last executing test programs: 3m16.288154816s ago: executing program 3 (id=64): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000085c, &(0x7f0000001f80)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYBLOB=',,\x00\x00\x00\x00\x00\x00', @ANYBLOB="f9ee7ee6616006527905abd668ea17e382e0c83dc34879c344093674bfcb9afe6942e93d2c31ef3422c5857ce514a621738e2e0ca9f3b51f9577ee83ca37bd7a2dda7be50c9438a6731ec6303c2b70c0282527857939030300203de5ad9ccf10f399d47a553c3815a8140e156f525b62a6c34f36a440f37ac333648bccb6c848db175245696642c3000000000000", @ANYRES64, @ANYRES16=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES8=0x0], 0xc1, 0x151f, &(0x7f0000000440)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents(r0, &(0x7f0000000040)=""/61, 0x3d) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1215c0, 0x1a8) r2 = fanotify_init(0x8, 0x1) fanotify_mark(r2, 0x105, 0x40001032, r1, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 3m15.628457413s ago: executing program 3 (id=67): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 3m15.1502721s ago: executing program 3 (id=71): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x10000, 0x2000, 0x10000004, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x4000034b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9460, 0x0, 0x0, 0x1f1, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x100, 0x2, 0x37d}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 3m13.781943944s ago: executing program 3 (id=76): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f00000003c0)={[{@fat=@showexec}, {@shortname_mixed}, {@fat=@time_offset={'time_offset', 0x3d, 0x48a}}, {@utf8no}, {@utf8}, {@utf8}, {@utf8}, {@shortname_lower}, {@utf8}, {@fat=@gid}, {@fat=@umask={'umask', 0x3d, 0xd}}, {@shortname_win95}, {@numtail}]}, 0x0, 0x2ba, &(0x7f0000002880)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 3m13.292933889s ago: executing program 3 (id=77): syz_open_dev$vim2m(&(0x7f0000000280), 0x3, 0x2) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x4080, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x20003, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 3m12.50923104s ago: executing program 3 (id=80): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000200)={[{@creator={'creator', 0x3d, "91b212f7"}}, {@nls={'nls', 0x3d, 'iso8859-15'}}, {@gid}, {@type={'type', 0x3d, "abe89a7a"}}, {@nobarrier}]}, 0x1, 0x5d9, &(0x7f0000000cc0)="$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") getdents64(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000340)=ANY=[@ANYBLOB='dmask=00000000000000000000000,dmask=00000000000000000000006,uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c696f636861727365743d63703835322c666d61736b3d30303030303030303030303030303030303030303030312c6e616d65636173653d312c6572726f72733d72656d6f756e742d726f2c6b6565705f6c6173745f646f74732c696f636861727365743d6d6163677265656b2c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c004cf73d0120044ad6d0aef3f241d9a1d58f5b74eb4725b1300a0691"], 0x1, 0x1533, &(0x7f0000006800)="$eJzs3AucTtX6OPDnWWvtMSS9TXIZ1lrP5k0uiyTJJUkuSZIkSW4JSZIjCYkht6QhCcllSC5DSC4Tk8b9fr8kJEmTJCG5Jev/mZi/OnX+55xfnfz+Z57v5/N+Zj2z3mftZ88z73733vPyTZehNRrVrNqAiOAPwYtfEgAgFgAGAsA1ABAAQNm4snEZ89klJvyxjbA/10PJV7oCdiVx/7M27n/Wxv3P2rj/WRv3P2vj/mdt3P+sjfvPWFa2eXr+a/mRdR98/z8r4/f//yLpJcd+sbbk9V0BYv7VFO7////wD+Ry//9rBf/Kk7j/WRv3P6uKvdIFsP8F+PWfFWT7hzPc/6yN+89YVvbLe8GxcOXvR//VD4j8J/8G4ntd/Clf+f38h/vPGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4z9Bc74yxQAZI6vdF2MMcYYY4wxxhj78/hsV7oCxhhjjDHGGGOM/echCJCgIIAYyAaxkB1ygACIyZy/FuLgOsgN10MeyAv5ID/EQwEoCBoMWCAIoRAUhijcAEXgRigKxaA4lAAHJaEU3ASl4WYoA7dAWbgVysFtUB4qQEWoBLdDZbgDqsCdUBXugmpQHWpATbgbasE9UBvuhTpwH9SF+6EePAD14UFoAA9BQ3gYGsEj0BgehSbQFJpBc2jxP8p/AXrAi9ATekEC9IY+8BL0hX7QHwbAQHgZBsErMBhehUQYAkPhNRgGr8NweANGwEgYBW/CaHgLxsBYGAfjIQkmwER4GybBOzAZpsBUmAbJMB1mwLswE2bBbHgP5sD7MBfmwXxYACnwASyERZAKH8Ji+AjSYAkshWWwHFbASlgFq2ENrIV1sB42wEbYBJthC2yFbbAddsBO+Bh2wSewG/bAXvgU9sFn/2b+6b/L74qAgAIFKlQYgzEYi7GYA3NgTsyJuTAXRjCCcRiHuTE35sE8mA/zYTzGY0EsiAYNEhIWwkIYxSgWwSJYFIticSyODh2WwlJYGm/GMlgGy2JZLIflsDxWwApYCSthZayMVbAKVsWqWA2rYQ2sgXfj3dgba2NtrIN1sC7Wzbw9hQ2wATbEhtgIG2FjbIxNsAk2w2bYAltgS2yJrbAVtsE22BbbYjtsh+2xPXbADtgRO2In7ISdsTN2wS7YFbtht/QXsgG+iC9iL6wmemMf7IN9MTFbfxyAA/BlHISv4Cv4KibiEByKr+Fr+DoOx1M44sJIHIWjsLJ4C8fgWCQxHpMwCSfiRJyEk3AyTsEpOA2TcTrOwBk4E2fhLHwP5+D7+D7Ow3m4AFMwBRfiIkzFVFyMpzENl+BSXIbLcQUux1W4GlfhWlyHa3EDbsBNuAm34BbchttwB+7Aj1EB4Ce4B/dgIu7Dfbgf9+MBPIAH8SCmYzoewkN4GA/jETyCR/EoHsPjeAKP40k8iafwNJ7BM3gOz+F5fC7+q4YfF1uTCCKDEkrEiBgRK2JFDpFD5BQ5RS6RS0RERMSJOJFb5BZ5RB6RT+QT8SJeFBQFhRFGkAgzjhQiKqKiiCgiioqiorgoLpxwopQoJUqL0qKMKCPKiltFOXGbKC8qiNaukqgkKos2roq4U1QVVUU1UV3UEDVFTVFL1BK1RW1RR9QRdUVdUU88IOqL3tgfHxIZnWkkhmBjMRSbiKZCXjpCtRTDsZVoLdqIJ8RIHIHtREvXXjwtOogx2FH8TYzFZ0VnMR67iOdFV9FNdBcviB6ilespeonJ2Fv0EdOwr+gn+osBYiZWF+/hnOw1xKsiUQwRQ8VrYgG+LoaLN8QIMVKMEm+K0eItMUaMFePEeJEkJoiJ4m0xSbwjJospYqqYJpLFdDFDvCtmillitnhPzBHvi7linpgvFogU8YFYKBaJVPGhWCw+EmliiVgqlonlYoVYKVaJ1WKNWCvWifVig9goNonNYovYKraJ7WKH2Ck+FrvEJ2K32CP2ik/FPvGZ2C8+FwfEF+Kg+FKki6/EIfG1OCy+EUfEt+Ko+E4cE8fFCfG9OCl+EKfEaXFGnBXnxI/ivPhJXBBegEQppJRKBjJGZpOxMrvMIa+SOWWQefyXcfI6mVteL/PIvDKfzC/jZQFZUGpppJUkQ1lIFpZReYMsIm+URWUxWVyWkE6WlKXkTbK0vFmWkbfIsvJWWU7eJsvLCrKirCRvl5XlHRIiF7dRTVaXNWRNebdMgHtkbXmvrCPvk3Xl/bKefEDWlw/KBvIh2VA+LBvJR2Rj+ahsIpvKZrK5bCEfky3l47KVbC3byCdkW/mkbCefku3l07KD9Jd+RZ6VneVzsot8XnaV3WR3+ZO8IL3sKXtJ6A2yj3xJ9pX9ZH85QA6UL8tB8hU5WL4qE+UQOVS+JofJ1+Vw+YYcIUfKUfJNOVq+JcfIsXKcHC+T5AQ5Ub4tJ8l35GQ5RU6V02SynC77X1pptpT/NP/t38kf/PPWN8nNcovcKrfJ7XKH3Ck/lrvkLrlb7pZ75V65T+6T++V+eUAekAflQZku0+UheUgeloflEXlEHpVH5TF5XJ6V38uT8gd5Sp6Wp+VZeU6ek+cv/QxAoRJKKqUCFaOyqViVXeVQV6mc6mqVS12jIupaFaeuU7nV9SqPyqvyqfwqXhVQBZVWRllFKlSFVGEVVTfgpV8YVVyVUE6VVKXUTf9OviqiblRFVbFf5WfWl/AP6muhWqiWqqVqpVqpNqqNaqvaqnaqnWqv2qsOqoPqqDqqTqqT6qw6qy6qi+qquqruqrvqoXqonqqnSlAJqo96SfVV/VR/NUANVC+LjH0YrAarRJWohqqhapgapoar4WqEGqFGqVFqtBqtxqgxapwap5JUkpqoJqpJapKarCarqWqqSlbJaoaaoWaqmWq2mq3mqDlqrpqr5qv5KkWlqIVqoUpVqWqxWqzS1BK1RC1Ty9QKtUKtUqvUGrVGrVPr1Aa1QaWpzWqz2qq2qu1qu9qpdqpdapfarXarvWqv2qf2qf1qvzqgDqiD6qBKV+nqkDqkDqvD6og6oo6qo+qYOqZOqBPqpDqpTqlT6ow6o86pc+q8Oq8uqAsZp32BCESgAhXEBDFBbBAb5AhyBDmDnEGuIFcQCSJBXBAX5A6uD/IEeYN8Qf4gPigQFAx0YAIbiEtNjwY3BEWCG4OiQbGgeFAicEHJoFRwU1A6uDkoE9wSlA1uDcoFtwXlgwpBxaBScHtQObgjqBLcGVQN7gqqBdWDGkHN4O6gVnBPUDu4N6gT3BfUDe4P6gUPBPWDB4MGwUNBw+DhoFHwSNA4eDRoEjQNmgXNgxZ/6vren8r7uOupe+kE3Vv30S/pvrqf7q8H6IH6ZT1Iv6IH61d1oh6ih+rX9DD9uh6u39Aj9Eg9Sr+pR+u39Bg9Vo/T43WSnqAn6rf1JP2Onqyn6Kl6mk7W0/UM/a6eqWfp2fo9PUe/r+fqeXq+XqBT9Ad6oV6kU/WHerH+SKfpJXqpXqaX6xV6pV6lV+s1eq1ep9frDXqj3qQ36y16q96mt+sdeqf+WO/Sn+jdeo/eqz/V+/Rner/+XB/QX+iD+kudrr/Sh/TX+rD+Rh/R3+qj+jt9TB/XZfT3+qT+QZ/Sp/UZfVaf0z/q8/onfUH7jJP7jLd3o4wyMSbGxJpYk8PkMDlNTpPL5DIREzFxJs7kNrlNHpPH5DP5TLyJNwVNQZOBDJlCppCJmqgpYoqYoqaoKW6KG2ecKWVKmdKmtCljypiypqwpZ8qZ8qa8qWgqmtvN7eYOc4e509xp7jJ3meqmuqlpappappapbWqbOqaOqWvqmnqmnqlv6psGpoFpaBqaRqaRaWwamyamiWlmmpkWpoVpaVqaVqaVaWPamLamrWln2pn2pr3pYDqYjqaj6WQ6mc6ms+liupiupqvpbrqbHqaH6Wl6mgSTYPqYPqav6Wv6m/5moBloBplBZrAZbBJNohlqhpphZpgZboabEWakGZVxomreMmPMWDPOjDdJJslMNBPNJDPJTDaTzVQz1SSbZDPDzDAzzUwz28w2c8wcM9fMNfPNfJNiUsxCs9CkmlSz2Cw2aSbNLDVLzXKz3Kw0K81qs9qsNWvNelhvNpqNZrPZbLaarWa72W52mp1ml9lldpvdZq/Za/aZfWa/2W8OmAPmoDlo0k26OWQOmcPmsDlijpij5qg5Zo6ZE+aEOWlOmlPmlDljzphzJu+l90tvYm12m8NeZXPaq20ue439+zifzW/jbQFb0Gqbx+b9VWystUVtMVvclrDOlrSl7E2/icvbCrairWRvt5XtHbbKb+Ja9h5b295r69j7bE1796/iuvZ+W88+YusjAtimtqFtbhvZR2xj+6htYpvaZra5bWuftO3sU7a9fdp2sM/8Jl5oF9nVdo1da9fZ3XaPPWPP2sP2G3vO/mh72l52oH3ZDrKv2MH2VZtoh/wmHmXftKPtW3aMHWvH2fG/iafaaTbZTrcz7Lt2pp31mzjFfmDn2FQ7186z8+2Cn+OMmlLth3ax/cim2QCW2mV2uV1hV9pV/7fWZXaD3Wg32V32E7vVbrPb7Q67M/NE2O6xe+2ndp/9zB6yX9sD9gt70B6x6farn+OM/Ttiv7VH7Xf2mD1uT9jv7Un7g8rMztj37+1P9oL1FggJSJKigGIoG8VSdspBV1FOuppy0TUUoWspjq6j3HQ95aG8lI/yUzwVoIKkyZAlopAKUWGK0g2UWV5xKkGOSlIpuolK081Uhm6hsnQrlaPbqDxVoIpUiW6nynQHVaE7qSrdRdWoOtWgmnQ31aJ7qDbdS3XoPqpL91M9eoDq04PUgB6ihvQwNaJHqDE9Sk2oKTWj5tSCHqOW9Di1otbUhp6gtvQktaOnqD09TR3oGepIf6NO9Cx1pueoCz1PXakbdacXqAe9SD2pFyVQb+pDL1Ff6kf9aQANpJdpEL1Cg+lVSqQhNJReo2H0Og2nN2gEjaRR9CaNprdoDI2lcTSekmgCTaS3aRK9Q5NpCk2laZRM02kGvUszaRbNpvdoDr1Pc2kezacFlEIf0EJaRKn0IS2mjyiNltBSWkbLaQWtpFW0mtbQWlpH62kDbaRNtJm20FbaRttpB+2kj2kXfUK7aQ/tpU9pH31G++lzOkBf0EH6ktLpKzpEX9Nh+oaO0Le+F31Hx+g4naDv6ST9QKfoNJ2hs3SOfqTz9BNdIE8QYihCGaowCGPCbGFsmD3MEV4V5gyvDnOF14SR8NowLrwuzB1eH+YJ84b5wvxhfFggLBjq0IQ2pDAMC4WFw2h4Q1gkvDEsGhYLi4clQheWDEuFN4Wlw5vDMuEtYdnw1rBceFtYPqwQPnJfpfD2sHJ4R1glvDOsGt4VVgurhzXCmuHdYa3wnrB2eG9YJ7wvLBPeH9YLHwjrhw+GDcKHwobhw2Gj8JGwcfho2CRsGjYLm4ctwsfCluHjYauwddgmvCpsGz4ZtgufCtuHT4cdwmd+nr9/Ueb8E7+ZTwh7h33Cl8KXQu/vlfOjC6Ip0Q+iC6OLoqnRD6OLox9F06JLokujy6LLoyuiK6Oroquja6Jro+ui66Mbohujm6Le18wGDp1w0ikXuBiXzcW67C6Hu8rldFe7XO4aF3HXujh3ncvtrnd5XF6Xz+V38a6AK+i0M846cqEr5Aq7qLvBFXE3uqKumCvuSjjnSrpSrrlr4Vq4lu5x18q1dm3cE+4J96R70j3lnnJPuw7uGdfR/c11cs+6zu4595x73nV13Vx394Lr4SbkuviaTHB9XB/X1/V1/V1/N9ANdIPcIDfYDXaJLtENdUPdMDfMDXfD3Qg3wo1yo9xoN9qNcWPcODfOJbkkN9FNdJPcJDfZTXZT3VSX7JLdDDfDzXQzXeVZF7cy18118918l+JS3EKXcc6Y6ha7xS7Npbmlbqlb7pa7lW6lW+1Wu7VurVvv1ruNbqPb7Da7rW6r2+62u51up9vldrnd/pqLi7p9br/b7w64A+6g+9Klu6/cIfe1O+y+cUfct+6o+84dc8fdCfe9O+l+cKfcaXfGnXXn3I/uvPvJXXDeJUUmRCZG3o5MirwTmRyZEpkamRZJjkyPzIi8G5kZmRWZHXkvMifyfmRuZF5kfmRBJCXyQWRhZFEkNfJhZHHko0haZElkaWRZZHlkRcT7AltDX8gX9lF/gy/ib/RFfTFf3Jfwzpf0pfxNvvTFutO8v9WX87f58r6Cr+gf9U18U9/MN/ct/GO+pX/ct/KtfRv/hG/rn/Tt/FO+vX/ad/DP+I7+b76Tf9Z39s/5Lv5539V38939C76Hf9H39L18gu/t+/iXfF/fz/f3A/xA/7If5F/xg/2rPtEP8UP9a36Yf90P92/4EX6kHxXzph+deYkM432Sn+An+rf9JP+On+yn+Kl+mk/20/0M/66f6Wf52f49P8e/7+f6eX6+X+BT/Ad+oV/kU/2HfrH/yKf5JZk3jf1Kv8qv9mv8Wr/Or/cb/Ea/yW/2W/xWv81v9zv8Tv+x3+U/8bv9Hr/Xf+r3+c/8fv+5P+C/8Af9lz7df+UP+a/9Yf+NP+K/9Uf9d/6YP+5P+O/9Sf+DP+VP+zP+rD/nf/Tn/U/+Av+bNcYYY4yxf8mEy0Px65mLt/N7/06O+MWT+wDA1dvyp/9yPuOMcn2ei+N+Ij424+vTvbo8lPmoVi0hIeHSc9MkBIXnAWT+JSjDzx89uBQvgTbwJLSH1lD6d+vvJ7qdo3+yfvRWgBy/yMkoKDO+vP7nAJjwO+s/9sSoheXCM3H/j/XnARQtfDknO1yOl0Cbn++vtIYy/6D+vC3/Sf3Zv0gCaPWLnJxwOb5cfyl4HJ6B9r96JmOMMcYYY4wxdlE/UbFT5vVn5ic+f+/6PF5dzskGl+N/dn3OGGOMMcYYY4yxK+/Zbt2feqx9+9ad/v1Blf9R1r88aAz/qZV58LsD7wEyv6MA4A8uCJAxkH/lXmz5S7aVeOml8/dTy8/6AP53tPLPGFzhAxNjjDHGGGPsT3f5pP/X31dXqiDGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYywL+iv+O7ErvY+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbYlfZ/AgAA//+1tfsI") syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000300)=ANY=[], 0x3, 0x2cb, &(0x7f0000000ac0)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0xf6) sendfile(r0, r0, 0x0, 0x800000009) 3m11.620176859s ago: executing program 32 (id=80): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000200)={[{@creator={'creator', 0x3d, "91b212f7"}}, {@nls={'nls', 0x3d, 'iso8859-15'}}, {@gid}, {@type={'type', 0x3d, "abe89a7a"}}, {@nobarrier}]}, 0x1, 0x5d9, &(0x7f0000000cc0)="$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") getdents64(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000340)=ANY=[@ANYBLOB='dmask=00000000000000000000000,dmask=00000000000000000000006,uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c696f636861727365743d63703835322c666d61736b3d30303030303030303030303030303030303030303030312c6e616d65636173653d312c6572726f72733d72656d6f756e742d726f2c6b6565705f6c6173745f646f74732c696f636861727365743d6d6163677265656b2c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c004cf73d0120044ad6d0aef3f241d9a1d58f5b74eb4725b1300a0691"], 0x1, 0x1533, &(0x7f0000006800)="$eJzs3AucTtX6OPDnWWvtMSS9TXIZ1lrP5k0uiyTJJUkuSZIkSW4JSZIjCYkht6QhCcllSC5DSC4Tk8b9fr8kJEmTJCG5Jev/mZi/OnX+55xfnfz+Z57v5/N+Zj2z3mftZ88z73733vPyTZehNRrVrNqAiOAPwYtfEgAgFgAGAsA1ABAAQNm4snEZ89klJvyxjbA/10PJV7oCdiVx/7M27n/Wxv3P2rj/WRv3P2vj/mdt3P+sjfvPWFa2eXr+a/mRdR98/z8r4/f//yLpJcd+sbbk9V0BYv7VFO7////wD+Ry//9rBf/Kk7j/WRv3P6uKvdIFsP8F+PWfFWT7hzPc/6yN+89YVvbLe8GxcOXvR//VD4j8J/8G4ntd/Clf+f38h/vPGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4z9Bc74yxQAZI6vdF2MMcYYY4wxxhj78/hsV7oCxhhjjDHGGGOM/echCJCgIIAYyAaxkB1ygACIyZy/FuLgOsgN10MeyAv5ID/EQwEoCBoMWCAIoRAUhijcAEXgRigKxaA4lAAHJaEU3ASl4WYoA7dAWbgVysFtUB4qQEWoBLdDZbgDqsCdUBXugmpQHWpATbgbasE9UBvuhTpwH9SF+6EePAD14UFoAA9BQ3gYGsEj0BgehSbQFJpBc2jxP8p/AXrAi9ATekEC9IY+8BL0hX7QHwbAQHgZBsErMBhehUQYAkPhNRgGr8NweANGwEgYBW/CaHgLxsBYGAfjIQkmwER4GybBOzAZpsBUmAbJMB1mwLswE2bBbHgP5sD7MBfmwXxYACnwASyERZAKH8Ji+AjSYAkshWWwHFbASlgFq2ENrIV1sB42wEbYBJthC2yFbbAddsBO+Bh2wSewG/bAXvgU9sFn/2b+6b/L74qAgAIFKlQYgzEYi7GYA3NgTsyJuTAXRjCCcRiHuTE35sE8mA/zYTzGY0EsiAYNEhIWwkIYxSgWwSJYFIticSyODh2WwlJYGm/GMlgGy2JZLIflsDxWwApYCSthZayMVbAKVsWqWA2rYQ2sgXfj3dgba2NtrIN1sC7Wzbw9hQ2wATbEhtgIG2FjbIxNsAk2w2bYAltgS2yJrbAVtsE22BbbYjtsh+2xPXbADtgRO2In7ISdsTN2wS7YFbtht/QXsgG+iC9iL6wmemMf7IN9MTFbfxyAA/BlHISv4Cv4KibiEByKr+Fr+DoOx1M44sJIHIWjsLJ4C8fgWCQxHpMwCSfiRJyEk3AyTsEpOA2TcTrOwBk4E2fhLHwP5+D7+D7Ow3m4AFMwBRfiIkzFVFyMpzENl+BSXIbLcQUux1W4GlfhWlyHa3EDbsBNuAm34BbchttwB+7Aj1EB4Ce4B/dgIu7Dfbgf9+MBPIAH8SCmYzoewkN4GA/jETyCR/EoHsPjeAKP40k8iafwNJ7BM3gOz+F5fC7+q4YfF1uTCCKDEkrEiBgRK2JFDpFD5BQ5RS6RS0RERMSJOJFb5BZ5RB6RT+QT8SJeFBQFhRFGkAgzjhQiKqKiiCgiioqiorgoLpxwopQoJUqL0qKMKCPKiltFOXGbKC8qiNaukqgkKos2roq4U1QVVUU1UV3UEDVFTVFL1BK1RW1RR9QRdUVdUU88IOqL3tgfHxIZnWkkhmBjMRSbiKZCXjpCtRTDsZVoLdqIJ8RIHIHtREvXXjwtOogx2FH8TYzFZ0VnMR67iOdFV9FNdBcviB6ilespeonJ2Fv0EdOwr+gn+osBYiZWF+/hnOw1xKsiUQwRQ8VrYgG+LoaLN8QIMVKMEm+K0eItMUaMFePEeJEkJoiJ4m0xSbwjJospYqqYJpLFdDFDvCtmillitnhPzBHvi7linpgvFogU8YFYKBaJVPGhWCw+EmliiVgqlonlYoVYKVaJ1WKNWCvWifVig9goNonNYovYKraJ7WKH2Ck+FrvEJ2K32CP2ik/FPvGZ2C8+FwfEF+Kg+FKki6/EIfG1OCy+EUfEt+Ko+E4cE8fFCfG9OCl+EKfEaXFGnBXnxI/ivPhJXBBegEQppJRKBjJGZpOxMrvMIa+SOWWQefyXcfI6mVteL/PIvDKfzC/jZQFZUGpppJUkQ1lIFpZReYMsIm+URWUxWVyWkE6WlKXkTbK0vFmWkbfIsvJWWU7eJsvLCrKirCRvl5XlHRIiF7dRTVaXNWRNebdMgHtkbXmvrCPvk3Xl/bKefEDWlw/KBvIh2VA+LBvJR2Rj+ahsIpvKZrK5bCEfky3l47KVbC3byCdkW/mkbCefku3l07KD9Jd+RZ6VneVzsot8XnaV3WR3+ZO8IL3sKXtJ6A2yj3xJ9pX9ZH85QA6UL8tB8hU5WL4qE+UQOVS+JofJ1+Vw+YYcIUfKUfJNOVq+JcfIsXKcHC+T5AQ5Ub4tJ8l35GQ5RU6V02SynC77X1pptpT/NP/t38kf/PPWN8nNcovcKrfJ7XKH3Ck/lrvkLrlb7pZ75V65T+6T++V+eUAekAflQZku0+UheUgeloflEXlEHpVH5TF5XJ6V38uT8gd5Sp6Wp+VZeU6ek+cv/QxAoRJKKqUCFaOyqViVXeVQV6mc6mqVS12jIupaFaeuU7nV9SqPyqvyqfwqXhVQBZVWRllFKlSFVGEVVTfgpV8YVVyVUE6VVKXUTf9OviqiblRFVbFf5WfWl/AP6muhWqiWqqVqpVqpNqqNaqvaqnaqnWqv2qsOqoPqqDqqTqqT6qw6qy6qi+qquqruqrvqoXqonqqnSlAJqo96SfVV/VR/NUANVC+LjH0YrAarRJWohqqhapgapoar4WqEGqFGqVFqtBqtxqgxapwap5JUkpqoJqpJapKarCarqWqqSlbJaoaaoWaqmWq2mq3mqDlqrpqr5qv5KkWlqIVqoUpVqWqxWqzS1BK1RC1Ty9QKtUKtUqvUGrVGrVPr1Aa1QaWpzWqz2qq2qu1qu9qpdqpdapfarXarvWqv2qf2qf1qvzqgDqiD6qBKV+nqkDqkDqvD6og6oo6qo+qYOqZOqBPqpDqpTqlT6ow6o86pc+q8Oq8uqAsZp32BCESgAhXEBDFBbBAb5AhyBDmDnEGuIFcQCSJBXBAX5A6uD/IEeYN8Qf4gPigQFAx0YAIbiEtNjwY3BEWCG4OiQbGgeFAicEHJoFRwU1A6uDkoE9wSlA1uDcoFtwXlgwpBxaBScHtQObgjqBLcGVQN7gqqBdWDGkHN4O6gVnBPUDu4N6gT3BfUDe4P6gUPBPWDB4MGwUNBw+DhoFHwSNA4eDRoEjQNmgXNgxZ/6vren8r7uOupe+kE3Vv30S/pvrqf7q8H6IH6ZT1Iv6IH61d1oh6ih+rX9DD9uh6u39Aj9Eg9Sr+pR+u39Bg9Vo/T43WSnqAn6rf1JP2Onqyn6Kl6mk7W0/UM/a6eqWfp2fo9PUe/r+fqeXq+XqBT9Ad6oV6kU/WHerH+SKfpJXqpXqaX6xV6pV6lV+s1eq1ep9frDXqj3qQ36y16q96mt+sdeqf+WO/Sn+jdeo/eqz/V+/Rner/+XB/QX+iD+kudrr/Sh/TX+rD+Rh/R3+qj+jt9TB/XZfT3+qT+QZ/Sp/UZfVaf0z/q8/onfUH7jJP7jLd3o4wyMSbGxJpYk8PkMDlNTpPL5DIREzFxJs7kNrlNHpPH5DP5TLyJNwVNQZOBDJlCppCJmqgpYoqYoqaoKW6KG2ecKWVKmdKmtCljypiypqwpZ8qZ8qa8qWgqmtvN7eYOc4e509xp7jJ3meqmuqlpappappapbWqbOqaOqWvqmnqmnqlv6psGpoFpaBqaRqaRaWwamyamiWlmmpkWpoVpaVqaVqaVaWPamLamrWln2pn2pr3pYDqYjqaj6WQ6mc6ms+liupiupqvpbrqbHqaH6Wl6mgSTYPqYPqav6Wv6m/5moBloBplBZrAZbBJNohlqhpphZpgZboabEWakGZVxomreMmPMWDPOjDdJJslMNBPNJDPJTDaTzVQz1SSbZDPDzDAzzUwz28w2c8wcM9fMNfPNfJNiUsxCs9CkmlSz2Cw2aSbNLDVLzXKz3Kw0K81qs9qsNWvNelhvNpqNZrPZbLaarWa72W52mp1ml9lldpvdZq/Za/aZfWa/2W8OmAPmoDlo0k26OWQOmcPmsDlijpij5qg5Zo6ZE+aEOWlOmlPmlDljzphzJu+l90tvYm12m8NeZXPaq20ue439+zifzW/jbQFb0Gqbx+b9VWystUVtMVvclrDOlrSl7E2/icvbCrairWRvt5XtHbbKb+Ja9h5b295r69j7bE1796/iuvZ+W88+YusjAtimtqFtbhvZR2xj+6htYpvaZra5bWuftO3sU7a9fdp2sM/8Jl5oF9nVdo1da9fZ3XaPPWPP2sP2G3vO/mh72l52oH3ZDrKv2MH2VZtoh/wmHmXftKPtW3aMHWvH2fG/iafaaTbZTrcz7Lt2pp31mzjFfmDn2FQ7186z8+2Cn+OMmlLth3ax/cim2QCW2mV2uV1hV9pV/7fWZXaD3Wg32V32E7vVbrPb7Q67M/NE2O6xe+2ndp/9zB6yX9sD9gt70B6x6farn+OM/Ttiv7VH7Xf2mD1uT9jv7Un7g8rMztj37+1P9oL1FggJSJKigGIoG8VSdspBV1FOuppy0TUUoWspjq6j3HQ95aG8lI/yUzwVoIKkyZAlopAKUWGK0g2UWV5xKkGOSlIpuolK081Uhm6hsnQrlaPbqDxVoIpUiW6nynQHVaE7qSrdRdWoOtWgmnQ31aJ7qDbdS3XoPqpL91M9eoDq04PUgB6ihvQwNaJHqDE9Sk2oKTWj5tSCHqOW9Di1otbUhp6gtvQktaOnqD09TR3oGepIf6NO9Cx1pueoCz1PXakbdacXqAe9SD2pFyVQb+pDL1Ff6kf9aQANpJdpEL1Cg+lVSqQhNJReo2H0Og2nN2gEjaRR9CaNprdoDI2lcTSekmgCTaS3aRK9Q5NpCk2laZRM02kGvUszaRbNpvdoDr1Pc2kezacFlEIf0EJaRKn0IS2mjyiNltBSWkbLaQWtpFW0mtbQWlpH62kDbaRNtJm20FbaRttpB+2kj2kXfUK7aQ/tpU9pH31G++lzOkBf0EH6ktLpKzpEX9Nh+oaO0Le+F31Hx+g4naDv6ST9QKfoNJ2hs3SOfqTz9BNdIE8QYihCGaowCGPCbGFsmD3MEV4V5gyvDnOF14SR8NowLrwuzB1eH+YJ84b5wvxhfFggLBjq0IQ2pDAMC4WFw2h4Q1gkvDEsGhYLi4clQheWDEuFN4Wlw5vDMuEtYdnw1rBceFtYPqwQPnJfpfD2sHJ4R1glvDOsGt4VVgurhzXCmuHdYa3wnrB2eG9YJ7wvLBPeH9YLHwjrhw+GDcKHwobhw2Gj8JGwcfho2CRsGjYLm4ctwsfCluHjYauwddgmvCpsGz4ZtgufCtuHT4cdwmd+nr9/Ueb8E7+ZTwh7h33Cl8KXQu/vlfOjC6Ip0Q+iC6OLoqnRD6OLox9F06JLokujy6LLoyuiK6Oroquja6Jro+ui66Mbohujm6Le18wGDp1w0ikXuBiXzcW67C6Hu8rldFe7XO4aF3HXujh3ncvtrnd5XF6Xz+V38a6AK+i0M846cqEr5Aq7qLvBFXE3uqKumCvuSjjnSrpSrrlr4Vq4lu5x18q1dm3cE+4J96R70j3lnnJPuw7uGdfR/c11cs+6zu4595x73nV13Vx394Lr4SbkuviaTHB9XB/X1/V1/V1/N9ANdIPcIDfYDXaJLtENdUPdMDfMDXfD3Qg3wo1yo9xoN9qNcWPcODfOJbkkN9FNdJPcJDfZTXZT3VSX7JLdDDfDzXQzXeVZF7cy18118918l+JS3EKXcc6Y6ha7xS7Npbmlbqlb7pa7lW6lW+1Wu7VurVvv1ruNbqPb7Da7rW6r2+62u51up9vldrnd/pqLi7p9br/b7w64A+6g+9Klu6/cIfe1O+y+cUfct+6o+84dc8fdCfe9O+l+cKfcaXfGnXXn3I/uvPvJXXDeJUUmRCZG3o5MirwTmRyZEpkamRZJjkyPzIi8G5kZmRWZHXkvMifyfmRuZF5kfmRBJCXyQWRhZFEkNfJhZHHko0haZElkaWRZZHlkRcT7AltDX8gX9lF/gy/ib/RFfTFf3Jfwzpf0pfxNvvTFutO8v9WX87f58r6Cr+gf9U18U9/MN/ct/GO+pX/ct/KtfRv/hG/rn/Tt/FO+vX/ad/DP+I7+b76Tf9Z39s/5Lv5539V38939C76Hf9H39L18gu/t+/iXfF/fz/f3A/xA/7If5F/xg/2rPtEP8UP9a36Yf90P92/4EX6kHxXzph+deYkM432Sn+An+rf9JP+On+yn+Kl+mk/20/0M/66f6Wf52f49P8e/7+f6eX6+X+BT/Ad+oV/kU/2HfrH/yKf5JZk3jf1Kv8qv9mv8Wr/Or/cb/Ea/yW/2W/xWv81v9zv8Tv+x3+U/8bv9Hr/Xf+r3+c/8fv+5P+C/8Af9lz7df+UP+a/9Yf+NP+K/9Uf9d/6YP+5P+O/9Sf+DP+VP+zP+rD/nf/Tn/U/+Av+bNcYYY4yxf8mEy0Px65mLt/N7/06O+MWT+wDA1dvyp/9yPuOMcn2ei+N+Ij424+vTvbo8lPmoVi0hIeHSc9MkBIXnAWT+JSjDzx89uBQvgTbwJLSH1lD6d+vvJ7qdo3+yfvRWgBy/yMkoKDO+vP7nAJjwO+s/9sSoheXCM3H/j/XnARQtfDknO1yOl0Cbn++vtIYy/6D+vC3/Sf3Zv0gCaPWLnJxwOb5cfyl4HJ6B9r96JmOMMcYYY4wxdlE/UbFT5vVn5ic+f+/6PF5dzskGl+N/dn3OGGOMMcYYY4yxK+/Zbt2feqx9+9ad/v1Blf9R1r88aAz/qZV58LsD7wEyv6MA4A8uCJAxkH/lXmz5S7aVeOml8/dTy8/6AP53tPLPGFzhAxNjjDHGGGPsT3f5pP/X31dXqiDGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYywL+iv+O7ErvY+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbYlfZ/AgAA//+1tfsI") syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000300)=ANY=[], 0x3, 0x2cb, &(0x7f0000000ac0)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0xf6) sendfile(r0, r0, 0x0, 0x800000009) 2m38.221139011s ago: executing program 1 (id=239): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x9, "4fcb813dd28b42bee2b09486de6dd5ce0a74457bcd1cfd5feffe5c9fc9b17f00"}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m37.998807441s ago: executing program 1 (id=242): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000500), 0x8) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 2m36.340756256s ago: executing program 1 (id=248): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f0000000600)="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", 0x4c6) write$UHID_INPUT(r0, &(0x7f00000014c0)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40) 2m35.542299063s ago: executing program 1 (id=251): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x18d883, 0x0) syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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") 2m32.979112831s ago: executing program 1 (id=268): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000140)="42a28df65f2e81d0991808e312000000", 0x10}], 0x1, 0x0, 0x0, 0x40088d1}], 0x1, 0x80801) recvmmsg(r1, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000100)=""/63, 0x3f}], 0x1}, 0x8}], 0x1, 0x1, 0x0) 2m31.487192365s ago: executing program 1 (id=275): sched_setscheduler(0x0, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r0, 0x0, 0xe, 0x0, &(0x7f0000000180)="e0b9cc0d0fc6b3c372f5ad9c4a90", 0x0, 0xfb35, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m30.274218958s ago: executing program 33 (id=275): sched_setscheduler(0x0, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000042000000b700000000000010950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836801ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d09a0a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a504a0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e4a9f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r0, 0x0, 0xe, 0x0, &(0x7f0000000180)="e0b9cc0d0fc6b3c372f5ad9c4a90", 0x0, 0xfb35, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m33.854257852s ago: executing program 0 (id=622): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x100000, &(0x7f0000000000/0x100000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000240)={0x0, 0x100000}) 1m33.181312479s ago: executing program 0 (id=626): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 1m31.629100276s ago: executing program 0 (id=639): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(r1, 0x0, 0x80000000, 0x0) move_pages(r1, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000015c0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="04001e8004006700040074800008006f000100008008000d00", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="c1dc7c5a355e0a1aba4c848f0a82b37857cdc454f1ea11e83497f5abbb3d696c907da199af160d9e9256bb8a41ac014ce173988a190eb53d32647c46f4edcb79c4c712aca27b15e1760e12377a33df2bccc075bce93a22cc17e1a849c1ba2b3eb31a807310cbcd7870f0a8ce22"], 0x9f0}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) 1m30.724927742s ago: executing program 0 (id=645): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) umount2(&(0x7f0000001880)='./file0/../file0\x00', 0x9) 1m30.473212488s ago: executing program 0 (id=648): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e2b, 0x400006, @loopback, 0x77f}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000400)={r2}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000280)={r2, r0}) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=ANY=[], 0xc8}, 0x1, 0x0, 0x0, 0x22008095}, 0x0) 1m30.090697165s ago: executing program 0 (id=652): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x30, r3, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8854) 1m29.368441785s ago: executing program 34 (id=652): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x30, r3, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8854) 1m16.256412923s ago: executing program 2 (id=719): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x169442, 0x1e8) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000002c0)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0xc, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x121500, 0x20) fchown(r0, 0xffffffffffffffff, 0x0) lseek(r0, 0x80000000008, 0x0) 1m16.078231213s ago: executing program 2 (id=720): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x82, &(0x7f0000000100)=@assoc_value={r3, 0x7fff}, 0x8) 1m15.893374994s ago: executing program 2 (id=721): openat$rtc(0xffffffffffffff9c, &(0x7f0000000340), 0x129802, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000695000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x40000183}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m15.47407814s ago: executing program 2 (id=722): sendmmsg$alg(0xffffffffffffffff, &(0x7f00000010c0)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001100)}], 0x1, 0x0, 0x0, 0x40}], 0x1, 0x40000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000080)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000480)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]}) 1m14.915015244s ago: executing program 2 (id=727): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00') 1m14.568209128s ago: executing program 2 (id=730): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x3200c02, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x3, 0xa80, &(0x7f0000000180)="$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") r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 59.34157746s ago: executing program 35 (id=730): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x3200c02, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x3, 0xa80, &(0x7f0000000180)="$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") r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 5.220043127s ago: executing program 6 (id=1044): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000080)={0x3, "8faa7ab68aefc96940add94dd986d4f32634f14a10c1df59d27a3e745fb11661b2c297044eb0864509a8cbc7c48a18ef12f2fb379d0c1959605e2a52b1586bde"}) close_range(r0, 0xffffffffffffffff, 0x0) 4.148686681s ago: executing program 6 (id=1053): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x3a, 0x8, 0xffffffffffffffff}) open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) 3.889213405s ago: executing program 8 (id=1056): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=""/80, 0x50}}], 0x1, 0x2, 0x0) 3.793763257s ago: executing program 5 (id=1057): setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) syz_read_part_table(0x1054, &(0x7f0000002100)="$eJzsz7utAjEUBNDZz3u7G21LUASdkFMKEQlVICGRUAQhZYAwWFSAENI5gT321QQ3fFXT1TSWsz43WSQ5znXa5jTmNk+1NuWvzyHJ/+6a4fHTlEGf9ZxziZchWU7tq9E/r233zslq/+H1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAn3AMAAP//EFEKIw==") wait4(r0, 0x0, 0x2, 0x0) ioprio_set$pid(0x1, r0, 0x6000) 3.752119469s ago: executing program 6 (id=1058): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) 3.711970373s ago: executing program 8 (id=1059): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) listen(r0, 0xc323) 3.462834091s ago: executing program 8 (id=1061): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x46, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x2}, &(0x7f0000000440)={0x0, 0x2710}) 3.064596132s ago: executing program 5 (id=1064): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1}) ioctl$HIDIOCGPHYS(r1, 0x80404812, 0x0) 2.416382073s ago: executing program 5 (id=1068): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x85f6, 0x0, 0x0, 0x3ffffffffffff, 0xffffffffffc00000, 0x7f, 0xfffffe06}, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) sendfile(r2, r2, 0x0, 0x6fecb1) 2.210317331s ago: executing program 7 (id=1070): unshare(0x22020600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x1, 0x0, &(0x7f0000000040)=0xfffffffffffffed0) 2.141696281s ago: executing program 8 (id=1071): syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1e71, 0x200d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x40, "", [{{0x9, 0x4, 0x0, 0x3, 0xfe, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x1, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x81, 0x2}}}}}]}}]}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22, 0x2000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x23) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @rand_addr, 0xfffffe7d}, 0x1c) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0xa, 0x3, 0x4, 0x0, {0x4e23, 0xe22, [0x10002, 0xffff, 0x1000000], [], 0x0, [0x5, 0x613]}, 0x1000008}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x20004010) 2.095078625s ago: executing program 5 (id=1072): socket$packet(0x11, 0x3, 0x300) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="5a01f3c2f136", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @remote, @local, @remote}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 1.992519854s ago: executing program 7 (id=1073): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='add syz0 127.0.0.1', 0x12) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r1, &(0x7f0000000070)='syz0', 0x4) 1.896754913s ago: executing program 7 (id=1074): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @irqchip={0x530c, 0xffffffff}}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000140)={0x0, 0x401}) 1.761131849s ago: executing program 4 (id=1075): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000380)=0x10, 0x1c) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000002600)=ANY=[], 0x5ec}, 0x1, 0x0, 0x0, 0x2000080}, 0x1) shutdown(r1, 0x1) 1.539818036s ago: executing program 6 (id=1076): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40000042}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x4000042, 0x82, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}}}, 0x10) close(0x3) 1.538311542s ago: executing program 4 (id=1077): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r4, r0, 0x3a, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) 1.445768776s ago: executing program 4 (id=1078): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x24044884) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2508007a0000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) 1.346947189s ago: executing program 7 (id=1079): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0x3, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000810}, 0x20084084) 1.27004869s ago: executing program 8 (id=1080): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x1f, 0x0}, 0x0) 1.24669013s ago: executing program 6 (id=1081): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r1, 0x0, 0xee01) openat$cgroup_ro(r1, &(0x7f0000000900)='net_prio.prioidx\x00', 0x275a, 0xb) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) read$FUSE(r0, &(0x7f0000001fc0)={0x2020}, 0x2020) 1.144283869s ago: executing program 4 (id=1082): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioprio_set$pid(0x2, 0x0, 0x0) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) write(r0, 0x0, 0x0) 1.080517849s ago: executing program 6 (id=1083): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0xdeeb, 0x0, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x10000, 0x3, 0x10000002, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x0, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x100, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB=')'], 0x18}, 0x440e0) 998.928117ms ago: executing program 5 (id=1084): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0x8, 0x9, 0x3, 0xe6, 0x40, 0x3, 0x0, 0x30, 0x19}, {0xeeeb1000, 0x3000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x9, 0x58, 0x3, 0x3, 0x1}, {0xdddd1000, 0xe000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x81}, {0x6000, 0x8000000, 0x3, 0xa, 0x4, 0x43, 0x3, 0xfb, 0x80, 0x7, 0xe}, {0x0, 0x9000, 0x10, 0x1, 0x3, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x82}, {0x0, 0x80a0000, 0x8, 0xa0, 0xb1, 0x8, 0xc, 0xd, 0x88, 0xf, 0x4, 0xfd}, {0x54000, 0x2, 0x4, 0x5, 0x7, 0x2, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0xb000, 0x2d}, {0x10000, 0x7fff}, 0x80000031, 0x0, 0x6000, 0x42024, 0xb, 0x1, 0x3000, [0x6840000000000002, 0x3, 0x10de, 0xff]}) 889.102674ms ago: executing program 4 (id=1085): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0], 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="2bb9"], 0x9) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) 696.413218ms ago: executing program 7 (id=1086): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_emit_ethernet(0x40, &(0x7f0000000040)={@empty, @random="5509aea9be74", @val={@val={0x88a8, 0x3, 0x1, 0x1}, {0x8100, 0x5, 0x0, 0x3}}, {@x25={0x805, {0x3, 0x2, 0xf3, "a4af6336346443065a6cb76edff13e7fa8c0711bfeef9e50f51510a07c9702b3c7319f3b3a1025"}}}}, &(0x7f0000000100)={0x1, 0x1, [0x427, 0xd11, 0xbe8, 0xb2e]}) io_setup(0x3, &(0x7f0000000140)=0x0) pselect6(0x40, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x0, 0xeb4c, 0xfffffffffffffffd, 0xffffffffffffffff, 0x6, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x6000001, 0x3032, 0xffffffffffffffff, 0x0) io_submit(r1, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 449.471197ms ago: executing program 8 (id=1087): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x7, 0x9, 0x0, 0x0, 0xff, 0x4, 0xa, 0xf, 0xa1, 0x8, 0x5, 0x0, 0xfffffffe, 0x9, 0x3, 0x3, 0x2e, 0x0, '\x00', 0x6f, 0xffffffffffffff7f}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 439.043925ms ago: executing program 5 (id=1088): ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f0000000280)={0xc}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000048000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00007cf000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00002c6000/0x4000)=nil, &(0x7f00009ca000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x350}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 319.172693ms ago: executing program 4 (id=1089): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0x32, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x2, 0x100, @val=0x80}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x1, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 7 (id=1090): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) mbind(&(0x7f0000008000/0x7000)=nil, 0x7000, 0x1, 0x0, 0x2, 0x3) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): 4][ T5612] ? __pfx_task_work_run+0x10/0x10 [ 138.460179][ T5612] exit_to_user_mode_loop+0x22e/0x770 [ 138.460212][ T5612] ? rcu_is_watching+0x15/0xb0 [ 138.460241][ T5612] do_syscall_64+0x328/0x510 [ 138.460269][ T5612] ? trace_irq_disable+0x3b/0x140 [ 138.460302][ T5612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.460325][ T5612] ? clear_bhb_loop+0x70/0xc0 [ 138.460353][ T5612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.460375][ T5612] RIP: 0033:0x7f59d639f317 [ 138.460402][ T5612] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 138.460420][ T5612] RSP: 002b:00007ffd3a449a68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 138.460445][ T5612] RAX: 0000000000000000 RBX: 00007f59d6434474 RCX: 00007f59d639f317 [ 138.460460][ T5612] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd3a449b20 [ 138.460473][ T5612] RBP: 00007ffd3a449b20 R08: 00007ffd3a44ab20 R09: 00000000ffffffff [ 138.460489][ T5612] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd3a44abb0 [ 138.460502][ T5612] R13: 00007f59d6434474 R14: 0000000000021bfb R15: 00007ffd3a44abf0 [ 138.460538][ T5612] [ 138.663717][ T5612] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 138.929833][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888057e17800: abort rx timeout. Force session deactivation [ 139.201952][ T6763] loop5: detected capacity change from 0 to 128 [ 139.310062][ T6763] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 139.311232][ T6763] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 139.373103][ T6763] fscrypt (loop5, inode 12): Unsupported encryption modes (contents 0, filenames 0) [ 139.470032][ T6119] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.106976][ T6780] loop4: detected capacity change from 0 to 128 [ 140.119425][ T6780] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 140.167430][ T6780] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 140.332490][ T62] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 141.296755][ T31] audit: type=1326 audit(1786191409.406:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz.1.238" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d639e0d9 code=0x7ffc0000 [ 141.298121][ T31] audit: type=1326 audit(1786191409.416:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz.1.238" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d639e0d9 code=0x7ffc0000 [ 141.305828][ T31] audit: type=1326 audit(1786191409.426:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz.1.238" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d639e0d9 code=0x7ffc0000 [ 141.306588][ T31] audit: type=1326 audit(1786191409.426:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz.1.238" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59d639e0d9 code=0x7ffc0000 [ 141.307203][ T31] audit: type=1326 audit(1786191409.426:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz.1.238" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d639e0d9 code=0x7ffc0000 [ 141.312170][ T31] audit: type=1326 audit(1786191409.426:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz.1.238" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d639e0d9 code=0x7ffc0000 [ 141.313871][ T31] audit: type=1326 audit(1786191409.426:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz.1.238" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d639e0d9 code=0x7ffc0000 [ 141.314465][ T31] audit: type=1326 audit(1786191409.426:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz.1.238" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f59d635e90e code=0x7ffc0000 [ 141.325026][ T31] audit: type=1326 audit(1786191409.446:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz.1.238" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d639e0d9 code=0x7ffc0000 [ 141.387012][ T31] audit: type=1326 audit(1786191409.436:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz.1.238" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f59d639f3d7 code=0x7ffc0000 [ 142.152987][ T6841] loop4: detected capacity change from 0 to 4096 [ 142.237336][ T6841] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 142.237396][ T6841] EXT4-fs (loop4): Test dummy encryption mode enabled [ 142.244627][ T6841] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 142.247776][ T6841] System zones: 0-5 [ 142.319756][ T6841] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.437368][ T5615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.946937][ T6856] loop0: detected capacity change from 0 to 128 [ 143.980757][ T6855] loop5: detected capacity change from 0 to 128 [ 144.028906][ T6855] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 144.028993][ T6855] hpfs: filesystem error: improperly stopped [ 144.029045][ T6855] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 144.029102][ T6855] hpfs: You really don't want any checks? You are crazy... [ 144.060103][ T6855] hpfs: Code page index out of array [ 144.060144][ T6855] hpfs: code page support is disabled [ 144.098590][ T6856] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 144.098667][ T6856] hpfs: filesystem error: improperly stopped [ 144.098721][ T6856] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 144.098776][ T6856] hpfs: You really don't want any checks? You are crazy... [ 144.098843][ T6856] hpfs: Code page index out of array [ 144.098865][ T6856] hpfs: code page support is disabled [ 144.099425][ T6856] hpfs: hpfs_map_4sectors(): unaligned read [ 144.170252][ T6855] hpfs: hpfs_map_4sectors(): unaligned read [ 144.170802][ T6855] hpfs: hpfs_map_4sectors(): unaligned read [ 144.170843][ T6855] hpfs: filesystem error: unable to find root dir [ 144.208769][ T6856] hpfs: hpfs_map_4sectors(): unaligned read [ 144.208813][ T6856] hpfs: filesystem error: unable to find root dir [ 144.742287][ T6875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.255'. [ 144.827020][ T6875] bond1: entered promiscuous mode [ 144.828210][ T6875] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.995042][ T6875] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.997545][ T6875] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 145.020996][ T6875] bond1: (slave sit1): Error -95 calling set_mac_address [ 145.392710][ T6889] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 145.421382][ T6889] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 145.786779][ T6899] loop0: detected capacity change from 0 to 2048 [ 145.912558][ T6899] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.912779][ T6899] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.153481][ T6866] loop1: detected capacity change from 0 to 32768 [ 146.247132][ T6866] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.251 (6866) [ 146.435678][ T5614] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.453052][ T6866] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 146.453184][ T6866] BTRFS info (device loop1): using sha256 checksum algorithm [ 146.650633][ T6866] BTRFS info (device loop1): enabling ssd optimizations [ 146.650695][ T6866] BTRFS info (device loop1): turning on async discard [ 146.653556][ T6866] BTRFS info (device loop1): enabling free space tree [ 146.877626][ T5612] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 146.940253][ T6944] loop5: detected capacity change from 0 to 8 [ 147.035277][ T6948] loop4: detected capacity change from 0 to 128 [ 147.079826][ T6948] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 147.079935][ T6948] hpfs: filesystem error: improperly stopped [ 147.079975][ T6948] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 147.080027][ T6948] hpfs: You really don't want any checks? You are crazy... [ 147.080093][ T6948] hpfs: Code page index out of array [ 147.080118][ T6948] hpfs: code page support is disabled [ 147.103974][ T6948] hpfs: hpfs_map_4sectors(): unaligned read [ 147.104256][ T6948] hpfs: hpfs_map_4sectors(): unaligned read [ 147.104287][ T6948] hpfs: filesystem error: unable to find root dir [ 149.040720][ T6816] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.413482][ T6816] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.804278][ T6975] loop4: detected capacity change from 0 to 512 [ 149.845748][ T6975] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 149.845882][ T6975] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 149.888325][ T6816] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.917139][ T6975] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.279: bad orphan inode 131083 [ 149.917210][ T6975] loop4: lost filesystem error report for type 5 error -117 [ 149.926020][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 149.926085][ C0] EXT4-fs (loop4): initial error at time 1786191418: ext4_orphan_get:1429 [ 149.926149][ C0] EXT4-fs (loop4): last error at time 1786191418: ext4_orphan_get:1429 [ 150.008811][ T6975] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.876652][ T6983] loop0: detected capacity change from 0 to 131072 [ 150.895447][ T6983] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 150.895483][ T6983] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 150.917032][ T6983] F2FS-fs (loop0): invalid crc value [ 150.993616][ T6983] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 151.017403][ T6983] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 151.017451][ T6983] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 151.127548][ T6816] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.223863][ T4932] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.242023][ T4932] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.255887][ T4932] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.289961][ T4932] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.319137][ T4932] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.766797][ T5615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.969346][ T7000] loop2: detected capacity change from 0 to 128 [ 151.994257][ T7000] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 151.994338][ T7000] hpfs: filesystem error: improperly stopped [ 151.994418][ T7000] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 151.994467][ T7000] hpfs: You really don't want any checks? You are crazy... [ 151.994493][ T7000] hpfs: Code page index out of array [ 151.994518][ T7000] hpfs: code page support is disabled [ 152.001783][ T7000] hpfs: hpfs_map_4sectors(): unaligned read [ 152.002002][ T7000] hpfs: hpfs_map_4sectors(): unaligned read [ 152.002033][ T7000] hpfs: filesystem error: unable to find root dir [ 152.312538][ T6816] bridge_slave_1: left allmulticast mode [ 152.312603][ T6816] bridge_slave_1: left promiscuous mode [ 152.313252][ T6816] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.440302][ T6816] bridge_slave_0: left allmulticast mode [ 152.440356][ T6816] bridge_slave_0: left promiscuous mode [ 152.441107][ T6816] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.890737][ T7018] loop2: detected capacity change from 0 to 256 [ 152.961146][ T7018] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x37e488bf, utbl_chksum : 0xe619d30d) [ 153.405600][ T52] Bluetooth: hci0: command tx timeout [ 153.787156][ T6816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.804001][ T6816] bond0 (unregistering): Released all slaves [ 154.095741][ T6816] IPVS: stopping master sync thread 6127 ... [ 154.362918][ T5277] 8021q: adding VLAN 0 to HW filter on device eth5 [ 154.833796][ T6816] hsr_slave_0: left promiscuous mode [ 154.849515][ T6816] hsr_slave_1: left promiscuous mode [ 154.853891][ T6816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.854082][ T6816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.893246][ T6816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.893297][ T6816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.098771][ T6816] veth1_macvtap: left promiscuous mode [ 155.098848][ T6816] veth0_macvtap: left promiscuous mode [ 155.099015][ T6816] veth1_vlan: left promiscuous mode [ 155.099100][ T6816] veth0_vlan: left promiscuous mode [ 155.451605][ T7079] netlink: 'syz.5.299': attribute type 2 has an invalid length. [ 155.451649][ T7079] netlink: 40 bytes leftover after parsing attributes in process `syz.5.299'. [ 155.485318][ T52] Bluetooth: hci0: command tx timeout [ 155.594899][ T5801] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 155.764846][ T5801] usb 5-1: Using ep0 maxpacket: 32 [ 155.771008][ T5801] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 155.790738][ T5801] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.799088][ T5801] usb 5-1: Product: syz [ 155.803503][ T5801] usb 5-1: Manufacturer: syz [ 155.803550][ T5801] usb 5-1: SerialNumber: syz [ 155.821275][ T5801] usb 5-1: config 0 descriptor?? [ 156.250160][ T5801] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 003 [ 156.586956][ T6816] team0 (unregistering): Port device team_slave_1 removed [ 156.647584][ T6816] team0 (unregistering): Port device team_slave_0 removed [ 156.975203][ T5708] usb 5-1: USB disconnect, device number 3 [ 157.120133][ T7079] : entered promiscuous mode [ 157.128218][ T5277] 8021q: adding VLAN 0 to HW filter on device eth6 [ 157.566153][ T52] Bluetooth: hci0: command tx timeout [ 157.804690][ T7110] Illegal XDP return value 3681305020 on prog (id 33) dev N/A, expect packet loss! [ 158.709159][ T7130] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.828604][ T6988] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.829025][ T6988] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.831629][ T6988] bridge_slave_0: entered allmulticast mode [ 158.860303][ T6988] bridge_slave_0: entered promiscuous mode [ 158.889750][ T6988] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.891920][ T6988] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.898721][ T6988] bridge_slave_1: entered allmulticast mode [ 158.920857][ T6988] bridge_slave_1: entered promiscuous mode [ 158.931903][ T5277] 8021q: adding VLAN 0 to HW filter on device eth7 [ 159.057186][ T7153] sg_write: data in/out 1701604413/2147479510 bytes for SCSI command 0x0-- guessing data in; [ 159.057186][ T7153] program syz.4.316 not setting count and/or reply_len properly [ 159.057330][ T7153] sg_write: data in/out 1701604413/2147479510 bytes for SCSI command 0x0-- guessing data in; [ 159.057330][ T7153] program syz.4.316 not setting count and/or reply_len properly [ 159.057456][ T7153] sg_write: data in/out 1701604413/2147479510 bytes for SCSI command 0x0-- guessing data in; [ 159.057456][ T7153] program syz.4.316 not setting count and/or reply_len properly [ 159.164370][ T6988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.192050][ T6988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.430756][ T6988] team0: Port device team_slave_0 added [ 159.459714][ T6988] team0: Port device team_slave_1 added [ 159.465886][ T7160] netlink: 52 bytes leftover after parsing attributes in process `syz.2.320'. [ 159.528896][ T7164] netlink: 52 bytes leftover after parsing attributes in process `syz.2.320'. [ 159.558079][ T7160] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.560255][ T7160] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.645043][ T52] Bluetooth: hci0: command tx timeout [ 159.680848][ T6988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.680898][ T6988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.680942][ T6988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.736491][ T6988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.743646][ T6988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.769827][ T6988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.917804][ T6988] hsr_slave_0: entered promiscuous mode [ 159.926320][ T6988] hsr_slave_1: entered promiscuous mode [ 159.934032][ T6988] debugfs: 'hsr0' already exists in 'hsr' [ 159.940170][ T6988] Cannot create hsr debugfs directory [ 161.348112][ T6988] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 161.393326][ T6988] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 161.404522][ T6988] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 161.448083][ T6988] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 161.460752][ T6988] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 161.514033][ T6988] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 161.527796][ T6988] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 161.569518][ T6988] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 162.047021][ T5277] 8021q: adding VLAN 0 to HW filter on device eth8 [ 162.103747][ T7211] loop5: detected capacity change from 0 to 128 [ 162.104140][ T6988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.172439][ T6988] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.210195][ T7211] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 162.223260][ T7211] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.237390][ T6077] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.237513][ T6077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.271934][ T6077] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.272183][ T6077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.120652][ T6119] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 163.469897][ T7243] netlink: 28 bytes leftover after parsing attributes in process `syz.5.338'. [ 163.706769][ T7248] kvm: emulating exchange as write [ 164.173719][ T6988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.023870][ T7260] loop2: detected capacity change from 0 to 32768 [ 165.328988][ T5801] openvswitch: cpu_id mismatch with handler threads [ 165.452933][ T6988] veth0_vlan: entered promiscuous mode [ 165.532744][ T6988] veth1_vlan: entered promiscuous mode [ 165.686515][ T6988] veth0_macvtap: entered promiscuous mode [ 165.727201][ T6988] veth1_macvtap: entered promiscuous mode [ 165.855254][ T6988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.892861][ T6988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.976750][ T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.017202][ T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.027222][ T6819] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.027283][ T6819] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.135926][ T25] openvswitch: cpu_id mismatch with handler threads [ 166.177847][ T5801] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 166.217057][ T6660] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.217102][ T6660] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.345304][ T5801] usb 6-1: Using ep0 maxpacket: 16 [ 166.351424][ T5801] usb 6-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 166.362551][ T5801] usb 6-1: config 251 has an invalid interface number: 202 but max is 0 [ 166.373412][ T5801] usb 6-1: config 251 has no interface number 0 [ 166.380219][ T5801] usb 6-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 166.390551][ T5801] usb 6-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 166.401828][ T5801] usb 6-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 166.413270][ T5801] usb 6-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 166.425364][ T5801] usb 6-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.438868][ T5801] usb 6-1: config 251 interface 202 has no altsetting 0 [ 166.450140][ T5801] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.450204][ T5801] usb 6-1: Product: syz [ 166.450225][ T5801] usb 6-1: Manufacturer: syz [ 166.450245][ T5801] usb 6-1: SerialNumber: syz [ 166.483852][ T7291] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 166.493678][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.493698][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.746953][ T5801] cxacru_cm: 27 callbacks suppressed [ 166.747026][ T5801] cxacru 6-1:251.202: send of cm 0x90 failed (-71) [ 166.747104][ T5801] cxacru 6-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 166.770065][ T5801] cxacru 6-1:251.202: probe with driver cxacru failed with error -22 [ 166.795915][ T5801] usb 6-1: USB disconnect, device number 2 [ 167.430133][ T49] IPVS: starting estimator thread 0... [ 167.544889][ T7326] IPVS: using max 28 ests per chain, 67200 per kthread [ 167.970640][ T7324] loop0: detected capacity change from 0 to 32768 [ 168.223702][ T7324] JBD2: Ignoring recovery information on journal [ 168.225901][ T7324] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 168.226264][ T7324] JBD2: bad block at offset 32 [ 168.283066][ T7324] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 169.010566][ T5614] ocfs2: Unmounting device (7,0) on (node local) [ 169.384847][ T5801] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 169.451197][ T7373] loop6: detected capacity change from 0 to 764 [ 169.534799][ T5801] usb 6-1: Using ep0 maxpacket: 8 [ 169.541017][ T5801] usb 6-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 169.550342][ T5801] usb 6-1: too many configurations: 15, using maximum allowed: 8 [ 169.559131][ T5801] usb 6-1: config 0 has no interfaces? [ 169.565524][ T5801] usb 6-1: config 0 has no interfaces? [ 169.571994][ T5801] usb 6-1: config 0 has no interfaces? [ 169.581200][ T5801] usb 6-1: config 0 has no interfaces? [ 169.592023][ T5801] usb 6-1: config 0 has no interfaces? [ 169.600025][ T5801] usb 6-1: config 0 has no interfaces? [ 169.606344][ T5801] usb 6-1: config 0 has no interfaces? [ 169.612578][ T5801] usb 6-1: config 0 has no interfaces? [ 169.612618][ T5801] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.615563][ T5801] usb 6-1: config 0 descriptor?? [ 169.852219][ T5801] usb 6-1: USB disconnect, device number 3 [ 170.817199][ T7391] cgroup: fork rejected by pids controller in /syz4 [ 170.945807][ T5618] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 171.116571][ T5618] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 171.130411][ T5618] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.130447][ T5618] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.130506][ T5618] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 171.130557][ T5618] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.180763][ T5618] usb 3-1: config 0 descriptor?? [ 171.770740][ T5618] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 172.329865][ T7449] smpboot: CPU 1 is now offline [ 172.381925][ T7449] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 172.642819][ T5749] usb 3-1: USB disconnect, device number 6 [ 172.652765][ T7460] netlink: 16 bytes leftover after parsing attributes in process `syz.6.402'. [ 172.652884][ T7460] netlink: 16 bytes leftover after parsing attributes in process `syz.6.402'. [ 172.652918][ T7460] netlink: 7 bytes leftover after parsing attributes in process `syz.6.402'. [ 172.655313][ T7460] comedi comedi3: 8255: I/O base address not correctly aligned [ 172.781886][ T7458] loop0: detected capacity change from 0 to 2048 [ 172.848756][ T7458] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.049352][ T5614] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.330131][ T7504] loop2: detected capacity change from 0 to 8 [ 174.357640][ T7504] SQUASHFS error: lzo decompression failed, data probably corrupt [ 174.357696][ T7504] SQUASHFS error: Failed to read block 0x91: -5 [ 174.357712][ T7504] SQUASHFS error: Unable to read metadata cache entry [8f] [ 174.357764][ T7504] SQUASHFS error: Unable to read inode 0x11f [ 175.526797][ T190] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 175.606403][ T5749] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 175.697935][ T190] usb 5-1: Using ep0 maxpacket: 8 [ 175.709746][ T190] usb 5-1: unable to get BOS descriptor or descriptor too short [ 175.709817][ T190] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= e.40 [ 175.736800][ T190] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.736860][ T190] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 175.736923][ T190] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 175.777370][ T190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.785676][ T5749] usb 3-1: Using ep0 maxpacket: 8 [ 175.791169][ T190] usb 5-1: Product: syz [ 175.791396][ T5749] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 175.796887][ T5749] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 175.796916][ T5749] usb 3-1: config 0 has no interface number 0 [ 175.796956][ T5749] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 175.796981][ T5749] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 175.797007][ T5749] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 175.797034][ T5749] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 175.797078][ T5749] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.845948][ T190] usb 5-1: Manufacturer: syz [ 175.845972][ T190] usb 5-1: SerialNumber: syz [ 175.897070][ T5749] usb 3-1: config 0 descriptor?? [ 175.960315][ T5749] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 176.159040][ T190] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 176.170541][ T190] cdc_ncm 5-1:1.0: bind() failure [ 176.244687][ T190] usb 5-1: USB disconnect, device number 4 [ 176.358384][ T5617] usb 3-1: USB disconnect, device number 7 [ 176.421473][ T5617] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 177.850082][ T7594] IPv6: NLM_F_CREATE should be specified when creating new route [ 178.685091][ T7625] netlink: 4 bytes leftover after parsing attributes in process `syz.5.440'. [ 179.356847][ T7644] binder: 7642:7644 ioctl c0306201 200000000080 returned -14 [ 179.393503][ T7644] binder: 7642:7644 ioctl c0306201 2000000003c0 returned -14 [ 180.037241][ T7661] Bluetooth: MGMT ver 1.23 [ 180.270297][ T7663] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 180.922541][ T7684] KVM: debugfs: duplicate directory 7684-5 [ 182.001739][ T7707] netlink: 'syz.2.464': attribute type 4 has an invalid length. [ 182.024881][ T7710] loop5: detected capacity change from 0 to 2640 [ 182.025773][ T7710] Buffer I/O error on dev loop5, logical block 0, async page read [ 182.025843][ T7710] Buffer I/O error on dev loop5, logical block 0, async page read [ 182.051318][ T7710] Buffer I/O error on dev loop5, logical block 0, async page read [ 182.059470][ T7710] Buffer I/O error on dev loop5, logical block 0, async page read [ 182.071629][ T7710] Buffer I/O error on dev loop5, logical block 0, async page read [ 182.085160][ T7710] Buffer I/O error on dev loop5, logical block 0, async page read [ 182.093391][ T7710] Buffer I/O error on dev loop5, logical block 0, async page read [ 182.105516][ T7710] Buffer I/O error on dev loop5, logical block 0, async page read [ 182.105569][ T7710] ldm_validate_partition_table(): Disk read failed. [ 182.105605][ T7710] Buffer I/O error on dev loop5, logical block 0, async page read [ 182.105642][ T7710] Buffer I/O error on dev loop5, logical block 0, async page read [ 182.105695][ T7710] Dev loop5: unable to read RDB block 0 [ 182.105896][ T7710] loop5: unable to read partition table [ 182.106124][ T7710] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 183.424236][ T7740] jffs2: notice: (7740) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 183.747313][ T7747] capability: warning: `syz.2.480' uses deprecated v2 capabilities in a way that may be insecure [ 184.315791][ T5618] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 184.334628][ T7763] netlink: 'syz.2.485': attribute type 1 has an invalid length. [ 184.337112][ T7763] netlink: 'syz.2.485': attribute type 2 has an invalid length. [ 184.337164][ T7763] netlink: 24 bytes leftover after parsing attributes in process `syz.2.485'. [ 184.475425][ T5618] usb 7-1: Using ep0 maxpacket: 16 [ 184.481207][ T5618] usb 7-1: unable to get BOS descriptor or descriptor too short [ 184.481261][ T5618] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 184.483338][ T5618] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 184.483370][ T5618] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 184.495210][ T5618] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.495285][ T5618] usb 7-1: Product: syz [ 184.495327][ T5618] usb 7-1: Manufacturer: syz [ 184.495369][ T5618] usb 7-1: SerialNumber: syz [ 184.812384][ T7757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.815456][ T7757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.920539][ T5618] cdc_ncm 7-1:1.0: bind() failure [ 184.996972][ T5618] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 184.997060][ T5618] cdc_ncm 7-1:1.1: bind() failure [ 185.144469][ T5618] usb 7-1: USB disconnect, device number 2 [ 185.548414][ T5618] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 185.706283][ T7780] 9pnet: p9_errstr2errno: server reported unknown error  [ 185.787262][ T5618] usb 7-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice= 0.40 [ 185.790580][ T5618] usb 7-1: config index 0 descriptor too short (expected 122, got 92) [ 185.790692][ T5618] usb 7-1: config 1 has an invalid descriptor of length 127, skipping remainder of the config [ 185.790755][ T5618] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 185.790909][ T5618] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 3330, setting to 64 [ 185.855376][ T5618] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.855436][ T5618] usb 7-1: Product: syz [ 185.855470][ T5618] usb 7-1: Manufacturer: syz [ 185.855491][ T5618] usb 7-1: SerialNumber: syz [ 185.905375][ T7757] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 186.367982][ T5618] usb 7-1: __uac_clock_find_source(): clock selector control is not readable, id 0 [ 186.573268][ T5618] usb 7-1: __uac_clock_find_source(): recursive clock topology detected, id 0. [ 186.575307][ T5618] usb 7-1: __uac_clock_find_source(): clock selector control is not readable, id 0 [ 186.640562][ T7798] overlayfs: metacopy with no lower data found - abort lookup (/file2) [ 186.976182][ T7806] veth0: entered promiscuous mode [ 187.007673][ T7806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.497'. [ 187.173592][ T5618] usb 7-1: USB disconnect, device number 3 [ 187.401220][ T7805] veth0: left promiscuous mode [ 187.934504][ T7825] loop0: detected capacity change from 0 to 32768 [ 187.944343][ T7825] (syz.0.502,7825,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 187.948211][ T7825] (syz.0.502,7825,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 187.991884][ T7825] JBD2: Ignoring recovery information on journal [ 188.040204][ T7825] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 188.178748][ T31] audit: type=1800 audit(1786191456.286:51): pid=7825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.502" name="file1" dev="loop0" ino=16978 res=0 errno=0 [ 188.612874][ T31] audit: type=1800 audit(1786191456.726:52): pid=7840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.502" name="file1" dev="loop0" ino=16978 res=0 errno=0 [ 188.614343][ T7825] syz.0.502 (7825) used greatest stack depth: 19272 bytes left [ 189.059555][ T5614] ocfs2: Unmounting device (7,0) on (node local) [ 189.128823][ T7856] loop6: detected capacity change from 0 to 512 [ 189.185012][ T7860] loop4: detected capacity change from 0 to 1024 [ 189.196521][ T7860] EXT4-fs: Ignoring removed bh option [ 189.244385][ T7860] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 189.465215][ T7860] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 2: comm syz.4.513: lblock 2 mapped to illegal pblock 2 (length 1) [ 189.465525][ T7860] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 189.544754][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 189.545800][ C0] EXT4-fs (loop4): initial error at time 1786191457: ext4_map_blocks:790: inode 3: block 2 [ 189.545868][ C0] EXT4-fs (loop4): last error at time 1786191457: ext4_map_blocks:790: inode 3: block 2 [ 189.584020][ T7860] EXT4-fs (loop4): Remounting filesystem read-only [ 189.584073][ T7860] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 189.584217][ T7860] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 189.584335][ T7860] EXT4-fs (loop4): 1 orphan inode deleted [ 189.639214][ T7860] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.934883][ T31] audit: type=1800 audit(1786191458.026:53): pid=7880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.519" name="memory_backed" dev="configfs" ino=18529 res=0 errno=0 [ 189.934961][ T31] audit: type=1800 audit(1786191458.026:54): pid=7880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.519" name="power" dev="configfs" ino=18530 res=0 errno=0 [ 190.132093][ T7875] loop6: detected capacity change from 0 to 40427 [ 190.140470][ T7875] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 190.140524][ T7875] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 190.256001][ T7875] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 190.268973][ T7875] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 190.269022][ T7875] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 190.300922][ T7885] loop0: detected capacity change from 0 to 256 [ 190.337902][ T7885] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 190.397841][ T5615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.793629][ T7889] netlink: 64 bytes leftover after parsing attributes in process `syz.0.522'. [ 190.795057][ T7875] syz.6.517: attempt to access beyond end of device [ 190.795057][ T7875] loop6: rw=2049, sector=45096, nr_sectors = 8152 limit=40427 [ 190.807683][ T7875] syz.6.517: attempt to access beyond end of device [ 190.807683][ T7875] loop6: rw=2049, sector=45056, nr_sectors = 8 limit=40427 [ 190.854202][ T7890] netlink: 64 bytes leftover after parsing attributes in process `syz.0.522'. [ 190.872867][ T7889] ip6gre1: entered promiscuous mode [ 190.878488][ T7889] ip6gre1: entered allmulticast mode [ 190.927154][ T7875] syz.6.517: attempt to access beyond end of device [ 190.927154][ T7875] loop6: rw=2049, sector=57344, nr_sectors = 16384 limit=40427 [ 190.949193][ T7875] syz.6.517: attempt to access beyond end of device [ 190.949193][ T7875] loop6: rw=2049, sector=73728, nr_sectors = 8 limit=40427 [ 190.949770][ T7875] syz.6.517: attempt to access beyond end of device [ 190.949770][ T7875] loop6: rw=2049, sector=73736, nr_sectors = 8 limit=40427 [ 190.950301][ T7875] syz.6.517: attempt to access beyond end of device [ 190.950301][ T7875] loop6: rw=2049, sector=73744, nr_sectors = 8 limit=40427 [ 190.950817][ T7875] syz.6.517: attempt to access beyond end of device [ 190.950817][ T7875] loop6: rw=2049, sector=73752, nr_sectors = 8 limit=40427 [ 190.951461][ T7875] syz.6.517: attempt to access beyond end of device [ 190.951461][ T7875] loop6: rw=2049, sector=73760, nr_sectors = 8 limit=40427 [ 190.951966][ T7875] syz.6.517: attempt to access beyond end of device [ 190.951966][ T7875] loop6: rw=2049, sector=73768, nr_sectors = 8 limit=40427 [ 190.952486][ T7875] syz.6.517: attempt to access beyond end of device [ 190.952486][ T7875] loop6: rw=2049, sector=73776, nr_sectors = 8 limit=40427 [ 191.424569][ T7894] loop0: detected capacity change from 0 to 4096 [ 191.434223][ T52] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 191.434252][ T52] CPU: 0 UID: 0 PID: 52 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.434284][ T52] Tainted: [L]=SOFTLOCKUP [ 191.434292][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 191.434314][ T52] Workqueue: hci3 hci_rx_work [ 191.434346][ T52] Call Trace: [ 191.434354][ T52] [ 191.434363][ T52] dump_stack_lvl+0xe8/0x150 [ 191.434396][ T52] sysfs_create_dir_ns+0x271/0x2a0 [ 191.434422][ T52] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 191.434450][ T52] ? do_raw_spin_unlock+0xf5/0x210 [ 191.434481][ T52] kobject_add_internal+0x622/0xcd0 [ 191.434509][ T52] kobject_add+0x163/0x240 [ 191.434550][ T52] ? __pfx_kobject_add+0x10/0x10 [ 191.434589][ T52] ? get_device_parent+0x366/0x3a0 [ 191.434636][ T52] device_add+0x3fa/0xb80 [ 191.434671][ T52] hci_conn_add_sysfs+0xd5/0x210 [ 191.434703][ T52] le_conn_complete_evt+0xfb7/0x1690 [ 191.434734][ T52] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 191.434765][ T52] ? __mutex_unlock_slowpath+0x731/0x900 [ 191.434798][ T52] ? skb_pull_data+0xf0/0x200 [ 191.434827][ T52] hci_le_conn_complete_evt+0x187/0x470 [ 191.434867][ T52] hci_event_packet+0x67a/0xf10 [ 191.434907][ T52] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 191.434938][ T52] ? __pfx_hci_event_packet+0x10/0x10 [ 191.434970][ T52] ? audit_alloc_mark+0x370/0x550 [ 191.435000][ T52] ? hci_send_to_monitor+0xe2/0x590 [ 191.435028][ T52] hci_rx_work+0x3ee/0x1020 [ 191.435066][ T52] ? process_scheduled_works+0x97e/0x1630 [ 191.435094][ T52] process_scheduled_works+0xc4e/0x1630 [ 191.435153][ T52] ? __pfx_process_scheduled_works+0x10/0x10 [ 191.435185][ T52] ? assign_work+0x3cf/0x5d0 [ 191.435216][ T52] worker_thread+0xa47/0xfb0 [ 191.435270][ T52] kthread+0x388/0x470 [ 191.435312][ T52] ? __pfx_worker_thread+0x10/0x10 [ 191.435339][ T52] ? __pfx_kthread+0x10/0x10 [ 191.435372][ T52] ret_from_fork+0x514/0xb70 [ 191.435410][ T52] ? __pfx_ret_from_fork+0x10/0x10 [ 191.435441][ T52] ? __switch_to+0xc89/0x1420 [ 191.435475][ T52] ? __pfx_kthread+0x10/0x10 [ 191.435509][ T52] ret_from_fork_asm+0x1a/0x30 [ 191.435561][ T52] [ 191.436008][ T52] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 191.436052][ T52] Bluetooth: hci3: failed to register connection device [ 191.702847][ T190] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 191.719829][ T7880] null_blk: disk nullb1 created [ 191.739603][ T7894] ext4: Unknown parameter 'fsuuid' [ 191.765083][ T190] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 192.044190][ T7902] fido_id[7902]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 192.140649][ T6988] CPU: 1 UID: 0 PID: 6988 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 192.140687][ T6988] Tainted: [L]=SOFTLOCKUP [ 192.140696][ T6988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 192.140709][ T6988] Call Trace: [ 192.140718][ T6988] [ 192.140727][ T6988] dump_stack_lvl+0xe8/0x150 [ 192.140775][ T6988] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 192.140812][ T6988] f2fs_write_end_bio+0x1211/0x16e0 [ 192.140850][ T6988] ? blkg_put+0x22/0x240 [ 192.140896][ T6988] __submit_merged_bio+0x258/0x6a0 [ 192.140924][ T6988] ? rcu_is_watching+0x15/0xb0 [ 192.140956][ T6988] f2fs_submit_merged_write+0x27d/0x380 [ 192.140991][ T6988] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 192.141039][ T6988] f2fs_sync_node_pages+0x1055/0x1210 [ 192.141094][ T6988] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 192.141173][ T6988] f2fs_write_checkpoint+0xf91/0x2710 [ 192.141207][ T6988] ? __lock_acquire+0x6df/0x2e50 [ 192.141278][ T6988] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 192.141375][ T6988] kill_f2fs_super+0x2dd/0x700 [ 192.141421][ T6988] ? __pfx_kill_f2fs_super+0x10/0x10 [ 192.141468][ T6988] ? call_rcu+0x64b/0x8b0 [ 192.141493][ T6988] ? lockdep_hardirqs_on+0x7a/0x110 [ 192.141539][ T6988] deactivate_locked_super+0xbc/0x110 [ 192.141578][ T6988] cleanup_mnt+0x3d3/0x460 [ 192.141610][ T6988] task_work_run+0x1d9/0x270 [ 192.141636][ T6988] ? __pfx_task_work_run+0x10/0x10 [ 192.141672][ T6988] exit_to_user_mode_loop+0x22e/0x770 [ 192.141705][ T6988] ? rcu_is_watching+0x15/0xb0 [ 192.141735][ T6988] do_syscall_64+0x328/0x510 [ 192.141771][ T6988] ? trace_irq_disable+0x3b/0x140 [ 192.141804][ T6988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.141827][ T6988] ? clear_bhb_loop+0x70/0xc0 [ 192.141856][ T6988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.141878][ T6988] RIP: 0033:0x7f3b0df9f317 [ 192.141900][ T6988] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 192.141919][ T6988] RSP: 002b:00007ffec0bad398 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 192.141943][ T6988] RAX: 0000000000000000 RBX: 00007f3b0e034474 RCX: 00007f3b0df9f317 [ 192.141958][ T6988] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec0bad450 [ 192.141972][ T6988] RBP: 00007ffec0bad450 R08: 00007ffec0bae450 R09: 00000000ffffffff [ 192.141986][ T6988] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffec0bae4e0 [ 192.141999][ T6988] R13: 00007f3b0e034474 R14: 000000000002ed90 R15: 00007ffec0bae520 [ 192.142034][ T6988] [ 192.158291][ T6988] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 193.721838][ T7928] jffs2: notice: (7928) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 194.311468][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.311552][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.536283][ T5617] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0 [ 194.592375][ T7943] loop0: detected capacity change from 0 to 2048 [ 194.599576][ T5617] hid-generic 0006:0004:0009.0006: hidraw0: VIRTUAL HID v0.04 Device [syz0] on syz1 [ 194.620580][ T7943] UDF-fs: error (device loop0): udf_read_tagged: block 256: CRC length 65535 exceeds block size [ 194.638276][ T7943] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 1344: 0x15 != 0x00 [ 194.638337][ T7943] UDF-fs: warning (device loop0): udf_fill_super: No fileset found [ 194.960367][ T7948] fido_id[7948]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 195.135547][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 195.295487][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 195.301746][ T10] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 195.312850][ T10] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 195.312920][ T10] usb 7-1: config 0 has no interface number 0 [ 195.312966][ T10] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 195.312995][ T10] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 195.313030][ T10] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 195.313060][ T10] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 195.313108][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.365204][ T5617] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 195.405212][ T10] usb 7-1: config 0 descriptor?? [ 195.431463][ T10] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 195.528054][ T5617] usb 1-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.40 [ 195.530229][ T5617] usb 1-1: config 1 interface 0 has no altsetting 0 [ 195.550498][ T5617] usb 1-1: string descriptor 0 read error: -22 [ 195.550659][ T5617] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.709774][ T5801] usb 7-1: USB disconnect, device number 4 [ 195.741192][ T5801] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 196.187000][ T5617] aquacomputer_d5next 0003:0C70:F001.0007: unknown main item tag 0x0 [ 196.187070][ T5617] aquacomputer_d5next 0003:0C70:F001.0007: unknown main item tag 0x0 [ 196.191188][ T5617] aquacomputer_d5next 0003:0C70:F001.0007: unknown main item tag 0x0 [ 196.191245][ T5617] aquacomputer_d5next 0003:0C70:F001.0007: unknown main item tag 0x0 [ 196.191280][ T5617] aquacomputer_d5next 0003:0C70:F001.0007: unknown main item tag 0x0 [ 196.191313][ T5617] aquacomputer_d5next 0003:0C70:F001.0007: unknown main item tag 0x0 [ 196.191345][ T5617] aquacomputer_d5next 0003:0C70:F001.0007: unknown main item tag 0x0 [ 196.191378][ T5617] aquacomputer_d5next 0003:0C70:F001.0007: unknown main item tag 0x0 [ 196.539932][ T5617] aquacomputer_d5next 0003:0C70:F001.0007: hidraw0: USB HID vff.7f Device [HID 0c70:f001] on usb-dummy_hcd.0-1/input0 [ 196.848898][ T5617] usb 1-1: USB disconnect, device number 3 [ 196.943886][ T7970] loop2: detected capacity change from 0 to 131072 [ 196.960733][ T7970] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 196.960780][ T7970] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 196.967847][ T7970] F2FS-fs (loop2): invalid crc value [ 197.082239][ T7979] netlink: 'syz.6.552': attribute type 4 has an invalid length. [ 197.107798][ T7970] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 197.121401][ T7970] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 197.121463][ T7970] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 197.236514][ T31] audit: type=1800 audit(1786191465.356:55): pid=7970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.551" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 197.723488][ T8001] loop4: detected capacity change from 0 to 512 [ 197.734444][ T8001] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 197.868139][ T8001] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.563: invalid indirect mapped block 4294967295 (level 0) [ 197.868202][ T8001] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 197.874913][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 197.874983][ C0] EXT4-fs (loop4): initial error at time 1786191465: ext4_free_branches:1023: inode 16 [ 197.875066][ C0] EXT4-fs (loop4): last error at time 1786191465: ext4_free_branches:1023: inode 16 [ 197.983972][ T8001] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.563: invalid indirect mapped block 4294967295 (level 1) [ 197.984032][ T8001] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 198.067648][ T8001] EXT4-fs (loop4): 1 orphan inode deleted [ 198.067695][ T8001] EXT4-fs (loop4): 1 truncate cleaned up [ 198.091127][ T8001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.142217][ T8008] loop5: detected capacity change from 0 to 128 [ 198.154056][ T8001] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 198.237097][ T8008] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 198.263974][ T8008] ext4 filesystem being mounted at /88/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 198.352240][ T8017] loop0: detected capacity change from 0 to 512 [ 198.363129][ T8017] EXT4-fs: Ignoring removed oldalloc option [ 198.369318][ T8017] EXT4-fs: Ignoring removed oldalloc option [ 198.406239][ T8017] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.567: corrupted in-inode xattr: invalid ea_ino [ 198.406298][ T8017] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 198.411037][ T8017] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.567: couldn't read orphan inode 15 (err -117) [ 198.411139][ T8017] loop0: lost filesystem error report for type 5 error -117 [ 198.419653][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 198.419678][ C0] EXT4-fs (loop0): initial error at time 1786191466: ext4_iget_extra_inode:5210: inode 15 [ 198.419706][ C0] EXT4-fs (loop0): last error at time 1786191466: ext4_orphan_get:1408 [ 198.479221][ T8017] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.612890][ T6119] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 198.660240][ T5614] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.694598][ T5615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.164851][ T5617] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 199.315066][ T5617] usb 1-1: Using ep0 maxpacket: 16 [ 199.317010][ T5617] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 199.320501][ T5617] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.320570][ T5617] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 199.382140][ T5617] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.382196][ T5617] usb 1-1: Product: syz [ 199.382238][ T5617] usb 1-1: Manufacturer: syz [ 199.382257][ T5617] usb 1-1: SerialNumber: syz [ 199.583747][ T5617] usb 1-1: 0:2 : does not exist [ 199.799556][ T5617] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 200.204107][ T5617] usb 1-1: USB disconnect, device number 4 [ 200.331609][ T8031] cgroup: fork rejected by pids controller in /syz5 [ 200.580857][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 201.353029][ T8109] netlink: 20 bytes leftover after parsing attributes in process `syz.2.583'. [ 201.353086][ T8109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.583'. [ 201.712261][ T8124] fuse: Bad value for 'fd' [ 202.344220][ T8138] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 202.589095][ T8149] netlink: 'syz.6.594': attribute type 1 has an invalid length. [ 202.675573][ T8149] 8021q: adding VLAN 0 to HW filter on device bond1 [ 202.999857][ T31] audit: type=1326 audit(1786191471.116:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.6.599" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b0df9e0d9 code=0x7ffc0000 [ 203.034643][ T31] audit: type=1326 audit(1786191471.146:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.6.599" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b0df9e0d9 code=0x7ffc0000 [ 203.034842][ T31] audit: type=1326 audit(1786191471.146:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.6.599" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b0df9e0d9 code=0x7ffc0000 [ 203.088371][ T31] audit: type=1326 audit(1786191471.206:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.6.599" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b0df9e0d9 code=0x7ffc0000 [ 203.114890][ T31] audit: type=1326 audit(1786191471.206:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.6.599" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f3b0df9e0d9 code=0x7ffc0000 [ 203.114945][ T31] audit: type=1326 audit(1786191471.206:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.6.599" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3b0df5e90e code=0x7ffc0000 [ 203.114991][ T31] audit: type=1326 audit(1786191471.206:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.6.599" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3b0df5e90e code=0x7ffc0000 [ 203.115039][ T31] audit: type=1326 audit(1786191471.206:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.6.599" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3b0df5e90e code=0x7ffc0000 [ 203.115652][ T31] audit: type=1326 audit(1786191471.236:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.6.599" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3b0df5e90e code=0x7ffc0000 [ 203.116873][ T31] audit: type=1326 audit(1786191471.236:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.6.599" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3b0df5e90e code=0x7ffc0000 [ 203.442934][ T8166] netlink: 'syz.4.600': attribute type 11 has an invalid length. [ 203.685951][ T5801] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 203.793979][ T8171] netlink: 'syz.6.603': attribute type 1 has an invalid length. [ 203.854116][ T5801] usb 3-1: unable to get BOS descriptor or descriptor too short [ 203.854192][ T5801] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 203.860245][ T5801] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 203.899810][ T5801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.899861][ T5801] usb 3-1: Product: syz [ 203.899895][ T5801] usb 3-1: Manufacturer: syz [ 203.899957][ T5801] usb 3-1: SerialNumber: syz [ 204.176703][ T5801] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 204.376984][ T5801] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 204.377041][ T5801] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 204.377089][ T5801] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 204.377520][ T5801] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 204.377583][ T5801] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 204.377643][ T5801] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 204.440130][ T8171] 8021q: adding VLAN 0 to HW filter on device bond2 [ 204.479315][ T8174] bond2: (slave syz_tun): Enslaving as a backup interface with an up link [ 205.082704][ T8207] overlayfs: metacopy with no lower data found - abort lookup (/file2) [ 205.120352][ T8208] loop4: detected capacity change from 0 to 512 [ 205.214363][ T8208] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 205.272432][ T8208] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 205.274310][ T8208] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.613: Corrupt directory, running e2fsck is recommended [ 205.312931][ T8208] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 205.323569][ T8208] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.613: corrupted in-inode xattr: invalid ea_ino [ 205.337502][ T8208] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 205.338240][ T8208] EXT4-fs (loop4): Remounting filesystem read-only [ 205.347640][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 205.347662][ C0] EXT4-fs (loop4): initial error at time 1786191473: ext4_iget_extra_inode:5210: inode 15 [ 205.347687][ C0] EXT4-fs (loop4): last error at time 1786191473: ext4_iget_extra_inode:5210: inode 15 [ 205.367836][ T5623] Bluetooth: hci2: command 0x0406 tx timeout [ 205.393953][ T8208] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.413639][ T8208] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 205.427229][ T8208] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 205.440153][ T8208] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.613: Corrupt directory, running e2fsck is recommended [ 205.454582][ T8208] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 205.472403][ T8208] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 205.485464][ T8208] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.613: Corrupt directory, running e2fsck is recommended [ 205.499678][ T8208] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 205.499747][ T8208] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 205.499772][ T8208] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.613: Corrupt directory, running e2fsck is recommended [ 205.537204][ T8208] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 205.603753][ T5615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.678298][ T5801] usb 3-1: USB disconnect, device number 8 [ 205.830412][ T8221] loop5: detected capacity change from 0 to 128 [ 205.847108][ T8221] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 205.868416][ T8221] hpfs: filesystem error: improperly stopped [ 205.876663][ T8221] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 205.888595][ T8221] hpfs: You really don't want any checks? You are crazy... [ 205.898836][ T8221] hpfs: Code page index out of array [ 205.904382][ T8221] hpfs: code page support is disabled [ 205.916720][ T8221] hpfs: hpfs_map_4sectors(): unaligned read [ 205.923021][ T8221] hpfs: hpfs_map_4sectors(): unaligned read [ 205.929524][ T8221] hpfs: filesystem error: unable to find root dir [ 205.973971][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 206.147037][ T8233] netlink: 12 bytes leftover after parsing attributes in process `syz.6.623'. [ 206.310843][ T8237] jffs2: notice: (8237) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 206.535001][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 206.615740][ T4932] Bluetooth: hci3: command 0x0406 tx timeout [ 207.102676][ T8264] loop4: detected capacity change from 0 to 512 [ 207.218066][ T8264] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.218258][ T8264] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 207.481131][ T8275] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3599605440 (3599605440 ns) > initial count (3285526220 ns). Using initial count to start timer. [ 207.778190][ T5615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.552152][ T8302] loop5: detected capacity change from 0 to 512 [ 208.626737][ T8302] EXT4-fs (loop5): orphan cleanup on readonly fs [ 208.649901][ T8302] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 208.662135][ T8302] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.640: corrupted in-inode xattr: e_value size too large [ 208.662212][ T8302] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 208.664570][ T8302] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.640: couldn't read orphan inode 15 (err -117) [ 208.664663][ T8302] loop5: lost filesystem error report for type 5 error -117 [ 208.679216][ T8302] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 208.873301][ T8300] netlink: 'syz.0.639': attribute type 3 has an invalid length. [ 208.945488][ T8307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.642'. [ 209.485231][ T4932] Bluetooth: hci0: command 0x1407 tx timeout [ 209.485401][ T5619] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 210.127977][ T6119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.223822][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.506292][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.704531][ T4932] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 210.720192][ T4932] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 210.728033][ T4932] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 210.738804][ T4932] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 210.746667][ T4932] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 210.785697][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.167772][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.968090][ T13] bridge_slave_1: left allmulticast mode [ 211.968139][ T13] bridge_slave_1: left promiscuous mode [ 211.968381][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.020799][ T13] bridge_slave_0: left allmulticast mode [ 212.020855][ T13] bridge_slave_0: left promiscuous mode [ 212.021505][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.297653][ T8385] netlink: 28 bytes leftover after parsing attributes in process `syz.2.669'. [ 212.307296][ T8385] netlink: 'syz.2.669': attribute type 7 has an invalid length. [ 212.315761][ T8385] netlink: 'syz.2.669': attribute type 8 has an invalid length. [ 212.323624][ T8385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.669'. [ 212.844952][ T4932] Bluetooth: hci2: command tx timeout [ 213.071502][ T8391] loop6: detected capacity change from 0 to 32768 [ 213.122648][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.161258][ T13] bond0 (unregistering): Released all slaves [ 213.174069][ T8391] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 213.301429][ T5277] 8021q: adding VLAN 0 to HW filter on device eth9 [ 213.353310][ T8391] XFS (loop6): Ending clean mount [ 213.450990][ T6988] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 214.320703][ T13] hsr_slave_0: left promiscuous mode [ 214.331770][ T13] hsr_slave_1: left promiscuous mode [ 214.339905][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.347879][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.358708][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.368032][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.400967][ T13] veth1_macvtap: left promiscuous mode [ 214.408165][ T13] veth0_macvtap: left promiscuous mode [ 214.413854][ T13] veth1_vlan: left promiscuous mode [ 214.413920][ T13] veth0_vlan: left promiscuous mode [ 214.926249][ T4932] Bluetooth: hci2: command tx timeout [ 215.122341][ T8417] loop5: detected capacity change from 0 to 40427 [ 215.140410][ T8417] F2FS-fs (loop5): build fault injection rate: 19 [ 215.140459][ T8417] F2FS-fs (loop5): build fault injection type: 0x3bfe8c [ 215.156454][ T8417] F2FS-fs (loop5): invalid crc value [ 215.200594][ T8417] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9a1/0x1820 [ 215.272882][ T8417] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0 [ 215.318163][ T8417] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 215.397937][ T8417] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 215.478640][ T8417] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xa60/0x1ee0 [ 215.501305][ T8417] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3a1/0xdc0 [ 215.698089][ T8417] bio_check_eod: 1005 callbacks suppressed [ 215.707462][ T8417] syz.5.676: attempt to access beyond end of device [ 215.707462][ T8417] loop5: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 215.771138][ T8417] syz.5.676: attempt to access beyond end of device [ 215.771138][ T8417] loop5: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 215.842671][ T13] team0 (unregistering): Port device team_slave_1 removed [ 215.860354][ T8456] F2FS-fs (loop5): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8bf/0xd90 [ 215.860439][ T8456] F2FS-fs (loop5): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:3,ofs:0,cpver:1219692001,blkaddr:4098] [ 215.993725][ T13] team0 (unregistering): Port device team_slave_0 removed [ 216.151117][ T6119] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_write_data_summaries+0xd4/0x710 [ 216.751547][ T5277] 8021q: adding VLAN 0 to HW filter on device eth10 [ 217.009616][ T8458] loop2: detected capacity change from 0 to 32768 [ 217.019238][ T4932] Bluetooth: hci2: command tx timeout [ 217.090878][ T8458] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.685 (8458) [ 217.218499][ T8458] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 217.218558][ T8458] BTRFS info (device loop2): using blake2b checksum algorithm [ 217.400139][ T8458] BTRFS info (device loop2): enabling ssd optimizations [ 217.400196][ T8458] BTRFS info (device loop2): turning on async discard [ 217.400216][ T8458] BTRFS info (device loop2): enabling free space tree [ 217.400280][ T8458] BTRFS info (device loop2): use zstd compression, level 3 [ 217.517986][ T31] kauditd_printk_skb: 96 callbacks suppressed [ 217.524304][ T31] audit: type=1800 audit(1786191485.636:162): pid=8458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.685" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 217.996021][ T8338] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.996224][ T8338] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.996761][ T8338] bridge_slave_0: entered allmulticast mode [ 218.009945][ T8338] bridge_slave_0: entered promiscuous mode [ 218.025476][ T8338] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.025584][ T8338] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.025739][ T8338] bridge_slave_1: entered allmulticast mode [ 218.040137][ T8338] bridge_slave_1: entered promiscuous mode [ 218.070325][ T5613] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 218.542001][ T8338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.605854][ T8338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.770980][ T190] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 218.855788][ T8338] team0: Port device team_slave_0 added [ 218.875311][ T8338] team0: Port device team_slave_1 added [ 218.956249][ T190] usb 5-1: Using ep0 maxpacket: 8 [ 218.969792][ T190] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 219.003254][ T190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.003307][ T190] usb 5-1: Product: syz [ 219.003342][ T190] usb 5-1: Manufacturer: syz [ 219.003364][ T190] usb 5-1: SerialNumber: syz [ 219.046799][ T190] usb 5-1: config 0 descriptor?? [ 219.086471][ T4932] Bluetooth: hci2: command tx timeout [ 219.131441][ T8338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.131479][ T8338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.131524][ T8338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.133662][ T8338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.133684][ T8338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.133715][ T8338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.249257][ T8520] loop6: detected capacity change from 0 to 131072 [ 219.261488][ T8520] F2FS-fs (loop6): Invalid log sectorsize (67108873) [ 219.261537][ T8520] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 219.265476][ T8520] F2FS-fs (loop6): invalid crc value [ 219.300455][ T190] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 219.376948][ T8520] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 219.409280][ T8520] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 219.409329][ T8520] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 219.464647][ T31] audit: type=1800 audit(1786191487.576:163): pid=8520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.698" name="file1" dev="loop6" ino=7 res=0 errno=0 [ 219.562838][ T5277] 8021q: adding VLAN 0 to HW filter on device eth11 [ 219.613914][ T8338] hsr_slave_0: entered promiscuous mode [ 219.621338][ T8338] hsr_slave_1: entered promiscuous mode [ 219.635291][ T8338] debugfs: 'hsr0' already exists in 'hsr' [ 219.641275][ T8338] Cannot create hsr debugfs directory [ 220.330403][ T190] gspca_sonixj: reg_w1 err -71 [ 220.330515][ T190] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 220.358022][ T190] usb 5-1: USB disconnect, device number 5 [ 220.382569][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 220.546270][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 220.552305][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 220.562994][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 220.577313][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 220.593093][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.603610][ T10] usb 3-1: Product: syz [ 220.603667][ T10] usb 3-1: Manufacturer: syz [ 220.603688][ T10] usb 3-1: SerialNumber: syz [ 220.631160][ T10] usb 3-1: config 0 descriptor?? [ 220.651983][ T10] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 220.661516][ T10] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 221.042874][ T8338] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 221.064206][ T8553] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 221.081588][ T8338] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 221.088695][ T8338] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 221.183646][ T8338] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 221.196439][ T8338] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 221.231400][ T8338] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 221.250414][ T8338] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 221.286527][ T10] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 221.294809][ T10] em28xx 3-1:0.0: Config register raw data: 0xeb [ 221.301318][ T10] em28xx 3-1:0.0: I2S Audio (1 sample rate(s)) [ 221.307749][ T10] em28xx 3-1:0.0: No AC97 audio processor [ 221.400605][ T8338] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 221.776093][ T8579] loop5: detected capacity change from 0 to 2048 [ 221.798460][ T8579] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 221.843961][ T8338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.914954][ T190] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 221.926160][ T10] usb 3-1: USB disconnect, device number 9 [ 222.000895][ T8338] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.043290][ T6816] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.043544][ T6816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.074194][ T5277] 8021q: adding VLAN 0 to HW filter on device eth12 [ 222.085505][ T190] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 222.094830][ T499] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.094976][ T499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.112594][ T190] usb 5-1: config 0 interface 0 altsetting 254 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 222.112653][ T190] usb 5-1: config 0 interface 0 has no altsetting 0 [ 222.112699][ T190] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.157237][ T190] usb 5-1: config 0 descriptor?? [ 222.228004][ T5618] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 222.301971][ T8338] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.377167][ T5618] usb 7-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 222.380906][ T5618] usb 7-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 222.380986][ T5618] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 222.403156][ T5618] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.403241][ T5618] usb 7-1: Product: syz [ 222.403300][ T5618] usb 7-1: Manufacturer: syz [ 222.403349][ T5618] usb 7-1: SerialNumber: syz [ 222.433221][ T5618] usb 7-1: config 0 descriptor?? [ 222.459522][ T5618] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 222.499798][ T10] bridge0: entered promiscuous mode [ 222.693874][ T190] hid_parser_main: 4009 callbacks suppressed [ 222.693937][ T190] samsung 0003:0419:0600.0008: unknown main item tag 0x1 [ 222.693978][ T190] samsung 0003:0419:0600.0008: collection stack underflow [ 222.694009][ T190] samsung 0003:0419:0600.0008: item 0 2 0 12 parsing failed [ 222.733423][ T190] samsung 0003:0419:0600.0008: parse failed [ 222.733539][ T190] samsung 0003:0419:0600.0008: probe with driver samsung failed with error -22 [ 223.477170][ T190] usb 5-1: USB disconnect, device number 6 [ 223.690559][ T8338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.930481][ T8618] loop4: detected capacity change from 0 to 32768 [ 223.940675][ T8618] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.718 (8618) [ 223.970612][ T5618] gspca_sunplus: reg_r err -71 [ 223.976440][ T8618] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 223.976475][ T8618] BTRFS info (device loop4): using sha256 checksum algorithm [ 223.996395][ T5618] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 224.010900][ T5618] usb 7-1: USB disconnect, device number 5 [ 224.108748][ T8618] BTRFS info (device loop4): rebuilding free space tree [ 224.148383][ T8618] BTRFS info (device loop4): disabling free space tree [ 224.148965][ T8618] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 224.149045][ T8618] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 224.190816][ T8618] BTRFS info (device loop4): setting nodatasum [ 224.190867][ T8618] BTRFS info (device loop4): setting nodatacow [ 224.190887][ T8618] BTRFS info (device loop4): turning off barriers [ 224.190932][ T8618] BTRFS info (device loop4): turning on sync discard [ 224.190993][ T8618] BTRFS info (device loop4): force clearing of disk cache [ 224.841034][ T5615] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 225.020038][ T8338] veth0_vlan: entered promiscuous mode [ 225.047154][ T8338] veth1_vlan: entered promiscuous mode [ 225.305911][ T8338] veth0_macvtap: entered promiscuous mode [ 225.319884][ T8665] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 225.355376][ T8338] veth1_macvtap: entered promiscuous mode [ 225.383434][ T8338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.397759][ T8338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.471570][ T499] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.471683][ T499] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.471897][ T499] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.472007][ T499] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.110746][ T6816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.118934][ T6816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.325795][ T6816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.325849][ T6816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.108723][ T8699] »»»»»»: renamed from vlan0 (while UP) [ 227.672829][ T8710] loop6: detected capacity change from 0 to 1024 [ 229.552834][ T8739] Config c/1 of g1 needs at least one function. [ 229.593207][ T8739] udc dummy_udc.0: failed to start g1: -22 [ 229.600832][ T8739] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 229.609364][ T8721] loop4: detected capacity change from 0 to 32768 [ 229.637157][ T8739] UDC core: g1: couldn't find an available UDC or it's busy [ 229.653225][ T8721] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.750 (8721) [ 229.767268][ T8721] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 229.767321][ T8721] BTRFS info (device loop4): using sha256 checksum algorithm [ 230.009911][ T8718] Dynamic Preempt: lazy [ 230.109939][ T8721] BTRFS info (device loop4): enabling ssd optimizations [ 230.109989][ T8721] BTRFS info (device loop4): turning on async discard [ 230.110024][ T8721] BTRFS info (device loop4): enabling free space tree [ 230.335727][ T5615] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 230.488631][ T8771] tipc: Started in network mode [ 230.488691][ T8771] tipc: Node identity ac14140f, cluster identity 4711 [ 230.552733][ T8771] tipc: New replicast peer: 255.255.255.255 [ 230.601798][ T8771] tipc: Enabled bearer , priority 10 [ 231.548918][ T5618] tipc: Node number set to 2886997007 [ 231.682448][ T8790] loop4: detected capacity change from 0 to 1024 [ 231.981931][ T8791] hfsplus: keylen 65060 too large [ 231.981971][ T8791] hfsplus: xattr search failed [ 232.227494][ T4932] Bluetooth: hci4: command 0x0406 tx timeout [ 232.387811][ T8797] loop7: detected capacity change from 0 to 512 [ 232.477871][ T8797] EXT4-fs error (device loop7): ext4_iget_extra_inode:5210: inode #15: comm syz.7.773: corrupted in-inode xattr: e_value size too large [ 232.477938][ T8797] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 232.481617][ T8797] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.773: couldn't read orphan inode 15 (err -117) [ 232.481665][ T8797] loop7: lost filesystem error report for type 5 error -117 [ 232.534012][ T8797] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.767624][ T8797] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.773: Unrecognised inode hash code 4 [ 232.767680][ T8797] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.773: Corrupt directory, running e2fsck is recommended [ 232.963834][ T8338] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.298926][ T8809] loop6: detected capacity change from 0 to 32768 [ 233.300252][ T8809] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 233.301473][ T8809] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.778 (8809) [ 233.319313][ T8809] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 233.319427][ T8809] BTRFS info (device loop6): using crc32c checksum algorithm [ 233.378569][ T30] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 233.434248][ T30] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 233.618243][ T8809] BTRFS info (device loop6): rebuilding free space tree [ 233.664077][ T8809] BTRFS info (device loop6): disabling free space tree [ 233.664171][ T8809] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 233.664213][ T8809] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 233.696912][ T8809] BTRFS info (device loop6): enabling ssd optimizations [ 233.696971][ T8809] BTRFS info (device loop6): disabling tree log [ 233.697006][ T8809] BTRFS info (device loop6): turning on sync discard [ 233.697029][ T8809] BTRFS info (device loop6): force clearing of disk cache [ 234.211451][ T6988] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 234.893554][ T8844] fuse: root generation should be zero [ 234.989077][ T8829] loop7: detected capacity change from 0 to 32768 [ 235.044814][ T8829] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.777 (8829) [ 235.234850][ T8829] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 235.234948][ T8829] BTRFS info (device loop7): using crc32c checksum algorithm [ 235.613845][ T8829] BTRFS info (device loop7): enabling ssd optimizations [ 235.614008][ T8829] BTRFS info (device loop7): turning on flush-on-commit [ 235.614082][ T8829] BTRFS info (device loop7): enabling free space tree [ 235.614141][ T8829] BTRFS info (device loop7): enabling auto defrag [ 235.614184][ T8829] BTRFS info (device loop7): use lzo compression, level 1 [ 235.614249][ T8829] BTRFS info (device loop7): max_inline set to 4096 [ 235.935904][ T8853] loop5: detected capacity change from 0 to 4096 [ 236.275948][ T5749] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 236.465227][ T5749] usb 7-1: Using ep0 maxpacket: 16 [ 236.472394][ T5749] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 236.492483][ T5749] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.492587][ T5749] usb 7-1: Product: syz [ 236.492680][ T5749] usb 7-1: Manufacturer: syz [ 236.492740][ T5749] usb 7-1: SerialNumber: syz [ 236.504423][ T8338] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 236.653260][ T8853] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 237.480392][ T8853] ntfs3(loop5): ino=21, The size of extended attributes must not exceed 64KiB [ 238.088796][ T5749] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 238.118874][ T5749] usb 7-1: USB disconnect, device number 6 [ 238.856234][ T5752] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 239.025097][ T5752] usb 6-1: Using ep0 maxpacket: 16 [ 239.031716][ T5752] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 239.050557][ T5752] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 239.050664][ T5752] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 239.050760][ T5752] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 239.050824][ T5752] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 239.050887][ T5752] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 239.050950][ T5752] usb 6-1: config 0 has no interface number 0 [ 239.051060][ T5752] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 239.051119][ T5752] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 239.051185][ T5752] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 239.052466][ T5752] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 239.052529][ T5752] usb 6-1: config 0 interface 125 has no altsetting 0 [ 239.052594][ T5752] usb 6-1: config 0 interface 125 has no altsetting 2 [ 239.204941][ T5752] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.205070][ T5752] usb 6-1: Product: syz [ 239.205164][ T5752] usb 6-1: Manufacturer: syz [ 239.205204][ T5752] usb 6-1: SerialNumber: syz [ 239.259034][ T5752] usb 6-1: config 0 descriptor?? [ 239.284957][ T5752] usb 6-1: selecting invalid altsetting 2 [ 239.904392][ C0] usb 6-1: async_complete: urb error -71 [ 239.904499][ C0] usb 6-1: async_complete: urb error -71 [ 239.913403][ T5752] get_1284_register: usb error -71 [ 239.993132][ T5752] usb 6-1: USB disconnect, device number 4 [ 240.725392][ T8922] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 240.725519][ T8922] overlayfs: failed to set xattr on upper [ 240.725581][ T8922] overlayfs: ...falling back to redirect_dir=nofollow. [ 240.725610][ T8922] overlayfs: ...falling back to index=off. [ 240.725625][ T8922] overlayfs: ...falling back to uuid=null. [ 240.725650][ T8922] overlayfs: ...falling back to xino=off. [ 241.142015][ T8925] input: syz1 as /devices/virtual/input/input11 [ 241.544063][ T4932] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 241.572801][ T4932] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 241.586561][ T4932] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 241.606751][ T4932] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 241.624424][ T4932] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 242.445183][ T8962] loop6: detected capacity change from 0 to 8192 [ 243.242307][ T8974] loop4: detected capacity change from 0 to 512 [ 243.286375][ T8974] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 243.448043][ T8974] EXT4-fs (loop4): 1 truncate cleaned up [ 243.538768][ T8974] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.725702][ T4932] Bluetooth: hci5: command tx timeout [ 244.037249][ T5615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.392086][ T6819] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.122236][ T6819] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.805275][ T4932] Bluetooth: hci5: command tx timeout [ 246.153669][ T9011] netlink: 'syz.4.813': attribute type 1 has an invalid length. [ 246.153765][ T9011] netlink: 'syz.4.813': attribute type 4 has an invalid length. [ 246.154891][ T9011] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.813'. [ 246.169238][ T9011] netlink: 'syz.4.813': attribute type 1 has an invalid length. [ 246.169303][ T9011] netlink: 'syz.4.813': attribute type 4 has an invalid length. [ 246.169344][ T9011] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.813'. [ 246.519716][ T6819] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.704716][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 247.145372][ T9025] loop7: detected capacity change from 0 to 256 [ 247.155999][ T9025] exfat: Deprecated parameter 'namecase' [ 247.156115][ T9025] exfat: Bad value for 'fmask' [ 247.312046][ T9026] netlink: 'syz.6.817': attribute type 1 has an invalid length. [ 247.331349][ T6819] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.853515][ T9036] netlink: 'syz.5.820': attribute type 10 has an invalid length. [ 247.886705][ T4932] Bluetooth: hci5: command tx timeout [ 248.123281][ T9030] bond3: (slave geneve2): making interface the new active one [ 248.346304][ T9030] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 248.355837][ T6816] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 248.499199][ T9036] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.512705][ T9036] bond0: (slave team0): Enslaving as an active interface with an up link [ 248.526088][ T6816] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 248.526765][ T6803] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 248.535613][ T6803] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 248.689385][ T30] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 248.834857][ T30] usb 5-1: Using ep0 maxpacket: 32 [ 248.840836][ T30] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 248.854545][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.854600][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.854642][ T30] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 248.854755][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.903138][ T30] usb 5-1: config 0 descriptor?? [ 249.567051][ T9060] loop7: detected capacity change from 0 to 256 [ 249.595118][ T30] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.000A/input/input12 [ 249.678632][ T9060] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 249.770367][ T30] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.000A/input/input13 [ 249.966186][ T4932] Bluetooth: hci5: command tx timeout [ 250.024576][ T30] kye 0003:0458:5011.000A: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 250.404168][ T5708] usb 5-1: USB disconnect, device number 7 [ 250.479695][ T9067] fido_id[9067]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 250.925226][ T9072] loop5: detected capacity change from 0 to 4096 [ 250.984406][ T9072] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 251.065282][ T9072] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=84ec118, mo2=0003] [ 251.129566][ T9072] EXT4-fs error (device loop5): ext4_quota_enable:7260: comm syz.5.831: inode #4096: comm syz.5.831: iget: illegal inode # [ 251.129673][ T9072] loop5: lost filesystem error report for type 5 error -117 [ 251.146106][ T9072] EXT4-fs error (device loop5): ext4_quota_enable:7263: comm syz.5.831: Bad quota inode: 4096, type: 2 [ 251.146169][ T9072] loop5: lost filesystem error report for type 5 error -117 [ 251.149854][ C0] EXT4-fs (loop5): error count since last fsck: 2 [ 251.149923][ C0] EXT4-fs (loop5): initial error at time 1786191519: ext4_quota_enable:7260 [ 251.149986][ C0] EXT4-fs (loop5): last error at time 1786191519: ext4_quota_enable:7263 [ 251.207587][ T9072] EXT4-fs warning (device loop5): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-117, ino=4096). Please run e2fsck to fix. [ 251.319953][ T9072] EXT4-fs (loop5): mount failed [ 251.541776][ T6819] bridge_slave_1: left allmulticast mode [ 251.541899][ T6819] bridge_slave_1: left promiscuous mode [ 251.571133][ T6819] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.767587][ T6819] bridge_slave_0: left allmulticast mode [ 251.767720][ T6819] bridge_slave_0: left promiscuous mode [ 251.776195][ T6819] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.098508][ T6819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.111826][ T6819] bond0 (unregistering): Released all slaves [ 254.138170][ T6819] bond1 (unregistering): Released all slaves [ 254.833420][ T8940] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.861793][ T8940] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.862179][ T8940] bridge_slave_0: entered allmulticast mode [ 254.871174][ T8940] bridge_slave_0: entered promiscuous mode [ 255.112018][ T8940] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.112317][ T8940] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.120799][ T8940] bridge_slave_1: entered allmulticast mode [ 255.133419][ T8940] bridge_slave_1: entered promiscuous mode [ 255.142104][ T9135] netlink: 128 bytes leftover after parsing attributes in process `syz.5.843'. [ 255.623844][ T8940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.716426][ T6819] hsr_slave_0: left promiscuous mode [ 255.723864][ T6819] hsr_slave_1: left promiscuous mode [ 255.733821][ T6819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.733865][ T6819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.769175][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.774497][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.813499][ T6819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.813544][ T6819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.868749][ T5752] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 255.891920][ T6819] veth1_macvtap: left promiscuous mode [ 255.891987][ T6819] veth0_macvtap: left promiscuous mode [ 255.892143][ T6819] veth1_vlan: left promiscuous mode [ 255.892219][ T6819] veth0_vlan: left promiscuous mode [ 256.028311][ T5752] usb 8-1: Using ep0 maxpacket: 32 [ 256.040991][ T5752] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 256.061438][ T5752] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 256.061565][ T5752] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 256.061663][ T5752] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 256.061800][ T5752] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 256.061862][ T5752] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 256.061928][ T5752] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 256.062062][ T5752] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.143257][ T5752] usb 8-1: config 0 descriptor?? [ 256.470303][ T5752] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 256.649613][ T6819] team0 (unregistering): Port device team_slave_1 removed [ 256.691992][ T6819] team0 (unregistering): Port device team_slave_0 removed [ 256.733788][ C0] usblp0: nonzero read bulk status received: -71 [ 256.742994][ T5708] usb 8-1: USB disconnect, device number 2 [ 256.784016][ T9171] netlink: 4 bytes leftover after parsing attributes in process `syz.6.850'. [ 257.011490][ T9150] usblp0: removed [ 257.098334][ T8940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.199830][ T9171] bridge_slave_1: left allmulticast mode [ 257.199881][ T9171] bridge_slave_1: left promiscuous mode [ 257.200139][ T9171] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.240124][ T9171] bridge_slave_0: left allmulticast mode [ 257.240174][ T9171] bridge_slave_0: left promiscuous mode [ 257.264709][ T9171] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.467849][ T9180] netlink: 'syz.5.853': attribute type 2 has an invalid length. [ 257.478882][ T9180] netlink: 'syz.5.853': attribute type 2 has an invalid length. [ 257.677431][ T5277] 8021q: adding VLAN 0 to HW filter on device eth13 [ 257.753078][ T8940] team0: Port device team_slave_0 added [ 257.779142][ T8940] team0: Port device team_slave_1 added [ 257.989669][ T8940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.989714][ T8940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.989760][ T8940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.039362][ T8940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.039409][ T8940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.039453][ T8940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.510807][ T8940] hsr_slave_0: entered promiscuous mode [ 258.525830][ T8940] hsr_slave_1: entered promiscuous mode [ 258.526649][ T8940] debugfs: 'hsr0' already exists in 'hsr' [ 258.526700][ T8940] Cannot create hsr debugfs directory [ 259.553409][ T9222] loop4: detected capacity change from 0 to 2048 [ 259.583309][ T9222] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 259.616439][ T9226] loop6: detected capacity change from 0 to 512 [ 259.677193][ T9222] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 260.553016][ T8940] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 260.624030][ T8940] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 260.639717][ T8940] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 260.694976][ T25] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 260.802246][ T8940] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 260.830501][ T8940] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 260.852238][ T25] usb 8-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 260.867335][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.867383][ T25] usb 8-1: Product: syz [ 260.867420][ T25] usb 8-1: Manufacturer: syz [ 260.867441][ T25] usb 8-1: SerialNumber: syz [ 260.897231][ T25] usb 8-1: config 0 descriptor?? [ 260.910692][ T8940] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 260.936821][ T25] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 260.963836][ T8940] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 261.087871][ T9244] loop4: detected capacity change from 0 to 512 [ 261.116312][ T8940] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 261.144242][ T9244] EXT4-fs: Ignoring removed oldalloc option [ 261.183748][ T9244] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 261.261479][ T9244] EXT4-fs (loop4): 1 truncate cleaned up [ 261.285908][ T9244] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.415761][ T5277] 8021q: adding VLAN 0 to HW filter on device eth14 [ 261.600537][ T5615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.145756][ T8940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.232216][ T8940] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.366103][ T25] gspca_stk1135: reg_w 0xf err -71 [ 262.367198][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 262.367248][ T25] gspca_stk1135: Sensor write failed [ 262.367288][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 262.367303][ T25] gspca_stk1135: Sensor write failed [ 262.367341][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 262.367356][ T25] gspca_stk1135: Sensor read failed [ 262.367393][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 262.367407][ T25] gspca_stk1135: Sensor read failed [ 262.367419][ T25] gspca_stk1135: Detected sensor type unknown (0x0) [ 262.367467][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 262.367483][ T25] gspca_stk1135: Sensor read failed [ 262.367520][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 262.367534][ T25] gspca_stk1135: Sensor read failed [ 262.367571][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 262.367587][ T25] gspca_stk1135: Sensor write failed [ 262.367625][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 262.367640][ T25] gspca_stk1135: Sensor write failed [ 262.396770][ T499] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.399216][ T499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.472942][ T25] stk1135 8-1:0.0: probe with driver stk1135 failed with error -71 [ 262.506835][ T25] usb 8-1: USB disconnect, device number 3 [ 262.675858][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.676112][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.799508][ T9283] loop6: detected capacity change from 0 to 256 [ 262.835388][ T5617] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 262.868700][ T31] audit: type=1800 audit(1786191530.986:164): pid=9283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.885" name="bus" dev="loop6" ino=1048644 res=0 errno=0 [ 262.991382][ T9286] overlayfs: failed to clone upperpath [ 263.007041][ T5617] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 263.032858][ T5617] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.032913][ T5617] usb 5-1: Product: syz [ 263.032949][ T5617] usb 5-1: Manufacturer: syz [ 263.032969][ T5617] usb 5-1: SerialNumber: syz [ 263.063491][ T5617] usb 5-1: config 0 descriptor?? [ 263.414838][ T25] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 263.563579][ T5617] usb 5-1: USB disconnect, device number 8 [ 263.586070][ T25] usb 8-1: Using ep0 maxpacket: 16 [ 263.592151][ T25] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 263.605970][ T25] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 263.623849][ T25] usb 8-1: string descriptor 0 read error: -22 [ 263.624005][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.116070][ T25] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 264.165560][ T25] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/0003:0926:3333.000B/input/input14 [ 264.410576][ T9308] bond0: (slave bond_slave_1): Releasing backup interface [ 264.621074][ T25] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.01 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 264.641208][ T25] usb 8-1: USB disconnect, device number 4 [ 264.924577][ T9321] fido_id[9321]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 265.062227][ T9326] loop6: detected capacity change from 0 to 256 [ 265.191564][ T9326] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 265.339651][ T9332] loop7: detected capacity change from 0 to 2048 [ 265.400475][ T9332] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 265.596562][ T9338] netlink: 24 bytes leftover after parsing attributes in process `syz.4.897'. [ 265.659172][ T9338] netlink: 160 bytes leftover after parsing attributes in process `syz.4.897'. [ 265.960294][ T5277] 8021q: adding VLAN 0 to HW filter on device eth15 [ 265.999255][ T8940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.984554][ T6802] IPVS: starting estimator thread 0... [ 267.181535][ T8940] veth0_vlan: entered promiscuous mode [ 267.189751][ T9377] IPVS: using max 26 ests per chain, 62400 per kthread [ 267.329611][ T8940] veth1_vlan: entered promiscuous mode [ 267.682142][ T8940] veth0_macvtap: entered promiscuous mode [ 267.826974][ T8940] veth1_macvtap: entered promiscuous mode [ 267.898215][ T8940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.945872][ T8940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.038371][ T6807] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.047206][ T6819] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.048238][ T6819] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.070610][ T6802] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.800347][ T6802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.800480][ T6802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.899472][ T6802] tipc: Subscription rejected, illegal request [ 269.098881][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.098925][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.409019][ T5277] 8021q: adding VLAN 0 to HW filter on device eth16 [ 270.278266][ T5752] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 270.465273][ T5752] usb 9-1: Using ep0 maxpacket: 32 [ 270.474057][ T5752] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 270.497946][ T5752] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 270.498067][ T5752] usb 9-1: config 0 has no interface number 0 [ 270.530784][ T5752] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.530903][ T5752] usb 9-1: Product: syz [ 270.531003][ T5752] usb 9-1: Manufacturer: syz [ 270.531043][ T5752] usb 9-1: SerialNumber: syz [ 270.578820][ T5752] usb 9-1: config 0 descriptor?? [ 270.609511][ T5752] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 270.638517][ T9453] atomic_op ffff88807f55b9e0 conn xmit_atomic 0000000000000000 [ 270.657285][ T9423] loop7: detected capacity change from 0 to 32768 [ 270.692480][ T9423] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 270.826681][ T9423] XFS (loop7): Ending clean mount [ 270.861452][ T5752] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 270.886091][ T5752] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 270.953819][ T31] audit: type=1800 audit(1786191539.066:165): pid=9423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.921" name="file1" dev="loop7" ino=4422 res=0 errno=0 [ 271.154540][ T9442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.155785][ T9442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.277490][ T31] audit: type=1800 audit(1786191539.396:166): pid=9466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.921" name="file1" dev="loop7" ino=4422 res=0 errno=0 [ 271.443425][ C0] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 271.449169][ T5801] usb 9-1: USB disconnect, device number 2 [ 271.511751][ T5801] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 271.598912][ T5801] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 271.611447][ T5801] quatech2 9-1:0.51: device disconnected [ 271.631288][ T8338] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 272.345492][ T5732] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 272.510537][ T5732] usb 7-1: Using ep0 maxpacket: 8 [ 272.514064][ T5732] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 272.521539][ T5732] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 272.521699][ T5732] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 272.521764][ T5732] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 272.521823][ T5732] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 272.521883][ T5732] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 272.522015][ T5732] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.790056][ T5732] usb 7-1: usb_control_msg returned -32 [ 272.790140][ T5732] usbtmc 7-1:16.0: can't read capabilities [ 273.471904][ T9507] scsi_dev_info_list_add_str: bad dev info string '¼QT' '' '' [ 273.826286][ T25] usb 7-1: USB disconnect, device number 7 [ 273.865747][ T9519] loop4: detected capacity change from 0 to 64 [ 274.149619][ T9520] Process accounting resumed [ 274.482054][ T9522] netlink: 'syz.6.951': attribute type 4 has an invalid length. [ 275.320093][ T9538] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 275.740600][ T9555] netlink: 'syz.5.962': attribute type 83 has an invalid length. [ 276.584581][ T9584] loop7: detected capacity change from 0 to 512 [ 276.624600][ T9584] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 276.624648][ T9584] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 276.726515][ T9584] Quota error (device loop7): do_insert_tree: Free block already used in tree: block 1 [ 276.726679][ T9584] Quota error (device loop7): qtree_write_dquot: Error -5 occurred while creating quota [ 276.726746][ T9584] EXT4-fs error (device loop7): ext4_acquire_dquot:7069: comm syz.7.965: Failed to acquire dquot type 1 [ 276.726777][ T9584] loop7: lost filesystem error report for type 5 error -5 [ 276.738163][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 276.738189][ C1] EXT4-fs (loop7): initial error at time 1786191544: ext4_acquire_dquot:7069 [ 276.738213][ C1] EXT4-fs (loop7): last error at time 1786191544: ext4_acquire_dquot:7069 [ 276.796938][ T9584] EXT4-fs (loop7): Remounting filesystem read-only [ 276.797072][ T9584] EXT4-fs (loop7): 1 truncate cleaned up [ 276.869480][ T9584] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.248648][ T8338] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.800791][ T9587] loop8: detected capacity change from 0 to 32768 [ 277.932329][ T9587] XFS (loop8): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 278.047798][ T9587] XFS (loop8): Ending clean mount [ 278.105723][ T31] audit: type=1800 audit(1786191546.216:167): pid=9587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.966" name="file1" dev="loop8" ino=4422 res=0 errno=0 [ 278.282023][ T31] audit: type=1800 audit(1786191546.396:168): pid=9613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.966" name="file1" dev="loop8" ino=4422 res=0 errno=0 [ 278.545552][ T8940] XFS (loop8): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 278.901866][ T9629] ip6erspan0: entered allmulticast mode [ 279.322233][ T9635] loop7: detected capacity change from 0 to 256 [ 280.561893][ T9634] loop4: detected capacity change from 0 to 32768 [ 280.591361][ T9634] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 280.766378][ T9634] XFS (loop4): Ending clean mount [ 281.063058][ T9662] loop7: detected capacity change from 0 to 2048 [ 281.117912][ T9662] EXT4-fs: Ignoring removed mblk_io_submit option [ 281.222246][ T9662] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.644040][ T8338] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.752665][ T5615] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 282.120876][ T9681] loop7: detected capacity change from 0 to 128 [ 282.192675][ T9681] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 282.650282][ T9681] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 282.721292][ T9681] ext2 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.839684][ T9674] loop8: detected capacity change from 0 to 32768 [ 282.914242][ T9674] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 283.181384][ T9674] XFS (loop8): Ending clean mount [ 283.335076][ T8338] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 283.352825][ T9705] loop6: detected capacity change from 0 to 4096 [ 283.379953][ T9705] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 283.380090][ T9705] EXT4-fs (loop6): Test dummy encryption mode enabled [ 283.448813][ T9705] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec118, mo2=0003] [ 283.449158][ T9705] System zones: 0-5 [ 283.468495][ T9705] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.610752][ T31] audit: type=1800 audit(1786191551.726:169): pid=9705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.996" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 284.453141][ T6988] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.608956][ T8940] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 285.935285][ T190] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 286.110070][ T190] usb 7-1: New USB device found, idVendor=17ef, idProduct=61ae, bcdDevice= 0.00 [ 286.122427][ T190] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 286.122551][ T190] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 16, setting to 8 [ 286.146986][ T190] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 286.147057][ T190] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.162450][ T190] usb 7-1: config 0 descriptor?? [ 286.171677][ T9741] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 286.171988][ T9741] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 286.665574][ T190] lenovo 0003:17EF:61AE.000C: unknown main item tag 0x0 [ 286.665735][ T190] lenovo 0003:17EF:61AE.000C: unknown main item tag 0x0 [ 286.665839][ T190] lenovo 0003:17EF:61AE.000C: unknown main item tag 0x0 [ 286.665927][ T190] lenovo 0003:17EF:61AE.000C: unknown main item tag 0x0 [ 286.665997][ T190] lenovo 0003:17EF:61AE.000C: unknown main item tag 0x0 [ 286.666067][ T190] lenovo 0003:17EF:61AE.000C: unknown main item tag 0x0 [ 286.666153][ T190] lenovo 0003:17EF:61AE.000C: unknown main item tag 0x0 [ 286.740527][ T190] lenovo 0003:17EF:61AE.000C: hidraw0: USB HID v0.08 Device [HID 17ef:61ae] on usb-dummy_hcd.6-1/input0 [ 286.847302][ T190] usb 7-1: USB disconnect, device number 8 [ 287.269066][ T9760] fido_id[9760]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 287.434434][ T9763] sctp: [Deprecated]: syz.8.1009 (pid 9763) Use of struct sctp_assoc_value in delayed_ack socket option. [ 287.434434][ T9763] Use struct sctp_sack_info instead [ 287.974831][ T5617] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 288.131820][ T5617] usb 9-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 288.147190][ T5617] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.182233][ T5617] usb 9-1: config 0 descriptor?? [ 288.212541][ T5617] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 289.025003][ T5617] usb 9-1: USB disconnect, device number 3 [ 289.469821][ T9775] loop6: detected capacity change from 0 to 32768 [ 290.218679][ T9766] loop7: detected capacity change from 0 to 131072 [ 290.228159][ T9766] F2FS-fs (loop7): Wrong NAT boundary, start(2560) end(3584) blocks(12321792) [ 290.228205][ T9766] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 290.554334][ T9766] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 290.573049][ T9766] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 290.573144][ T9766] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 291.383607][ T9828] loop6: detected capacity change from 0 to 512 [ 291.427531][ T9828] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 291.460459][ T9828] EXT4-fs (loop6): orphan cleanup on readonly fs [ 291.480034][ T9828] EXT4-fs error (device loop6): ext4_orphan_get:1403: comm syz.6.1020: inode #15: comm syz.6.1020: iget: illegal inode # [ 291.480093][ T9828] loop6: lost filesystem error report for type 5 error -117 [ 291.493121][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 291.493147][ C1] EXT4-fs (loop6): initial error at time 1786191559: ext4_orphan_get:1403 [ 291.493172][ C1] EXT4-fs (loop6): last error at time 1786191559: ext4_orphan_get:1403 [ 291.579410][ T9828] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.1020: couldn't read orphan inode 15 (err -117) [ 291.579467][ T9828] loop6: lost filesystem error report for type 5 error -117 [ 291.640205][ T9828] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 291.737658][ T9832] loop8: detected capacity change from 0 to 1024 [ 291.752607][ T9832] EXT4-fs: Ignoring removed oldalloc option [ 291.752656][ T9832] EXT4-fs: Ignoring removed oldalloc option [ 291.779034][ T9832] EXT4-fs (loop8): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 291.976934][ T9832] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.114503][ T6988] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.551563][ T8940] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.801514][ T9875] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1041'. [ 293.815766][ T5618] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 293.976943][ T5618] usb 8-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 293.991473][ T5618] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 293.991528][ T5618] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 294.018526][ T5618] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.018576][ T5618] usb 8-1: Product: syz [ 294.018613][ T5618] usb 8-1: Manufacturer: syz [ 294.018634][ T5618] usb 8-1: SerialNumber: syz [ 294.047257][ T9870] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 294.055291][ T9870] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 294.067605][ T5618] usbserial_generic 8-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 294.067651][ T5618] usbserial_generic 8-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 294.067701][ T5618] usbserial_generic 8-1:1.0: generic converter detected [ 294.127639][ T5618] usb 8-1: generic converter now attached to ttyUSB0 [ 294.238119][ T9878] netlink: 'syz.5.1042': attribute type 10 has an invalid length. [ 294.300046][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 294.310044][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 294.405269][ T5618] usb 8-1: USB disconnect, device number 5 [ 294.449772][ T5618] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 294.450543][ T5618] usbserial_generic 8-1:1.0: device disconnected [ 294.662650][ T5749] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 294.679585][ T5749] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 294.937704][ T9886] loop8: detected capacity change from 0 to 64 [ 294.961816][ T9886] hfs: unable to locate alternate MDB [ 294.961851][ T9886] hfs: continuing without an alternate MDB [ 295.054307][ T31] audit: type=1800 audit(1786191563.166:170): pid=9886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1045" name="file1" dev="loop8" ino=21 res=0 errno=0 [ 295.330202][ C1] Unknown status report in ack skb [ 295.757180][ T6802] IPVS: starting estimator thread 0... [ 295.846099][ T9902] IPVS: using max 26 ests per chain, 62400 per kthread [ 296.435723][ T5618] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 296.586641][ T5618] usb 7-1: Using ep0 maxpacket: 8 [ 296.594254][ T5618] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 296.620133][ T5618] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.620189][ T5618] usb 7-1: Product: syz [ 296.620229][ T5618] usb 7-1: Manufacturer: syz [ 296.620253][ T5618] usb 7-1: SerialNumber: syz [ 296.674264][ T5618] usb 7-1: config 0 descriptor?? [ 296.898253][ T5618] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 297.743236][ T5618] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 297.775316][ T5618] usb 7-1: USB disconnect, device number 9 [ 297.994414][ T9956] netlink: 'syz.5.1072': attribute type 13 has an invalid length. [ 298.215315][ T5801] openvswitch: cpu_id mismatch with handler threads [ 298.482390][ T9966] netlink: 'syz.4.1078': attribute type 11 has an invalid length. [ 298.883739][ T9973] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1080'. [ 299.165927][ T5801] openvswitch: cpu_id mismatch with handler threads [ 299.998224][ T6802] ------------[ cut here ]------------ [ 299.998260][ T6802] timer_delete_sync(&sdp->delay_work) [ 299.998301][ T6802] WARNING: kernel/rcu/srcutree.c:706 at cleanup_srcu_struct+0x3aa/0x890, CPU#1: kworker/u8:27/6802 [ 300.029800][ T6802] Modules linked in: [ 300.036335][ T6802] CPU: 1 UID: 0 PID: 6802 Comm: kworker/u8:27 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 300.047909][ T6802] Tainted: [L]=SOFTLOCKUP [ 300.052317][ T6802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 300.062607][ T6802] Workqueue: nbd-del nbd_dev_remove_work [ 300.068611][ T6802] RIP: 0010:cleanup_srcu_struct+0x3aa/0x890 [ 300.074567][ T6802] Code: b9 8a 00 48 83 7d 00 00 4c 8b 74 24 10 0f 85 dd 03 00 00 41 ff c5 41 83 e5 0f 41 83 fd 07 0f 86 0e ff ff ff e9 ab 00 00 00 90 <0f> 0b 90 4c 8d b5 00 02 00 00 4c 89 f3 48 c1 eb 03 48 b8 00 00 00 [ 300.094732][ T6802] RSP: 0018:ffffc900064079d0 EFLAGS: 00010202 [ 300.101187][ T6802] RAX: 0000000000000001 RBX: 0000607edad694c0 RCX: 0000000000000000 [ 300.109283][ T6802] RDX: 0000000000000006 RSI: ffffffff8e253559 RDI: 00000000ffffffff [ 300.117409][ T6802] RBP: ffffe8ffffc754c0 R08: ffffffff9058fb7f R09: 1ffffffff20b1f6f [ 300.125892][ T6802] R10: dffffc0000000000 R11: fffffbfff20b1f70 R12: ffff8880358bd800 [ 300.133915][ T6802] R13: 0000000000000000 R14: ffffffff8e5237d0 R15: 1ffffffff1ca47de [ 300.142115][ T6802] FS: 0000000000000000(0000) GS:ffff88812500c000(0000) knlGS:0000000000000000 [ 300.151197][ T6802] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 300.157913][ T6802] CR2: 0000001b2dc1cff8 CR3: 0000000078bee000 CR4: 00000000003526f0 [ 300.166033][ T6802] DR0: 0000000000006cb3 DR1: 0000000000000000 DR2: 0000000000000000 [ 300.174046][ T6802] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 300.182133][ T6802] Call Trace: [ 300.185512][ T6802] [ 300.188487][ T6802] blk_mq_free_tag_set+0x617/0x780 [ 300.194060][ T6802] ? process_scheduled_works+0x97e/0x1630 [ 300.200134][ T6802] nbd_dev_remove_work+0x4f/0xe0 [ 300.205242][ T6802] process_scheduled_works+0xc4e/0x1630 [ 300.210877][ T6802] ? __pfx_process_scheduled_works+0x10/0x10 [ 300.217065][ T6802] ? assign_work+0x3cf/0x5d0 [ 300.221703][ T6802] worker_thread+0xa47/0xfb0 [ 300.226421][ T6802] kthread+0x388/0x470 [ 300.230539][ T6802] ? __pfx_worker_thread+0x10/0x10 [ 300.235795][ T6802] ? __pfx_kthread+0x10/0x10 [ 300.240470][ T6802] ret_from_fork+0x514/0xb70 [ 300.245171][ T6802] ? __pfx_ret_from_fork+0x10/0x10 [ 300.250343][ T6802] ? __switch_to+0xc89/0x1420 [ 300.255137][ T6802] ? __pfx_kthread+0x10/0x10 [ 300.260657][ T6802] ret_from_fork_asm+0x1a/0x30 [ 300.265561][ T6802] [ 300.268618][ T6802] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 300.276123][ T6802] CPU: 1 UID: 0 PID: 6802 Comm: kworker/u8:27 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 300.287290][ T6802] Tainted: [L]=SOFTLOCKUP [ 300.291772][ T6802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 300.301876][ T6802] Workqueue: nbd-del nbd_dev_remove_work [ 300.307573][ T6802] Call Trace: [ 300.310888][ T6802] [ 300.313850][ T6802] vpanic+0x56c/0xa60 [ 300.317903][ T6802] ? __pfx__printk+0x10/0x10 [ 300.322532][ T6802] ? __pfx_vpanic+0x10/0x10 [ 300.327119][ T6802] ? is_bpf_text_address+0x292/0x2b0 [ 300.332452][ T6802] ? is_bpf_text_address+0x26/0x2b0 [ 300.337698][ T6802] panic+0xc5/0xd0 [ 300.341497][ T6802] ? __pfx_panic+0x10/0x10 [ 300.345972][ T6802] ? ret_from_fork_asm+0x1a/0x30 [ 300.350961][ T6802] __warn+0x315/0x4c0 [ 300.354989][ T6802] ? cleanup_srcu_struct+0x3aa/0x890 [ 300.360330][ T6802] ? cleanup_srcu_struct+0x3aa/0x890 [ 300.365665][ T6802] __report_bug+0x276/0x570 [ 300.370230][ T6802] ? cleanup_srcu_struct+0x3aa/0x890 [ 300.375568][ T6802] ? __pfx___report_bug+0x10/0x10 [ 300.380638][ T6802] ? do_raw_spin_lock+0x12b/0x2f0 [ 300.385716][ T6802] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 300.391158][ T6802] ? cleanup_srcu_struct+0x3aa/0x890 [ 300.396940][ T6802] report_bug+0x16a/0x220 [ 300.401326][ T6802] ? cleanup_srcu_struct+0x3aa/0x890 [ 300.406679][ T6802] ? cleanup_srcu_struct+0x3ac/0x890 [ 300.412042][ T6802] handle_bug+0x9c/0x200 [ 300.416363][ T6802] exc_invalid_op+0x1a/0x50 [ 300.420926][ T6802] asm_exc_invalid_op+0x1a/0x20 [ 300.425824][ T6802] RIP: 0010:cleanup_srcu_struct+0x3aa/0x890 [ 300.431779][ T6802] Code: b9 8a 00 48 83 7d 00 00 4c 8b 74 24 10 0f 85 dd 03 00 00 41 ff c5 41 83 e5 0f 41 83 fd 07 0f 86 0e ff ff ff e9 ab 00 00 00 90 <0f> 0b 90 4c 8d b5 00 02 00 00 4c 89 f3 48 c1 eb 03 48 b8 00 00 00 [ 300.451527][ T6802] RSP: 0018:ffffc900064079d0 EFLAGS: 00010202 [ 300.457643][ T6802] RAX: 0000000000000001 RBX: 0000607edad694c0 RCX: 0000000000000000 [ 300.465684][ T6802] RDX: 0000000000000006 RSI: ffffffff8e253559 RDI: 00000000ffffffff [ 300.473728][ T6802] RBP: ffffe8ffffc754c0 R08: ffffffff9058fb7f R09: 1ffffffff20b1f6f [ 300.481922][ T6802] R10: dffffc0000000000 R11: fffffbfff20b1f70 R12: ffff8880358bd800 [ 300.489940][ T6802] R13: 0000000000000000 R14: ffffffff8e5237d0 R15: 1ffffffff1ca47de [ 300.497987][ T6802] blk_mq_free_tag_set+0x617/0x780 [ 300.503164][ T6802] ? process_scheduled_works+0x97e/0x1630 [ 300.508944][ T6802] nbd_dev_remove_work+0x4f/0xe0 [ 300.513982][ T6802] process_scheduled_works+0xc4e/0x1630 [ 300.519620][ T6802] ? __pfx_process_scheduled_works+0x10/0x10 [ 300.525657][ T6802] ? assign_work+0x3cf/0x5d0 [ 300.530302][ T6802] worker_thread+0xa47/0xfb0 [ 300.534976][ T6802] kthread+0x388/0x470 [ 300.539104][ T6802] ? __pfx_worker_thread+0x10/0x10 [ 300.544268][ T6802] ? __pfx_kthread+0x10/0x10 [ 300.548921][ T6802] ret_from_fork+0x514/0xb70 [ 300.553576][ T6802] ? __pfx_ret_from_fork+0x10/0x10 [ 300.558753][ T6802] ? __switch_to+0xc89/0x1420 [ 300.563484][ T6802] ? __pfx_kthread+0x10/0x10 [ 300.568167][ T6802] ret_from_fork_asm+0x1a/0x30 [ 300.573005][ T6802] [ 300.576667][ T6802] Kernel Offset: disabled [ 300.581024][ T6802] Rebooting in 86400 seconds..