last executing test programs: 6m50.675734014s ago: executing program 0 (id=67): socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3}, 0x18) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x2301) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) keyctl$set_timeout(0xf, 0x0, 0x9) creat(&(0x7f00000001c0)='./file0\x00', 0x8) 6m49.505914237s ago: executing program 0 (id=69): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x4008af24, &(0x7f0000002600)={0x0, 0x1000, ""/4096}) 6m49.37635768s ago: executing program 0 (id=71): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, 0x0, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a80)={0x9, 0x0, [{0x8000000, 0x1000, &(0x7f0000001600)=""/4096}, {0x0, 0x1000, &(0x7f0000002600)=""/4096}, {0x80a0000, 0xf3, &(0x7f0000000700)=""/243}, {0x1, 0x7, &(0x7f0000000500)=""/7}, {0xdddd0000, 0xd2, &(0x7f0000000800)=""/210}, {0x1000, 0x4a, &(0x7f0000000600)=""/74}, {0xeeee0000, 0x1000, &(0x7f0000003f40)=""/4096}, {0x8000000, 0x1000, &(0x7f0000004f40)=""/4096}, {0xf7f59002, 0x8, &(0x7f0000000540)=""/8}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) 6m48.702899033s ago: executing program 0 (id=72): mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000003cc0)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000280)={0xa0, 0x0, 0x0, {{0x20, 0x1, 0x5, 0x6, 0x1000, 0x6, {0x1, 0x0, 0x65cd, 0x0, 0xffffffffffff15ef, 0x9, 0x1, 0x7fff, 0x7, 0x4000, 0xe, r3, 0x0, 0x4, 0x10000}}, {0x0, 0x1}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) mkdir(&(0x7f0000000040)='./file1\x00', 0x22) mkdir(&(0x7f0000000300)='./bus\x00', 0x80) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 6m47.944116507s ago: executing program 0 (id=74): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4000, &(0x7f0000000280)={[{@dax_always}, {@block_validity}]}, 0x0, 0x4bc, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, 0x0) 6m46.718854741s ago: executing program 0 (id=75): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = socket$inet6(0xa, 0x3, 0x3c) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0x7}, 0x1c) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000100)="1400000052004f7fb3e45f2024d2f1c9fb47", 0x12) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 6m31.397574089s ago: executing program 32 (id=75): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = socket$inet6(0xa, 0x3, 0x3c) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0x7}, 0x1c) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000100)="1400000052004f7fb3e45f2024d2f1c9fb47", 0x12) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 3m7.238035807s ago: executing program 2 (id=823): syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000000)='./file2\x00', 0x1600008, &(0x7f0000000100)={[{@umask={'umask', 0x3d, 0x3}}, {@nodecompose}, {@part={'part', 0x3d, 0x7}}, {@nodecompose}, {@nobarrier}, {@nls={'nls', 0x3d, 'iso8859-1'}}, {@type={'type', 0x3d, "25f205c1"}}]}, 0x3, 0x643, &(0x7f0000000c00)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(r0, &(0x7f0000000280)='./file0\x00', 0x200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r1 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x200a00}]) 3m6.694830368s ago: executing program 2 (id=825): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000600)={[{@nouser_xattr}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0x3, 0x570, &(0x7f0000000680)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x34, r3, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xa000000}]}, 0x34}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') socket$packet(0x11, 0x2, 0x300) 2m54.472131386s ago: executing program 2 (id=855): pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x7151, 0x0) 2m53.495346215s ago: executing program 2 (id=863): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af00000000", 0x17) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000180)=@srh={0x7, 0x0, 0x4, 0x0, 0x37, 0xf8, 0x7}, 0x8) 2m53.418893976s ago: executing program 2 (id=864): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x58, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) setpriority(0x0, 0x0, 0xacf0165) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) faccessat(r0, &(0x7f0000000440)='./file0\x00', 0x23) rt_sigaction(0x40, &(0x7f0000000300)={&(0x7f0000000080)="d11cf3c441f9517fa5d9f666c12ffac482f5acd6c481f5fc6359c441395738430f73d698f30f1addc4c1cde5f2", 0x58000002, &(0x7f0000000140)="3666410f64f4c421f853fd0f01dcc4c1ffe6d4c64306078fa8189ee6e9db118f69d09358f1460f3809f10fb35200", {[0x1]}}, &(0x7f00000003c0)={&(0x7f0000000340)="660f380b87d4280000f20f1c042ac421f92ba43402000000c4017c77664d0f38f50766400f73dc0e43d8f746fff3c4615165b66a6444d7c461d173ff45", 0x0, &(0x7f0000000380)="c4625592447799c442795820c4e2e147f4c462f3f50864f343d1008f8878cea60a0000000bc441e958d38fa888a344f6950946ecc44129d106"}, 0x8, &(0x7f0000000400)) r2 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7fffffff}, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0xa}, [@nested={0x4, 0xb3}]}, 0x18}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x1, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 2m53.111974142s ago: executing program 2 (id=865): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000600)={[{@nouser_xattr}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0x3, 0x570, &(0x7f0000000680)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x34, r3, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xa000000}]}, 0x34}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') socket$packet(0x11, 0x2, 0x300) 2m33.774620958s ago: executing program 33 (id=865): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000600)={[{@nouser_xattr}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0x3, 0x570, &(0x7f0000000680)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x34, r3, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xa000000}]}, 0x34}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') socket$packet(0x11, 0x2, 0x300) 9.24420365s ago: executing program 4 (id=1669): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0x1}}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) close(0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) 7.868475837s ago: executing program 5 (id=1673): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1a4, &(0x7f0000000440)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa}}, {@data_err_ignore}, {@grpquota}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000000800)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x381, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) 7.666245391s ago: executing program 4 (id=1675): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x400000013) 6.802989008s ago: executing program 5 (id=1679): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240)) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x0, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xff000000], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 6.72005752s ago: executing program 4 (id=1680): socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xa4, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = accept(r2, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000001240)='./file2\x00', 0x8410, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77a08347691f71d1e4132f09405a5b81867a01cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1"], 0x1, 0x2a0, &(0x7f00000001c0)="$eJzs3T9rA2UYAPDnkjSNOqSIiyJ4oINTaV1dGqWC2EmJoA4abAuShEILASsYO/UTOPo9/AguLn4DwVVwa4fKyeXumtSmf2hjCvb3m57ee8/zPrkX0inPffX6sL97kMTJ2e/RaiVR24qtOE9iLWpR+SEaAQD8f5xnWfyVPSSzUVt8NwDAMhT//wtP3QsAsByffPb5R52dne2P07QVr7ZPR90kIoano26x3tmPb2IQe7ER7biIyC4V8Qcf7mxHI82txVvD8aibZw6//LWs3/kzYpK/Ge1Ym5+/mRYu81+sukujs79S/dGOV+bnv/Pv/BiOo9uMt9+c6X892vHb13EQg9iNPHea//1mmr6f/Xj23Rf5Nnl+Uovu6uS+qay+pCMBAAAAAAAAAAAAAAAAAAAAAOAZWE/TpBjfM5nfk1+azM8ZdesXk/X1tDI732dczQdKqkLFfKAsyhE94yx+qubrbKRpmpU3TvMb8VrDiwUAAAAAAAAAAAAAAAAAAAAgd/Ttcb83GOwdLiSopgFUP+t/aJ2tmStvxHG/V7+54Or995qdNpD3euvN0WjEgh7LXcELeT8Lr7w6PdxPowiqg1noXi+/VxQ97vfScql6yP1ectderergfp5dasYjG2uWHWRXz7R12erVrOaCnkbzpblLf2dZdr867/5RnFF5JZmM2Ljf7itlMPcD5kHr+ln8cnPBG78y6o/+0gEAAAAAAAAAAAAAAAAAAOaa/uh3zuLJram1/6wpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFiy6fv/q6AVEVevXAvGZfJt95RBMw6PnvgjAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Az8EwAA//9I2EsX") r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0xa00, 0x30) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002200)={'wlan1\x00'}) truncate(&(0x7f0000000900)='./file1\x00', 0xbf39) close(r4) recvfrom$inet(r3, &(0x7f0000000000)=""/46, 0x2e, 0x40010000, &(0x7f00000000c0)={0x2, 0x4a21, @remote}, 0xffffffffffffff1a) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x20000, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdNo=', @ANYRESHEX]) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000840)="db9f6270eda3e025a625cad590d257e799c1a41df05b4c27f85fabb34a69d39048aedb8f5042675f03bba2343f41cbe352211ba85d2becd7cdfd937022b683806be96c072fe736e90b45913ccef74dd3f22ab4539c515d2d574bd1779032ef56536b4d20d8482e9781605fd303b3dfee2fcf66140a15f2d0da426d0f91c3e0a1d1f29d80a4a908bc8085c9618ec470c66c78f9", 0x93) umount2(&(0x7f0000000040)='.\x00', 0x2) unshare(0x62040200) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000280)='./file0\x00', 0x3, &(0x7f0000000040)=ANY=[], 0x4, 0x67b, &(0x7f0000000bc0)="$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") 4.758566138s ago: executing program 1 (id=1686): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) 3.747173937s ago: executing program 3 (id=1688): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000040)='./bus\x00', 0x808008, &(0x7f0000000380)=ANY=[], 0x4, 0x2df, &(0x7f0000000400)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='trusted\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r4}) keyctl$KEYCTL_MOVE(0x1e, r4, 0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfc}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x5, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x23}, {[@lsrr={0x83, 0x7, 0xc0, [@multicast1]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x103042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) socket$kcm(0x29, 0x0, 0x0) rename(&(0x7f0000000180)='./file2\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040818) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 3.742443227s ago: executing program 1 (id=1689): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x10080, &(0x7f00000003c0)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030303031362c6e6c733d63703835322c6465636f6d706f73652c747970653dcfccdbe12c6e6f6465636f6d706f73652c756d61736b3d30303030303030303030303030303030303030333130342c747970653d4d3cceb82c002ad7284323ea56bc99a14dd378534ee75c7630ac8f558227d608170ed1eff17f7fe5d3ae8967f7d801ab"], 0x44, 0x706, &(0x7f0000001440)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x2, 0x0) 3.440079723s ago: executing program 1 (id=1691): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048000) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x2400}, 0xa5, 0x4, 0x10100000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xfffffffc}]}}]}, 0x3c}}, 0x800) sendmmsg$inet(r0, &(0x7f0000007480)=[{{&(0x7f0000000140)={0x2, 0x8000, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000e00)="1a51d9f5e9a297", 0x7}], 0x1, &(0x7f0000000bc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x18}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001580)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000002700)=[{&(0x7f00000015c0)="0d01c294cd298798834e3e", 0xb}, {&(0x7f0000001600)="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", 0xc40}, {&(0x7f0000002600)="1bdcc2392f773627062d83f816dc767a69736df6cbc1f80426e42271c859867b832c983882a095b4524303c73e867344e65a98364540f327955a9817fd51f96c0d74ac8137c16fda774dbc2ccc77bdd631f837931b54f1580367ca917818c4f6743e688f5d389f55871691e0cb6f53d62eafe2cf2f9448ff7509491499dd4dd05005b4206a658506148e7f6eb9face1179", 0x91}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x4, 0x20001044) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) 3.225796758s ago: executing program 5 (id=1692): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000003cc0)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000280)={0xa0, 0x0, 0x0, {{0x20, 0x1, 0x5, 0x6, 0x1000, 0x6, {0x1, 0x0, 0x65cd, 0x0, 0xffffffffffff15ef, 0x9, 0x1, 0x7fff, 0x7, 0x4000, 0xe, r3, 0x0, 0x4, 0x10000}}, {0x0, 0x1}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) mkdir(&(0x7f0000000040)='./file1\x00', 0x22) mkdir(&(0x7f0000000300)='./bus\x00', 0x80) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)) 2.887800054s ago: executing program 1 (id=1693): ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) unshare(0x10000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x17, 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, &(0x7f00000000c0)) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f00000003c0)='./file0\x00', r3, 0x0, 0x343) setrlimit(0xf, &(0x7f0000000380)={0x3, 0x4}) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800) sendmsg$NL80211_CMD_SET_INTERFACE(r4, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, 0x0, 0x8060040) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, 0x0, 0x0) 2.640064999s ago: executing program 6 (id=1694): socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3}, 0x18) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x2301) keyctl$set_timeout(0xf, 0x0, 0x9) creat(&(0x7f00000001c0)='./file0\x00', 0x8) 2.60741823s ago: executing program 3 (id=1695): r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) connect$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 1.54248323s ago: executing program 6 (id=1696): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280)=0x1, 0x4) socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000340)=0xc6, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x5, @empty}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff20000000000086dd600489f1009c1100fc010000000000000025030000000000ff0200"/51], 0x0) 1.483571201s ago: executing program 1 (id=1697): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r2 = socket(0x400000000010, 0x3, 0x0) socket$inet(0x2, 0x801, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) unshare(0x480) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FD={0x8, 0x6, r1}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.482817441s ago: executing program 5 (id=1698): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(0x0) read$FUSE(r2, &(0x7f000000c400)={0x2020}, 0x2020) semctl$SETVAL(0x0, 0x3, 0x10, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0)=0xffffffffffffffff, 0x3) clock_gettime(0x6, &(0x7f00000003c0)) 1.435909803s ago: executing program 3 (id=1699): migrate_pages(0x0, 0xc5ad, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='mountinfo\x00') syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$igmp(0x2, 0x3, 0x2) fsopen(&(0x7f00000007c0)='erofs\x00', 0x1) socket$inet6(0xa, 0x800000000000002, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r3 = syz_io_uring_setup(0x1052, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f, 0x0, r0}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) io_uring_enter(r3, 0x47bc, 0x0, 0x2, 0x0, 0x0) 1.435716582s ago: executing program 4 (id=1700): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x18) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) statx(0xffffffffffffff9c, 0x0, 0x0, 0x4, 0x0) 1.435066422s ago: executing program 6 (id=1701): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='shortad,partition=00000000000000000005,noadinicb,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00\x00\x00=', @ANYRESDEC, @ANYBLOB=',nostrict,\x00'], 0x1, 0x489, &(0x7f0000000580)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x24002014, 0x0, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0xf0ffff) open(&(0x7f0000000340)='./file1\x00', 0x185102, 0x128) capset(&(0x7f0000000080)={0x20071026}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) setregid(0x0, 0x0) r0 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) fcntl$notify(0xffffffffffffffff, 0x402, 0x1a) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f00000000c0)=ANY=[], 0x841, 0x0) 1.314532635s ago: executing program 4 (id=1702): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240)) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x0, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xff000000], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 1.314316205s ago: executing program 3 (id=1703): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048000) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x2400}, 0xa5, 0x4, 0x10100000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xfffffffc}]}}]}, 0x3c}}, 0x800) sendmmsg$inet(r0, &(0x7f0000007480)=[{{&(0x7f0000000140)={0x2, 0x8000, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000e00)="1a51d9f5e9a297", 0x7}], 0x1, &(0x7f0000000bc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x18}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001580)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000002700)=[{&(0x7f00000015c0)="0d01c294cd298798834e3e", 0xb}, {&(0x7f0000001600)="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", 0xc40}, {&(0x7f0000002600)="1bdcc2392f773627062d83f816dc767a69736df6cbc1f80426e42271c859867b832c983882a095b4524303c73e867344e65a98364540f327955a9817fd51f96c0d74ac8137c16fda774dbc2ccc77bdd631f837931b54f1580367ca917818c4f6743e688f5d389f55871691e0cb6f53d62eafe2cf2f9448ff7509491499dd4dd05005b4206a658506148e7f6eb9face1179", 0x91}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x4, 0x20001044) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) 1.314240305s ago: executing program 5 (id=1704): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000100)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.278941675s ago: executing program 6 (id=1705): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') getdents64(r0, &(0x7f0000001f00)=""/4111, 0x100f) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000002180)=""/4089, 0xfffffffffffffd79) 1.212292006s ago: executing program 3 (id=1706): socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000730000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3}, 0x18) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x2301) keyctl$set_timeout(0xf, 0x0, 0x9) creat(&(0x7f00000001c0)='./file0\x00', 0x8) 1.116031979s ago: executing program 6 (id=1707): openat$fb0(0xffffff9c, &(0x7f0000000200), 0x109282, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x3, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7c, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x80000000, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x5, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x9, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x7, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x5, 0x7, 0x7fff, 0x5a80, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x8, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0xa, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc46, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x8, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x9, 0x2, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x3, 0x3e7, 0xb, 0x3, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x1, 0x7ff, 0x12b, 0x4, 0x1, 0xfffffffa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2e9, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x1, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x738, 0x1, 0x6c1b, 0x80, 0x4, 0x5, 0xb1e, 0x20000d7, 0x80000000, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 983.889361ms ago: executing program 4 (id=1708): socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) socket$netlink(0x10, 0x3, 0xf) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) fcntl$addseals(r1, 0x409, 0x9) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 978.430701ms ago: executing program 1 (id=1709): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000003cc0)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000280)={0xa0, 0x0, 0x0, {{0x20, 0x1, 0x5, 0x6, 0x1000, 0x6, {0x1, 0x0, 0x65cd, 0x0, 0xffffffffffff15ef, 0x9, 0x1, 0x7fff, 0x7, 0x4000, 0xe, r3, 0x0, 0x4, 0x10000}}, {0x0, 0x1}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) mkdir(&(0x7f0000000040)='./file1\x00', 0x22) mkdir(&(0x7f0000000300)='./bus\x00', 0x80) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 52.631999ms ago: executing program 3 (id=1710): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0x4, 0x9, 0x8}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) getpgid(0x0) 52.388439ms ago: executing program 6 (id=1711): socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xa4, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = accept(r2, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000001240)='./file2\x00', 0x8410, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77a08347691f71d1e4132f09405a5b81867a01cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1"], 0x1, 0x2a0, &(0x7f00000001c0)="$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") r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0xa00, 0x30) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002200)={'wlan1\x00'}) truncate(&(0x7f0000000900)='./file1\x00', 0xbf39) close(r4) recvfrom$inet(r3, &(0x7f0000000000)=""/46, 0x2e, 0x40010000, &(0x7f00000000c0)={0x2, 0x4a21, @remote}, 0xffffffffffffff1a) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x20000, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdNo=', @ANYRESHEX]) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000840)="db9f6270eda3e025a625cad590d257e799c1a41df05b4c27f85fabb34a69d39048aedb8f5042675f03bba2343f41cbe352211ba85d2becd7cdfd937022b683806be96c072fe736e90b45913ccef74dd3f22ab4539c515d2d574bd1779032ef56536b4d20d8482e9781605fd303b3dfee2fcf66140a15f2d0da426d0f91c3e0a1d1f29d80a4a908bc8085c9618ec470c66c78f9", 0x93) umount2(&(0x7f0000000040)='.\x00', 0x2) unshare(0x62040200) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000280)='./file0\x00', 0x3, &(0x7f0000000040)=ANY=[], 0x4, 0x67b, &(0x7f0000000bc0)="$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") 0s ago: executing program 5 (id=1712): socket$inet_tcp(0x2, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x22d00, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x40850) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r4, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) close(r5) accept4(r4, 0x0, 0x0, 0x400000000000000) kernel console output (not intermixed with test programs): [ 146.209580][ T4954] loop3: detected capacity change from 0 to 256 [ 146.253352][ T4954] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 146.263214][ T4952] loop4: detected capacity change from 0 to 128 [ 146.280453][ T4352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.303942][ T4954] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 146.316260][ T4952] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 146.369117][ T4954] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 146.383307][ T4352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.586516][ T4352] bond0 (unregistering): Released all slaves [ 147.390687][ T4961] loop1: detected capacity change from 0 to 1024 [ 147.458642][ T4965] loop3: detected capacity change from 0 to 8 [ 147.485688][ T4705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.679091][ T4965] SQUASHFS error: Failed to read block 0x2d7: -5 [ 147.702598][ T4965] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 147.800788][ T26] audit: type=1800 audit(1757088950.835:44): pid=4965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.166" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 148.686817][ T4991] loop3: detected capacity change from 0 to 1024 [ 149.317379][ T4991] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 149.317379][ T4991] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 149.317379][ T4991] [ 149.460007][ T4991] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouser_xattr,auto_da_alloc=0x0000000000000008,,errors=continue. Quota mode: none. [ 149.758527][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.777915][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.965637][ T5000] loop1: detected capacity change from 0 to 512 [ 149.988882][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 150.018120][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.085066][ T5000] EXT4-fs (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 150.144360][ T4705] device veth0_vlan entered promiscuous mode [ 150.162689][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.180042][ T5000] EXT4-fs (loop1): DAX unsupported by block device. [ 150.224493][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.283963][ T4705] device veth1_vlan entered promiscuous mode [ 150.445542][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 150.465835][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 150.481295][ T5009] capability: warning: `syz.2.173' uses deprecated v2 capabilities in a way that may be insecure [ 150.527544][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 150.570790][ T5009] loop2: detected capacity change from 0 to 256 [ 150.577733][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.632147][ T4705] device veth0_macvtap entered promiscuous mode [ 150.707375][ T5009] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 150.728574][ T4705] device veth1_macvtap entered promiscuous mode [ 150.782852][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 150.982177][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 151.404650][ T4705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.502272][ T4705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.563072][ T4705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.590718][ T5020] loop2: detected capacity change from 0 to 256 [ 151.637749][ T4705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.650130][ T5020] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 151.699765][ T4705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.710440][ T4705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.720389][ T4705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.731124][ T4705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.753409][ T5020] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 151.755862][ T4705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.848532][ T5020] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 153.205077][ T26] audit: type=1326 audit(1757088956.235:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5029 comm="syz.2.178" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd35e0fbbe9 code=0x0 [ 153.301619][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 153.325842][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 153.348014][ T5032] loop2: detected capacity change from 0 to 512 [ 153.406329][ T5032] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 153.446037][ T4705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.457635][ T5032] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 153.466891][ T5032] EXT4-fs (loop2): orphan cleanup on readonly fs [ 153.527637][ T4705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.549086][ T5032] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.178: attempt to clear invalid blocks 1024 len 1 [ 153.624922][ T4705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.662946][ T5032] EXT4-fs (loop2): Remounting filesystem read-only [ 153.676133][ T4705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.685127][ T5032] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.178: bg 0: block 361: padding at end of block bitmap is not set [ 153.717246][ T4705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.729815][ T5032] EXT4-fs (loop2): Remounting filesystem read-only [ 153.736382][ T5032] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 153.738473][ T4705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.773458][ T5032] EXT4-fs (loop2): Remounting filesystem read-only [ 153.795622][ T5032] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.178: invalid indirect mapped block 1811939328 (level 0) [ 153.800406][ T4705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.826334][ T4705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.838202][ T4705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.850366][ T5032] EXT4-fs (loop2): Remounting filesystem read-only [ 153.857466][ T5032] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.178: invalid indirect mapped block 2185560079 (level 1) [ 153.903195][ T5032] EXT4-fs (loop2): Remounting filesystem read-only [ 153.914597][ T5032] EXT4-fs (loop2): 1 truncate cleaned up [ 153.926906][ T5041] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 153.932075][ T5032] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,discard,errors=remount-ro,max_dir_size_kb=0x00000000000000ff. Quota mode: none. [ 153.983098][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 154.022092][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 154.132811][ T4705] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.191151][ T4705] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.300375][ T4705] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.856795][ T5063] loop3: detected capacity change from 0 to 1024 [ 154.962278][ T4705] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.410026][ T5063] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 155.410026][ T5063] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 155.410026][ T5063] [ 155.773764][ T5063] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouser_xattr,auto_da_alloc=0x0000000000000008,,errors=continue. Quota mode: none. [ 156.152398][ T5071] loop2: detected capacity change from 0 to 512 [ 156.250165][ T5071] EXT4-fs (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 156.323605][ T5076] loop1: detected capacity change from 0 to 256 [ 156.379369][ T5071] EXT4-fs (loop2): DAX unsupported by block device. [ 156.555351][ T1206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.573523][ T5082] loop4: detected capacity change from 0 to 256 [ 156.625248][ T1206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.642108][ T5076] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 156.789756][ T5076] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 156.789877][ T5082] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 156.811069][ T5082] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 157.110245][ T5082] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0x65b64522, utbl_chksum : 0xe619d30d) [ 157.166927][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 157.229769][ T5076] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 157.269084][ T4334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.343363][ T26] audit: type=1800 audit(1757088960.375:46): pid=5082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.189" name="file1" dev="loop4" ino=1048630 res=0 errno=0 [ 157.360053][ T4334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.787668][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 160.517763][ T5132] loop5: detected capacity change from 0 to 512 [ 160.593480][ T5132] EXT4-fs (loop5): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 160.645884][ T5132] EXT4-fs (loop5): DAX unsupported by block device. [ 161.704237][ T5145] loop1: detected capacity change from 0 to 256 [ 161.783728][ T5148] loop5: detected capacity change from 0 to 164 [ 161.854801][ T5145] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 161.885624][ T5148] Unable to read rock-ridge attributes [ 161.900235][ T5145] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 161.933856][ T5145] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 161.946438][ T5148] process 'syz.5.202' launched './file0' with NULL argv: empty string added [ 161.964929][ T5149] loop3: detected capacity change from 0 to 1024 [ 162.224858][ T5149] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 162.224858][ T5149] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 162.224858][ T5149] [ 162.763326][ T5149] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouser_xattr,auto_da_alloc=0x0000000000000008,,errors=continue. Quota mode: none. [ 163.581340][ T5170] loop4: detected capacity change from 0 to 128 [ 164.019918][ T5170] FAT-fs (loop4): Directory bread(block 32) failed [ 164.453169][ T5170] FAT-fs (loop4): Directory bread(block 33) failed [ 164.499507][ T5170] FAT-fs (loop4): Directory bread(block 34) failed [ 164.569533][ T5170] FAT-fs (loop4): Directory bread(block 35) failed [ 164.577458][ T5170] FAT-fs (loop4): Directory bread(block 36) failed [ 164.614275][ T5170] FAT-fs (loop4): Directory bread(block 37) failed [ 164.637295][ T5170] FAT-fs (loop4): Directory bread(block 38) failed [ 164.686074][ T5170] FAT-fs (loop4): Directory bread(block 39) failed [ 164.735207][ T5170] FAT-fs (loop4): Directory bread(block 40) failed [ 164.759458][ T5170] FAT-fs (loop4): Directory bread(block 41) failed [ 165.073658][ T5189] loop5: detected capacity change from 0 to 512 [ 165.762531][ T5189] EXT4-fs (loop5): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 165.785745][ T5170] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 165.805095][ T5189] EXT4-fs (loop5): DAX unsupported by block device. [ 165.913101][ T5170] FAT-fs (loop4): Filesystem has been set read-only [ 166.138046][ T5196] loop1: detected capacity change from 0 to 1024 [ 167.151082][ T5209] loop5: detected capacity change from 0 to 256 [ 167.279886][ T5196] EXT4-fs (loop1): Ignoring removed bh option [ 167.294960][ T5209] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 167.366612][ T5196] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 167.419352][ T5209] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 167.548605][ T5209] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 167.592486][ T5218] loop4: detected capacity change from 0 to 512 [ 167.613838][ T5222] netlink: 192 bytes leftover after parsing attributes in process `syz.2.217'. [ 167.634515][ T5218] EXT4-fs (loop4): Ignoring removed nobh option [ 167.658609][ T5196] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,resgid=0x0000000000000000,data_err=ignore,grpquota,nodioread_nolock,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 167.765407][ T5218] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.215: iget: bad i_size value: 38620345925642 [ 167.859507][ T5218] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.215: couldn't read orphan inode 15 (err -117) [ 168.120517][ T5218] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 168.219628][ T26] audit: type=1800 audit(1757088971.195:47): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.213" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 168.357141][ T5229] loop2: detected capacity change from 0 to 256 [ 168.567660][ T5229] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 169.726399][ T5245] loop5: detected capacity change from 0 to 1024 [ 169.831012][ T5245] EXT4-fs (loop5): Mount option "nouser_xattr" will be removed by 3.5 [ 169.831012][ T5245] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 169.831012][ T5245] [ 170.051535][ T5245] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 172.465940][ T5257] loop2: detected capacity change from 0 to 256 [ 172.998194][ T5245] EXT4-fs warning (device loop5): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop5. [ 173.760684][ T5271] loop5: detected capacity change from 0 to 256 [ 173.777622][ T5269] loop2: detected capacity change from 0 to 2048 [ 173.804493][ T5271] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 173.837124][ T5269] loop2: p1 < > p3 [ 173.869539][ T4270] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 173.877330][ T5271] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 173.886872][ T5269] loop2: p3 size 134217728 extends beyond EOD, truncated [ 173.917743][ T5271] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 174.109507][ T4270] usb 5-1: Using ep0 maxpacket: 32 [ 174.761200][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 174.771745][ T5284] loop2: detected capacity change from 0 to 1024 [ 174.820935][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 174.974488][ T4270] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.001222][ T4270] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.090812][ T5301] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 175.379942][ T4270] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 175.412435][ T4270] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 175.422260][ T4270] usb 5-1: Product: syz [ 175.426855][ T4270] usb 5-1: Manufacturer: syz [ 176.088720][ T5316] loop3: detected capacity change from 0 to 16 [ 176.184407][ T5316] erofs: (device loop3): mounted with root inode @ nid 36. [ 176.343687][ T5316] erofs: (device loop3): find_target_block_classic: corrupted dir block 8200 @ nid 36 [ 176.387977][ T5322] erofs: (device loop3): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 176.428892][ T5322] erofs: (device loop3): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 176.441282][ T4270] hub 5-1:4.0: USB hub found [ 176.479572][ T4270] hub 5-1:4.0: config failed, hub has too many ports! (err -19) [ 176.490350][ T5322] erofs: (device loop3): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 176.521572][ T5322] erofs: (device loop3): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 176.531675][ T5322] erofs: (device loop3): z_erofs_readahead: readahead error at page 17 @ nid 36 [ 176.542422][ T5322] erofs: (device loop3): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 176.557060][ T5322] erofs: (device loop3): z_erofs_extent_lookback: unknown type 3 @ lcn 9 of nid 36 [ 176.566976][ T5322] erofs: (device loop3): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 176.578405][ T5322] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 40959 of nid 36 [ 176.588824][ T5322] erofs: (device loop3): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 176.598547][ T5322] attempt to access beyond end of device [ 176.598547][ T5322] loop3: rw=524288, want=67108888, limit=16 [ 176.618044][ T5322] attempt to access beyond end of device [ 176.618044][ T5322] loop3: rw=524288, want=736, limit=16 [ 176.640614][ T5322] attempt to access beyond end of device [ 176.640614][ T5322] loop3: rw=524288, want=525160, limit=16 [ 176.652352][ T5322] attempt to access beyond end of device [ 176.652352][ T5322] loop3: rw=524288, want=24, limit=16 [ 176.744928][ T5331] loop5: detected capacity change from 0 to 256 [ 176.754076][ T5332] loop2: detected capacity change from 0 to 128 [ 176.806364][ T5331] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 176.817734][ T4270] usb 5-1: USB disconnect, device number 3 [ 176.907583][ T5334] loop1: detected capacity change from 0 to 1024 [ 176.942647][ T5334] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 176.942647][ T5334] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 176.942647][ T5334] [ 176.967338][ T5332] syz.2.241 (5332) used greatest stack depth: 20880 bytes left [ 176.983008][ T5337] loop3: detected capacity change from 0 to 1024 [ 177.018319][ T5337] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 177.018319][ T5337] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 177.018319][ T5337] [ 177.039715][ T5337] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 177.053288][ T5334] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouser_xattr,auto_da_alloc=0x0000000000000008,,errors=continue. Quota mode: none. [ 177.102927][ T5343] loop2: detected capacity change from 0 to 256 [ 177.135825][ T5343] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 177.193002][ T5343] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 177.196211][ T5337] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,nouser_xattr,nojournal_checksum,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,nombcache,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 177.310460][ T5343] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 177.778264][ T5352] netlink: 'syz.3.240': attribute type 16 has an invalid length. [ 177.786391][ T5352] netlink: 'syz.3.240': attribute type 17 has an invalid length. [ 177.802547][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 177.810475][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 178.912739][ T5357] binder: BINDER_SET_CONTEXT_MGR already set [ 178.959390][ T5357] binder: 5351:5357 ioctl 4018620d 200000004a80 returned -16 [ 178.979012][ T5352] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 179.294435][ T5367] loop4: detected capacity change from 0 to 512 [ 179.674765][ T5367] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 179.752858][ T5380] loop3: detected capacity change from 0 to 1024 [ 179.802606][ T5367] EXT4-fs (loop4): orphan cleanup on readonly fs [ 179.838895][ T5367] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:510: comm syz.4.248: Block bitmap for bg 0 marked uninitialized [ 179.959902][ T5367] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 179.986433][ T5367] EXT4-fs (loop4): 1 orphan inode deleted [ 179.998053][ T5367] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 180.153606][ T5367] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 180.179359][ T5367] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: none. [ 180.206325][ T5367] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 180.318287][ T5367] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:510: comm syz.4.248: Block bitmap for bg 0 marked uninitialized [ 181.156594][ T5400] loop2: detected capacity change from 0 to 512 [ 181.201081][ T5403] loop3: detected capacity change from 0 to 256 [ 181.236177][ T5406] loop5: detected capacity change from 0 to 512 [ 181.339645][ T5403] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 181.381188][ T5403] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 181.463352][ T5400] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 181.665709][ T5403] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 181.708241][ T5406] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 181.767380][ T5400] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 181.885781][ T5400] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e128, mo2=0002] [ 182.214580][ T5400] EXT4-fs (loop2): orphan cleanup on readonly fs [ 182.222550][ T5406] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.357354][ T5400] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #4: comm syz.2.255: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 182.377601][ T5400] EXT4-fs (loop2): Remounting filesystem read-only [ 182.396080][ T5400] EXT4-fs error (device loop2): ext4_quota_enable:6420: comm syz.2.255: Bad quota inode: 4, type: 1 [ 182.413034][ T5400] EXT4-fs (loop2): Remounting filesystem read-only [ 182.420989][ T5400] EXT4-fs warning (device loop2): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 182.447263][ T5400] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 182.474295][ T5415] loop4: detected capacity change from 0 to 16 [ 182.564855][ T5400] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,norecovery,nouid32,nomblk_io_submit,. Quota mode: writeback. [ 182.846587][ T5400] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 182.890076][ T5419] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 182.949824][ T5400] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 183.081114][ T5415] erofs: (device loop4): mounted with root inode @ nid 36. [ 183.240285][ T5428] loop3: detected capacity change from 0 to 512 [ 183.423563][ T5428] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 183.507418][ T5439] loop5: detected capacity change from 0 to 128 [ 183.570298][ T5428] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.679830][ T5439] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 183.684929][ T5441] loop2: detected capacity change from 0 to 1024 [ 183.700339][ T5445] loop4: detected capacity change from 0 to 16 [ 183.718185][ T5439] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 183.779061][ T5439] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 183.907997][ T5445] erofs: (device loop4): mounted with root inode @ nid 36. [ 183.917365][ T5439] EXT4-fs error (device loop5): ext4_collapse_range:5452: inode #12: comm syz.5.263: mark_inode_dirty error [ 184.115566][ T5441] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 184.361117][ T5441] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3871: comm syz.2.264: Allocating blocks 385-513 which overlap fs metadata [ 184.427938][ T5428] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 184.566964][ T5440] EXT4-fs (loop2): pa ffff88807ba6b7e0: logic 16, phys. 129, len 24 [ 184.576474][ T5440] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 184.781300][ T5463] loop5: detected capacity change from 0 to 256 [ 184.793064][ T5435] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 184.848035][ T5435] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -3 in[47, 4049] out[1851] [ 184.899753][ T5435] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 184.906646][ T5463] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 184.962179][ T5467] loop2: detected capacity change from 0 to 512 [ 184.980671][ T5465] loop3: detected capacity change from 0 to 1024 [ 184.987841][ T5469] loop1: detected capacity change from 0 to 256 [ 185.046874][ T5467] EXT4-fs (loop2): Unrecognized mount option "rootcontext=sysadm_u" or missing value [ 185.076133][ T5469] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 185.088381][ T5465] hfsplus: request for non-existent node 3 in B*Tree [ 185.099619][ T5469] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 185.102735][ T5465] hfsplus: request for non-existent node 3 in B*Tree [ 185.164846][ T5469] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 185.706474][ T5476] loop5: detected capacity change from 0 to 256 [ 186.577548][ T5498] loop3: detected capacity change from 0 to 1024 [ 186.744332][ T5498] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 186.744332][ T5498] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 186.744332][ T5498] [ 187.059618][ T5498] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouser_xattr,auto_da_alloc=0x0000000000000008,,errors=continue. Quota mode: none. [ 188.196250][ T5516] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 188.225540][ T5517] loop5: detected capacity change from 0 to 1024 [ 188.362530][ T5525] loop2: detected capacity change from 0 to 256 [ 188.412906][ T5525] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 188.449176][ T5525] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 188.511919][ T4352] hfsplus: b-tree write err: -5, ino 4 [ 188.527417][ T5525] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 188.629316][ T7] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 189.540343][ T5536] loop5: detected capacity change from 0 to 8192 [ 189.741388][ T5557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.295'. [ 189.752428][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 189.994113][ T5559] loop3: detected capacity change from 0 to 1024 [ 191.263647][ T7] usb 2-1: not running at top speed; connect to a high speed hub [ 191.284694][ T5559] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 191.284694][ T5559] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 191.284694][ T5559] [ 191.311879][ T3521] Bluetooth: hci3: command 0x0406 tx timeout [ 191.347811][ T3521] Bluetooth: hci0: command 0x0406 tx timeout [ 191.565051][ T3521] Bluetooth: hci2: command 0x0406 tx timeout [ 191.742185][ T5559] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouser_xattr,auto_da_alloc=0x0000000000000008,,errors=continue. Quota mode: none. [ 191.894348][ T3521] Bluetooth: hci4: command 0x0406 tx timeout [ 192.333007][ T5569] loop1: detected capacity change from 0 to 256 [ 192.639125][ T7] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 193.121084][ T7] usb 2-1: can't read configurations, error -71 [ 193.210315][ T5569] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 193.229924][ T5569] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 193.279382][ T4251] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 193.657384][ T5603] loop2: detected capacity change from 0 to 256 [ 193.675164][ T4251] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 193.697117][ T4251] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.726831][ T4251] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 193.747064][ T4251] usb 5-1: config 0 interface 0 has no altsetting 0 [ 193.755012][ T4251] usb 5-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 193.784597][ T5603] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 193.792264][ T4251] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.809733][ T5603] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 193.834334][ T4251] usb 5-1: config 0 descriptor?? [ 193.863546][ T5603] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 194.035855][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 194.817321][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.826308][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.887256][ T4251] hid-alps 0003:044E:120C.0001: item fetching failed at offset 5/8 [ 195.013630][ T4251] hid-alps 0003:044E:120C.0001: parse failed [ 195.026269][ T5659] overlayfs: failed to resolve './file0': -2 [ 195.099310][ T4251] hid-alps: probe of 0003:044E:120C.0001 failed with error -22 [ 195.147403][ T4251] usb 5-1: USB disconnect, device number 4 [ 195.175783][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 195.289875][ T7] usb 2-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 195.309468][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 195.318744][ T7] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 195.332148][ T5669] loop5: detected capacity change from 0 to 1024 [ 195.503721][ T7] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 195.523185][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.532021][ T2303] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 195.568186][ T7] usb 2-1: Product: syz [ 195.572786][ T7] usb 2-1: Manufacturer: syz [ 195.577409][ T7] usb 2-1: SerialNumber: syz [ 195.829491][ T2303] usb 4-1: Using ep0 maxpacket: 32 [ 195.982964][ T2303] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.068788][ T7] cdc_ncm 2-1:1.0: skipping garbage [ 196.100293][ T7] cdc_ncm 2-1:1.0: skipping garbage [ 196.134630][ T2303] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.244118][ T7] cdc_ncm 2-1:1.0: invalid descriptor buffer length [ 196.288458][ T2303] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 196.298673][ T7] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 196.343031][ T7] cdc_ncm 2-1:1.0: bind() failure [ 196.354349][ T5679] loop2: detected capacity change from 0 to 512 [ 196.372469][ T2303] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.404301][ T7] usb 2-1: USB disconnect, device number 3 [ 196.424765][ T5679] EXT4-fs (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 196.438593][ T2303] usb 4-1: config 0 descriptor?? [ 196.455219][ T5679] EXT4-fs (loop2): DAX unsupported by block device. [ 198.185590][ T5696] loop5: detected capacity change from 0 to 128 [ 198.212870][ T5697] loop1: detected capacity change from 0 to 256 [ 198.324194][ T5697] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 198.350962][ T5696] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 198.368382][ T2303] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 198.395740][ T2303] usb 4-1: USB disconnect, device number 2 [ 198.401962][ T5697] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 198.443262][ T5696] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 198.444495][ T5697] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 199.268323][ T5705] fido_id[5705]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 199.288061][ T5710] loop2: detected capacity change from 0 to 128 [ 199.503555][ T26] audit: type=1800 audit(1757089002.535:48): pid=5710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.320" name="file2" dev="loop2" ino=1048683 res=0 errno=0 [ 199.582626][ T5721] loop1: detected capacity change from 0 to 512 [ 199.644665][ T5721] EXT4-fs (loop1): Test dummy encryption mode enabled [ 199.669831][ T5722] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 199.720986][ T5721] EXT4-fs error (device loop1): __ext4_iget:4894: inode #11: block 1: comm syz.1.322: invalid block [ 199.750048][ T5721] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.322: couldn't read orphan inode 11 (err -117) [ 199.827124][ T5721] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,block_validity,max_dir_size_kb=0x0000000000000004,bsddf,nodiscard,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 200.007480][ T5738] loop2: detected capacity change from 0 to 512 [ 200.077389][ T5736] loop3: detected capacity change from 0 to 2048 [ 200.157577][ T5736] EXT4-fs (loop3): unable to read superblock [ 200.177216][ T5738] EXT4-fs (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 200.258945][ T5738] EXT4-fs (loop2): DAX unsupported by block device. [ 202.033774][ T5760] loop3: detected capacity change from 0 to 256 [ 202.076462][ T5754] loop2: detected capacity change from 0 to 512 [ 202.119580][ T5760] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 202.127658][ T5762] loop1: detected capacity change from 0 to 1024 [ 202.167160][ T5760] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 202.199864][ T5754] EXT4-fs (loop2): Encoding requested by superblock is unknown [ 202.219046][ T5760] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 202.235316][ T5762] hfsplus: request for non-existent node 3 in B*Tree [ 202.279327][ T5762] hfsplus: request for non-existent node 3 in B*Tree [ 203.426689][ T5781] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 203.787109][ T5792] loop3: detected capacity change from 0 to 8 [ 203.962018][ T5792] SQUASHFS error: zlib decompression failed, data probably corrupt [ 203.970638][ T5792] SQUASHFS error: Failed to read block 0x4e8: -5 [ 203.982890][ T5792] SQUASHFS error: zlib decompression failed, data probably corrupt [ 203.991395][ T5792] SQUASHFS error: Failed to read block 0x4ee: -5 [ 204.131999][ T26] audit: type=1800 audit(1757089007.165:49): pid=5792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.338" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 204.282155][ T5795] loop1: detected capacity change from 0 to 512 [ 204.436114][ T5801] loop2: detected capacity change from 0 to 256 [ 204.542031][ T5795] EXT4-fs (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 204.579802][ T5795] EXT4-fs (loop1): DAX unsupported by block device. [ 204.608971][ T5801] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 206.167448][ T5814] loop4: detected capacity change from 0 to 1024 [ 206.723653][ T4849] hfsplus: b-tree write err: -5, ino 4 [ 207.936495][ T5828] loop3: detected capacity change from 0 to 256 [ 207.998350][ T5830] loop1: detected capacity change from 0 to 1024 [ 208.017907][ T5828] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 208.161562][ T5830] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 208.186924][ T5831] loop4: detected capacity change from 0 to 256 [ 208.243805][ T5831] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 208.273405][ T5830] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.299400][ T5831] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 208.337649][ T5831] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 209.397975][ T5856] loop1: detected capacity change from 0 to 1024 [ 209.773660][ T5868] loop3: detected capacity change from 0 to 1024 [ 209.865666][ T5868] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 209.865666][ T5868] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 209.865666][ T5868] [ 210.223737][ T5868] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouser_xattr,auto_da_alloc=0x0000000000000008,,errors=continue. Quota mode: none. [ 210.335674][ T5856] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 210.640375][ T5867] loop4: detected capacity change from 0 to 1024 [ 210.825477][ T5856] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3871: comm syz.1.350: Allocating blocks 385-513 which overlap fs metadata [ 211.027155][ T5856] EXT4-fs (loop1): pa ffff8880746fa1c0: logic 16, phys. 129, len 24 [ 211.035809][ T5856] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 211.835175][ T5890] loop3: detected capacity change from 0 to 512 [ 211.964689][ T5890] EXT4-fs (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 212.026746][ T5891] loop5: detected capacity change from 0 to 512 [ 212.044894][ T5890] EXT4-fs (loop3): DAX unsupported by block device. [ 212.128621][ T5892] loop1: detected capacity change from 0 to 40427 [ 213.678163][ T5891] EXT4-fs (loop5): Ignoring removed nobh option [ 213.754940][ T5891] EXT4-fs (loop5): Ignoring removed oldalloc option [ 213.780931][ T5891] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 213.803344][ T5892] F2FS-fs (loop1): Found nat_bits in checkpoint [ 213.804158][ T5910] loop4: detected capacity change from 0 to 256 [ 213.853948][ T5892] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 213.900617][ T5910] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 213.918655][ T5891] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 213.976275][ T5891] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=b846c01c, mo2=0002] [ 213.983414][ T5892] attempt to access beyond end of device [ 213.983414][ T5892] loop1: rw=2049, want=45104, limit=40427 [ 214.045702][ T5910] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 214.079500][ T5891] System zones: 0-2, 18-18, 34-34 [ 214.092033][ T5891] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117 [ 214.132035][ T5891] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.357: iget: bad i_size value: 360287970189639680 [ 214.142066][ T5910] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 214.191433][ T5891] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.357: couldn't read orphan inode 15 (err -117) [ 214.313752][ T5891] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,usrjquota=.,min_batch_time=0x0000000000000091,init_itable,nobh,data_err=abort,oldalloc,jqfmt=vfsv0,min_batch_time=0x0000000000000000,acl,,errors=continue. Quota mode: writeback. [ 215.112037][ T4184] attempt to access beyond end of device [ 215.112037][ T4184] loop1: rw=2049, want=45112, limit=40427 [ 216.678304][ T5945] loop4: detected capacity change from 0 to 512 [ 216.852588][ T5945] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 216.947118][ T5945] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 216.994269][ T5945] EXT4-fs error (device loop4): ext4_do_update_inode:5204: inode #2: comm syz.4.365: corrupted inode contents [ 217.016428][ T5945] EXT4-fs error (device loop4): ext4_dirty_inode:6040: inode #2: comm syz.4.365: mark_inode_dirty error [ 217.034352][ T5945] EXT4-fs error (device loop4): ext4_do_update_inode:5204: inode #2: comm syz.4.365: corrupted inode contents [ 217.051931][ T5945] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.365: mark_inode_dirty error [ 217.642008][ T5969] loop3: detected capacity change from 0 to 512 [ 218.920967][ T5918] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 80: padding at end of block bitmap is not set [ 219.265045][ T5945] EXT4-fs error (device loop4): ext4_get_first_dir_block:3608: inode #18: comm syz.4.365: directory missing '.' [ 219.294726][ T5969] EXT4-fs (loop3): Ignoring removed orlov option [ 219.693180][ T4235] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 219.708607][ T5969] EXT4-fs (loop3): 1 orphan inode deleted [ 219.714942][ T5969] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,orlov,acl,norecovery,nojournal_checksum,quota,,errors=continue. Quota mode: writeback. [ 219.732518][ T5969] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.609666][ T4235] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 220.634119][ T4235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 220.717997][ T4235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 220.778694][ T5976] loop2: detected capacity change from 0 to 512 [ 220.794824][ T4235] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 220.875520][ T4235] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 220.898824][ T5976] EXT4-fs (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 220.928793][ T5976] EXT4-fs (loop2): DAX unsupported by block device. [ 220.948486][ T4235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.043924][ T4235] usb 2-1: config 0 descriptor?? [ 221.066626][ T5972] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 221.191253][ T5982] loop3: detected capacity change from 0 to 256 [ 221.330733][ T5982] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 221.368632][ T5984] loop4: detected capacity change from 0 to 4096 [ 221.379851][ T5982] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 221.723482][ T5982] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 221.737477][ T4235] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 221.775315][ T5984] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 221.828284][ T4235] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 222.066561][ T5984] EXT4-fs (loop4): Cannot change journaled quota options when quota turned on [ 222.100903][ T4235] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 223.725794][ T6001] loop5: detected capacity change from 0 to 1024 [ 223.938851][ T6007] loop3: detected capacity change from 0 to 2048 [ 223.964778][ T6009] loop4: detected capacity change from 0 to 256 [ 224.049081][ T6009] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 224.095090][ T6007] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 224.195670][ T26] audit: type=1800 audit(1757089027.225:50): pid=6009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.384" name="file1" dev="loop4" ino=1048703 res=0 errno=0 [ 224.465719][ T4270] usb 2-1: USB disconnect, device number 4 [ 226.063485][ T6023] overlayfs: statfs failed on './file0' [ 226.124143][ T6029] loop1: detected capacity change from 0 to 512 [ 226.245283][ T6029] EXT4-fs (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 226.280645][ T6031] loop4: detected capacity change from 0 to 256 [ 226.289520][ T6029] EXT4-fs (loop1): DAX unsupported by block device. [ 226.547806][ T6031] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 226.659474][ T6031] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 227.080771][ T6031] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 227.370968][ T6034] loop5: detected capacity change from 0 to 4096 [ 227.829316][ T6034] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 228.032155][ T6034] EXT4-fs (loop5): Cannot change journaled quota options when quota turned on [ 228.269786][ T13] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 228.740955][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.853717][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.147716][ T13] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 229.171174][ T6050] loop3: detected capacity change from 0 to 1024 [ 229.242633][ T13] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 229.315000][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.323634][ T6050] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 229.358263][ T6050] EXT4-fs (loop3): orphan cleanup on readonly fs [ 229.384601][ T6063] loop2: detected capacity change from 0 to 512 [ 229.396938][ T6050] EXT4-fs error (device loop3): ext4_free_blocks:6218: comm syz.3.397: Freeing blocks not in datazone - block = 0, count = 4096 [ 229.410779][ T13] usb 2-1: config 0 descriptor?? [ 229.427846][ T6050] EXT4-fs (loop3): 1 orphan inode deleted [ 229.674729][ T6050] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 230.125503][ T6063] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 230.156616][ T6063] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 230.227184][ T13] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 230.350158][ T13] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 230.566740][ T6063] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #2: comm syz.2.400: corrupted inode contents [ 230.681318][ T6063] EXT4-fs error (device loop2): ext4_dirty_inode:6040: inode #2: comm syz.2.400: mark_inode_dirty error [ 230.736550][ T6078] loop4: detected capacity change from 0 to 256 [ 230.756882][ T6063] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #2: comm syz.2.400: corrupted inode contents [ 230.777759][ T6083] loop3: detected capacity change from 0 to 512 [ 230.815871][ T6078] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 230.843067][ T6063] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.400: mark_inode_dirty error [ 230.894979][ T6078] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 230.904701][ T6063] EXT4-fs error (device loop2): ext4_get_first_dir_block:3608: inode #18: comm syz.2.400: directory missing '.' [ 230.908517][ T6078] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 230.920366][ C0] plantronics 0003:047F:FFFF.0004: hid_field_extract() called with n (132) > 32! (syz-executor) [ 230.954545][ T6083] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 230.997650][ T6083] EXT4-fs (loop3): 1 truncate cleaned up [ 231.045158][ T6083] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 231.134989][ T3521] usb 2-1: USB disconnect, device number 5 [ 231.207146][ T6089] loop5: detected capacity change from 0 to 128 [ 231.231802][ T6083] EXT4-fs error (device loop3): __ext4_get_inode_loc:4321: comm syz.3.402: Invalid inode table block 0 in block_group 0 [ 231.351866][ T6089] EXT4-fs (loop5): Test dummy encryption mode enabled [ 231.742522][ T6089] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nolazytime,,errors=continue. Quota mode: none. [ 231.772101][ T6089] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 232.051073][ T6100] loop3: detected capacity change from 0 to 164 [ 232.128110][ T6101] loop1: detected capacity change from 0 to 1024 [ 232.490601][ T6101] EXT4-fs (loop1): Ignoring removed bh option [ 232.517137][ T6101] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 233.433073][ T6101] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,resgid=0x0000000000000000,data_err=ignore,grpquota,nodioread_nolock,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 233.570882][ T6119] loop5: detected capacity change from 0 to 512 [ 233.604945][ T6121] loop2: detected capacity change from 0 to 764 [ 233.669634][ T6119] EXT4-fs (loop5): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 233.708330][ T6121] Symlink component flag not implemented [ 233.719421][ T6119] EXT4-fs (loop5): DAX unsupported by block device. [ 234.005280][ T6132] loop1: detected capacity change from 0 to 1024 [ 235.863628][ T6142] loop3: detected capacity change from 0 to 256 [ 235.888707][ T6142] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 235.972432][ T6144] Zero length message leads to an empty skb [ 235.995976][ T6142] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 236.166251][ T6142] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 236.502063][ T5259] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 236.989498][ T13] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 237.135114][ T6153] loop4: detected capacity change from 0 to 164 [ 237.309544][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 237.310140][ T4270] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 237.344120][ T6156] loop2: detected capacity change from 0 to 256 [ 237.439423][ T13] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.479462][ T6156] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 237.509704][ T13] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.554280][ T6156] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 237.598213][ T6156] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 237.605590][ T6161] loop4: detected capacity change from 0 to 512 [ 237.610674][ T13] usb 2-1: config 0 interface 0 has no altsetting 0 [ 237.679900][ T4270] usb 6-1: Using ep0 maxpacket: 32 [ 237.732060][ T6161] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 237.840019][ T4270] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 237.899823][ T4270] usb 6-1: config 0 has no interface number 0 [ 237.952357][ T13] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 238.849386][ T4270] usb 6-1: config 0 interface 184 has no altsetting 0 [ 238.892313][ T6161] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2825: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 238.912138][ T6169] loop3: detected capacity change from 0 to 164 [ 238.956035][ T6161] EXT4-fs (loop4): 1 truncate cleaned up [ 238.992780][ T6172] loop5: detected capacity change from 0 to 512 [ 239.002458][ T4270] usb 6-1: string descriptor 0 read error: -71 [ 239.009104][ T4270] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 239.018932][ T6161] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,resuid=0x000000000000ee01,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 239.049155][ T4270] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.066911][ T4270] usb 6-1: config 0 descriptor?? [ 239.093376][ T4270] usb 6-1: can't set config #0, error -71 [ 239.106608][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.107153][ T4270] usb 6-1: USB disconnect, device number 2 [ 239.126517][ T13] usb 2-1: config 0 descriptor?? [ 239.188169][ T6169] Unable to read rock-ridge attributes [ 239.231213][ T6172] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 239.269559][ T6172] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 239.499972][ T6178] loop2: detected capacity change from 0 to 256 [ 240.635805][ T13] hid (null): invalid report_size -997092677 [ 240.642325][ T13] hid (null): unknown global tag 0xc [ 240.648125][ T13] hid (null): report_id 58406 is invalid [ 240.654776][ T13] hid (null): report_id 4116970656 is invalid [ 240.992244][ T13] usb 2-1: USB disconnect, device number 6 [ 241.000012][ T6172] EXT4-fs error (device loop5): ext4_do_update_inode:5204: inode #2: comm syz.5.430: corrupted inode contents [ 241.070573][ T6172] EXT4-fs error (device loop5): ext4_dirty_inode:6040: inode #2: comm syz.5.430: mark_inode_dirty error [ 241.115437][ T6172] EXT4-fs error (device loop5): ext4_do_update_inode:5204: inode #2: comm syz.5.430: corrupted inode contents [ 241.194961][ T6172] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #2: comm syz.5.430: mark_inode_dirty error [ 241.564280][ T6199] loop1: detected capacity change from 0 to 2048 [ 241.733175][ T6199] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 241.789340][ T6199] UDF-fs: Scanning with blocksize 512 failed [ 241.899474][ T4270] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 242.039669][ T6199] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 242.919377][ T4270] usb 6-1: Using ep0 maxpacket: 16 [ 243.172349][ T6230] loop4: detected capacity change from 0 to 128 [ 244.144924][ T6230] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 244.169495][ T4270] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.303218][ T4270] usb 6-1: config 0 interface 0 has no altsetting 0 [ 244.372409][ T4270] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 244.427002][ T4270] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.461686][ T6230] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 244.493059][ T4270] usb 6-1: config 0 descriptor?? [ 244.555189][ T6236] bridge0: port 3(ip6gretap0) entered blocking state [ 244.575616][ T6236] bridge0: port 3(ip6gretap0) entered disabled state [ 244.593877][ T6236] device ip6gretap0 entered promiscuous mode [ 244.599419][ T6239] loop1: detected capacity change from 0 to 256 [ 244.603171][ T6236] bridge0: port 3(ip6gretap0) entered blocking state [ 244.613182][ T6236] bridge0: port 3(ip6gretap0) entered forwarding state [ 244.632227][ T4270] usb 6-1: can't set config #0, error -71 [ 244.656077][ T4270] usb 6-1: USB disconnect, device number 3 [ 244.690140][ T6239] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 244.799364][ T6239] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 244.827130][ T6239] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 246.116199][ T4251] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 246.252399][ T6256] loop1: detected capacity change from 0 to 1024 [ 246.285819][ T6256] EXT4-fs (loop1): inline encryption not supported [ 246.329032][ T6256] EXT4-fs (loop1): Ignoring removed bh option [ 246.369337][ T4251] usb 5-1: Using ep0 maxpacket: 16 [ 246.376908][ T6256] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 246.466499][ T6265] loop5: detected capacity change from 0 to 1024 [ 246.480336][ T6256] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,lazytime,bh,errors=remount-ro,. Quota mode: writeback. [ 246.506654][ T4251] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.518130][ T4251] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.528609][ T4251] usb 5-1: config 0 interface 0 has no altsetting 0 [ 246.536055][ T4251] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 246.545366][ T4251] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.557467][ T4251] usb 5-1: config 0 descriptor?? [ 246.584860][ T6256] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3871: comm syz.1.451: Allocating blocks 497-513 which overlap fs metadata [ 246.606522][ T6256] EXT4-fs (loop1): Remounting filesystem read-only [ 246.614460][ T6256] EXT4-fs (loop1): pa ffff88807ba6be00: logic 128, phys. 385, len 8 [ 246.623122][ T6256] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 246.669717][ T26] audit: type=1800 audit(1757089049.705:51): pid=6265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.453" name=3A1B dev="loop5" ino=26 res=0 errno=0 [ 246.694576][ T6256] EXT4-fs (loop1): Remounting filesystem read-only [ 246.770183][ T4483] hfsplus: b-tree write err: -5, ino 4 [ 247.030602][ T4251] hid (null): invalid report_size -997092677 [ 247.047837][ T4251] hid (null): unknown global tag 0xc [ 247.058007][ T4251] hid (null): report_id 58406 is invalid [ 247.074264][ T4251] hid (null): report_id 4116970656 is invalid [ 247.644382][ T4251] usb 5-1: USB disconnect, device number 5 [ 248.136103][ T6295] loop3: detected capacity change from 0 to 256 [ 248.274154][ T6295] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 248.439811][ T6295] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 248.537419][ T6295] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 249.871731][ T6319] loop5: detected capacity change from 0 to 512 [ 250.064016][ T6319] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 250.078981][ T6319] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.110575][ T7] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 250.259299][ T13] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 250.349427][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 250.630743][ T13] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 250.639515][ T7] usb 2-1: New USB device found, idVendor=16d8, idProduct=7213, bcdDevice=cb.da [ 250.668027][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 250.685887][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.707909][ T7] usb 2-1: Product: syz [ 250.717613][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 250.737743][ T7] usb 2-1: Manufacturer: syz [ 250.747952][ T7] usb 2-1: SerialNumber: syz [ 250.765685][ T13] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 250.790138][ T7] usb 2-1: config 0 descriptor?? [ 250.812361][ T13] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 250.857821][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.903234][ T13] usb 5-1: config 0 descriptor?? [ 250.930862][ T6324] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 251.651680][ T4332] usb 2-1: USB disconnect, device number 7 [ 252.238511][ T13] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd [ 252.270946][ T6377] loop3: detected capacity change from 0 to 256 [ 252.284916][ T13] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 252.309283][ T6377] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 252.327479][ T13] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 252.347098][ T6377] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 252.381713][ T6377] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 252.485015][ T4270] usb 5-1: USB disconnect, device number 6 [ 252.749725][ T13] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 253.029374][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 253.074770][ T6382] fido_id[6382]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 253.239974][ T13] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.319457][ T13] usb 2-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 253.440289][ T13] usb 2-1: config 0 interface 0 has no altsetting 0 [ 253.659286][ T13] usb 2-1: New USB device found, idVendor=056a, idProduct=009f, bcdDevice= 0.00 [ 253.699391][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.775697][ T6395] loop4: detected capacity change from 0 to 1024 [ 253.999647][ T6395] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 253.999647][ T6395] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 253.999647][ T6395] [ 254.031009][ T13] usb 2-1: config 0 descriptor?? [ 254.110869][ T6395] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouser_xattr,auto_da_alloc=0x0000000000000008,,errors=continue. Quota mode: none. [ 254.295771][ T6405] syz.2.489 uses obsolete (PF_INET,SOCK_PACKET) [ 254.523872][ T13] wacom 0003:056A:009F.0008: unknown main item tag 0x3 [ 254.569864][ T13] wacom 0003:056A:009F.0008: hidraw0: USB HID v0.00 Device [HID 056a:009f] on usb-dummy_hcd.1-1/input0 [ 256.272853][ T7] usb 2-1: USB disconnect, device number 8 [ 256.300120][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.275546][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.608351][ T6426] fido_id[6426]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 257.777339][ T6448] loop3: detected capacity change from 0 to 256 [ 257.879387][ T7] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 258.052168][ T6453] loop4: detected capacity change from 0 to 1024 [ 258.060365][ T4270] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 258.085894][ T6448] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 258.114315][ T6453] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 258.114315][ T6453] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 258.114315][ T6453] [ 258.151686][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 258.205967][ T6453] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouser_xattr,auto_da_alloc=0x0000000000000008,,errors=continue. Quota mode: none. [ 258.270426][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.311369][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.429488][ T4270] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 258.437768][ T4270] usb 6-1: config 0 has no interface number 0 [ 258.474119][ T4270] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 258.519566][ T4270] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 258.529683][ T7] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 258.529715][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.543409][ T6466] loop3: detected capacity change from 0 to 256 [ 258.574517][ T4270] usb 6-1: config 0 interface 85 has no altsetting 0 [ 258.580222][ T7] usb 2-1: Product: syz [ 258.595100][ T7] usb 2-1: Manufacturer: syz [ 258.606436][ T7] usb 2-1: SerialNumber: syz [ 258.627367][ T6466] exfat: Deprecated parameter 'namecase' [ 258.740432][ T7] usb 2-1: selecting invalid altsetting 1 [ 258.753908][ T6466] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x3d8a7575, utbl_chksum : 0xe619d30d) [ 258.766763][ T4270] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 258.792032][ T4270] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.810633][ T4270] usb 6-1: Product: syz [ 258.814880][ T4270] usb 6-1: Manufacturer: syz [ 258.887939][ T4270] usb 6-1: SerialNumber: syz [ 259.087228][ T4270] usb 6-1: config 0 descriptor?? [ 259.399736][ T7] cdc_ncm 2-1:1.0: SET_CRC_MODE failed [ 259.419407][ T7] cdc_ncm 2-1:1.0: SET_NTB_FORMAT failed [ 259.439354][ T7] usb 2-1: selecting invalid altsetting 1 [ 259.445267][ T7] cdc_ncm 2-1:1.0: bind() failure [ 259.531297][ T7] usb 2-1: USB disconnect, device number 9 [ 259.579454][ T4270] appletouch 6-1:0.85: Geyser mode initialized. [ 259.606143][ T4270] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input12 [ 259.835570][ T4270] usb 6-1: USB disconnect, device number 4 [ 260.995842][ T6492] loop1: detected capacity change from 0 to 512 [ 261.025229][ T4270] appletouch 6-1:0.85: input: appletouch disconnected [ 261.179348][ T6492] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 261.270996][ T6492] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.511: invalid indirect mapped block 10 (level 1) [ 261.795943][ T6492] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.511: invalid indirect mapped block 8 (level 1) [ 261.986419][ T6508] loop5: detected capacity change from 0 to 256 [ 262.021953][ T6492] EXT4-fs (loop1): 1 truncate cleaned up [ 262.027779][ T6492] EXT4-fs (loop1): mounted filesystem without journal. Opts: mblk_io_submit,resuid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 262.085598][ T6508] exfat: Deprecated parameter 'namecase' [ 262.100842][ T6508] exfat: Deprecated parameter 'namecase' [ 262.168157][ T6508] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbc8dc3cd, utbl_chksum : 0xe619d30d) [ 262.533874][ T6516] loop1: detected capacity change from 0 to 256 [ 263.830485][ T6517] loop3: detected capacity change from 0 to 1024 [ 264.730085][ T6517] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 264.730085][ T6517] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 264.730085][ T6517] [ 265.366474][ T6517] EXT4-fs warning (device loop3): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop3. [ 265.537265][ T6526] loop5: detected capacity change from 0 to 512 [ 265.876141][ T6526] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 266.036672][ T6526] EXT4-fs (loop5): 1 truncate cleaned up [ 266.103316][ T6526] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,debug_want_extra_isize=0x0000000000000006,,errors=continue. Quota mode: none. [ 266.578760][ T6537] loop4: detected capacity change from 0 to 1024 [ 267.677494][ T6547] virtiofs: Unknown parameter 'always 1 V3 [ 267.677494][ T6547] 010000E0 1 0:00000000 0 [ 267.677494][ T6547] 18 nlmon0 : 1 V3 [ 267.677494][ T6547] 010000E0 1 0:00000000 0 [ 267.677494][ T6547] 20 batadv0 : 1 V3 [ 267.677494][ T6547] 010000E0 1 0:00000000 0 [ 267.677494][ T6547] 21 vxcan0 : 1 V3 [ 267.677494][ T6547] 010000E0 1 0:00000000 0 [ 267.677494][ T6547] 22 vxcan1 : 1 V3 [ 267.677494][ T6547] 010000E0 1 0:00000000 0 [ 267.677494][ T6547] 23 veth0 : 1 V3 [ 267.677494][ T6547] 010000E0 1 0:00000000 0 [ 267.677494][ T6547] 24 veth1 : 1 V3 [ 267.677494][ T6547] 010000E0 1 0:00000000 0 [ 267.677494][ T6547] 25 wg0 : 1 V3 [ 267.677494][ T6547] 010000E0 1 0:00000000 0 [ 267.677494][ T6547] 26 wg1 : 1 V3 [ 267.677494][ T6547] 010000E0 1 0:00000000 0 [ 270.335932][ T6562] 9p: Unknown uid 18446744073709551615 [ 270.376589][ T6562] overlayfs: failed to clone upperpath [ 270.958878][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.5.531'. [ 271.239913][ T6559] loop3: detected capacity change from 0 to 1024 [ 272.380482][ T4438] hfsplus: b-tree write err: -5, ino 3 [ 272.535715][ T6587] loop5: detected capacity change from 0 to 2048 [ 272.616310][ T4185] hfsplus: node 4:3 still has 1 user(s)! [ 273.035043][ T6587] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 273.549874][ T6587] EXT4-fs error (device loop5): ext4_lookup:1858: inode #16: comm syz.5.541: iget: bad i_size value: 8796093031208 [ 274.641572][ T6620] loop3: detected capacity change from 0 to 512 [ 274.739077][ T6620] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0002] [ 274.796033][ T6620] EXT4-fs (loop3): orphan cleanup on readonly fs [ 274.851837][ T6620] EXT4-fs warning (device loop3): ext4_enable_quotas:6461: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 274.942427][ T6620] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 274.977641][ T6620] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #13: comm syz.3.552: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 275.066710][ T6635] loop4: detected capacity change from 0 to 256 [ 275.074495][ T6620] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.552: couldn't read orphan inode 13 (err -117) [ 275.149563][ T6620] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,min_batch_time=0x0000000000000d5e,acl,debug,sysvgroups,grpid,,errors=continue. Quota mode: writeback. [ 275.232221][ T6641] netlink: 'syz.5.561': attribute type 4 has an invalid length. [ 275.314914][ T6645] 9p: Unknown uid 18446744073709551615 [ 275.408018][ T6648] loop5: detected capacity change from 0 to 512 [ 275.644446][ T6648] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm syz.5.565: Invalid block bitmap block 0 in block_group 0 [ 275.689935][ T6648] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 275.751898][ T6648] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.565: attempt to clear invalid blocks 983261 len 1 [ 276.002695][ T6648] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.565: invalid indirect mapped block 2683928664 (level 0) [ 276.057266][ T6648] EXT4-fs error (device loop5): __ext4_get_inode_loc:4321: comm syz.5.565: Invalid inode table block 0 in block_group 0 [ 276.155286][ T6648] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 276.212525][ T6648] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 276.289256][ T6648] EXT4-fs error (device loop5): __ext4_get_inode_loc:4321: comm syz.5.565: Invalid inode table block 0 in block_group 0 [ 276.354163][ T6648] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 276.398191][ T6648] EXT4-fs error (device loop5): ext4_truncate:4273: inode #13: comm syz.5.565: mark_inode_dirty error [ 276.450077][ T6648] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 276.470977][ T6648] EXT4-fs error (device loop5): __ext4_get_inode_loc:4321: comm syz.5.565: Invalid inode table block 0 in block_group 0 [ 276.494725][ T6684] 9p: Unknown uid 18446744073709551615 [ 276.519580][ T6648] EXT4-fs (loop5): 1 truncate cleaned up [ 276.529365][ T6684] overlayfs: failed to clone upperpath [ 276.536446][ T6648] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,resuid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 276.638005][ T6648] EXT4-fs error (device loop5): __ext4_get_inode_loc:4321: comm syz.5.565: Invalid inode table block 0 in block_group 0 [ 276.709397][ T6648] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 278.151937][ T6711] overlayfs: statfs failed on './file0' [ 278.218124][ T6714] binder: 6712:6714 ioctl 4b46 200000000e40 returned -22 [ 278.247240][ T6714] binder: BINDER_SET_CONTEXT_MGR already set [ 278.279476][ T6714] binder: 6712:6714 ioctl 4018620d 2000000002c0 returned -16 [ 278.854769][ T6729] ptrace attach of "./syz-executor exec"[4705] was attempted by ""[6729] [ 279.253712][ T6738] loop4: detected capacity change from 0 to 4096 [ 279.510381][ T6738] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 279.636531][ T6752] overlayfs: failed to clone upperpath [ 280.919333][ T4270] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 281.054585][ T6783] loop4: detected capacity change from 0 to 1024 [ 281.117045][ T6783] hfsplus: invalid btree flag [ 281.137023][ T6783] hfsplus: failed to load catalog file [ 281.337850][ T6788] loop5: detected capacity change from 0 to 1024 [ 281.373922][ T6783] netlink: 12 bytes leftover after parsing attributes in process `syz.4.615'. [ 281.607275][ T6788] EXT4-fs (loop5): Mount option "nouser_xattr" will be removed by 3.5 [ 281.607275][ T6788] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 281.607275][ T6788] [ 281.652402][ T6788] EXT4-fs (loop5): mounted filesystem without journal. Opts: nouser_xattr,auto_da_alloc=0x0000000000000008,,errors=continue. Quota mode: none. [ 281.670948][ T4270] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 281.690958][ T4270] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 281.707088][ T4270] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.722209][ T4270] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 281.738669][ T4270] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 281.750155][ T4270] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.764825][ T4270] usb 4-1: config 0 descriptor?? [ 281.820635][ T4270] usb-storage 4-1:0.0: USB Mass Storage device detected [ 281.925653][ T4270] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 281.977598][ T6801] overlayfs: failed to clone upperpath [ 282.080870][ T4270] usb 4-1: USB disconnect, device number 3 [ 282.104671][ T6803] loop4: detected capacity change from 0 to 512 [ 282.234408][ T6803] EXT4-fs (loop4): Unrecognized mount option "appraise" or missing value [ 282.445794][ T6803] blk_update_request: I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 282.693805][ T6803] EXT4-fs (loop4): unable to read superblock [ 283.183509][ T6819] netlink: 24 bytes leftover after parsing attributes in process `syz.1.628'. [ 283.260771][ T6824] loop5: detected capacity change from 0 to 8 [ 283.308242][ T6828] loop4: detected capacity change from 0 to 512 [ 283.339718][ T6828] devtmpfs: Unknown parameter 'grpjquota' [ 283.428933][ T6824] SQUASHFS error: lzo decompression failed, data probably corrupt [ 283.480784][ T6826] loop3: detected capacity change from 0 to 1024 [ 283.504391][ T6824] SQUASHFS error: Failed to read block 0x91: -5 [ 283.511578][ T6824] SQUASHFS error: Unable to read metadata cache entry [8f] [ 283.518820][ T6824] SQUASHFS error: Unable to read inode 0x11f [ 283.519487][ T6832] fuse: Bad value for 'fd' [ 283.542043][ T6826] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 283.542043][ T6826] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 283.542043][ T6826] [ 283.605562][ T6826] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouser_xattr,auto_da_alloc=0x0000000000000008,,errors=continue. Quota mode: none. [ 284.877711][ T6862] loop5: detected capacity change from 0 to 256 [ 286.252753][ T6878] ipt_REJECT: ECHOREPLY no longer supported. [ 287.137810][ T6886] input: syz1 as /devices/virtual/input/input13 [ 288.696338][ T6905] loop4: detected capacity change from 0 to 256 [ 290.964309][ T6905] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x1bc7c44b, utbl_chksum : 0xe619d30d) [ 291.170544][ T6905] attempt to access beyond end of device [ 291.170544][ T6905] loop4: rw=524288, want=408, limit=256 [ 291.199479][ T26] audit: type=1800 audit(1757089094.225:52): pid=6905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.658" name="file1" dev="loop4" ino=1048738 res=0 errno=0 [ 293.472615][ T6926] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 294.486933][ T6948] loop4: detected capacity change from 0 to 1024 [ 294.740500][ T6948] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 294.740500][ T6948] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 294.740500][ T6948] [ 295.017850][ T6948] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouser_xattr,auto_da_alloc=0x0000000000000008,,errors=continue. Quota mode: none. [ 295.562104][ T6960] loop3: detected capacity change from 0 to 8 [ 295.775593][ T6960] squashfs: Unknown parameter '*\#'?8[B ~C ۭ[S1g;WD n|PvD ř*QT&6YBAmw(1Yօ%i ~B; KRl' [ 295.917891][ T6969] ipt_REJECT: ECHOREPLY no longer supported. [ 298.071268][ T7023] xt_policy: neither incoming nor outgoing policy selected [ 299.587767][ T7029] loop3: detected capacity change from 0 to 1024 [ 299.649321][ T2303] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 299.720548][ T7029] loop3: detected capacity change from 0 to 256 [ 299.780090][ T7029] exfat: Unknown parameter 'I' [ 299.899632][ T2303] usb 5-1: Using ep0 maxpacket: 16 [ 300.020458][ T2303] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.059284][ T2303] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 300.359648][ T2303] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 300.378079][ T2303] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.398313][ T2303] usb 5-1: Product: syz [ 300.451603][ T2303] usb 5-1: Manufacturer: syz [ 300.488251][ T2303] usb 5-1: SerialNumber: syz [ 300.929545][ T2303] usb 5-1: 0:2 : does not exist [ 301.524214][ T2303] usb 5-1: USB disconnect, device number 7 [ 301.536758][ T7071] loop3: detected capacity change from 0 to 512 [ 301.646618][ T7070] device sit0 entered promiscuous mode [ 301.688214][ T7070] netlink: 'syz.4.716': attribute type 1 has an invalid length. [ 301.767971][ T7070] netlink: 1 bytes leftover after parsing attributes in process `syz.4.716'. [ 301.842129][ T6582] udevd[6582]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 301.878442][ T7071] EXT4-fs (loop3): 1 orphan inode deleted [ 301.915698][ T7088] loop4: detected capacity change from 0 to 512 [ 301.918903][ T7071] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 301.933549][ T7071] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.959972][ T7071] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 302.082267][ T7088] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 302.101825][ T7088] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.990697][ T26] audit: type=1326 audit(1757089108.025:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7136 comm="syz.1.739" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff210d37be9 code=0x0 [ 306.317638][ T7155] loop3: detected capacity change from 0 to 2048 [ 306.443554][ T7155] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 306.503950][ T7155] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 306.996208][ T7175] loop3: detected capacity change from 0 to 512 [ 307.083896][ T7175] EXT4-fs error (device loop3): ext4_fill_super:4841: inode #2: comm syz.3.752: casefold flag without casefold feature [ 307.149698][ T7175] EXT4-fs (loop3): get root inode failed [ 307.205583][ T7175] EXT4-fs (loop3): mount failed [ 307.292404][ T7184] loop4: detected capacity change from 0 to 128 [ 307.433462][ T7184] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 307.591640][ T7184] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 308.272593][ T5651] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 308.722811][ T7210] overlayfs: failed to resolve './file0': -2 [ 308.748574][ T7211] loop4: detected capacity change from 0 to 128 [ 308.844156][ T7211] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 308.989516][ T7211] FAT-fs (loop4): FAT read failed (blocknr 128) [ 310.167186][ T7242] loop3: detected capacity change from 0 to 1024 [ 310.934956][ T7242] VFS: Lookup of 'file0' in hfsplus loop3 would have caused loop [ 310.947432][ T7245] overlayfs: failed to clone upperpath [ 311.070593][ T4185] hfsplus: walked past end of dir [ 311.140378][ T4185] hfsplus: xattr search failed [ 312.455329][ T7269] loop4: detected capacity change from 0 to 512 [ 312.531574][ T7269] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 312.531574][ T7269] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 312.531574][ T7269] [ 312.569148][ T7269] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 312.569148][ T7269] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 312.569148][ T7269] [ 312.594368][ T7269] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 312.661650][ T7269] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 312.707010][ T7269] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8000201d, mo2=0000] [ 312.752947][ T7269] EXT4-fs (loop4): 1 truncate cleaned up [ 312.758744][ T7269] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,nouser_xattr,barrier=0x0000000000000000,noacl,nodiscard,grpid,usrjquota=./file12dioread_nolock,,errors=continue. Quota mode: writeback. [ 312.783382][ T4739] Quota error (device loop4): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 312.859034][ T7269] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.790: iget: bad i_size value: 360287970199339018 [ 312.877826][ T4739] EXT4-fs error (device loop4): ext4_release_dquot:6245: comm kworker/u4:15: Failed to release dquot type 1 [ 314.588744][ T7299] loop4: detected capacity change from 0 to 256 [ 315.579286][ T7299] exfat: Deprecated parameter 'utf8' [ 315.584681][ T7299] exfat: Deprecated parameter 'namecase' [ 315.639512][ T7299] exfat: Deprecated parameter 'utf8' [ 315.670803][ T7299] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 315.778720][ T7299] exFAT-fs (loop4): error, tried to truncate zeroed cluster. [ 316.027346][ T7319] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 316.641158][ T7331] loop4: detected capacity change from 0 to 256 [ 318.271869][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.286883][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.625345][ T7352] loop3: detected capacity change from 0 to 2048 [ 319.675762][ T7352] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 320.488081][ T7366] loop3: detected capacity change from 0 to 256 [ 320.586800][ T7366] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 320.660228][ T7366] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 320.830171][ T7366] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0x65b64522, utbl_chksum : 0xe619d30d) [ 321.377660][ T7377] loop3: detected capacity change from 0 to 1024 [ 321.453367][ T26] audit: type=1800 audit(1757089124.485:54): pid=7377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.826" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 326.529336][ T7422] loop9: detected capacity change from 0 to 7 [ 326.807369][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 326.818792][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 327.000250][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 327.011232][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 327.032241][ T26] audit: type=1326 audit(1757089130.065:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.5.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22fed3ebe9 code=0x7ffc0000 [ 327.046864][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 327.065401][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 327.159787][ T26] audit: type=1326 audit(1757089130.065:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.5.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22fed3ebe9 code=0x7ffc0000 [ 327.342135][ T26] audit: type=1326 audit(1757089130.065:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.5.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f22fed3ebe9 code=0x7ffc0000 [ 327.431544][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 327.442554][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 327.626300][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 327.637331][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 327.829859][ T26] audit: type=1326 audit(1757089130.065:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.5.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22fed3ebe9 code=0x7ffc0000 [ 327.919842][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 327.930846][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 327.999363][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 328.009496][ T26] audit: type=1326 audit(1757089130.065:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.5.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22fed3ebe9 code=0x7ffc0000 [ 328.010422][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 328.046429][ T6582] ldm_validate_partition_table(): Disk read failed. [ 328.109728][ T26] audit: type=1326 audit(1757089130.065:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.5.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f22fed3ebe9 code=0x7ffc0000 [ 328.207424][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 328.218431][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 328.269738][ T26] audit: type=1326 audit(1757089130.065:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.5.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22fed3ebe9 code=0x7ffc0000 [ 328.299600][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 328.310668][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 328.349297][ T26] audit: type=1326 audit(1757089130.065:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.5.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22fed3ebe9 code=0x7ffc0000 [ 328.375788][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 328.386928][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 328.453157][ T26] audit: type=1326 audit(1757089130.065:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.5.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22fed3ebe9 code=0x7ffc0000 [ 328.536814][ T26] audit: type=1326 audit(1757089130.065:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.5.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22fed3ebe9 code=0x7ffc0000 [ 328.559753][ T6582] Dev loop9: unable to read RDB block 0 [ 328.579430][ T6582] loop9: unable to read partition table [ 328.597722][ T6582] loop9: partition table beyond EOD, truncated [ 329.423723][ T7422] ldm_validate_partition_table(): Disk read failed. [ 329.460147][ T7422] Dev loop9: unable to read RDB block 0 [ 329.509997][ T7422] loop9: unable to read partition table [ 329.527730][ T7441] netlink: 320 bytes leftover after parsing attributes in process `syz.1.846'. [ 329.532303][ T7422] loop9: partition table beyond EOD, truncated [ 329.568299][ T7422] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 329.568299][ T7422] ) failed (rc=-5) [ 329.600078][ T7426] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.608817][ T7426] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.427385][ T7451] loop3: detected capacity change from 0 to 1024 [ 330.572360][ T7451] hfsplus: request for non-existent node 3 in B*Tree [ 330.610381][ T7451] hfsplus: request for non-existent node 3 in B*Tree [ 330.777284][ T7451] hfsplus: xattr searching failed [ 331.355618][ T7457] hfsplus: request for non-existent node 4 in B*Tree [ 331.398204][ T7457] hfsplus: request for non-existent node 4 in B*Tree [ 331.577852][ T4739] hfsplus: b-tree write err: -5, ino 3 [ 332.866183][ T7426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.961150][ T7426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.508058][ T7426] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.517385][ T7426] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.526871][ T7426] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.536178][ T7426] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.615700][ T7426] syz.5.842 (7426) used greatest stack depth: 20800 bytes left [ 333.832600][ T7479] overlayfs: failed to clone upperpath [ 333.975853][ T7487] loop3: detected capacity change from 0 to 1024 [ 334.203503][ T7487] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 334.220348][ T7487] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.918556][ T26] kauditd_printk_skb: 26 callbacks suppressed [ 334.918572][ T26] audit: type=1800 audit(1757089137.945:91): pid=7498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.862" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 340.116588][ T7539] overlayfs: failed to clone upperpath [ 341.485776][ T7552] loop3: detected capacity change from 0 to 128 [ 346.787986][ T7607] loop3: detected capacity change from 0 to 256 [ 346.900874][ T7607] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 356.048648][ T4251] Bluetooth: hci1: command 0x0406 tx timeout [ 356.246492][ T7653] chnl_net:caif_netlink_parms(): no params data found [ 356.828866][ T7653] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.873137][ T7653] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.076011][ T23] Bluetooth: hci5: command 0x0409 tx timeout [ 357.110246][ T7653] device bridge_slave_0 entered promiscuous mode [ 357.543460][ T7712] loop3: detected capacity change from 0 to 512 [ 357.619319][ T7712] EXT4-fs (loop3): Ignoring removed nobh option [ 357.666850][ T7712] EXT4-fs (loop3): Mount option "dioread_nolock" incompatible with ext2 [ 357.872956][ T7653] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.911131][ T7653] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.374951][ T7653] device bridge_slave_1 entered promiscuous mode [ 358.566794][ T7653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.620557][ T7653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.891219][ T7736] overlayfs: failed to clone upperpath [ 358.943867][ T7653] team0: Port device team_slave_0 added [ 358.993345][ T7653] team0: Port device team_slave_1 added [ 359.490403][ T7653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.529257][ T7653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.536751][ T2303] Bluetooth: hci5: command 0x041b tx timeout [ 360.084781][ T7653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.452792][ T7653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.516649][ T7653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.537813][ T7757] loop3: detected capacity change from 0 to 2048 [ 360.662433][ T7653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.677047][ T7757] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 360.715208][ T7757] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 360.783961][ T7653] device hsr_slave_0 entered promiscuous mode [ 360.807581][ T7653] device hsr_slave_1 entered promiscuous mode [ 360.819042][ T7757] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 360.849328][ T7653] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.855750][ T7757] EXT4-fs (loop3): This should not happen!! Data will be lost [ 360.855750][ T7757] [ 360.874993][ T7653] Cannot create hsr debugfs directory [ 360.887968][ T7757] EXT4-fs (loop3): Total free blocks count 0 [ 360.911580][ T7773] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 20 with error 28 [ 360.938735][ T7757] EXT4-fs (loop3): Free/Dirty block details [ 360.943443][ T7777] overlayfs: failed to resolve './file1': -2 [ 360.979442][ T7757] EXT4-fs (loop3): free_blocks=66060288 [ 360.986735][ T7757] EXT4-fs (loop3): dirty_blocks=32 [ 361.004589][ T7773] EXT4-fs (loop3): This should not happen!! Data will be lost [ 361.004589][ T7773] [ 361.018769][ T7757] EXT4-fs (loop3): Block reservation details [ 361.031356][ T7757] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 361.285023][ T7653] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 362.293110][ T7653] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 362.359207][ T4249] Bluetooth: hci5: command 0x040f tx timeout [ 362.359422][ T7653] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 362.417737][ T7653] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 362.956769][ T7818] 9pnet: Insufficient options for proto=fd [ 363.160394][ T7653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.251523][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 363.266438][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 363.303033][ T7653] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.340024][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 363.360906][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 363.385605][ T4843] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.392817][ T4843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.414409][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 363.455812][ T1206] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.502175][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 363.511425][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 363.541091][ T4843] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.548256][ T4843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.588440][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 363.607157][ T7843] overlayfs: failed to clone upperpath [ 363.631171][ T1206] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.700680][ T7849] netlink: 24 bytes leftover after parsing attributes in process `syz.5.986'. [ 363.702526][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 363.732635][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 363.761424][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 363.778575][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 363.802149][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 363.833425][ T1206] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.876600][ T7653] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 363.892866][ T7653] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 363.907532][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 363.918003][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 363.937773][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 363.970189][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 363.995726][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 364.015907][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 364.057418][ T1206] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.581744][ T2303] Bluetooth: hci5: command 0x0419 tx timeout [ 364.644655][ T1206] bridge0: port 3(ip6gretap0) entered disabled state [ 364.827783][ T1206] device ip6gretap0 left promiscuous mode [ 364.885008][ T1206] bridge0: port 3(ip6gretap0) entered disabled state [ 364.942412][ T7886] overlayfs: statfs failed on './file0' [ 364.995183][ T7653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.088885][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 365.109943][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 365.609281][ T2303] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 365.806947][ T1206] device hsr_slave_0 left promiscuous mode [ 365.825845][ T1206] device hsr_slave_1 left promiscuous mode [ 365.849746][ T2303] usb 4-1: Using ep0 maxpacket: 32 [ 365.862572][ T1206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.876461][ T1206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.906823][ T1206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.914788][ T1206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.925070][ T7930] overlayfs: failed to clone upperpath [ 365.932685][ T1206] device bridge_slave_1 left promiscuous mode [ 365.939773][ T1206] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.965726][ T1206] device bridge_slave_0 left promiscuous mode [ 365.972203][ T1206] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.986132][ T1206] device veth1_macvtap left promiscuous mode [ 365.993893][ T1206] device veth0_macvtap left promiscuous mode [ 366.000411][ T1206] device veth1_vlan left promiscuous mode [ 366.006440][ T1206] device veth0_vlan left promiscuous mode [ 366.131688][ T2303] usb 4-1: config 4 has an invalid interface number: 128 but max is 0 [ 366.145076][ T2303] usb 4-1: config 4 has no interface number 0 [ 366.151493][ T2303] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.163366][ T2303] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.173548][ T2303] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 366.182674][ T2303] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.614205][ T2303] hub 4-1:4.128: USB hub found [ 366.649732][ T1206] team0 (unregistering): Port device team_slave_1 removed [ 366.662176][ T2303] hub 4-1:4.128: 2 ports detected [ 366.668285][ T1206] team0 (unregistering): Port device team_slave_0 removed [ 366.668489][ T2303] hub 4-1:4.128: Using single TT (err -22) [ 366.687791][ T1206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.703774][ T1206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.783897][ T1206] bond0 (unregistering): Released all slaves [ 366.869364][ T2303] hub 4-1:4.128: hub_hub_status failed (err = -71) [ 366.892861][ T2303] hub 4-1:4.128: config failed, can't get hub status (err -71) [ 366.950648][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 366.997880][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 367.020609][ T2303] usb 4-1: USB disconnect, device number 4 [ 367.040517][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 367.057897][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 367.095551][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 367.148522][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 367.261145][ T7653] device veth0_vlan entered promiscuous mode [ 367.304865][ T7653] device veth1_vlan entered promiscuous mode [ 367.361932][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 367.377693][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 367.386240][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 367.416401][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 367.454055][ T7653] device veth0_macvtap entered promiscuous mode [ 367.483108][ T7653] device veth1_macvtap entered promiscuous mode [ 367.534943][ T7653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.555658][ T7653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.577896][ T7653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.610958][ T7653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.628429][ T7963] loop3: detected capacity change from 0 to 1024 [ 367.635463][ T7653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.654380][ T7653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.690223][ T7653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.723650][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 367.740712][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 367.764855][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 367.785997][ T7969] 9pnet: Insufficient options for proto=fd [ 367.788926][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 367.807140][ T7969] overlayfs: failed to clone upperpath [ 367.814816][ T4843] hfsplus: bad catalog file entry [ 367.827655][ T4843] hfsplus: b-tree write err: -5, ino 3 [ 367.838080][ T7653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.870993][ T7653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.894842][ T7653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.905471][ T7653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.925658][ T7653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.949210][ T7653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.970050][ T7653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.029014][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 368.049550][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 368.239813][ T7653] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.286132][ T7653] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.569410][ T7653] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.625636][ T7653] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.129785][ T8003] 9pnet: Insufficient options for proto=fd [ 369.280648][ T5651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.326729][ T4739] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.366602][ T4739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.483372][ T5651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.687168][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 370.047561][ T5651] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 371.845350][ T8034] binder: 8033:8034 ioctl c018620c 200000000080 returned -22 [ 371.884483][ T8036] loop3: detected capacity change from 0 to 128 [ 372.037182][ T8036] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 372.103403][ T8049] 9pnet: Insufficient options for proto=fd [ 372.127938][ T8036] ext4 filesystem being mounted at /203/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 374.327809][ T8075] loop3: detected capacity change from 0 to 1024 [ 374.859844][ T8075] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 375.208724][ T8097] 9pnet: Insufficient options for proto=fd [ 375.241680][ T8097] overlayfs: failed to clone upperpath [ 375.617483][ T8105] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 375.630822][ T8105] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 375.896219][ T8124] 9pnet: Insufficient options for proto=fd [ 378.592439][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.598856][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.060279][ T8205] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 379.925685][ T8214] loop6: detected capacity change from 0 to 1024 [ 382.003579][ T8274] loop3: detected capacity change from 0 to 1024 [ 382.044218][ T8276] loop6: detected capacity change from 0 to 512 [ 382.600280][ T8276] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 382.868451][ T8276] EXT4-fs (loop6): orphan cleanup on readonly fs [ 383.040223][ T8276] EXT4-fs warning (device loop6): ext4_enable_quotas:6461: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 383.061440][ T8276] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 383.074767][ T8276] EXT4-fs error (device loop6): ext4_ext_check_inode:501: inode #13: comm syz.6.1110: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 383.095241][ T26] audit: type=1800 audit(1757089186.124:92): pid=8274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1109" name="file2" dev="loop3" ino=25 res=0 errno=0 [ 383.293672][ T8276] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.1110: couldn't read orphan inode 13 (err -117) [ 383.546203][ T8276] EXT4-fs (loop6): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,min_batch_time=0x000000000000082f,grpquota,debug,debug,grpid,,errors=continue. Quota mode: writeback. [ 384.170599][ T8276] EXT4-fs error (device loop6): ext4_lookup:1862: inode #2: comm syz.6.1110: deleted inode referenced: 12 [ 386.348548][ T8328] 9pnet: Insufficient options for proto=fd [ 386.969441][ T8353] loop3: detected capacity change from 0 to 256 [ 387.816732][ T8380] 9pnet: Insufficient options for proto=fd [ 387.824792][ T8380] overlayfs: failed to clone upperpath [ 387.941405][ T8383] No such timeout policy "syz1" [ 388.564990][ T8376] loop6: detected capacity change from 0 to 2048 [ 388.703179][ T8376] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 392.103880][ T8423] 9pnet: Insufficient options for proto=fd [ 396.248304][ T8470] No such timeout policy "syz1" [ 396.256083][ T8472] 9pnet: Insufficient options for proto=fd [ 399.139678][ T8513] 9pnet: Insufficient options for proto=fd [ 399.305434][ T8513] overlayfs: failed to clone upperpath [ 402.553013][ T8568] 9pnet: Insufficient options for proto=fd [ 402.616668][ T8568] overlayfs: failed to clone upperpath [ 406.015716][ T8674] loop6: detected capacity change from 0 to 512 [ 406.187837][ T8674] EXT4-fs (loop6): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 406.230671][ T8674] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.254607][ T8674] EXT4-fs error (device loop6): ext4_empty_dir:3136: inode #12: comm syz.6.1212: invalid size [ 407.112659][ T8701] 9pnet: Insufficient options for proto=fd [ 407.127748][ T8701] overlayfs: failed to clone upperpath [ 407.651195][ T8706] No such timeout policy "syz1" [ 408.109259][ T13] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 411.019298][ T13] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 411.033735][ T13] usb 7-1: can't read configurations, error -71 [ 411.363320][ T8761] No such timeout policy "syz1" [ 412.060725][ T26] audit: type=1326 audit(1757089215.094:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8767 comm="syz.3.1243" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5a503d0be9 code=0x0 [ 412.835606][ T8786] loop6: detected capacity change from 0 to 256 [ 412.850449][ T8785] 9pnet: Insufficient options for proto=fd [ 414.002432][ T8812] No such timeout policy "syz1" [ 416.084357][ T26] audit: type=1326 audit(1757089219.104:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.5.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22fed3ebe9 code=0x7ffc0000 [ 416.146939][ T26] audit: type=1326 audit(1757089219.104:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.5.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22fed3ebe9 code=0x7ffc0000 [ 416.237885][ T26] audit: type=1326 audit(1757089219.114:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.5.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22fed3ebe9 code=0x7ffc0000 [ 416.351842][ T26] audit: type=1326 audit(1757089219.164:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.5.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22fed3ebe9 code=0x7ffc0000 [ 416.375131][ T26] audit: type=1326 audit(1757089219.164:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.5.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22fed3ebe9 code=0x7ffc0000 [ 416.535565][ T26] audit: type=1326 audit(1757089219.234:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.5.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f22fed3ebe9 code=0x7ffc0000 [ 416.693360][ T26] audit: type=1326 audit(1757089219.234:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.5.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22fed3ebe9 code=0x7ffc0000 [ 416.716301][ T26] audit: type=1326 audit(1757089219.234:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.5.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f22fed3ebe9 code=0x7ffc0000 [ 416.798519][ T26] audit: type=1326 audit(1757089219.234:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.5.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22fed3ebe9 code=0x7ffc0000 [ 416.938995][ T8849] netlink: 'syz.6.1270': attribute type 3 has an invalid length. [ 417.641868][ T8860] No such timeout policy "syz1" [ 427.314931][ T9005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1323'. [ 427.360767][ T9005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1323'. [ 427.370874][ T9005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1323'. [ 427.380239][ T8999] No such timeout policy "syz1" [ 427.558472][ T9019] capability: warning: `syz.4.1327' uses 32-bit capabilities (legacy support in use) [ 429.827029][ T9052] No such timeout policy "syz1" [ 431.437666][ T9096] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 432.415620][ T9108] No such timeout policy "syz1" [ 432.946758][ T9123] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 433.291252][ T9139] 9pnet: Insufficient options for proto=fd [ 434.860737][ T9139] overlayfs: failed to clone upperpath [ 435.891690][ T9184] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 436.223928][ T9190] No such timeout policy "syz1" [ 438.137172][ T9214] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1382'. [ 438.235747][ T9220] 9pnet: Insufficient options for proto=fd [ 438.265118][ T9220] overlayfs: failed to clone upperpath [ 438.550704][ T9214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.360390][ T9258] No such timeout policy "syz1" [ 440.049821][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.056169][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.123148][ T9261] 9pnet: Insufficient options for proto=fd [ 440.163197][ T9261] overlayfs: failed to clone upperpath [ 440.263584][ T9264] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 442.595596][ T9304] No such timeout policy "syz1" [ 443.245644][ T9311] 9pnet: Insufficient options for proto=fd [ 443.317883][ T9311] overlayfs: failed to clone upperpath [ 443.327944][ T9315] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 443.549939][ T9321] ODEBUG: Out of memory. ODEBUG disabled [ 444.025948][ T9340] No such timeout policy "syz1" [ 445.602998][ T9353] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 447.987940][ T9396] No such timeout policy "syz1" [ 448.235805][ T9406] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 451.080999][ T9443] No such timeout policy "syz1" [ 453.509974][ T9482] No such timeout policy "syz1" [ 457.166863][ T9538] No such timeout policy "syz1" [ 458.058163][ T9550] overlayfs: failed to clone upperpath [ 461.337473][ T9593] No such timeout policy "syz1" [ 461.495731][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 461.495749][ T26] audit: type=1326 audit(1757089264.531:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9596 comm="syz.3.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a503d0be9 code=0x7ffc0000 [ 461.573745][ T26] audit: type=1326 audit(1757089264.571:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9596 comm="syz.3.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f5a503d0be9 code=0x7ffc0000 [ 461.599814][ T9600] netlink: 'syz.4.1502': attribute type 13 has an invalid length. [ 461.628591][ T9600] netlink: 'syz.4.1502': attribute type 17 has an invalid length. [ 461.653045][ T26] audit: type=1326 audit(1757089264.571:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9596 comm="syz.3.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a503d0be9 code=0x7ffc0000 [ 461.874454][ T26] audit: type=1326 audit(1757089264.571:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9596 comm="syz.3.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5a503d0be9 code=0x7ffc0000 [ 461.915569][ T9600] device sit0 left promiscuous mode [ 461.947902][ T26] audit: type=1326 audit(1757089264.571:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9596 comm="syz.3.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a503d0be9 code=0x7ffc0000 [ 462.449225][ T26] audit: type=1326 audit(1757089264.581:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9596 comm="syz.3.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f5a503d0be9 code=0x7ffc0000 [ 462.945940][ T26] audit: type=1326 audit(1757089264.591:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9596 comm="syz.3.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a503d0be9 code=0x7ffc0000 [ 462.969073][ T26] audit: type=1326 audit(1757089264.601:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9596 comm="syz.3.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f5a503d0be9 code=0x7ffc0000 [ 463.009402][ T26] audit: type=1326 audit(1757089264.601:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9596 comm="syz.3.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a503d0be9 code=0x7ffc0000 [ 463.077279][ T26] audit: type=1326 audit(1757089264.611:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9596 comm="syz.3.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a503d0be9 code=0x7ffc0000 [ 463.144339][ T9600] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 463.153647][ T9600] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 463.204852][ T9600] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 463.418153][ T9600] syz.4.1502 (9600) used greatest stack depth: 20752 bytes left [ 464.833538][ T9631] syz.6.1511 (9631) used greatest stack depth: 20720 bytes left [ 465.019550][ T9635] No such timeout policy "syz1" [ 472.406735][ T9707] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1540'. [ 473.482425][ T9725] 9pnet: Insufficient options for proto=fd [ 477.969737][ T9766] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1560'. [ 478.030694][ T5259] Bluetooth: hci5: command 0x0406 tx timeout [ 481.759961][ T9800] No such timeout policy "syz1" [ 483.317565][ T9839] netlink: 'syz.6.1584': attribute type 13 has an invalid length. [ 483.403439][ T9839] netlink: 'syz.6.1584': attribute type 27 has an invalid length. [ 484.994121][ T9891] No such timeout policy "syz1" [ 485.981904][ T9900] overlayfs: missing 'lowerdir' [ 489.501106][ T9945] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 489.550731][ T9947] overlayfs: missing 'lowerdir' [ 491.556047][ T9935] No such timeout policy "syz1" [ 492.095946][ T9983] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 493.460066][ T9986] overlayfs: missing 'lowerdir' [ 495.143682][T10017] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 497.933178][T10053] overlayfs: missing 'lowerdir' [ 497.947557][T10022] No such timeout policy "syz1" [ 498.118626][T10060] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 499.926463][T10088] overlayfs: missing 'lowerdir' [ 501.624801][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.631216][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.826451][T10104] No such timeout policy "syz1" [ 505.000324][T10153] overlayfs: missing 'lowerdir' [ 505.135106][T10152] batman_adv: batadv0: Adding interface: dummy0 [ 505.166770][T10152] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.250099][T10152] batman_adv: batadv0: Interface activated: dummy0 [ 506.492496][T10180] No such timeout policy "syz1" [ 507.523948][T10192] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 507.559473][T10192] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 612.579085][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 612.586135][ C0] (detected by 0, t=10502 jiffies, g=34501, q=30) [ 612.592819][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4294998375-4294987873), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 612.606227][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g34501 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 612.617462][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 612.627449][ C0] rcu: RCU grace-period kthread stack dump: [ 612.633358][ C0] task:rcu_preempt state:R running task stack:27168 pid: 15 ppid: 2 flags:0x00004000 [ 612.644187][ C0] Call Trace: [ 612.647488][ C0] [ 612.650442][ C0] __schedule+0x11bb/0x4390 [ 612.654987][ C0] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 612.660398][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 612.666325][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 612.672249][ C0] ? _raw_spin_unlock+0x40/0x40 [ 612.677135][ C0] ? rcu_is_watching+0x11/0xa0 [ 612.682016][ C0] ? release_firmware_map_entry+0x190/0x190 [ 612.688042][ C0] schedule+0x11b/0x1e0 [ 612.692230][ C0] schedule_timeout+0x15c/0x280 [ 612.697200][ C0] ? console_conditional_schedule+0x40/0x40 [ 612.703127][ C0] ? update_process_times+0x200/0x200 [ 612.708532][ C0] ? prepare_to_swait_event+0x331/0x350 [ 612.714347][ C0] rcu_gp_fqs_loop+0x29e/0x11b0 [ 612.719231][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 612.724464][ C0] ? rcu_gp_init+0xd58/0x10e0 [ 612.729182][ C0] ? rcu_gp_init+0x10e0/0x10e0 [ 612.734071][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 612.739303][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 612.744528][ C0] rcu_gp_kthread+0x98/0x350 [ 612.749151][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 612.754297][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 612.760335][ C0] ? __kthread_parkme+0x157/0x1b0 [ 612.765400][ C0] kthread+0x436/0x520 [ 612.769500][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 612.774635][ C0] ? kthread_blkcg+0xd0/0xd0 [ 612.779361][ C0] ret_from_fork+0x1f/0x30 [ 612.785640][ C0] [ 612.788847][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 612.795188][ C0] NMI backtrace for cpu 0 [ 612.799702][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 612.806849][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 612.817015][ C0] Call Trace: [ 612.820314][ C0] [ 612.823184][ C0] dump_stack_lvl+0x168/0x230 [ 612.827897][ C0] ? show_regs_print_info+0x20/0x20 [ 612.833126][ C0] ? load_image+0x3b0/0x3b0 [ 612.837790][ C0] ? irq_work_queue+0xbf/0x140 [ 612.842588][ C0] nmi_cpu_backtrace+0x397/0x3d0 [ 612.847561][ C0] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 612.853735][ C0] ? _printk+0xcc/0x110 [ 612.857921][ C0] ? cpu_online+0x1d/0x30 [ 612.862272][ C0] ? load_image+0x3b0/0x3b0 [ 612.866907][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 612.872999][ C0] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 612.879269][ C0] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 612.885459][ C0] print_other_cpu_stall+0x10c8/0x1220 [ 612.890955][ C0] ? print_cpu_stall+0x5f0/0x5f0 [ 612.895954][ C0] ? timekeeping_advance+0x7f6/0xac0 [ 612.901262][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 612.906317][ C0] rcu_sched_clock_irq+0x831/0x1110 [ 612.911546][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 612.916435][ C0] ? account_process_tick+0x227/0x3a0 [ 612.921839][ C0] update_process_times+0x193/0x200 [ 612.927183][ C0] tick_sched_timer+0x37d/0x560 [ 612.932066][ C0] __hrtimer_run_queues+0x4fe/0xc40 [ 612.937303][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 612.942893][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 612.948032][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 612.954134][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 612.959131][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 612.965156][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 612.970818][ C0] [ 612.973772][ C0] [ 612.976826][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 612.982842][ C0] RIP: 0010:default_idle+0xb/0x10 [ 612.987987][ C0] Code: bf 48 89 df e8 b6 f3 09 f8 eb b5 e8 3f b0 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d 77 84 53 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 613.007917][ C0] RSP: 0018:ffffffff8be07dc8 EFLAGS: 000002c6 [ 613.014018][ C0] RAX: d170a29883d0f400 RBX: ffffffff8bebc3c0 RCX: d170a29883d0f400 [ 613.022214][ C0] RDX: 0000000000000001 RSI: ffffffff8a0b1620 RDI: ffffffff8a59a240 [ 613.030212][ C0] RBP: ffffffff8be07ef8 R08: dffffc0000000000 R09: ffffed101720765a [ 613.038311][ C0] R10: ffffed101720765a R11: 1ffff11017207659 R12: ffffffff8d698de8 [ 613.046489][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff17d7878 [ 613.054539][ C0] default_idle_call+0x81/0xc0 [ 613.059377][ C0] do_idle+0x21b/0x5b0 [ 613.063486][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 613.068803][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 613.074865][ C0] cpu_startup_entry+0x14/0x20 [ 613.079724][ C0] ? time_init+0x40/0x40 [ 613.084010][ C0] start_kernel+0x486/0x530 [ 613.088638][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 613.094578][ C0]