last executing test programs: 3m4.837329386s ago: executing program 1 (id=651): mount(0x0, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./mnt/trace_marker\x00', 0x1, 0x1a) openat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt/trace_pipe\x00', 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000002c0)='./sys_sec\x00', 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000003c0), 0x2, 0x143102) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="94", 0xf000}, {0x0}], 0x2) shutdown(0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) read(r1, &(0x7f00000004c0)=""/28, 0xfffffffffffffdee) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000640)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000ac0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x9972, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x5575fb9d55d41c01}, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000bc0), 0xffffffffffffffff) connect$inet6(r3, &(0x7f0000000c00)={0xa, 0x4e24, 0x5, @loopback, 0x4}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)={0x34, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0xf582f2b530579bd4) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, 0x0, 0x0) 3m2.857043494s ago: executing program 1 (id=654): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x80) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000007c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000840), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000880), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000008c0)=0x6) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone3(&(0x7f0000002980)={0xa690b000, &(0x7f0000002a00)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$FUSE(r4, &(0x7f0000002a40)={0x2020}, 0x2020) pidfd_getfd(r5, 0xffffffffffffffff, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000004a80)={0x0, 0x0, &(0x7f0000004ac0)={&(0x7f0000004b00)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x9, 0x9}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000840}, 0x4c840) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) 2m56.188696985s ago: executing program 1 (id=669): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x18, r1, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x37}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) 2m55.839915274s ago: executing program 1 (id=672): mount(0x0, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./mnt/trace_marker\x00', 0x1, 0x1a) openat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt/trace_pipe\x00', 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000002c0)='./sys_sec\x00', 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000003c0), 0x2, 0x143102) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="94", 0xf000}, {0x0}], 0x2) shutdown(0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) read(r1, &(0x7f00000004c0)=""/28, 0xfffffffffffffdee) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000640)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000ac0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x9972, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x5575fb9d55d41c01}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000bc0), 0xffffffffffffffff) connect$inet6(r3, &(0x7f0000000c00)={0xa, 0x4e24, 0x5, @loopback, 0x4}, 0x1c) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, 0x0, 0x0) 2m55.079518512s ago: executing program 1 (id=677): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@empty, @in=@loopback, 0x4e22, 0x5, 0x4e22, 0x7fff, 0xa, 0x20, 0x20, 0x58}, {0xfffffffffffffffb, 0x3, 0x10, 0x4, 0x7, 0x7, 0xffffffff80000001, 0x7}, {0xffffffffffffffff, 0x572, 0x1, 0x6}, 0x5, 0x6e6bc0, 0x0, 0x1, 0x1, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0x32}, 0xab11e6417b62bccf, @in=@multicast1, 0x34ff, 0x4, 0x2, 0xb, 0x5, 0x5, 0x4de0}}, 0xe8) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000380), 0x80002c1, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8, &(0x7f00000004c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@uuid_off}]}) syz_open_procfs(0x0, &(0x7f0000000500)='mounts\x00') memfd_create(0x0, 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000002580), 0xfdef) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x86, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000025c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000002680)={0x20, r5, 0x3e8c4ddb697c9f8f, 0x70bd25, 0x0, {0x4}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x0) syz_mount_image$ext4(&(0x7f00000026c0)='ext4\x00', &(0x7f0000002700)='./file1\x00', 0x2200002, &(0x7f0000002740)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@noauto_da_alloc}]}, 0x1, 0x572, &(0x7f0000002800)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002d80)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000002e00)='./bus\x00', &(0x7f0000002e40), 0x8, &(0x7f0000002e80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './proc'}}]}) openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder_logs/transactions_hashed\x00', 0x0, 0x0) 2m53.52927783s ago: executing program 1 (id=678): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$pppl2tp(0x18, 0x1, 0x1) accept4(r2, 0x0, 0x0, 0x80800) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x3, &(0x7f0000000500)=@framed, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000600)='reno\x00', 0x5) 2m36.244497239s ago: executing program 32 (id=678): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$pppl2tp(0x18, 0x1, 0x1) accept4(r2, 0x0, 0x0, 0x80800) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x3, &(0x7f0000000500)=@framed, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000600)='reno\x00', 0x5) 2m29.231179559s ago: executing program 4 (id=734): r0 = memfd_create(&(0x7f0000000100)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz\x03\x00\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92 \x00*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\f\xc9\xc5H\x0f;\xd3\xe2\at\x9bJ\xe6\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xee\xdc\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)\xdeA\x1ed\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97\xf6\xb8\xebN\xe2\x18\x04[\xabW}\xb1\xffo\xae~=\x9dd\x9f\x92\xd2[\xb8\xb6\x1a\x02c\xa1\xd1H\xb7@\x06\x96s\xef\xee\x92\xfaC\x15+\x84%h1O\xe2\xb8\xd3\x19R\x00\f\n\x1cpEn\xad\xa7IRf\xc65\x15<}\xb8\x05\xe4\xb7\x9e\xf3\xda\xdavzB\xf8qj\x9e\xe4\xbd\x05\xcfx\xb5\x12\t\xe0\xf2\'f\xf4+\xb3\xdeA6\x10O\xdd\x9c\xf7B', 0x7) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000500)={0x0, 0x1, 0x9, 0x800000000000000, 0x4000}) 2m28.852732389s ago: executing program 4 (id=735): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x810) 2m21.961932686s ago: executing program 4 (id=749): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, [0xfffffffd, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfff]}}) r1 = socket$inet6(0xa, 0x3, 0x82) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x7, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r3, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) listen(0xffffffffffffffff, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, 0x0) r6 = fsopen(&(0x7f0000000880)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) r8 = creat(&(0x7f00000008c0)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r8, &(0x7f0000000900)={'#! ', './file0'}, 0xb) execve(&(0x7f0000000940)='./file0\x00', 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@loopback, @in=@local, 0x0, 0x100, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff3, 0x0, 0x1, 0xfffffffffffffffd}, {0xbad, 0x80000001, 0x4, 0xffffffffffffff7f}, 0x1, 0x0, 0x1, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x2b}, 0x2, @in=@empty, 0x3504, 0x1, 0x0, 0x0, 0xffffffff, 0x88, 0x4}}, 0xe8) socket$packet(0x11, 0x3, 0x300) 2m20.95011809s ago: executing program 4 (id=751): syz_mount_image$ext4(&(0x7f00000017c0)='ext4\x00', &(0x7f0000001800)='./sys\x00', 0x210000, &(0x7f0000001840)={[{@dax_never}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@lazytime}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000001900)="$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") syz_mount_image$fuse(0x0, &(0x7f0000001e80)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001ec0)='./file0\x00', &(0x7f0000001f00), 0x8, &(0x7f0000001f40)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000001f80), &(0x7f0000001fc0)='./file0\x00', 0x2008820, &(0x7f0000002000)=ANY=[], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002040)='pids.current\x00', 0x26e1, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000002080)='./file1\x00', 0x0) 2m18.737619934s ago: executing program 4 (id=757): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc41a, &(0x7f0000000880)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@prjquota, 0x2e}, {@nouid32}, {@journal_dev={'journal_dev', 0x3d, 0xa5b}}, {@abort}, {@barrier}, {@noquota}], [{@permit_directio}, {@smackfsfloor={'smackfsfloor', 0x3d, 'nouid32'}}, {@hash}, {@pcr={'pcr', 0x3d, 0x27}}, {@context={'context', 0x3d, 'user_u'}}, {@dont_hash}], 0x2c}, 0x1, 0x480, &(0x7f0000000200)="$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") syz_mount_image$udf(&(0x7f0000001c00), &(0x7f0000001c40)='./file1\x00', 0x10048, &(0x7f0000000040)=ANY=[], 0x67, 0xc54, &(0x7f0000001cc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000002940)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002980)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000029c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000002a40)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000002ac0), 0x651, 0x0) recvmmsg(r0, &(0x7f0000002b00), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002b40)=0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000002bc0)) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000040)="0a000300010000", 0x7) 2m13.624572118s ago: executing program 4 (id=766): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x65c, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x801, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x80001, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x7, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x40f, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0x400, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x62, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x50f6, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0x2d, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000001100)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001140)={'syzkaller0\x00', 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x10022, 0x0) sendmsg$kcm(r5, &(0x7f0000001180)={&(0x7f00000011c0)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001280)="c2", 0x1}], 0x1}, 0x20004014) 2m13.030917213s ago: executing program 33 (id=766): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x65c, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x801, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x80001, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x7, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x40f, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0x400, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x62, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x50f6, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0x2d, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000001100)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001140)={'syzkaller0\x00', 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x10022, 0x0) sendmsg$kcm(r5, &(0x7f0000001180)={&(0x7f00000011c0)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001280)="c2", 0x1}], 0x1}, 0x20004014) 11.612836499s ago: executing program 3 (id=1120): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./tracing\x00', &(0x7f0000000700)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./tracing/dynamic_events\x00', 0x1, 0x0) unshare(0x22020600) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000780), 0x140, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000007c0)='./file3\x00', 0xc1c0, 0x0) truncate(&(0x7f0000000800)='./file3\x00', 0x80000000) ioctl$RTC_UIE_ON(r4, 0x7003) writev(r3, &(0x7f0000000840)=[{&(0x7f0000000880)="438ab0a1568f0273fbac7aed04a25b22e52bc57fc877042ab7b5a85ca463be1aedf58bbb923a864762e8f23ce6a1e138ae567352fcaf53e8dc95046606d274552c06667074823a852dcfdf28b9319b94cb5ab521e59a6918e56f4a37501ef1f862eedd7e5c0cc4e5ba13524f231b5b377e4395d7f641a048a9212f16cf00"/140, 0x8c}], 0x1) mknodat$md(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x6180, 0x0) r5 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0) ioctl$SET_ARRAY_INFO(r5, 0x40480923, &(0x7f0000000280)={0x0, 0x5a, 0x0, 0x0, 0x5, 0x800, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000}) ioctl$ADD_NEW_DISK(r5, 0x40140921, &(0x7f0000000300)={0x0, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r5, 0x40140921, &(0x7f0000000340)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r5, 0x400c0930, &(0x7f0000000380)) pwrite64(r5, &(0x7f00000003c0)="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0x20, 0x1000) pread64(r5, &(0x7f0000000400)=""/512, 0x200, 0x10000) 10.839640678s ago: executing program 3 (id=1121): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@empty, @in=@loopback, 0x4e22, 0x5, 0x4e22, 0x7fff, 0xa, 0x20, 0x20, 0x58}, {0xfffffffffffffffb, 0x3, 0x10, 0x4, 0x7, 0x7, 0xffffffff80000001, 0x7}, {0xffffffffffffffff, 0x572, 0x1, 0x6}, 0x5, 0x6e6bc0, 0x0, 0x1, 0x1, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0x32}, 0xab11e6417b62bccf, @in=@multicast1, 0x34ff, 0x4, 0x2, 0xb, 0x5, 0x5, 0x4de0}}, 0xe8) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000380), 0x80002c1, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8, &(0x7f00000004c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@uuid_off}]}) syz_open_procfs(0x0, &(0x7f0000000500)='mounts\x00') write$binfmt_misc(0xffffffffffffffff, &(0x7f0000002580), 0xfdef) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x86, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000025c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000002680)={0x20, r5, 0x3e8c4ddb697c9f8f, 0x70bd25, 0x0, {0x4}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x0) syz_mount_image$ext4(&(0x7f00000026c0)='ext4\x00', &(0x7f0000002700)='./file1\x00', 0x2200002, &(0x7f0000002740)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@noauto_da_alloc}]}, 0x1, 0x572, &(0x7f0000002800)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002d80)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002dc0)='./proc\x00', 0x180) mount$overlay(0x0, &(0x7f0000002e00)='./bus\x00', &(0x7f0000002e40), 0x8, &(0x7f0000002e80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './proc'}}]}) openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder_logs/transactions_hashed\x00', 0x0, 0x0) 9.274975255s ago: executing program 6 (id=1122): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e40)=ANY=[@ANYBLOB="38010000100001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200010000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000012346c000000ac1414bb200000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001000000000000000000480003006465666c61746500"/240], 0x138}}, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000f80)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}, "00001234"}}}}, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xffffedc7fff, 0x1000, 0x2, 0x1}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0x20, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) r2 = socket(0x840000000002, 0x3, 0x100) sendmsg$kcm(r2, &(0x7f00000014c0)={&(0x7f0000000600)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'gcm(des3_ede)\x00'}, 0x80, &(0x7f0000001140)=[{&(0x7f0000000fc0)="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", 0xfa}, {&(0x7f00000010c0)="e369a099bca278092c1b275bdd7bf9b8fb46188d26cd33f017fc47c33f5cccff5e580ccf74e194c479840aed09719f56b67e2cb52ed75f27998c6c3188d50466eb57ffe6a446db888d102382f6e982874c90bc29d22040ac88ce9eec8d4d08710127a94bde4db2c8089323408365ce47157fc7b65cd842900b1f27", 0x7b}], 0x2, &(0x7f0000001180)=[{0xb0, 0x116, 0x80, "887ba5399f2d101c26d4f4a5b581ebff55179c7bb65d2bb627358ac5196986d5ba469816c8592d42cdeeda752e0f8114761831c6ac51d93277f9ed45c12f727f786d9afe962e6fb04c3210e1341e34221b5acad51ce0228697b30a4b1f021cb7ac9f8ffa70c8d778e62f27010648ba5073636fa21135db436e2a7bd4dfd47184b0e7d33825ca5d031aa8156202e9c24e2c0522c99aec6544ccd2788e94400d"}, {0x88, 0x10e, 0x9, "c1f3c8ed1a352425b64711c2b05372dae1d70dab01cc01968284ff2529a840fd2ed6519de50f0e6d050daa04439946ba7f7d8bc8febbe1cbd6f65476d1d81218496d63ac74e7d9a14090e574dab1377790d91af155b8633c2e71b4064806f0cdc6cffb1544264f0dd7a39f6c664f5c72c5"}, {0x18, 0x116, 0x7fffffff, "97bf1af1e6"}, {0x20, 0x6, 0xfffffffc, "66980a84ec54796c0a8b"}, {0xd8, 0x112, 0x101, "bddfc2c38ab0ca0a37db50dec05c5322e0ae7bca7d61cee3e879b87e036708ca91ff18545884ce59161f2f0a0362ad13baae4f0f3f78fc580ae1a05dd959c1bf6c3bf3de169d4b2cd7024a68d67f160565d99ebce8084a3398230392096e4397b9022d7fbab417c352bba63a8586e1d8a86f4f64f22ba27d27c3b7ec4431af12457a756876b54ace7b099249d9b9d14f5aca0037694a810663ff89b1d4e04db17bdffb03a40a33c253d42ae4e18d2a022726f9f2c6aab12f3b2a58deeca56739428ae22495c4"}, {0xc0, 0x103, 0x2, "84a3554ad204c12627b8f70b8544e510738f2d80ceb8b20cd1822c410bf83f98be51ba839f804955c364892e4f665c2fe4858c31205455f5d3bcb982a14835c9ec987e4a3f2fea693847f776b3b40109a3cbaed0e21adc8541142fdfb48e2c223317d4d39af19a97b34361fdf8ded7db223cc3c627703ea9aae3131756c79f82eedfba6c4cb09ce15a47b3969ae6604a2399fbba16b2dd6614baa99a4613ba6399d5bad91f49ae878c2933"}], 0x308}, 0x20000000) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x912d0eb9cc551e10, 0x3, 0x6, 0x5, 0x1c, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x700, 0x9, 0x20000001}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000400)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000480)={'wg2\x00', 0x0}) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000500)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f00000005c0)="ca2a287c2308934ba463b37552b031af3ffb25ee3316f9bd3e831f250458799dd0f3cace900449d10409ef8cd53fcb42cb55ff3e7ddbc186401f69", 0x3b}], 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="1c000000000000000000001908800000", @ANYRES32=r4, @ANYBLOB="ffffffffe000000200000000f40000000000000000000000070000004404a22094040000442c987364010100000000020a010100000000046401010000000000e0000001000008000000000000000401890f8f0f3557c960281f35ff6840ea891330ac1414aaffffffffffffffff000000004408540000000009442c39430a01010100000003e0000002000000087f0000010000008164010102ffffff00ac1414bb00000c06863c00000001000bad9446d9d637f22402060d5818725a11b1ab761e94cb0005befbb2000a4385349ff146a25b060ff772f50d1a36d041a2f1b2ee99441c67817f00000100008001ac1414240000007bac1414bb000000050000000000001400000000000000000000000100000008000000000000001c000000000000000000000008000000", @ANYRES32=r5, @ANYBLOB="0000000000000000000000001c000000000000000000000008000000", @ANYRES32=r6, @ANYBLOB="640101006401010000000000"], 0x170}, 0x40) sendmmsg$inet(r2, &(0x7f0000000880), 0x4000095, 0x0) getpeername$packet(r2, 0x0, &(0x7f00000008c0)) r7 = socket(0x1e, 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000900), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000b80)=ANY=[], 0x32600) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000007, 0x12, 0xffffffffffffffff, 0x91796000) sendmsg$NFT_BATCH(r8, &(0x7f0000000bc0)={0x0, 0xfffffffffffffcb8, 0x0}, 0x40040) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="63812bbd7000fcdbdf250300000008000100000000002800078024000180080001"], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000cc0), r2) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f0000000d00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="240006000000fbdbdf251000000008000700ff7f0000080006000000000008000900d09b00000800090000800000b7e597c4d235fba8a2756cd6168fad267708e8fc14b79fce6ddb127fc68de0308a27ff49980f798265bc73e0331fe020947141d79d68ac894ad1c4750c67e7e702bed2d6afedf0ad1668e29d"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x1) socket$nl_route(0x10, 0x3, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r11, 0x0) 9.274688625s ago: executing program 2 (id=1123): mount(0x0, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./mnt/trace_marker\x00', 0x1, 0x1a) openat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt/trace_pipe\x00', 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000002c0)='./sys_sec\x00', 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000003c0), 0x2, 0x143102) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="94", 0xf000}, {0x0}], 0x2) shutdown(0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) read(r1, &(0x7f00000004c0)=""/28, 0xfffffffffffffdee) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000640)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000ac0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x9972, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x5575fb9d55d41c01}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000bc0), 0xffffffffffffffff) connect$inet6(r4, &(0x7f0000000c00)={0xa, 0x4e24, 0x5, @loopback, 0x4}, 0x1c) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, 0x0, 0x0) 8.648488081s ago: executing program 5 (id=1124): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040), 0x4) 6.982515111s ago: executing program 3 (id=1126): unshare(0x22020600) r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r0, 0x29, 0x24, 0x0, &(0x7f0000001d80)=0xfffffffffffffeb6) 6.981960931s ago: executing program 5 (id=1127): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) socket$pptp(0x18, 0x1, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 6.955092352s ago: executing program 2 (id=1128): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$exfat(&(0x7f0000000fc0), &(0x7f0000000400)='./file0\x00', 0x2000085c, &(0x7f0000001280)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES16, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRESHEX], 0xc1, 0x151a, &(0x7f0000005500)="$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") socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x2000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x488c9) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = syz_open_dev$mtd(&(0x7f00000000c0), 0xfffffffffffffffa, 0x100) read$FUSE(r3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x7}}, @ip_tos_int={{0x14}}], 0x50}, 0x40010) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd28, 0x25cfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0x6}, {0x10, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xffff8000}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) 6.845933354s ago: executing program 6 (id=1130): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x61) sendmmsg$inet(r0, &(0x7f0000000140), 0x4000095, 0x0) setsockopt$inet_buf(r0, 0x0, 0x4, 0x0, 0x0) 6.520292392s ago: executing program 0 (id=1131): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./tracing\x00', &(0x7f0000000700)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./tracing/dynamic_events\x00', 0x1, 0x0) unshare(0x22020600) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000780), 0x140, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000007c0)='./file3\x00', 0xc1c0, 0x0) truncate(&(0x7f0000000800)='./file3\x00', 0x80000000) ioctl$RTC_UIE_ON(r4, 0x7003) writev(r3, &(0x7f0000000840)=[{&(0x7f0000000880)="438ab0a1568f0273fbac7aed04a25b22e52bc57fc877042ab7b5a85ca463be1aedf58bbb923a864762e8f23ce6a1e138ae567352fcaf53e8dc95046606d274552c06667074823a852dcfdf28b9319b94cb5ab521e59a6918e56f4a37501ef1f862eedd7e5c0cc4e5ba13524f231b5b377e4395d7f641a048a9212f16cf00"/140, 0x8c}], 0x1) mknodat$md(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x6180, 0x0) r5 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0) ioctl$SET_ARRAY_INFO(r5, 0x40480923, &(0x7f0000000280)={0x0, 0x5a, 0x0, 0x0, 0x5, 0x800, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000}) ioctl$ADD_NEW_DISK(r5, 0x40140921, &(0x7f0000000300)={0x0, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r5, 0x40140921, &(0x7f0000000340)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r5, 0x400c0930, &(0x7f0000000380)) pwrite64(r5, &(0x7f00000003c0)="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0x20, 0x1000) pread64(r5, &(0x7f0000000400)=""/512, 0x200, 0x10000) 6.517436712s ago: executing program 5 (id=1132): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc41a, &(0x7f0000000880)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@prjquota, 0x2e}, {@nouid32}, {@journal_dev={'journal_dev', 0x3d, 0xa5b}}, {@abort}, {@barrier}, {@noquota}], [{@permit_directio}, {@smackfsfloor={'smackfsfloor', 0x3d, 'nouid32'}}, {@hash}, {@pcr={'pcr', 0x3d, 0x27}}, {@context={'context', 0x3d, 'user_u'}}, {@dont_hash}], 0x2c}, 0x1, 0x480, &(0x7f0000000200)="$eJzs289vFFUcAPDvTFvKT1sRf4CoVfzR+KOlBZWDF4wmXExM9IDHWgpBCjW0JkKIVA94NJw8qkcT/wJPcjHqSeNV78aEGC6iiWTM7M6Upe0uy263C+znk2x33ts3896bN2/75r3ZAHrWSP4nidgaEb9FxFBE9C1PMFJ9u3rl3PQ/V85NJ5Flb/2V5LvF31fOTZdJk+J9SxEYTZeiVpg/c/bE1OzszOkiPL5w8v3x+TNnXzh+curYzLGZU5MHDuzfN/HyS5Mvrkk9t+Vl3fXR3O6dh965+Mb04Yvv/vhNXritxee19agabjvPkRipewKeavvot5dtxXvdBue2lPf1/ogYqPT/oeirhKqG4vVPulo4oKOyLMsGV8QujQAWM+AulkS3SwB0R/mPPr//LV/rOPzoussHqzdAeb2vFq/qJ/2RFmkGau5v19pIRBxe/PeL/BWrzkMAAKyt7/Lxz/Orjf/SeKAm3T3F2tBwRNwbEdsj4r6I2BER90dU0j4YEQ/dYv4jy8LX879WTEL9sqn12t3c5YORvFKsbd04/itHfzHcV4S2Veo/kBw9PjuztzgnozEwmIcnGuRx6bVfP6v3We34L3/l+ZdjwaIcf/Yvm6A7MrUw1U6da13+uDIHeH5l/ZOllYAkInZGxK4Wjr8xIo4/+/XupYgNNQctNK5/A/0tFGiZ7KuIZ6rtvxjL6h81RW2wPjm+MWZn9o6XV8VKP/184c16+d+8/Tsrb//N1foPLm//wnBSu147f+t5XPj907r3NK1e/xuStyvb5eX04dTCwumJiA3J4sr4yev7luEyfV7/0T2r9//tEde+LPZ7OCLyi/iRiHg0Ih4ryv54RDwREXsa1P+HV598r/X6d1Ze/yOrfv/Va/9b3+g78f239fJvrv33V7ZGi5hmvv+aLWA75w4AAADuFGnlGfgkHVvaTtOxseoz/Dticzo7N7/w3NG5D04dqT4rPxwDaTnTNVQzHzpRzLmU4clirrgM76vMG2dZlm2qhMem52Y7taYONGdLnf6f+6Ov26UDOq6yjnbg8+YS+4UX3FVuWEcf6F45gPW3Bs/RAHco/R96l/4PPStdLfJ8xNX1Lwqw3vz/h96l/0Pv0v+hd+n/0JPa+V1/o43thzp15Dtx41JE1EvT1/KRByOi3RI+vaXV3SPt9lltfqN8pm0pJl0l8X+dyT0Wb5Ymb8dmD3g+1uvUdfmLCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYI38HwAA//9ouuZP") syz_mount_image$udf(&(0x7f0000001c00), &(0x7f0000001c40)='./file1\x00', 0x10048, &(0x7f0000000040)=ANY=[], 0x67, 0xc54, &(0x7f0000001cc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000002940)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002980)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000029c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002a40)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000002ac0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000002b00), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002b40)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, &(0x7f0000002bc0)) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000040)="0a000300010000", 0x7) 6.345975327s ago: executing program 2 (id=1133): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = syz_open_procfs(0x0, 0x0) process_mrelease(r0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000540)='./bus\x00', 0x38880, &(0x7f0000000280), 0x1, 0x51a, &(0x7f0000000f00)="$eJzs3c9vI1cdAPCvnThxfnSTlh4AQbu0hQWt1km8bVT1AOWIUCVEjyBtQ+KNothxFDulCXtIz1yRqMSJHvkDOPfEgRsXBDcuywGJHxFog8TBaMaTrDdrb6xNYqfx5yON5r2ZWX+/L868t36O/QIYWTcj4iAiJiLig4iYy47nsi3ebW/JdY8OH6weHT5YzUWr9f4/c+n55Fh0/JvETPaYxYj44acRP8k9Hbext7+5Uq1WdrL6QrO2vdDY27+zUVtZr6xXtsrl5aXlxbfvvlW+sLa+WpvISl99+IeDb/0sSWs2O9LZjovUbnrhJE5iPCK+fxnBhmAsa8/EsBPhueQj4qWIeC29/+diLH02AYDrrNWai9ZcZx0AuO7y6RxYLl/K5gJmI58vldpzeC/HdL5abzRv36/vbq2158rmo5C/v1GtLGZzhfNRyCX1pbT8uF4+Vb8bES9GxC8mp9J6abVeXRvmf3wAYITNnBr//zPZHv8BgGuuOOwEAICB6zH+Hww6DwBgcLz+B4DRY/wHgNFTTL/DYWrYaQAAA+T1PwCMHuM/AIyUH7z3XrK1jrLvv177cG93s/7hnbVKY7NU210trdZ3tkvr9fp6+p09tbMer1qvby+9GbsfzX97u9FcaOzt36vVd7ea99Lv9b5XKaRX+WQBAAzTi69+9udcMiK/M5Vu0bGWQ2GomQGXLT/sBIChGetRBq4/q33B6DrHa3zTA3BNdFmi9wnF6PIBoVar1bq8lIBLdutL5v9hVHXM//srYBgx5vxhdJn/h9HVauX6XfM/+r0QALjazPEDPd7/fynb/yZ7c+DHa6ev+OQyswIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICr7Xj931K2Fvhs5POlUsQLETEfhdz9jWplMSJuRMSfJguTSX1pyDkDAOeV/1suW//r1twbs0+cemXmpDgRET/91fu//Gil2dz5Y8RE7l+Tx8ebn2THy4PPHgA42/E4ne47Xsg/OnywerwNMp+/fzciiu34R4cTcXQSfzzG030xChEx/e9cVm/LdcxdnMfBxxHxxW7tz8VsOgfSXvn0dPwk9gsDjZ9/In4+PdfeJz+LL1xALjBqPkv6n3e73X/5uJnuu9//xbSHOr+s/0seavUo7QMfxz/u/8Z69H83+43x5u++1y5NPX3u44gvj0ccxz7q6H+O4+d6xH+jz/h/+corr/U61/p1xK3oHr8z1kKztr3Q2Nu/s1FbWa+sV7bK5eWl5cW3775VXkjnqBd6jwb/eOf2jV7nkvZP94hfPKP9X++z/Z/+74Mffe0Z8b/5erf4+Xj5GfGTMfEbfcZfmf5tsde5JP5aj/af9fzf7jP+w7/uP7VsOAAwPI29/c2VarWy86zCjaOIs675XBaiv4t/n/2wrkTOI11InoUrkEbXwnc6jszEJcaa6HEz/vz19q/pZETnL3ar9VyxevUYFzHrBlwFJzd9RPx32MkAAAAAAAAAAAAAAABdDeLTUcNuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANfX/wMAAP//jMfJaQ==") madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x8010, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/17], 0x1, 0x14e0, &(0x7f0000002a80)="$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") truncate(&(0x7f0000000100)='./file1\x00', 0x20fdfffffe) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000480)="0f011a66b83c2900000f23c80f21f866350c00d0000f23f866b9800000c00f326635000100000f30ba2100ed3e6664660f54e866660f3881b8cfa8baf80c66b8345dc08966efbafc0c66ed66b9ee0900000f320fb4020f01c4", 0x7e}], 0x1, 0x1, 0x0, 0x0) r4 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, 0x0, 0x0) recvmmsg(r4, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f00000022c0), 0x0, &(0x7f0000002300)=""/12, 0xc}, 0x90}], 0x1, 0x40002122, 0x0) 6.345403687s ago: executing program 3 (id=1134): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x80) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000640)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000007c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000840), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000880), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000008c0)=0x6) r4 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone3(0x0, 0x0) read$FUSE(r4, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000004a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000840}, 0x4c840) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x20000004) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) 5.448351478s ago: executing program 0 (id=1135): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./tracing\x00', &(0x7f0000000700)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./tracing/dynamic_events\x00', 0x1, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000007c0)='./file3\x00', 0xc1c0, 0x0) truncate(&(0x7f0000000800)='./file3\x00', 0x80000000) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) writev(r3, &(0x7f0000000840)=[{&(0x7f0000000880)="438ab0a1568f0273fbac7aed04a25b22e52bc57fc877042ab7b5a85ca463be1aedf58bbb923a864762e8f23ce6a1e138ae567352fcaf53e8dc95046606d274552c06667074823a852dcfdf28b9319b94cb5ab521e59a6918e56f4a37501ef1f862eedd7e5c0cc4e5ba13524f231b5b377e4395d7f641a048a9212f16cf00"/140, 0x8c}], 0x1) mknodat$md(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x6180, 0x0) r4 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0) ioctl$SET_ARRAY_INFO(r4, 0x40480923, &(0x7f0000000280)={0x0, 0x5a, 0x0, 0x0, 0x5, 0x800, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000}) ioctl$ADD_NEW_DISK(r4, 0x40140921, &(0x7f0000000300)={0x0, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r4, 0x40140921, &(0x7f0000000340)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r4, 0x400c0930, &(0x7f0000000380)) pwrite64(r4, &(0x7f00000003c0)="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0x20, 0x1000) pread64(r4, &(0x7f0000000400)=""/512, 0x200, 0x10000) 4.56072977s ago: executing program 6 (id=1136): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000005240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005300)={0x90, 0x0, 0x2, {0x0, 0x3, 0xeb1e, 0x5cd3f9da, 0x7, 0x5, {0xfffffffffffffffd, 0x5, 0x7, 0x6, 0x0, 0xf, 0xa734, 0x200, 0x7, 0xc890c63e415ce913, 0x101, 0x0, 0x0, 0xffff0000, 0x10}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x90) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x48801}, 0x4000004) sendmsg$key(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000640)=0x4) r2 = syz_open_dev$MSR(&(0x7f0000000680), 0x0, 0x0) read$msr(r2, &(0x7f00000053c0)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f000001e3c0)=0x410000002) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r3, 0x4b30, 0x8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000003c0)={0x2, {0x2, 0x103, 0xfe, 0x6, 0x1f0}}) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000400)={0x2, {0x2, 0x107, 0x500, 0x100, 0x1, 0x4000}}) creat(&(0x7f0000000bc0)='./bus\x00', 0x10) 4.521505641s ago: executing program 0 (id=1137): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@empty, @in=@loopback, 0x4e22, 0x5, 0x4e22, 0x7fff, 0xa, 0x20, 0x20, 0x58}, {0xfffffffffffffffb, 0x3, 0x10, 0x4, 0x7, 0x7, 0xffffffff80000001, 0x7}, {0xffffffffffffffff, 0x572, 0x1, 0x6}, 0x5, 0x6e6bc0, 0x0, 0x1, 0x1, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0x32}, 0xab11e6417b62bccf, @in=@multicast1, 0x34ff, 0x4, 0x2, 0xb, 0x5, 0x5, 0x4de0}}, 0xe8) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000380), 0x80002c1, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8, &(0x7f00000004c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@uuid_off}]}) memfd_create(0x0, 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000002580), 0xfdef) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x86, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000025c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000002680)={0x20, r5, 0x3e8c4ddb697c9f8f, 0x70bd25, 0x0, {0x4}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x0) syz_mount_image$ext4(&(0x7f00000026c0)='ext4\x00', &(0x7f0000002700)='./file1\x00', 0x2200002, &(0x7f0000002740)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@noauto_da_alloc}]}, 0x1, 0x572, &(0x7f0000002800)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") syz_mount_image$fuse(0x0, &(0x7f0000002d80)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002dc0)='./proc\x00', 0x180) mount$overlay(0x0, &(0x7f0000002e00)='./bus\x00', &(0x7f0000002e40), 0x8, &(0x7f0000002e80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './proc'}}]}) openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder_logs/transactions_hashed\x00', 0x0, 0x0) 3.245592972s ago: executing program 3 (id=1138): mount(0x0, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./mnt/trace_marker\x00', 0x1, 0x1a) openat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt/trace_pipe\x00', 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000002c0)='./sys_sec\x00', 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000003c0), 0x2, 0x143102) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="94", 0xf000}, {0x0}], 0x2) shutdown(0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) read(r1, &(0x7f00000004c0)=""/28, 0xfffffffffffffdee) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000640)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000ac0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x9972, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x5575fb9d55d41c01}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000bc0), 0xffffffffffffffff) connect$inet6(r4, &(0x7f0000000c00)={0xa, 0x4e24, 0x5, @loopback, 0x4}, 0x1c) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, 0x0, 0x0) 3.173077684s ago: executing program 6 (id=1139): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x411}, {r0, 0x8004}], 0x2, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000680)="5766b100", 0x10) listen(r0, 0x7866) shutdown(r0, 0x0) 3.128172885s ago: executing program 2 (id=1140): write(0xca, &(0x7f0000001500)="040e0c013d2000", 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000001840)={0x18, 0x0, {0x3, @remote, 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 3.068395476s ago: executing program 5 (id=1141): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="0564200100"], 0x5) 2.139569039s ago: executing program 0 (id=1142): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 2.10712537s ago: executing program 3 (id=1143): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x810) 2.041121591s ago: executing program 6 (id=1144): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$exfat(&(0x7f0000000fc0), &(0x7f0000000400)='./file0\x00', 0x2000085c, &(0x7f0000001280)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES16, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRESHEX], 0xc1, 0x151a, &(0x7f0000005500)="$eJzs3AuYjtX6MPB1r7UexjTpbZLDsO51P7xpsEyS5JCQQ5IkSZJTQtIkSUJiyClpSEKOk+QwhOQwjUnjfD7knDTZ0iRJSEiyvku7/2fvr713//3V9/m+Pffvuhbrnue97/d+3nuueZ/nva6Zb3qOqteifu1mRCT+EPjrfylCiBghxDAhxDVCiEAIUSm+Uvyl4wUUpPyxJ2F/rgfTr3QH7Eri+edtPP+8jeeft/H88zaef97G88/beP55G8+fsbxs+5xi1/LKu+sKf/7v4Y89K/tD+P3/P0hu+clfbCx/fa9/I4Xnn7fx/PM2nn/exvPP23j+eRvP/z9frX9xjOeft/H8GcvLrvTnz/8frZhfX7Ir3cefuq7wtx9jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsTzinL9MCyH+a3+l+2KMMcYYY4wxxtifx+e/0h0wxhhjjDHGGGPs/zwQUiihRSDyifwiRhQQseIqESeuFgXFNSIirhXx4jpRSFwvCosioqgoJhJEcVFCGIHCChKhKClKiai4QZQWN4pEUUaUFeWEE+VFkrhJVBA3i4riFlFJ3Coqi9tEFVFVVBPVxe2ihrhD1BS1RG1xp6gj6op6or64SzQQd4uG4h7RSNwrGov7RBNxv2gqHhDNxIOiuXhItBAPi5biEdFKtBZtRFvR7n8r/wXRV7wo+on+IkUMEAPFS2KQGCyGiKFimHhZDBeviBHiVZEqRopR4jUxWrwuxog3xFgxTowXb4oJYqKYJCaLKWKqSBNviWnibTFdvCNmiJlilpgt0sUcMVe8K+aJ+WKBeE8sFO+LRWKxWCKWigzxgcgUy0SW+FAsFx+JbLFCrBSrxGqxRqwV68R6sUFsFJvEZrFFbBXbxHbxsdghdopdYrfYI/aKfeITsV98Kg6Iz0SO+PzfzD/7v+T3AgECJEjQoCEf5IMYiIFYiIU4iIOCUBAiEIF4iIdCUAgKQ2EoCkUhARKgBJQABAQCgpJQEqIQhdJQGhIhEcpCWXDgIAmSoALcDBWhIlSCSlAZKkMVqApVoTpUhxpQA2pCTagNtaEO1IF6UA/ugrvgbmgIDaERNILG0BiaQBNoCk2hGTSD5tAcWkALaAktoRW0gjbQBtpBO2gP7aEDdIBO0Ak6Q2foAl0gGZKhK3SFbtANukN36AE9oCf0hF7QG3rDC/ACvAgvQn+oIwfAQBgIg2AQDIGhMBRehuHwCrwCr0IqjIRR8Bq8Bq/DGDgDY2EcjIfxUENOhEkwGUhOhTRIg2kwDabDdJgBM2EmzIZ0mANzYS7Mg/kwH96DhfD+ufdhMSyGpZABGZAJyyALsmA5nIVsWAErYRWshjWwGtbBelgHG2ETbIQtsAW2wTb4GD6GnbATdsNu2At74RP4BD6FTyEVciAHDsJBOASH4DAchlzIhSNwBI7CUTgGx+A4HIcTcBJOwUk4DafhDJyFc3AOzsN5uADPJXzVfG+ZDalCXqKllvlkPhkjY2SsjJVxMk4WlAVlREZkvIyXhWQhWVgWlkVlUZkgE2QJWUKiREkylCVlSRmVUVlalpaJMlGWlWWlk04mySRZQVaQFWVFWUneKivL22QVWVV2dNVldVlDdnI1ZS1ZW9aWdWRdWU/Wl/VlA9lANpQNZSPZSDaWjWUTeb9sKgfAEHhQXppMCzkSWspR0Eq2lm1kW/k6PCrbyzHQQXaUneTjchyMhS6yvUuWT8muchJ0k8/IyfCs7CGnQk/5vOwle8s+8gXZV3Zw/WR/OQMGyIFyNgySg+UQOVTOg7ry0sTqyVdlqhwpR8nX5FJ4XY6Rb8ixcpwcL9+UE+REOUlOllPkVJkm35LT5NtyunxHzpAz5Sw5W6bLOXKufFfOk/PlAvmeXCjfl4vkYrlELpUZ8gOZKZfJLPmhXC4/ktlyhVwpV8nVco1cK9fJ9XKD3Cg3yc1yi9wqt8nt8mO5Q+6Uu+RuuUfulfvkJ3K//FQekJ/JHPm5PCj/Ig/JL+Rh+aXMlV/JI/JreVR+I4/Jb+Vx+Z08IU/KU/J7eVr+IM/Is/Kc/FGelz/JC/JneVF6KRQoqZTSKlD5VH4VowqoWHWVilNXq4LqGhVR16p4dZ0qpK5XhVURVVQVUwmquCqhjEJlFalQlVSlVFTdoEqrG1WiKqPKqnLKqfIqSd2kKqibVUV1i6qkblWV1W2qiqqqqqnq6nZVQ92haqpaqra6U9VRdVU9VV/dpRqou1VDdY9qpO5VjdV9qom6XzVVD6hm6kHVXD2kWqiHVUv1iGqlWqs2qq1qpx5V7dVjqoPqqDqpx1Vn9YTqop5Uyeop1VU9rbqpZ1R39azqoZ5TPdXzqpfqrfqon9VF5VU/1V+lqAFqoHpJDVKD1RA1VA1TL6vh6hU1Qr2qUtVINUq9pkar19UY9YYaq8ap8epNNUFNVJPUZDVFTVVp6i01Tb2tpqt31Aw1U81Ss1W6mqOG/FppwX8j/+1/kD/il2ffprarj9UOtVPtUrvVHrVX7VP71H61Xx1QB1SOylEH1UF1SB1Sh9Vhlaty1RF1RB1VR9UxdUwdV8fVCXVS/ai+V6fVD+qMOqvOqh/VeXVeXfj1NRAatNRKax3ofDq/jtEFdKy+Ssfpq3VBfY2O6Gt1vL5OF9LX68K6iC6qi+kEXVyX0Eajtpp0qEvqUjqqb9Cl9Y06UZfRZXU57XR5naRv+sP5v9dfO91Ot9ftdQfdQXfSnXRn3Vl30V10sk7WXXVX3U130911d91D99A9dU/dS/fSfXQf3Vf31f10P52iU/RA/ZIepAfrIXqoHqZf1sP1cD1Cj9CpOlWP0qP0aD1aj9Fj9Fg9Vo/X4/UEPUFP0pP0FD1Fp+k0PU1P09P1dD1Dz9Cz9CydrtP1XD1Xz9Pz9AK9QC/UC/UivUgv0Ut0hs7QmTpTZ+ksvVwv19l6hV6hV+lVeo1eo9fpdXqD3qA36U16i96is/V2vV3v0Dv0Lr1L79F79D69T+/X+/UBfUDn6Bx9UB/Uh/QhfVgf1rk6Vx/RR/RRfVQf08f0cX1cn9An9Cl9Sp/Wp/UZfUaf0+f0eX1eX9AX9EV98dJlXyADGehAB/mCfEFMEBPEBrFBXBAXFAwKBpEgEsQH8UGh4PqgcFAkKBoUCxKC4kGJwAQY2ICCMCgZlAqiwQ1B6eDGIDEoE5QNygUuKB8kBTcFFYKbg4rBLUGl4NagcnBbUCWoGlQLqge3BzWCO4KaQa2gdnBnUCeoG9QL6gdVJ/71mvSeoFFwb9A4uC9oEtwfNA0eCJoFDwbNg4eCFsHDQcvgkaBV0DpoE7QN2v1b9e8KGgR3Bw2Df1bf+zNFHnP9TH+TYgaYgeYlM8gMNkPMUDPMvGyGm1fMCPOqSTUjzSjzmhltXjdjzBtmrBlnxps3zQQz0Uwyk80UM9WkmbfMNPO2mW7eMTPMTDPLzDbpZo6Za94188x8s8C8Zxaa980is9gsMUtNhvnAZJplJst8aJabj0y2WWFWmlVmtVlj1pp1Zr3ZYDaaTWaz2WK2mm1mu/nY7DA7zS6z2+wxe80+84nZbz41B8xnJsd8bg6av5hD5gtz2Hxpcs1X5oj52hw135hj5ltz3HxnTpiT5pT53pw2P5gz5qw5Z340581P5oL52Vw0/tLF/aW3d9SoMR/mwxiMwViMxTiMw4JYECMYwXiMx0JYCAtjYSyKRTEBE7AElsBLCAlLYkmMYhRLY2lMxEQsi2XRocMkTMIKWAErYkWshJWwMlbGKlgFq2E1vB1vxzvwDqyFtfBOvBPrYl2sj/WxATbAhtgQG2EjbIyNsQk2wabYFJthM2yOzbEFtsCW2BJbYStsg22wHbbD9tgeO2AH7ISdsDN2xi7YBZMxGbtiV+yG3bA7dsce2AN7Yk/shb2wD/bBvtgX+2E/TMEUHIgDcRAOwiE4BIfhMByOw3EEjsBUTMVROApH42gcg2NwLI7D8fgmTsCJOAkn4xScimmYhtNwGk7H6TgDZ+AsnIXpmI5zcS7Ow3m4ABfgQlyIi3ARLsElmIEZmImZmIVZuByXYzZm40pciatxNa7Ftbge1+NG3IibcTNuxa24HbfjDtyBu3AX7sE9uA/34X7cjwfwAOZgDh7Eg3gID+FhPIy5mItH8AgexaN4DI/hcTyOJ/AEnsJTeBpP4xk8g+fwHJ7Hn/AC/owX0WOMlSLWXmXj7NW2oL3GxtgC9m/joraYTbDFbQlrbGFb5O9itNYm2jK2rC1nnS1vk+xNv4mr2Kq2mq1ub7c17B225m/iBvZu29DeYxvZe219e9ffxY3tfbaJfdg2tY/YZra1bW7b2hb2YdvSPmJb2da2jW1rO9snbBf7pE22T9mu9unfxJl2mV1vN9iNdpPdbz+15+yP9qj9xp63P9l+tr8dZl+2w+0rdoR91abakb+Jx9s37QQ70U6yk+0UO/U38Sw726bbOXaufdfOs/N/E2fYD+xCm2UX2cV2iV36S3yppyz7oV1uP7LZdoVdaVfZ1XaNXWvX/c9eV9ktdqvdZvfZT+wOu9PusrvtHrv3l/jSeRywn9kc+7k9Yr+2h+wX9rA9ZnPtV7/El87vmP3WHrff2RP2pD1lv7en7Q/2jD37y/lfOvfv7c/2ovVWEJAkRZoCykf5KYYKUCxdRXF0NRWkayhC11I8XUeF6HoqTEWoKBWjBCpOJcgQkiWikEpSKYrSDVSabqREKkNlqRw5Kk9JdBNVoJupIt1ClehWqky3URWqStWoOt1ONegOqkm1qDbdSXWoLtWj+nQXNaC7qSHdQ43oXmpM91ETup+a0gPUjB6k5vQQtaCHqSU9Qq2oNbWhttSOHqX29Bh1oI7UiR6nzvQEdaEnKZmeoq70NHWjZ6g7PUs96DnqSc9TL+pNfegF6ksvUj/qTyk0gAbSSzSIBtMQGkrD6GUaTq/QCHqVUmkkjaLXaDS9TmPoDRpL42g8vUkTaCJNosk0haZSGr1F0+htmk7v0AyaSbNoNqXTHJpL79I8mk8L6D1aSO/TIlpMS2gpZdAHlEnLKIs+pOX0EWXTClpJq2g1raG1tI7W0wbaSJtoM22hrbSNttPHtIN20i7aTXtoL+2jT2g/fUoH6DPKoc/pIP2FDtEXdJi+pFz6io7Q13SUvqFj9C0dp+/oBJ2kU/Q9naYf6AydpXP0I52nn+gC/UwXyZMIIZShCnUYhPnC/GFMWCCMDa8K48Krw4LhNWEkvDaMD68LC4XXh4XDImHRsFiYEBYPS4QmxNCGFIZhybBUGA1vCEuHN4aJYZmwbFgudGH5MCm8KawQ3hxWDG8JK4W3hpXD28IqYdXw4Xurh7eHNcI7wpphrbB2eGdYJ6wb1gvrh3eFDcK7w4bhPWGj8N6wYnhf2CS8P2waPhA2Cx8Mm4cPhS3Ch8OW4SNhq7B12CZsG7YLHw3bh4+FHcKOYafw8bBz+ETYJXwyTA6fCruGT//u8ZRwQDgwfCl8KfT+HrUkujSaEf0gmhldFs2KfhhdHv0omh1dEV0ZXRVdHV0TXRtdF10f3RDdGN0U3RzdEt0a3Rb1vn5+4cBJp5x2gcvn8rsYV8DFuqtcnLvaFXTXuIi71sW761whd70r7Iq4oq6YS3DFXQlnHDrryIWupCvlou4GV9rd6BJdGVfWlXPOlXdJrq1r59q59u4x18F1dJ3c4+5x94R7wj3pnnRPua7uadfNPeO6u2ddD/ece84973q53q6Pe8H1dS+6fq6/S3EpbqAb6Aa5QW6IG+KGuWFuuBvuRrgRLtWlulFulBvtRrsxbowb68a68W68m+AmuElukpviprg0l+amuWluupvuZrgZbpab5dJdupvr5rp5bp5b4Ba4hYkL3SK3yC1xS1yGy3CZLtNluSy33C132S7brXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e1wO9wut8vtcXvcPrfP7Xf73QF3wOW4HHfQHXSH3CF32H3pct1X7oj72h1137hj7lt33H3nTriT7pT73p12P7gz7qw75350591P7oL72V103qVF3opMi7wdmR55JzIjMjMyKzI7kh6ZE5kbeTcyLzI/siDyXmRh5P3IosjiyJLI0khG5INIZmRZJCvyYWR55KNIdmRFZGVkVWR1ZE3E++I7Ql/Sl/JRf4Mv7W/0ib6ML+vLeefL+yR/k6/gb/YV/S2+kr/VV/a3+Sq+qq/mH/GtfGvfxrf17fyjvr1/zHfwHX0n/7jv7J/wXfyTPtk/5bv6p303/4zv7p/1Pfxzvqd/3vfyvX0f/4Lv61/0/Xx/n+IH+IH+JT/ID/ZD/FA/zL/sh/tX/Aj/qk/1I/0o/5of7V/3Y/wbfqwf58f7N/0EP9FP8pP9FD/Vp/m3/DT/tp/u3/Ez/Ew/y8/26X6On+vf9fP8fL/Av+cX+vf9Ir/YL/FLfYb/wGf6ZT7Lf+iX+498tl/hV/pVfrVf49f6dX693+A3+k1+s9/it/ptfrv/2O/wO/0uv9vv8Xv9Pv+J3+8/9Qf8Zz7Hf+4P+r/4Q/4Lf9h/6XP9V/6I/9of9d/4Y/5bf9x/50/4k/6U/96f9j/4M/6sP+d/9Of9T/6C/9lf5N9ZY4wxxhj7b9la+F8fH/APviZ/XZcMFEJcvbNY7t8eV0KIzb/WHSwTOkeEEE/17/ngf606dVJSUn59bLYSQanFQojI5fx84nK84pd/k0VHUeEf9jdY9j5Pv1M/eqsQsX+TEyMuxytEJ/HEL/Vv/if1H318fGbl8Fz8v6i/WIjEUpdzCojL8eX6Ff9J/SLtf6f/Al+kCdHhb3LixOX4cv0k8Zh4WiT/3SMZY4wxxhhjjLG/Giyrdf+9++dL9+cJ+nJOfnE5vnz/+Y/vzxljjDHGGGOMMXblPdu7z5OPJid37M6bP7wB+H+iDd7w5k/YXOmfTIwxxhhjjLE/2+WL/ivdCWOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlnf93/hzYlf6HBljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLEr7X8EAAD//7MxObU=") socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x2000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x488c9) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = syz_open_dev$mtd(&(0x7f00000000c0), 0xfffffffffffffffa, 0x100) read$FUSE(r3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x7}}, @ip_tos_int={{0x14}}], 0x50}, 0x40010) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd28, 0x25cfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0x6}, {0x10, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xffff8000}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) 1.959523773s ago: executing program 2 (id=1145): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) dup(0xffffffffffffffff) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r3, 0x0, 0x0, 0x1000f4) sendfile(r3, r3, 0x0, 0x40000000800) 1.959253223s ago: executing program 5 (id=1146): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000070"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 1.708151469s ago: executing program 5 (id=1147): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x40040) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) write$nci(r0, &(0x7f0000000240)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x9, "189bcc"}}, 0x8) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="500404"], 0x7) write$nci(r0, &(0x7f0000000300)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)={0x24, r3, 0x1, 0x70bd28, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffff3d}]}, 0x24}, 0x1, 0x0, 0x0, 0x4851}, 0x0) write$nci(r0, &(0x7f0000000440)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0xf, {0x1, 0xd, "299506ad626d94209abe7953d5"}}, 0x12) 1.442551655s ago: executing program 2 (id=1148): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x80) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000640)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000007c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000840), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000880), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000008c0)=0x6) r4 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone3(0x0, 0x0) read$FUSE(r4, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000004a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000840}, 0x4c840) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x20000004) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) 1.352469688s ago: executing program 6 (id=1149): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f00000000c0)={[{@nobh}, {@auto_da_alloc}, {@grpquota}]}, 0x3, 0x4c7, &(0x7f0000000c80)="$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") socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000000c0)) inotify_init1(0x0) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) socket$inet_tcp(0x2, 0x1, 0x0) poll(&(0x7f0000000280), 0x0, 0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x0, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0x4, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000100)=0x4, 0x8112) 1.351222558s ago: executing program 0 (id=1150): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x2}, 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000d00)='./my_configfs\x00', &(0x7f0000000d40)='configfs\x00', 0x10040, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000dc0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000e00)=0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000000e40)={0x2020}, 0x2020) r0 = syz_open_dev$sndmidi(&(0x7f0000002ec0), 0x2, 0x143102) writev(r0, &(0x7f0000002f00)=[{&(0x7f0000002f40)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002f80)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000002fc0)='./pipefs\x00', &(0x7f0000003000)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000003040)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r1 = fsopen(&(0x7f0000003080)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000030c0)='source\x00', &(0x7f0000003100)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000003140)='addr\x00', &(0x7f0000003180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000031c0)='vers\x00', &(0x7f0000003200)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) write$proc_mixer(0xffffffffffffffff, 0x0, 0x1001) syz_emit_ethernet(0x0, 0x0, 0x0) mount(0x0, &(0x7f00000032c0)='./dev\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x240, 0x0) 0s ago: executing program 0 (id=1151): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc41a, &(0x7f0000000880)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@prjquota, 0x2e}, {@nouid32}, {@journal_dev={'journal_dev', 0x3d, 0xa5b}}, {@abort}, {@barrier}, {@noquota}], [{@permit_directio}, {@smackfsfloor={'smackfsfloor', 0x3d, 'nouid32'}}, {@hash}, {@pcr={'pcr', 0x3d, 0x27}}, {@context={'context', 0x3d, 'user_u'}}, {@dont_hash}], 0x2c}, 0x1, 0x480, &(0x7f0000000200)="$eJzs289vFFUcAPDvTFvKT1sRf4CoVfzR+KOlBZWDF4wmXExM9IDHWgpBCjW0JkKIVA94NJw8qkcT/wJPcjHqSeNV78aEGC6iiWTM7M6Upe0uy263C+znk2x33ts3896bN2/75r3ZAHrWSP4nidgaEb9FxFBE9C1PMFJ9u3rl3PQ/V85NJ5Flb/2V5LvF31fOTZdJk+J9SxEYTZeiVpg/c/bE1OzszOkiPL5w8v3x+TNnXzh+curYzLGZU5MHDuzfN/HyS5Mvrkk9t+Vl3fXR3O6dh965+Mb04Yvv/vhNXritxee19agabjvPkRipewKeavvot5dtxXvdBue2lPf1/ogYqPT/oeirhKqG4vVPulo4oKOyLMsGV8QujQAWM+AulkS3SwB0R/mPPr//LV/rOPzoussHqzdAeb2vFq/qJ/2RFmkGau5v19pIRBxe/PeL/BWrzkMAAKyt7/Lxz/Orjf/SeKAm3T3F2tBwRNwbEdsj4r6I2BER90dU0j4YEQ/dYv4jy8LX879WTEL9sqn12t3c5YORvFKsbd04/itHfzHcV4S2Veo/kBw9PjuztzgnozEwmIcnGuRx6bVfP6v3We34L3/l+ZdjwaIcf/Yvm6A7MrUw1U6da13+uDIHeH5l/ZOllYAkInZGxK4Wjr8xIo4/+/XupYgNNQctNK5/A/0tFGiZ7KuIZ6rtvxjL6h81RW2wPjm+MWZn9o6XV8VKP/184c16+d+8/Tsrb//N1foPLm//wnBSu147f+t5XPj907r3NK1e/xuStyvb5eX04dTCwumJiA3J4sr4yev7luEyfV7/0T2r9//tEde+LPZ7OCLyi/iRiHg0Ih4ryv54RDwREXsa1P+HV598r/X6d1Ze/yOrfv/Va/9b3+g78f239fJvrv33V7ZGi5hmvv+aLWA75w4AAADuFGnlGfgkHVvaTtOxseoz/Dticzo7N7/w3NG5D04dqT4rPxwDaTnTNVQzHzpRzLmU4clirrgM76vMG2dZlm2qhMem52Y7taYONGdLnf6f+6Ov26UDOq6yjnbg8+YS+4UX3FVuWEcf6F45gPW3Bs/RAHco/R96l/4PPStdLfJ8xNX1Lwqw3vz/h96l/0Pv0v+hd+n/0JPa+V1/o43thzp15Dtx41JE1EvT1/KRByOi3RI+vaXV3SPt9lltfqN8pm0pJl0l8X+dyT0Wb5Ymb8dmD3g+1uvUdfmLCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYI38HwAA//9ouuZP") syz_mount_image$udf(&(0x7f0000001c00), &(0x7f0000001c40)='./file1\x00', 0x10048, &(0x7f0000000040)=ANY=[], 0x67, 0xc54, &(0x7f0000001cc0)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002980)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000029c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002a40)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000002ac0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000002b00), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002b40)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, &(0x7f0000002bc0)) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000040)="0a000300010000", 0x7) kernel console output (not intermixed with test programs): 1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.423599][ T4266] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 294.464313][ T4266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.514316][ T4266] usb 3-1: config 0 descriptor?? [ 294.704352][ T4266] hub 3-1:0.0: USB hub found [ 295.099565][ T4189] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 295.147115][ T4189] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 295.171552][ T4189] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 295.887051][ T4266] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 296.256667][ T4266] usbhid 3-1:0.0: can't add hid device: -71 [ 296.286764][ T4266] usbhid: probe of 3-1:0.0 failed with error -71 [ 296.387703][ T4266] usb 3-1: USB disconnect, device number 6 [ 297.866554][ T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 298.236617][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 298.718354][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 298.848413][ T23] usb 3-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 0.00 [ 298.857766][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 298.865950][ T23] usb 3-1: Product: syz [ 298.874494][ T23] usb 3-1: Manufacturer: syz [ 299.335421][ T23] usb 3-1: USB disconnect, device number 7 [ 300.309438][ T6501] loop0: detected capacity change from 0 to 2048 [ 300.423703][ T6501] UDF-fs: warning (device loop0): udf_fill_super: No fileset found [ 300.450061][ T6501] jffs2: notice: (6501) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 300.476819][ T6503] loop2: detected capacity change from 0 to 2048 [ 300.542135][ T6503] EXT4-fs (loop2): Ignoring removed nobh option [ 300.625706][ T6503] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,quota,lazytime,resgid=0x0000000000000000,grpid,,errors=continue. Quota mode: writeback. [ 300.833070][ T6515] loop0: detected capacity change from 0 to 512 [ 301.029570][ T6515] EXT4-fs (loop0): Unrecognized mount option "prjquota.nouid32" or missing value [ 301.085843][ T6518] loop3: detected capacity change from 0 to 512 [ 301.152719][ T6515] loop0: detected capacity change from 0 to 2048 [ 301.190849][ T26] audit: type=1800 audit(2000000106.435:34): pid=6518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.576" name="file1" dev="loop3" ino=1048905 res=0 errno=0 [ 301.265204][ T6515] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 301.286191][ T6515] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 301.323819][ T6515] UDF-fs: Scanning with blocksize 512 failed [ 301.395811][ T6515] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 301.426776][ T6515] UDF-fs: Scanning with blocksize 1024 failed [ 301.614582][ T6515] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 301.705828][ T6515] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 301.836332][ T6524] loop3: detected capacity change from 0 to 1024 [ 302.128138][ T6515] UDF-fs: Scanning with blocksize 2048 failed [ 302.229839][ T6524] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 302.656459][ T6515] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 302.737154][ T6515] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 302.820507][ T6515] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 302.894974][ T6515] UDF-fs: Scanning with blocksize 4096 failed [ 302.925366][ T6515] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 303.158469][ T6530] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6531] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6530] [ 304.056424][ T4350] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 304.585371][ T6542] loop4: detected capacity change from 0 to 512 [ 304.608169][ T6534] netlink: 32 bytes leftover after parsing attributes in process `syz.0.579'. [ 304.789584][ T6542] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 304.903771][ T6542] EXT4-fs (loop4): 1 truncate cleaned up [ 304.955786][ T6552] Line length is too long: Should be less than 4094 [ 305.066315][ T6542] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 305.127257][ T6555] futex_wake_op: syz.2.585 tries to shift op by 144; fix this program [ 306.066271][ T4185] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 306.083554][ T4185] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 306.099584][ T4185] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 306.738583][ T6572] loop4: detected capacity change from 0 to 512 [ 306.793534][ T26] audit: type=1800 audit(2000000112.036:35): pid=6572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.588" name="file1" dev="loop4" ino=1048923 res=0 errno=0 [ 306.868411][ T6547] loop3: detected capacity change from 0 to 32768 [ 306.962140][ T6581] loop1: detected capacity change from 0 to 512 [ 307.094307][ T6547] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 307.125264][ T6547] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 308.573270][ T6599] loop1: detected capacity change from 0 to 256 [ 308.591603][ T6547] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 308.619672][ T21] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 308.636231][ T21] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 308.708641][ T6599] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d) [ 308.808789][ T6603] Line length is too long: Should be less than 4094 [ 308.819029][ T6603] md: array md2 already has disks! [ 308.825253][ T6603] md: could not open device unknown-block(1,4). [ 308.832485][ T6603] md: error, md_import_device() returned -16 [ 308.915271][ T6603] md/raid:md2: device ram5 operational as raid disk 1 [ 308.922148][ T6603] md/raid:md2: device ram4 operational as raid disk 0 [ 308.943918][ T6603] md/raid:md2: couldn't allocate thread. [ 308.978055][ T6603] md: pers->run() failed ... [ 309.527231][ T21] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 891ms [ 309.537557][ T6611] fuse: Unknown parameter '0x0000000000000003' [ 309.553703][ T21] gfs2: fsid=syz:syz.0: jid=0: Done [ 309.564029][ T6547] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 309.618952][ T6547] gfs2: fsid=syz:syz.0: can't start logd thread: -4 [ 309.689975][ T6618] sctp: [Deprecated]: syz.4.603 (pid 6618) Use of int in maxseg socket option. [ 309.689975][ T6618] Use struct sctp_assoc_value instead [ 310.765914][ T5785] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 311.720338][ T4386] Bluetooth: hci5: Frame reassembly failed (-84) [ 311.815754][ T5785] usb 2-1: Using ep0 maxpacket: 32 [ 311.936005][ T5785] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 311.955236][ T5785] usb 2-1: config 2 has no interface number 0 [ 311.990198][ T5785] usb 2-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 312.039209][ T5785] usb 2-1: config 2 interface 88 has no altsetting 0 [ 312.400999][ T5785] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 312.431156][ T5785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 312.459171][ T5785] usb 2-1: Product: syz [ 312.473847][ T5785] usb 2-1: Manufacturer: syz [ 312.484006][ T5785] usb 2-1: SerialNumber: syz [ 312.536736][ T6625] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 312.575166][ T6643] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6644] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6643] [ 312.675386][ T6636] loop2: detected capacity change from 0 to 131072 [ 312.749216][ T6636] F2FS-fs (loop2): invalid crc value [ 312.770693][ T6625] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 312.787581][ T6636] F2FS-fs (loop2): Found nat_bits in checkpoint [ 312.836501][ T6636] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 312.863735][ T6636] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 312.886070][ T4348] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 313.125672][ T4348] usb 1-1: Using ep0 maxpacket: 32 [ 313.255831][ T4348] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.281344][ T4348] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.322886][ T4348] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 313.352124][ T4348] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.382633][ T4348] usb 1-1: config 0 descriptor?? [ 313.446762][ T4348] hub 1-1:0.0: USB hub found [ 313.502397][ T6649] tipc: Started in network mode [ 313.507396][ T6649] tipc: Node identity 7f000001, cluster identity 4711 [ 313.525217][ T6649] tipc: New replicast peer: 127.0.0.1 [ 313.546069][ T6649] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 313.622603][ T6649] tipc: Enabled bearer , priority 10 [ 313.649346][ T6649] tipc: Disabling bearer [ 313.736023][ T21] Bluetooth: hci5: command 0x1003 tx timeout [ 313.749774][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 314.135767][ T5785] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 314.152803][ T5785] asix 2-1:2.88 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 314.178497][ T5785] asix: probe of 2-1:2.88 failed with error -71 [ 314.213194][ T5785] usb 2-1: USB disconnect, device number 6 [ 314.723193][ T6652] fuse: Unknown parameter '0x0000000000000003' [ 315.137529][ T6658] Line length is too long: Should be less than 4094 [ 315.147540][ T6658] md: couldn't update array info. -22 [ 315.156329][ T6658] md: could not open device unknown-block(1,2). [ 315.162875][ T6658] md: md_import_device returned -16 [ 315.981782][ T5785] Bluetooth: hci5: command 0x1001 tx timeout [ 315.988017][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 316.025588][ T4348] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 316.130787][ T6664] loop1: detected capacity change from 0 to 512 [ 316.157359][ T4348] usbhid 1-1:0.0: can't add hid device: -71 [ 316.163904][ T4348] usbhid: probe of 1-1:0.0 failed with error -71 [ 316.237921][ T4348] usb 1-1: USB disconnect, device number 5 [ 317.067894][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.074256][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.112635][ T6668] loop1: detected capacity change from 0 to 256 [ 317.187198][ T6668] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d) [ 317.838585][ T6680] loop0: detected capacity change from 0 to 1024 [ 318.241849][ T6680] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 319.286704][ T5785] Bluetooth: hci5: command 0x1009 tx timeout [ 319.357207][ T6689] loop3: detected capacity change from 0 to 256 [ 319.486295][ T6689] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 320.277738][ T6696] fuse: Unknown parameter '0x0000000000000003' [ 320.458321][ T6698] device syzkaller0 entered promiscuous mode [ 320.543470][ T6691] loop2: detected capacity change from 0 to 32768 [ 320.583361][ T6691] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.622 (6691) [ 320.632050][ T6691] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 320.666583][ T6691] BTRFS info (device loop2): using free space tree [ 320.679597][ T6691] BTRFS info (device loop2): has skinny extents [ 321.088130][ T6719] Line length is too long: Should be less than 4094 [ 321.098429][ T6719] md: array md3 already has disks! [ 321.104633][ T6719] md: could not open device unknown-block(1,6). [ 321.111200][ T6719] md: error, md_import_device() returned -16 [ 321.194353][ T6719] md/raid:md3: device ram6 operational as raid disk 0 [ 321.217219][ T6719] md/raid:md3: couldn't allocate thread. [ 321.252339][ T6719] md: pers->run() failed ... [ 321.426095][ T6727] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6729] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6727] [ 321.522393][ T6735] loop3: detected capacity change from 0 to 2048 [ 321.559888][ T6735] EXT4-fs (loop3): Ignoring removed nobh option [ 321.604912][ T6691] BTRFS info (device loop2): enabling ssd optimizations [ 321.644754][ T6735] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,quota,lazytime,resgid=0x0000000000000000,grpid,,errors=continue. Quota mode: writeback. [ 321.707144][ T4812] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 321.883496][ T6743] loop3: detected capacity change from 0 to 128 [ 321.890631][ T6741] overlayfs: conflicting lowerdir path [ 322.015242][ T4812] usb 1-1: Using ep0 maxpacket: 32 [ 322.155460][ T4812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.175359][ T4812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.205276][ T4812] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 322.236219][ T4812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.280489][ T4812] usb 1-1: config 0 descriptor?? [ 322.451584][ T4812] hub 1-1:0.0: USB hub found [ 322.645557][ T4266] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 323.003594][ T6753] fuse: Unknown parameter '0x0000000000000003' [ 323.139299][ T4266] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.157250][ T4266] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 323.339088][ T4266] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 323.349024][ T4266] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.375082][ T4266] usb 2-1: config 0 descriptor?? [ 323.396495][ T6760] loop3: detected capacity change from 0 to 256 [ 323.487737][ T6761] Line length is too long: Should be less than 4094 [ 323.498057][ T6761] md: array md4 already has disks! [ 323.504157][ T6761] md: could not open device unknown-block(1,9). [ 323.510728][ T6761] md: error, md_import_device() returned -16 [ 323.609268][ T6761] md/raid:md4: couldn't allocate thread. [ 323.643600][ T6761] md: pers->run() failed ... [ 323.724951][ T6760] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 323.960763][ T4266] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 325.083501][ T4812] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 326.206279][ T4812] usbhid 1-1:0.0: can't add hid device: -71 [ 326.269836][ T4812] usbhid: probe of 1-1:0.0 failed with error -71 [ 326.442207][ T4266] usb 2-1: USB disconnect, device number 7 [ 326.449434][ T4812] usb 1-1: USB disconnect, device number 6 [ 327.156499][ T6786] loop1: detected capacity change from 0 to 2048 [ 327.216556][ T6786] EXT4-fs (loop1): Ignoring removed nobh option [ 327.294636][ T6786] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,quota,lazytime,resgid=0x0000000000000000,grpid,,errors=continue. Quota mode: writeback. [ 327.310597][ T6790] loop2: detected capacity change from 0 to 4096 [ 328.480353][ T6800] loop0: detected capacity change from 0 to 512 [ 328.489864][ T6802] fuse: Unknown parameter 'fd0x0000000000000003' [ 328.651690][ T26] audit: type=1800 audit(2000000133.867:36): pid=6800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.644" name="file1" dev="loop0" ino=1048998 res=0 errno=0 [ 330.924803][ T4266] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 331.289754][ T6835] loop0: detected capacity change from 0 to 2048 [ 331.389944][ T4266] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.414903][ T4266] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 331.435325][ T6840] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6842] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6840] [ 331.476932][ T6844] fuse: Unknown parameter 'fd0x0000000000000003' [ 331.489378][ T4266] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 331.523734][ T6839] loop3: detected capacity change from 0 to 4096 [ 331.530757][ T4266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.563425][ T4266] usb 5-1: config 0 descriptor?? [ 331.778665][ T4266] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 332.630772][ T6853] md: array md3 already has disks! [ 332.663849][ T6853] md: could not open device unknown-block(1,7). [ 332.670387][ T4812] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 332.695293][ T6853] md: error, md_import_device() returned -16 [ 332.774696][ T4266] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 332.925397][ T4812] usb 2-1: Using ep0 maxpacket: 32 [ 333.044554][ T5785] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 333.052752][ T4266] usb 1-1: Using ep0 maxpacket: 32 [ 333.096336][ T4812] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.112535][ T4812] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.123054][ T4812] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 333.138921][ T4812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.171988][ T4812] usb 2-1: config 0 descriptor?? [ 333.196235][ T4266] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.214583][ T4266] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 333.230907][ T4812] hub 2-1:0.0: USB hub found [ 333.242457][ T4266] usb 1-1: config 0 interface 0 has no altsetting 0 [ 333.250783][ T4266] usb 1-1: New USB device found, idVendor=04f2, idProduct=0618, bcdDevice= 0.00 [ 333.266606][ T4266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.302647][ T4266] usb 1-1: config 0 descriptor?? [ 333.419081][ T5785] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.442564][ T5785] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 333.644816][ T5785] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 333.659026][ T5785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.700663][ T23] usb 5-1: USB disconnect, device number 3 [ 333.704325][ T5785] usb 4-1: Product: syz [ 333.773810][ T4266] input: HID 04f2:0618 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:04F2:0618.0002/input/input11 [ 333.898852][ T5785] usb 4-1: Manufacturer: syz [ 333.903528][ T5785] usb 4-1: SerialNumber: syz [ 333.951676][ T4266] topseed 0003:04F2:0618.0002: input,hiddev0,hidraw0: USB HID v0.07 Device [HID 04f2:0618] on usb-dummy_hcd.0-1/input0 [ 334.046803][ T6858] Line length is too long: Should be less than 4094 [ 334.061736][ T6858] md: could not open device unknown-block(1,9). [ 334.068345][ T6858] md: error, md_import_device() returned -16 [ 334.149666][ T6858] md/raid:md4: device ram8 operational as raid disk 0 [ 334.156720][ T6858] md: pers->run() failed ... [ 334.384529][ T6853] md/raid:md3: device ram6 operational as raid disk 0 [ 334.488810][ T6853] md/raid:md3: not enough operational devices (2/3 failed) [ 334.556435][ T4266] usb 1-1: USB disconnect, device number 7 [ 334.574741][ T4812] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 334.808914][ T6853] md/raid:md3: failed to run raid set. [ 334.920150][ T6853] md: pers->run() failed ... [ 335.101672][ T6865] fido_id[6865]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 336.274414][ T4812] usbhid 2-1:0.0: can't add hid device: -71 [ 336.298969][ T4812] usbhid: probe of 2-1:0.0 failed with error -71 [ 336.364005][ T5785] usb 4-1: USB disconnect, device number 8 [ 336.505255][ T4812] usb 2-1: USB disconnect, device number 8 [ 337.969594][ T6891] fuse: Unknown parameter 'fd0x0000000000000003' [ 338.012936][ T6893] loop2: detected capacity change from 0 to 512 [ 338.108710][ T6893] EXT4-fs (loop2): Unrecognized mount option "prjquota.nouid32" or missing value [ 338.690373][ T6893] loop2: detected capacity change from 0 to 2048 [ 338.753260][ T6893] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 338.775200][ T6903] device syzkaller0 entered promiscuous mode [ 338.792869][ T6893] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 338.803574][ T6893] UDF-fs: Scanning with blocksize 512 failed [ 338.833689][ T6893] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 338.847308][ T6893] UDF-fs: Scanning with blocksize 1024 failed [ 338.878689][ T6893] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 338.920132][ T6893] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 339.042489][ T6893] UDF-fs: Scanning with blocksize 2048 failed [ 339.058231][ T6893] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 340.285099][ T6893] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 340.374705][ T6893] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 340.412810][ T6893] UDF-fs: Scanning with blocksize 4096 failed [ 340.429654][ T6893] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 340.452547][ T6920] md: md4 stopped. [ 341.690753][ T6931] loop4: detected capacity change from 0 to 1024 [ 342.451814][ T6934] loop2: detected capacity change from 0 to 1024 [ 342.536447][ T6931] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 342.536447][ T6931] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 342.536447][ T6931] [ 342.555736][ T6931] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 342.581987][ T6931] EXT4-fs (loop4): invalid journal inode [ 342.608788][ T6934] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 342.648530][ T6931] EXT4-fs (loop4): can't get journal size [ 342.705642][ T6931] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,noacl,norecovery,abort,nouid32,,errors=continue. Quota mode: writeback. [ 344.357299][ T6959] loop0: detected capacity change from 0 to 1024 [ 345.880492][ T6959] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 346.899710][ T6969] loop2: detected capacity change from 0 to 512 [ 347.017942][ T6972] loop4: detected capacity change from 0 to 512 [ 347.304029][ T6972] EXT4-fs (loop4): Unrecognized mount option "prjquota.nouid32" or missing value [ 347.478920][ T6972] loop4: detected capacity change from 0 to 2048 [ 347.539693][ T6972] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 347.591240][ T6972] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 347.655480][ T6972] UDF-fs: Scanning with blocksize 512 failed [ 347.714655][ T6972] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 347.799928][ T6972] UDF-fs: Scanning with blocksize 1024 failed [ 347.884389][ T6972] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 348.261820][ T6972] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 348.292288][ T6972] UDF-fs: Scanning with blocksize 2048 failed [ 348.440085][ T6972] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 348.739334][ T6972] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 348.751138][ T6972] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 348.798134][ T6972] UDF-fs: Scanning with blocksize 4096 failed [ 348.833654][ T6972] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 349.409101][ T6982] loop2: detected capacity change from 0 to 32768 [ 349.519867][ T6982] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 349.543654][ T6982] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 349.588817][ T6982] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 349.624394][ T23] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 349.641463][ T23] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 349.792440][ T23] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 150ms [ 349.820817][ T23] gfs2: fsid=syz:syz.0: jid=0: Done [ 349.951833][ T6982] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 350.368172][ T7003] loop0: detected capacity change from 0 to 512 [ 350.417191][ T7003] EXT4-fs (loop0): Ignoring removed orlov option [ 350.424144][ T7003] EXT4-fs (loop0): Ignoring removed oldalloc option [ 350.430822][ T7003] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 350.540101][ T7008] loop3: detected capacity change from 0 to 256 [ 350.942745][ T7008] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 351.052642][ T26] audit: type=1800 audit(2000000156.278:37): pid=7008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.705" name="file1" dev="loop3" ino=1049082 res=0 errno=0 [ 351.095152][ T7003] EXT4-fs (loop0): failed to initialize system zone (-117) [ 351.102460][ T7003] EXT4-fs (loop0): mount failed [ 351.875397][ T7013] device syzkaller0 entered promiscuous mode [ 352.325229][ T7021] Line length is too long: Should be less than 4094 [ 352.732627][ T7019] loop4: detected capacity change from 0 to 1024 [ 352.942926][ T7019] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 352.992412][ T7025] loop0: detected capacity change from 0 to 512 [ 355.065548][ T7042] loop3: detected capacity change from 0 to 2048 [ 355.080723][ T7044] loop2: detected capacity change from 0 to 4096 [ 355.180819][ T7042] EXT4-fs (loop3): Ignoring removed nobh option [ 357.324734][ T7049] loop0: detected capacity change from 0 to 512 [ 357.356942][ T7049] EXT4-fs (loop0): Ignoring removed orlov option [ 357.364065][ T7049] EXT4-fs (loop0): Ignoring removed oldalloc option [ 357.370703][ T7049] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 357.447359][ T7049] EXT4-fs (loop0): failed to initialize system zone (-117) [ 357.454708][ T7049] EXT4-fs (loop0): mount failed [ 357.611196][ T7042] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,quota,lazytime,resgid=0x0000000000000000,grpid,,errors=continue. Quota mode: writeback. [ 358.797337][ T7059] loop2: detected capacity change from 0 to 32768 [ 358.828374][ T7059] (syz.2.719,7059,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 358.850513][ T7059] (syz.2.719,7059,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 358.946897][ T7059] JBD2: Ignoring recovery information on journal [ 358.958616][ T7069] loop3: detected capacity change from 0 to 512 [ 359.027987][ T26] audit: type=1800 audit(2000000164.279:38): pid=7069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.722" name="file1" dev="loop3" ino=1049100 res=0 errno=0 [ 359.097557][ T7059] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 359.245403][ T7073] device syzkaller0 entered promiscuous mode [ 359.855945][ T4188] ocfs2: Unmounting device (7,2) on (node local) [ 359.908155][ T4336] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.564082][ T7075] rxe_eth0 speed is unknown, defaulting to 1000 [ 361.723015][ T4300] Bluetooth: hci1: command 0x0409 tx timeout [ 362.043281][ T4300] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 362.189560][ T4336] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.428118][ T4336] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.509012][ T7101] Line length is too long: Should be less than 4094 [ 362.560418][ T7101] block device autoloading is deprecated and will be removed. [ 362.864534][ T7104] loop3: detected capacity change from 0 to 512 [ 362.876310][ T7075] chnl_net:caif_netlink_parms(): no params data found [ 362.893118][ T4300] usb 3-1: Using ep0 maxpacket: 16 [ 362.915046][ T7104] EXT4-fs (loop3): Ignoring removed orlov option [ 362.921528][ T7104] EXT4-fs (loop3): Ignoring removed oldalloc option [ 362.928306][ T7104] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 362.962190][ T7104] EXT4-fs (loop3): failed to initialize system zone (-117) [ 362.969525][ T7104] EXT4-fs (loop3): mount failed [ 363.123192][ T4300] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 363.844482][ T4300] usb 3-1: config 0 has no interface number 0 [ 363.850671][ T4300] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 363.861173][ T4300] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 363.872876][ T4266] Bluetooth: hci1: command 0x041b tx timeout [ 363.907278][ T4336] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.979019][ T7115] loop3: detected capacity change from 0 to 256 [ 364.023066][ T4300] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 364.044059][ T4300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.052132][ T4300] usb 3-1: Product: syz [ 364.067068][ T4300] usb 3-1: Manufacturer: syz [ 364.071735][ T4300] usb 3-1: SerialNumber: syz [ 364.087981][ T7115] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 364.101419][ T4300] usb 3-1: config 0 descriptor?? [ 364.127131][ T7119] loop4: detected capacity change from 0 to 512 [ 364.134062][ T7091] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 364.141155][ T7091] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 364.176138][ T7075] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.183544][ T7075] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.192495][ T7075] device bridge_slave_0 entered promiscuous mode [ 364.201454][ T7075] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.208965][ T7075] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.217363][ T7075] device bridge_slave_1 entered promiscuous mode [ 364.275540][ T7075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.373182][ T26] audit: type=1800 audit(2000000169.629:39): pid=7119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.733" name="file1" dev="loop4" ino=1049101 res=0 errno=0 [ 364.404706][ T7075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.643159][ T7091] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 364.650276][ T7091] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 364.943651][ T7075] team0: Port device team_slave_0 added [ 365.008664][ T4300] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 365.029427][ T7075] team0: Port device team_slave_1 added [ 365.079813][ T4336] tipc: Left network mode [ 365.093618][ T7075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.100765][ T7075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.173100][ T7075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.431079][ T7075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.442775][ T7075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.539210][ T7144] Line length is too long: Should be less than 4094 [ 365.756371][ T7075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.882965][ T4266] Bluetooth: hci1: command 0x040f tx timeout [ 366.092814][ T4300] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 366.132656][ T4300] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 366.182853][ T4300] asix: probe of 3-1:0.34 failed with error -71 [ 366.252135][ T4300] usb 3-1: USB disconnect, device number 9 [ 366.286381][ T7075] device hsr_slave_0 entered promiscuous mode [ 366.321399][ T7075] device hsr_slave_1 entered promiscuous mode [ 366.399346][ T7075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 366.411236][ T7075] Cannot create hsr debugfs directory [ 366.991421][ T7168] loop0: detected capacity change from 0 to 512 [ 367.031587][ T7168] EXT4-fs (loop0): Ignoring removed orlov option [ 367.038181][ T7168] EXT4-fs (loop0): Ignoring removed oldalloc option [ 367.044917][ T7168] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 367.141655][ T7168] EXT4-fs (loop0): failed to initialize system zone (-117) [ 367.149149][ T7168] EXT4-fs (loop0): mount failed [ 368.101955][ T4266] Bluetooth: hci1: command 0x0419 tx timeout [ 368.147699][ T7171] loop2: detected capacity change from 0 to 2048 [ 368.213476][ T7171] EXT4-fs (loop2): Ignoring removed nobh option [ 368.437023][ T7171] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,quota,lazytime,resgid=0x0000000000000000,grpid,,errors=continue. Quota mode: writeback. [ 369.475157][ T7180] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 369.728685][ T7075] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 370.059052][ T7075] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 370.150917][ T7192] loop3: detected capacity change from 0 to 256 [ 370.165401][ T7190] loop0: detected capacity change from 0 to 1024 [ 370.208563][ T7190] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 370.224922][ T7190] EXT4-fs (loop0): invalid journal inode [ 370.241673][ T7190] EXT4-fs (loop0): can't get journal size [ 370.309839][ T7075] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 370.324345][ T7075] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 370.523003][ T7190] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 17104912: comm syz.0.747: lblock 2 mapped to illegal pblock 17104912 (length 1) [ 370.592658][ T7190] EXT4-fs (loop0): failed to initialize system zone (-117) [ 370.616309][ T7190] EXT4-fs (loop0): mount failed [ 370.689423][ T7192] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 372.883775][ T7220] loop3: detected capacity change from 0 to 128 [ 372.947943][ T7224] loop0: detected capacity change from 0 to 512 [ 372.997699][ T7224] EXT4-fs (loop0): Ignoring removed orlov option [ 373.004463][ T7224] EXT4-fs (loop0): Ignoring removed oldalloc option [ 373.011268][ T7224] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 373.041578][ T7222] loop4: detected capacity change from 0 to 1024 [ 373.059652][ T7224] EXT4-fs (loop0): failed to initialize system zone (-117) [ 373.067184][ T7224] EXT4-fs (loop0): mount failed [ 373.386484][ T7075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.013586][ T7220] netlink: 24 bytes leftover after parsing attributes in process `syz.3.748'. [ 374.213199][ T7233] netlink: 24 bytes leftover after parsing attributes in process `syz.3.748'. [ 374.446134][ T7238] loop0: detected capacity change from 0 to 2048 [ 374.497653][ T7222] EXT4-fs (loop4): mounted filesystem without journal. Opts: dax=never,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,lazytime,init_itable,. Quota mode: none. [ 374.531937][ T7075] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.542595][ T7238] EXT4-fs (loop0): Ignoring removed nobh option [ 374.652469][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 374.682733][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 374.719186][ T7222] EXT4-fs error (device loop4): ext4_find_dest_de:2117: inode #12: block 7: comm syz.4.751: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 374.751669][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 374.781529][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 374.791228][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.798383][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.806190][ T7238] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,quota,lazytime,resgid=0x0000000000000000,grpid,,errors=continue. Quota mode: writeback. [ 374.806717][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 374.830817][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 374.839514][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.846660][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.858956][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 374.868786][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 374.880140][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 374.889061][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 374.897863][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 374.906851][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 374.915782][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 374.924532][ T7222] EXT4-fs (loop4): Remounting filesystem read-only [ 374.934295][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 374.953789][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 374.962695][ T7243] EXT4-fs error (device loop4): ext4_find_dest_de:2117: inode #12: block 7: comm syz.4.751: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 374.993139][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 375.008569][ T7243] EXT4-fs (loop4): Remounting filesystem read-only [ 375.059833][ T7075] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 375.136168][ T4185] EXT4-fs error (device loop4): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /163/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 375.166093][ T26] audit: type=1800 audit(2000000180.420:40): pid=7247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.756" name=08 dev="sda1" ino=2048 res=0 errno=0 [ 375.205179][ T7075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 375.214849][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 375.224310][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 375.249133][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 375.487574][ T4185] EXT4-fs error (device loop4): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /163/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 375.611500][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 375.648864][ T4185] EXT4-fs error (device loop4): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 375.716906][ T4336] device hsr_slave_0 left promiscuous mode [ 375.752618][ T4336] device hsr_slave_1 left promiscuous mode [ 375.789332][ T4336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.801737][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 375.835975][ T4185] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 375.852709][ T4336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.904949][ T4185] EXT4-fs error (device loop4): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /163/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 375.939332][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 375.949310][ T4185] EXT4-fs error (device loop4): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /163/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 375.986968][ T4336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.992746][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 376.024411][ T4185] EXT4-fs error (device loop4): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 376.039266][ T4336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.085223][ T4336] device bridge_slave_1 left promiscuous mode [ 376.097787][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 376.122362][ T4336] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.133534][ T4185] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 376.151262][ T7263] loop0: detected capacity change from 0 to 256 [ 376.180489][ T4336] device bridge_slave_0 left promiscuous mode [ 376.200439][ T4185] EXT4-fs error (device loop4): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /163/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 376.206057][ T4336] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.291795][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 376.319065][ T4185] EXT4-fs error (device loop4): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /163/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 376.338112][ T7263] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 376.428417][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 376.623013][ T4185] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 376.641456][ T4336] device veth1_macvtap left promiscuous mode [ 376.648850][ T4336] device veth0_macvtap left promiscuous mode [ 376.656581][ T4336] device veth1_vlan left promiscuous mode [ 376.664402][ T4336] device veth0_vlan left promiscuous mode [ 376.670228][ T4185] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 376.722264][ T7249] loop3: detected capacity change from 0 to 32768 [ 376.784476][ T4185] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 376.957384][ T7249] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.755 (7249) [ 377.093987][ T7249] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 377.106933][ T4185] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 377.151079][ T7249] BTRFS info (device loop3): using free space tree [ 377.190293][ T7249] BTRFS info (device loop3): has skinny extents [ 377.198160][ T4185] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 377.287869][ T4185] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 377.312289][ T4185] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 377.358526][ T4185] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 377.454336][ T7249] BTRFS info (device loop3): enabling ssd optimizations [ 378.453618][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.460342][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.778647][ T4336] team0 (unregistering): Port device team_slave_1 removed [ 378.794660][ T4336] team0 (unregistering): Port device team_slave_0 removed [ 378.809717][ T4336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.894833][ T4336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.188248][ T4336] bond0 (unregistering): Released all slaves [ 379.217554][ T7318] loop2: detected capacity change from 0 to 512 [ 379.241455][ T7272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.758'. [ 379.250552][ T7272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.758'. [ 379.259479][ T7272] netlink: 'syz.0.758': attribute type 15 has an invalid length. [ 379.267273][ T7272] netlink: 'syz.0.758': attribute type 18 has an invalid length. [ 379.361390][ T7318] EXT4-fs (loop2): Ignoring removed orlov option [ 379.367982][ T7318] EXT4-fs (loop2): Ignoring removed oldalloc option [ 379.374783][ T7318] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 379.415562][ T7318] EXT4-fs (loop2): failed to initialize system zone (-117) [ 379.423051][ T7318] EXT4-fs (loop2): mount failed [ 379.704140][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 379.847090][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 380.186989][ T7075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.951908][ T4266] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 381.104723][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 381.132669][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 381.232433][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 381.241830][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 381.273089][ T7075] device veth0_vlan entered promiscuous mode [ 381.303372][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 381.315897][ T4266] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 381.327368][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 381.358558][ T7075] device veth1_vlan entered promiscuous mode [ 381.370498][ T4266] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 381.386700][ T6757] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 381.390854][ T4266] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice= 1.00 [ 381.421953][ T4266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.453876][ T7357] rxe_eth0 speed is unknown, defaulting to 1000 [ 381.484080][ T4266] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 381.501933][ T4266] usb 3-1: setting power ON [ 381.532837][ T7075] device veth0_macvtap entered promiscuous mode [ 381.569212][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 381.588558][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 381.613004][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 381.642813][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 381.672712][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 381.702023][ T4266] dvb-usb: bulk message failed: -71 (2/0) [ 381.711356][ T7075] device veth1_macvtap entered promiscuous mode [ 381.712093][ T4266] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 381.771530][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.802344][ T4266] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 381.811803][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.821666][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.825295][ T4266] usb 3-1: media controller created [ 381.881754][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.911756][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.929807][ T4266] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 381.953293][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.971803][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.001754][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.014873][ T4266] usb 3-1: selecting invalid altsetting 6 [ 382.028559][ T7075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.036571][ T6757] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 382.042219][ T4266] usb 3-1: digital interface selection failed (-22) [ 382.056682][ T6757] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.067869][ T4266] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 382.090776][ T6757] usb 1-1: Product: syz [ 382.095767][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.117237][ T6757] usb 1-1: Manufacturer: syz [ 382.132293][ T4266] usb 3-1: setting power OFF [ 382.137250][ T6757] usb 1-1: SerialNumber: syz [ 382.147329][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.161844][ T4266] dvb-usb: bulk message failed: -71 (2/0) [ 382.178633][ T4266] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 382.198465][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.226707][ T4266] usb 3-1: setting power ON [ 382.252065][ T4266] dvb-usb: bulk message failed: -71 (2/0) [ 382.261399][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.281857][ T4266] usb 3-1: analog interface selection failed (-71) [ 382.299644][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.340984][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.368457][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.399647][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.422739][ T4266] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 382.441032][ T7075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.463790][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 382.471767][ T4266] dvb_usb_cxusb: probe of 3-1:1.0 failed with error -71 [ 382.475815][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 382.504981][ T4266] usb 3-1: USB disconnect, device number 10 [ 382.539888][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 382.573919][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 382.608165][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 382.648581][ T7075] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.659760][ T7075] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.676197][ T7075] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.688456][ T7075] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.973982][ T6757] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 383.032217][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.072174][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.150655][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 383.182467][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.190439][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.265065][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 383.361772][ T4266] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 383.385390][ T5785] usb 1-1: USB disconnect, device number 8 [ 383.433706][ T7357] chnl_net:caif_netlink_parms(): no params data found [ 383.479490][ T7303] Bluetooth: hci0: command 0x0409 tx timeout [ 383.580839][ T7357] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.610703][ T7357] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.649973][ T7357] device bridge_slave_0 entered promiscuous mode [ 383.690617][ T7357] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.711423][ T7357] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.729939][ T7357] device bridge_slave_1 entered promiscuous mode [ 383.801961][ T4266] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.802172][ T7357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.819605][ T7392] loop3: detected capacity change from 0 to 4096 [ 383.831715][ T4266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.846802][ T7357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.871677][ T4266] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 383.881093][ T4266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.954060][ T7357] team0: Port device team_slave_0 added [ 384.002951][ T7357] team0: Port device team_slave_1 added [ 384.114660][ T7397] loop0: detected capacity change from 0 to 256 [ 384.121539][ T4266] usb 3-1: config 0 descriptor?? [ 384.132061][ T6757] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 384.151997][ T6757] ath9k_htc: Failed to initialize the device [ 384.311362][ T5785] usb 1-1: ath9k_htc: USB layer deinitialized [ 384.512910][ T7357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.615065][ T7397] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 384.635545][ T7357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.784986][ T4266] usbhid 3-1:0.0: fixing wrong optional hid class descriptors count [ 384.793569][ T4266] usbhid 3-1:0.0: can't add hid device: -22 [ 384.799615][ T4266] usbhid: probe of 3-1:0.0 failed with error -22 [ 384.827254][ T7357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.840375][ T7357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.851799][ T7357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.922182][ T7357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.099410][ T26] audit: type=1800 audit(2000000190.340:41): pid=7412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.774" name=08 dev="sda1" ino=2048 res=0 errno=0 [ 385.170865][ T7303] usb 3-1: USB disconnect, device number 11 [ 385.432677][ T7416] loop2: detected capacity change from 0 to 512 [ 385.469366][ T7357] device hsr_slave_0 entered promiscuous mode [ 385.532884][ T7416] EXT4-fs (loop2): Unrecognized mount option "prjquota.nouid32" or missing value [ 385.556461][ T7357] device hsr_slave_1 entered promiscuous mode [ 385.563168][ T6757] Bluetooth: hci0: command 0x041b tx timeout [ 385.609264][ T7357] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 385.658682][ T7357] Cannot create hsr debugfs directory [ 385.894753][ T7416] loop2: detected capacity change from 0 to 2048 [ 385.895657][ T7425] jffs2: notice: (7425) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 385.972127][ T7416] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 386.002603][ T7357] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 386.022981][ T7416] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 386.111863][ T7416] UDF-fs: Scanning with blocksize 512 failed [ 386.158523][ T7357] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 386.181947][ T7416] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 386.240075][ T7357] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 386.251487][ T7416] UDF-fs: Scanning with blocksize 1024 failed [ 386.342526][ T7357] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 386.360596][ T7416] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 386.488703][ T7416] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 386.523658][ T7416] UDF-fs: Scanning with blocksize 2048 failed [ 386.541638][ T7416] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 386.572079][ T7416] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 386.594007][ T7416] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 386.621823][ T7416] UDF-fs: Scanning with blocksize 4096 failed [ 386.628075][ T7416] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 386.663181][ T7439] loop5: detected capacity change from 0 to 256 [ 386.958304][ T7357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.032547][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 387.052292][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 387.111125][ T7357] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.170105][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 387.194833][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 387.252064][ T4383] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.259224][ T4383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.267866][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 387.277031][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 387.285697][ T4383] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.292845][ T4383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.352137][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 387.365925][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 387.416004][ T6208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 387.566290][ T6208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 387.642081][ T4299] Bluetooth: hci0: command 0x040f tx timeout [ 387.775109][ T6208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 387.927714][ T6208] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 388.052406][ T6208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 388.202301][ T6208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 388.262349][ T6208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 388.292388][ T6208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 388.532373][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 388.566514][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 388.583146][ T7466] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[7469] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7466] [ 388.635982][ T7357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 388.871448][ T23] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 389.131418][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 389.172298][ T4336] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.222517][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 389.230213][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 389.251499][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.282910][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.305488][ T7357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.318465][ T23] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 389.340474][ T4336] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.364855][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.409626][ T23] usb 4-1: config 0 descriptor?? [ 389.472458][ T23] hub 4-1:0.0: USB hub found [ 389.482063][ T4336] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.587071][ T4336] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.722091][ T7303] Bluetooth: hci0: command 0x0419 tx timeout [ 389.937296][ T7495] loop0: detected capacity change from 0 to 2048 [ 390.058117][ T7495] EXT4-fs (loop0): Ignoring removed orlov option [ 390.091419][ T7303] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 390.107066][ T7495] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,orlov,i_version,init_itable,,errors=continue. Quota mode: none. [ 390.129288][ T7495] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.166266][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 390.192991][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 390.290755][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 390.309599][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 390.359332][ T7357] device veth0_vlan entered promiscuous mode [ 390.379627][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 390.399308][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 390.473752][ T7357] device veth1_vlan entered promiscuous mode [ 390.499577][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 390.508567][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 390.520367][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 390.534486][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 390.624077][ T7303] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.692584][ T7303] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.871096][ T7303] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 390.937343][ T7509] loop5: detected capacity change from 0 to 256 [ 390.958412][ T7303] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.159223][ T7357] device veth0_macvtap entered promiscuous mode [ 391.179194][ T7303] usb 3-1: config 0 descriptor?? [ 391.190840][ T7509] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 391.230004][ T7357] device veth1_macvtap entered promiscuous mode [ 391.265329][ T7303] usbhid 3-1:0.0: fixing wrong optional hid class descriptors count [ 391.466893][ T7303] usbhid 3-1:0.0: can't add hid device: -22 [ 391.474053][ T7303] usbhid: probe of 3-1:0.0 failed with error -22 [ 391.497195][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.501742][ T23] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 391.517477][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.537805][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.720336][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.864719][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.892923][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.916226][ T7516] loop3: detected capacity change from 0 to 512 [ 391.951354][ T23] usbhid 4-1:0.0: can't add hid device: -71 [ 391.968020][ T23] usbhid: probe of 4-1:0.0 failed with error -71 [ 391.980189][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.054210][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.065417][ T23] usb 4-1: USB disconnect, device number 9 [ 392.131205][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.141809][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.153404][ T7357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.162633][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.5.786'. [ 392.171624][ T7513] netlink: 4 bytes leftover after parsing attributes in process `syz.5.786'. [ 392.180975][ T7513] netlink: 'syz.5.786': attribute type 15 has an invalid length. [ 392.188861][ T7513] netlink: 'syz.5.786': attribute type 18 has an invalid length. [ 392.293544][ T7519] loop3: detected capacity change from 0 to 256 [ 392.339118][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 392.369349][ T26] audit: type=1800 audit(2000000197.611:42): pid=7523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.787" name=08 dev="sda1" ino=2048 res=0 errno=0 [ 392.399013][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 392.413577][ T7519] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d) [ 392.429943][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.459662][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.489481][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.518942][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.555366][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.592063][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.627664][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.653639][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.675236][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.697182][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.709822][ T7357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.782185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 392.805440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 392.853301][ T7357] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.876944][ T7357] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.897486][ T7357] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.359116][ T7357] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.411832][ T7543] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 393.888835][ T23] usb 3-1: USB disconnect, device number 12 [ 393.995988][ T7546] loop0: detected capacity change from 0 to 512 [ 394.279623][ T7546] EXT4-fs (loop0): Ignoring removed nobh option [ 394.365034][ T7551] Line length is too long: Should be less than 4094 [ 394.375368][ T7551] md: array md2 already has disks! [ 394.381228][ T7551] md: could not open device unknown-block(1,4). [ 394.387753][ T7551] md: error, md_import_device() returned -16 [ 394.395490][ T7551] md: could not open device unknown-block(1,5). [ 394.402010][ T7551] md: error, md_import_device() returned -16 [ 394.541454][ T7551] md/raid:md2: device ram5 operational as raid disk 1 [ 394.548328][ T7551] md/raid:md2: device ram4 operational as raid disk 0 [ 394.569025][ T7551] md/raid:md2: couldn't allocate thread. [ 394.843139][ T7546] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.792: invalid indirect mapped block 256 (level 2) [ 394.929946][ T7546] EXT4-fs (loop0): 2 truncates cleaned up [ 394.989566][ T7546] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 396.120618][ T7545] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.792: bg 0: block 5: invalid block bitmap [ 396.294521][ T7551] md: pers->run() failed ... [ 396.444183][ T7545] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 396.458561][ T7545] EXT4-fs (loop0): This should not happen!! Data will be lost [ 396.458561][ T7545] [ 396.468381][ T7545] EXT4-fs (loop0): Total free blocks count 0 [ 396.474460][ T7545] EXT4-fs (loop0): Free/Dirty block details [ 396.480986][ T7545] EXT4-fs (loop0): free_blocks=0 [ 396.485971][ T7545] EXT4-fs (loop0): dirty_blocks=33 [ 396.491184][ T7545] EXT4-fs (loop0): Block reservation details [ 396.497194][ T7545] EXT4-fs (loop0): i_reserved_data_blocks=33 [ 396.555438][ T7566] loop2: detected capacity change from 0 to 128 [ 398.076490][ T7579] loop5: detected capacity change from 0 to 512 [ 398.201304][ T4333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.209177][ T4333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.421609][ T7579] EXT4-fs (loop5): Ignoring removed orlov option [ 398.471170][ T7579] EXT4-fs (loop5): Ignoring removed oldalloc option [ 398.477842][ T7579] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 398.549712][ T7586] loop2: detected capacity change from 0 to 256 [ 398.576738][ T6014] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 398.591922][ T7579] EXT4-fs (loop5): failed to initialize system zone (-117) [ 398.621347][ T4378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.629760][ T4378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.667602][ T7579] EXT4-fs (loop5): mount failed [ 398.736324][ T7586] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 399.531414][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 399.702208][ T7598] loop2: detected capacity change from 0 to 512 [ 399.712816][ T26] audit: type=1800 audit(2000000204.961:43): pid=7600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.801" name=08 dev="sda1" ino=2048 res=0 errno=0 [ 400.015037][ T7602] loop6: detected capacity change from 0 to 2048 [ 400.042086][ T7602] EXT4-fs (loop6): Ignoring removed nobh option [ 400.134780][ T7602] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobh,quota,lazytime,resgid=0x0000000000000000,grpid,,errors=continue. Quota mode: writeback. [ 400.269460][ T7615] loop2: detected capacity change from 0 to 256 [ 400.328935][ T4336] device hsr_slave_0 left promiscuous mode [ 400.439062][ T4336] device hsr_slave_1 left promiscuous mode [ 400.472157][ T7615] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d) [ 400.533615][ T4336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.563851][ T7625] loop3: detected capacity change from 0 to 128 [ 400.594762][ T4336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.170888][ T4336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.188326][ T4336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.209869][ T4336] device bridge_slave_1 left promiscuous mode [ 401.219375][ T4336] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.444433][ T4336] device bridge_slave_0 left promiscuous mode [ 401.459268][ T4336] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.564058][ T7633] loop3: detected capacity change from 0 to 8 [ 402.251692][ T7614] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 402.295277][ T7633] SQUASHFS error: zlib decompression failed, data probably corrupt [ 402.303846][ T7633] SQUASHFS error: Failed to read block 0x9b: -5 [ 402.310132][ T7633] SQUASHFS error: Unable to read metadata cache entry [99] [ 402.317968][ T7633] SQUASHFS error: Unable to read inode 0x127 [ 402.371176][ T4336] device veth1_macvtap left promiscuous mode [ 402.387573][ T4336] device veth0_macvtap left promiscuous mode [ 402.500581][ T4336] device veth1_vlan left promiscuous mode [ 402.506589][ T4336] device veth0_vlan left promiscuous mode [ 402.811956][ T7639] Line length is too long: Should be less than 4094 [ 402.822883][ T7639] md: array md2 already has disks! [ 402.829226][ T7639] md: could not open device unknown-block(1,4). [ 402.835730][ T7639] md: error, md_import_device() returned -16 [ 402.843058][ T7639] md: could not open device unknown-block(1,5). [ 402.849612][ T7639] md: error, md_import_device() returned -16 [ 402.931531][ T7639] md/raid:md2: device ram5 operational as raid disk 1 [ 402.938401][ T7639] md/raid:md2: device ram4 operational as raid disk 0 [ 402.959124][ T7639] md/raid:md2: couldn't allocate thread. [ 402.996638][ T7639] md: pers->run() failed ... [ 403.825067][ T4336] team0 (unregistering): Port device team_slave_1 removed [ 403.884414][ T4336] team0 (unregistering): Port device team_slave_0 removed [ 403.909534][ T4336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.954957][ T4336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.982724][ T7651] loop5: detected capacity change from 0 to 512 [ 404.053685][ T4300] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 404.249468][ T4336] bond0 (unregistering): Released all slaves [ 404.613900][ T7656] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[7657] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7656] [ 404.920510][ T6757] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 405.162757][ T6757] usb 1-1: Using ep0 maxpacket: 32 [ 405.283692][ T6757] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.309840][ T6757] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.355874][ T6757] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 405.389520][ T6757] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.428164][ T6757] usb 1-1: config 0 descriptor?? [ 405.485351][ T6757] hub 1-1:0.0: USB hub found [ 405.510464][ T4300] usb 3-1: config index 0 descriptor too short (expected 34617, got 36) [ 405.518877][ T4300] usb 3-1: config 217 has too many interfaces: 67, using maximum allowed: 32 [ 405.540547][ T7651] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 405.566566][ T4300] usb 3-1: config 217 has 1 interface, different from the descriptor's value: 67 [ 405.600471][ T4300] usb 3-1: config 217 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.620419][ T4300] usb 3-1: config 217 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 405.650432][ T4300] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 405.659546][ T4300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.682395][ T7651] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 405.791296][ T7651] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.077912][ T7687] block device autoloading is deprecated and will be removed. [ 406.863859][ T7306] FS-Cache: Duplicate cookie detected [ 406.870103][ T7306] FS-Cache: O-cookie c=0000000f [p=00000006 fl=222 nc=0 na=1] [ 406.877796][ T7306] FS-Cache: O-cookie d=ffffffff8d547b60{AFS.cell} n=ffff888025bfb000 [ 406.885985][ T7306] FS-Cache: O-key=[1] '6c' [ 406.890525][ T7306] FS-Cache: N-cookie c=00000023 [p=00000006 fl=2 nc=0 na=1] [ 406.897843][ T7306] FS-Cache: N-cookie d=ffffffff8d547b60{AFS.cell} n=ffff88807de86000 [ 406.905963][ T7306] FS-Cache: N-key=[1] '6c' [ 406.922336][ T7699] kAFS: No cell specified [ 407.560487][ T6757] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 408.732068][ T26] audit: type=1800 audit(2000000213.981:44): pid=7707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.815" name=08 dev="sda1" ino=2048 res=0 errno=0 [ 408.752688][ T6757] usbhid 1-1:0.0: can't add hid device: -71 [ 408.759878][ T6757] usbhid: probe of 1-1:0.0 failed with error -71 [ 408.807378][ T6757] usb 1-1: USB disconnect, device number 9 [ 408.825399][ T7709] device-mapper: ioctl: Unable to rename non-existent device, to uuid LVM-syzg2 [ 408.880447][ T4300] usbhid 3-1:217.0: can't add hid device: -71 [ 408.887884][ T4300] usbhid: probe of 3-1:217.0 failed with error -71 [ 408.927365][ T4300] usb 3-1: USB disconnect, device number 13 [ 408.979784][ T7715] loop2: detected capacity change from 0 to 512 [ 409.052367][ T7715] EXT4-fs (loop2): Ignoring removed orlov option [ 409.089570][ T7715] EXT4-fs (loop2): Ignoring removed oldalloc option [ 409.117228][ T7715] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 409.144182][ T7715] EXT4-fs (loop2): failed to initialize system zone (-117) [ 409.158762][ T7715] EXT4-fs (loop2): mount failed [ 409.340884][ T7720] loop6: detected capacity change from 0 to 4096 [ 410.607744][ T7738] loop5: detected capacity change from 0 to 256 [ 410.935032][ T7743] loop6: detected capacity change from 0 to 1024 [ 410.992525][ T7742] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[7744] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7742] [ 412.621909][ T7743] EXT4-fs (loop6): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 413.347645][ T7738] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 413.702761][ T7752] netlink: 8 bytes leftover after parsing attributes in process `syz.5.822'. [ 413.711739][ T7752] netlink: 4 bytes leftover after parsing attributes in process `syz.5.822'. [ 413.720789][ T7752] netlink: 'syz.5.822': attribute type 15 has an invalid length. [ 413.728594][ T7752] netlink: 'syz.5.822': attribute type 18 has an invalid length. [ 416.603607][ T26] audit: type=1800 audit(2000000221.832:45): pid=7787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.834" name=08 dev="sda1" ino=2048 res=0 errno=0 [ 417.030317][ T7792] loop2: detected capacity change from 0 to 512 [ 417.080708][ T7801] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[7803] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7801] [ 417.242900][ T7792] EXT4-fs (loop2): Ignoring removed orlov option [ 417.320324][ T7792] EXT4-fs (loop2): Ignoring removed oldalloc option [ 417.379816][ T4266] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 417.544587][ T7792] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 417.605219][ T7792] EXT4-fs (loop2): failed to initialize system zone (-117) [ 417.659943][ T7792] EXT4-fs (loop2): mount failed [ 417.693311][ T7810] loop0: detected capacity change from 0 to 256 [ 417.800061][ T4266] usb 7-1: Using ep0 maxpacket: 32 [ 418.043502][ T4266] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.110306][ T4266] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.127578][ T4266] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 418.141069][ T4266] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.223467][ T7810] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 418.388952][ T4266] usb 7-1: config 0 descriptor?? [ 418.463727][ T4266] hub 7-1:0.0: USB hub found [ 419.863310][ T26] audit: type=1800 audit(2000000224.782:46): pid=7844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.845" name=08 dev="sda1" ino=2048 res=0 errno=0 [ 420.069821][ T4266] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 420.340028][ T4266] usbhid 7-1:0.0: can't add hid device: -71 [ 420.346410][ T4266] usbhid: probe of 7-1:0.0 failed with error -71 [ 420.447192][ T4266] usb 7-1: USB disconnect, device number 2 [ 420.625783][ T7835] loop0: detected capacity change from 0 to 32768 [ 420.986669][ T7835] (syz.0.844,7835,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 421.097614][ T7835] (syz.0.844,7835,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 421.230811][ T7835] JBD2: Ignoring recovery information on journal [ 421.428670][ T7835] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 422.172010][ T4187] ocfs2: Unmounting device (7,0) on (node local) [ 422.413305][ T7887] loop2: detected capacity change from 0 to 256 [ 422.532772][ T7887] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 424.147798][ T7906] loop2: detected capacity change from 0 to 512 [ 425.010100][ T7906] EXT4-fs (loop2): Ignoring removed orlov option [ 425.016555][ T7906] EXT4-fs (loop2): Ignoring removed oldalloc option [ 425.099878][ T7906] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 425.203092][ T7906] EXT4-fs (loop2): failed to initialize system zone (-117) [ 425.212185][ T7906] EXT4-fs (loop2): mount failed [ 427.559394][ T7944] loop2: detected capacity change from 0 to 512 [ 427.684320][ T7944] EXT4-fs (loop2): Unrecognized mount option "prjquota.nouid32" or missing value [ 427.741450][ T7948] usb usb1: usbfs: process 7948 (syz.6.867) did not claim interface 0 before use [ 428.904281][ T4299] Bluetooth: hci5: command 0x1003 tx timeout [ 428.910704][ T4203] Bluetooth: hci5: sending frame failed (-49) [ 430.542456][ T8004] loop5: detected capacity change from 0 to 2048 [ 430.608358][ T8004] EXT4-fs (loop5): Ignoring removed nobh option [ 430.717765][ T8004] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,quota,lazytime,resgid=0x0000000000000000,grpid,,errors=continue. Quota mode: writeback. [ 430.919588][ T4299] Bluetooth: hci5: command 0x1001 tx timeout [ 430.925720][ T4203] Bluetooth: hci5: sending frame failed (-49) [ 432.213014][ T8032] loop2: detected capacity change from 0 to 1024 [ 432.515397][ T8032] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 433.464562][ T8042] FAULT_INJECTION: forcing a failure. [ 433.464562][ T8042] name failslab, interval 1, probability 0, space 0, times 0 [ 433.539861][ T8042] CPU: 1 PID: 8042 Comm: syz.3.882 Not tainted syzkaller #0 [ 433.547227][ T8042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 433.557316][ T8042] Call Trace: [ 433.560639][ T8042] [ 433.563618][ T8042] dump_stack_lvl+0x188/0x250 [ 433.568341][ T8042] ? show_regs_print_info+0x20/0x20 [ 433.573572][ T8042] ? load_image+0x410/0x410 [ 433.578133][ T8042] ? __might_sleep+0xf0/0xf0 [ 433.582757][ T8042] ? __lock_acquire+0x7d40/0x7d40 [ 433.587845][ T8042] should_fail+0x383/0x4b0 [ 433.592329][ T8042] should_failslab+0x5/0x20 [ 433.596869][ T8042] slab_pre_alloc_hook+0x51/0xc0 [ 433.600991][ T5792] Bluetooth: hci5: command 0x1009 tx timeout [ 433.601853][ T8042] __kmalloc+0x6b/0x340 [ 433.612048][ T8042] ? security_prepare_creds+0x47/0x130 [ 433.617548][ T8042] ? prepare_creds+0x3c/0x610 [ 433.622373][ T8042] security_prepare_creds+0x47/0x130 [ 433.627693][ T8042] prepare_creds+0x450/0x610 [ 433.632322][ T8042] join_session_keyring+0x17/0x440 [ 433.637476][ T8042] lookup_user_key+0x512/0x1160 [ 433.642373][ T8042] ? lookup_user_key_possessed+0x40/0x40 [ 433.648192][ T8042] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 433.654223][ T8042] ? __might_fault+0xb3/0x110 [ 433.658942][ T8042] ? _copy_from_user+0x111/0x170 [ 433.663951][ T8042] __se_sys_add_key+0x311/0x410 [ 433.668865][ T8042] ? __x64_sys_add_key+0xc0/0xc0 [ 433.673859][ T8042] ? lockdep_hardirqs_on+0x94/0x140 [ 433.679117][ T8042] ? __x64_sys_add_key+0x1c/0xc0 [ 433.684525][ T8042] do_syscall_64+0x4c/0xa0 [ 433.688972][ T8042] ? clear_bhb_loop+0x30/0x80 [ 433.693684][ T8042] ? clear_bhb_loop+0x30/0x80 [ 433.698401][ T8042] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 433.704334][ T8042] RIP: 0033:0x7f5c1ab4b559 [ 433.708782][ T8042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.728521][ T8042] RSP: 002b:00007f5c18da2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 433.736972][ T8042] RAX: ffffffffffffffda RBX: 00007f5c1add1fa0 RCX: 00007f5c1ab4b559 [ 433.744971][ T8042] RDX: 0000200000000180 RSI: 0000000000000000 RDI: 0000200000000140 [ 433.752971][ T8042] RBP: 00007f5c1abe2b20 R08: fffffffffffffffd R09: 0000000000000000 [ 433.760975][ T8042] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 433.768977][ T8042] R13: 00007f5c1add2038 R14: 00007f5c1add1fa0 R15: 00007ffc3a4150e8 [ 433.776991][ T8042] [ 434.264010][ T8054] loop6: detected capacity change from 0 to 256 [ 434.398534][ T8054] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 435.312068][ T8065] netlink: 8 bytes leftover after parsing attributes in process `syz.6.885'. [ 435.320951][ T8065] netlink: 4 bytes leftover after parsing attributes in process `syz.6.885'. [ 435.329807][ T8065] netlink: 'syz.6.885': attribute type 15 has an invalid length. [ 435.337561][ T8065] netlink: 'syz.6.885': attribute type 18 has an invalid length. [ 436.194202][ T8089] device-mapper: table: 248:2: snapshot-merge: Cannot get origin device [ 436.217264][ T8089] device-mapper: ioctl: error adding target to table [ 436.297888][ T8097] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[8098] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8097] [ 436.578917][ T6757] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 436.877440][ T6757] usb 3-1: Using ep0 maxpacket: 32 [ 437.019143][ T6757] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.049943][ T6757] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.099463][ T6757] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 437.117358][ T8104] loop6: detected capacity change from 0 to 2048 [ 437.148719][ T6757] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.207120][ T6757] usb 3-1: config 0 descriptor?? [ 437.227875][ T8104] EXT4-fs (loop6): Ignoring removed nobh option [ 437.289987][ T6757] hub 3-1:0.0: USB hub found [ 437.318724][ T8104] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobh,quota,lazytime,resgid=0x0000000000000000,grpid,,errors=continue. Quota mode: writeback. [ 437.410099][ T8121] overlayfs: missing 'lowerdir' [ 438.755589][ T8141] loop0: detected capacity change from 0 to 2048 [ 438.809420][ T8141] EXT4-fs (loop0): Ignoring removed orlov option [ 439.074125][ T8141] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,orlov,i_version,init_itable,,errors=continue. Quota mode: none. [ 439.088410][ T6757] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 439.143093][ T8141] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.318717][ T6757] usbhid 3-1:0.0: can't add hid device: -71 [ 439.325908][ T6757] usbhid: probe of 3-1:0.0 failed with error -71 [ 439.399313][ T6757] usb 3-1: USB disconnect, device number 14 [ 439.723406][ T26] audit: type=1800 audit(2000000500.979:47): pid=8159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.902" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 440.052666][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.059269][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.090370][ T8164] loop3: detected capacity change from 0 to 128 [ 440.164021][ T8167] Line length is too long: Should be less than 4094 [ 440.256073][ T8167] md/raid:md6: device ram13 operational as raid disk 1 [ 440.263255][ T8167] md/raid:md6: device ram12 operational as raid disk 0 [ 440.284344][ T8167] md/raid:md6: couldn't allocate thread. [ 440.322060][ T8167] md: pers->run() failed ... [ 442.128107][ T8203] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[8204] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8203] [ 442.679835][ T4266] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 442.946595][ T8211] binder: 8209:8211 ioctl c0306201 200000001740 returned -11 [ 442.951090][ T4266] usb 7-1: Using ep0 maxpacket: 32 [ 443.149840][ T4266] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.188004][ T4266] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.370900][ T4266] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 443.459707][ T4266] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.502009][ T4266] usb 7-1: config 0 descriptor?? [ 443.527507][ T8223] loop0: detected capacity change from 0 to 2048 [ 443.549412][ T4266] hub 7-1:0.0: USB hub found [ 443.571953][ T8223] EXT4-fs (loop0): Ignoring removed orlov option [ 443.596956][ T26] audit: type=1800 audit(2000000504.849:48): pid=8225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.918" name=08 dev="sda1" ino=2048 res=0 errno=0 [ 443.664568][ T8223] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,orlov,i_version,init_itable,,errors=continue. Quota mode: none. [ 443.708185][ T8223] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.742674][ T8244] Line length is too long: Should be less than 4094 [ 444.753276][ T8244] md: array md3 already has disks! [ 444.759939][ T8244] md: could not open device unknown-block(1,6). [ 444.766551][ T8244] md: error, md_import_device() returned -16 [ 444.774172][ T8244] md: could not open device unknown-block(1,7). [ 444.780886][ T8244] md: error, md_import_device() returned -16 [ 444.901873][ T8244] md/raid:md3: device ram6 operational as raid disk 0 [ 444.922954][ T8244] md/raid:md3: couldn't allocate thread. [ 444.970067][ T8244] md: pers->run() failed ... [ 445.227963][ T4266] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 445.388307][ T4266] usbhid 7-1:0.0: can't add hid device: -71 [ 445.395889][ T4266] usbhid: probe of 7-1:0.0 failed with error -71 [ 445.831483][ T4266] usb 7-1: USB disconnect, device number 3 [ 446.964708][ T26] audit: type=1326 audit(2000000508.220:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8300 comm="syz.6.932" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f12cb613559 code=0x0 [ 446.998755][ T4260] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 447.280198][ T8306] loop5: detected capacity change from 0 to 2048 [ 447.311445][ T4260] usb 1-1: Using ep0 maxpacket: 32 [ 447.347640][ T8306] EXT4-fs (loop5): Ignoring removed orlov option [ 447.414912][ T8306] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,orlov,i_version,init_itable,,errors=continue. Quota mode: none. [ 447.453397][ T4260] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 447.468496][ T4260] usb 1-1: config 0 has no interface number 0 [ 447.474776][ T4260] usb 1-1: config 0 interface 184 has no altsetting 0 [ 447.478515][ T8306] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.577162][ T8304] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 447.594289][ T8304] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 447.703534][ T4260] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 447.717360][ T4260] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.742012][ T4260] usb 1-1: Product: syz [ 447.755645][ T4260] usb 1-1: Manufacturer: syz [ 447.766469][ T4260] usb 1-1: SerialNumber: syz [ 447.822293][ T4260] usb 1-1: config 0 descriptor?? [ 448.053369][ T26] audit: type=1800 audit(2000000509.310:50): pid=8312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.934" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 448.442475][ T8321] Line length is too long: Should be less than 4094 [ 448.452642][ T8321] md: array md3 already has disks! [ 448.459117][ T8321] md: could not open device unknown-block(1,6). [ 448.465625][ T8321] md: error, md_import_device() returned -16 [ 448.473008][ T8321] md: could not open device unknown-block(1,7). [ 448.479595][ T8321] md: error, md_import_device() returned -16 [ 448.560483][ T8321] md/raid:md3: device ram6 operational as raid disk 0 [ 448.581734][ T8321] md/raid:md3: couldn't allocate thread. [ 448.618225][ T8321] md: pers->run() failed ... [ 448.638512][ T4260] smsc75xx v1.0.0 [ 450.166009][ T8339] loop2: detected capacity change from 0 to 1024 [ 450.649446][ T8339] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 451.117466][ T4260] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 451.157100][ T4260] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 451.273096][ T4260] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 451.506600][ T4260] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 451.516785][ T4260] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 451.527455][ T4260] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 451.921345][ T4260] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 451.961179][ T4260] usb 1-1: USB disconnect, device number 10 [ 451.969646][ T8363] raw_sendmsg: syz.5.946 forgot to set AF_INET. Fix it! [ 452.259378][ T8384] loop0: detected capacity change from 0 to 256 [ 452.345905][ T8381] loop2: detected capacity change from 0 to 2048 [ 452.414516][ T8384] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 452.463873][ T8381] EXT4-fs (loop2): Ignoring removed orlov option [ 452.607227][ T4260] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 453.612843][ T8381] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,orlov,i_version,init_itable,,errors=continue. Quota mode: none. [ 453.626991][ T8381] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.957339][ T4260] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.237504][ T4260] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.546434][ T4260] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 454.779911][ T4260] usb 7-1: config 0 interface 0 has no altsetting 0 [ 454.794391][ T4260] usb 7-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 454.805150][ T4260] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.830860][ T4260] usb 7-1: config 0 descriptor?? [ 455.202993][ T5786] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 455.417921][ T4260] hid-rmi 0003:1532:011D.0003: item fetching failed at offset 23/24 [ 455.525715][ T4260] hid-rmi 0003:1532:011D.0003: parse failed [ 455.661283][ T4260] hid-rmi: probe of 0003:1532:011D.0003 failed with error -22 [ 455.965061][ T4260] usb 7-1: USB disconnect, device number 4 [ 456.386993][ T5786] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.457702][ T5786] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 456.766537][ T5786] usb 1-1: config 0 interface 0 has no altsetting 0 [ 456.912563][ T8433] loop2: detected capacity change from 0 to 1024 [ 460.091649][ T5786] usb 1-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.00 [ 460.110537][ T5786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.140971][ T5786] usb 1-1: config 0 descriptor?? [ 460.166221][ T5786] usb 1-1: can't set config #0, error -71 [ 460.184201][ T5786] usb 1-1: USB disconnect, device number 11 [ 460.463027][ T8440] loop6: detected capacity change from 0 to 512 [ 461.419503][ T8455] loop5: detected capacity change from 0 to 2048 [ 461.606280][ T8455] EXT4-fs (loop5): Ignoring removed orlov option [ 461.904190][ T8455] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,orlov,i_version,init_itable,,errors=continue. Quota mode: none. [ 462.815543][ T8455] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 465.593300][ T8501] FS-Cache: Duplicate cookie detected [ 465.599280][ T8501] FS-Cache: O-cookie c=0000002c [p=00000002 fl=222 nc=0 na=1] [ 465.606805][ T8501] FS-Cache: O-cookie d=ffffffff8a416220{NFS.server} n=ffff88806142a000 [ 465.615146][ T8501] FS-Cache: O-key=[16] '0400000000000000020008017f000001' [ 465.622473][ T8501] FS-Cache: N-cookie c=0000002d [p=00000002 fl=2 nc=0 na=1] [ 465.629841][ T8501] FS-Cache: N-cookie d=ffffffff8a416220{NFS.server} n=ffff888078b99000 [ 465.638118][ T8501] FS-Cache: N-key=[16] '0400000000000000020008017f000001' [ 466.937307][ T8522] device syzkaller0 entered promiscuous mode [ 467.336873][ T8552] loop0: detected capacity change from 0 to 2048 [ 467.360391][ T8552] EXT4-fs (loop0): Ignoring removed orlov option [ 467.754316][ T8564] loop2: detected capacity change from 0 to 1024 [ 470.615609][ T8564] EXT4-fs warning (device loop2): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop2. [ 470.716308][ T8552] EXT4-fs: failed to create workqueue [ 470.721755][ T8552] EXT4-fs (loop0): mount failed [ 470.913271][ T8569] syz.6.994 uses obsolete (PF_INET,SOCK_PACKET) [ 471.070774][ T8578] loop0: detected capacity change from 0 to 256 [ 471.104155][ T8579] netlink: 4 bytes leftover after parsing attributes in process `syz.5.996'. [ 471.154703][ T8578] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 471.192444][ T8584] Cannot find set identified by id 0 to match [ 471.623960][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.997'. [ 471.633468][ T8588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.997'. [ 471.642957][ T8588] netlink: 'syz.0.997': attribute type 15 has an invalid length. [ 471.650987][ T8588] netlink: 'syz.0.997': attribute type 18 has an invalid length. [ 472.278500][ T8597] loop3: detected capacity change from 0 to 512 [ 472.360362][ T8597] EXT4-fs (loop3): Ignoring removed nobh option [ 472.439115][ T8597] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1002: invalid indirect mapped block 256 (level 2) [ 472.462636][ T8597] EXT4-fs (loop3): 2 truncates cleaned up [ 472.482523][ T8597] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 472.874806][ T4266] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 473.147245][ T8626] batman_adv: batadv0: Adding interface: syzkaller0 [ 473.262304][ T8596] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.1002: bg 0: block 5: invalid block bitmap [ 473.284862][ T8596] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 473.297370][ T8596] EXT4-fs (loop3): This should not happen!! Data will be lost [ 473.297370][ T8596] [ 473.307230][ T8596] EXT4-fs (loop3): Total free blocks count 0 [ 473.313301][ T8596] EXT4-fs (loop3): Free/Dirty block details [ 473.319477][ T8596] EXT4-fs (loop3): free_blocks=0 [ 473.324685][ T8596] EXT4-fs (loop3): dirty_blocks=33 [ 473.329934][ T8596] EXT4-fs (loop3): Block reservation details [ 473.336180][ T8596] EXT4-fs (loop3): i_reserved_data_blocks=33 [ 473.388941][ T8626] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.472978][ T8626] batman_adv: batadv0: Interface activated: syzkaller0 [ 473.513141][ T8622] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 473.584565][ T4266] usb 7-1: Using ep0 maxpacket: 32 [ 473.600170][ T8622] batman_adv: batadv0: Removing interface: syzkaller0 [ 473.747000][ T4266] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 473.779879][ T4266] usb 7-1: config 0 has no interface number 0 [ 473.788458][ T8637] netlink: 'syz.5.1013': attribute type 1 has an invalid length. [ 473.799481][ T4266] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 473.850403][ T8637] 8021q: adding VLAN 0 to HW filter on device bond1 [ 474.002902][ T8637] device macvlan2 entered promiscuous mode [ 474.044729][ T4266] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 474.053866][ T4266] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.068273][ T8637] device bond1 entered promiscuous mode [ 474.089977][ T4266] usb 7-1: Product: syz [ 474.094209][ T4266] usb 7-1: Manufacturer: syz [ 474.111481][ T8637] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 474.118479][ T4266] usb 7-1: SerialNumber: syz [ 474.138950][ T4266] usb 7-1: config 0 descriptor?? [ 474.148731][ T8637] team0: Port device macvlan2 added [ 474.155009][ T8610] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 474.219510][ T8642] bond1: (slave ip6gretap1): making interface the new active one [ 474.243230][ T8642] device ip6gretap1 entered promiscuous mode [ 474.257535][ T8642] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 474.329786][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 474.354192][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 474.400770][ T8610] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 474.728436][ T8679] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1019'. [ 475.525443][ T4266] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 475.619196][ T4266] asix: probe of 7-1:0.188 failed with error -61 [ 475.811566][ T8610] udc-core: couldn't find an available UDC or it's busy [ 475.858308][ T8610] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 475.914137][ T8700] loop3: detected capacity change from 0 to 512 [ 475.978779][ T8700] EXT4-fs (loop3): Ignoring removed nobh option [ 476.098678][ T8700] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1024: invalid indirect mapped block 256 (level 2) [ 476.114315][ T8704] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1027'. [ 476.185726][ T8704] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1027'. [ 476.298534][ T8700] EXT4-fs (loop3): 2 truncates cleaned up [ 476.382654][ T8700] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 477.304608][ T8697] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.1024: bg 0: block 5: invalid block bitmap [ 477.326942][ T8697] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 477.339400][ T8697] EXT4-fs (loop3): This should not happen!! Data will be lost [ 477.339400][ T8697] [ 477.349171][ T8697] EXT4-fs (loop3): Total free blocks count 0 [ 477.355280][ T8697] EXT4-fs (loop3): Free/Dirty block details [ 477.361852][ T8697] EXT4-fs (loop3): free_blocks=0 [ 477.367473][ T8697] EXT4-fs (loop3): dirty_blocks=33 [ 477.372806][ T8697] EXT4-fs (loop3): Block reservation details [ 477.379060][ T8697] EXT4-fs (loop3): i_reserved_data_blocks=33 [ 477.803422][ T23] usb 7-1: USB disconnect, device number 5 [ 478.123211][ T8733] device syzkaller0 entered promiscuous mode [ 479.541657][ T8765] loop3: detected capacity change from 0 to 512 [ 479.667636][ T8765] EXT4-fs (loop3): Ignoring removed nobh option [ 479.869149][ T8765] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1046: invalid indirect mapped block 256 (level 2) [ 480.041735][ T8765] EXT4-fs (loop3): 2 truncates cleaned up [ 480.111122][ T8765] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 480.803791][ T8764] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.1046: bg 0: block 5: invalid block bitmap [ 480.827225][ T8764] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 480.841153][ T8764] EXT4-fs (loop3): This should not happen!! Data will be lost [ 480.841153][ T8764] [ 480.851397][ T8764] EXT4-fs (loop3): Total free blocks count 0 [ 480.857695][ T8764] EXT4-fs (loop3): Free/Dirty block details [ 480.863712][ T8764] EXT4-fs (loop3): free_blocks=0 [ 480.868753][ T8764] EXT4-fs (loop3): dirty_blocks=33 [ 480.873961][ T8764] EXT4-fs (loop3): Block reservation details [ 480.880020][ T8764] EXT4-fs (loop3): i_reserved_data_blocks=33 [ 481.155878][ T8790] netlink: 'syz.5.1051': attribute type 4 has an invalid length. [ 481.324557][ T8789] xt_CT: No such helper "netbios-ns" [ 483.554275][ T23] Bluetooth: hci1: command 0x0406 tx timeout [ 486.766003][ T8824] loop6: detected capacity change from 0 to 2048 [ 486.841226][ T8824] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 486.865454][ T8824] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 486.894994][ T8824] UDF-fs: Scanning with blocksize 512 failed [ 486.971720][ T8833] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1062'. [ 487.013836][ T8824] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 487.021555][ T8824] UDF-fs: Scanning with blocksize 1024 failed [ 487.116729][ T8831] loop3: detected capacity change from 0 to 512 [ 487.134013][ T8824] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 487.192163][ T8831] EXT4-fs (loop3): Ignoring removed nobh option [ 487.202564][ T8824] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 487.302930][ T8824] UDF-fs: Scanning with blocksize 2048 failed [ 487.345650][ T8831] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1063: invalid indirect mapped block 256 (level 2) [ 487.384670][ T8824] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 487.409844][ T8824] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 487.421477][ T8831] EXT4-fs (loop3): 2 truncates cleaned up [ 487.430915][ T8824] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 487.436000][ T8831] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 487.458287][ T8824] UDF-fs: Scanning with blocksize 4096 failed [ 487.467660][ T8824] UDF-fs: warning (device loop6): udf_fill_super: No partition found (1) [ 487.553822][ T8845] block device autoloading is deprecated and will be removed. [ 487.645939][ T8845] md/raid:md5: device ram11 operational as raid disk 1 [ 487.653045][ T8845] md/raid:md5: device ram10 operational as raid disk 0 [ 487.676935][ T8845] md/raid:md5: couldn't allocate thread. [ 487.726597][ T8845] md: pers->run() failed ... [ 490.082443][ T7306] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 490.362587][ T7306] usb 6-1: Using ep0 maxpacket: 32 [ 490.533440][ T7306] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.203881][ T7306] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.214475][ T7306] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 491.223886][ T7306] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.270598][ T7306] usb 6-1: config 0 descriptor?? [ 491.304508][ T7306] usb 6-1: can't set config #0, error -71 [ 491.440639][ T7306] usb 6-1: USB disconnect, device number 2 [ 491.843035][ T8909] md: array md0 already has disks! [ 491.849691][ T8909] md: could not open device unknown-block(1,0). [ 491.856405][ T8909] md: error, md_import_device() returned -16 [ 491.864063][ T8909] md: could not open device unknown-block(1,1). [ 491.870679][ T8909] md: error, md_import_device() returned -16 [ 491.951831][ T8909] md/raid:md0: device ram1 operational as raid disk 1 [ 491.958925][ T8909] md/raid:md0: device ram0 operational as raid disk 0 [ 491.980693][ T8909] md/raid:md0: couldn't allocate thread. [ 492.020918][ T8909] md: pers->run() failed ... [ 492.546724][ T8922] loop0: detected capacity change from 0 to 512 [ 492.677284][ T8922] EXT4-fs (loop0): Ignoring removed nobh option [ 492.707215][ T8922] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1082: invalid indirect mapped block 256 (level 2) [ 492.727406][ T8922] EXT4-fs (loop0): 2 truncates cleaned up [ 492.734877][ T8922] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 492.792080][ T8933] device syzkaller0 entered promiscuous mode [ 493.392361][ T8931] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 495.441780][ T5785] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 495.856235][ T8985] md: array md0 already has disks! [ 495.862755][ T8985] md: could not open device unknown-block(1,0). [ 495.869244][ T8985] md: error, md_import_device() returned -16 [ 495.876582][ T8985] md: could not open device unknown-block(1,1). [ 495.883199][ T8985] md: error, md_import_device() returned -16 [ 495.931696][ T5785] usb 4-1: Using ep0 maxpacket: 32 [ 495.964908][ T8985] md/raid:md0: device ram1 operational as raid disk 1 [ 495.971955][ T8985] md/raid:md0: device ram0 operational as raid disk 0 [ 495.994665][ T8985] md/raid:md0: couldn't allocate thread. [ 496.033119][ T8985] md: pers->run() failed ... [ 496.193305][ T5785] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 496.223309][ T5785] usb 4-1: can't read configurations, error -71 [ 496.633331][ T9010] loop5: detected capacity change from 0 to 512 [ 496.725018][ T9010] EXT4-fs (loop5): Ignoring removed nobh option [ 497.068243][ T9010] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1098: invalid indirect mapped block 256 (level 2) [ 497.334887][ T9010] EXT4-fs (loop5): 2 truncates cleaned up [ 497.435067][ T9010] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 497.791465][ T9022] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 500.388099][ T9057] device syzkaller0 entered promiscuous mode [ 500.476623][ T9069] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 500.571662][ T9072] loop6: detected capacity change from 0 to 256 [ 500.603057][ T9071] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1113'. [ 500.673606][ T9072] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 501.288802][ T9082] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1114'. [ 501.297811][ T9082] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1114'. [ 501.306780][ T9082] netlink: 'syz.6.1114': attribute type 15 has an invalid length. [ 501.321153][ T9082] netlink: 'syz.6.1114': attribute type 18 has an invalid length. [ 501.342679][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.349116][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.000346][ T9094] loop2: detected capacity change from 0 to 512 [ 502.011881][ T9095] loop6: detected capacity change from 0 to 512 [ 502.105064][ T9094] EXT4-fs (loop2): Ignoring removed orlov option [ 502.111713][ T9094] EXT4-fs (loop2): Ignoring removed oldalloc option [ 502.118343][ T9094] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 502.498826][ T9094] EXT4-fs (loop2): failed to initialize system zone (-117) [ 502.506188][ T9094] EXT4-fs (loop2): mount failed [ 502.917302][ T9110] loop6: detected capacity change from 0 to 256 [ 502.990668][ T9110] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d) [ 503.492111][ T9116] loop3: detected capacity change from 0 to 1024 [ 505.579461][ T4300] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 505.659053][ T9116] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 506.836619][ T9121] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1122'. [ 506.973450][ T9137] loop2: detected capacity change from 0 to 256 [ 507.081572][ T9137] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 507.371548][ T9137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1128'. [ 507.380667][ T9137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1128'. [ 507.389576][ T9137] netlink: 'syz.2.1128': attribute type 15 has an invalid length. [ 507.397716][ T9137] netlink: 'syz.2.1128': attribute type 18 has an invalid length. [ 507.555115][ T9153] loop5: detected capacity change from 0 to 512 [ 507.756959][ T9157] Line length is too long: Should be less than 4094 [ 507.766646][ T9157] md: array md0 already has disks! [ 507.772810][ T9157] md: could not open device unknown-block(1,0). [ 507.779292][ T9157] md: error, md_import_device() returned -16 [ 507.786588][ T9157] md: could not open device unknown-block(1,1). [ 508.056462][ T9157] md: error, md_import_device() returned -16 [ 508.350384][ T9153] EXT4-fs (loop5): Unrecognized mount option "prjquota.nouid32" or missing value [ 508.428719][ T9162] loop2: detected capacity change from 0 to 512 [ 508.512597][ T9153] loop5: detected capacity change from 0 to 2048 [ 508.677773][ T9153] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 508.706183][ T5785] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 508.739605][ T9153] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 508.839864][ T9171] Line length is too long: Should be less than 4094 [ 508.850596][ T9171] md: array md0 already has disks! [ 508.856958][ T9171] md: could not open device unknown-block(1,0). [ 508.863543][ T9171] md: error, md_import_device() returned -16 [ 508.871282][ T9171] md: could not open device unknown-block(1,1). [ 508.877798][ T9171] md: error, md_import_device() returned -16 [ 508.959113][ T9171] md/raid:md0: device ram1 operational as raid disk 1 [ 508.966016][ T9171] md/raid:md0: device ram0 operational as raid disk 0 [ 508.986924][ T9171] md/raid:md0: couldn't allocate thread. [ 509.025341][ T9171] md: pers->run() failed ... [ 509.070340][ T9153] UDF-fs: Scanning with blocksize 512 failed [ 509.136089][ T9175] loop2: detected capacity change from 0 to 256 [ 509.183114][ T9153] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 509.260643][ T9175] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d) [ 509.300097][ T9153] UDF-fs: Scanning with blocksize 1024 failed [ 509.360831][ T9153] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 509.503815][ T9153] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 509.522725][ T9153] UDF-fs: Scanning with blocksize 2048 failed [ 509.531326][ T9153] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 509.547067][ T5785] usb 4-1: Using ep0 maxpacket: 32 [ 509.555856][ T9153] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 509.619202][ T9153] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 509.637193][ T9153] UDF-fs: Scanning with blocksize 4096 failed [ 509.645070][ T9153] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 509.822550][ T9185] loop0: detected capacity change from 0 to 1024 [ 510.152580][ T9185] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 511.411838][ T5785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.423708][ T5785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.433635][ T5785] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 511.443032][ T5785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.460687][ T5785] usb 4-1: config 0 descriptor?? [ 511.701881][ T5785] usb 4-1: can't set config #0, error -71 [ 511.708749][ T5785] usb 4-1: USB disconnect, device number 13 [ 511.849106][ T9207] loop6: detected capacity change from 0 to 256 [ 512.068441][ T9207] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 512.365175][ T9207] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1144'. [ 512.374217][ T9207] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1144'. [ 512.383814][ T9207] netlink: 'syz.6.1144': attribute type 15 has an invalid length. [ 512.391724][ T9207] netlink: 'syz.6.1144': attribute type 18 has an invalid length. [ 512.605073][ T9232] loop6: detected capacity change from 0 to 512 [ 512.723844][ T9234] nci: nci_start_poll: failed to set local general bytes [ 513.750609][ T4266] Bluetooth: hci0: command 0x0406 tx timeout [ 513.773375][ T9232] EXT4-fs (loop6): Ignoring removed nobh option [ 513.832299][ T9232] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1149: invalid indirect mapped block 256 (level 2) [ 513.849672][ T4299] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 513.903209][ T9232] EXT4-fs (loop6): 2 truncates cleaned up [ 513.909044][ T9232] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 513.919338][ T9242] loop0: detected capacity change from 0 to 512 [ 513.941175][ T9242] EXT4-fs (loop0): Unrecognized mount option "prjquota.nouid32" or missing value [ 514.229829][ T4299] usb 3-1: Using ep0 maxpacket: 32 [ 514.239031][ T9242] loop0: detected capacity change from 0 to 2048 [ 514.460489][ T4299] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.617341][ T9229] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.1149: bg 0: block 5: invalid block bitmap [ 514.653169][ T9229] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 514.665655][ T9229] EXT4-fs (loop6): This should not happen!! Data will be lost [ 514.665655][ T9229] [ 514.675528][ T9229] EXT4-fs (loop6): Total free blocks count 0 [ 514.681733][ T9229] EXT4-fs (loop6): Free/Dirty block details [ 514.687705][ T9229] EXT4-fs (loop6): free_blocks=0 [ 514.692824][ T9229] EXT4-fs (loop6): dirty_blocks=33 [ 514.698007][ T9229] EXT4-fs (loop6): Block reservation details [ 514.704099][ T9229] EXT4-fs (loop6): i_reserved_data_blocks=33 [ 514.756479][ T9242] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 514.794144][ T4299] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.879142][ T9242] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 514.967443][ T4299] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 515.090772][ T9242] UDF-fs: Scanning with blocksize 512 failed [ 515.101020][ T4299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.142405][ T4299] usb 3-1: config 0 descriptor?? [ 515.154049][ T9242] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 515.169956][ T9222] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 515.187043][ T9242] UDF-fs: Scanning with blocksize 1024 failed [ 515.195312][ T9222] [ 515.197674][ T9222] ====================================================== [ 515.204705][ T9222] WARNING: possible circular locking dependency detected [ 515.211823][ T9222] syzkaller #0 Not tainted [ 515.216261][ T9222] ------------------------------------------------------ [ 515.223326][ T9222] syz.5.1147/9222 is trying to acquire lock: [ 515.229322][ T9222] ffffffff8d963e08 (nci_mutex){+.+.}-{3:3}, at: virtual_nci_close+0x13/0x40 [ 515.238310][ T9222] [ 515.238310][ T9222] but task is already holding lock: [ 515.245689][ T9222] ffff888021fa1350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_close_device+0x102/0x600 [ 515.255170][ T9222] [ 515.255170][ T9222] which lock already depends on the new lock. [ 515.255170][ T9222] [ 515.265677][ T9222] [ 515.265677][ T9222] the existing dependency chain (in reverse order) is: [ 515.274712][ T9222] [ 515.274712][ T9222] -> #3 (&ndev->req_lock){+.+.}-{3:3}: [ 515.282415][ T9222] __mutex_lock_common+0x1e5/0x2400 [ 515.288214][ T9222] mutex_lock_nested+0x17/0x20 [ 515.293522][ T9222] nci_start_poll+0x55c/0xd10 [ 515.298744][ T9222] nfc_start_poll+0x141/0x2c0 [ 515.303965][ T9222] nfc_genl_start_poll+0x1d7/0x340 [ 515.309623][ T9222] genl_rcv_msg+0xd0b/0xfa0 [ 515.314720][ T9222] netlink_rcv_skb+0x1e9/0x430 [ 515.320028][ T9222] genl_rcv+0x24/0x40 [ 515.324564][ T9222] netlink_unicast+0x78f/0x940 [ 515.329877][ T9222] netlink_sendmsg+0x8ba/0xbe0 [ 515.335192][ T9222] ____sys_sendmsg+0x5be/0x8f0 [ 515.340552][ T9222] ___sys_sendmsg+0x236/0x2e0 [ 515.345782][ T9222] __se_sys_sendmsg+0x1b7/0x2a0 [ 515.347784][ T4299] hub 3-1:0.0: USB hub found [ 515.351175][ T9222] do_syscall_64+0x4c/0xa0 [ 515.351239][ T9222] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 515.351263][ T9222] [ 515.351263][ T9222] -> #2 (&genl_data->genl_data_mutex){+.+.}-{3:3}: [ 515.351295][ T9222] __mutex_lock_common+0x1e5/0x2400 [ 515.351313][ T9222] mutex_lock_nested+0x17/0x20 [ 515.351330][ T9222] nfc_urelease_event_work+0x120/0x310 [ 515.351352][ T9222] process_one_work+0x867/0xff0 [ 515.351402][ T9222] worker_thread+0xad7/0x12a0 [ 515.351421][ T9222] kthread+0x42e/0x520 [ 515.351437][ T9222] ret_from_fork+0x1f/0x30 [ 515.351529][ T9222] [ 515.351529][ T9222] -> #1 (nfc_devlist_mutex){+.+.}-{3:3}: [ 515.351558][ T9222] __mutex_lock_common+0x1e5/0x2400 [ 515.351577][ T9222] mutex_lock_nested+0x17/0x20 [ 515.432173][ T9222] nfc_register_device+0x38/0x300 [ 515.437745][ T9222] nci_register_device+0x89f/0x9f0 [ 515.443388][ T9222] virtual_ncidev_open+0x55/0xc0 [ 515.448859][ T9222] misc_open+0x31f/0x390 [ 515.453685][ T9222] chrdev_open+0x585/0x5f0 [ 515.458674][ T9222] do_dentry_open+0x7f7/0xf90 [ 515.463887][ T9222] path_openat+0x2718/0x2fb0 [ 515.469028][ T9222] do_filp_open+0x1df/0x400 [ 515.474074][ T9222] do_sys_openat2+0x14b/0x500 [ 515.479282][ T9222] __x64_sys_openat+0x135/0x160 [ 515.484665][ T9222] do_syscall_64+0x4c/0xa0 [ 515.489640][ T9222] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 515.496080][ T9222] [ 515.496080][ T9222] -> #0 (nci_mutex){+.+.}-{3:3}: [ 515.503211][ T9222] __lock_acquire+0x38f7/0x7d40 [ 515.508635][ T9222] lock_acquire+0x19f/0x400 [ 515.513672][ T9222] __mutex_lock_common+0x1e5/0x2400 [ 515.519428][ T9222] mutex_lock_nested+0x17/0x20 [ 515.524742][ T9222] virtual_nci_close+0x13/0x40 [ 515.530050][ T9222] nci_close_device+0x383/0x600 [ 515.535436][ T9222] nci_unregister_device+0x5e/0x250 [ 515.541166][ T9222] virtual_ncidev_close+0x55/0x90 [ 515.546744][ T9222] __fput+0x212/0x8c0 [ 515.551258][ T9222] task_work_run+0x125/0x1a0 [ 515.556385][ T9222] exit_to_user_mode_loop+0x10f/0x130 [ 515.562311][ T9222] exit_to_user_mode_prepare+0xee/0x180 [ 515.568393][ T9222] syscall_exit_to_user_mode+0x16/0x40 [ 515.574381][ T9222] do_syscall_64+0x58/0xa0 [ 515.579331][ T9222] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 515.585762][ T9222] [ 515.585762][ T9222] other info that might help us debug this: [ 515.585762][ T9222] [ 515.596019][ T9222] Chain exists of: [ 515.596019][ T9222] nci_mutex --> &genl_data->genl_data_mutex --> &ndev->req_lock [ 515.596019][ T9222] [ 515.609595][ T9222] Possible unsafe locking scenario: [ 515.609595][ T9222] [ 515.617067][ T9222] CPU0 CPU1 [ 515.622444][ T9222] ---- ---- [ 515.627860][ T9222] lock(&ndev->req_lock); [ 515.632327][ T9222] lock(&genl_data->genl_data_mutex); [ 515.640320][ T9222] lock(&ndev->req_lock); [ 515.647281][ T9222] lock(nci_mutex); [ 515.651188][ T9222] [ 515.651188][ T9222] *** DEADLOCK *** [ 515.651188][ T9222] [ 515.659359][ T9222] 1 lock held by syz.5.1147/9222: [ 515.664475][ T9222] #0: ffff888021fa1350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_close_device+0x102/0x600 [ 515.674242][ T9222] [ 515.674242][ T9222] stack backtrace: [ 515.680172][ T9222] CPU: 1 PID: 9222 Comm: syz.5.1147 Not tainted syzkaller #0 [ 515.687553][ T9222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 515.697695][ T9222] Call Trace: [ 515.700993][ T9222] [ 515.703941][ T9222] dump_stack_lvl+0x188/0x250 [ 515.708644][ T9222] ? load_image+0x410/0x410 [ 515.715091][ T9222] ? show_regs_print_info+0x20/0x20 [ 515.720321][ T9222] ? print_circular_bug+0x12b/0x1a0 [ 515.725543][ T9222] check_noncircular+0x2f8/0x400 [ 515.730516][ T9222] ? print_deadlock_bug+0x5d0/0x5d0 [ 515.735929][ T9222] ? lockdep_lock+0xf1/0x1f0 [ 515.740553][ T9222] ? mark_lock+0x94/0x320 [ 515.744902][ T9222] ? _find_first_zero_bit+0xd1/0xf0 [ 515.750167][ T9222] __lock_acquire+0x38f7/0x7d40 [ 515.755058][ T9222] ? verify_lock_unused+0x140/0x140 [ 515.760286][ T9222] ? __schedule+0x11cb/0x4350 [ 515.764984][ T9222] ? vprintk_emit+0xc0/0x150 [ 515.769594][ T9222] ? read_lock_is_recursive+0x10/0x10 [ 515.775096][ T9222] lock_acquire+0x19f/0x400 [ 515.779621][ T9222] ? virtual_nci_close+0x13/0x40 [ 515.784587][ T9222] ? do_raw_spin_lock+0x128/0x2f0 [ 515.789622][ T9222] ? __might_sleep+0xf0/0xf0 [ 515.794229][ T9222] ? read_lock_is_recursive+0x10/0x10 [ 515.799613][ T9222] ? preempt_schedule_common+0xa5/0xd0 [ 515.805092][ T9222] ? preempt_schedule+0xbc/0xd0 [ 515.809957][ T9222] __mutex_lock_common+0x1e5/0x2400 [ 515.815292][ T9222] ? virtual_nci_close+0x13/0x40 [ 515.820266][ T9222] ? __irq_work_queue_local+0x12c/0x190 [ 515.825899][ T9222] ? irq_work_queue+0xb8/0x140 [ 515.830706][ T9222] ? __wake_up_klogd+0xd9/0x100 [ 515.835575][ T9222] ? virtual_nci_close+0x13/0x40 [ 515.840533][ T9222] ? mutex_lock_io_nested+0x60/0x60 [ 515.845765][ T9222] ? load_image+0x410/0x410 [ 515.850308][ T9222] ? _raw_spin_unlock_irq+0x1f/0x40 [ 515.855521][ T9222] mutex_lock_nested+0x17/0x20 [ 515.860307][ T9222] virtual_nci_close+0x13/0x40 [ 515.865109][ T9222] nci_close_device+0x383/0x600 [ 515.869977][ T9222] ? kfree+0xef/0x2a0 [ 515.873996][ T9222] ? nci_unregister_device+0x250/0x250 [ 515.879471][ T9222] ? kobject_put+0x41d/0x450 [ 515.884083][ T9222] nci_unregister_device+0x5e/0x250 [ 515.889405][ T9222] ? virtual_ncidev_open+0xc0/0xc0 [ 515.894532][ T9222] virtual_ncidev_close+0x55/0x90 [ 515.899574][ T9222] __fput+0x212/0x8c0 [ 515.903577][ T9222] task_work_run+0x125/0x1a0 [ 515.908185][ T9222] exit_to_user_mode_loop+0x10f/0x130 [ 515.913570][ T9222] exit_to_user_mode_prepare+0xee/0x180 [ 515.919138][ T9222] syscall_exit_to_user_mode+0x16/0x40 [ 515.924612][ T9222] do_syscall_64+0x58/0xa0 [ 515.929044][ T9222] ? clear_bhb_loop+0x30/0x80 [ 515.933733][ T9222] ? clear_bhb_loop+0x30/0x80 [ 515.938424][ T9222] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 515.944363][ T9222] RIP: 0033:0x7fbefb16e559 [ 515.948795][ T9222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.968525][ T9222] RSP: 002b:00007fff8d219b88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 515.976965][ T9222] RAX: 0000000000000000 RBX: 00007fbefb3f6da0 RCX: 00007fbefb16e559 [ 515.984987][ T9222] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 515.992973][ T9222] RBP: 00007fbefb3f6da0 R08: 0000000000000006 R09: 0000000000000000 [ 516.000955][ T9222] R10: 00007fbefb3f6cb0 R11: 0000000000000246 R12: 000000000007d3d1 [ 516.008943][ T9222] R13: 00007fbefb3f4fac R14: 000000000007d2e5 R15: 00007fbefb3f4fa0 [ 516.016938][ T9222] [ 516.123088][ T9242] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 516.133147][ T4299] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 516.152372][ T9242] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 516.179033][ T9242] UDF-fs: Scanning with blocksize 2048 failed [ 516.204323][ T9242] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 516.214754][ T9242] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 516.225323][ T9242] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 516.233234][ T9242] UDF-fs: Scanning with blocksize 4096 failed [ 516.242163][ T9242] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 516.289742][ T4299] usbhid 3-1:0.0: can't add hid device: -71 [ 516.295759][ T4299] usbhid: probe of 3-1:0.0 failed with error -71 [ 516.339661][ T4299] usb 3-1: USB disconnect, device number 15