13900] Trying to free block not in datazone [ 812.234679][T13900] Trying to free block not in datazone [ 812.244800][T13901] syz.0.1884: attempt to access beyond end of device [ 812.244800][T13901] loop0: rw=0, sector=8192, nr_sectors = 2 limit=64 [ 812.306184][T13900] Trying to free block not in datazone [ 812.323100][T13901] Trying to free block not in datazone [ 812.332891][T13900] Trying to free block not in datazone [ 812.358644][T13901] Trying to free block not in datazone [ 812.363417][ T5771] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 812.372334][ T5771] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 812.374785][T13900] Trying to free block not in datazone [ 812.380782][ T5771] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 812.393382][ T5771] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 812.400677][ T5771] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 812.409402][ T5771] mcp2221 0003:04D8:00DD.0020: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 812.425060][T13901] Trying to free block not in datazone [ 812.431800][T13900] Trying to free block not in datazone [ 812.437373][T13900] Trying to free block not in datazone [ 812.443108][T13900] Trying to free block not in datazone [ 812.448943][T13900] Trying to free block not in datazone [ 812.454710][T13900] Trying to free block not in datazone [ 812.460560][T13900] Trying to free block not in datazone [ 812.466052][T13900] Trying to free block not in datazone [ 812.471753][T13900] Trying to free block not in datazone [ 812.477732][T13900] Trying to free block not in datazone [ 812.483416][T13900] Trying to free block not in datazone [ 812.489230][T13900] Trying to free block not in datazone [ 812.494896][T13900] Trying to free block not in datazone [ 812.509954][T13900] Trying to free block not in datazone [ 812.515575][T13900] Trying to free block not in datazone [ 812.530132][T13900] Trying to free block not in datazone [ 812.540554][T13900] Trying to free block not in datazone [ 812.558178][T13900] Trying to free block not in datazone [ 812.563891][T13900] Trying to free block not in datazone [ 812.592505][T13900] Trying to free block not in datazone [ 812.806790][T13900] Trying to free block not in datazone [ 812.812908][ T5771] usb 9-1: USB disconnect, device number 16 [ 812.837315][T13900] Trying to free block not in datazone [ 812.856869][T13900] Trying to free block not in datazone [ 812.897555][T13900] Trying to free block not in datazone [ 812.938079][T13900] Trying to free block not in datazone [ 812.974533][T13900] Trying to free block not in datazone [ 813.038141][T13900] Trying to free block not in datazone [ 813.218057][T13900] Trying to free block not in datazone [ 813.307087][T13900] Trying to free block not in datazone [ 813.377186][T13900] Trying to free block not in datazone [ 813.387324][T13900] Trying to free block not in datazone [ 813.402837][T13900] Trying to free block not in datazone [ 813.421259][T13900] Trying to free block not in datazone [ 813.426809][T13900] Trying to free block not in datazone [ 813.463495][T13900] Trying to free block not in datazone [ 813.477144][T13900] Trying to free block not in datazone [ 813.525765][T13900] Trying to free block not in datazone [ 813.556214][T13900] Trying to free block not in datazone [ 813.586903][T13900] Trying to free block not in datazone [ 813.594016][T13912] loop8: detected capacity change from 0 to 4096 [ 813.604657][T13900] Trying to free block not in datazone [ 813.622215][T13900] Trying to free block not in datazone [ 813.637190][T13900] Trying to free block not in datazone [ 813.653103][T13900] Trying to free block not in datazone [ 813.663240][T13900] Trying to free block not in datazone [ 813.673379][T13900] Trying to free block not in datazone [ 813.687266][T13900] Trying to free block not in datazone [ 813.692799][T13900] Trying to free block not in datazone [ 813.707095][T13900] Trying to free block not in datazone [ 813.722915][T13900] Trying to free block not in datazone [ 813.737155][T13900] Trying to free block not in datazone [ 813.757126][T13900] Trying to free block not in datazone [ 813.762839][T13900] Trying to free block not in datazone [ 813.805580][T13900] Trying to free block not in datazone [ 813.827231][T13900] Trying to free block not in datazone [ 813.857554][T13900] Trying to free block not in datazone [ 813.880539][T13900] Trying to free block not in datazone [ 813.886100][T13900] Trying to free block not in datazone [ 813.912126][T13900] Trying to free block not in datazone [ 813.929621][T13900] Trying to free block not in datazone [ 813.940575][T13900] Trying to free block not in datazone [ 813.963492][T13900] Trying to free block not in datazone [ 813.980688][T13900] Trying to free block not in datazone [ 814.018420][T13900] Trying to free block not in datazone [ 814.037107][T13900] Trying to free block not in datazone [ 814.067402][T13900] Trying to free block not in datazone [ 814.072948][T13900] Trying to free block not in datazone [ 814.119600][T13900] Trying to free block not in datazone [ 814.130218][T13900] Trying to free block not in datazone [ 814.135748][T13900] Trying to free block not in datazone [ 814.142264][T13900] Trying to free block not in datazone [ 814.148961][T13900] Trying to free block not in datazone [ 814.157184][T13900] Trying to free block not in datazone [ 814.426534][T13900] Trying to free block not in datazone [ 814.629948][T13900] Trying to free block not in datazone [ 814.645664][T13900] Trying to free block not in datazone [ 814.677167][T13900] Trying to free block not in datazone [ 814.852386][T13900] Trying to free block not in datazone [ 814.884977][T13900] Trying to free block not in datazone [ 814.896472][T13900] Trying to free block not in datazone [ 814.907628][T13900] Trying to free block not in datazone [ 814.913444][T13900] Trying to free block not in datazone [ 814.922769][T13900] Trying to free block not in datazone [ 814.933736][T13900] Trying to free block not in datazone [ 814.945760][T13900] Trying to free block not in datazone [ 815.015185][T13927] loop7: detected capacity change from 0 to 4096 [ 815.095851][T13900] Trying to free block not in datazone [ 815.139644][T13900] Trying to free block not in datazone [ 815.160995][T13927] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 815.163260][T13900] Trying to free block not in datazone [ 815.202766][T13927] ntfs3: loop7: Failed to initialize $Extend/$ObjId. [ 815.205804][T13900] Trying to free block not in datazone [ 815.225557][T13900] Trying to free block not in datazone [ 815.249436][T13900] Trying to free block not in datazone [ 815.259562][T13900] Trying to free block not in datazone [ 815.274961][T13900] Trying to free block not in datazone [ 815.299085][T13900] Trying to free block not in datazone [ 815.304787][T13900] Trying to free block not in datazone [ 815.328951][T13900] Trying to free block not in datazone [ 815.334489][T13900] Trying to free block not in datazone [ 815.389703][T13900] Trying to free block not in datazone [ 815.426148][T13900] Trying to free block not in datazone [ 815.465432][T13900] Trying to free block not in datazone [ 815.472079][T13927] ntfs3: loop7: ino=1e, "file1" attr_set_size [ 815.486960][T13900] Trying to free block not in datazone [ 815.488363][T13915] loop2: detected capacity change from 0 to 40427 [ 815.494443][T13900] Trying to free block not in datazone [ 815.514193][T13900] Trying to free block not in datazone [ 815.522250][T13900] Trying to free block not in datazone [ 815.527458][T13915] F2FS-fs (loop2): invalid crc value [ 815.530275][T13900] Trying to free block not in datazone [ 815.543375][T13915] F2FS-fs (loop2): Ignore s_resuid=980643439, s_resgid=0 w/o reserve_root [ 815.545272][T13900] Trying to free block not in datazone [ 815.565787][T13900] Trying to free block not in datazone [ 815.576804][T13900] Trying to free block not in datazone [ 815.585965][T13900] Trying to free block not in datazone [ 815.591720][T13900] Trying to free block not in datazone [ 815.601636][T13915] F2FS-fs (loop2): Found nat_bits in checkpoint [ 815.608546][T13900] Trying to free block not in datazone [ 815.608561][T13900] Trying to free block not in datazone [ 815.620740][T13900] Trying to free block not in datazone [ 815.635585][T13900] Trying to free block not in datazone [ 815.642961][T13900] Trying to free block not in datazone [ 815.648786][T13900] Trying to free block not in datazone [ 815.654430][T13900] Trying to free block not in datazone [ 815.660733][T13900] Trying to free block not in datazone [ 815.666365][T13900] Trying to free block not in datazone [ 815.672158][T13900] Trying to free block not in datazone [ 815.677957][T13900] Trying to free block not in datazone [ 815.684123][T13900] Trying to free block not in datazone [ 815.689975][T13900] Trying to free block not in datazone [ 815.695654][T13900] Trying to free block not in datazone [ 815.701544][T13900] Trying to free block not in datazone [ 815.707336][T13900] Trying to free block not in datazone [ 815.713023][T13900] Trying to free block not in datazone [ 815.718703][T13900] Trying to free block not in datazone [ 815.724469][T13900] Trying to free block not in datazone [ 815.730733][T13900] Trying to free block not in datazone [ 815.736449][T13900] Trying to free block not in datazone [ 815.748559][T13900] Trying to free block not in datazone [ 815.759519][T13900] Trying to free block not in datazone [ 815.765454][T13900] Trying to free block not in datazone [ 815.771263][T13900] Trying to free block not in datazone [ 815.776839][T13900] Trying to free block not in datazone [ 815.782647][T13900] Trying to free block not in datazone [ 815.788966][T13900] Trying to free block not in datazone [ 815.794594][T13900] Trying to free block not in datazone [ 815.800340][T13900] Trying to free block not in datazone [ 815.812752][T13900] Trying to free block not in datazone [ 815.815381][T13915] F2FS-fs (loop2): Start checkpoint disabled! [ 815.819634][T13900] Trying to free block not in datazone [ 815.830470][T13900] Trying to free block not in datazone [ 815.836140][T13900] Trying to free block not in datazone [ 815.841927][T13900] Trying to free block not in datazone [ 815.845690][T13915] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 815.847720][T13900] Trying to free block not in datazone [ 815.847730][T13900] Trying to free block not in datazone [ 815.847739][T13900] Trying to free block not in datazone [ 815.847747][T13900] Trying to free block not in datazone [ 815.847754][T13900] Trying to free block not in datazone [ 815.847761][T13900] Trying to free block not in datazone [ 815.847768][T13900] Trying to free block not in datazone [ 815.847775][T13900] Trying to free block not in datazone [ 815.847781][T13900] Trying to free block not in datazone [ 815.847789][T13900] Trying to free block not in datazone [ 815.847796][T13900] Trying to free block not in datazone [ 815.847804][T13900] Trying to free block not in datazone [ 815.847811][T13900] Trying to free block not in datazone [ 815.847819][T13900] Trying to free block not in datazone [ 815.847827][T13900] Trying to free block not in datazone [ 815.847834][T13900] Trying to free block not in datazone [ 815.847842][T13900] Trying to free block not in datazone [ 815.847849][T13900] Trying to free block not in datazone [ 815.847857][T13900] Trying to free block not in datazone [ 815.847863][T13900] Trying to free block not in datazone [ 815.847870][T13900] Trying to free block not in datazone [ 815.862894][T13934] loop7: detected capacity change from 0 to 1024 [ 815.867297][T13900] Trying to free block not in datazone [ 815.938184][T13915] F2FS-fs (loop2): Ignore s_resuid=980643439, s_resgid=0 w/o reserve_root [ 816.041832][T13900] Trying to free block not in datazone [ 816.053099][T13900] Trying to free block not in datazone [ 816.077133][T13900] Trying to free block not in datazone [ 816.082755][T13900] Trying to free block not in datazone [ 816.097157][T13900] Trying to free block not in datazone [ 816.102695][T13900] Trying to free block not in datazone [ 816.119669][T11705] hfsplus: b-tree write err: -5, ino 4 [ 816.138392][T13900] Trying to free block not in datazone [ 816.144094][T13900] Trying to free block not in datazone [ 816.247185][T13900] Trying to free block not in datazone [ 816.252976][T13900] Trying to free block not in datazone [ 816.268233][T13900] Trying to free block not in datazone [ 816.284072][T13900] Trying to free block not in datazone [ 816.299456][T13900] Trying to free block not in datazone [ 816.305062][T13900] Trying to free block not in datazone [ 816.316888][T13938] loop8: detected capacity change from 0 to 4096 [ 816.329139][T13900] Trying to free block not in datazone [ 816.346786][T13938] ntfs3: loop8: Different NTFS sector size (4096) and media sector size (512). [ 816.356390][T13900] Trying to free block not in datazone [ 816.364448][T12780] Bluetooth: hci0: unexpected event for opcode 0x2029 [ 816.366860][T13900] Trying to free block not in datazone [ 816.408923][T13900] Trying to free block not in datazone [ 816.414471][T13900] Trying to free block not in datazone [ 816.420185][T13900] Trying to free block not in datazone [ 816.425837][T13900] Trying to free block not in datazone [ 816.432700][T13900] Trying to free block not in datazone [ 816.438253][T13900] Trying to free block not in datazone [ 816.443933][T13900] Trying to free block not in datazone [ 816.449778][T13900] Trying to free block not in datazone [ 816.455376][T13900] Trying to free block not in datazone [ 816.461005][T13900] Trying to free block not in datazone [ 816.466595][T13900] Trying to free block not in datazone [ 816.472660][T13900] Trying to free block not in datazone [ 816.541154][T13900] Trying to free block not in datazone [ 816.554877][T13900] Trying to free block not in datazone [ 816.591944][T13900] Trying to free block not in datazone [ 816.603544][T13900] Trying to free block not in datazone [ 816.617258][T13900] Trying to free block not in datazone [ 816.627154][T13900] Trying to free block not in datazone [ 816.647334][T13900] Trying to free block not in datazone [ 816.652869][T13900] Trying to free block not in datazone [ 816.679020][T13900] Trying to free block not in datazone [ 816.695947][T13900] Trying to free block not in datazone [ 816.706105][T13900] Trying to free block not in datazone [ 816.718814][T13900] Trying to free block not in datazone [ 816.724344][T13900] Trying to free block not in datazone [ 816.747137][T13900] Trying to free block not in datazone [ 816.767460][T13900] Trying to free block not in datazone [ 816.773153][T13900] Trying to free block not in datazone [ 816.797240][T13900] Trying to free block not in datazone [ 816.812571][T13900] Trying to free block not in datazone [ 816.830574][T13900] Trying to free block not in datazone [ 816.836209][T13900] Trying to free block not in datazone [ 816.852222][T13900] Trying to free block not in datazone [ 816.872487][T13900] Trying to free block not in datazone [ 816.882637][T13900] Trying to free block not in datazone [ 816.897676][T13900] Trying to free block not in datazone [ 816.923793][T13900] Trying to free block not in datazone [ 816.939021][T13900] Trying to free block not in datazone [ 816.944560][T13900] Trying to free block not in datazone [ 816.994628][T13900] Trying to free block not in datazone [ 816.996637][T13945] loop8: detected capacity change from 0 to 128 [ 817.019996][T13900] Trying to free block not in datazone [ 817.036116][T13900] Trying to free block not in datazone [ 817.038601][T13945] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 817.046308][T13900] Trying to free block not in datazone [ 817.083468][T13900] Trying to free block not in datazone [ 817.102335][T13900] Trying to free block not in datazone [ 817.124294][T13945] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 817.141432][T13949] loop2: detected capacity change from 0 to 2048 [ 817.158571][T13900] Trying to free block not in datazone [ 817.164101][T13900] Trying to free block not in datazone [ 817.201676][T13900] Trying to free block not in datazone [ 817.222493][T13949] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 817.236383][T13900] Trying to free block not in datazone [ 817.263698][T13900] Trying to free block not in datazone [ 817.269225][T13945] EXT4-fs error (device loop8): ext4_validate_block_bitmap:421: comm syz.8.1898: bg 0: bad block bitmap checksum [ 817.284841][T13949] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 817.333133][T13900] Trying to free block not in datazone [ 817.348545][T10800] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 817.382080][T13900] Trying to free block not in datazone [ 817.391761][T13900] Trying to free block not in datazone [ 817.427091][T13900] Trying to free block not in datazone [ 817.432633][T13900] Trying to free block not in datazone [ 817.459106][T13900] Trying to free block not in datazone [ 817.464910][T13900] Trying to free block not in datazone [ 817.504529][T13900] Trying to free block not in datazone [ 817.532007][T13900] Trying to free block not in datazone [ 817.557139][T13900] Trying to free block not in datazone [ 817.562787][T13900] Trying to free block not in datazone [ 817.584768][T13900] Trying to free block not in datazone [ 817.597342][T13900] Trying to free block not in datazone [ 817.611034][T13900] Trying to free block not in datazone [ 817.616762][T13900] Trying to free block not in datazone [ 817.626979][T13900] Trying to free block not in datazone [ 817.633937][T13900] Trying to free block not in datazone [ 817.644342][T13900] Trying to free block not in datazone [ 817.684651][T13943] loop7: detected capacity change from 0 to 40427 [ 817.718702][T13943] F2FS-fs (loop7): Invalid segment/section count (31, 24 x 1) [ 817.760744][T13943] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 817.822631][T13943] F2FS-fs (loop7): invalid crc value [ 817.877610][T13943] F2FS-fs (loop7): Ignore s_resuid=0, s_resgid=60928 w/o reserve_root [ 818.385229][T13943] F2FS-fs (loop7): Found nat_bits in checkpoint [ 818.715632][T13966] loop8: detected capacity change from 0 to 1024 [ 818.780779][T13966] EXT4-fs error (device loop8): ext4_map_blocks:608: inode #3: block 2: comm syz.8.1903: lblock 2 mapped to illegal pblock 2 (length 1) [ 818.831781][T13966] __quota_error: 3 callbacks suppressed [ 818.831802][T13966] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 818.867480][T13969] loop2: detected capacity change from 0 to 1024 [ 818.868803][T13966] EXT4-fs error (device loop8): ext4_map_blocks:608: inode #3: block 48: comm syz.8.1903: lblock 0 mapped to illegal pblock 48 (length 1) [ 818.934139][T13943] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 818.964562][T13943] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 818.973521][T13966] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 819.062975][T13973] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 819.089038][T13973] cramfs: wrong magic [ 819.182810][T13966] EXT4-fs error (device loop8): ext4_acquire_dquot:6949: comm syz.8.1903: Failed to acquire dquot type 0 [ 819.270230][T13966] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 819.334609][T13966] EXT4-fs error (device loop8): ext4_evict_inode:252: inode #11: comm syz.8.1903: mark_inode_dirty error [ 819.624438][T13966] EXT4-fs warning (device loop8): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 819.639175][T13966] EXT4-fs (loop8): 1 orphan inode deleted [ 819.680381][T13966] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 819.758749][ T1328] EXT4-fs error (device loop8): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 819.871185][ T1328] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 819.914545][ T1328] EXT4-fs error (device loop8): ext4_release_dquot:6985: comm kworker/u4:9: Failed to release dquot type 0 [ 820.122773][T10800] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.172056][ T12] EXT4-fs error (device loop8): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 820.221213][ T12] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 820.252064][ T12] EXT4-fs error (device loop8): ext4_release_dquot:6985: comm kworker/u4:1: Failed to release dquot type 0 [ 820.306842][T10800] EXT4-fs error (device loop8): __ext4_get_inode_loc:4489: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 820.337441][T10800] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 820.362497][T10800] EXT4-fs error (device loop8): ext4_quota_off:7233: inode #3: comm syz-executor: mark_inode_dirty error [ 820.427521][T12780] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 820.436690][T12780] Bluetooth: hci0: Injecting HCI hardware error event [ 820.447420][T12780] Bluetooth: hci0: hardware error 0x00 [ 822.465773][T14002] loop7: detected capacity change from 0 to 1024 [ 822.596885][T12780] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 822.609242][T14003] loop8: detected capacity change from 0 to 64 [ 822.710144][T14003] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 822.912941][ T1328] hfsplus: b-tree write err: -5, ino 4 [ 823.261937][T14011] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 823.305496][T14011] cramfs: wrong magic [ 823.997357][T14013] loop8: detected capacity change from 0 to 4096 [ 824.022349][T14013] ntfs3: loop8: Different NTFS sector size (2048) and media sector size (512). [ 824.102848][T14013] ntfs3: loop8: Failed to initialize $Extend/$ObjId. [ 825.177702][T14037] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1923'. [ 825.194201][T14035] loop0: detected capacity change from 0 to 2048 [ 825.230485][T14035] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 825.297672][T14035] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 825.355969][T14042] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 827.507425][T14052] loop2: detected capacity change from 0 to 262144 [ 827.552191][T14052] F2FS-fs (loop2): invalid crc value [ 827.585578][T14052] F2FS-fs (loop2): Found nat_bits in checkpoint [ 827.647246][T14052] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 828.132783][T14052] F2FS-fs (loop2): recover xattr in inode (7), error(0) [ 828.265232][T14069] loop7: detected capacity change from 0 to 256 [ 828.298906][T14069] FAT-fs (loop7): Unrecognized mount option "uni_xlate?1" or missing value [ 828.343190][T14069] tipc: Started in network mode [ 828.358496][T14069] tipc: Node identity 5f3d302c73686f72, cluster identity 4711 [ 828.375345][T14069] tipc: Enabling of bearer rejected, failed to enable media [ 828.654482][T14072] loop7: detected capacity change from 0 to 1024 [ 828.672221][T14072] EXT4-fs: Ignoring removed orlov option [ 828.778707][T14072] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 828.977393][T14072] EXT4-fs error (device loop7): ext4_lookup:1858: inode #15: comm syz.7.1934: unexpected EA_INODE flag [ 829.015876][T14080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1933'. [ 829.155629][T10580] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 829.506105][T14060] loop8: detected capacity change from 0 to 32768 [ 829.637460][T14060] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 829.830373][T14060] XFS (loop8): Ending clean mount [ 829.982344][T10800] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 830.302188][T14112] loop0: detected capacity change from 0 to 1024 [ 830.759396][ T11] hfsplus: found bad thread record in catalog [ 831.219100][T14091] loop2: detected capacity change from 0 to 40427 [ 831.243676][T14091] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 831.257386][T14091] F2FS-fs (loop2): Image doesn't support compression [ 831.274523][T14091] F2FS-fs (loop2): Image doesn't support compression [ 831.295837][T14091] F2FS-fs (loop2): invalid crc value [ 831.376574][T14091] F2FS-fs (loop2): Found nat_bits in checkpoint [ 831.530193][T14091] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 831.731894][T14131] warning: `syz.7.1952' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 831.862321][T12777] syz-executor: attempt to access beyond end of device [ 831.862321][T12777] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 831.938792][T12777] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 833.090072][T14150] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1959'. [ 833.120137][T14150] gretap0: entered promiscuous mode [ 833.172637][T11929] hid-generic 0103:0004:0000.0021: unknown main item tag 0x0 [ 833.186224][T11929] hid-generic 0103:0004:0000.0021: unknown main item tag 0x0 [ 833.196609][T11929] hid-generic 0103:0004:0000.0021: unknown main item tag 0x0 [ 833.204566][T11929] hid-generic 0103:0004:0000.0021: unknown main item tag 0x0 [ 833.253561][T11929] hid-generic 0103:0004:0000.0021: unknown main item tag 0x0 [ 833.270716][T11929] hid-generic 0103:0004:0000.0021: unknown main item tag 0x0 [ 833.287607][T11929] hid-generic 0103:0004:0000.0021: unknown main item tag 0x0 [ 833.305537][T11929] hid-generic 0103:0004:0000.0021: unknown main item tag 0x0 [ 833.318348][T11929] hid-generic 0103:0004:0000.0021: unknown main item tag 0x0 [ 833.336495][T11929] hid-generic 0103:0004:0000.0021: unknown main item tag 0x0 [ 833.350811][T11929] hid-generic 0103:0004:0000.0021: unknown main item tag 0x0 [ 833.403863][T11929] hid-generic 0103:0004:0000.0021: hidraw0: HID v0.02 Device [syz0] on syz1 [ 834.313859][T14158] fido_id[14158]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 834.547960][T12780] Bluetooth: Wrong link type (-57) [ 834.637251][T14145] loop7: detected capacity change from 0 to 32768 [ 835.906909][T14156] loop8: detected capacity change from 0 to 32768 [ 835.968012][T14156] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.1961 (14156) [ 836.047825][T14156] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 836.111181][T14156] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 836.157168][T14156] BTRFS info (device loop8): using free space tree [ 836.333620][T14166] loop0: detected capacity change from 0 to 40427 [ 836.377456][T14166] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 836.385780][T14166] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 836.457287][T14166] F2FS-fs (loop0): Image doesn't support compression [ 836.469381][T14166] F2FS-fs (loop0): invalid crc value [ 836.482716][T14166] F2FS-fs (loop0): Found nat_bits in checkpoint [ 836.507981][T14156] BTRFS error (device loop8): open_ctree failed: -4 [ 836.639602][T14166] F2FS-fs (loop0): Start checkpoint disabled! [ 836.676691][T14166] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 838.052832][T14205] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 838.275205][T14205] cramfs: wrong magic [ 838.421870][ T1071] kworker/u4:5: attempt to access beyond end of device [ 838.421870][ T1071] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 838.478036][ T1071] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 838.492092][ T1071] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 838.903090][T14197] loop8: detected capacity change from 0 to 32768 [ 838.930039][T14197] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.1970 (14197) [ 839.206056][T14197] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 839.231664][T14197] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 839.247440][T14197] BTRFS info (device loop8): using free space tree [ 839.928312][T14197] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 839.929094][T14197] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 840.003780][T14197] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 840.057894][T14197] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 840.102829][T14197] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 840.166530][T14197] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 840.199028][T14197] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 840.245317][T14232] loop2: detected capacity change from 0 to 512 [ 840.247875][T14197] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 840.282303][T14197] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 840.312843][T14197] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 840.358807][T14232] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 840.368531][T14197] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 840.382618][T14197] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 840.393900][T14232] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 840.437284][T14197] BTRFS error (device loop8): open_ctree failed: -12 [ 840.542835][T14232] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 840.624624][T14232] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2 with error 28 [ 840.681132][T14232] EXT4-fs (loop2): This should not happen!! Data will be lost [ 840.681132][T14232] [ 840.735985][T14232] EXT4-fs (loop2): Total free blocks count 0 [ 840.759085][T14232] EXT4-fs (loop2): Free/Dirty block details [ 840.777580][T14232] EXT4-fs (loop2): free_blocks=65280 [ 840.807772][T14232] EXT4-fs (loop2): dirty_blocks=2 [ 840.812951][T14232] EXT4-fs (loop2): Block reservation details [ 840.827268][T14232] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 840.994695][T12777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 841.557404][T14246] loop0: detected capacity change from 0 to 32768 [ 841.571358][T14246] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop0 scanned by syz.0.1980 (14246) [ 841.749625][T14246] BTRFS info (device loop0): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 841.762656][T14246] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 841.773840][T14246] BTRFS info (device loop0): using free space tree [ 842.650335][T14246] BTRFS info (device loop0): enabling ssd optimizations [ 842.692345][T14246] BTRFS info (device loop0): auto enabling async discard [ 843.073693][ T5770] BTRFS info (device loop0): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 843.991539][T14300] loop7: detected capacity change from 0 to 512 [ 844.016210][T14300] EXT4-fs: Ignoring removed orlov option [ 844.053564][T14300] EXT4-fs: Ignoring removed mblk_io_submit option [ 844.139252][T14300] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 844.195340][T14282] loop8: detected capacity change from 0 to 32768 [ 844.211252][T14300] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #13: comm syz.7.1993: attempt to clear invalid blocks 2 len 1 [ 844.272525][T14282] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.1988 (14282) [ 844.278979][T14300] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 844.360036][T14282] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 844.363552][T14300] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1993: invalid indirect mapped block 1819239214 (level 0) [ 844.406964][T14282] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 844.427858][T14282] BTRFS info (device loop8): using free space tree [ 844.434998][T14300] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1993: invalid indirect mapped block 1819239214 (level 1) [ 844.578962][T14300] EXT4-fs (loop7): 1 truncate cleaned up [ 844.622962][T14300] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 844.643229][T14282] BTRFS info (device loop8): enabling ssd optimizations [ 844.671709][T14282] BTRFS info (device loop8): auto enabling async discard [ 844.854422][T14300] Bluetooth: MGMT ver 1.22 [ 844.918459][T14301] loop2: detected capacity change from 0 to 32768 [ 844.942553][T14301] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.1994 (14301) [ 845.028433][T10580] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 845.049509][T10800] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 845.315389][ T7635] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop8 scanned by udevd (7635) [ 845.382984][ T7632] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 845.480231][T14342] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 845.537860][T14342] cramfs: wrong magic [ 846.547346][T14355] loop0: detected capacity change from 0 to 256 [ 846.584216][T14355] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 846.643187][T14355] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 846.716950][T14355] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xaa2dc89a, utbl_chksum : 0xe619d30d) [ 847.322000][T14367] loop0: detected capacity change from 0 to 128 [ 847.375701][T14367] FAT-fs (loop0): error, clusters badly computed (2 != 0) [ 847.417236][T14367] FAT-fs (loop0): Filesystem has been set read-only [ 847.700606][T14344] loop8: detected capacity change from 0 to 40427 [ 847.734074][ T11] Bluetooth: hci4: Frame reassembly failed (-84) [ 847.766205][T14374] Bluetooth: hci4: Frame reassembly failed (-84) [ 847.795495][T14344] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 847.829504][T14344] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 847.857154][T14344] F2FS-fs (loop8): invalid crc value [ 847.926525][T14344] F2FS-fs (loop8): Found nat_bits in checkpoint [ 848.038769][T14344] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 848.046548][T14344] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 848.054549][T10872] usb 8-1: new low-speed USB device number 13 using dummy_hcd [ 848.256260][T10872] usb 8-1: unable to get BOS descriptor set [ 848.276679][T10872] usb 8-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 848.307140][T10872] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 848.330079][T10872] usb 8-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 848.347403][T10872] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 848.362113][T10872] usb 8-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 848.387146][T10872] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 848.400555][T10872] usb 8-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 848.427122][T10872] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 848.447746][T10872] usb 8-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 848.467118][T10872] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 848.491579][T10872] usb 8-1: string descriptor 0 read error: -22 [ 848.507714][T10872] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 848.527232][T10872] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.563327][T10872] usb 8-1: invalid UAC_HEADER (v1) [ 848.653303][T10872] snd-usb-audio: probe of 8-1:1.0 failed with error -22 [ 848.789311][T14389] loop2: detected capacity change from 0 to 32768 [ 848.807266][T14389] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.2015 (14389) [ 848.865180][T14389] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 848.887869][T10872] usb 8-1: USB disconnect, device number 13 [ 848.905599][T14389] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 848.939186][T14389] BTRFS info (device loop2): enabling auto defrag [ 848.945701][T14389] BTRFS info (device loop2): use no compression [ 848.977141][T14389] BTRFS info (device loop2): force clearing of disk cache [ 848.984529][T14389] BTRFS info (device loop2): max_inline at 4096 [ 849.007201][T14389] BTRFS info (device loop2): disabling free space tree [ 849.166589][T14389] BTRFS info (device loop2): enabling ssd optimizations [ 849.186890][T14389] BTRFS info (device loop2): auto enabling async discard [ 849.231606][T14389] BTRFS info (device loop2): rebuilding free space tree [ 849.265641][T14413] netlink: 'syz.8.2019': attribute type 25 has an invalid length. [ 849.281369][T14389] BTRFS info (device loop2): disabling free space tree [ 849.294414][T14389] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 849.310001][T14389] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 849.385957][T14415] loop8: detected capacity change from 0 to 16 [ 849.399456][T14415] erofs: (device loop8): mounted with root inode @ nid 36. [ 849.609071][T12777] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 849.799891][ T8556] Bluetooth: hci4: command 0x1003 tx timeout [ 849.807747][T12780] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 849.915711][T14421] xt_cgroup: invalid path, errno=-2 [ 850.081950][ T5835] ------------[ cut here ]------------ [ 850.089149][ T5835] sysfs group 'power' not found for kobject 'ueagle-atm!eagleI.fw' [ 850.125939][ T5847] usb 3-1: [UEAGLE-ATM] firmware is not available [ 850.167767][ T5835] WARNING: CPU: 1 PID: 5835 at fs/sysfs/group.c:284 sysfs_remove_group+0x178/0x2a0 [ 850.177203][ T5835] Modules linked in: [ 850.181150][ T5835] CPU: 1 PID: 5835 Comm: kworker/1:5 Not tainted syzkaller #0 [ 850.188772][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 850.199987][ T5835] Workqueue: events request_firmware_work_func [ 850.206205][ T5835] RIP: 0010:sysfs_remove_group+0x178/0x2a0 [ 850.212337][ T5835] Code: 48 8b 1b 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 7a 21 c9 ff 49 8b 17 48 c7 c7 80 b6 da 8a 48 89 de e8 68 b3 3a ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c2 f1 70 ff [ 850.232248][ T5835] RSP: 0018:ffffc90004aff800 EFLAGS: 00010246 [ 850.238655][ T5835] RAX: de84aa4507659800 RBX: ffffffff8b41ad40 RCX: ffff888029101e00 [ 850.246764][ T5835] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 850.255062][ T5835] RBP: dffffc0000000000 R08: ffffc90004aff407 R09: 1ffff9200095fe80 [ 850.263319][ T5835] R10: dffffc0000000000 R11: fffff5200095fe81 R12: 1ffffffff16835ac [ 850.272114][ T5835] R13: 0000000000000001 R14: ffff88805ec2c2e8 R15: ffff88802aa42008 [ 850.280240][ T5835] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 850.289418][ T5835] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 850.297229][ T5835] CR2: 0000200000027000 CR3: 0000000059416000 CR4: 00000000003506e0 [ 850.305453][ T5835] Call Trace: [ 850.309091][ T5835] [ 850.312074][ T5835] ? sysfs_unmerge_group+0x10d/0x130 [ 850.317473][ T5835] device_del+0x251/0x910 [ 850.321880][ T5835] ? kill_device+0x160/0x160 [ 850.326613][ T5835] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 850.332802][ T5835] ? _raw_spin_unlock+0x40/0x40 [ 850.337757][ T5835] ? complete_all+0xd0/0x1d0 [ 850.342408][ T5835] firmware_fallback_sysfs+0x682/0x930 [ 850.348055][ T5835] _request_firmware+0xf27/0x1510 [ 850.353250][ T5835] ? request_firmware+0x50/0x50 [ 850.358220][ T5835] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 850.364433][ T5835] ? read_lock_is_recursive+0x20/0x20 [ 850.369959][ T5835] request_firmware_work_func+0xb0/0x1b0 [ 850.375748][ T5835] ? process_scheduled_works+0x96f/0x15d0 [ 850.381688][ T5835] process_scheduled_works+0xa5d/0x15d0 [ 850.387378][ T5835] ? assign_work+0x430/0x430 [ 850.392026][ T5835] ? assign_work+0x3d0/0x430 [ 850.396671][ T5835] worker_thread+0xa55/0xfc0 [ 850.401932][ T5835] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 850.408080][ T5835] ? _raw_spin_unlock+0x40/0x40 [ 850.413047][ T5835] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 850.419366][ T5835] kthread+0x2fa/0x390 [ 850.423554][ T5835] ? pr_cont_work+0x560/0x560 [ 850.428734][ T5835] ? kthread_blkcg+0xd0/0xd0 [ 850.433340][ T5835] ret_from_fork+0x48/0x80 [ 850.437799][ T5835] ? kthread_blkcg+0xd0/0xd0 [ 850.442414][ T5835] ret_from_fork_asm+0x11/0x20 [ 850.447241][ T5835] [ 850.450275][ T5835] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 850.457745][ T5835] CPU: 1 PID: 5835 Comm: kworker/1:5 Not tainted syzkaller #0 [ 850.465308][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 850.475546][ T5835] Workqueue: events request_firmware_work_func [ 850.482342][ T5835] Call Trace: [ 850.485655][ T5835] [ 850.488664][ T5835] dump_stack_lvl+0x18c/0x250 [ 850.493643][ T5835] ? show_regs_print_info+0x20/0x20 [ 850.499036][ T5835] ? load_image+0x400/0x400 [ 850.503805][ T5835] panic+0x2dc/0x730 [ 850.507717][ T5835] ? bpf_jit_dump+0xd0/0xd0 [ 850.512234][ T5835] ? ret_from_fork_asm+0x11/0x20 [ 850.517183][ T5835] __warn+0x2e0/0x470 [ 850.521270][ T5835] ? sysfs_remove_group+0x178/0x2a0 [ 850.526590][ T5835] ? sysfs_remove_group+0x178/0x2a0 [ 850.531912][ T5835] report_bug+0x2be/0x4f0 [ 850.536332][ T5835] ? sysfs_remove_group+0x178/0x2a0 [ 850.541554][ T5835] ? sysfs_remove_group+0x178/0x2a0 [ 850.546861][ T5835] ? sysfs_remove_group+0x17a/0x2a0 [ 850.552343][ T5835] handle_bug+0xcf/0x120 [ 850.556692][ T5835] exc_invalid_op+0x1a/0x50 [ 850.561232][ T5835] asm_exc_invalid_op+0x1a/0x20 [ 850.566097][ T5835] RIP: 0010:sysfs_remove_group+0x178/0x2a0 [ 850.571917][ T5835] Code: 48 8b 1b 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 7a 21 c9 ff 49 8b 17 48 c7 c7 80 b6 da 8a 48 89 de e8 68 b3 3a ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c2 f1 70 ff [ 850.591641][ T5835] RSP: 0018:ffffc90004aff800 EFLAGS: 00010246 [ 850.597921][ T5835] RAX: de84aa4507659800 RBX: ffffffff8b41ad40 RCX: ffff888029101e00 [ 850.606087][ T5835] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 850.614061][ T5835] RBP: dffffc0000000000 R08: ffffc90004aff407 R09: 1ffff9200095fe80 [ 850.622335][ T5835] R10: dffffc0000000000 R11: fffff5200095fe81 R12: 1ffffffff16835ac [ 850.630396][ T5835] R13: 0000000000000001 R14: ffff88805ec2c2e8 R15: ffff88802aa42008 [ 850.638377][ T5835] ? sysfs_unmerge_group+0x10d/0x130 [ 850.643778][ T5835] device_del+0x251/0x910 [ 850.648113][ T5835] ? kill_device+0x160/0x160 [ 850.652733][ T5835] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 850.658882][ T5835] ? _raw_spin_unlock+0x40/0x40 [ 850.663899][ T5835] ? complete_all+0xd0/0x1d0 [ 850.668772][ T5835] firmware_fallback_sysfs+0x682/0x930 [ 850.674238][ T5835] _request_firmware+0xf27/0x1510 [ 850.679272][ T5835] ? request_firmware+0x50/0x50 [ 850.684126][ T5835] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 850.690202][ T5835] ? read_lock_is_recursive+0x20/0x20 [ 850.695776][ T5835] request_firmware_work_func+0xb0/0x1b0 [ 850.701423][ T5835] ? process_scheduled_works+0x96f/0x15d0 [ 850.707156][ T5835] process_scheduled_works+0xa5d/0x15d0 [ 850.712742][ T5835] ? assign_work+0x430/0x430 [ 850.717332][ T5835] ? assign_work+0x3d0/0x430 [ 850.721923][ T5835] worker_thread+0xa55/0xfc0 [ 850.726508][ T5835] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 850.732396][ T5835] ? _raw_spin_unlock+0x40/0x40 [ 850.737257][ T5835] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 850.743281][ T5835] kthread+0x2fa/0x390 [ 850.747458][ T5835] ? pr_cont_work+0x560/0x560 [ 850.752142][ T5835] ? kthread_blkcg+0xd0/0xd0 [ 850.756747][ T5835] ret_from_fork+0x48/0x80 [ 850.761173][ T5835] ? kthread_blkcg+0xd0/0xd0 [ 850.765943][ T5835] ret_from_fork_asm+0x11/0x20 [ 850.770717][ T5835] [ 850.774125][ T5835] Kernel Offset: disabled [ 850.778645][ T5835] Rebooting in 86400 seconds..