last executing test programs: 14m45.415248544s ago: executing program 4 (id=698): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xa, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x400}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000280), &(0x7f0000000100)=@tcp, 0x1}, 0x20) 14m45.23936726s ago: executing program 4 (id=700): socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/prev\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f00000008c0)=""/204, 0xcc}], 0x1, 0xa2, 0x0) 14m45.102101788s ago: executing program 4 (id=702): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000280)=0x10000, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000100)=""/92, &(0x7f00000001c0)=0x11) 14m44.820183699s ago: executing program 4 (id=707): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000400)={r0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0xf, 0x7, 0x85f, 0x10, 0xed0, 0x1, 0x0, 'syz0\x00'}) 14m44.718670612s ago: executing program 3 (id=709): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x8}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fe01000000000000", 0x1c) 14m44.564474349s ago: executing program 4 (id=711): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x11c2, 0x2208, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0x8, 0x81, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000004c0)={0x0, 0x2, 0x29, {0x29, 0x23, "83efb930f0187ff0478fa22a61a54607b71ea9e442359c479c37f525cde38bf4fd6ef4366b4847"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 14m44.315823475s ago: executing program 3 (id=713): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000040)=""/148, 0x94}, {0x0}], 0x2}, 0xfff}], 0x1, 0x10000, 0x0) 14m43.920259048s ago: executing program 3 (id=717): r0 = syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a439, &(0x7f0000002500)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRES8, @ANYRESHEX, @ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="4c07f18b4a72a428cdf1fcc6a889d51c7d395bfc15396c272d41b4a79dba0739c1c7461ae19481932aa4c03054c8b2442a4c1e4311032bebb0cb70495acfcf1f08735df868c705", @ANYBLOB="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", @ANYRES16, @ANYRESDEC=r0, @ANYBLOB="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", @ANYRESHEX, @ANYRESHEX, @ANYRES8], 0xb, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) 14m43.919387989s ago: executing program 2 (id=727): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xf32}) r0 = socket(0x29, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) 14m43.706485833s ago: executing program 2 (id=719): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000140)={0x0, 0x6}) 14m43.21343227s ago: executing program 3 (id=720): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$netlink(r0, &(0x7f0000005d80)={0x0, 0x0, &(0x7f0000005cc0)=[{&(0x7f00000002c0)=ANY=[], 0x10}, {0x0, 0x28}], 0x2, 0x0, 0x0, 0x4000804}, 0x4000) 14m43.110578963s ago: executing program 2 (id=721): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000008f40000000000000000e6ff851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) 14m42.556917716s ago: executing program 3 (id=724): syz_open_dev$usbfs(&(0x7f0000000100), 0x1, 0xc000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000240)) 14m42.555832335s ago: executing program 2 (id=735): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x185202, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x9, 0x0, 0x0, 0x12, 0x10, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe1085989482208000000c11d875397bdb220a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) 14m42.349041083s ago: executing program 2 (id=726): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a000100000000317359f5001c1400000000000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 14m42.286369399s ago: executing program 4 (id=728): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001300)=@newtaction={0x48, 0x1c, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_skbmod={0x30, 0xd, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x48}}, 0x0) 14m42.285705849s ago: executing program 3 (id=729): unshare(0x42000000) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @multicast2}, {0x2, 0x0, @broadcast}, 0x4, 0x0, 0x0, 0xfdffffffffffffff, 0xfffc, 0x0, 0x71cf0b8c, 0x0, 0x5}) 14m42.031958368s ago: executing program 2 (id=730): r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\x8f\xd8\xdf\x91\xfbz\x94/C\xb3\x86\xe2+Op\xd0\x00\x00\x00\x00;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xb6\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8\xd6@\xb5\x81j\xd3\xf2Gih\xa5%)\xc5#\x80z8\xe2\xd2}\xf5\xe4\x9f5\x9b\x01\x00'/146, 0x1) fsetxattr$security_ima(r0, &(0x7f0000000080), &(0x7f0000001240)=ANY=[@ANYBLOB="0320"], 0xa, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 14m2.860182244s ago: executing program 32 (id=725): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2000000, &(0x7f00000018c0)=ANY=[], 0xfb, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXA4XOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//hBVVxg==") truncate(&(0x7f0000000040)='./file2\x00', 0x6) unlink(&(0x7f0000000100)='./file2\x00') 14m2.658719032s ago: executing program 33 (id=723): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0xd, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 14m2.359808018s ago: executing program 34 (id=730): r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\x8f\xd8\xdf\x91\xfbz\x94/C\xb3\x86\xe2+Op\xd0\x00\x00\x00\x00;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xb6\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8\xd6@\xb5\x81j\xd3\xf2Gih\xa5%)\xc5#\x80z8\xe2\xd2}\xf5\xe4\x9f5\x9b\x01\x00'/146, 0x1) fsetxattr$security_ima(r0, &(0x7f0000000080), &(0x7f0000001240)=ANY=[@ANYBLOB="0320"], 0xa, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 14m2.178455227s ago: executing program 35 (id=729): unshare(0x42000000) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @multicast2}, {0x2, 0x0, @broadcast}, 0x4, 0x0, 0x0, 0xfdffffffffffffff, 0xfffc, 0x0, 0x71cf0b8c, 0x0, 0x5}) 14m1.962819739s ago: executing program 36 (id=728): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001300)=@newtaction={0x48, 0x1c, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_skbmod={0x30, 0xd, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x48}}, 0x0) 6m46.47757638s ago: executing program 7 (id=3960): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}], [], 0x6b}}) 6m45.953450097s ago: executing program 7 (id=3968): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000180)={0x7, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000001c0)={0x50000, "efb6c8557a069c29d6cf00e47ad81f3b9e18584316689ad261c7e79bdd9b4026"}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000200)=0x8001) 6m45.753903376s ago: executing program 7 (id=3972): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 6m44.520367276s ago: executing program 7 (id=3988): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f00000000c0)={[{@time_offset={'time_offset', 0x3d, 0x1}}, {@dmask={'dmask', 0x3d, 0x6}}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@fmask={'fmask', 0x3d, 0x1}}, {@namecase}, {@namecase}, {@namecase}, {@allow_utime={'allow_utime', 0x3d, 0xbab5}}, {@zero_size_dir}]}, 0x1, 0x1533, &(0x7f0000006800)="$eJzs3AucTtX6OPDnWWvtMSS9TXIZ1lrP5k0uiyTJJUkuSZIkSW4JSZIjCYkht6QhCcllSC5DSC4Tk8b9fr8kJEmTJCG5Jev/mZi/OnX+55xfnfz+Z57v5/N+Zj2z3mftZ88z73733vPyTZehNRrVrNqAiOAPwYtfEgAgFgAGAsA1ABAAQNm4snEZ89klJvyxjbA/10PJV7oCdiVx/7M27n/Wxv3P2rj/WRv3P2vj/mdt3P+sjfvPWFa2eXr+a/mRdR98/z8r4/f//yLpJcd+sbbk9V0BYv7VFO7////wD+Ry//9rBf/Kk7j/WRv3P6uKvdIFsP8F+PWfFWT7hzPc/6yN+89YVvbLe8GxcOXvR//VD4j8J/8G4ntd/Clf+f38h/vPGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4z9Bc74yxQAZI6vdF2MMcYYY4wxxhj78/hsV7oCxhhjjDHGGGOM/echCJCgIIAYyAaxkB1ygACIyZy/FuLgOsgN10MeyAv5ID/EQwEoCBoMWCAIoRAUhijcAEXgRigKxaA4lAAHJaEU3ASl4WYoA7dAWbgVysFtUB4qQEWoBLdDZbgDqsCdUBXugmpQHWpATbgbasE9UBvuhTpwH9SF+6EePAD14UFoAA9BQ3gYGsEj0BgehSbQFJpBc2jxP8p/AXrAi9ATekEC9IY+8BL0hX7QHwbAQHgZBsErMBhehUQYAkPhNRgGr8NweANGwEgYBW/CaHgLxsBYGAfjIQkmwER4GybBOzAZpsBUmAbJMB1mwLswE2bBbHgP5sD7MBfmwXxYACnwASyERZAKH8Ji+AjSYAkshWWwHFbASlgFq2ENrIV1sB42wEbYBJthC2yFbbAddsBO+Bh2wSewG/bAXvgU9sFn/2b+6b/L74qAgAIFKlQYgzEYi7GYA3NgTsyJuTAXRjCCcRiHuTE35sE8mA/zYTzGY0EsiAYNEhIWwkIYxSgWwSJYFIticSyODh2WwlJYGm/GMlgGy2JZLIflsDxWwApYCSthZayMVbAKVsWqWA2rYQ2sgXfj3dgba2NtrIN1sC7Wzbw9hQ2wATbEhtgIG2FjbIxNsAk2w2bYAltgS2yJrbAVtsE22BbbYjtsh+2xPXbADtgRO2In7ISdsTN2wS7YFbtht/QXsgG+iC9iL6wmemMf7IN9MTFbfxyAA/BlHISv4Cv4KibiEByKr+Fr+DoOx1M44sJIHIWjsLJ4C8fgWCQxHpMwCSfiRJyEk3AyTsEpOA2TcTrOwBk4E2fhLHwP5+D7+D7Ow3m4AFMwBRfiIkzFVFyMpzENl+BSXIbLcQUux1W4GlfhWlyHa3EDbsBNuAm34BbchttwB+7Aj1EB4Ce4B/dgIu7Dfbgf9+MBPIAH8SCmYzoewkN4GA/jETyCR/EoHsPjeAKP40k8iafwNJ7BM3gOz+F5fC7+q4YfF1uTCCKDEkrEiBgRK2JFDpFD5BQ5RS6RS0RERMSJOJFb5BZ5RB6RT+QT8SJeFBQFhRFGkAgzjhQiKqKiiCgiioqiorgoLpxwopQoJUqL0qKMKCPKiltFOXGbKC8qiNaukqgkKos2roq4U1QVVUU1UV3UEDVFTVFL1BK1RW1RR9QRdUVdUU88IOqL3tgfHxIZnWkkhmBjMRSbiKZCXjpCtRTDsZVoLdqIJ8RIHIHtREvXXjwtOogx2FH8TYzFZ0VnMR67iOdFV9FNdBcviB6ilespeonJ2Fv0EdOwr+gn+osBYiZWF+/hnOw1xKsiUQwRQ8VrYgG+LoaLN8QIMVKMEm+K0eItMUaMFePEeJEkJoiJ4m0xSbwjJospYqqYJpLFdDFDvCtmillitnhPzBHvi7linpgvFogU8YFYKBaJVPGhWCw+EmliiVgqlonlYoVYKVaJ1WKNWCvWifVig9goNonNYovYKraJ7WKH2Ck+FrvEJ2K32CP2ik/FPvGZ2C8+FwfEF+Kg+FKki6/EIfG1OCy+EUfEt+Ko+E4cE8fFCfG9OCl+EKfEaXFGnBXnxI/ivPhJXBBegEQppJRKBjJGZpOxMrvMIa+SOWWQefyXcfI6mVteL/PIvDKfzC/jZQFZUGpppJUkQ1lIFpZReYMsIm+URWUxWVyWkE6WlKXkTbK0vFmWkbfIsvJWWU7eJsvLCrKirCRvl5XlHRIiF7dRTVaXNWRNebdMgHtkbXmvrCPvk3Xl/bKefEDWlw/KBvIh2VA+LBvJR2Rj+ahsIpvKZrK5bCEfky3l47KVbC3byCdkW/mkbCefku3l07KD9Jd+RZ6VneVzsot8XnaV3WR3+ZO8IL3sKXtJ6A2yj3xJ9pX9ZH85QA6UL8tB8hU5WL4qE+UQOVS+JofJ1+Vw+YYcIUfKUfJNOVq+JcfIsXKcHC+T5AQ5Ub4tJ8l35GQ5RU6V02SynC77X1pptpT/NP/t38kf/PPWN8nNcovcKrfJ7XKH3Ck/lrvkLrlb7pZ75V65T+6T++V+eUAekAflQZku0+UheUgeloflEXlEHpVH5TF5XJ6V38uT8gd5Sp6Wp+VZeU6ek+cv/QxAoRJKKqUCFaOyqViVXeVQV6mc6mqVS12jIupaFaeuU7nV9SqPyqvyqfwqXhVQBZVWRllFKlSFVGEVVTfgpV8YVVyVUE6VVKXUTf9OviqiblRFVbFf5WfWl/AP6muhWqiWqqVqpVqpNqqNaqvaqnaqnWqv2qsOqoPqqDqqTqqT6qw6qy6qi+qquqruqrvqoXqonqqnSlAJqo96SfVV/VR/NUANVC+LjH0YrAarRJWohqqhapgapoar4WqEGqFGqVFqtBqtxqgxapwap5JUkpqoJqpJapKarCarqWqqSlbJaoaaoWaqmWq2mq3mqDlqrpqr5qv5KkWlqIVqoUpVqWqxWqzS1BK1RC1Ty9QKtUKtUqvUGrVGrVPr1Aa1QaWpzWqz2qq2qu1qu9qpdqpdapfarXarvWqv2qf2qf1qvzqgDqiD6qBKV+nqkDqkDqvD6og6oo6qo+qYOqZOqBPqpDqpTqlT6ow6o86pc+q8Oq8uqAsZp32BCESgAhXEBDFBbBAb5AhyBDmDnEGuIFcQCSJBXBAX5A6uD/IEeYN8Qf4gPigQFAx0YAIbiEtNjwY3BEWCG4OiQbGgeFAicEHJoFRwU1A6uDkoE9wSlA1uDcoFtwXlgwpBxaBScHtQObgjqBLcGVQN7gqqBdWDGkHN4O6gVnBPUDu4N6gT3BfUDe4P6gUPBPWDB4MGwUNBw+DhoFHwSNA4eDRoEjQNmgXNgxZ/6vren8r7uOupe+kE3Vv30S/pvrqf7q8H6IH6ZT1Iv6IH61d1oh6ih+rX9DD9uh6u39Aj9Eg9Sr+pR+u39Bg9Vo/T43WSnqAn6rf1JP2Onqyn6Kl6mk7W0/UM/a6eqWfp2fo9PUe/r+fqeXq+XqBT9Ad6oV6kU/WHerH+SKfpJXqpXqaX6xV6pV6lV+s1eq1ep9frDXqj3qQ36y16q96mt+sdeqf+WO/Sn+jdeo/eqz/V+/Rner/+XB/QX+iD+kudrr/Sh/TX+rD+Rh/R3+qj+jt9TB/XZfT3+qT+QZ/Sp/UZfVaf0z/q8/onfUH7jJP7jLd3o4wyMSbGxJpYk8PkMDlNTpPL5DIREzFxJs7kNrlNHpPH5DP5TLyJNwVNQZOBDJlCppCJmqgpYoqYoqaoKW6KG2ecKWVKmdKmtCljypiypqwpZ8qZ8qa8qWgqmtvN7eYOc4e509xp7jJ3meqmuqlpappappapbWqbOqaOqWvqmnqmnqlv6psGpoFpaBqaRqaRaWwamyamiWlmmpkWpoVpaVqaVqaVaWPamLamrWln2pn2pr3pYDqYjqaj6WQ6mc6ms+liupiupqvpbrqbHqaH6Wl6mgSTYPqYPqav6Wv6m/5moBloBplBZrAZbBJNohlqhpphZpgZboabEWakGZVxomreMmPMWDPOjDdJJslMNBPNJDPJTDaTzVQz1SSbZDPDzDAzzUwz28w2c8wcM9fMNfPNfJNiUsxCs9CkmlSz2Cw2aSbNLDVLzXKz3Kw0K81qs9qsNWvNelhvNpqNZrPZbLaarWa72W52mp1ml9lldpvdZq/Za/aZfWa/2W8OmAPmoDlo0k26OWQOmcPmsDlijpij5qg5Zo6ZE+aEOWlOmlPmlDljzphzJu+l90tvYm12m8NeZXPaq20ue439+zifzW/jbQFb0Gqbx+b9VWystUVtMVvclrDOlrSl7E2/icvbCrairWRvt5XtHbbKb+Ja9h5b295r69j7bE1796/iuvZ+W88+YusjAtimtqFtbhvZR2xj+6htYpvaZra5bWuftO3sU7a9fdp2sM/8Jl5oF9nVdo1da9fZ3XaPPWPP2sP2G3vO/mh72l52oH3ZDrKv2MH2VZtoh/wmHmXftKPtW3aMHWvH2fG/iafaaTbZTrcz7Lt2pp31mzjFfmDn2FQ7186z8+2Cn+OMmlLth3ax/cim2QCW2mV2uV1hV9pV/7fWZXaD3Wg32V32E7vVbrPb7Q67M/NE2O6xe+2ndp/9zB6yX9sD9gt70B6x6farn+OM/Ttiv7VH7Xf2mD1uT9jv7Un7g8rMztj37+1P9oL1FggJSJKigGIoG8VSdspBV1FOuppy0TUUoWspjq6j3HQ95aG8lI/yUzwVoIKkyZAlopAKUWGK0g2UWV5xKkGOSlIpuolK081Uhm6hsnQrlaPbqDxVoIpUiW6nynQHVaE7qSrdRdWoOtWgmnQ31aJ7qDbdS3XoPqpL91M9eoDq04PUgB6ihvQwNaJHqDE9Sk2oKTWj5tSCHqOW9Di1otbUhp6gtvQktaOnqD09TR3oGepIf6NO9Cx1pueoCz1PXakbdacXqAe9SD2pFyVQb+pDL1Ff6kf9aQANpJdpEL1Cg+lVSqQhNJReo2H0Og2nN2gEjaRR9CaNprdoDI2lcTSekmgCTaS3aRK9Q5NpCk2laZRM02kGvUszaRbNpvdoDr1Pc2kezacFlEIf0EJaRKn0IS2mjyiNltBSWkbLaQWtpFW0mtbQWlpH62kDbaRNtJm20FbaRttpB+2kj2kXfUK7aQ/tpU9pH31G++lzOkBf0EH6ktLpKzpEX9Nh+oaO0Le+F31Hx+g4naDv6ST9QKfoNJ2hs3SOfqTz9BNdIE8QYihCGaowCGPCbGFsmD3MEV4V5gyvDnOF14SR8NowLrwuzB1eH+YJ84b5wvxhfFggLBjq0IQ2pDAMC4WFw2h4Q1gkvDEsGhYLi4clQheWDEuFN4Wlw5vDMuEtYdnw1rBceFtYPqwQPnJfpfD2sHJ4R1glvDOsGt4VVgurhzXCmuHdYa3wnrB2eG9YJ7wvLBPeH9YLHwjrhw+GDcKHwobhw2Gj8JGwcfho2CRsGjYLm4ctwsfCluHjYauwddgmvCpsGz4ZtgufCtuHT4cdwmd+nr9/Ueb8E7+ZTwh7h33Cl8KXQu/vlfOjC6Ip0Q+iC6OLoqnRD6OLox9F06JLokujy6LLoyuiK6Oroquja6Jro+ui66Mbohujm6Le18wGDp1w0ikXuBiXzcW67C6Hu8rldFe7XO4aF3HXujh3ncvtrnd5XF6Xz+V38a6AK+i0M846cqEr5Aq7qLvBFXE3uqKumCvuSjjnSrpSrrlr4Vq4lu5x18q1dm3cE+4J96R70j3lnnJPuw7uGdfR/c11cs+6zu4595x73nV13Vx394Lr4SbkuviaTHB9XB/X1/V1/V1/N9ANdIPcIDfYDXaJLtENdUPdMDfMDXfD3Qg3wo1yo9xoN9qNcWPcODfOJbkkN9FNdJPcJDfZTXZT3VSX7JLdDDfDzXQzXeVZF7cy18118918l+JS3EKXcc6Y6ha7xS7Npbmlbqlb7pa7lW6lW+1Wu7VurVvv1ruNbqPb7Da7rW6r2+62u51up9vldrnd/pqLi7p9br/b7w64A+6g+9Klu6/cIfe1O+y+cUfct+6o+84dc8fdCfe9O+l+cKfcaXfGnXXn3I/uvPvJXXDeJUUmRCZG3o5MirwTmRyZEpkamRZJjkyPzIi8G5kZmRWZHXkvMifyfmRuZF5kfmRBJCXyQWRhZFEkNfJhZHHko0haZElkaWRZZHlkRcT7AltDX8gX9lF/gy/ib/RFfTFf3Jfwzpf0pfxNvvTFutO8v9WX87f58r6Cr+gf9U18U9/MN/ct/GO+pX/ct/KtfRv/hG/rn/Tt/FO+vX/ad/DP+I7+b76Tf9Z39s/5Lv5539V38939C76Hf9H39L18gu/t+/iXfF/fz/f3A/xA/7If5F/xg/2rPtEP8UP9a36Yf90P92/4EX6kHxXzph+deYkM432Sn+An+rf9JP+On+yn+Kl+mk/20/0M/66f6Wf52f49P8e/7+f6eX6+X+BT/Ad+oV/kU/2HfrH/yKf5JZk3jf1Kv8qv9mv8Wr/Or/cb/Ea/yW/2W/xWv81v9zv8Tv+x3+U/8bv9Hr/Xf+r3+c/8fv+5P+C/8Af9lz7df+UP+a/9Yf+NP+K/9Uf9d/6YP+5P+O/9Sf+DP+VP+zP+rD/nf/Tn/U/+Av+bNcYYY4yxf8mEy0Px65mLt/N7/06O+MWT+wDA1dvyp/9yPuOMcn2ei+N+Ij424+vTvbo8lPmoVi0hIeHSc9MkBIXnAWT+JSjDzx89uBQvgTbwJLSH1lD6d+vvJ7qdo3+yfvRWgBy/yMkoKDO+vP7nAJjwO+s/9sSoheXCM3H/j/XnARQtfDknO1yOl0Cbn++vtIYy/6D+vC3/Sf3Zv0gCaPWLnJxwOb5cfyl4HJ6B9r96JmOMMcYYY4wxdlE/UbFT5vVn5ic+f+/6PF5dzskGl+N/dn3OGGOMMcYYY4yxK+/Zbt2feqx9+9ad/v1Blf9R1r88aAz/qZV58LsD7wEyv6MA4A8uCJAxkH/lXmz5S7aVeOml8/dTy8/6AP53tPLPGFzhAxNjjDHGGGPsT3f5pP/X31dXqiDGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYywL+iv+O7ErvY+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbYlfZ/AgAA//+1tfsI") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 6m43.831602582s ago: executing program 7 (id=3996): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @empty, 0x2}, {0xa, 0x4e20, 0x101, @remote, 0x7}, r1, 0x6}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {&(0x7f000001a500)}}, 0x10) 6m41.052225956s ago: executing program 7 (id=4026): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x5e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) 6m40.658459017s ago: executing program 37 (id=4026): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x5e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) 3m17.271610803s ago: executing program 8 (id=6115): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x3}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x3, {}, 0xfd}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 3m16.975641295s ago: executing program 8 (id=6117): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) fcntl$setown(r0, 0x8, r1) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x4) 3m16.725264843s ago: executing program 8 (id=6121): syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r1 = dup(r0) write$binfmt_elf32(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002000300040000003e03000038000000d600000097700000fe03200001000700080007000000000003"], 0x58) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3m16.380751321s ago: executing program 8 (id=6125): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x16, &(0x7f0000000140)={[{@resuid}, {@noauto_da_alloc}, {@auto_da_alloc_val}, {@stripe={'stripe', 0x3d, 0x4}}, {@bsdgroups}, {@noblock_validity}, {@minixdf}, {@nouid32}, {@dioread_lock}, {@nolazytime}, {@oldalloc}, {@usrquota}]}, 0x0, 0x515, &(0x7f0000000c40)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 3m15.661786894s ago: executing program 8 (id=6133): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000141000/0xc000)=nil, 0xc000}}) 3m14.227245498s ago: executing program 8 (id=6148): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, 0x0, &(0x7f00000000c0)) syz_open_dev$cec(&(0x7f00000001c0), 0x0, 0x8000) 3m13.602120276s ago: executing program 38 (id=6148): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, 0x0, &(0x7f00000000c0)) syz_open_dev$cec(&(0x7f00000001c0), 0x0, 0x8000) 1m12.119136778s ago: executing program 6 (id=7315): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10, 0xffffffff}, {@host=0x10, 0x1}, 0x400, "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"}, 0x418, 0x2001}) socket$kcm(0x29, 0x2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10, 0x6}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) 1m10.899244893s ago: executing program 6 (id=7323): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x8, 0x4, 0x8, 0x1}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x4, 0x8, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x7, 0x5, &(0x7f00000000c0)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@map_fd={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m10.571034949s ago: executing program 6 (id=7326): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) read(r0, 0x0, 0x5e) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) 1m8.960033786s ago: executing program 6 (id=7334): mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x16, &(0x7f0000000140)={[{@resuid}, {@noauto_da_alloc}, {@auto_da_alloc_val}, {@stripe={'stripe', 0x3d, 0x4}}, {@bsdgroups}, {@noblock_validity}, {@minixdf}, {@nouid32}, {@dioread_lock}, {@nolazytime}, {@oldalloc}, {@usrquota}]}, 0x0, 0x515, &(0x7f0000000c40)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1m8.380641881s ago: executing program 6 (id=7340): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xffffffff, "030000000000000023000000debd12ffff00000000000000000020000400", 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x10000001}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x6, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x40, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0xa6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe660, 0x4, 0x7, 0x104, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x4, 0x5, 0x200006, 0x8, 0x4, 0x1, 0x40], [0xfffffff7, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x1, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x4009, 0x400, 0x5, 0x800, 0x5, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x10c, 0x4, 0x9, 0x0, 0x800, 0x6, 0xb, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x7, 0x9, 0x48c9368c, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffefe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x6, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800f38, 0x5, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x101, 0x8, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x7feffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x1, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x20001f7, 0x2, 0xf58, 0x5, 0x80000001, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x200a620, 0x4, 0x5, 0x1, 0x2, 0x800014c, 0x60a7, 0xe, 0x6, 0x2, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x2, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7ff, 0x2, 0x6c1b, 0x0, 0x4, 0x100005, 0xa, 0x1, 0x40200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m5.706109192s ago: executing program 6 (id=7354): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000880)='./file1\x00', 0x10000, &(0x7f0000000380)=ANY=[@ANYBLOB='utf8,errors=continue,uid=', @ANYRESHEX=0xee00, @ANYBLOB="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"], 0x1, 0x1539, &(0x7f0000002c00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file6\x00', r0, &(0x7f0000000480)='./file7\x00', 0x2) 1m5.236243347s ago: executing program 39 (id=7354): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000880)='./file1\x00', 0x10000, &(0x7f0000000380)=ANY=[@ANYBLOB='utf8,errors=continue,uid=', @ANYRESHEX=0xee00, @ANYBLOB="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"], 0x1, 0x1539, &(0x7f0000002c00)="$eJzs3AucjtX2OPC19t7PGJLeJrkMe+/18CaXTZLkkiSXJEmSJLeEJMmRhMSQW9KQhOQyJJchJJeJSeN+v18SkqRJkpDckv3/TMxfnTr/c/qdTn7/M+v7+byf2evd79rPema9l+d5XuabLkNrNKpZtQERwb8FL/5IAIBYABgIANcAQAAAZePKxmXMZ5eY8O9thP25Hkq+0hWwK4n7n7Vx/7M27n/Wxv3P2rj/WRv3P2vj/mdt3H/GsrLN0/Nfy7ese+Pr/1kZf/7/F0kvOfaLtSWv7woQ86+mcP///4f/Ri73/79W8K88iPuftXH/s6rYK10A+1+AX/9ZQbZ/OMP9z9q4/4xlZb+8FhwLV/569F99g8h/8jsQ3+vib/nK7+c/3H/GGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY+wvcMZfpgAgc3yl62KMMcYYY4wxxtifx2e70hUwxhhjjDHGGGPsPw9BgAQFAcRANoiF7JADBEBM5vy1EAfXQW64HvJAXsgH+SEeCkBB0GDAAkEIhaAwROEGKAI3QlEoBsWhBDgoCaXgJigNN0MZuAXKwq1QDm6D8lABKkIluB0qwx1QBe6EqnAXVIPqUANqwt1QC+6B2nAv1IH7oC7cD/XgAagPD0IDeAgawsPQCB6BxvAoNIGm0AyaQ4v/Uf4L0ANehJ7QCxKgN/SBl6Av9IP+MAAGwsswCF6BwfAqJMIQGAqvwTB4HYbDGzACRsIoeBNGw1swBsbCOBgPSTABJsLbMAnegckwBabCNEiG6TAD3oWZMAtmw3swB96HuTAP5sMCSIEPYCEsglT4EBbDR5AGS2ApLIPlsAJWwipYDWtgLayD9bABNsIm2AxbYCtsg+2wA3bCx7ALPoHdsAf2wqewDz77g/mn/y6/KwICChSoUGEMxmAsxmIOzIE5MSfmwlwYwQjGYRzmxtyYB/NgPsyH8RiPBbEgGjRISFgIC2EUo1gEi2BRLIrFsTg6dFgKS2FpvBnLYBksi2WxHJbD8lgBK2AlrISVsTJWwSpYFatiNayGNbAG3o13Y2+sjbWxDtbBulg38/IUNsAG2BAbYiNshI2xMTbBJtgMm2ELbIEtsSW2wlbYBttgW2yL7bAdtsf22AE7YEfsiJ2wE3bGztgFu2BX7Ibd0l/IBvgivoi9sJrojX2wD/bFxGz9cQAOwJdxEL6Cr+CrmIhDcCi+hq/h6zgcT+GICyNxFI7CyuItHINjkcR4TMIknIgTcRJOwsk4BafgNEzG6TgDZ+BMnIWz8D2cg+/j+zgP5+ECTMEUXIiLMBVTcTGexjRcgktxGS7HFbgcV+FqXIVrcR2uxQ24ATfhJtyCW3AbbsMduAM/RgWAn+Ae3IOJuA/34X7cjwfwAB7Eg5iO6XgID+FhPIxH8AgexaN4DI/jCTyOJ/EknsLTeAbP4Dk8h+fxufivGn5cbE0iiAxKKBEjYkSsiBU5RA6RU+QUuUQuERERESfiRG6RW+QReUQ+kU/Ei3hRUBQURhhBIsx4pxBRERVFRBFRVBQVxUVx4YQTpUQpUVqUFmVEGVFW3CrKidtEeVFBtHaVRCVRWbRxVcSdoqqoKqqJ6qKGqClqilqilqgtaos6oo6oK+qKeuIBUV/0xv74kMjoTCMxBBuLodhENBXy0jtUSzEcW4nWoo14QozEEdhOtHTtxdOigxiDHcXfxFh8VnQW47GLeF50Fd1Ed/GC6CFauZ6il5iMvUUfMQ37in6ivxggZmJ18R7OyV5DvCoSxRAxVLwmFuDrYrh4Q4wQI8Uo8aYYLd4SY8RYMU6MF0ligpgo3haTxDtispgipoppIllMFzPEu2KmmCVmi/fEHPG+mCvmifligUgRH4iFYpFIFR+KxeIjkSaWiKVimVguVoiVYpVYLdaItWKdWC82iI1ik9gstoitYpvYLnaIneJjsUt8InaLPWKv+FTsE5+J/eJzcUB8IQ6KL0W6+EocEl+Lw+IbcUR8K46K78QxcVycEN+Lk+IHcUqcFmfEWXFO/CjOi5/EBeEFSJRCSqlkIGNkNhkrs8sc8iqZUwaZ7/8yTl4nc8vrZR6ZV+aT+WW8LCALSi2NtJJkKAvJwjIqb5BF5I2yqCwmi8sS0smSspS8SZaWN8sy8hZZVt4qy8nbZHlZQVaUleTtsrK8Q0Lk4jaqyeqyhqwp75YJcI+sLe+VdeR9sq68X9aTD8j68kHZQD4kG8qHZSP5iGwsH5VNZFPZTDaXLeRjsqV8XLaSrWUb+YRsK5+U7eRTsr18WnaQ/tJT5FnZWT4nu8jnZVfZTXaXP8kL0suespeE3iD7yJdkX9lP9pcD5ED5shwkX5GD5asyUQ6RQ+Vrcph8XQ6Xb8gRcqQcJd+Uo+VbcowcK8fJ8TJJTpAT5dtyknxHTpZT5FQ5TSbL6bL/pZVmS/lP89/+nfzBP299k9wst8itcpvcLnfInfJjuUvukrvlbrlX7pX75D65X+6XB+QBeVAelOkyXR6Sh+RheVgekUfkUXlUHpPH5Vn5vTwpf5Cn5Gl5Wp6V5+Q5ef7S7wAUKqGkUipQMSqbilXZVQ51lcqprla51DUqoq5Vceo6lVtdr/KovCqfyq/iVQFVUGlllFWkQlVIFVZRdQNeesKo4qqEcqqkKqVu+iP5qoi6URVVxX6Vn1lfwj+or4VqoVqqlqqVaqXaqDaqrWqr2ql2qr1qrzqoDqqj6qg6qU6qs+qsuqguqqvqqrqr7qqH6qF6qp4qQSWoPuol1Vf1U/3VADVQvSwy9mGwGqwSVaIaqoaqYWqYGq6GqxFqhBqlRqnRarQao8ac+Ml7laSS1EQ1UU1Sk9RkNVlNVVNVskpWM9QMNVPNVLPVbDVHzVFz1Vw1X81XKSpFLVQLVapKVYvVYpWmlqglaplaplaoFWqVWqXWqDVqnVqnNqgNKk1tVpvVVrVVbVfb1U61U+1Su9RutVvtVXvVPrVP7Vf71QF1QB1UB1W6SleH1CF1WB1WR9QRdVQdVcfUMXVCnVAn1Ul1Sp1SZ9QZdU6dU+fVeXVBXcg47AtEIAIVqCAmiAlig9ggR5AjyBnkDHIFuYJIEAnigrggd3B9kCfIG+QL8gfxQYGgYKADE9hAXGp6NLghKBLcGBQNigXFgxKBC0oGpYKbgtLBzUGZ4JagbHBrUC64LSgfVAgqBpWC24PKwR1BleDOoGpwV1AtqB7UCGoGdwe1gnuC2sG9QZ3gvqBucH9QL3ggqB88GDQIHgoaBg8HjYJHgsbBo0GToGnQLGgetPhT1/f+VN7HXU/dSyfo3rqPfkn31f10fz1AD9Qv60H6FT1Yv6oT9RA9VL+mh+nX9XD9hh6hR+pR+k09Wr+lx+ixepwer5P0BD1Rv60n6Xf0ZD1FT9XTdLKermfod/VMPUvP1u/pOfp9PVfP0/P1Ap2iP9AL9SKdqj/Ui/VHOk0v0Uv1Mr1cr9Ar9Sq9Wq/Ra/U6vV5v0Bv1Jr1Zb9Fb9Ta9Xe/QO/XHepf+RO/We/Re/anepz/T+/Xn+oD+Qh/UX+p0/ZU+pL/Wh/U3+oj+Vh/V3+lj+rguo7/XJ/UP+pQ+rc/os/qc/lGf1z/pC9pnHNxnfLwbZZSJMTEm1sSaHCaHyWlymlwml4mYiIkzcSa3yW3ymDwmn8ln4k28KWgKmgxkyBQyhUzURE0RU8QUNUVNcVPcOONMKVPKlDalTRlTxpQ1ZU05U86UN+VNRVPR3G5uN3eYO8yd5k5zl7nLVDfVTU1T09QytUxtU9vUMXVMXVPX1DP1TH1T3zQwDUxD09A0Mo1MY9PYNDFNTDPTzLQwLUxL09K0Mq1MG9PGtDVtTTvTzrQ37U0H08F0NB1NJ9PJdDadTRfTxXQ1XU130930MD1MT9PTJJgE08f0MX1NX9Pf9DcDzUAzyAwyg81gk2gSzVAz1Awzw8xwM9yMMCPNqIwDVfOWGWPGmnFmvEkySWaimWgmmUlmsplsppqpJtkkmxlmhplpZprZZraZY+aYuWaumW/mmxSTYhaahSbVpJrFZrFJM2lmqVlqlpvlZqVZaVab1WatWWvWw3qz0Ww0m81ms9VsNdvNdrPT7DS7zC6z2+w2e81es8/sM/vNfnPAHDAHzUGTbtLNIXPIHDaHzRFzxBw1R80xc8ycMCfMSXPSnDKnzBlzxpwzeS99XnoTa7PbHPYqm9NebXPZa+zfx/lsfhtvC9iCVts8Nu+vYmOtLWqL2eK2hHW2pC1lb/pNXN5WsBVtJXu7rWzvsFV+E9ey99ja9l5bx95na9q7fxXXtffbevYRWx8RwDa1DW1z28g+YhvbR20T29Q2s81tW/ukbWefsu3t07aDfeY38UK7yK62a+xau87utnvsGXvWHrbf2HP2R9vT9rID7ct2kH3FDrav2kQ75DfxKPumHW3fsmPsWDvOjv9NPNVOs8l2up1h37Uz7azfxCn2AzvHptq5dp6dbxf8HGfUlGo/tIvtRzbNBrDULrPL7Qq70q76v7UusxvsRrvJ7rKf2K12m91ud9idmQfCdo/daz+1++xn9pD92h6wX9iD9ohNt1/9HGfs3xH7rT1qv7PH7HF7wn5vT9ofVGZ2xr5/b3+yF6y3QEhAkhQFFEPZKJayUw66inLS1ZSLrqEIXUtxdB3lpuspD+WlfJSf4qkAFSRNhiwRhVSIClOUbqDM8opTCXJUkkrRTVSabqYydAuVpVupHN1G5akCVaRKdDtVpjuoCt1JVekuqkbVqQbVpLupFt1DteleqkP3UV26n+rRA1SfHqQG9BA1pIepET1CjelRakJNqRk1pxb0GLWkx6kVtaY29AS1pSepHT1F7elp6kDPUEf6G3WiZ6kzPUdd6HnqSt2oO71APehF6km9KIF6Ux96ifpSP+pPA2ggvUyD6BUaTK9SIg2hofQaDaPXaTi9QSNoJI2iN2k0vUVjaCyNo/GURBNoIr1Nk+gdmkxTaCpNo2SaTjPoXZpJs2g2vUdz6H2aS/NoPi2gFPqAFtIiSqUPaTF9RGm0hJbSMlpOK2glraLVtIbW0jpaTxtoI22izbSFttI22k47aCd9TLvoE9pNe2gvfUr76DPaT5/TAfqCDtKXlE5f0SH6mg7TN3SEvvW96Ds6RsfpBH1PJ+kHOkWn6QydpXP0I52nn+gCeYIQQxHKUIVBGBNmC2PD7GGO8KowZ3h1mCu8JoyE14Zx4XVh7vD6ME+YN8wX5g/jwwJhwVCHJrQhhWFYKCwcRsMbwiLhjWHRsFhYPCwRurBkWCq8KSwd3hyWCW8Jy4a3huXC28LyYYXwkfsqhbeHlcM7wirhnWHV8K6wWlg9rBHWDO8Oa4X3hLXDe8M64X1hmfD+sF74QFg/fDBsED4UNgwfDhuFj4SNw0fDJmHTsFnYPGwRPha2DB8PW4WtwzbhVWHb8MmwXfhU2D58OuwQPvPz/P2LMuef+M18Qtg77BO+FL4Uen+vnB9dEE2JfhBdGF0UTY1+GF0c/SiaFl0SXRpdFl0eXRFdGV0VXR1dE10bXRddH90Q3RjdFPW+ZjZw6ISTTrnAxbhsLtZldzncVS6nu9rlcte4iLvWxbnrXG53vcvj8rp8Lr+LdwVcQaedcdaRC10hV9hF3Q2uiLvRFXXFXHFXwjlX0pVyzV0L18K1dI+7Vq61a+OecE+4J92T7in3lHvadXDPuI7ub66Te9Z1ds+559zzrqvr5rq7F1wPNyHXxddkguvj+ri+rq/r7/q7gW6gG+QGucFusEt0iW6oG+qGuWFuuBvuRrgRbpQb5Ua70W6MG+PGuXEuySW5iW6im+Qmucluspvqprpkl+xmuBluppvpKs+6uJW5bq6b7+a7FJfiFrqMY8ZUt9gtdmkuzS11S91yt9ytdCvdarfarXVr3Xq33m10G91mt9ltdVvddrfd7XQ73S63y+3211xc1O1z+91+d8AdcAfdly7dfeUOua/dYfeNO+K+dUfdd+6YO+5OuO/dSfeDO+VOuzPurDvnfnTn3U/ugvMuKTIhMjHydmRS5J3I5MiUyNTItEhyZHpkRuTdyMzIrMjsyHuROZH3I3Mj8yLzIwsiKZEPIgsjiyKpkQ8jiyMfRdIiSyJLI8siyyMrIt4X2Br6Qr6wj/obfBF/oy/qi/nivoR3vqQv5W/ypS/Wneb9rb6cv82X9xV8Rf+ob+Kb+ma+uW/hH/Mt/eO+lW/t2/gnfFv/pG/nn/Lt/dO+g3/Gd/R/8538s76zf8538c/7rr6b7+5f8D38i76n7+UTfG/fx7/k+/p+vr8f4Af6l/0g/4of7F/1iX6IH+pf88P86364f8OP8CP9qJg3/ejMU2QY75P8BD/Rv+0n+Xf8ZD/FT/XTfLKf7mf4d/1MP8vP9u/5Of59P9fP8/P9Ap/iP/AL/SKf6j/0i/1HPs0vybxo7Ff6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX673+F3+o/9Lv+J3+33+L3+U7/Pf+b3+8/9Af+FP+i/9On+K3/If+0P+2/8Ef+tP+q/88f8cX/Cf+9P+h/8KX/an/Fn/Tn/oz/vf/IX+P+sMcYYY4z9SyZcHopfz1y8nN/7d3LELx7cBwCu3pY//ZfzGUeU6/NcHPcT8bEZP5/u1eWhzFu1agkJCZcemyYhKDwPIPOboAw//9ODS/ESaANPQntoDaV/t/5+ots5+ifrR28FyPGLnIyCMuPL638OgAm/s/5jT4xaWC48E/f/WH8eQNHCl3Oyw+V4CbT5+fpKayjzD+rP2/Kf1J/9iySAVr/IyQmX48v1l4LH4Rlo/6tHMsYYY4wxxhhjF/UTFTtlnn8Gl75Y+73z83h1OScbXI7/2fk5Y4wxxhhjjDHGrrxnu3V/6rH27Vt3+uODKv+jrH950Bj+Uyvz4HcH3gNk3qMAoNOzAVy+5w8vCJAxkH/lXmz5S7aVeOml8/dTy8/6AP53tPLPGFzhNybGGGOMMcbYn+7yQf+v71dXqiDGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYywL+iv+nNiV3kfGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGPsSvs/AQAA///OJ/wG") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file6\x00', r0, &(0x7f0000000480)='./file7\x00', 0x2) 11.652437314s ago: executing program 9 (id=7746): socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4354, 0x1, &(0x7f0000006680)) openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) getsockname$tipc(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, &(0x7f0000000440)={[{@abort}]}, 0xfe, 0x25c, &(0x7f0000000980)="$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") r0 = open(&(0x7f0000000080)='.\x00', 0x101000, 0x190) getdents(r0, 0x0, 0x0) 11.096387508s ago: executing program 9 (id=7751): r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960000000904cc070002596105052406000105240006000d240f01900800000000070008060600000011090401"], 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) 8.22004709s ago: executing program 9 (id=7775): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80d800, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000021c0)='./file1\x00', 0x8442, 0x5c) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f00000011c0)={0x0, 0x0, 0x5, 0x200000ffe}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 6.751327896s ago: executing program 9 (id=7784): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0xfffffffd}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r1, r6, &(0x7f0000000200)={0x0, 0x1460, 0x400, 0x3, 0xb2}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x181c, 0x0, 0x2, 0x2ad, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e3c, 0x1, 0x9, 0x102, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x1000, 0x3, 0x102c4, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e84, 0x1000, 0x2, 0x21b, 0x0, r1}}], 0x4, &(0x7f0000001540)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, r5, '\x00', {0x1, 0x48a, 0x0, 0x0}}, 0x0) 5.452222525s ago: executing program 0 (id=7792): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0xffffff78}], 0x1}, 0x10000) 4.812086577s ago: executing program 9 (id=7796): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x18, 0x9, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_DATA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000180)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@commit={'commit', 0x3d, 0x9}}, {@acl}]}, 0xff, 0x5122, &(0x7f0000006440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x101142, 0xeaff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x24, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509"], 0x0, 0x80000001, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, 0x25, r0}, 0x94) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0x29f) 4.543568958s ago: executing program 1 (id=7798): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)=0x3) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0x4112, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.805982116s ago: executing program 1 (id=7800): r0 = fanotify_init(0x200, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x455, 0x8000003, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r3}, 0x38) read$FUSE(r2, &(0x7f0000000180)={0x2020}, 0x1843) 3.794918917s ago: executing program 0 (id=7801): socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x3, 0xc5fb, @value=0x3}) r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_vhci(&(0x7f00000006c0)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x37, 0xc9}}}, 0x6) ioctl$sock_ifreq(r1, 0x8970, &(0x7f0000000040)={'wlan0\x00', @ifru_map={0x0, 0x6, 0x9, 0x3, 0x2d, 0x2}}) 3.04983259s ago: executing program 1 (id=7803): syz_usb_connect(0x0, 0x6b, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x4, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) fchdir(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x5c, r2, 0x1, 0x70bd2b, 0x25dfdc06, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}]}, 0x5c}, 0x1, 0x400000000000000, 0x0, 0x80}, 0x0) 2.996336645s ago: executing program 0 (id=7804): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67db3e6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b19abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f0000000000f8e10238d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x9, 0x10, 0x0, 0xb}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001300)="b9fb0307683a06000000000080f3", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.0178151s ago: executing program 1 (id=7808): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d311482a00010000180a00000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x2c, &(0x7f000000cf3d)=""/195}, 0x23) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.615090537s ago: executing program 0 (id=7809): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x6, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000b00)={0x1, &(0x7f00000001c0)=[{0x6, 0x4, 0x8, 0xa}]}, 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) 1.50778646s ago: executing program 5 (id=7810): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000300)="c9", 0x1) close(r4) tee(r0, r5, 0x7, 0xc) write(r2, 0x0, 0x0) 1.498359018s ago: executing program 9 (id=7811): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000006c0)={0x1, 0x0, [{0x40000021, 0x0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x0, 0x10000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x2710, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.191691495s ago: executing program 5 (id=7812): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffaa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x401, 0xffffffff9673e35d]}}) 1.017848705s ago: executing program 1 (id=7813): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20) setresuid(0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0xc) sched_setaffinity(0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r0], 0x108}}], 0x2, 0xc040) 943.535574ms ago: executing program 5 (id=7814): ioprio_set$uid(0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x2e8}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, 0x0, 0x0) 738.528683ms ago: executing program 0 (id=7815): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x80010, 0xffffffffffffffff, 0x6a68e000) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffc000/0x3000)=nil) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4040084) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, 0x0, 0x4000040) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, 0x0, 0x0) 559.60166ms ago: executing program 5 (id=7816): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040000}, 0xc804) r1 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x0, 0x20, 0x40, {0x8, 0xb, 0x2, 0x1, 0x1, 0x21, 0x30, 0xc6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x2a, 0xfff}, [@output_terminal={0x13, 0x24, 0x3, 0x5, 0x100, 0x2, 0x6, 0x2, 0x8002, 0x7, 0x10, 0x2}, @processing_unit={0xd, 0x24, 0x9, 0x2, 0x2, [0x0, 0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0xd, 0xb, {0xa, 0x25, 0x25, 0x401, 0xe, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3df, 0x2, 0xff, 0x0, {0xa, 0x25, 0x25, 0x5, 0x7, 0x8}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="3bda432aa48fd7b1d57b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000b40)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000280)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f00000002c0)={0x84, &(0x7f00000006c0)={0x40, 0x16, 0x1, '?'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 559.355965ms ago: executing program 1 (id=7817): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000240)) 361.433871ms ago: executing program 0 (id=7818): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001700000008000a"], 0x24}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r2, &(0x7f0000000080)=ANY=[], 0x47) splice(r1, 0x0, r0, 0x0, 0x800, 0x0) 358.296047ms ago: executing program 5 (id=7819): write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 0s ago: executing program 5 (id=7820): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) splice(r1, 0x0, r2, 0x0, 0x1100000000f336, 0x0) kernel console output (not intermixed with test programs): ange from 0 to 128 [ 743.153980][T17949] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 743.155034][T17949] ext4 filesystem being mounted at /676/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 743.291375][T17957] loop6: detected capacity change from 0 to 512 [ 743.312612][T17957] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 743.357661][T17949] fscrypt (loop9, inode 12): Unsupported log2_data_unit_size in encryption policy: 38 [ 743.395560][T17957] EXT4-fs (loop6): 1 truncate cleaned up [ 743.424568][T17957] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 743.456585][T17957] EXT4-fs error (device loop6): __ext4_iget:5481: inode #16: block 538: comm syz.6.4812: invalid block [ 743.489432][T17957] EXT4-fs (loop6): Remounting filesystem read-only [ 743.496502][ T8038] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 743.653381][T17967] loop0: detected capacity change from 0 to 128 [ 743.728291][ T7504] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.588256][T17990] loop9: detected capacity change from 0 to 512 [ 744.592685][T17990] EXT4-fs: Ignoring removed oldalloc option [ 744.722725][T17990] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.4825: bad orphan inode 32 [ 744.722782][T17990] loop9: lost filesystem error report for type 5 error -117 [ 744.731564][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 744.731590][ C0] EXT4-fs (loop9): initial error at time 1780014531: ext4_orphan_get:1423 [ 744.731616][ C0] EXT4-fs (loop9): last error at time 1780014531: ext4_orphan_get:1423 [ 744.795430][T17990] ext4_test_bit(bit=31, block=4) = 0 [ 744.795455][T17990] EXT4-fs (loop9): 1 truncate cleaned up [ 744.849997][T17990] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 745.056652][T17990] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.096778][T17999] IPVS: sed: FWM 3 0x00000003 - no destination available [ 745.130040][ T7839] IPVS: starting estimator thread 0... [ 745.312815][T18001] IPVS: using max 7 ests per chain, 16800 per kthread [ 746.427008][T18036] loop8: detected capacity change from 0 to 512 [ 746.514985][T18036] EXT4-fs (loop8): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 746.795616][T18034] EXT4-fs error (device loop8): ext4_quota_enable:7221: comm syz.8.4844: Bad quota inum: 2, type: 1 [ 746.796668][T18034] EXT4-fs warning (device loop8): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 746.992124][ T7508] EXT4-fs (loop8): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 747.246762][T18056] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 747.371709][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 747.390771][T18064] loop0: detected capacity change from 0 to 256 [ 747.957612][ T5605] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 747.958010][ T5605] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 747.958426][ T5605] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 747.958854][ T5605] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 747.958875][ T5605] rtc rtc0: __rtc_set_alarm: err=-22 [ 748.523764][T18101] loop9: detected capacity change from 0 to 4096 [ 748.528598][T18101] EXT4-fs: Ignoring removed orlov option [ 748.548425][T18101] EXT4-fs (loop9): Test dummy encryption mode enabled [ 748.641896][T18101] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 749.064653][T18120] loop0: detected capacity change from 0 to 128 [ 749.069675][T18120] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 749.097849][T18120] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 749.381759][T18101] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 749.713958][ T1054] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 749.757434][ T8038] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 751.232168][T18165] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4906'. [ 752.621029][ T7839] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 752.773554][ T7839] usb 1-1: Using ep0 maxpacket: 32 [ 752.778104][ T7839] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 752.778137][ T7839] usb 1-1: config 0 has no interface number 0 [ 752.778189][ T7839] usb 1-1: config 0 interface 12 has no altsetting 0 [ 752.811965][ T7839] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 752.811999][ T7839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.812021][ T7839] usb 1-1: Product: syz [ 752.812036][ T7839] usb 1-1: Manufacturer: syz [ 752.812051][ T7839] usb 1-1: SerialNumber: syz [ 752.862018][ T7839] usb 1-1: config 0 descriptor?? [ 753.233582][T18225] loop6: detected capacity change from 0 to 16 [ 753.253940][T18225] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 753.708025][ T7839] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 753.708092][ T7839] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 753.708110][ T7839] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 753.708214][ T7839] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 753.771856][ T7839] usb 1-1: USB disconnect, device number 9 [ 754.537045][T18257] loop9: detected capacity change from 0 to 524287999 [ 754.974670][T18268] vlan0: entered allmulticast mode [ 754.974693][T18268] veth0_to_bond: entered allmulticast mode [ 755.863547][ T7915] Buffer I/O error on dev loop9, logical block 65535999, async page read [ 756.041998][T18265] loop6: detected capacity change from 0 to 32768 [ 756.477861][T18303] loop8: detected capacity change from 0 to 512 [ 756.639961][T18303] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.4966: Invalid inode bitmap blk 4 in block_group 0 [ 756.640001][T18303] loop8: lost filesystem error report for type 5 error -117 [ 756.655331][T18303] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 757.000992][ T7508] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.252621][T18295] loop9: detected capacity change from 0 to 32768 [ 759.336429][T18374] loop6: detected capacity change from 0 to 128 [ 759.365832][T18374] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 759.402888][T18374] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 760.249754][T17442] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 760.414233][T17442] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 242, changing to 11 [ 760.414273][T17442] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 760.414316][T17442] usb 10-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 760.414342][T17442] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.482193][T17442] usb 10-1: config 0 descriptor?? [ 760.919725][T17442] hid (null): bogus close delimiter [ 760.919768][T17442] hid (null): report_id 0 is invalid [ 760.945121][T17442] megaworld 0003:07B5:0312.0033: unknown main item tag 0x0 [ 760.945158][T17442] megaworld 0003:07B5:0312.0033: unknown main item tag 0x0 [ 760.945183][T17442] megaworld 0003:07B5:0312.0033: unknown main item tag 0x0 [ 760.945239][T17442] megaworld 0003:07B5:0312.0033: unknown main item tag 0x0 [ 760.945264][T17442] megaworld 0003:07B5:0312.0033: unknown main item tag 0x0 [ 760.945288][T17442] megaworld 0003:07B5:0312.0033: unknown main item tag 0x0 [ 760.945312][T17442] megaworld 0003:07B5:0312.0033: unknown main item tag 0x3 [ 760.945336][T17442] megaworld 0003:07B5:0312.0033: bogus close delimiter [ 760.945349][T17442] megaworld 0003:07B5:0312.0033: item 0 0 2 10 parsing failed [ 760.946061][T17442] megaworld 0003:07B5:0312.0033: parse failed [ 760.946132][T17442] megaworld 0003:07B5:0312.0033: probe with driver megaworld failed with error -22 [ 761.143799][ T5605] usb 10-1: USB disconnect, device number 24 [ 761.364773][T18417] netlink: 'syz.8.5016': attribute type 11 has an invalid length. [ 761.535844][ T5605] kernel read not supported for file /newroot/742 (pid: 5605 comm: kworker/1:4) [ 761.952543][T18429] tipc: Started in network mode [ 761.952579][T18429] tipc: Node identity ac1414aa, cluster identity 4711 [ 762.225304][T18441] loop8: detected capacity change from 0 to 8 [ 762.274720][T18441] SQUASHFS error: Unable to read inode 0x0 [ 762.293670][T18429] tipc: Enabled bearer , priority 10 [ 762.295814][T18434] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.296236][T18434] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.655366][T18453] loop6: detected capacity change from 0 to 1024 [ 762.683082][T18451] ALSA: seq fatal error: cannot create timer (-22) [ 763.071122][T18453] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 763.247703][T18464] loop0: detected capacity change from 0 to 256 [ 763.552906][T18464] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 763.680395][ T7504] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.038839][T18478] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5040'. [ 764.123319][ T10] tipc: Node number set to 2886997162 [ 764.707821][T18501] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5052'. [ 766.689423][T18565] pimreg: entered allmulticast mode [ 766.754771][T18570] pimreg: left allmulticast mode [ 766.919234][ T5748] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 767.081867][ T5748] usb 10-1: Using ep0 maxpacket: 16 [ 767.106753][ T5748] usb 10-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 767.106789][ T5748] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.106811][ T5748] usb 10-1: Product: syz [ 767.106827][ T5748] usb 10-1: Manufacturer: syz [ 767.106842][ T5748] usb 10-1: SerialNumber: syz [ 767.174031][ T5748] usb 10-1: config 0 descriptor?? [ 767.187848][ T5748] ssu100 10-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 767.913550][ T5748] ssu100 10-1:0.0: probe with driver ssu100 failed with error -71 [ 767.940448][ T5748] usb 10-1: USB disconnect, device number 25 [ 769.665574][T18636] veth1_to_batadv: entered promiscuous mode [ 769.693112][T18636] veth1_to_batadv: left promiscuous mode [ 771.007536][T18672] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5132'. [ 772.121552][T18687] loop6: detected capacity change from 0 to 256 [ 772.134198][T18687] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 772.152326][T18687] exFAT-fs (loop6): valid_size(150994954) is greater than size(10) [ 772.400640][T18692] loop8: detected capacity change from 0 to 128 [ 772.527772][T18692] syz.8.5144: attempt to access beyond end of device [ 772.527772][T18692] loop8: rw=2051, sector=104, nr_sectors = 25 limit=128 [ 772.714453][T18702] sctp: [Deprecated]: syz.0.5149 (pid 18702) Use of int in max_burst socket option. [ 772.714453][T18702] Use struct sctp_assoc_value instead [ 772.980410][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 772.980507][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 773.531046][T18712] loop9: detected capacity change from 0 to 2048 [ 773.624984][T18712] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 773.637765][T18712] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 773.746945][T18712] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 776.186297][T18793] loop0: detected capacity change from 0 to 512 [ 776.335827][T18793] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 776.731878][T15925] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 777.333251][T18826] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 777.333321][T18826] overlayfs: overlapping lowerdir path [ 777.338616][T18822] overlayfs: overlapping lowerdir path [ 777.633311][T18824] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.884379][T18871] loop8: detected capacity change from 0 to 8 [ 779.503428][T18885] loop8: detected capacity change from 0 to 2048 [ 779.568953][T18885] UDF-fs: error (device loop8): udf_read_tagged: block 97: CRC length 511 exceeds block size [ 779.569061][T18885] UDF-fs: warning (device loop8): udf_fill_super: No partition found (2) [ 780.060999][T18903] netlink: 68 bytes leftover after parsing attributes in process `syz.9.5239'. [ 780.905887][T18930] loop6: detected capacity change from 0 to 256 [ 781.301986][T18939] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 782.146417][T18964] loop8: detected capacity change from 0 to 512 [ 782.197631][T18967] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5268'. [ 782.223688][T18967] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5268'. [ 782.226409][T18964] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 782.638709][T18977] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5272'. [ 782.969577][T18986] loop0: detected capacity change from 0 to 1024 [ 783.039717][T18986] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 783.046223][T18986] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 783.128791][T18986] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 783.269649][ T7508] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.313729][T18985] loop6: detected capacity change from 0 to 4096 [ 783.782655][T15925] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.825534][T19026] loop8: detected capacity change from 0 to 1024 [ 784.893534][T19026] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5294'. [ 784.893580][T19026] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5294'. [ 786.029712][T19021] loop9: detected capacity change from 0 to 32768 [ 786.085798][T19021] XFS (loop9): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 786.177729][T19067] cgroup: fork rejected by pids controller in /syz6 [ 786.288525][T19021] XFS (loop9): Ending clean mount [ 787.349221][ T8038] XFS (loop9): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 788.732018][T19111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5332'. [ 788.732057][T19111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5332'. [ 788.829299][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 788.830339][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 788.830389][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 788.830428][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.071030][T17442] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 790.204094][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 790.339530][T17442] usb 1-1: Using ep0 maxpacket: 16 [ 790.362080][T17442] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.362120][T17442] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 790.362144][T17442] usb 1-1: config 0 interface 0 has no altsetting 0 [ 790.362182][T17442] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 790.362207][T17442] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.365896][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 790.370213][T17442] usb 1-1: config 0 descriptor?? [ 790.401078][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 790.449589][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 790.470992][ T5617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 791.149444][T17442] hid (null): report_id 0 is invalid [ 791.175119][ T2279] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.430191][T17442] usb 1-1: USB disconnect, device number 10 [ 791.649393][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 791.649414][ T37] audit: type=1326 audit(1780014578.392:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19152 comm="syz.8.5348" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61df63ce59 code=0x7ffc0000 [ 791.649470][ T37] audit: type=1326 audit(1780014578.392:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19152 comm="syz.8.5348" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61df63ce59 code=0x7ffc0000 [ 791.708247][ T37] audit: type=1326 audit(1780014578.452:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19152 comm="syz.8.5348" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61df63ce59 code=0x7ffc0000 [ 791.708300][ T37] audit: type=1326 audit(1780014578.452:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19152 comm="syz.8.5348" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f61df63ce59 code=0x7ffc0000 [ 791.708343][ T37] audit: type=1326 audit(1780014578.452:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19152 comm="syz.8.5348" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61df63ce59 code=0x7ffc0000 [ 791.759879][ T37] audit: type=1326 audit(1780014578.502:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19152 comm="syz.8.5348" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61df63ce59 code=0x7ffc0000 [ 791.759934][ T37] audit: type=1326 audit(1780014578.502:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19152 comm="syz.8.5348" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f61df63cbc2 code=0x7ffc0000 [ 791.759977][ T37] audit: type=1326 audit(1780014578.502:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19152 comm="syz.8.5348" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f61df63cc57 code=0x7ffc0000 [ 791.760019][ T37] audit: type=1326 audit(1780014578.502:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19152 comm="syz.8.5348" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f61df5f9b51 code=0x7ffc0000 [ 791.761735][ T37] audit: type=1326 audit(1780014578.502:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19152 comm="syz.8.5348" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f61df63dc49 code=0x7ffc0000 [ 792.671449][T19168] block nbd0: server does not support multiple connections per device. [ 792.857198][T19168] block nbd0: shutting down sockets [ 793.132360][ T2279] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.142116][T15932] Bluetooth: hci2: command tx timeout [ 793.603192][ T5753] kernel read not supported for file /vcs (pid: 5753 comm: kworker/1:6) [ 794.089277][T19199] program syz.0.5368 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 794.159024][T19203] loop9: detected capacity change from 0 to 64 [ 794.181430][T19203] BFS-fs: bfs_fill_super(): loop9 is unclean, continuing [ 794.271685][T19207] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5370'. [ 794.515997][ T2279] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.209220][T15932] Bluetooth: hci2: command tx timeout [ 795.452456][T19236] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5384'. [ 795.452495][T19236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5384'. [ 795.541469][ T2279] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.541996][T19237] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5384'. [ 795.542030][T19237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5384'. [ 796.039568][T19248] loop9: detected capacity change from 0 to 512 [ 796.308224][T19248] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 797.092774][ T8038] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 797.296444][T15932] Bluetooth: hci2: command tx timeout [ 798.322037][ T5605] IPVS: starting estimator thread 0... [ 798.477025][T19310] IPVS: using max 8 ests per chain, 19200 per kthread [ 798.661433][T19132] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.661987][T19132] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.662384][T19132] bridge_slave_0: entered allmulticast mode [ 798.704813][T19132] bridge_slave_0: entered promiscuous mode [ 798.855850][T19132] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.856224][T19132] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.856590][T19132] bridge_slave_1: entered allmulticast mode [ 798.876038][T19132] bridge_slave_1: entered promiscuous mode [ 799.365957][T15932] Bluetooth: hci2: command tx timeout [ 799.666406][ T2279] bridge_slave_1: left allmulticast mode [ 799.666448][ T2279] bridge_slave_1: left promiscuous mode [ 799.710922][ T2279] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.890698][ T2279] bridge_slave_0: left allmulticast mode [ 799.890740][ T2279] bridge_slave_0: left promiscuous mode [ 799.891071][ T2279] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.035437][ T5748] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 800.068471][ T2279] batman_adv: batadv0: Interface deactivated: gretap2 [ 800.185161][ T5748] usb 10-1: Using ep0 maxpacket: 16 [ 800.188397][ T5748] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 800.188435][ T5748] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 800.191437][ T5748] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 800.191472][ T5748] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.191495][ T5748] usb 10-1: Product: syz [ 800.191512][ T5748] usb 10-1: Manufacturer: syz [ 800.191528][ T5748] usb 10-1: SerialNumber: syz [ 800.298542][ T5748] usb 10-1: config 0 descriptor?? [ 800.311239][ T5748] em28xx 10-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 801.287389][ T2279] team0: Port device gretap1 removed [ 801.398582][ T2279] batman_adv: batadv0: Removing interface: gretap2 [ 802.285115][ T2279] bond0 (unregistering): left promiscuous mode [ 802.285145][ T2279] bond_slave_0: left promiscuous mode [ 802.286175][ T2279] bond_slave_1: left promiscuous mode [ 802.327074][ T2279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 802.445997][ T2279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 802.493710][ T2279] bond0 (unregistering): Released all slaves [ 802.554492][T19132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 802.630305][T19132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 802.868492][T19132] team0: Port device team_slave_0 added [ 802.915764][T19132] team0: Port device team_slave_1 added [ 802.967568][T17442] usb 10-1: USB disconnect, device number 26 [ 803.297596][T19450] loop9: detected capacity change from 0 to 256 [ 803.297825][T19132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 803.297843][T19132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 803.297873][T19132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 804.419076][T19132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 804.419097][T19132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 804.419129][T19132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 804.475572][T19481] sctp: [Deprecated]: syz.9.5490 (pid 19481) Use of struct sctp_assoc_value in delayed_ack socket option. [ 804.475572][T19481] Use struct sctp_sack_info instead [ 805.208517][T19132] hsr_slave_0: entered promiscuous mode [ 805.215933][T19132] hsr_slave_1: entered promiscuous mode [ 805.221007][T19132] debugfs: 'hsr0' already exists in 'hsr' [ 805.221037][T19132] Cannot create hsr debugfs directory [ 806.432988][T19537] loop8: detected capacity change from 0 to 8192 [ 806.487094][ T5277] 8021q: adding VLAN 0 to HW filter on device eth17 [ 807.277948][ T2279] batadv0: left promiscuous mode [ 807.546013][ T2279] hsr_slave_0: left promiscuous mode [ 807.589470][ T2279] hsr_slave_1: left promiscuous mode [ 807.590852][ T2279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 807.590881][ T2279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 807.626971][ T2279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 807.627003][ T2279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 807.876283][ T2279] veth0_macvtap: left promiscuous mode [ 807.876610][ T2279] veth1_vlan: left promiscuous mode [ 807.876816][ T2279] veth0_vlan: left promiscuous mode [ 809.805201][ T2279] team0 (unregistering): Port device team_slave_1 removed [ 809.894262][ T2279] team0 (unregistering): Port device team_slave_0 removed [ 810.659074][T19654] loop9: detected capacity change from 0 to 256 [ 812.709475][T19699] loop9: detected capacity change from 0 to 4096 [ 812.718332][T19699] ntfs3(loop9): Different NTFS sector size (2048) and media sector size (512). [ 813.491623][ T5277] 8021q: adding VLAN 0 to HW filter on device eth18 [ 813.753905][ T5826] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 813.857972][ T2279] IPVS: stop unused estimator thread 0... [ 813.935962][ T5826] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 813.935994][ T5826] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 813.937447][ T5826] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 813.937477][ T5826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 813.937500][ T5826] usb 1-1: SerialNumber: syz [ 814.387602][ T5826] usb 1-1: 0:2 : does not exist [ 814.768224][ T5826] usb 1-1: USB disconnect, device number 11 [ 815.506692][ T7915] udevd[7915]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 817.325739][T19788] nbd0: detected capacity change from 0 to 63 [ 817.379350][T15932] block nbd0: Receive control failed (result -32) [ 817.618867][ T7915] block nbd0: Dead connection, failed to find a fallback [ 817.618898][ T7915] block nbd0: shutting down sockets [ 817.619043][ T7915] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 817.619076][ T7915] Buffer I/O error on dev nbd0, logical block 0, async page read [ 817.619471][ T7915] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 817.619501][ T7915] Buffer I/O error on dev nbd0, logical block 1, async page read [ 817.647885][T19801] loop9: detected capacity change from 0 to 524287871 [ 817.671551][ T7915] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 817.671585][ T7915] Buffer I/O error on dev nbd0, logical block 2, async page read [ 817.671746][ T7915] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 817.671770][ T7915] Buffer I/O error on dev nbd0, logical block 3, async page read [ 817.671930][ T7915] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 817.671954][ T7915] Buffer I/O error on dev nbd0, logical block 0, async page read [ 817.672113][ T7915] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 817.672137][ T7915] Buffer I/O error on dev nbd0, logical block 1, async page read [ 817.672274][ T7915] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 817.672297][ T7915] Buffer I/O error on dev nbd0, logical block 2, async page read [ 817.672436][ T7915] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 817.672459][ T7915] Buffer I/O error on dev nbd0, logical block 3, async page read [ 817.672608][ T7915] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 817.672631][ T7915] Buffer I/O error on dev nbd0, logical block 0, async page read [ 817.829817][ T7915] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 817.829859][ T7915] Buffer I/O error on dev nbd0, logical block 1, async page read [ 818.108446][ T7915] ldm_validate_partition_table(): Disk read failed. [ 818.120017][ T7915] Dev nbd0: unable to read RDB block 0 [ 818.359421][ T7915] nbd0: unable to read partition table [ 818.464739][T19826] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5632'. [ 818.464767][T19826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5632'. [ 818.739969][ T7915] ldm_validate_partition_table(): Disk read failed. [ 818.771211][ T7915] Dev nbd0: unable to read RDB block 0 [ 818.935243][ T7915] nbd0: unable to read partition table [ 819.414591][T19849] program syz.8.5635 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 821.713347][T19913] loop9: detected capacity change from 0 to 2048 [ 821.789443][T19913] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 821.973069][T19923] loop8: detected capacity change from 0 to 512 [ 821.977694][T19923] EXT4-fs: Ignoring removed nomblk_io_submit option [ 821.977769][T19923] EXT4-fs: Ignoring removed mblk_io_submit option [ 821.978973][ T37] kauditd_printk_skb: 107 callbacks suppressed [ 821.978991][ T37] audit: type=1800 audit(1780014608.726:265): pid=19913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.5661" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 822.157300][T19923] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 822.157339][T19923] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 822.208620][T19132] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 822.293792][T19132] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 822.294596][T19132] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 822.312079][T19923] EXT4-fs (loop8): 1 truncate cleaned up [ 822.344925][T19923] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 822.472193][T19132] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 822.491562][T19132] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 822.612019][T19132] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 822.621399][T19132] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 822.645464][T19925] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 822.799186][T19132] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 822.827296][T19925] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 19 with max blocks 23 with error 28 [ 822.827334][T19925] EXT4-fs (loop9): This should not happen!! Data will be lost [ 822.827334][T19925] [ 822.827350][T19925] EXT4-fs (loop9): Total free blocks count 0 [ 822.827364][T19925] EXT4-fs (loop9): Free/Dirty block details [ 822.827409][T19925] EXT4-fs (loop9): free_blocks=4096 [ 822.827448][T19925] EXT4-fs (loop9): dirty_blocks=48 [ 822.827462][T19925] EXT4-fs (loop9): Block reservation details [ 822.827474][T19925] EXT4-fs (loop9): i_reserved_data_blocks=3 [ 822.854545][ T7508] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.251455][ T3382] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 823.267392][ T8038] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 823.938932][T19965] loop8: detected capacity change from 0 to 128 [ 823.942090][T19965] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 823.956102][T19965] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 824.828827][T19983] loop0: detected capacity change from 0 to 512 [ 824.843618][T19132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 825.004382][T19983] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 825.004544][T19983] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 825.333191][T19132] 8021q: adding VLAN 0 to HW filter on device team0 [ 825.358582][ T1054] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.403939][ T1054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 825.450705][ T1054] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.450891][ T1054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 825.585456][ T37] audit: type=1800 audit(1780014612.246:266): pid=19965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.5677" name="file0" dev="loop8" ino=1048744 res=0 errno=0 [ 825.589003][T15925] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.242932][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 826.413625][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 826.430124][ T10] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 826.430160][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.517870][ T10] usb 1-1: config 0 descriptor?? [ 826.532147][ T10] gspca_main: sq930x-2.14.0 probing 041e:403c [ 827.596760][ T10] gspca_sq930x: ucbus_write failed -71 [ 827.596863][ T10] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 827.628322][ T10] usb 1-1: USB disconnect, device number 12 [ 828.934818][T19132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 829.051035][T20089] netlink: 27 bytes leftover after parsing attributes in process `syz.0.5714'. [ 829.773977][T20106] loop8: detected capacity change from 0 to 4096 [ 830.047504][T20106] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 830.127357][T19132] veth0_vlan: entered promiscuous mode [ 830.153954][T19132] veth1_vlan: entered promiscuous mode [ 830.258332][T19132] veth0_macvtap: entered promiscuous mode [ 830.276254][T20106] ntfs3(loop8): ino=1a, mi_enum_attr [ 830.276426][T20106] ntfs3(loop8): ino=1a, mi_enum_attr [ 830.276448][T20106] ntfs3(loop8): Failed to initialize $Extend/$Reparse. [ 830.426624][T19132] veth1_macvtap: entered promiscuous mode [ 830.759476][T19132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 830.819131][T19132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 830.893046][ T43] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.899046][ T43] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.906573][ T43] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.955783][ T43] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.273176][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 831.471660][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 831.484995][ T10] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 831.485064][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 831.485090][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 831.485118][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 831.485142][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 831.485186][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 831.485211][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.827570][ T10] usb 1-1: usb_control_msg returned -32 [ 831.827627][ T10] usbtmc 1-1:16.0: can't read capabilities [ 833.082939][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 833.082964][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 833.364398][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 833.364424][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.125774][ T5826] usb 1-1: USB disconnect, device number 13 [ 834.420735][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 834.420862][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 834.775727][T20198] tipc: New replicast peer: 172.30.0.1 [ 834.776147][T20198] tipc: Enabled bearer , priority 10 [ 834.804463][T20198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5754'. [ 834.804499][T20198] tipc: Disabling bearer [ 835.391914][T20213] loop6: detected capacity change from 0 to 128 [ 835.662261][T20213] FAT-fs (loop6): bogus sectors per cluster 7 [ 835.662290][T20213] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 835.662308][T20213] FAT-fs (loop6): Can't find a valid FAT filesystem [ 835.851030][ T7839] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 836.007824][ T7839] usb 10-1: Using ep0 maxpacket: 16 [ 836.010333][ T7839] usb 10-1: config 0 has an invalid interface number: 34 but max is 0 [ 836.010364][ T7839] usb 10-1: config 0 has no interface number 0 [ 836.010413][ T7839] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 836.010441][ T7839] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 836.057364][ T7839] usb 10-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 836.057399][ T7839] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.057422][ T7839] usb 10-1: Product: syz [ 836.057437][ T7839] usb 10-1: Manufacturer: syz [ 836.057453][ T7839] usb 10-1: SerialNumber: syz [ 836.099973][ T7839] usb 10-1: config 0 descriptor?? [ 836.102390][T20217] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 836.102518][T20217] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 836.317451][T20217] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 836.317666][T20217] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 836.472807][T20242] loop8: detected capacity change from 0 to 256 [ 836.519514][ T7839] asix 10-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 837.144263][ T7839] asix 10-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 837.144301][ T7839] asix 10-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 837.161573][ T7839] asix 10-1:0.34: probe with driver asix failed with error -71 [ 837.202567][ T7839] usb 10-1: USB disconnect, device number 27 [ 838.296307][T20283] loop9: detected capacity change from 0 to 136 [ 838.323888][T20283] Attempt to read inode for relocated directory [ 839.076523][T20296] loop8: detected capacity change from 0 to 512 [ 839.823378][T20315] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5808'. [ 839.823488][T20315] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5808'. [ 839.909511][T20319] sctp: [Deprecated]: syz.8.5807 (pid 20319) Use of struct sctp_assoc_value in delayed_ack socket option. [ 839.909511][T20319] Use struct sctp_sack_info instead [ 840.656998][T20341] netlink: 'syz.6.5817': attribute type 9 has an invalid length. [ 840.657026][T20341] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5817'. [ 841.025096][T20354] loop8: detected capacity change from 0 to 7 [ 841.031166][T20354] Dev loop8: unable to read RDB block 7 [ 841.031212][T20354] loop8: unable to read partition table [ 841.031457][T20354] loop8: partition table beyond EOD, truncated [ 841.031478][T20354] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 841.651232][T20376] loop0: detected capacity change from 0 to 512 [ 841.652463][T20376] EXT4-fs: Ignoring removed i_version option [ 841.652488][T20376] EXT4-fs: Ignoring removed nobh option [ 841.653469][T20376] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 841.823883][T20376] EXT4-fs (loop0): 1 truncate cleaned up [ 841.865476][T20376] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 842.162877][T15925] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 842.543163][ T5826] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 842.692181][ T5826] usb 7-1: Using ep0 maxpacket: 32 [ 842.697298][ T5826] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 842.749319][ T5826] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 842.749356][ T5826] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 842.749380][ T5826] usb 7-1: Product: syz [ 842.749396][ T5826] usb 7-1: Manufacturer: syz [ 842.749412][ T5826] usb 7-1: SerialNumber: syz [ 842.843368][ T5826] usb 7-1: config 0 descriptor?? [ 843.077732][ T5605] usb 7-1: USB disconnect, device number 32 [ 843.929514][T20446] loop2: detected capacity change from 0 to 7 [ 843.947308][T20446] Dev loop2: unable to read RDB block 7 [ 843.947358][T20446] loop2: unable to read partition table [ 843.949334][T20446] loop2: partition table beyond EOD, truncated [ 843.949388][T20446] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 844.670588][T20443] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 844.671432][T20443] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 845.619302][T20443] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 845.619448][T20443] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 845.877590][T20443] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 845.877757][T20443] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 846.396437][T20443] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 846.479707][T15932] Bluetooth: hci5: command 0x0406 tx timeout [ 846.809006][T20443] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 846.809282][T20443] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 846.929011][T20443] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 847.242995][ T7839] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 847.342125][T20534] loop8: detected capacity change from 0 to 1024 [ 847.683485][T15932] Bluetooth: hci7: command 0x0406 tx timeout [ 847.849367][T20534] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 848.559783][T15932] Bluetooth: hci5: command 0x0406 tx timeout [ 848.671388][T20535] loop6: detected capacity change from 0 to 131072 [ 848.698847][T20535] F2FS-fs (loop6): Invalid log sectorsize (67108873) [ 848.698877][T20535] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 848.761700][T20535] F2FS-fs (loop6): invalid crc value [ 848.773543][T15932] Bluetooth: hci1: command 0x0c1a tx timeout [ 848.836074][ T7839] usb 10-1: Using ep0 maxpacket: 8 [ 848.999468][T15932] Bluetooth: hci2: command 0x0c1a tx timeout [ 849.030457][T20535] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 849.111030][T20535] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 849.111152][T20535] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 849.192516][ T7839] usb 10-1: device descriptor read/all, error -71 [ 849.413215][T20573] loop9: detected capacity change from 0 to 512 [ 849.488243][T20573] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 849.488402][T20573] ext4 filesystem being mounted at /806/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 849.582619][T20573] EXT4-fs warning (device loop9): ext4_group_add:1715: Can't resize non-sparse filesystem further [ 849.764980][T15932] Bluetooth: hci7: command 0x0406 tx timeout [ 849.868168][ T8038] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 850.794545][T20603] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5937'. [ 850.805393][T15932] Bluetooth: hci1: command 0x0c1a tx timeout [ 851.057284][ T5617] Bluetooth: hci2: command 0x0c1a tx timeout [ 852.105215][T20633] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5950'. [ 852.884071][T15932] Bluetooth: hci1: command 0x0c1a tx timeout [ 853.118984][T15932] Bluetooth: hci2: command 0x0c1a tx timeout [ 854.630556][T20694] loop9: detected capacity change from 0 to 256 [ 854.647387][T20694] exfat: Deprecated parameter 'namecase' [ 854.742007][T20694] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xd6f0c8a0, utbl_chksum : 0xe619d30d) [ 855.121468][T20701] loop9: detected capacity change from 0 to 2048 [ 855.172952][T20701] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 856.740038][T20728] loop0: detected capacity change from 0 to 4096 [ 856.801575][T20728] ntfs3(loop0): ino=3, Correct links count -> 2. [ 858.052471][T20765] loop8: detected capacity change from 0 to 1024 [ 858.476577][T20776] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6016'. [ 858.476608][T20776] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6016'. [ 858.782953][T20785] Bluetooth: MGMT ver 1.23 [ 859.246698][T20798] sg_write: data in/out 417876/136 bytes for SCSI command 0x0-- guessing data in; [ 859.246698][T20798] program syz.6.6025 not setting count and/or reply_len properly [ 861.195548][T20846] pim6reg1: entered promiscuous mode [ 861.195579][T20846] pim6reg1: entered allmulticast mode [ 862.778178][T20891] loop9: detected capacity change from 0 to 512 [ 862.805640][T20891] EXT4-fs (loop9): Test dummy encryption mode enabled [ 862.833178][T20891] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.6070: inode has both inline data and extents flags [ 862.833218][T20891] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 862.834248][T20891] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.6070: couldn't read orphan inode 15 (err -117) [ 862.834282][T20891] loop9: lost filesystem error report for type 5 error -117 [ 862.859610][T20891] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 863.140148][T20903] loop6: detected capacity change from 0 to 256 [ 863.279636][T20907] loop0: detected capacity change from 0 to 512 [ 863.367325][T20907] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 863.616739][T20907] EXT4-fs (loop0): 1 orphan inode deleted [ 863.616758][T20907] EXT4-fs (loop0): 1 truncate cleaned up [ 863.624059][T20907] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 863.800234][T20891] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 864.076754][T15925] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 864.417425][ T37] audit: type=1800 audit(1780014651.160:267): pid=20900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.6070" name="bus" dev="loop9" ino=19 res=0 errno=0 [ 864.545015][T20932] 9pnet_fd: p9_fd_create_unix (20932): problem connecting socket: ./file0: -30 [ 864.587001][ T8038] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 864.753546][T20936] loop0: detected capacity change from 0 to 128 [ 864.866742][T20936] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 864.867323][T20936] ext4 filesystem being mounted at /264/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 865.206850][T15925] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 866.475437][T20994] loop6: detected capacity change from 0 to 256 [ 866.494355][T20997] vxcan1: tx drop: invalid sa for name 0x0000000000000003 [ 867.397047][T21023] loop8: detected capacity change from 0 to 512 [ 867.413988][T21023] EXT4-fs: Ignoring removed oldalloc option [ 867.425125][T21023] EXT4-fs (loop8): filesystem is read-only [ 867.432946][T21023] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 867.524686][T21023] EXT4-fs (loop8): filesystem is read-only [ 867.524712][T21023] EXT4-fs (loop8): orphan cleanup on readonly fs [ 867.525465][T21023] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6125: bg 0: block 64: padding at end of block bitmap is not set [ 867.525500][T21023] loop8: lost filesystem error report for type 5 error -117 [ 867.526136][T21023] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 867.526163][T21023] loop8: lost filesystem error report for type 5 error -117 [ 867.526939][T21023] EXT4-fs (loop8): 1 orphan inode deleted [ 867.547020][T21023] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 868.154594][T21003] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 868.564340][T21051] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6140'. [ 869.321579][T21063] loop6: detected capacity change from 0 to 4096 [ 869.326193][T21063] EXT4-fs: Ignoring removed orlov option [ 869.469507][T21063] EXT4-fs (loop6): Test dummy encryption mode enabled [ 869.569420][T21063] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 869.904294][T19132] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 870.487496][T21074] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 870.488009][T21074] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 870.781203][ T5617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 870.950127][ T5617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 870.992162][ T5617] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 871.012962][ T5617] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 871.028885][ T5617] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 871.355664][ T13] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.031546][ T13] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.203569][T21138] Invalid argument reading file caps for ./file0 [ 873.286717][T15932] Bluetooth: hci3: command tx timeout [ 873.806393][ T13] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.484918][ T13] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.358440][T15932] Bluetooth: hci3: command tx timeout [ 875.705716][T21206] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6206'. [ 875.882782][T17461] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 876.039557][T17461] usb 1-1: config 0 has no interfaces? [ 876.055686][T17461] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 876.055720][T17461] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.055743][T17461] usb 1-1: Product: syz [ 876.055759][T17461] usb 1-1: Manufacturer: syz [ 876.055776][T17461] usb 1-1: SerialNumber: syz [ 876.121863][T17461] usb 1-1: config 0 descriptor?? [ 876.364272][T17442] usb 1-1: USB disconnect, device number 14 [ 876.817760][T21078] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.818107][T21078] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.818455][T21078] bridge_slave_0: entered allmulticast mode [ 876.883984][T21078] bridge_slave_0: entered promiscuous mode [ 877.038888][T21244] netlink: 428 bytes leftover after parsing attributes in process `syz.9.6223'. [ 877.182077][T21078] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.184062][T21078] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.184268][T21078] bridge_slave_1: entered allmulticast mode [ 877.212008][T21078] bridge_slave_1: entered promiscuous mode [ 877.230257][T21244] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6223'. [ 877.440330][T15932] Bluetooth: hci3: command tx timeout [ 877.510458][T21258] loop9: detected capacity change from 0 to 2048 [ 877.617678][T21258] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 877.626163][T21258] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 877.816882][ T8038] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 878.097334][T21078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 878.419740][T21078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 878.546103][T21294] loop9: detected capacity change from 0 to 256 [ 878.797100][ T13] bridge_slave_1: left promiscuous mode [ 878.797439][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.967194][ T13] bridge_slave_0: left allmulticast mode [ 878.967223][ T13] bridge_slave_0: left promiscuous mode [ 878.967440][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.547481][T15932] Bluetooth: hci3: command tx timeout [ 880.539743][T21356] overlayfs: overlapping lowerdir path [ 880.569070][T21359] 9pnet_fd: p9_fd_create_unix (21359): problem connecting socket: ./file0: -111 [ 881.210918][T21373] loop9: detected capacity change from 0 to 32768 [ 881.339743][T21373] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 881.516823][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 881.778623][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 881.859207][ T13] bond0 (unregistering): Released all slaves [ 881.866454][ T8038] ocfs2: Unmounting device (7,9) on (node local) [ 882.007721][ T13] bond1 (unregistering): Released all slaves [ 882.063782][T21078] team0: Port device team_slave_0 added [ 882.088593][T21304] tap0: tun_chr_ioctl cmd 1074025675 [ 882.088623][T21304] tap0: persist enabled [ 882.411849][T21078] team0: Port device team_slave_1 added [ 882.801948][T21078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 882.801967][T21078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.801993][T21078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 883.003347][T21078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 883.003367][T21078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 883.003398][T21078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 883.805894][T21078] hsr_slave_0: entered promiscuous mode [ 883.827073][T21078] hsr_slave_1: entered promiscuous mode [ 883.838666][T21078] debugfs: 'hsr0' already exists in 'hsr' [ 883.838695][T21078] Cannot create hsr debugfs directory [ 884.053015][T21449] loop9: detected capacity change from 0 to 1024 [ 884.076833][T21449] EXT4-fs: Ignoring removed oldalloc option [ 884.104112][T21449] EXT4-fs (loop9): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 884.347254][T21449] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 884.746087][ T8038] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 884.805734][ T7839] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 885.007462][ T7839] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 885.007500][ T7839] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 885.008951][ T7839] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 885.008980][ T7839] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 885.009004][ T7839] usb 7-1: Manufacturer: syz [ 885.054389][ T7839] usb 7-1: config 0 descriptor?? [ 885.749395][T21478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6321'. [ 886.195251][ T7839] uclogic 0003:256C:006D.0035: failed retrieving Huion firmware version: -71 [ 886.195323][ T7839] uclogic 0003:256C:006D.0035: failed probing parameters: -71 [ 886.195446][ T7839] uclogic 0003:256C:006D.0035: probe with driver uclogic failed with error -71 [ 886.269669][ T7839] usb 7-1: USB disconnect, device number 33 [ 886.387728][T21485] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 887.369265][ T5277] 8021q: adding VLAN 0 to HW filter on device eth17 [ 890.106885][T21550] sch_fq: defrate 1 ignored. [ 890.381885][ T5277] 8021q: adding VLAN 0 to HW filter on device eth18 [ 892.334596][ T5826] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 892.354588][ T13] hsr_slave_0: left promiscuous mode [ 892.396589][ T13] hsr_slave_1: left promiscuous mode [ 892.410613][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 892.410640][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 892.487010][ T5826] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 892.487043][ T5826] usb 7-1: config 0 has no interface number 0 [ 892.487093][ T5826] usb 7-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 892.487122][ T5826] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 892.487153][ T5826] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 892.489870][ T5826] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 892.489899][ T5826] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 892.489920][ T5826] usb 7-1: Product: syz [ 892.489935][ T5826] usb 7-1: SerialNumber: syz [ 892.571465][ T5826] usb 7-1: config 0 descriptor?? [ 892.599048][ T5826] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 892.603237][ T5826] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input22 [ 893.476506][ T13] veth1_macvtap: left promiscuous mode [ 893.476627][ T13] veth0_macvtap: left promiscuous mode [ 893.476982][ T13] veth1_vlan: left promiscuous mode [ 893.477199][ T13] veth0_vlan: left promiscuous mode [ 893.720807][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 893.727256][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 893.733322][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 893.733591][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 893.733828][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 893.734060][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 893.734311][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 893.734533][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 893.734757][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 893.734982][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 893.893244][ C0] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 893.893257][ T5605] usb 7-1: USB disconnect, device number 34 [ 894.052190][ T5605] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 894.732757][T21722] loop9: detected capacity change from 0 to 1024 [ 894.914662][ T5605] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 894.917612][T21722] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 895.098757][ T5605] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 895.098794][ T5605] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 895.098825][ T5605] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 895.098882][ T5605] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 895.098911][ T5605] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 895.114921][ T5605] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 895.114954][ T5605] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 895.114974][ T5605] usb 1-1: Product: syz [ 895.114988][ T5605] usb 1-1: Manufacturer: syz [ 895.136604][ T5605] cdc_wdm 1-1:1.0: skipping garbage [ 895.136625][ T5605] cdc_wdm 1-1:1.0: skipping garbage [ 895.261596][ T5605] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 895.261621][ T5605] cdc_wdm 1-1:1.0: Unknown control protocol [ 895.430642][ T8038] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.724746][ C0] cdc_wdm 1-1:1.0: unknown notification 100 received: index 28719 len 28020 [ 895.901838][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 895.901961][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 895.959972][ T5605] usb 1-1: USB disconnect, device number 15 [ 896.492519][ T13] team0 (unregistering): Port device team_slave_1 removed [ 896.557118][T21754] loop9: detected capacity change from 0 to 512 [ 896.599844][T21754] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.6437: inode has both inline data and extents flags [ 896.599885][T21754] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 896.600389][T21754] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.6437: couldn't read orphan inode 15 (err -117) [ 896.600423][T21754] loop9: lost filesystem error report for type 5 error -117 [ 896.628044][T21754] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 896.998138][ T13] team0 (unregistering): Port device team_slave_0 removed [ 897.558207][ T8038] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 898.716446][T21773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6447'. [ 899.002930][T21806] loop6: detected capacity change from 0 to 512 [ 899.067426][T21806] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.6461: corrupted in-inode xattr: invalid ea_ino [ 899.067469][T21806] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 899.068119][T21806] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.6461: couldn't read orphan inode 15 (err -117) [ 899.068154][T21806] loop6: lost filesystem error report for type 5 error -117 [ 899.088491][ C1] EXT4-fs (loop6): error count since last fsck: 2 [ 899.088526][ C1] EXT4-fs (loop6): initial error at time 1780014685: ext4_iget_extra_inode:5128: inode 15 [ 899.088556][ C1] EXT4-fs (loop6): last error at time 1780014685: ext4_orphan_get:1402 [ 899.126920][T21806] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 899.208031][T21806] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #2: block 13: comm syz.6.6461: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 899.990199][T19132] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 900.606772][T21840] loop9: detected capacity change from 0 to 4096 [ 900.610276][T21840] EXT4-fs: Ignoring removed orlov option [ 900.693330][T21840] EXT4-fs (loop9): Test dummy encryption mode enabled [ 900.791046][T21840] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 901.196440][ T8038] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 901.219329][T21855] loop6: detected capacity change from 0 to 4096 [ 901.330234][T21855] EXT4-fs (loop6): Test dummy encryption mode enabled [ 901.554663][ T5753] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 901.580513][T21855] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 901.780673][ T5753] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 901.780706][ T5753] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.780728][ T5753] usb 1-1: Product: syz [ 901.780742][ T5753] usb 1-1: Manufacturer: syz [ 901.780767][ T5753] usb 1-1: SerialNumber: syz [ 901.842102][ T5753] usb 1-1: config 0 descriptor?? [ 902.264550][ T5277] 8021q: adding VLAN 0 to HW filter on device eth19 [ 902.317998][ T5753] usb 1-1: Firmware: major: 49, minor: 56, hardware type: UNKNOWN (52) [ 902.523919][ T5753] usb 1-1: Firmware: build [ 902.567998][T19132] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 902.732625][ T5753] usb 1-1: failed to fetch extended address, random address set [ 902.732659][ T5753] usb 1-1: atusb_probe: initialization failed, error = -524 [ 902.737899][ T13] IPVS: stop unused estimator thread 0... [ 902.773669][ T5753] atusb 1-1:0.0: probe with driver atusb failed with error -524 [ 902.789236][ T5753] usb 1-1: USB disconnect, device number 16 [ 903.166547][T21885] kernel read not supported for file /fb0 (pid: 21885 comm: syz.9.6490) [ 903.853906][T21904] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6499'. [ 904.819754][T21078] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 904.926369][T21078] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 904.968022][T21078] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 905.228603][T21078] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 905.242084][T21078] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 905.347262][T21078] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 905.352423][T21078] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 905.468585][T21078] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 905.803122][ T5826] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 905.952979][ T5826] usb 10-1: Using ep0 maxpacket: 16 [ 905.956058][ T5826] usb 10-1: config 0 has an invalid interface number: 105 but max is 0 [ 905.956097][ T5826] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 905.956117][ T5826] usb 10-1: config 0 has no interface number 0 [ 906.043767][ T5826] usb 10-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 906.043803][ T5826] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.043826][ T5826] usb 10-1: Product: syz [ 906.043843][ T5826] usb 10-1: Manufacturer: syz [ 906.043859][ T5826] usb 10-1: SerialNumber: syz [ 906.083770][ T5826] usb 10-1: config 0 descriptor?? [ 906.145326][ T5826] uvcvideo 10-1:0.105: Found Unit with invalid ID 0 [ 906.354336][ T5826] uvcvideo 10-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 906.354377][ T5826] uvcvideo 10-1:0.105: No valid video chain found. [ 906.393042][ T5826] usb 10-1: USB disconnect, device number 30 [ 906.538372][ T5277] 8021q: adding VLAN 0 to HW filter on device eth20 [ 906.569736][T21986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6527'. [ 906.675522][T21078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 906.796249][ T5605] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 906.891781][T21078] 8021q: adding VLAN 0 to HW filter on device team0 [ 906.972793][ T5605] usb 7-1: Using ep0 maxpacket: 32 [ 906.976803][ T5605] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 906.976836][ T5605] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 906.976864][ T5605] usb 7-1: config 0 interface 0 has no altsetting 0 [ 906.988193][ T5605] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 906.988226][ T5605] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.988248][ T5605] usb 7-1: Product: syz [ 906.988264][ T5605] usb 7-1: Manufacturer: syz [ 906.988280][ T5605] usb 7-1: SerialNumber: syz [ 907.041545][ T1243] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.067703][ T5605] usb 7-1: config 0 descriptor?? [ 907.130005][ T1243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 907.280223][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.280571][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 907.542087][ T5605] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 907.956953][ T5605] gs_usb 7-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 907.960694][ T5605] gs_usb 7-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 907.961068][ T5605] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -71 [ 908.052842][ T5605] usb 7-1: USB disconnect, device number 35 [ 908.275099][T22026] netlink: 'syz.0.6542': attribute type 2 has an invalid length. [ 908.275124][T22026] netlink: 'syz.0.6542': attribute type 2 has an invalid length. [ 908.558477][T22034] usb usb8: usbfs: process 22034 (syz.9.6544) did not claim interface 0 before use [ 908.785840][T22043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6547'. [ 909.040087][ T5748] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 909.218212][ T5748] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 909.218254][ T5748] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 909.218298][ T5748] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 909.218326][ T5748] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.360125][T22042] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 909.409611][ T5748] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 910.932740][T21078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 911.555260][T22118] netlink: 'syz.9.6573': attribute type 83 has an invalid length. [ 911.953389][T21078] veth0_vlan: entered promiscuous mode [ 912.021757][ T5748] usb 7-1: USB disconnect, device number 36 [ 912.094304][T21078] veth1_vlan: entered promiscuous mode [ 912.168350][T22130] netlink: 52 bytes leftover after parsing attributes in process `syz.9.6577'. [ 912.321568][T21078] veth0_macvtap: entered promiscuous mode [ 912.343687][T22094] loop6: detected capacity change from 0 to 32768 [ 912.415503][T21078] veth1_macvtap: entered promiscuous mode [ 912.632291][T21078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 912.673164][T21078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 912.728924][T22094] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 912.772399][T22145] block nbd9: NBD_DISCONNECT [ 912.782873][ T178] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.815226][ T178] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.854042][ T178] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.899669][ T178] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.973749][T22094] XFS (loop6): Ending clean mount [ 913.045420][T22094] XFS (loop6): User initiated shutdown received. [ 913.083457][T22094] XFS (loop6): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:466). Shutting down filesystem. [ 913.083515][T22094] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 913.357487][T19132] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 915.172588][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 915.172613][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 915.370126][T22187] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 915.370160][T22187] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 916.172100][ T5753] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 916.452013][ T5753] usb 1-1: Using ep0 maxpacket: 32 [ 916.454590][ T5753] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 916.454622][ T5753] usb 1-1: config 0 has no interface number 0 [ 916.454674][ T5753] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 916.664104][ T5753] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 916.664140][ T5753] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.664162][ T5753] usb 1-1: Product: syz [ 916.664178][ T5753] usb 1-1: Manufacturer: syz [ 916.664195][ T5753] usb 1-1: SerialNumber: syz [ 917.026048][ T5753] usb 1-1: config 0 descriptor?? [ 917.027550][T22192] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 917.097572][T22217] loop6: detected capacity change from 0 to 256 [ 917.237903][T22192] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 917.247038][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.247062][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.676247][ T5753] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 917.676577][ T5753] asix 1-1:0.188: probe with driver asix failed with error -71 [ 917.968037][ T5753] usb 1-1: USB disconnect, device number 17 [ 918.060855][T22230] loop6: detected capacity change from 0 to 128 [ 918.201258][T22230] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 918.261058][T22230] ext4 filesystem being mounted at /92/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 918.316949][T22240] fuse: Bad value for 'fd' [ 918.435728][T22230] fscrypt (loop6, inode 12): Unsupported encryption flags (0x41) [ 919.023364][T19132] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 919.679282][T22277] netlink: 59 bytes leftover after parsing attributes in process `syz.6.6613'. [ 921.125059][T22328] loop4: detected capacity change from 0 to 7 [ 921.128018][T22328] loop4: [POWERTEC] p1 [ 921.128329][T22328] loop4: p1 size 589824 extends beyond EOD, truncated [ 921.172915][T22190] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 921.345470][T22190] usb 10-1: config 0 has no interfaces? [ 921.361291][T22190] usb 10-1: New USB device found, idVendor=0a5c, idProduct=bd1f, bcdDevice=53.1a [ 921.361337][T22190] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.361358][T22190] usb 10-1: Product: syz [ 921.361375][T22190] usb 10-1: Manufacturer: syz [ 921.361391][T22190] usb 10-1: SerialNumber: syz [ 921.376546][T22334] loop6: detected capacity change from 0 to 512 [ 921.488303][T22334] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 921.514056][T22190] usb 10-1: config 0 descriptor?? [ 921.817635][T19132] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 922.061299][ T5748] usb 10-1: USB disconnect, device number 31 [ 922.348426][ T7915] udevd[7915]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 922.697285][ T37] audit: type=1326 audit(1780014709.457:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22374 comm="syz.1.6655" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6d7562ce59 code=0x0 [ 923.054310][T22387] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6658'. [ 923.517163][T22404] comedi comedi4: bad chanlist[1]=0x00000008 chan=8 range length=2 [ 923.542585][T22387] hsr_slave_1 (unregistering): left promiscuous mode [ 923.653279][ T5740] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 923.813063][ T5740] usb 1-1: Using ep0 maxpacket: 32 [ 923.816356][ T5740] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 923.816389][ T5740] usb 1-1: config 0 has no interface number 0 [ 923.816442][ T5740] usb 1-1: config 0 interface 12 has no altsetting 0 [ 923.873425][ T5740] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 923.873462][ T5740] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.873485][ T5740] usb 1-1: Product: syz [ 923.873501][ T5740] usb 1-1: Manufacturer: syz [ 923.873517][ T5740] usb 1-1: SerialNumber: syz [ 923.955315][ T5740] usb 1-1: config 0 descriptor?? [ 924.953271][T22438] loop9: detected capacity change from 0 to 2048 [ 924.979624][T22438] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 925.028888][ T5740] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 925.028947][ T5740] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 925.028965][ T5740] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 925.029062][ T5740] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 925.074913][ T5740] usb 1-1: USB disconnect, device number 18 [ 927.091248][ T32] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 927.272430][ T32] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 927.272495][ T32] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 927.272527][ T32] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 927.272555][ T32] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 927.272584][ T32] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 927.277566][ T32] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 927.277644][ T32] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 927.277676][ T32] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 927.277807][ T32] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 927.277838][ T32] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 927.355464][ T32] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 927.355527][ T32] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 927.355560][ T32] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 927.355589][ T32] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 927.355617][ T32] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 927.448819][ T32] usb 1-1: string descriptor 0 read error: -22 [ 927.448985][ T32] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 927.449013][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.502203][ T32] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 927.682270][T22517] netlink: 'syz.9.6708': attribute type 1 has an invalid length. [ 927.682296][T22517] netlink: 92 bytes leftover after parsing attributes in process `syz.9.6708'. [ 928.282581][ T32] usb 1-1: USB disconnect, device number 19 [ 929.394476][T22536] loop9: detected capacity change from 0 to 32768 [ 929.507574][T22536] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 929.689565][T22536] XFS (loop9): Ending clean mount [ 929.833797][ T8038] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 929.839229][T22583] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 930.006002][T22583] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 930.006032][T22583] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 930.006050][T22583] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 930.006066][T22583] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 930.006082][T22583] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 930.006098][T22583] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 930.006114][T22583] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 930.006131][T22583] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 930.006147][T22583] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 932.222180][T22608] input: syz0 as /devices/virtual/input/input25 [ 932.402943][T22639] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 932.423096][T22635] netlink: 'syz.6.6748': attribute type 22 has an invalid length. [ 934.291893][T22699] sctp: [Deprecated]: syz.0.6771 (pid 22699) Use of struct sctp_assoc_value in delayed_ack socket option. [ 934.291893][T22699] Use struct sctp_sack_info instead [ 934.729780][ T5753] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 934.895512][ T5753] usb 2-1: Using ep0 maxpacket: 8 [ 934.971934][ T5753] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 934.971974][ T5753] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 934.972023][ T5753] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 934.972050][ T5753] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.042848][ T5753] usb 2-1: config 0 descriptor?? [ 935.553103][ T5753] hid (null): report_id 370376188 is invalid [ 935.614501][ T5753] hid-rmi 0003:06CB:81A7.0036: unknown main item tag 0x6 [ 935.614540][ T5753] hid-rmi 0003:06CB:81A7.0036: report_id 370376188 is invalid [ 935.614559][ T5753] hid-rmi 0003:06CB:81A7.0036: item 0 4 1 8 parsing failed [ 935.615373][ T5753] hid-rmi 0003:06CB:81A7.0036: parse failed [ 935.615494][ T5753] hid-rmi 0003:06CB:81A7.0036: probe with driver hid-rmi failed with error -22 [ 935.762639][ T5748] usb 2-1: USB disconnect, device number 6 [ 936.251731][T22741] netlink: 'syz.6.6786': attribute type 2 has an invalid length. [ 936.251759][T22741] netlink: 'syz.6.6786': attribute type 2 has an invalid length. [ 937.387257][T22779] Invalid argument reading file caps for ./file0 [ 938.204730][T22801] loop9: detected capacity change from 0 to 64 [ 938.507771][T22811] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 938.594147][T22813] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6815'. [ 939.687961][T22852] loop9: detected capacity change from 0 to 16 [ 939.699343][T22852] erofs (device loop9): mounted with root inode @ nid 36. [ 939.735414][T22852] erofs (device loop9): readahead error at folio 2 @ nid 89 [ 939.735448][T22852] erofs (device loop9): readahead error at folio 1 @ nid 89 [ 939.735467][T22852] erofs (device loop9): readahead error at folio 0 @ nid 89 [ 939.735494][T22852] erofs (device loop9): read error -117 @ 0 of nid 89 [ 939.735756][ T37] audit: type=1800 audit(1780014726.499:269): pid=22852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.6833" name="file2" dev="loop9" ino=89 res=0 errno=0 [ 939.775665][T22852] erofs (device loop9): read error -117 @ 1 of nid 89 [ 939.775716][T22852] erofs (device loop9): read error -117 @ 1 of nid 89 [ 939.775758][T22852] erofs (device loop9): read error -117 @ 1 of nid 89 [ 939.775788][T22852] erofs (device loop9): read error -117 @ 1 of nid 89 [ 943.127277][T22962] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6873'. [ 943.864173][T22988] syzkaller1: entered promiscuous mode [ 943.864204][T22988] syzkaller1: entered allmulticast mode [ 944.327913][T22970] loop9: detected capacity change from 0 to 32768 [ 944.356062][T22970] XFS (loop9): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 944.544785][T22970] XFS (loop9): Ending clean mount [ 944.996323][T23032] loop6: detected capacity change from 0 to 2048 [ 945.000402][T23032] EXT4-fs: Ignoring removed i_version option [ 945.276101][T23032] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 945.276270][T23032] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 945.381143][ T8038] XFS (loop9): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 945.659367][T19132] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 947.615345][T21078] block device autoloading is deprecated and will be removed. [ 947.635393][T23059] block device autoloading is deprecated and will be removed. [ 948.044290][T23059] SQUASHFS error: Failed to read block 0x0: -5 [ 950.133616][T23129] loop9: detected capacity change from 0 to 8192 [ 950.140802][T23129] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512). [ 950.334124][T23129] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 950.348325][T23129] ntfs3(loop9): Failed to load $Extend (-2). [ 950.348352][T23129] ntfs3(loop9): Failed to initialize $Extend. [ 953.494151][T23242] loop6: detected capacity change from 0 to 8 [ 954.558716][ T37] audit: type=1800 audit(1780014741.320:270): pid=23242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.6979" name="file1" dev="loop6" ino=5 res=0 errno=0 [ 956.769861][T23341] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7013'. [ 957.281142][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 957.281274][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 957.412657][ T5826] kernel write not supported for file /input/event0 (pid: 5826 comm: kworker/0:6) [ 957.791235][T23368] loop6: detected capacity change from 0 to 512 [ 958.094950][T23368] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 958.097100][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 958.097131][ C1] EXT4-fs (loop6): initial error at time 1780014744: ext4_mb_generate_buddy:1317 [ 958.097158][ C1] EXT4-fs (loop6): last error at time 1780014744: ext4_mb_generate_buddy:1317 [ 958.117399][T23368] EXT4-fs (loop6): Remounting filesystem read-only [ 958.117825][T23368] EXT4-fs (loop6): 1 truncate cleaned up [ 958.139600][T23368] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 958.325152][T23382] loop9: detected capacity change from 0 to 256 [ 958.395707][T23382] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 958.410551][T23382] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 958.410594][T23382] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 958.734592][T23382] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 958.734712][T23382] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 958.734746][T23382] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 958.735259][T23382] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 958.735291][T23382] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 958.744168][ T37] audit: type=1800 audit(1780014745.491:271): pid=23382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.7031" name="file2" dev="loop9" ino=1048767 res=0 errno=0 [ 958.822121][T19132] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 961.530376][T23465] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7068'. [ 961.544211][T23464] loop9: detected capacity change from 0 to 512 [ 961.765156][T23464] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 961.965175][T23464] EXT4-fs (loop9): 1 truncate cleaned up [ 961.968862][T23464] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 962.089627][ T8038] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 962.780284][T23486] loop6: detected capacity change from 0 to 4096 [ 962.849603][T23486] EXT4-fs (loop6): Test dummy encryption mode enabled [ 962.896325][T23486] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 962.896829][T23486] System zones: 0-5 [ 962.979405][T23486] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 963.274749][T19132] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 963.306722][ T5826] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 963.508754][ T5826] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 963.508818][ T5826] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 963.511875][ T5826] usb 10-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 963.511909][ T5826] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.511941][ T5826] usb 10-1: Product: syz [ 963.511958][ T5826] usb 10-1: Manufacturer: syz [ 963.511974][ T5826] usb 10-1: SerialNumber: syz [ 963.865605][ T5826] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 963.883497][ T5826] usb 10-1: USB disconnect, device number 32 [ 964.242094][T23491] loop1: detected capacity change from 0 to 32768 [ 964.355467][T23491] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 964.603415][T23491] XFS (loop1): Ending clean mount [ 964.829042][T23491] XFS (loop1): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xe0, xfs_finobt block 0x10 [ 964.829115][T23491] XFS (loop1): Unmount and run xfs_repair [ 964.829129][T23491] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 964.829149][T23491] 00000000: 46 49 03 33 00 00 00 01 ff ff ff ff ff ff ff ff FI.3............ [ 964.829166][T23491] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 964.829182][T23491] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 964.829197][T23491] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37 ..............@7 [ 964.829214][T23491] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 964.829229][T23491] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 964.829245][T23491] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 964.829260][T23491] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 964.829277][T23491] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x10 len 4 error 74 [ 964.849610][T23491] loop1: lost filesystem error report for type 5 error -117 [ 964.849760][T23491] XFS (loop1): Failed to initialize disk quotas, err -117. [ 965.000314][T21078] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 965.000867][T21078] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair. [ 969.735206][T23634] loop9: detected capacity change from 0 to 1024 [ 970.011598][T23634] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 970.062316][T23634] EXT4-fs error (device loop9): ext4_lookup:1789: inode #2: comm syz.9.7134: deleted inode referenced: 12 [ 970.184004][T23634] EXT4-fs (loop9): Remounting filesystem read-only [ 970.418359][ T8038] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 970.595865][ T32] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 970.745857][ T32] usb 2-1: Using ep0 maxpacket: 16 [ 970.748658][ T32] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 970.748690][ T32] usb 2-1: config 0 has no interface number 0 [ 970.748738][ T32] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 970.748764][ T32] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 970.751968][ T32] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 970.752103][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.752127][ T32] usb 2-1: Product: syz [ 970.752144][ T32] usb 2-1: Manufacturer: syz [ 970.752160][ T32] usb 2-1: SerialNumber: syz [ 970.841063][ T32] usb 2-1: config 0 descriptor?? [ 970.842443][T23666] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 970.842668][T23666] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 971.133023][T23666] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 971.133370][T23666] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 971.383760][ T32] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 972.124725][T23702] loop9: detected capacity change from 0 to 256 [ 972.192039][ T32] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 972.192362][ T32] asix 2-1:0.34: probe with driver asix failed with error -71 [ 972.253902][ T32] usb 2-1: USB disconnect, device number 7 [ 976.687614][T23803] tls_set_device_offload_rx: netdev not found [ 977.200062][T23813] loop1: detected capacity change from 0 to 512 [ 977.564930][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 977.693570][T23819] loop9: detected capacity change from 0 to 32768 [ 977.867302][T23819] XFS (loop9): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 978.014386][T23819] XFS (loop9): Ending clean mount [ 978.103512][T23813] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 978.103697][T23813] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 978.677050][T21078] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 980.257861][T23635] XFS (loop9): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 [ 980.257922][T23635] XFS (loop9): Unmount and run xfs_repair [ 980.257948][T23635] XFS (loop9): First 128 bytes of corrupted metadata buffer: [ 980.257967][T23635] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 980.257985][T23635] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 980.258001][T23635] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 980.258016][T23635] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 980.258033][T23635] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 980.258048][T23635] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 980.258065][T23635] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 980.258080][T23635] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 980.258099][T23635] XFS (loop9): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x4 len 4 error 74 [ 980.431104][T23635] XFS (loop9): page discard on page ffffea0001bdc940, inode 0x1809, pos 0. [ 981.290887][ T8038] XFS (loop9): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 981.412399][T23867] loop1: detected capacity change from 0 to 16 [ 981.423905][T23867] erofs (device loop1): mounted with root inode @ nid 36. [ 981.450921][T23867] erofs (device loop1): readahead error at folio 2 @ nid 89 [ 981.451033][T23867] erofs (device loop1): bogus lookback distance 1 @ lcn 0 of nid 89 [ 981.451057][T23867] erofs (device loop1): readahead error at folio 1 @ nid 89 [ 981.451075][T23867] erofs (device loop1): bogus lookback distance 1 @ lcn 0 of nid 89 [ 981.451095][T23867] erofs (device loop1): readahead error at folio 0 @ nid 89 [ 981.618576][T23867] erofs (device loop1): bogus lookback distance 1 @ lcn 0 of nid 89 [ 981.618602][T23867] erofs (device loop1): bogus lookback distance 1 @ lcn 0 of nid 89 [ 981.618616][T23867] erofs (device loop1): read error -117 @ 0 of nid 89 [ 981.651736][ T37] audit: type=1800 audit(1780014768.383:272): pid=23867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7227" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 981.825149][ T8038] XFS (loop9): Uncorrected metadata errors detected; please run xfs_repair. [ 982.734958][T23878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7229'. [ 983.273869][T23888] netlink: 'syz.1.7235': attribute type 1 has an invalid length. [ 983.809038][T23888] 8021q: adding VLAN 0 to HW filter on device bond1 [ 983.906519][T23893] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 985.619950][T23941] loop6: detected capacity change from 0 to 1024 [ 985.670548][T23944] netlink: 'syz.0.7258': attribute type 11 has an invalid length. [ 985.670575][T23944] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7258'. [ 986.774168][ T32] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 986.942761][ T32] usb 2-1: Using ep0 maxpacket: 32 [ 986.955226][ T32] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 986.955259][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.966414][ T32] usb 2-1: config 0 descriptor?? [ 987.172954][ T32] gspca_main: sq930x-2.14.0 probing 041e:403c [ 987.794863][T23995] 9pnet: p9_errstr2errno: server reported unknown error 0x0 [ 988.394902][ T32] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 988.395025][ T32] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 988.407131][ T32] usb 2-1: USB disconnect, device number 8 [ 989.235018][ T32] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 989.383985][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 989.420572][ T32] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 989.420612][ T32] usb 1-1: config 0 interface 0 has no altsetting 0 [ 989.420636][ T32] usb 1-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 989.420651][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.458907][ T32] usb 1-1: config 0 descriptor?? [ 989.483256][T24021] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 989.927523][ T32] hid_mf 0003:0079:1801.0037: unknown main item tag 0x0 [ 989.927646][ T32] hid_mf 0003:0079:1801.0037: unknown main item tag 0x0 [ 989.927673][ T32] hid_mf 0003:0079:1801.0037: unknown main item tag 0x0 [ 989.927700][ T32] hid_mf 0003:0079:1801.0037: unknown main item tag 0x0 [ 989.927727][ T32] hid_mf 0003:0079:1801.0037: unknown main item tag 0x0 [ 989.927752][ T32] hid_mf 0003:0079:1801.0037: unknown main item tag 0x0 [ 989.927776][ T32] hid_mf 0003:0079:1801.0037: unknown main item tag 0x0 [ 989.927800][ T32] hid_mf 0003:0079:1801.0037: unknown main item tag 0x0 [ 989.927823][ T32] hid_mf 0003:0079:1801.0037: unknown main item tag 0x0 [ 989.927850][ T32] hid_mf 0003:0079:1801.0037: unknown main item tag 0x0 [ 989.936178][ T32] hid_mf 0003:0079:1801.0037: unknown global tag 0xd [ 989.936204][ T32] hid_mf 0003:0079:1801.0037: item 0 0 1 13 parsing failed [ 989.942532][ T32] hid_mf 0003:0079:1801.0037: HID parse failed. [ 989.942619][ T32] hid_mf 0003:0079:1801.0037: probe with driver hid_mf failed with error -22 [ 990.328407][ T821] usb 1-1: USB disconnect, device number 20 [ 993.416496][T24095] loop9: detected capacity change from 0 to 40427 [ 993.419792][T24095] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 993.419824][T24095] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 993.429094][T24095] F2FS-fs (loop9): invalid crc value [ 993.628408][T24095] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 993.721980][T24095] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 993.722017][T24095] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 993.773019][T24104] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 993.773543][T24104] CPU: 1 UID: 0 PID: 24104 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 993.773580][T24104] Tainted: [L]=SOFTLOCKUP [ 993.773589][T24104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 993.773605][T24104] Workqueue: hci3 hci_rx_work [ 993.773646][T24104] Call Trace: [ 993.773656][T24104] [ 993.773667][T24104] dump_stack_lvl+0xe8/0x150 [ 993.773704][T24104] sysfs_create_dir_ns+0x271/0x2a0 [ 993.773734][T24104] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 993.773779][T24104] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 993.773814][T24104] ? rt_spin_unlock+0x160/0x200 [ 993.773849][T24104] kobject_add_internal+0x631/0xd10 [ 993.773890][T24104] kobject_add+0x163/0x240 [ 993.773927][T24104] ? __pfx_kobject_add+0x10/0x10 [ 993.773966][T24104] ? get_device_parent+0x370/0x3a0 [ 993.774010][T24104] device_add+0x408/0xb90 [ 993.774052][T24104] hci_conn_add_sysfs+0xd5/0x210 [ 993.774090][T24104] le_conn_complete_evt+0x10e6/0x16b0 [ 993.774131][T24104] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 993.774159][T24104] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 993.774198][T24104] ? lockdep_hardirqs_on+0x7a/0x110 [ 993.774225][T24104] ? skb_pull_data+0xfb/0x200 [ 993.774261][T24104] hci_le_conn_complete_evt+0x187/0x470 [ 993.774297][T24104] hci_event_packet+0x659/0xef0 [ 993.774339][T24104] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 993.774369][T24104] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 993.774399][T24104] ? __pfx_hci_event_packet+0x10/0x10 [ 993.774433][T24104] ? rt_spin_unlock+0x14f/0x200 [ 993.774470][T24104] ? hci_send_to_monitor+0xe2/0x590 [ 993.774502][T24104] hci_rx_work+0x3ee/0x1040 [ 993.774550][T24104] ? process_one_work+0x8be/0x1630 [ 993.774586][T24104] process_one_work+0x98b/0x1630 [ 993.774648][T24104] ? __pfx_process_one_work+0x10/0x10 [ 993.774684][T24104] ? do_raw_spin_lock+0x12b/0x2f0 [ 993.774732][T24104] worker_thread+0xb49/0x1140 [ 993.774776][T24104] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 993.774830][T24104] kthread+0x388/0x470 [ 993.774861][T24104] ? __pfx_worker_thread+0x10/0x10 [ 993.774883][T24104] ? __pfx_kthread+0x10/0x10 [ 993.774914][T24104] ret_from_fork+0x514/0xb70 [ 993.774951][T24104] ? __pfx_ret_from_fork+0x10/0x10 [ 993.774984][T24104] ? __switch_to+0xc79/0x1410 [ 993.775012][T24104] ? __pfx_kthread+0x10/0x10 [ 993.775039][T24104] ret_from_fork_asm+0x1a/0x30 [ 993.775088][T24104] [ 993.775146][T24104] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 993.775194][T24104] Bluetooth: hci3: failed to register connection device [ 994.894637][T24123] loop6: detected capacity change from 0 to 512 [ 994.904998][T24123] EXT4-fs: Ignoring removed oldalloc option [ 994.909896][T24123] EXT4-fs (loop6): filesystem is read-only [ 994.911623][T24123] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 994.950989][T24123] EXT4-fs (loop6): filesystem is read-only [ 994.951015][T24123] EXT4-fs (loop6): orphan cleanup on readonly fs [ 994.952600][T24123] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7334: bg 0: block 64: padding at end of block bitmap is not set [ 994.952639][T24123] loop6: lost filesystem error report for type 5 error -117 [ 994.953012][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 994.953035][ C1] EXT4-fs (loop6): initial error at time 1780014781: ext4_validate_block_bitmap:441 [ 994.953061][ C1] EXT4-fs (loop6): last error at time 1780014781: ext4_validate_block_bitmap:441 [ 994.961902][T24123] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 994.961933][T24123] loop6: lost filesystem error report for type 5 error -117 [ 994.964588][T24123] EXT4-fs (loop6): 1 orphan inode deleted [ 994.988392][T24123] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 995.468254][T19132] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 995.549678][T24104] Bluetooth: hci3: command 0x0406 tx timeout [ 996.923326][ T821] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 997.197673][ T821] usb 1-1: unable to get BOS descriptor or descriptor too short [ 997.199106][ T821] usb 1-1: config 4 has an invalid interface number: 138 but max is 0 [ 997.199134][ T821] usb 1-1: config 4 has no interface number 0 [ 997.199165][ T821] usb 1-1: config 4 interface 138 has no altsetting 0 [ 997.203639][ T821] usb 1-1: string descriptor 0 read error: -22 [ 997.203791][ T821] usb 1-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 997.203817][ T821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.561774][ T821] catc 1-1:4.138: Missing or invalid endpoints [ 997.932493][T24104] Bluetooth: hci3: command 0x0406 tx timeout [ 998.152836][ T5753] usb 1-1: USB disconnect, device number 21 [ 999.174635][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 999.318769][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 999.350342][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 999.392798][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 999.394706][ T5617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 999.982921][T24104] Bluetooth: hci3: command 0x0406 tx timeout [ 1000.282604][ T5740] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1000.500178][ T5740] usb 1-1: Using ep0 maxpacket: 16 [ 1000.504624][ T5740] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.504656][ T5740] usb 1-1: config 0 has no interfaces? [ 1000.504690][ T5740] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1000.504718][ T5740] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.527737][ T5740] usb 1-1: config 0 descriptor?? [ 1000.610328][T24201] loop9: detected capacity change from 0 to 512 [ 1000.655776][T24201] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1000.732665][T24201] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.7331: inode has both inline data and extents flags [ 1000.732716][T24201] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1000.733140][T24201] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.7331: couldn't read orphan inode 15 (err -117) [ 1000.733171][T24201] loop9: lost filesystem error report for type 5 error -117 [ 1000.794473][T24201] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1000.797364][ T32] usb 1-1: USB disconnect, device number 22 [ 1001.903028][T15932] Bluetooth: hci2: command tx timeout [ 1002.001671][ T178] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.178333][ T8038] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1003.067950][T24239] loop9: detected capacity change from 0 to 8192 [ 1003.992115][T15932] Bluetooth: hci2: command tx timeout [ 1005.201421][T24268] loop9: detected capacity change from 0 to 32768 [ 1005.357863][T24268] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1006.068648][T15932] Bluetooth: hci2: command tx timeout [ 1006.731978][ T178] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.160122][ T8038] ocfs2: Unmounting device (7,9) on (node local) [ 1008.155203][T15932] Bluetooth: hci2: command tx timeout [ 1008.602734][ T178] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.765677][T24337] netlink: 'syz.0.7426': attribute type 3 has an invalid length. [ 1010.218599][ T178] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.567925][ T5740] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1014.731385][ T5740] usb 1-1: Using ep0 maxpacket: 16 [ 1014.741265][ T5740] usb 1-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1014.741304][ T5740] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1014.745897][ T5740] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.40 [ 1014.745933][ T5740] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.745956][ T5740] usb 1-1: Product: syz [ 1014.745973][ T5740] usb 1-1: Manufacturer: syz [ 1014.745988][ T5740] usb 1-1: SerialNumber: syz [ 1015.382616][ T5740] usbhid 1-1:1.0: can't add hid device: -71 [ 1015.382758][ T5740] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 1015.467607][ T5740] usb 1-1: USB disconnect, device number 23 [ 1015.537625][T24463] Invalid ELF header len 12 [ 1017.795014][ T178] bridge_slave_1: left allmulticast mode [ 1017.795059][ T178] bridge_slave_1: left promiscuous mode [ 1017.795413][ T178] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.707321][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1018.707475][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1019.198508][ T178] bridge_slave_0: left allmulticast mode [ 1019.198551][ T178] bridge_slave_0: left promiscuous mode [ 1019.198874][ T178] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.623547][T24600] loop9: detected capacity change from 0 to 128 [ 1022.772162][T24600] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1022.774843][T24600] ext4 filesystem being mounted at /1027/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1022.782742][ T178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1023.038383][ T178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1023.136780][ T178] bond0 (unregistering): Released all slaves [ 1023.191157][T24172] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.191749][T24172] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.192101][T24172] bridge_slave_0: entered allmulticast mode [ 1023.196871][T24172] bridge_slave_0: entered promiscuous mode [ 1023.235112][ T5277] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1023.317915][T24172] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.318333][T24172] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.318797][T24172] bridge_slave_1: entered allmulticast mode [ 1023.358701][T24172] bridge_slave_1: entered promiscuous mode [ 1023.735494][T24611] fscrypt (loop9, inode 12): Error allocating 'adiantum(xchacha12,aes)' transform: -4 [ 1024.082320][T24172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1024.221919][ T8038] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1024.291710][T24172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1024.895357][T24172] team0: Port device team_slave_0 added [ 1024.903749][T24172] team0: Port device team_slave_1 added [ 1025.358015][T24172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1025.358036][T24172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1025.358087][T24172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1025.386927][T24172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1025.386947][T24172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1025.386976][T24172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1026.452469][T24662] loop9: detected capacity change from 0 to 8192 [ 1026.457714][T24662] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1026.505266][T24172] hsr_slave_0: entered promiscuous mode [ 1026.518690][T24172] hsr_slave_1: entered promiscuous mode [ 1026.530910][T24172] debugfs: 'hsr0' already exists in 'hsr' [ 1026.530944][T24172] Cannot create hsr debugfs directory [ 1027.336775][T24662] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1027.336810][T24662] FAT-fs (loop9): Filesystem has been set read-only [ 1027.341972][T24662] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1027.342096][T24662] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1029.413149][ T5277] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1032.611294][T24744] loop9: detected capacity change from 0 to 1024 [ 1032.809947][T24744] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1033.441644][ T37] audit: type=1800 audit(1780014820.169:273): pid=24758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.7572" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1033.956175][ T37] audit: type=1800 audit(1780014820.529:274): pid=24744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.7572" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1036.327645][ T8038] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1037.183110][T24858] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7621'. [ 1040.707340][ T5277] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1041.251533][ T178] hsr_slave_0: left promiscuous mode [ 1041.252646][ T178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1041.252671][ T178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1041.415489][ T178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1041.415523][ T178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1041.571279][ T178] veth1_macvtap: left promiscuous mode [ 1041.571349][ T178] veth0_macvtap: left promiscuous mode [ 1041.571523][ T178] veth1_vlan: left promiscuous mode [ 1041.571639][ T178] veth0_vlan: left promiscuous mode [ 1041.761446][T17442] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1041.957483][T17442] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1041.957521][T17442] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1041.957569][T17442] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1041.957595][T17442] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.011460][T17442] usb 1-1: config 0 descriptor?? [ 1042.579442][T17442] cp2112 0003:10C4:EA90.0038: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 1042.835738][T17442] cp2112 0003:10C4:EA90.0038: error requesting version [ 1042.958506][T17442] cp2112 0003:10C4:EA90.0038: probe with driver cp2112 failed with error -71 [ 1043.050743][T17442] usb 1-1: USB disconnect, device number 24 [ 1043.433644][ T178] team0 (unregistering): Port device team_slave_1 removed [ 1043.476517][ T178] team0 (unregistering): Port device team_slave_0 removed [ 1045.197241][T25014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7691'. [ 1045.471908][T25020] loop9: detected capacity change from 0 to 4096 [ 1045.473355][T25020] EXT4-fs: Ignoring removed orlov option [ 1045.485273][T25020] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1045.659577][T25020] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1046.251692][ T8038] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1047.200042][ T5826] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1047.519907][ T5826] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 1047.519941][ T5826] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1047.519963][ T5826] usb 1-1: config 0 has no interface number 0 [ 1047.532918][ T5826] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1047.532951][ T5826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.532973][ T5826] usb 1-1: Product: syz [ 1047.532987][ T5826] usb 1-1: Manufacturer: syz [ 1047.533002][ T5826] usb 1-1: SerialNumber: syz [ 1047.569530][ T5826] usb 1-1: config 0 descriptor?? [ 1047.612707][ T5826] uvcvideo 1-1:0.64: probe with driver uvcvideo failed with error -22 [ 1048.650820][ T5277] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1048.766218][T25095] loop9: detected capacity change from 0 to 512 [ 1048.794969][T25095] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1049.073086][T25095] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4222: comm syz.9.7720: Allocating blocks 41-42 which overlap fs metadata [ 1049.073141][T25095] loop9: lost filesystem error report for type 5 error -117 [ 1049.081958][ C0] EXT4-fs (loop9): initial error at time 1780014835: ext4_mb_mark_diskspace_used:4222 [ 1049.081998][ C0] EXT4-fs (loop9): last error at time 1780014835: ext4_mb_mark_diskspace_used:4222 [ 1049.711012][T25095] EXT4-fs (loop9): Remounting filesystem read-only [ 1049.807553][T25095] Quota error (device loop9): write_blk: dquota write failed [ 1049.807581][T25095] Quota error (device loop9): find_free_dqentry: Can't write quota data block 5 [ 1049.808880][T25095] Quota error (device loop9): write_blk: dquota write failed [ 1049.809032][T25095] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 1049.809205][T25095] EXT4-fs (loop9): 1 truncate cleaned up [ 1049.812486][T25095] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1050.107163][ T5826] usb 1-1: USB disconnect, device number 25 [ 1050.407837][ T8038] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1052.079034][T25178] loop9: detected capacity change from 0 to 128 [ 1052.228982][T25178] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1052.231312][T25178] ext4 filesystem being mounted at /1046/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1052.320443][T25178] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:375: inode #2: comm syz.9.7746: No space for directory leaf checksum. Please run e2fsck -D. [ 1052.320484][T25178] EXT4-fs error (device loop9): htree_dirblock_to_tree:1051: inode #2: comm syz.9.7746: Directory block failed checksum [ 1052.351287][T25177] sch_tbf: burst 4 is lower than device lo mtu (14) ! [ 1052.568610][ T8038] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1053.287100][ T5753] usb 10-1: new full-speed USB device number 33 using dummy_hcd [ 1053.462746][ T5753] usb 10-1: config 150 has an invalid interface number: 204 but max is 2 [ 1053.462781][ T5753] usb 10-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1053.462803][ T5753] usb 10-1: config 150 has no interface number 0 [ 1053.462831][ T5753] usb 10-1: config 150 interface 204 has no altsetting 0 [ 1053.490719][ T5753] usb 10-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1053.490754][ T5753] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.490776][ T5753] usb 10-1: Product: syz [ 1053.490793][ T5753] usb 10-1: Manufacturer: syz [ 1053.490808][ T5753] usb 10-1: SerialNumber: syz [ 1053.749505][ T5753] xr_serial 10-1:150.204: skipping garbage [ 1053.749568][ T5753] xr_serial 10-1:150.204: xr_serial converter detected [ 1054.611509][ T5753] usb 10-1: xr_serial converter now attached to ttyUSB0 [ 1054.751708][T17461] usb 10-1: USB disconnect, device number 33 [ 1054.780133][T17461] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 1054.826110][T17461] xr_serial 10-1:150.204: device disconnected [ 1055.091698][T25212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7759'. [ 1055.720226][T25262] loop9: detected capacity change from 0 to 4096 [ 1055.727684][T25262] EXT4-fs: Ignoring removed orlov option [ 1055.731554][T25262] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1056.129326][T25258] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1056.129381][T25258] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1056.211631][T25262] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1056.315803][T25258] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1056.315825][T25258] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1056.895879][ T8038] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1059.286043][T25342] loop9: detected capacity change from 0 to 32768 [ 1059.287385][T25342] btrfs: Deprecated parameter 'usebackuproot' [ 1059.287656][T25342] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1059.297991][T25342] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.7796 (25342) [ 1059.393256][T25342] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1059.393294][T25342] BTRFS info (device loop9): using crc32c checksum algorithm [ 1059.503560][T23630] BTRFS warning (device loop9): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1059.503752][T25342] BTRFS error (device loop9): failed to load root extent [ 1059.503798][T25342] BTRFS warning (device loop9): try to load backup roots slot 1 [ 1059.512129][T23626] BTRFS warning (device loop9): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1059.539773][T25342] BTRFS warning (device loop9): couldn't read tree root [ 1059.539808][T25342] BTRFS warning (device loop9): try to load backup roots slot 2 [ 1059.548180][ T69] BTRFS error (device loop9): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1059.548297][T25342] BTRFS warning (device loop9): couldn't read tree root [ 1059.548323][T25342] BTRFS warning (device loop9): try to load backup roots slot 3 [ 1059.748323][T25342] BTRFS info (device loop9): rebuilding free space tree [ 1060.085553][T24104] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1060.167183][T24104] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1060.202988][T24104] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1060.293685][T24104] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1060.295234][T24104] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1061.265817][T25342] BTRFS info (device loop9): checking UUID tree [ 1061.266503][T25342] BTRFS info (device loop9): enabling ssd optimizations [ 1061.266532][T25342] BTRFS info (device loop9): turning on async discard [ 1061.266572][T25342] BTRFS info (device loop9): enabling free space tree [ 1061.266591][T25342] BTRFS info (device loop9): force clearing of disk cache [ 1061.266610][T25342] BTRFS info (device loop9): enabling auto defrag [ 1061.266627][T25342] BTRFS info (device loop9): trying to use backup root at mount time [ 1061.266647][T25342] BTRFS info (device loop9): use zstd compression, level 3 [ 1062.617194][T24104] Bluetooth: hci4: command tx timeout [ 1063.580207][T25427] [ 1063.580223][T25427] ====================================================== [ 1063.580235][T25427] WARNING: possible circular locking dependency detected [ 1063.580250][T25427] syzkaller #0 Tainted: G L [ 1063.580264][T25427] ------------------------------------------------------ [ 1063.580273][T25427] syz.0.7818/25427 is trying to acquire lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1063.580287][T25427] ffffffff8f400ec0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1063.580351][T25427] [ 1063.580351][T25427] but task is already holding lock: [ 1063.580359][T25427] ffff888031228858 (&pipe->mutex){+.+.}-{4:4}, at: splice_to_socket+0x15f/0x11f0 [ 1063.580418][T25427] [ 1063.580418][T25427] which lock already depends on the new lock. [ 1063.580418][T25427] [ 1063.580427][T25427] [ 1063.580427][T25427] the existing dependency chain (in reverse order) is: [ 1063.580436][T25427] [ 1063.580436][T25427] -> #7 (&pipe->mutex){+.+.}-{4:4}: [ 1063.580466][T25427] mutex_lock_nested+0x5a/0x1d0 [ 1063.580495][T25427] iter_file_splice_write+0x1f3/0x10f0 [ 1063.580523][T25427] do_splice+0xef8/0x1940 [ 1063.580551][T25427] __se_sys_splice+0x353/0x490 [ 1063.580582][T25427] do_syscall_64+0x174/0x580 [ 1063.580629][T25427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.580650][T25427] [ 1063.580650][T25427] -> #6 (sb_writers#5){.+.+}-{0:0}: [ 1063.580685][T25427] lo_rw_aio+0xb1b/0xf00 [ 1063.580709][T25427] loop_process_work+0x637/0x11b0 [ 1063.580732][T25427] process_one_work+0x98b/0x1630 [ 1063.580771][T25427] worker_thread+0xb49/0x1140 [ 1063.580789][T25427] kthread+0x388/0x470 [ 1063.580812][T25427] ret_from_fork+0x514/0xb70 [ 1063.580839][T25427] ret_from_fork_asm+0x1a/0x30 [ 1063.580867][T25427] [ 1063.580867][T25427] -> #5 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 1063.580898][T25427] process_one_work+0x8d7/0x1630 [ 1063.580930][T25427] worker_thread+0xb49/0x1140 [ 1063.580949][T25427] kthread+0x388/0x470 [ 1063.580973][T25427] ret_from_fork+0x514/0xb70 [ 1063.580997][T25427] ret_from_fork_asm+0x1a/0x30 [ 1063.581026][T25427] [ 1063.581026][T25427] -> #4 ((wq_completion)loop2){+.+.}-{0:0}: [ 1063.581057][T25427] touch_wq_lockdep_map+0xcb/0x180 [ 1063.581079][T25427] __flush_workqueue+0x14b/0x14f0 [ 1063.581100][T25427] drain_workqueue+0xd3/0x390 [ 1063.581121][T25427] lo_release+0x287/0x8f0 [ 1063.581143][T25427] bdev_release+0x541/0x660 [ 1063.581166][T25427] blkdev_release+0x15/0x20 [ 1063.581190][T25427] __fput+0x461/0xa70 [ 1063.581212][T25427] fput_close_sync+0x11f/0x240 [ 1063.581234][T25427] __x64_sys_close+0x7e/0x110 [ 1063.581259][T25427] do_syscall_64+0x174/0x580 [ 1063.581277][T25427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.581295][T25427] [ 1063.581295][T25427] -> #3 (&disk->open_mutex#4){+.+.}-{4:4}: [ 1063.581331][T25427] mutex_lock_nested+0x5a/0x1d0 [ 1063.581356][T25427] __del_gendisk+0x127/0x980 [ 1063.581384][T25427] del_gendisk+0xe7/0x160 [ 1063.581409][T25427] loop_remove+0x42/0xc0 [ 1063.581430][T25427] loop_control_ioctl+0x4ba/0x5b0 [ 1063.581450][T25427] __se_sys_ioctl+0xff/0x170 [ 1063.581467][T25427] do_syscall_64+0x174/0x580 [ 1063.581487][T25427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.581509][T25427] [ 1063.581509][T25427] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 1063.581538][T25427] down_write+0x3a/0x50 [ 1063.581558][T25427] blk_mq_update_nr_hw_queues+0xbf/0x1a80 [ 1063.581586][T25427] nbd_start_device+0x17f/0xb20 [ 1063.581616][T25427] nbd_genl_connect+0x1651/0x1c80 [ 1063.581646][T25427] genl_family_rcv_msg_doit+0x22a/0x330 [ 1063.581675][T25427] genl_rcv_msg+0x61c/0x7a0 [ 1063.581702][T25427] netlink_rcv_skb+0x232/0x4b0 [ 1063.581722][T25427] genl_rcv+0x28/0x40 [ 1063.581756][T25427] netlink_unicast+0x780/0x920 [ 1063.581789][T25427] netlink_sendmsg+0x813/0xb40 [ 1063.581811][T25427] sock_sendmsg_nosec+0x13a/0x180 [ 1063.581838][T25427] ____sys_sendmsg+0x55c/0x870 [ 1063.581858][T25427] ___sys_sendmsg+0x2a5/0x360 [ 1063.581876][T25427] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1063.581896][T25427] do_syscall_64+0x174/0x580 [ 1063.581914][T25427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.581936][T25427] [ 1063.581936][T25427] -> #1 (genl_mutex){+.+.}-{4:4}: [ 1063.581965][T25427] mutex_lock_nested+0x5a/0x1d0 [ 1063.581991][T25427] genl_register_family+0x7b9/0x17b0 [ 1063.582015][T25427] vdpa_init+0x39/0x70 [ 1063.582035][T25427] do_one_initcall+0x250/0x870 [ 1063.582063][T25427] do_initcall_level+0x104/0x190 [ 1063.582179][T25427] do_initcalls+0x59/0xa0 [ 1063.582198][T25427] kernel_init_freeable+0x2a6/0x3e0 [ 1063.582219][T25427] kernel_init+0x1d/0x1d0 [ 1063.582243][T25427] ret_from_fork+0x514/0xb70 [ 1063.582269][T25427] ret_from_fork_asm+0x1a/0x30 [ 1063.582297][T25427] [ 1063.582297][T25427] -> #0 (cb_lock){++++}-{4:4}: [ 1063.582326][T25427] __lock_acquire+0x15a5/0x2d10 [ 1063.582353][T25427] lock_acquire+0x106/0x350 [ 1063.582379][T25427] down_read+0x97/0x200 [ 1063.582399][T25427] genl_rcv+0x19/0x40 [ 1063.582424][T25427] netlink_unicast+0x780/0x920 [ 1063.582455][T25427] netlink_sendmsg+0x813/0xb40 [ 1063.582476][T25427] sock_sendmsg_nosec+0x13a/0x180 [ 1063.582502][T25427] sock_sendmsg+0x1ca/0x2d0 [ 1063.582528][T25427] splice_to_socket+0xae5/0x11f0 [ 1063.582557][T25427] do_splice+0xef8/0x1940 [ 1063.582585][T25427] __se_sys_splice+0x353/0x490 [ 1063.582615][T25427] do_syscall_64+0x174/0x580 [ 1063.582635][T25427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.582656][T25427] [ 1063.582656][T25427] other info that might help us debug this: [ 1063.582656][T25427] [ 1063.582664][T25427] Chain exists of: [ 1063.582664][T25427] cb_lock --> sb_writers#5 --> &pipe->mutex [ 1063.582664][T25427] [ 1063.582704][T25427] Possible unsafe locking scenario: [ 1063.582704][T25427] [ 1063.582712][T25427] CPU0 CPU1 [ 1063.582719][T25427] ---- ---- [ 1063.582726][T25427] lock(&pipe->mutex); [ 1063.582742][T25427] lock(sb_writers#5); [ 1063.582773][T25427] lock(&pipe->mutex); [ 1063.582789][T25427] rlock(cb_lock); [ 1063.582804][T25427] [ 1063.582804][T25427] *** DEADLOCK *** [ 1063.582804][T25427] [ 1063.582811][T25427] 1 lock held by syz.0.7818/25427: [ 1063.582825][T25427] #0: ffff888031228858 (&pipe->mutex){+.+.}-{4:4}, at: splice_to_socket+0x15f/0x11f0 [ 1063.582885][T25427] [ 1063.582885][T25427] stack backtrace: [ 1063.582903][T25427] CPU: 1 UID: 0 PID: 25427 Comm: syz.0.7818 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1063.582934][T25427] Tainted: [L]=SOFTLOCKUP [ 1063.582943][T25427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1063.582957][T25427] Call Trace: [ 1063.582966][T25427] [ 1063.582976][T25427] dump_stack_lvl+0xe8/0x150 [ 1063.583005][T25427] print_circular_bug+0x2e1/0x300 [ 1063.583042][T25427] check_noncircular+0x12e/0x150 [ 1063.583078][T25427] __lock_acquire+0x15a5/0x2d10 [ 1063.583111][T25427] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 1063.583138][T25427] ? ref_tracker_free+0x673/0x820 [ 1063.583163][T25427] ? __netlink_deliver_tap+0x636/0x8b0 [ 1063.583184][T25427] ? netlink_deliver_tap+0x19c/0x1b0 [ 1063.583203][T25427] ? netlink_unicast+0x754/0x920 [ 1063.583228][T25427] ? netlink_sendmsg+0x813/0xb40 [ 1063.583246][T25427] ? sock_sendmsg_nosec+0x13a/0x180 [ 1063.583271][T25427] ? sock_sendmsg+0x1ca/0x2d0 [ 1063.583294][T25427] ? splice_to_socket+0xae5/0x11f0 [ 1063.583318][T25427] ? do_splice+0xef8/0x1940 [ 1063.583344][T25427] ? __se_sys_splice+0x353/0x490 [ 1063.583371][T25427] ? do_syscall_64+0x174/0x580 [ 1063.583390][T25427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.583415][T25427] ? genl_rcv+0x19/0x40 [ 1063.583439][T25427] lock_acquire+0x106/0x350 [ 1063.583464][T25427] ? genl_rcv+0x19/0x40 [ 1063.583494][T25427] down_read+0x97/0x200 [ 1063.583513][T25427] ? genl_rcv+0x19/0x40 [ 1063.583537][T25427] ? __pfx_down_read+0x10/0x10 [ 1063.583558][T25427] ? netlink_deliver_tap+0x2e/0x1b0 [ 1063.583577][T25427] ? netlink_deliver_tap+0x2e/0x1b0 [ 1063.583600][T25427] genl_rcv+0x19/0x40 [ 1063.583625][T25427] netlink_unicast+0x780/0x920 [ 1063.583661][T25427] netlink_sendmsg+0x813/0xb40 [ 1063.583688][T25427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1063.583710][T25427] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1063.583743][T25427] ? aa_sock_msg_perm+0x122/0x200 [ 1063.583783][T25427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1063.583804][T25427] sock_sendmsg_nosec+0x13a/0x180 [ 1063.583832][T25427] sock_sendmsg+0x1ca/0x2d0 [ 1063.583862][T25427] ? __pfx_sock_sendmsg+0x10/0x10 [ 1063.583893][T25427] ? __asan_memset+0x22/0x50 [ 1063.583916][T25427] ? iov_iter_bvec+0xb8/0x180 [ 1063.583947][T25427] splice_to_socket+0xae5/0x11f0 [ 1063.583985][T25427] ? __pfx_splice_to_socket+0x10/0x10 [ 1063.584028][T25427] ? rw_verify_area+0x25b/0x4e0 [ 1063.584058][T25427] ? __pfx_splice_to_socket+0x10/0x10 [ 1063.584089][T25427] do_splice+0xef8/0x1940 [ 1063.584127][T25427] ? __pfx_do_splice+0x10/0x10 [ 1063.584162][T25427] __se_sys_splice+0x353/0x490 [ 1063.584194][T25427] ? __pfx___se_sys_splice+0x10/0x10 [ 1063.584229][T25427] ? __x64_sys_splice+0x21/0xf0 [ 1063.584259][T25427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.584281][T25427] do_syscall_64+0x174/0x580 [ 1063.584302][T25427] ? trace_irq_disable+0x3b/0x140 [ 1063.584329][T25427] ? clear_bhb_loop+0x40/0x90 [ 1063.584362][T25427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.584385][T25427] RIP: 0033:0x7f704e25ce59 [ 1063.584406][T25427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1063.584426][T25427] RSP: 002b:00007f704c4b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1063.584450][T25427] RAX: ffffffffffffffda RBX: 00007f704e4d5fa0 RCX: 00007f704e25ce59 [ 1063.584469][T25427] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1063.584483][T25427] RBP: 00007f704e2f2d6f R08: 0000000000000800 R09: 0000000000000000 [ 1063.584500][T25427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1063.584515][T25427] R13: 00007f704e4d6038 R14: 00007f704e4d5fa0 R15: 00007ffd12c74ce8 [ 1063.584539][T25427] [ 1063.613212][ T8038] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1064.695442][T24104] Bluetooth: hci4: command tx timeout [ 1067.157082][T23637] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.417068][T23637] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.700620][T23637] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.977014][T23637] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.407082][T23637] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1068.407125][T23637] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.499693][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1068.687724][T23637] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1068.687777][T23637] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.783226][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1069.017828][T23637] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1069.017856][T23637] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.317245][T23637] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1069.317272][T23637] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.337256][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1069.716738][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1070.056662][ T5277] 8021q: adding VLAN 0 to HW filter on device eth25 [ 1070.340710][ T5277] 8021q: adding VLAN 0 to HW filter on device eth26 [ 1070.635107][T23637] bridge_slave_1: left allmulticast mode [ 1070.635139][T23637] bridge_slave_1: left promiscuous mode [ 1070.635344][T23637] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.795729][T23637] bridge_slave_0: left allmulticast mode [ 1070.795763][T23637] bridge_slave_0: left promiscuous mode [ 1070.795953][T23637] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.017230][T23637] bridge_slave_1: left allmulticast mode [ 1071.017264][T23637] bridge_slave_1: left promiscuous mode [ 1071.017442][T23637] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.115759][T23637] bridge_slave_0: left allmulticast mode [ 1071.115794][T23637] bridge_slave_0: left promiscuous mode [ 1071.116017][T23637] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.314887][T23637] bridge_slave_1: left allmulticast mode [ 1071.314950][T23637] bridge_slave_1: left promiscuous mode [ 1071.315093][T23637] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.435461][T23637] bridge_slave_0: left allmulticast mode [ 1071.435485][T23637] bridge_slave_0: left promiscuous mode [ 1071.435617][T23637] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.125614][T23637] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1072.205271][T23637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1072.226512][T23637] bond0 (unregistering): Released all slaves [ 1072.229509][T23637] bond1 (unregistering): Released all slaves [ 1072.745232][T23637] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1072.806319][T23637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1072.846254][T23637] bond0 (unregistering): Released all slaves [ 1073.035092][T23637] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1073.115206][T23637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1073.176472][T23637] bond0 (unregistering): Released all slaves [ 1073.216648][ T5277] 8021q: adding VLAN 0 to HW filter on device eth27