last executing test programs: 2m52.658081122s ago: executing program 4 (id=475): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x40000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000040)=0x84) 2m52.486748736s ago: executing program 4 (id=477): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fchown(r2, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) 2m52.321011416s ago: executing program 4 (id=479): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=[@code={0x1, 0x60, {"48b84b000000000000000f23c00f21f835030007000f23f8b9a00d00000f320f79445c74c4817be64eeb66b82a010f00d82e0fc7b9f21ee6dc6426f3450fc737c4c1f56c8f030000000f073e3e0f08"}}], 0x60}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x5e}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d54549b}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m51.967263164s ago: executing program 4 (id=480): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000), 0xfc, 0x582, &(0x7f0000000b40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200, 0x1]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x16a) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000002c0)={0x2, 0xffff}) 2m51.173508606s ago: executing program 4 (id=485): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xc0800, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) prctl$PR_SET_MM(0x23, 0x5, &(0x7f00005a0000/0x1000)=nil) pread64(r1, 0x0, 0x0, 0x6) 2m50.270068886s ago: executing program 4 (id=493): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xd0f, 0x400000, 0x25dfdbfc, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8, 0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) 2m49.705385403s ago: executing program 32 (id=493): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xd0f, 0x400000, 0x25dfdbfc, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8, 0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) 1m11.847084447s ago: executing program 2 (id=1172): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./bus\x00', 0x1c802, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES16, @ANYRESDEC, @ANYRESOCT, @ANYBLOB="3678f68852ed9dff79e6baa0a717d3c8a69d87ad4d5dc2733c0a8163e3eac273755b7824c45c69134b6442eb09df827fee7afc88f1c7d5c686166248bd493fb28131bfd2a352461dc5db360dc77f62eb033dec2d1cfabd759e4c040c4169a9662766121aee72ba341505bf70ca632cab3e779db90cc0e689b6ea2a6ec023af3ce32943f7f3237baea32d85a23a427243895cf2af02711188e9b912dd1ed0cca10f7a5bd7eac8e1d11b3017fa5ac2062b38367dfb772a90540e4fef4d423318e04eca5be2d7bc8cfdc7dea18cd2334ac702d60c0a73418e8248776f4af3b4748e"], 0x1, 0x5f55, &(0x7f000000ef80)="$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") openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='westwood\x00', 0x56) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) chroot(0x0) 1m9.632701893s ago: executing program 2 (id=1188): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x2abc, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x4, 0x359}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f00000012c0)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) io_uring_register$IORING_REGISTER_FILES2(r1, 0xd, &(0x7f00000003c0)={0x0, 0x1, 0x0, 0x0, 0x0}, 0x20) 1m8.545988683s ago: executing program 2 (id=1196): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_io_uring_setup(0x10e, &(0x7f0000000340)={0x0, 0xcb9c, 0x13200, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) 1m8.192567895s ago: executing program 2 (id=1201): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@user_xattr}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000240)=ANY=[], 0x835, 0x0) truncate(&(0x7f0000000100)='./file0/file0\x00', 0x7) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2) 1m7.017543085s ago: executing program 2 (id=1209): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x8001}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0x0) 1m5.258067995s ago: executing program 2 (id=1217): r0 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36a, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x4000080) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 1m4.86491511s ago: executing program 33 (id=1217): r0 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36a, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x4000080) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 57.19121015s ago: executing program 6 (id=1273): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) iopl(0x3) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) waitid(0x0, r2, 0x0, 0x8, 0x0) waitid(0x1, r2, 0x0, 0x4, 0x0) 56.06328119s ago: executing program 6 (id=1287): socket(0x1d, 0x2, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8, &(0x7f00000001c0)={&(0x7f0000000380)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0x7, 0x2}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x98) 55.498203065s ago: executing program 6 (id=1292): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000024000000040000000100000000000000", @ANYRES32=r0], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, r1, 0x4}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r4, &(0x7f0000000180), 0x0}, 0x20) 55.126931416s ago: executing program 6 (id=1294): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0xc0, &(0x7f0000000240)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB=',mode=00000000000000000000007,umask=00000000000000000177777,gid=forget,volume=00000000000000001023,noadinicb,novrs,lastblock=00000000000000000002,iocharset=cp936,gid=', @ANYRESDEC=0x0, @ANYBLOB], 0x1, 0xc32, &(0x7f0000009100)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 54.834496676s ago: executing program 6 (id=1295): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x5, 0x801) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x800000000000a, 0x0, 0x2, r2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000001000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x7f, 0x2000, 0x1, r2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 54.373892048s ago: executing program 6 (id=1296): openat$drirender128(0xffffffffffffff9c, 0x0, 0x400000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x4, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xa, 0x17, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llx, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) 53.56787875s ago: executing program 34 (id=1296): openat$drirender128(0xffffffffffffff9c, 0x0, 0x400000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x4, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xa, 0x17, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llx, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) 19.442165464s ago: executing program 7 (id=1512): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x8000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000580)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000003c0)={r3}) 18.349401429s ago: executing program 7 (id=1523): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 18.043418508s ago: executing program 7 (id=1526): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) getpid() r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r2, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) 15.235011987s ago: executing program 7 (id=1548): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 14.269340003s ago: executing program 7 (id=1556): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000090000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f00000002c0), &(0x7f0000000300)=@tcp6=r1, 0x1}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) close(r0) 13.816427234s ago: executing program 7 (id=1561): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid}]}}) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r3, &(0x7f0000007100)={0x2020}, 0x941f) 13.253396534s ago: executing program 35 (id=1561): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid}]}}) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r3, &(0x7f0000007100)={0x2020}, 0x941f) 4.263294498s ago: executing program 1 (id=1612): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x8001, 0x5, 0xde, 0xffff}, 0x8) sendto$inet6(r2, &(0x7f00000001c0)="ad", 0x1, 0x40, &(0x7f000005ffe4)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x4}, 0x1c) shutdown(r2, 0x1) 3.815152068s ago: executing program 5 (id=1616): syz_emit_ethernet(0x32, &(0x7f0000001c80)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x20, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}, "95b8bcc0"}}}}}}, 0x0) socket(0x200000000000011, 0x2, 0xd) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r2 = socket(0x200000000000011, 0x2, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14) syz_emit_ethernet(0x32, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x10, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e23, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x4, 0x0, @val=0x80}}}}}}}, 0x0) 3.411388175s ago: executing program 0 (id=1617): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f0000002340)=ANY=[@ANYBLOB="73686f776173736f632c686964650000000000007fff7373696f6e3d3078303030303030303030303030303030622c6e6f726f636b2c636865636b3d7374726963742c00"], 0x0, 0x3e2, &(0x7f0000000440)="$eJzs3E1PG0cYwPFZYlpKJVQpaiCEw6TpgR7i7C7FyMppux6bSda7q5l1BKcqKhChQlo1qdRwqbikrdR+iFz7IfqNovYbUO2LU14MprwZRf+fhGbsfWbmmZU1IxvNCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIJyw5bqeIyId91bk8cKWSbonXO/399mB4oRxhXDyPzExIWbKt2Zu/nf507KT6fLVtJjIiwmx8/GtTx7erI3125+Q0JV48Wrn26dbW+s/nDK+9s9e4ZLTujIdFWub6G7QUVLbRDYbDffBctvKto6UXbWZ6srQqCBLjJwPv5Bes7kgVX016cWdVhCp/ptL933XbchH9VQFxibxg0d1Gy7rKNJxp4jJL+cxS/kH8bHOZKaCrpQbm1vrC8OSzIO80wT5w4J81/c9z/e9xmJzccl1a77rywNvuIeII01G/6HFaF3wCg6c3V61/wMAAAAAgPeXU/zGnn//Hy9+h3dEW0fKHXVaAAAAAADgAhX/+Z/Oi/G8NiMcvv8DAAAAAPC++XX/GbuPBp2xs+mHzl9/C2PGnd105XNnO8jDg21RK9rdONxj1p51pqpOiqJRq16Fas65XQbd7ke/rYqNYWf9nCMJVCMfTqA8Ybf384AExO9itgyaXSvLtf6VcpTJto5UPUyih54IgqmxTK1kPz7f/EkU0/8t7k45YmNza73+zXdba0Uuu3kvu9vVAYoj5yiOvxni5btzj4NnPF78EFONO1mO6+6f/1jZfOx/jPla3Clj7kyW5eTB+U/kY3r142ZfZeGdc+avxVwZMzd/Ly/uzQ/Iwh+Whb8/izPdi1NksTAsi4VzZgEAo7IxZBdyjm78Z1jlLm53P3lFv1vG3J0tFtba7IAV3R22orvn3N3+PPIMhOP22HzcPw7tqm/yBm+OHddGvpPfwhsvt78Xt1682rm/uf302fqz9ee+v9Bwv3TdRV+MF9OoCvYeAMAAyrx1JrNfHGN0+rXXbHpBtqykScLH0uhWR0kdZ8qEy0HcUTI1SZaESZRXnuiWstL20jQxmWwnRqaJ1SvFk19k9egXq7pBnOnQppEKrJJhEmdBmMmWtqFMe19F2i4rUzS2qQp1W4dBppNY2qRnQlWX0iq1L1C3VJzpts6rsUyN7gZmVT5Jol5XyZayodFplpQd9sfScTsx3aLb+qhvNgAA18S7J9hdYmXUcwQAAAexSwMAAAAAAAAAAAAAAAAAAAAAcP1dxfm/i604QohrkAYVKhdd+eCsH+y9S8hn1CsTgMv2bwAAAP//x9CtwQ==") r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x8000, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x4e22, @remote}, 0x194, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) 3.213546524s ago: executing program 5 (id=1618): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3.050326464s ago: executing program 3 (id=1619): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000080), 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.641539752s ago: executing program 0 (id=1620): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x100000000000004, 0x10000, 0x100, 0x9004, 0x0, 0x7, 0x5, 0x5, 0x49, 0x3ff, 0x5, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x4, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x7, 0x8, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x6, 0xab6, 0x0, 0x4, 0xfff, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x400000000008061d, 0x3, 0x8, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x3]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000c40)=@arm64={0x9, 0x40, 0x3, '\x00', 0x7}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x1, 0x0, 0x2, 0xff, 0x8, 0x99, 0x0, 0x0, 0xd, 0x10, 0x0, 0x20006, 0xf0, 0x0, 0x1, 0x4, 0xfe, '\x00', 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.640338657s ago: executing program 3 (id=1621): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000123000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1.80208007s ago: executing program 0 (id=1622): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) write$binfmt_format(r1, &(0x7f0000000100)='0\x00', 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb3", 0x5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], 0x0, 0x0, 0x1}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 1.741814521s ago: executing program 1 (id=1623): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70d31000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.377297858s ago: executing program 1 (id=1624): syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x206d0d1, 0x0) 1.359715706s ago: executing program 5 (id=1625): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2e, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 1.264386369s ago: executing program 0 (id=1626): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000100)={[{@quota}]}, 0x1, 0x441, &(0x7f00000009c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) write$UHID_INPUT(r0, &(0x7f0000000f40)={0x8, {"c5da69876603f68838e795ae3223c4b660cecbb2ec4be8a56a9570a11b6906eb1ba9d094da36d6b90bb9120096a2d9af1da397188c9af66cbd5a772aa5ec8c135e8d6b6deddeb6042269bac5571a771125fabda93a23b94bc3a682b0c252b74a1c417819e0adcfb44c28a1b1636bb4ef58564e3b3c088f3033822b8df20db77d5e64501b2ad47ea77c18fe4a7a1b4fe1e15aad7b24d3f40d09f3f3fb19a74a763a7f04a9b4b5449abd8cb941cc9fe69dca87310f4e0861b140bf5eabd212b50da5d034cda76822f49ba567a959c35227987504785b0061e54195826a08e9f51895c90f2ab6e6adf900e40f12c8047e008f8b70d0ec1a0314503e9ee8ebad8c2a2a56071d26dd2d3aa2beb15e4d54fb19f2c364a8c9c9f0c8af6adcbc09b544f0ec313889a56236b535cb482122b7eac554f968b9f1c8efc795fe340a35e317583a401ae74ea1792bc330ca2aa8547e7c3091c6a61d892b160a388891cb963579905d53854523f089a3a3cafe4ed99fb9fcb033361cbee59fece82c91378f322778b7538940fbbea7e6b0bc27640d00840c928fd5002b20dcb3c07428e219e99c269581bfbc35f5b99ac1828daf4394aff6aafd9ff384a1f442d62f0e553d1a5d5d8c591faaa75c40b2d86d53b8463895cbdbd1878fd6765f92cf0ac931833707a13c452eb766b27af2c749cb524be27647ccaadb70922d4540c545c7e7cd17283b10c367bb3462e42d366a08687bba5ee877001095ee02e4b62c888e4c96bb421fd12bf97279d1c393bf24b484c768832acf60b4089a4c5bff1e545a6cafa4c4c353cad9def36a2c4dc3e64490288c329fca374caf03b124193cfb43ee8455445699182caa141264fda0e6bbb48f4c96485b0f3fd12dc95a1f1344e56754c4bb62cd450e6df277f058ffe8c234113e50ca0fd0df2337687b025edb6213f0205f1177007cb3b73043456e85cb425a2a0f96e43ebbe27580b8601d7245df668db1f16fc3de4dc239ee1de48793790a2d73b3abc7952839d78fc3de65606070c396fa1cf6fc5b0d7ef277901a85e4806419614eb76a02ab74bb6ee6c262729dc11cf54b765e90b42cebd1fa061266cd6be2af6d1f11701de5a3a48ce13d1a1e895f2e1c45a778b8e29d8a1ed5e1529ebe53b8244a87fad35f135816292c9e79dffe4c3afa179bb5934d400e311c5feab034503424b6f4e108bb6aecabd1f21c52b688a6e75e29dc3d54e3ca9b4897e99d4808bb41e2f59adcc1ceda5cef70f98039c881e5b5a107e2fe256735679d521a19b4cb8736d75cba0def8c0a1ea64c697890e5f61e819c622cabcc8884b6916c50f0d81e1d06dfcd3a7bceff516278d3bb6de96984ded3ff235b2a1cc01e7f1f896225a5e09d336125d64976bf22ac32a52a07340891e6e1bd407f05ca6d61f4d02989f1f6287cea31b2ecb8fd9ece1d8baee30d749ff8650e7df07372a6074cb7c7f3eb69e232a96fc101085c4f812ac96e098dc9b8cc5e987b11df998353b4543b00a3d47eee17746d95e8066489a65f8ffe5301edad4d51daa2e17b7780ef27caf6156aa9c8fbd41285d518ea7612ec44139ce0eb57c636f1d5f4134dac7a3b2e89b77d4c2cc0f4806b59e7de532cbd1a33b5b45cc75d6f80f28fe1b6d97caa092835ed50ee62e21d7ac1a1164217de6d7fa4652a428808d0d6d19a46327e0842c831a62233c17c68a60f76080cd6c3ea0904c8311943cbda6289b4e1ae0e1b167d283ab1a72d1e37a0108415e33b8257a73412d21524b925bf0cabd060fcfdb5fae7583ffa62e31b1be119bb8dc006472906a5ad58bf309f38b7fb58c9ddb36fed9eefe91fb1c52cef3553d833b83e278bd2392b1b20c753499482677df4de74369eb6038f5c2177e171400947e9ae7131fdffe2fce18f04871acd87c9a308ad476856ac6169bb379d055418389de5734055a51fd6b3cdce19973ce55659c25a64240cfdd1fa6ac2d3130f32d70ca958743030362ec94b13564dab869ca6e4e264bbaf87bbdbb686a91f2d5b96d7c9e5033fd0a3e43ba2f04e97208cc77668129235994632fef3f47ca8c3b699e907af2a265b825f87a54703efa65fa654de7f2bebfa630eda12a63751f9ad61e8d69cfb33ca4294a653866d07add62ffdf04ddedd0c6f8d2213462fdeb2f73ad98de2ab1969f5a2260eb0a39f98ab28ddb1de65460c857b923bfe9f891a732b844a9cd9717dc2e9430cf048b054d3f8bd1a63cd6b6f6c8c41f710ca09b62e99221fe5a93e309de44d9da17dabdea2fe1712376327257ccc2e947bbd84b99ba45452ebbabb074e1270e6acab10ab5b65f064d85faa38d7c94575ced675e7bd0f1fc7cbe72eddd95c6a767ba26d9762e62c47a9fc48af1f4da336e0fb5db1352dfc36e23665a95cd50db658672597ad4bbea2c0fb6ee9999eb84e27c56682979eb3bb7bae7221f00c68f0c9e990f67031d5189067a7728743530811a0ebcdfa8c646e1235e048c2c17e5b05351808d22a0cf1ffd2e883b9a476c3ce480f1ef0ee0d6a6ff243084ef895f3e917c925e576421b5514523b9cb71e8fb5bf1aa8a481ecc8bbe32e7826c9476d9d87536bc982479bc7c5142324f0077bad00cdc6370e7b14c298e03d84904667b71d75d9172b96d719cd017d2affc868b88397676c63055f3c3d08d57d3cfccecc33b8dc837958c43f8aaaa527ffd89dd6e2fee9df14a418efab98d554f89099bf6258dd64b2ed94fe6a9e316d367ee157ece377de4c949d78a6fc2bac00dda8befbc9e57bd935a97e4b8c120bc69144535dbc3ed04a3032e315a18ebf4d6b8667be014bd8f0610d1fa0bb70f2eb772bc3dcf8c2cd7cdb2d8cc197dda1518f665e5e4c726aa07047d2cde467039e7704052462739faaf3f1f43fa28b68f547671165699be5675620fca58b893a4dec8a7091db80bfce7ef2467b70d59b245c6593a466794ff85f6bf4a7de918701dceda4ef8000ccb158e496fa9056b8cb448de8b4aea4f634fec9f39fa450caa7a48c9695cf6c13f1b879833336f620510e780c581b428f4a15e4c4824a8e511077fb6d564d2b0808c4f49db1076d8e6b0cc8e68637d1e19c2e08e65a1a056196efa163c819877786d1d33d3c9b3b16bad31f5f03cb8575f65fcc00a0cc78f8da94586543b4658acf2b20643953db247bac3ef0640817a4c1af09918d4d795704c2395ddda5bf5bf8b82cf54e7d95cc5c61f2cd30745ba9f9c38529d571b62b44876f62bc10829f66d7537d3876413c1054d06c2bbc10be5d4cb4ec63283c2920436f2c77e8003a9822d2cf6fc67c96a33db67300874bb294e60f5aedeef719ee2c6e067e716005b46771a0d4efa152055ce123bdf7532bd8a258b77f7e49fb2e8e12d5f7d29e92049f6dbb36a8f348609a8ea360bab4e3560c0d8ed66fd2ad3ee1c3382601bfc47b12d0c7f2fb7058987d1582c0c116ae50a38cbab2d42c5e96e6b9c9b34c6ee05db1f0a0c6989e96a7fda7bed9a231b20e5eeba03ebac53bdf238ca3f66a37e97b559b0909764ab5f4a8618c1e2037dee2946aaa0edf7adafc198220ee4de72b48da9fb42a62a271e79e819cb6bb0a71488cb6979380eacb4b3eb9dfb0a853a73d973c2c26001db708ed456a2ba18c5bd510559f0a4a8108ce55a82e28698c5bef8f2fca8df1e88995a7ab2d2ec3c1f19ba642738ae0b9670dcf00936cc355c78dc273d1f1cb9049a8558bcd53f1dc0176fb3a3f853bf23fca0a6205863096fd1eca9798590ae63e4296a0783e93b805e9249c1247bfe34035ea0a207ee0798361495389feab0af70aa474679ea050b824e70677a68383723486220403c18dc8063539874a088df7a224cf6d775743a3de26a490441763453b34933c8e46b6226a87e21ed635da17495730e5bf39fa81fe5f1a1e5498c75a2df015b7da49283fa3d7311cb27b6ee6e7c5ff0958c02f845a50c0face30c4386188024ab63d3291421cc9f332cf96a59f6b9dbdab361e49070a97ddf89ef8f74b6152891f902b5c86f6748ff2e56ffdb40c450c36400e4d0bf921bc180748ed4bcf0588d3ee1eb9a9c89c90f11fad16c8009c3107c86c4e8b13eb4842a8f7d5d118b748ded59143d8ca7873b5c77803939a768dc196eff44ad3b7fac095340781b1c318603fcd5128bcf30bd9c356877deb5e0ba7ca930e6a70a34177f6c4f92479abf3d9ffa604209588da6648d688cf15a9dffc56ec666a5fecb9059304bc86b5fac74016ea47424ce2db383860c3e0c9d7f3f742290d2f7815b88ea9e319f80c8f57e67ffd7594ce260c1ac5f060d84272d678f0f779e32f91e4f0ded904cca08eb256c6a08c364bf187926dc66c350846dbece7ef40ef2dbc08adf80a75c82c0e9327e31f999fa213a0534254eda0acee70a9576f0ef0f1a0836e6dc06c16372d34591e6b5628aaad4b1fba782f8bcd6bbb44de5f6745605f3010dcebf85481e04dd95a6faae6c83f12485f5f00c21783e3e96a3066542e6983be37cf46593bc99ff74ef2df83799d44eca91ec9af2cdff2db213068f76a2f7deb922a64567e7ecbcefd9121d0dd41950c083f6c4eaf46fee4b5001d005bd50d165987a093311b301093540b3002f746c3ecd14752262d395af91cd36bdf5f299a1b7895aeebe956d471c68a568201136398a0edbd6c742ef73737215d9a46cd909d3725e6fb47759806b9feae1db7dbec7ed67c299c0e0609996a7eb2dbdb369ef6b202a0c845d421a3095ac8d24c923d870f54cdf811cecc22651ef8b9c168381b9d81ddb664c8bad29712e5220d53ffdc53a731154185f488a3c6a7e8a47c7be3f2dab88d1721f8766fa2830f5391ffa7818a63f23e8b83f7a477b47da537b14057ab6215a0a27415c6b75cc9bd5b682d3584539e4800df059cfdd8a436b54c34966a98b4b5b3e0fadbda3194fb209d99a8f365f3af85933b4c1d34bc25843d04dd108406f824d375f9d9e779ce8ad58e5d1b3b09bfddc700879edee7fcb8dcf7f453f8153e8e78274a44905fea38edf1a2f6810cf69120677f30fbfac3790a2892c466695f4d2d9e3c58b7e574ad156626063a90db43cc856d235e9ad6bd6ff13a5c3123634f1df4e0accb94b6146efeb992cb78bc3c174ab039d2dd8adb3c20a008605d4ff84dca98f9ed1fc6db2d297b75c34f8dddb9b24b7a427606fe31d9e12048c0c8974c9414da11996f37ea425027e2ff690409e8b65ed04017008a0a1d4ab77286666fa3904319c81ef97a052df857508549f9e323b7a8fd4c2cc9289a4cbb80d3a11e4b5bc4a786f0556fc46422380470f9914062213b90c40cfc8991fc75464088e003e632e673ce6ee39d059f2708eae18f04dc4d0750fc8dc2a4d5b65705a8b62cb9df0b187b2ce961fac1a380d8071ab0a99042afbfddd6ca1756f974ffd7c58eb2884f0d3c8fd0814995e074ad6744032ebb3cb48cf28a069d07b93856c1ebd620909d2555e199a940388c825f5cbd4839c74c8b2abe5130e793687eb5ce90adddd507bbd3f1ee73dc0e5e75d58b473085ebf59333ec5678654e62710bc425e372b1fa97f952f37c07550abc57c7d231b613c7b5edcf0d2e9c44f0f027d48aa712427e311dd255889a5eea43c8405389d4c189fdda30571517860baebc19401b90f608d9b6504b091cd0cb62fd05c72ac21103ac4c036c39629e1db05025697000e2e5308f22c3b47e13f4efb4d2c480847a9aaf8cab7faf3b4867b4c7aa5ef756bb3916c5ac64baf82828559f0588bbc8b7b8b04e31781df7655958368ce7148b84c2d6aae0", 0x1000}}, 0x1006) r1 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.174203994s ago: executing program 1 (id=1627): sched_setattr(0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x4, 0x0, 0x0, r1}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x612a, 0x17e, 0x0, 0x0, 0x0) r5 = fanotify_init(0x200, 0x101000) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/136, 0x88}], 0x1) 1.164309729s ago: executing program 3 (id=1628): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x20000000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) utimes(&(0x7f0000000640)='./file0\x00', 0x0) 922.435866ms ago: executing program 5 (id=1629): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r0, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 913.51418ms ago: executing program 3 (id=1630): connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x3, @remote, 0x3}, 0x1c) r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0xd, 0x0, r3, 0x0, &(0x7f0000000400), 0x0, 0x1, 0x1}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) 610.261644ms ago: executing program 3 (id=1631): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@local, 0x0, r1}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) 553.746198ms ago: executing program 0 (id=1632): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000063c0)=""/1024, 0x400) getdents64(r0, &(0x7f0000000440)=""/176, 0xb0) 387.221911ms ago: executing program 3 (id=1633): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x757, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x3, "38fafefa"}]}}, 0x0}, 0x0) 208.227703ms ago: executing program 5 (id=1634): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0x4, 0xc2, 0x4f, 0x40, 0x2, 0x80, 0x1, 0x3, 0x44, 0x8, 0x0, 0x9}, {0xb, 0xa6f3, 0x6, 0x8, 0x9, 0xff, 0x4, 0x3, 0xa, 0x13, 0x7, 0x3, 0x1}, {0x1ff, 0x7, 0xd, 0x10, 0x25, 0x9, 0x0, 0xfb, 0x1, 0x15, 0x0, 0x2, 0x6}], 0x9}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x10000, 0xfffffffffffffffe, 0x4002004c4, 0x1000, 0x0, 0x0, 0x10, 0x1, 0x3], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 206.709301ms ago: executing program 0 (id=1635): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000001100)={0x0, 0xaee2, 0x0, 0x3, 0x1f0}, &(0x7f0000001180)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x4d, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x48}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) 130.717346ms ago: executing program 1 (id=1636): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x6, 0x7a}, 0x8) 848.365µs ago: executing program 5 (id=1637): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0xe, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x6, 0x2, 0x4, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x7, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x8, 0x7, 0x5, 0x6}) dup3(r1, r0, 0x80000) 0s ago: executing program 1 (id=1638): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2, 0x4, 0xf1, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000023"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r0}, 0x18) r3 = socket$inet(0x2, 0x1, 0x0) listen(r3, 0x0) kernel console output (not intermixed with test programs): ]: worker [5912] failed while handling '/devices/virtual/block/loop2' [ 130.102348][ T114] [ 130.102348][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 130.102348][ T114] [ 130.174481][ T7137] [ 130.174481][ T7137] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 130.174481][ T7137] [ 130.215773][ T7137] [ 130.215773][ T7137] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 130.215773][ T7137] [ 130.261998][ T114] [ 130.261998][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 130.261998][ T114] [ 130.288902][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.310995][ T7137] [ 130.310995][ T7137] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 130.310995][ T7137] [ 130.335988][ T7137] [ 130.335988][ T7137] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 130.335988][ T7137] [ 130.386025][ T1091] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.389385][ T7137] overlayfs: upper fs needs to support d_type. [ 130.416880][ T113] [ 130.416880][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 130.416880][ T113] [ 130.436421][ T7137] overlayfs: upper fs does not support tmpfile. [ 130.460600][ T44] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.471197][ T7137] read_mapping_page failed! [ 130.495036][ T44] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.515736][ T7137] ERROR: (device loop2): txCommit: [ 130.515736][ T7137] [ 130.564628][ T7137] ERROR: (device loop2): remounting filesystem as read-only [ 130.603465][ T7157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.345'. [ 130.706007][ T7157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.345'. [ 130.958462][ T7162] loop0: detected capacity change from 0 to 512 [ 131.024757][ T7146] loop4: detected capacity change from 0 to 32768 [ 131.039317][ T7162] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 131.052368][ T7162] ext4 filesystem being mounted at /68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 131.182190][ T7146] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 131.235973][ T5994] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 131.268354][ T5866] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 131.289998][ T30] audit: type=1800 audit(1757061992.407:11): pid=7146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.341" name="bus" dev="loop4" ino=17058 res=0 errno=0 [ 131.357327][ T30] audit: type=1800 audit(1757061992.407:12): pid=7146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.341" name="file1" dev="loop4" ino=17059 res=0 errno=0 [ 131.437798][ T5994] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 131.457136][ T5994] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 131.482749][ T5994] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.523003][ T5861] ocfs2: Unmounting device (7,4) on (node local) [ 131.549803][ T5994] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 131.589471][ T5994] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 131.630352][ T5994] usb 4-1: Product: syz [ 131.640459][ T5994] usb 4-1: Manufacturer: syz [ 131.660683][ T5994] usb 4-1: SerialNumber: syz [ 131.934027][ T5994] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 132.125706][ T5994] usb 4-1: USB disconnect, device number 2 [ 132.140520][ T5994] usblp0: removed [ 132.242064][ T30] audit: type=1326 audit(1757061993.357:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0b8b8ebe9 code=0x7ffc0000 [ 132.331574][ T30] audit: type=1326 audit(1757061993.357:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0b8b8ebe9 code=0x7ffc0000 [ 132.407091][ T30] audit: type=1326 audit(1757061993.407:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd0b8b2adb9 code=0x7ffc0000 [ 132.477144][ T30] audit: type=1326 audit(1757061993.407:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0b8b8ebe9 code=0x7ffc0000 [ 132.554995][ T30] audit: type=1326 audit(1757061993.407:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd0b8b2adb9 code=0x7ffc0000 [ 132.583181][ T7178] loop0: detected capacity change from 0 to 32768 [ 132.595520][ T30] audit: type=1326 audit(1757061993.407:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd0b8b2adb9 code=0x7ffc0000 [ 132.617880][ T7178] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.351 (7178) [ 132.634511][ T7196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.361'. [ 132.652586][ T7178] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 132.675892][ T7178] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 132.705554][ T7183] loop4: detected capacity change from 0 to 32768 [ 132.719061][ T7183] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.353 (7183) [ 132.753297][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.762215][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.773994][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL [ 132.821969][ T7183] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 132.844309][ T7183] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 132.956416][ T7178] BTRFS info (device loop0): rebuilding free space tree [ 133.073868][ T7178] BTRFS info (device loop0): enabling ssd optimizations [ 133.080860][ T7178] BTRFS info (device loop0): turning on sync discard [ 133.104086][ T7183] BTRFS info (device loop4): enabling ssd optimizations [ 133.112797][ T7178] BTRFS info (device loop0): enabling free space tree [ 133.119582][ T7178] BTRFS info (device loop0): force clearing of disk cache [ 133.138468][ T7183] BTRFS info (device loop4): enabling free space tree [ 133.146523][ T7178] BTRFS info (device loop0): enabling auto defrag [ 133.179453][ T7178] BTRFS info (device loop0): max_inline set to 0 [ 133.600574][ T5866] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 133.668885][ T5861] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 133.785981][ T7247] loop2: detected capacity change from 0 to 64 [ 134.008070][ T7247] syz.2.370: attempt to access beyond end of device [ 134.008070][ T7247] loop2: rw=2049, sector=73, nr_sectors = 89 limit=64 [ 134.366660][ T1162] kworker/u8:8: attempt to access beyond end of device [ 134.366660][ T1162] loop2: rw=1, sector=162, nr_sectors = 1 limit=64 [ 134.393137][ T1162] Buffer I/O error on dev loop2, logical block 162, lost async page write [ 134.412832][ T1162] kworker/u8:8: attempt to access beyond end of device [ 134.412832][ T1162] loop2: rw=1, sector=169, nr_sectors = 1 limit=64 [ 134.472965][ T1162] Buffer I/O error on dev loop2, logical block 169, lost async page write [ 134.487054][ T1162] kworker/u8:8: attempt to access beyond end of device [ 134.487054][ T1162] loop2: rw=1, sector=171, nr_sectors = 1 limit=64 [ 134.518163][ T1162] Buffer I/O error on dev loop2, logical block 171, lost async page write [ 134.537022][ T1162] kworker/u8:8: attempt to access beyond end of device [ 134.537022][ T1162] loop2: rw=1, sector=172, nr_sectors = 1 limit=64 [ 134.566537][ T1162] Buffer I/O error on dev loop2, logical block 172, lost async page write [ 134.626151][ T1162] kworker/u8:8: attempt to access beyond end of device [ 134.626151][ T1162] loop2: rw=1, sector=173, nr_sectors = 1 limit=64 [ 134.687760][ T1162] Buffer I/O error on dev loop2, logical block 173, lost async page write [ 134.716751][ T1162] kworker/u8:8: attempt to access beyond end of device [ 134.716751][ T1162] loop2: rw=1, sector=174, nr_sectors = 1 limit=64 [ 134.753181][ T1162] Buffer I/O error on dev loop2, logical block 174, lost async page write [ 134.797636][ T1162] kworker/u8:8: attempt to access beyond end of device [ 134.797636][ T1162] loop2: rw=1, sector=175, nr_sectors = 1 limit=64 [ 134.853923][ T1162] Buffer I/O error on dev loop2, logical block 175, lost async page write [ 134.867545][ T1162] kworker/u8:8: attempt to access beyond end of device [ 134.867545][ T1162] loop2: rw=1, sector=176, nr_sectors = 1 limit=64 [ 134.881885][ T1162] Buffer I/O error on dev loop2, logical block 176, lost async page write [ 134.973387][ T1162] kworker/u8:8: attempt to access beyond end of device [ 134.973387][ T1162] loop2: rw=1, sector=177, nr_sectors = 1 limit=64 [ 134.995660][ T1162] Buffer I/O error on dev loop2, logical block 177, lost async page write [ 135.008486][ T1162] Buffer I/O error on dev loop2, logical block 179, lost async page write [ 135.222304][ T7275] loop0: detected capacity change from 0 to 16 [ 135.266813][ T7275] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 135.373797][ T52] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 136.351779][ T7307] loop4: detected capacity change from 0 to 1024 [ 136.577183][ T7307] hfsplus: xattr searching failed [ 136.619739][ T7307] hfsplus: xattr searching failed [ 136.703475][ T7324] TCP: tcp_parse_options: Illegal window scaling value 94 > 14 received [ 136.891957][ T7326] loop0: detected capacity change from 0 to 1024 [ 136.910978][ T7326] EXT4-fs (loop0): filesystem is read-only [ 136.961790][ T7326] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 137.022170][ T7326] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 137.023865][ T7331] loop4: detected capacity change from 0 to 512 [ 137.064237][ T7326] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 137.099707][ T7326] EXT4-fs error (device loop0): ext4_get_journal_inode:5806: comm syz.0.402: inode #1: comm syz.0.402: iget: illegal inode # [ 137.129137][ T7331] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.148776][ T7326] EXT4-fs (loop0): no journal found [ 137.153890][ T7331] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.155745][ T7326] EXT4-fs (loop0): can't get journal size [ 137.210023][ T7326] EXT4-fs error (device loop0): __ext4_fill_super:5510: inode #2: comm syz.0.402: iget: special inode unallocated [ 137.228906][ T7326] EXT4-fs (loop0): get root inode failed [ 137.236073][ T7326] EXT4-fs (loop0): mount failed [ 137.491841][ T5861] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.687153][ T7345] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 137.965549][ T7352] overlayfs: failed to clone upperpath [ 138.130262][ T7355] netlink: 24 bytes leftover after parsing attributes in process `syz.4.411'. [ 138.398005][ T7339] loop0: detected capacity change from 0 to 32768 [ 138.451933][ T7339] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.405 (7339) [ 138.512510][ T5976] IPVS: starting estimator thread 0... [ 138.549430][ T7339] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 138.632930][ T7368] IPVS: using max 31 ests per chain, 74400 per kthread [ 138.656234][ T7339] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 138.808059][ T7339] BTRFS info (device loop0): enabling ssd optimizations [ 138.859299][ T7342] loop2: detected capacity change from 0 to 32768 [ 138.874321][ T7339] BTRFS info (device loop0): enabling free space tree [ 139.012907][ T7342] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 139.089481][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 139.089498][ T30] audit: type=1800 audit(1757062000.207:64): pid=7339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.405" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 139.246038][ T7342] XFS (loop2): Ending clean mount [ 139.268271][ T7342] XFS (loop2): Quotacheck needed: Please wait. [ 139.337087][ T30] audit: type=1800 audit(1757062000.457:65): pid=7367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.414" name="file0" dev="fuse" ino=2 res=0 errno=0 [ 139.403249][ T7342] XFS (loop2): Quotacheck: Done. [ 139.477184][ T5866] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 139.634014][ T7418] netlink: 24 bytes leftover after parsing attributes in process `syz.4.420'. [ 139.769451][ T5872] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 140.051967][ T7431] loop0: detected capacity change from 0 to 128 [ 140.403885][ T7437] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 140.415167][ T7437] FAT-fs (loop0): Filesystem has been set read-only [ 141.697076][ T7467] loop2: detected capacity change from 0 to 2048 [ 141.734486][ T7467] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3932051, location=3932051 [ 141.766615][ T7467] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.902841][ T1211] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 143.069885][ T7467] bio_check_eod: 7 callbacks suppressed [ 143.069904][ T7467] syz.2.435: attempt to access beyond end of device [ 143.069904][ T7467] loop2: rw=0, sector=2053, nr_sectors = 1 limit=2048 [ 143.089548][ T7486] loop4: detected capacity change from 0 to 32768 [ 143.122926][ T7494] nbd0: detected capacity change from 0 to 1024 [ 143.134413][ T1211] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 143.146437][ T1211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.146963][ T7467] buffer_io_error: 5 callbacks suppressed [ 143.146977][ T7467] Buffer I/O error on dev loop2, logical block 2053, async page read [ 143.166277][ T1211] usb 4-1: Product: syz [ 143.176488][ T5911] block nbd0: Send control failed (result -89) [ 143.187583][ T7486] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.441 (7486) [ 143.208358][ T1211] usb 4-1: Manufacturer: syz [ 143.214478][ T7467] syz.2.435: attempt to access beyond end of device [ 143.214478][ T7467] loop2: rw=0, sector=2053, nr_sectors = 1 limit=2048 [ 143.243022][ T5911] block nbd0: Request send failed, requeueing [ 143.252614][ T1211] usb 4-1: SerialNumber: syz [ 143.263980][ T7467] Buffer I/O error on dev loop2, logical block 2053, async page read [ 143.284683][ T52] block nbd0: Receive control failed (result -32) [ 143.311444][ T56] block nbd0: Dead connection, failed to find a fallback [ 143.320983][ T56] block nbd0: shutting down sockets [ 143.327994][ T56] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 143.340601][ T56] Buffer I/O error on dev nbd0, logical block 0, async page read [ 143.352494][ T5911] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 143.392737][ T5911] Buffer I/O error on dev nbd0, logical block 0, async page read [ 143.395963][ T7486] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 143.412737][ T5911] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 143.442887][ T5911] Buffer I/O error on dev nbd0, logical block 0, async page read [ 143.457196][ T5911] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 143.480365][ T7467] UDF-fs: error (device loop2): udf_truncate_tail_extent: Extent after EOF in inode 1346 [ 143.498351][ T7486] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 143.526779][ T5911] Buffer I/O error on dev nbd0, logical block 0, async page read [ 143.575552][ T5911] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 143.646794][ T5911] Buffer I/O error on dev nbd0, logical block 0, async page read [ 143.663916][ T5911] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 143.683894][ T5911] Buffer I/O error on dev nbd0, logical block 0, async page read [ 143.693769][ T5911] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 143.706347][ T5911] Buffer I/O error on dev nbd0, logical block 0, async page read [ 143.750056][ T36] kworker/u8:2: attempt to access beyond end of device [ 143.750056][ T36] loop2: rw=1, sector=2048, nr_sectors = 1 limit=2048 [ 143.784604][ T5911] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 143.805733][ T36] Buffer I/O error on dev loop2, logical block 2048, lost async page write [ 143.817290][ T5911] ldm_validate_partition_table(): Disk read failed. [ 143.821244][ T7486] BTRFS info (device loop4): enabling ssd optimizations [ 143.832903][ T5911] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 143.850474][ T36] kworker/u8:2: attempt to access beyond end of device [ 143.850474][ T36] loop2: rw=1, sector=2048, nr_sectors = 1 limit=2048 [ 143.872283][ T7486] BTRFS info (device loop4): enabling free space tree [ 143.885665][ T5911] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 143.902827][ T7486] BTRFS info (device loop4): use zstd compression, level 3 [ 143.916200][ T36] kworker/u8:2: attempt to access beyond end of device [ 143.916200][ T36] loop2: rw=1, sector=2048, nr_sectors = 1 limit=2048 [ 143.951085][ T5911] Dev nbd0: unable to read RDB block 0 [ 143.962495][ T5911] nbd0: unable to read partition table [ 143.969662][ T36] kworker/u8:2: attempt to access beyond end of device [ 143.969662][ T36] loop2: rw=1, sector=2048, nr_sectors = 1 limit=2048 [ 144.010662][ T36] kworker/u8:2: attempt to access beyond end of device [ 144.010662][ T36] loop2: rw=1, sector=2048, nr_sectors = 1 limit=2048 [ 144.038110][ T30] audit: type=1800 audit(1757062005.127:66): pid=7486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.441" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 144.066656][ T5911] ldm_validate_partition_table(): Disk read failed. [ 144.099856][ T36] kworker/u8:2: attempt to access beyond end of device [ 144.099856][ T36] loop2: rw=1, sector=2049, nr_sectors = 1 limit=2048 [ 144.120134][ T5911] Dev nbd0: unable to read RDB block 0 [ 144.142360][ T5911] nbd0: unable to read partition table [ 144.157235][ T36] kworker/u8:2: attempt to access beyond end of device [ 144.157235][ T36] loop2: rw=1, sector=2049, nr_sectors = 1 limit=2048 [ 144.186053][ T5232] ldm_validate_partition_table(): Disk read failed. [ 144.195972][ T5232] Dev nbd0: unable to read RDB block 0 [ 144.197386][ T36] kworker/u8:2: attempt to access beyond end of device [ 144.197386][ T36] loop2: rw=1, sector=2049, nr_sectors = 1 limit=2048 [ 144.203734][ T5232] nbd0: unable to read partition table [ 144.247276][ T5232] ldm_validate_partition_table(): Disk read failed. [ 144.260191][ T5232] Dev nbd0: unable to read RDB block 0 [ 144.277752][ T5232] nbd0: unable to read partition table [ 144.369977][ T5861] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 144.413277][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 144.595139][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 144.626956][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.656777][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.682824][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 144.716405][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.750774][ T9] usb 1-1: config 0 descriptor?? [ 144.935777][ T1211] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 144.967703][ T1211] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 145.009532][ T1211] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 145.060114][ T7541] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 145.060803][ T1211] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 145.269837][ T1211] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 145.295727][ T9] koneplus 0003:1E7D:2D51.0001: item fetching failed at offset 1/5 [ 145.315884][ T1211] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 145.333519][ T9] koneplus 0003:1E7D:2D51.0001: parse failed [ 145.353795][ T9] koneplus 0003:1E7D:2D51.0001: probe with driver koneplus failed with error -22 [ 145.377312][ T1211] usb 4-1: USB disconnect, device number 3 [ 145.902210][ T2153] usb 1-1: USB disconnect, device number 6 [ 145.972400][ T7541] loop4: detected capacity change from 0 to 32768 [ 146.027514][ T7541] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.456 (7541) [ 146.109562][ T7541] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 146.138849][ T7541] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 146.150677][ T7558] loop3: detected capacity change from 0 to 128 [ 146.269415][ T7558] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 146.464904][ T7558] FAT-fs (loop3): FAT read failed (blocknr 32) [ 146.535788][ T7541] BTRFS info (device loop4): enabling ssd optimizations [ 146.565732][ T7541] BTRFS info (device loop4): enabling free space tree [ 146.612564][ T7541] BTRFS info (device loop4): use zstd compression, level 3 [ 146.667771][ T61] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 146.757154][ T7585] loop0: detected capacity change from 0 to 8 [ 146.762861][ T7582] loop2: detected capacity change from 0 to 8 [ 146.772997][ T7585] squashfs: Unknown parameter '0x0000000000000003' [ 146.790477][ T5861] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 146.820250][ T7582] SQUASHFS error: lzo decompression failed, data probably corrupt [ 146.879150][ T7582] SQUASHFS error: Failed to read block 0x91: -5 [ 146.969941][ T7582] SQUASHFS error: Unable to read metadata cache entry [8f] [ 147.012591][ T7582] SQUASHFS error: Unable to read inode 0x11f [ 147.692898][ T2153] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 147.878060][ T2153] usb 3-1: config index 0 descriptor too short (expected 47890, got 18) [ 147.902750][ T2153] usb 3-1: config 187 has too many interfaces: 187, using maximum allowed: 32 [ 147.934569][ T2153] usb 3-1: config 187 has an invalid descriptor of length 64, skipping remainder of the config [ 147.979761][ T2153] usb 3-1: config 187 has 0 interfaces, different from the descriptor's value: 187 [ 148.012060][ T2153] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 148.042851][ T2153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.073045][ T7587] loop3: detected capacity change from 0 to 32768 [ 148.140605][ T7587] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 148.255111][ T7587] XFS (loop3): Ending clean mount [ 148.289510][ T2153] usb 3-1: language id specifier not provided by device, defaulting to English [ 148.316135][ T7587] XFS (loop3): Quotacheck needed: Please wait. [ 148.359961][ T7597] loop0: detected capacity change from 0 to 32768 [ 148.382899][ T7587] XFS (loop3): Quotacheck: Done. [ 148.466648][ T7597] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 148.528263][ T2153] usb 3-1: USB disconnect, device number 4 [ 148.550024][ T7625] loop4: detected capacity change from 0 to 1024 [ 148.620765][ T30] audit: type=1800 audit(1757062009.737:67): pid=7597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.471" name="file1" dev="loop0" ino=17059 res=0 errno=0 [ 148.684515][ T7625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.745271][ T5878] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 148.763603][ T30] audit: type=1800 audit(1757062009.887:68): pid=7625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.480" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 148.876899][ T7625] loop4: detected capacity change from 1024 to 0 [ 148.921952][ C0] blk_print_req_error: 59 callbacks suppressed [ 148.921970][ C0] I/O error, dev loop4, sector 10 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 2 [ 148.932258][ T5866] ocfs2: Unmounting device (7,0) on (node local) [ 148.944098][ C0] I/O error, dev loop4, sector 18 op 0x0:(READ) flags 0x80700 phys_seg 5 prio class 2 [ 148.960982][ C0] I/O error, dev loop4, sector 16 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 148.972652][ T7631] EXT4-fs error (device loop4): ext4_get_inode_loc:4999: inode #15: block 8: comm syz.4.480: unable to read itable block [ 149.145064][ T5861] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /91/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 149.238801][ C1] I/O error, dev loop4, sector 12 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2 [ 149.239876][ C0] I/O error, dev loop4, sector 10 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 149.268557][ T5861] EXT4-fs error (device loop4): ext4_get_inode_loc:4999: inode #2: block 5: comm syz-executor: unable to read itable block [ 149.317650][ T5861] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: IO failure [ 149.343542][ T5861] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 149.365668][ T7635] overlayfs: failed to clone upperpath [ 149.483906][ C0] I/O error, dev loop4, sector 12 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2 [ 149.495722][ C0] I/O error, dev loop4, sector 10 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 149.514865][ T1100] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4984: inode #2: block 5: comm kworker/u8:6: unable to read itable block [ 149.584824][ T5861] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.931378][ T7633] loop2: detected capacity change from 0 to 32768 [ 149.955835][ T7633] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.484 (7633) [ 150.038519][ T7633] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 150.097579][ T7633] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 150.108261][ T5976] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 150.201844][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.278399][ T7633] BTRFS info (device loop2): enabling ssd optimizations [ 150.294587][ T5976] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 150.312717][ T5976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.337262][ T5976] usb 1-1: config 0 descriptor?? [ 150.362464][ T7633] BTRFS info (device loop2): enabling free space tree [ 150.488090][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.610295][ T5872] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 150.704897][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.848577][ T7677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.495'. [ 150.944026][ T7682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.495'. [ 150.961321][ T7679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.496'. [ 151.014333][ T7684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.496'. [ 151.035647][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.646813][ T13] bridge_slave_1: left allmulticast mode [ 151.691845][ T13] bridge_slave_1: left promiscuous mode [ 151.715470][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.745802][ T5864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.761581][ T5864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.775148][ T5864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.790728][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.801919][ T5864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.845031][ T13] bridge_slave_0: left allmulticast mode [ 151.851836][ T13] bridge_slave_0: left promiscuous mode [ 151.858839][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.016551][ T5976] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 152.046641][ T5976] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 152.079868][ T5976] asix 1-1:0.0: probe with driver asix failed with error -71 [ 152.126988][ T5976] usb 1-1: USB disconnect, device number 7 [ 152.153462][ T5940] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 152.354614][ T5940] usb 3-1: Using ep0 maxpacket: 8 [ 152.392524][ T5940] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 152.421045][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.465543][ T5940] usb 3-1: config 0 descriptor?? [ 153.073465][ T2153] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 153.269731][ T2153] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 153.294664][ T2153] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.321607][ T2153] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 153.342264][ T2153] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.366724][ T2153] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 153.396976][ T2153] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 153.435377][ T2153] usb 4-1: Product: syz [ 153.440560][ T2153] usb 4-1: Manufacturer: syz [ 153.471776][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.501873][ T2153] cdc_wdm 4-1:1.0: skipping garbage [ 153.529440][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.561510][ T13] bond0 (unregistering): Released all slaves [ 153.573966][ T2153] cdc_wdm 4-1:1.0: skipping garbage [ 153.661122][ T2153] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 153.679709][ T2153] cdc_wdm 4-1:1.0: Unknown control protocol [ 153.731860][ T2153] usb 4-1: USB disconnect, device number 4 [ 153.844557][ T5864] Bluetooth: hci1: command tx timeout [ 154.145137][ T5940] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 154.197528][ T5940] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 154.242876][ T2153] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 154.250455][ T5940] asix 3-1:0.0: probe with driver asix failed with error -71 [ 154.306343][ T5940] usb 3-1: USB disconnect, device number 5 [ 154.424533][ T2153] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 154.439725][ T2153] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.464436][ T2153] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 154.488555][ T2153] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.538979][ T2153] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 154.561965][ T2153] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 154.608853][ T2153] usb 4-1: Product: syz [ 154.630158][ T2153] usb 4-1: Manufacturer: syz [ 154.679423][ T2153] cdc_wdm 4-1:1.0: skipping garbage [ 154.712530][ T2153] cdc_wdm 4-1:1.0: skipping garbage [ 154.748005][ T2153] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 154.755483][ T2153] cdc_wdm 4-1:1.0: Unknown control protocol [ 154.832183][ T7746] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 154.932482][ T13] hsr_slave_0: left promiscuous mode [ 154.991464][ T13] hsr_slave_1: left promiscuous mode [ 155.015239][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.047535][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.096799][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.132771][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.247407][ T13] veth1_macvtap: left promiscuous mode [ 155.258722][ T13] veth0_macvtap: left promiscuous mode [ 155.291971][ T13] veth1_vlan: left promiscuous mode [ 155.317829][ T13] veth0_vlan: left promiscuous mode [ 155.436423][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 155.444577][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 155.452142][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 155.460051][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 155.467599][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 155.475508][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 155.482999][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 155.490911][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 155.503253][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 155.511179][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 155.521430][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 155.529346][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 155.537394][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 155.545306][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 155.553504][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 155.557381][ T5940] usb 4-1: USB disconnect, device number 5 [ 155.561414][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 155.575602][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 155.930691][ T5864] Bluetooth: hci1: command tx timeout [ 156.189764][ T7785] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 156.816012][ T7798] loop0: detected capacity change from 0 to 16 [ 156.852112][ T7798] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 158.007309][ T5864] Bluetooth: hci1: command tx timeout [ 158.231998][ T13] team0 (unregistering): Port device team_slave_1 removed [ 158.262195][ T7816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.536'. [ 158.383655][ T13] team0 (unregistering): Port device team_slave_0 removed [ 158.414186][ T7820] loop0: detected capacity change from 0 to 1024 [ 158.654495][ T7813] Driver unsupported XDP return value 0 on prog (id 78) dev N/A, expect packet loss! [ 159.563505][ T7782] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.574518][ T7782] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.705324][ T7835] loop0: detected capacity change from 0 to 32768 [ 159.758052][ T7835] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.542 (7835) [ 159.824745][ T7782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.840007][ T7835] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 159.842958][ T7782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.878276][ T7835] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 159.985132][ T7835] BTRFS info (device loop0): rebuilding free space tree [ 160.036815][ T7835] BTRFS info (device loop0): allowing degraded mounts [ 160.047401][ T7835] BTRFS info (device loop0): enabling ssd optimizations [ 160.059780][ T7835] BTRFS info (device loop0): enabling free space tree [ 160.070376][ T7835] BTRFS info (device loop0): force clearing of disk cache [ 160.082820][ T5864] Bluetooth: hci1: command tx timeout [ 160.092080][ T7835] BTRFS info (device loop0): use zstd compression, level 3 [ 160.182788][ T7835] BTRFS info (device loop0): max_inline set to 0 [ 160.279800][ T30] audit: type=1800 audit(1757062021.397:69): pid=7835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.542" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 160.397224][ T7695] chnl_net:caif_netlink_parms(): no params data found [ 160.452408][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.480161][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.572818][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.585996][ T7879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.545'. [ 160.625273][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.687541][ T5866] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 161.485899][ T7903] evm: overlay not supported [ 161.486874][ T7695] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.527327][ T7903] loop3: detected capacity change from 0 to 16 [ 161.562974][ T7695] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.571808][ T7695] bridge_slave_0: entered allmulticast mode [ 161.622316][ T7695] bridge_slave_0: entered promiscuous mode [ 161.682421][ T7695] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.700018][ T7908] netlink: 277 bytes leftover after parsing attributes in process `syz.1.552'. [ 161.710670][ T7695] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.739474][ T7695] bridge_slave_1: entered allmulticast mode [ 161.810018][ T7695] bridge_slave_1: entered promiscuous mode [ 162.027195][ T7695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.075268][ T7695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.130675][ T7923] overlayfs: failed to clone upperpath [ 162.168759][ T7921] sd 0:0:1:0: PR command failed: 1026 [ 162.189844][ T7921] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 162.199284][ T7921] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 162.202929][ T7695] team0: Port device team_slave_0 added [ 162.241514][ T7695] team0: Port device team_slave_1 added [ 162.514608][ T7695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.523351][ T7695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.558044][ T7695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.576914][ T7929] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 162.761885][ T7695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.791596][ T7695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.836967][ T7695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.212545][ T7695] hsr_slave_0: entered promiscuous mode [ 163.226599][ T7695] hsr_slave_1: entered promiscuous mode [ 163.598529][ T7943] netlink: 24 bytes leftover after parsing attributes in process `syz.1.563'. [ 164.044491][ T7952] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.109821][ T7963] kernel read not supported for file /z (pid: 7963 comm: syz.3.568) [ 164.137382][ T30] audit: type=1800 audit(1757062025.257:70): pid=7963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.568" name=7ABF17 dev="mqueue" ino=16392 res=0 errno=0 [ 164.200167][ T7952] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.242637][ T7695] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 164.265342][ T7695] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 164.351798][ T7952] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.396971][ T7695] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 164.438389][ T7695] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 164.498148][ T7952] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.922077][ T1162] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.940418][ T1162] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.035415][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.072494][ T1111] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.147344][ T7695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.209252][ T7695] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.262972][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.271573][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.320609][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.329229][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.001621][ T7695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.632778][ T2153] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 166.816143][ T2153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.853998][ T2153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.933925][ T2153] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 167.007621][ T2153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.062555][ T2153] usb 1-1: config 0 descriptor?? [ 167.215955][ T7695] veth0_vlan: entered promiscuous mode [ 167.244736][ T8047] loop3: detected capacity change from 0 to 256 [ 167.259780][ T7695] veth1_vlan: entered promiscuous mode [ 167.275715][ T8047] exfat: Bad value for 'uid' [ 167.332814][ T8047] exfat: Bad value for 'uid' [ 167.417318][ T7695] veth0_macvtap: entered promiscuous mode [ 167.456904][ T7695] veth1_macvtap: entered promiscuous mode [ 167.519387][ T7695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.535431][ T2153] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 167.547580][ T2153] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 167.558479][ T2153] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 167.573405][ T7695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.582232][ T2153] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 167.595627][ T2153] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 167.613258][ T2153] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 167.622379][ T1162] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.624360][ T2153] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 167.655430][ T1162] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.687249][ T1162] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.703889][ T2153] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 167.720357][ T1162] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.805130][ T2153] cp2112 0003:10C4:EA90.0002: Part Number: 0x00 Device Version: 0x00 [ 167.894985][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.929107][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.023521][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.052828][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.408978][ T8035] cp2112 0003:10C4:EA90.0002: Unsupported transaction 0 [ 168.423604][ T2153] cp2112 0003:10C4:EA90.0002: error reading lock byte: -71 [ 168.471674][ T2153] usb 1-1: USB disconnect, device number 8 [ 168.479299][ T8051] loop3: detected capacity change from 0 to 32768 [ 168.548167][ T8051] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 168.616914][ T8074] loop2: detected capacity change from 0 to 256 [ 168.676316][ T8074] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 168.759715][ T8074] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 168.776599][ T8051] XFS (loop3): Ending clean mount [ 169.217785][ T5878] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 169.692916][ T8107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.609'. [ 169.773196][ T8105] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 169.814225][ T2153] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 170.010055][ T2153] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 170.013978][ T8116] loop5: detected capacity change from 0 to 1024 [ 170.042814][ T2153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.072902][ T2153] usb 4-1: Product: syz [ 170.077923][ T2153] usb 4-1: Manufacturer: syz [ 170.100315][ T8116] EXT4-fs: Ignoring removed orlov option [ 170.109769][ T2153] usb 4-1: SerialNumber: syz [ 170.145549][ T2153] usb 4-1: config 0 descriptor?? [ 170.179876][ T8116] EXT4-fs (loop5): Test dummy encryption mode enabled [ 170.236737][ T8116] EXT4-fs (loop5): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 170.425287][ T2153] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 170.630118][ T8116] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.665489][ T8128] loop0: detected capacity change from 0 to 1024 [ 170.679358][ T8116] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 170.690434][ T8128] EXT4-fs: Ignoring removed nobh option [ 170.730833][ T8128] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.948187][ T5866] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.480448][ T7695] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.573962][ T8145] binder: 8144:8145 ioctl c0306201 200000000640 returned -22 [ 171.839132][ T2153] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 171.903120][ T2153] usb 4-1: USB disconnect, device number 6 [ 172.628138][ T8176] loop5: detected capacity change from 0 to 512 [ 172.710002][ T8176] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.731625][ T8176] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 172.971032][ T7695] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.774661][ T8199] loop0: detected capacity change from 0 to 32768 [ 173.823724][ T8199] JBD2: Ignoring recovery information on journal [ 173.926228][ T8199] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 174.170053][ T5866] ocfs2: Unmounting device (7,0) on (node local) [ 174.437813][ T8222] process 'syz.0.647' launched './file0' with NULL argv: empty string added [ 175.275546][ T8230] loop2: detected capacity change from 0 to 2048 [ 175.382703][ T8230] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.436029][ T8230] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.332135][ T5872] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.711990][ T8259] loop2: detected capacity change from 0 to 1024 [ 176.745050][ T8259] hfsplus: Unknown parameter 'creatorG' [ 177.191124][ T8273] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.201209][ T8273] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.263799][ T8280] loop3: detected capacity change from 0 to 1024 [ 177.323889][ T8280] EXT4-fs: Ignoring removed nobh option [ 177.330802][ T8280] EXT4-fs: Ignoring removed bh option [ 177.356438][ T8283] netlink: 24 bytes leftover after parsing attributes in process `syz.1.663'. [ 177.469364][ T8280] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.508307][ T8287] netlink: 24 bytes leftover after parsing attributes in process `syz.1.663'. [ 177.611073][ T8290] netlink: 4 bytes leftover after parsing attributes in process `syz.5.664'. [ 177.704832][ T5878] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.939885][ T8273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.024452][ T8273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.809175][ T1162] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.815126][ T8294] loop3: detected capacity change from 0 to 32768 [ 178.828417][ T1162] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.880521][ T1162] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.925294][ T7873] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.984997][ T8294] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 179.281572][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.670'. [ 179.301810][ T8294] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 179.554020][ T8294] XFS (loop3): Starting recovery (logdev: internal) [ 179.699712][ T8294] XFS (loop3): Ending recovery (logdev: internal) [ 179.983183][ T5878] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 182.124655][ T8385] loop2: detected capacity change from 0 to 512 [ 182.183906][ T8385] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 182.365932][ T7873] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 182.922756][ T7845] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 183.092717][ T7845] usb 1-1: Using ep0 maxpacket: 16 [ 183.108285][ T7845] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.137298][ T7845] usb 1-1: config 0 interface 0 has no altsetting 0 [ 183.157176][ T7845] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 183.954779][ T7845] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.983775][ T7845] usb 1-1: config 0 descriptor?? [ 184.446889][ T7845] nzxt-smart2 0003:1E71:2009.0003: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 184.875696][ T7845] usb 1-1: USB disconnect, device number 9 [ 185.711277][ T8440] tipc: Failed to remove unknown binding: 66,3,3/0:2298530267/2298530268 [ 185.960462][ T8435] loop2: detected capacity change from 0 to 32768 [ 185.984526][ T8448] loop5: detected capacity change from 0 to 256 [ 186.013943][ T8435] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 186.047462][ T8448] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 186.273670][ T8435] XFS (loop2): Ending clean mount [ 186.578986][ T5872] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 186.608372][ T7839] kernel read not supported for file /397/ns (pid: 7839 comm: kworker/1:8) [ 187.398799][ T8499] loop2: detected capacity change from 0 to 512 [ 187.547062][ T8499] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.563689][ T8499] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.867305][ T5872] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.250340][ T8487] loop3: detected capacity change from 0 to 32768 [ 188.339483][ T8512] loop2: detected capacity change from 0 to 8192 [ 188.374340][ T8512] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 188.405875][ T8487] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 188.626337][ T8512] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 188.637220][ T8512] FAT-fs (loop2): Filesystem has been set read-only [ 188.652897][ T8512] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 188.664556][ T8512] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 188.717547][ T8487] XFS (loop3): Ending clean mount [ 188.788502][ T8487] XFS (loop3): Quotacheck needed: Please wait. [ 188.933554][ T8487] XFS (loop3): Quotacheck: Done. [ 188.948936][ T5872] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 189.173756][ T5878] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 189.333741][ T8532] netlink: 12 bytes leftover after parsing attributes in process `syz.5.728'. [ 189.863366][ T8549] netlink: 24 bytes leftover after parsing attributes in process `syz.0.732'. [ 190.373236][ T7845] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 190.563124][ T7845] usb 3-1: Using ep0 maxpacket: 16 [ 190.610601][ T7845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 190.642272][ T7845] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 190.675908][ T7845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.689343][ T7845] usb 3-1: Product: syz [ 190.705722][ T7845] usb 3-1: Manufacturer: syz [ 190.711264][ T7845] usb 3-1: SerialNumber: syz [ 190.764971][ T7845] usb 3-1: config 0 descriptor?? [ 190.782804][ T7845] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 190.811935][ T7845] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 191.298663][ T5994] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 191.401418][ T7845] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 191.505341][ T5994] usb 1-1: config 0 has an invalid interface number: 112 but max is 0 [ 191.527951][ T5994] usb 1-1: config 0 has no interface number 0 [ 191.543062][ T5994] usb 1-1: New USB device found, idVendor=3154, idProduct=721e, bcdDevice= 9.c6 [ 191.569541][ T5994] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.595410][ T5994] usb 1-1: config 0 descriptor?? [ 191.625286][ T5994] usb-storage 1-1:0.112: USB Mass Storage device detected [ 191.729149][ T8597] fuse: Bad value for 'fd' [ 191.847417][ T5994] usb 1-1: USB disconnect, device number 10 [ 192.084676][ T7845] em28xx 3-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 192.109509][ T7845] em28xx 3-1:0.0: board has no eeprom [ 192.186402][ T7845] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 192.196012][ T7845] em28xx 3-1:0.0: dvb set to bulk mode. [ 192.202898][ T5994] em28xx 3-1:0.0: Binding DVB extension [ 192.244375][ T7845] usb 3-1: USB disconnect, device number 6 [ 192.272134][ T7845] em28xx 3-1:0.0: Disconnecting em28xx [ 192.293322][ T5994] em28xx 3-1:0.0: Registering input extension [ 192.323847][ T7845] em28xx 3-1:0.0: Closing input extension [ 192.389947][ T7845] em28xx 3-1:0.0: Freeing device [ 193.016756][ T8604] overlayfs: failed to clone upperpath [ 193.388122][ T8632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.765'. [ 194.169795][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.184655][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.201034][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL [ 196.243060][ T5182] Bluetooth: hci2: command 0x0406 tx timeout [ 196.243576][ T5871] Bluetooth: hci3: command 0x0406 tx timeout [ 196.251400][ T5182] Bluetooth: hci0: command 0x0406 tx timeout [ 196.509162][ T8685] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 196.911081][ T8702] loop0: detected capacity change from 0 to 128 [ 197.115045][ T8702] bio_check_eod: 19 callbacks suppressed [ 197.115065][ T8702] syz.0.794: attempt to access beyond end of device [ 197.115065][ T8702] loop0: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 197.176538][ T8702] syz.0.794: attempt to access beyond end of device [ 197.176538][ T8702] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 197.244276][ T8702] syz.0.794: attempt to access beyond end of device [ 197.244276][ T8702] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 197.262641][ T8713] netlink: 96 bytes leftover after parsing attributes in process `syz.3.798'. [ 197.282383][ T8702] syz.0.794: attempt to access beyond end of device [ 197.282383][ T8702] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 197.999863][ T8690] overlayfs: failed to clone upperpath [ 198.058258][ T8711] loop2: detected capacity change from 0 to 32768 [ 198.086878][ T8711] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.797 (8711) [ 198.185923][ T8711] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 198.252772][ T8711] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 198.387523][ T8711] BTRFS info (device loop2): rebuilding free space tree [ 198.585600][ T8711] BTRFS info (device loop2): enabling ssd optimizations [ 198.684458][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.5.808'. [ 198.751230][ T8711] BTRFS info (device loop2): turning on sync discard [ 198.774902][ T8711] BTRFS info (device loop2): enabling free space tree [ 198.816515][ T8711] BTRFS info (device loop2): force clearing of disk cache [ 198.831133][ T8711] BTRFS info (device loop2): enabling auto defrag [ 198.850099][ T8711] BTRFS info (device loop2): max_inline set to 0 [ 199.026493][ T30] audit: type=1800 audit(1757062060.137:71): pid=8711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.797" name="memory.events" dev="loop2" ino=264 res=0 errno=0 [ 199.701950][ T5872] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 199.999449][ T8805] netlink: 24 bytes leftover after parsing attributes in process `syz.5.814'. [ 200.446452][ T8814] sctp: [Deprecated]: syz.1.817 (pid 8814) Use of struct sctp_assoc_value in delayed_ack socket option. [ 200.446452][ T8814] Use struct sctp_sack_info instead [ 202.956933][ T8849] netlink: 'syz.2.832': attribute type 83 has an invalid length. [ 203.541298][ T8863] tipc: Started in network mode [ 203.586068][ T8863] tipc: Node identity 100, cluster identity 4711 [ 203.607611][ T8863] tipc: Node number set to 256 [ 204.924896][ T7845] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 205.119185][ T7845] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.162455][ T7845] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 205.185312][ T7845] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.231762][ T7845] usb 1-1: config 0 descriptor?? [ 205.288126][ T7845] pwc: Askey VC010 type 2 USB webcam detected. [ 205.444055][ T8899] loop3: detected capacity change from 0 to 32768 [ 205.467780][ T8899] XFS: ikeep mount option is deprecated. [ 205.536671][ T8899] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 205.693875][ T8899] XFS (loop3): Ending clean mount [ 205.709882][ T7845] pwc: recv_control_msg error -32 req 02 val 2b00 [ 205.736424][ T8899] XFS (loop3): Quotacheck needed: Please wait. [ 205.748459][ T7845] pwc: recv_control_msg error -32 req 02 val 2700 [ 205.765539][ T7845] pwc: recv_control_msg error -32 req 02 val 2c00 [ 205.785210][ T7845] pwc: recv_control_msg error -32 req 04 val 1000 [ 205.800065][ T7845] pwc: recv_control_msg error -32 req 04 val 1300 [ 205.830648][ T8899] XFS (loop3): Quotacheck: Done. [ 206.042262][ T7845] pwc: recv_control_msg error -71 req 02 val 2000 [ 206.079709][ T7845] pwc: recv_control_msg error -71 req 02 val 2100 [ 206.102790][ T7845] pwc: recv_control_msg error -71 req 04 val 1500 [ 206.122528][ T7845] pwc: recv_control_msg error -71 req 02 val 2500 [ 206.141955][ T7845] pwc: recv_control_msg error -71 req 02 val 2400 [ 206.160101][ T5878] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 206.189526][ T7845] pwc: recv_control_msg error -71 req 02 val 2600 [ 206.218084][ T7845] pwc: recv_control_msg error -71 req 02 val 2900 [ 206.238191][ T7845] pwc: recv_control_msg error -71 req 02 val 2800 [ 206.251731][ T7845] pwc: recv_control_msg error -71 req 04 val 1100 [ 206.272609][ T7845] pwc: recv_control_msg error -71 req 04 val 1200 [ 206.303145][ T7845] pwc: Registered as video103. [ 206.367796][ T7845] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 206.468181][ T7845] usb 1-1: USB disconnect, device number 11 [ 207.155350][ T8972] KVM: debugfs: duplicate directory 8972-4 [ 207.307683][ T30] audit: type=1326 audit(1757062068.172:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8975 comm="syz.3.883" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f5018ebe9 code=0x0 [ 207.333571][ C1] vkms_vblank_simulate: vblank timer overrun [ 208.322946][ T9009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.896'. [ 208.341141][ T9009] netlink: 12 bytes leftover after parsing attributes in process `syz.0.896'. [ 208.591922][ T9018] loop3: detected capacity change from 0 to 8 [ 208.647311][ T9018] SQUASHFS error: zlib decompression failed, data probably corrupt [ 208.698517][ T9018] SQUASHFS error: Failed to read block 0x9b: -5 [ 208.735547][ T9018] SQUASHFS error: Unable to read metadata cache entry [99] [ 208.760956][ T9018] SQUASHFS error: Unable to read inode 0x127 [ 208.967789][ T9032] loop0: detected capacity change from 0 to 128 [ 209.016743][ T9032] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 209.037419][ T9032] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.268472][ T5866] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 210.203302][ T5862] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 210.317177][ T9066] loop3: detected capacity change from 0 to 512 [ 210.341868][ T9066] EXT4-fs (loop3): first meta block group too large: 65 (group descriptor block count 1) [ 210.381599][ T5862] usb 1-1: Using ep0 maxpacket: 32 [ 210.393334][ T5862] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 210.412189][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.440174][ T5862] usb 1-1: config 0 descriptor?? [ 210.450480][ T5862] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 211.457449][ T5862] gspca_nw80x: reg_w err -110 [ 211.463263][ T5862] nw80x 1-1:0.0: probe with driver nw80x failed with error -110 [ 211.807340][ T9070] loop3: detected capacity change from 0 to 262144 [ 211.835227][ T9070] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.920 (9070) [ 211.857975][ T9070] BTRFS info (device loop3): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 211.870203][ T9070] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 212.096399][ T9070] BTRFS info (device loop3): enabling ssd optimizations [ 212.104810][ T9070] BTRFS info (device loop3): enabling free space tree [ 212.447278][ T5878] BTRFS info (device loop3): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 212.599927][ T30] audit: type=1804 audit(1757062073.128:73): pid=9097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.926" name="/newroot/164/file0/file1" dev="overlay" ino=907 res=1 errno=0 [ 212.678309][ T9100] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 213.100769][ T9111] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 213.500367][ T7839] usb 1-1: USB disconnect, device number 12 [ 213.895420][ T9133] block nbd0: Attempted send on invalid socket [ 213.903235][ T9133] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 213.926462][ T9133] block nbd0: Attempted send on invalid socket [ 213.934220][ T9133] I/O error, dev nbd0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 213.947539][ T9133] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 213.967920][ T9133] block nbd0: Attempted send on invalid socket [ 213.975627][ T9133] I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 213.988991][ T9133] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 214.021556][ T9133] block nbd0: Attempted send on invalid socket [ 214.032386][ T9133] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 214.046658][ T9133] block nbd0: Attempted send on invalid socket [ 214.054082][ T9133] I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 214.067037][ T9133] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 214.083400][ T9133] block nbd0: Attempted send on invalid socket [ 214.092278][ T9133] I/O error, dev nbd0, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 214.105939][ T9133] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 214.133400][ T9133] block nbd0: Attempted send on invalid socket [ 214.144271][ T9133] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 214.157561][ T9133] block nbd0: Attempted send on invalid socket [ 214.169334][ T9133] I/O error, dev nbd0, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 214.183557][ T9133] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 214.196386][ T9133] block nbd0: Attempted send on invalid socket [ 214.203874][ T9133] I/O error, dev nbd0, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 214.217155][ T9133] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 214.228973][ T9133] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 215.114176][ T9126] loop2: detected capacity change from 0 to 32768 [ 215.189586][ T9126] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.937 (9126) [ 215.295438][ T9126] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 215.352182][ T9126] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 215.643111][ T9126] BTRFS info (device loop2): enabling ssd optimizations [ 215.661454][ T9126] BTRFS info (device loop2): enabling free space tree [ 215.669621][ T9126] BTRFS info (device loop2): use zlib compression, level 3 [ 215.754851][ T30] audit: type=1800 audit(1757062076.073:74): pid=9126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.937" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 215.810236][ T9147] loop3: detected capacity change from 0 to 32768 [ 216.074879][ T9197] Invalid source name [ 216.080033][ T9197] UBIFS error (pid: 9197): cannot open "./file0", error -22 [ 216.090579][ T5872] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 216.214266][ T9147] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow [ 216.214296][ T9147] allowing incompatible features above 0.0: (unknown version) [ 216.214309][ T9147] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 216.421357][ T9147] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 216.466658][ T9147] bcachefs (loop3): initializing new filesystem [ 216.537578][ T9147] bcachefs (loop3): going read-write [ 216.641539][ T9147] bcachefs (loop3): marking superblocks [ 216.750772][ T9147] bcachefs (loop3): initializing freespace [ 216.849394][ T9147] bcachefs (loop3): done initializing freespace [ 216.941971][ T9147] bcachefs (loop3): reading snapshots table [ 216.981870][ T9147] bcachefs (loop3): reading snapshots done [ 217.192148][ T9147] bcachefs (loop3): done starting filesystem [ 217.377687][ T9147] bcachefs (loop3): going read-only [ 217.419545][ T9147] bcachefs (loop3): finished waiting for writes to stop [ 217.481557][ T9147] bcachefs (loop3): flushing journal and stopping allocators, journal seq 10 [ 217.781585][ T9147] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 15 [ 217.845563][ T9147] bcachefs (loop3): clean shutdown complete, journal seq 16 [ 217.892052][ T9223] loop0: detected capacity change from 0 to 1024 [ 217.929627][ T9147] bcachefs (loop3): marking filesystem clean [ 218.051175][ T5878] bcachefs (loop3): shutting down [ 218.177555][ T8798] hfsplus: b-tree write err: -5, ino 4 [ 218.213241][ T5878] bcachefs (loop3): shutdown complete [ 218.608742][ T9240] loop0: detected capacity change from 0 to 1024 [ 218.684151][ T9240] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.907755][ T5866] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.102383][ T5994] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 219.286517][ T5994] usb 3-1: Using ep0 maxpacket: 32 [ 219.301520][ T5994] usb 3-1: config 0 has an invalid interface number: 171 but max is 0 [ 219.328487][ T5994] usb 3-1: config 0 has no interface number 0 [ 219.361768][ T5994] usb 3-1: too many endpoints for config 0 interface 171 altsetting 48: 99, using maximum allowed: 30 [ 219.387114][ T5994] usb 3-1: config 0 interface 171 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 99 [ 219.445305][ T5994] usb 3-1: config 0 interface 171 has no altsetting 0 [ 219.470107][ T5994] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 219.492506][ T5994] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.546469][ T5994] usb 3-1: config 0 descriptor?? [ 219.837724][ T5994] usb 3-1: string descriptor 0 read error: -32 [ 219.869392][ T5994] gspca_main: sunplus-2.14.0 probing 041e:400b [ 220.107967][ T5994] gspca_sunplus: reg_w_riv err -71 [ 220.142174][ T5994] sunplus 3-1:0.171: probe with driver sunplus failed with error -71 [ 220.168123][ T5994] usb 3-1: USB disconnect, device number 7 [ 220.663694][ T9275] loop0: detected capacity change from 0 to 32768 [ 220.701962][ T9275] XFS: noikeep mount option is deprecated. [ 220.776472][ T9275] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 220.855331][ T9286] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 220.870889][ T9286] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 220.880179][ T9286] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 220.898201][ T9286] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 220.912958][ T9286] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 220.921075][ T9286] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 220.930271][ T9286] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 220.935826][ T9275] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 220.948928][ T9286] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 220.959992][ T9286] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 220.969718][ T9286] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 220.978484][ T9286] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 220.983120][ T9275] XFS (loop0): Starting recovery (logdev: internal) [ 220.986319][ T9286] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 221.013329][ T9286] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 221.028937][ T9286] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 221.040043][ T9286] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 221.050577][ T9286] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 221.060675][ T9286] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 221.068993][ T9286] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 221.071742][ T9275] XFS (loop0): Ending recovery (logdev: internal) [ 221.089712][ T9286] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 221.097974][ T9286] comedi comedi3: 8255: I/O port conflict (0x8000000,4) [ 221.106422][ T9286] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4) [ 221.368847][ T5866] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 223.357372][ T9307] loop0: detected capacity change from 0 to 262144 [ 223.366791][ T9307] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.995 (9307) [ 223.386317][ T9307] BTRFS info (device loop0): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 223.398888][ T9307] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 223.634386][ T9307] BTRFS info (device loop0): enabling ssd optimizations [ 223.643490][ T9307] BTRFS info (device loop0): enabling free space tree [ 224.128472][ T9338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1001'. [ 224.195972][ T7845] kernel write not supported for file bpf-prog (pid: 7845 comm: kworker/1:14) [ 224.244449][ T5866] BTRFS info (device loop0): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 224.922361][ T5994] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 225.104192][ T5994] usb 1-1: Using ep0 maxpacket: 16 [ 225.127060][ T5994] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.253635][ T5994] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.272055][ T5994] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 225.296449][ T5994] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.393030][ T9357] loop2: detected capacity change from 0 to 4096 [ 225.465638][ T5994] usb 1-1: config 0 descriptor?? [ 225.743494][ T52] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 226.162766][ T5994] usb 1-1: language id specifier not provided by device, defaulting to English [ 226.420117][ T5994] letsketch 0003:6161:4D15.0004: Device info:   [ 226.616482][ T5994] letsketch 0003:6161:4D15.0004: Device info: ᣍ [ 226.841506][ T5994] letsketch 0003:6161:4D15.0004: Device info: ఁ [ 227.581648][ T5994] usb 1-1: Max retries (5) exceeded reading string descriptor 2 [ 227.628302][ T5994] letsketch 0003:6161:4D15.0004: probe with driver letsketch failed with error -71 [ 227.750459][ T5994] usb 1-1: USB disconnect, device number 13 [ 227.798811][ T30] audit: type=1800 audit(1757062087.332:75): pid=9396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1017" name="bus" dev="overlay" ino=974 res=0 errno=0 [ 228.792417][ T9430] loop2: detected capacity change from 0 to 1024 [ 228.816440][ T9430] EXT4-fs: Ignoring removed oldalloc option [ 228.831811][ T9430] EXT4-fs: Ignoring removed bh option [ 228.886430][ T9430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.957161][ T30] audit: type=1804 audit(1757062088.426:76): pid=9430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1026" name="/newroot/185/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 229.263324][ T5872] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.066053][ T9460] loop3: detected capacity change from 0 to 256 [ 230.099152][ T9460] exfat: Deprecated parameter 'namecase' [ 230.132717][ T9460] exfat: Deprecated parameter 'utf8' [ 230.194914][ T9460] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 230.603090][ T9474] overlayfs: failed to clone upperpath [ 230.696468][ T9479] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1045'. [ 232.097907][ T9503] nbd2: detected capacity change from 0 to 1024 [ 232.119466][ T5993] block nbd2: Send control failed (result -89) [ 232.165350][ T5993] block nbd2: Request send failed, requeueing [ 232.201509][ T52] block nbd2: Receive control failed (result -32) [ 232.201616][ T95] block nbd2: Dead connection, failed to find a fallback [ 232.221526][ T95] block nbd2: shutting down sockets [ 232.228456][ T95] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 232.239360][ T95] buffer_io_error: 88 callbacks suppressed [ 232.239374][ T95] Buffer I/O error on dev nbd2, logical block 0, async page read [ 232.255792][ T5993] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 232.266871][ T5993] Buffer I/O error on dev nbd2, logical block 0, async page read [ 232.276570][ T5993] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 232.290119][ T5993] Buffer I/O error on dev nbd2, logical block 0, async page read [ 232.299573][ T5993] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 232.310602][ T5993] Buffer I/O error on dev nbd2, logical block 0, async page read [ 232.320638][ T5993] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 232.331576][ T5993] Buffer I/O error on dev nbd2, logical block 0, async page read [ 232.341072][ T5993] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 232.352451][ T5993] Buffer I/O error on dev nbd2, logical block 0, async page read [ 232.361985][ T5993] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 232.372861][ T5993] Buffer I/O error on dev nbd2, logical block 0, async page read [ 232.382329][ T5993] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 232.407803][ T5993] Buffer I/O error on dev nbd2, logical block 0, async page read [ 232.423628][ T5993] ldm_validate_partition_table(): Disk read failed. [ 232.440565][ T5993] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 232.459001][ T5993] Buffer I/O error on dev nbd2, logical block 0, async page read [ 232.516797][ T5993] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 232.535393][ T5993] Buffer I/O error on dev nbd2, logical block 0, async page read [ 232.547398][ T5993] Dev nbd2: unable to read RDB block 0 [ 232.554585][ T5993] nbd2: unable to read partition table [ 232.564535][ T9494] loop0: detected capacity change from 0 to 32768 [ 232.577930][ T5993] ldm_validate_partition_table(): Disk read failed. [ 232.617864][ T5993] Dev nbd2: unable to read RDB block 0 [ 232.629076][ T5993] nbd2: unable to read partition table [ 232.655664][ T5232] ldm_validate_partition_table(): Disk read failed. [ 232.694885][ T9494] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 232.695513][ T5232] Dev nbd2: unable to read RDB block 0 [ 232.713328][ T5232] nbd2: unable to read partition table [ 232.979129][ T5866] ocfs2: Unmounting device (7,0) on (node local) [ 233.663918][ T9549] loop2: detected capacity change from 0 to 1024 [ 233.682873][ T9549] EXT4-fs: inline encryption not supported [ 233.704574][ T9549] EXT4-fs: Ignoring removed i_version option [ 233.719493][ T9551] sctp: [Deprecated]: syz.1.1071 (pid 9551) Use of struct sctp_assoc_value in delayed_ack socket option. [ 233.719493][ T9551] Use struct sctp_sack_info instead [ 233.746218][ T9549] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 233.838047][ T9549] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #3: block 1: comm syz.2.1072: lblock 1 mapped to illegal pblock 1 (length 1) [ 233.963778][ T9549] Quota error (device loop2): write_blk: dquota write failed [ 233.982840][ T9549] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 234.013614][ T9549] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.1072: Failed to acquire dquot type 0 [ 234.047025][ T9549] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.1072: Freeing blocks not in datazone - block = 0, count = 4096 [ 234.102937][ T9549] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.1072: Invalid inode bitmap blk 0 in block_group 0 [ 234.122299][ T8793] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 234.142200][ T9549] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 234.154594][ T8793] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 234.166950][ T8793] EXT4-fs error (device loop2): ext4_release_dquot:6979: comm kworker/u8:12: Failed to release dquot type 0 [ 234.197381][ T9549] EXT4-fs (loop2): 1 orphan inode deleted [ 234.217195][ T9549] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.241761][ T9564] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1076'. [ 234.625050][ T5872] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.928380][ T9570] loop0: detected capacity change from 0 to 32768 [ 234.950849][ T9570] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1078 (9570) [ 234.995154][ T9570] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 235.159242][ T9570] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 235.199574][ T9570] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 235.845499][ T9570] BTRFS info (device loop0): rebuilding free space tree [ 235.919078][ T9570] BTRFS info (device loop0): disabling free space tree [ 235.948010][ T9570] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 235.971918][ T9570] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 235.996101][ T9570] BTRFS info (device loop0): enabling ssd optimizations [ 236.005342][ T9570] BTRFS info (device loop0): turning on sync discard [ 236.018386][ T9570] BTRFS info (device loop0): enabling disk space caching [ 236.029305][ T9570] BTRFS info (device loop0): force clearing of disk cache [ 236.063630][ T9570] BTRFS info (device loop0): enabling auto defrag [ 236.086353][ T9570] BTRFS info (device loop0): max_inline set to 0 [ 236.727660][ T1162] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 236.916108][ T5866] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 238.076126][ T9651] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1105'. [ 238.090588][ T9651] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1105'. [ 239.152639][ T9671] veth1_to_bond: entered allmulticast mode [ 239.167879][ T9671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1122'. [ 239.269833][ T9671] bond0: (slave bond_slave_1): Releasing backup interface [ 239.347639][ T9671] veth1_to_bond (unregistering): left allmulticast mode [ 240.467992][ T9695] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1120'. [ 240.515387][ T9695] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1120'. [ 241.278775][ T9722] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1129'. [ 242.513698][ T9737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1134'. [ 243.062040][ T9756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1151'. [ 243.234348][ T9756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.275177][ T9756] bond0: (slave rose0): Enslaving as an active interface with an up link [ 244.802074][ T7860] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 244.985814][ T7860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.021030][ T7860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.066819][ T7860] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 245.110503][ T7860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.163561][ T7860] usb 1-1: config 0 descriptor?? [ 245.505942][ T9799] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1154'. [ 245.530907][ T9799] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1154'. [ 245.580753][ T9799] erspan0: entered promiscuous mode [ 245.610261][ T9802] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1154'. [ 245.625879][ T9799] batadv_slave_1: entered promiscuous mode [ 245.646322][ T7860] hid-led 0003:0FC5:B080.0005: item fetching failed at offset 0/3 [ 245.695555][ T7860] hid-led 0003:0FC5:B080.0005: probe with driver hid-led failed with error -22 [ 245.699094][ T9802] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1154'. [ 245.856323][ T7839] usb 1-1: USB disconnect, device number 14 [ 246.833818][ T7839] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 247.006816][ T7839] usb 1-1: Using ep0 maxpacket: 32 [ 247.020781][ T7839] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 247.097164][ T7839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.242776][ T7839] usb 1-1: config 0 descriptor?? [ 247.301064][ T7839] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 247.574954][ T30] audit: type=1326 audit(1757062105.820:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.1.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16e58ebe9 code=0x7fc00000 [ 248.369463][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032815400: rx timeout, send abort [ 248.379603][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888032815400: 0x3f002: (3) A timeout occurred and this is the connection abort to close the session. [ 248.396973][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032816c00: rx timeout, send abort [ 248.412490][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888032816c00: 0x3fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 248.985094][ T7839] gspca_nw80x: reg_w err -71 [ 248.990741][ T7839] nw80x 1-1:0.0: probe with driver nw80x failed with error -71 [ 249.036415][ T7839] usb 1-1: USB disconnect, device number 15 [ 249.039303][ T9906] bridge_slave_0: left allmulticast mode [ 249.077846][ T9906] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.719741][ T9891] loop2: detected capacity change from 0 to 32768 [ 250.051451][ T9932] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1186'. [ 251.920063][ T9959] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 252.345371][ T9974] loop2: detected capacity change from 0 to 1024 [ 252.424279][ T9974] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 252.682767][ T9974] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.022488][ T9986] loop2: detected capacity change from 1024 to 64 [ 253.299955][ T5872] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 253.351228][ T5872] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 253.395371][ T5872] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 253.462120][ T5872] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 253.549977][ T5872] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 253.821479][ T5872] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 253.912290][ T5872] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 253.942252][ T5872] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 254.031400][ T5872] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 254.072248][ T5872] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 254.433617][ T61] kworker/u8:4: attempt to access beyond end of device [ 254.433617][ T61] loop2: rw=1, sector=160, nr_sectors = 2 limit=64 [ 254.470961][ T61] Buffer I/O error on device loop2, logical block 80 [ 254.504401][ T5872] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.554321][ T9981] kmmpd-loop2: attempt to access beyond end of device [ 254.554321][ T9981] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 254.595314][ T9981] buffer_io_error: 43 callbacks suppressed [ 254.595333][ T9981] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 256.078268][T10031] netlink: 'syz.5.1225': attribute type 1 has an invalid length. [ 256.091575][T10031] netlink: 'syz.5.1225': attribute type 4 has an invalid length. [ 256.101222][T10031] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.1225'. [ 256.618194][ T5868] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 256.636814][ T5868] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 256.645363][T10014] mmap: syz.1.1216 (10014) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 256.666971][ T5868] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 256.682028][ T5868] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 256.692574][ T5868] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 257.001128][T10038] loop0: detected capacity change from 0 to 32768 [ 257.305803][T10038] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256 [ 257.305831][T10038] allowing incompatible features above 0.0: (unknown version) [ 257.305843][T10038] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 257.410238][T10038] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 257.420100][T10038] bcachefs (loop0): initializing new filesystem [ 257.440481][T10039] chnl_net:caif_netlink_parms(): no params data found [ 257.492961][T10038] bcachefs (loop0): going read-write [ 257.561001][T10038] bcachefs (loop0): marking superblocks [ 257.612605][T10038] bcachefs (loop0): initializing freespace [ 257.624575][T10038] bcachefs (loop0): done initializing freespace [ 257.636298][T10038] bcachefs (loop0): reading snapshots table [ 257.643569][T10038] bcachefs (loop0): reading snapshots done [ 257.711644][T10038] bcachefs (loop0): done starting filesystem [ 257.819734][T10039] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.848808][T10039] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.857765][T10039] bridge_slave_0: entered allmulticast mode [ 257.882378][T10039] bridge_slave_0: entered promiscuous mode [ 257.899020][T10039] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.909576][T10039] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.920233][T10039] bridge_slave_1: entered allmulticast mode [ 257.929484][T10039] bridge_slave_1: entered promiscuous mode [ 258.085246][ T30] audit: type=1800 audit(1757062115.666:78): pid=10038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1228" name="file1" dev="loop0" ino=4098 res=0 errno=0 [ 258.173968][T10039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.233023][ T5866] bcachefs (loop0): shutting down [ 258.245908][T10039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.297484][ T5866] bcachefs (loop0): going read-only [ 258.326881][ T5866] bcachefs (loop0): finished waiting for writes to stop [ 258.359014][ T5866] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3 [ 258.380163][T10039] team0: Port device team_slave_0 added [ 258.414001][T10039] team0: Port device team_slave_1 added [ 258.516118][T10039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.530526][T10039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.565781][T10039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.593918][T10039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.603597][T10039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.654427][T10039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.658946][ T5866] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3 [ 258.720868][ T5866] bcachefs (loop0): clean shutdown complete, journal seq 4 [ 258.744503][T10086] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1241'. [ 258.751186][ T5866] bcachefs (loop0): marking filesystem clean [ 258.773254][T10086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.875340][ T52] Bluetooth: hci3: command tx timeout [ 258.882742][ T5866] bcachefs (loop0): shutdown complete [ 258.953321][T10086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.064716][T10039] hsr_slave_0: entered promiscuous mode [ 259.077652][T10039] hsr_slave_1: entered promiscuous mode [ 259.087823][T10039] debugfs: 'hsr0' already exists in 'hsr' [ 259.108115][T10039] Cannot create hsr debugfs directory [ 259.223682][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 259.232062][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.247128][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL [ 259.482982][T10039] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 259.494382][T10097] netlink: 'syz.5.1244': attribute type 10 has an invalid length. [ 259.505110][T10097] netlink: 1948 bytes leftover after parsing attributes in process `syz.5.1244'. [ 259.517052][T10097] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1244'. [ 259.534338][T10039] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 259.569522][T10039] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 259.591002][T10039] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 259.755615][T10039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.789881][T10039] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.818445][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.827064][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.876861][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.885468][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.228527][T10039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.673555][T10039] veth0_vlan: entered promiscuous mode [ 260.701210][T10039] veth1_vlan: entered promiscuous mode [ 260.762541][T10039] veth0_macvtap: entered promiscuous mode [ 260.782824][T10039] veth1_macvtap: entered promiscuous mode [ 260.858627][T10039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.922930][T10039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.991133][ T8791] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.051816][ T8791] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.094708][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.111990][ T52] Bluetooth: hci3: command tx timeout [ 261.157813][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.233493][T10137] netlink: 'syz.0.1237': attribute type 10 has an invalid length. [ 261.306161][T10137] syz_tun: entered promiscuous mode [ 261.330133][T10137] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 261.386421][T10140] warning: `syz.1.1252' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 261.494204][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.535976][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.664332][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.694649][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.036784][T10169] loop0: detected capacity change from 0 to 512 [ 262.151744][T10169] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1263: casefold flag without casefold feature [ 262.235672][T10169] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1263: couldn't read orphan inode 15 (err -117) [ 262.287415][T10169] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.426337][T10169] syz.0.1263 (pid 10169) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 262.748443][ T5866] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.324621][ T52] Bluetooth: hci3: command tx timeout [ 263.725006][T10210] overlayfs: failed to clone upperpath [ 263.886933][T10214] Invalid ELF header magic: != ELF [ 264.110063][T10225] overlayfs: failed to clone upperpath [ 264.177576][T10227] overlayfs: failed to clone upperpath [ 264.258145][T10231] loop0: detected capacity change from 0 to 128 [ 264.357396][T10233] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1287'. [ 264.374353][T10231] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 264.477963][T10231] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.877063][T10231] fscrypt: Adiantum using implementation "adiantum(xchacha12-lib,aes-aesni,nhpoly1305-avx2)" [ 264.987603][ T5866] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 265.224470][T10249] loop6: detected capacity change from 0 to 2048 [ 265.273512][T10249] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 265.551063][ T52] Bluetooth: hci3: command tx timeout [ 266.084033][ T61] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.245080][T10251] loop0: detected capacity change from 0 to 32768 [ 266.328263][T10251] JBD2: Ignoring recovery information on journal [ 266.383082][ T61] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.527038][T10251] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 266.721847][ T61] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.999373][ T61] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.018871][ T5866] ocfs2: Unmounting device (7,0) on (node local) [ 267.563957][ T61] bridge_slave_1: left allmulticast mode [ 267.581554][ T61] bridge_slave_1: left promiscuous mode [ 267.588434][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.668985][ T5868] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 267.690107][ T61] bridge_slave_0: left allmulticast mode [ 267.697013][ T5868] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 267.707589][ T5868] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 267.721643][ T61] bridge_slave_0: left promiscuous mode [ 267.729560][ T5868] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 267.745343][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.754720][ T5868] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 268.606274][ T7849] IPVS: starting estimator thread 0... [ 268.734831][T10296] IPVS: using max 32 ests per chain, 76800 per kthread [ 268.788985][T10301] loop2: detected capacity change from 0 to 7 [ 268.836138][T10301] Dev loop2: unable to read RDB block 7 [ 268.846084][T10301] loop2: unable to read partition table [ 268.873111][T10301] loop2: partition table beyond EOD, truncated [ 268.905701][T10301] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 268.962254][ T5232] Dev loop2: unable to read RDB block 7 [ 268.968971][ T5232] loop2: unable to read partition table [ 269.003437][ T5232] loop2: partition table beyond EOD, truncated [ 269.505745][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.530607][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.556959][ T61] bond0 (unregistering): Released all slaves [ 269.717015][T10318] tipc: Failed to remove unknown binding: 66,1,1/0:3686491137/3686491139 [ 269.728183][T10318] tipc: Failed to remove unknown binding: 66,1,1/0:3686491137/3686491139 [ 269.916195][ T52] Bluetooth: hci3: command tx timeout [ 270.473883][ T61] hsr_slave_0: left promiscuous mode [ 270.545619][ T61] hsr_slave_1: left promiscuous mode [ 270.573039][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.604163][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.668234][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.718373][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.358888][ T61] veth1_macvtap: left promiscuous mode [ 271.400071][ T61] veth0_macvtap: left promiscuous mode [ 271.590131][ T61] veth1_vlan: left promiscuous mode [ 271.637149][ T61] veth0_vlan: left promiscuous mode [ 271.899514][T10335] loop0: detected capacity change from 0 to 32768 [ 272.012216][T10335] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 272.141495][ T52] Bluetooth: hci3: command tx timeout [ 272.277252][T10335] XFS (loop0): Ending clean mount [ 272.315261][T10335] XFS (loop0): Quotacheck needed: Please wait. [ 272.447967][T10335] XFS (loop0): Quotacheck: Done. [ 272.646462][T10380] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 272.675138][ T5866] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 274.361517][ T52] Bluetooth: hci3: command tx timeout [ 275.339429][ T61] team0 (unregistering): Port device team_slave_1 removed [ 275.740765][ T61] team0 (unregistering): Port device team_slave_0 removed [ 276.258890][T10443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1355'. [ 276.287368][T10443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1355'. [ 276.584144][ T52] Bluetooth: hci3: command tx timeout [ 277.873541][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 278.148714][T10270] chnl_net:caif_netlink_parms(): no params data found [ 278.189782][T10482] tipc: Failed to remove unknown binding: 66,1,1/0:4273957386/4273957388 [ 278.266220][T10482] tipc: Failed to remove unknown binding: 66,1,1/0:4273957386/4273957388 [ 278.365132][T10482] tipc: Failed to remove unknown binding: 66,1,1/0:4273957386/4273957388 [ 279.020540][T10488] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.1372'. [ 279.084938][ T30] audit: type=1326 audit(1757062135.295:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10499 comm="syz.3.1374" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f5018ebe9 code=0x0 [ 279.162627][T10270] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.175275][T10270] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.186612][T10270] bridge_slave_0: entered allmulticast mode [ 279.195904][T10270] bridge_slave_0: entered promiscuous mode [ 279.206114][T10270] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.214952][T10270] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.223520][T10270] bridge_slave_1: entered allmulticast mode [ 279.232674][T10270] bridge_slave_1: entered promiscuous mode [ 279.341974][T10270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.384796][T10270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.544277][T10270] team0: Port device team_slave_0 added [ 279.571822][T10270] team0: Port device team_slave_1 added [ 279.662414][T10270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.712290][T10270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.748948][T10270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.772508][T10270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.784732][T10270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.817704][T10270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.981798][T10270] hsr_slave_0: entered promiscuous mode [ 280.008629][T10270] hsr_slave_1: entered promiscuous mode [ 280.030648][T10270] debugfs: 'hsr0' already exists in 'hsr' [ 280.037565][T10270] Cannot create hsr debugfs directory [ 281.077761][T10270] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 281.190245][T10270] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 281.200850][T10558] overlayfs: failed to clone upperpath [ 281.231096][T10270] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 281.296706][T10270] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 281.415704][T10562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1393'. [ 281.490610][T10562] macvlan2: entered promiscuous mode [ 281.501925][T10562] macvlan2: entered allmulticast mode [ 281.510805][T10562] bond1: entered promiscuous mode [ 281.518199][T10562] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 281.532596][T10562] bond1: left promiscuous mode [ 281.629986][T10270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.666156][T10270] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.689700][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.698318][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.724672][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.733304][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.004312][T10270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.271881][T10591] loop0: detected capacity change from 0 to 1024 [ 282.365244][T10591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.515349][T10601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1399'. [ 282.760017][T10270] veth0_vlan: entered promiscuous mode [ 282.822971][T10270] veth1_vlan: entered promiscuous mode [ 282.909265][ T5866] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.033216][T10270] veth0_macvtap: entered promiscuous mode [ 283.071914][T10270] veth1_macvtap: entered promiscuous mode [ 283.263045][T10270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.342776][ T52] Bluetooth: hci1: command 0x0405 tx timeout [ 283.362108][T10270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.450086][ T8791] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.567251][ T8791] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.577922][ T8791] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.588419][ T8791] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.231547][ T8795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.260791][ T8795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.359792][ T8795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.387460][ T8795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.153284][T10670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1421'. [ 286.195965][T10670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.212035][T10670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.235503][T10670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.246175][T10670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.660809][T10677] loop7: detected capacity change from 0 to 1024 [ 286.771271][T10677] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.014774][T10677] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.1425: Allocating blocks 497-513 which overlap fs metadata [ 287.232776][T10677] EXT4-fs (loop7): pa ffff8880254deae0: logic 1073741872, phys. 177, len 21 [ 287.244430][T10677] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 287.461771][T10270] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.392839][T10739] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 288.463365][T10739] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 292.086286][T10779] loop7: detected capacity change from 0 to 47 [ 292.214664][ T8793] kworker/u8:12: attempt to access beyond end of device [ 292.214664][ T8793] loop7: rw=1, sector=48, nr_sectors = 2 limit=47 [ 292.282532][ T8793] Buffer I/O error on dev loop7, logical block 24, lost async page write [ 292.335949][ T8793] kworker/u8:12: attempt to access beyond end of device [ 292.335949][ T8793] loop7: rw=1, sector=50, nr_sectors = 2 limit=47 [ 292.362518][ T8793] Buffer I/O error on dev loop7, logical block 25, lost async page write [ 292.507368][T10779] syz.7.1455: attempt to access beyond end of device [ 292.507368][T10779] loop7: rw=1, sector=48, nr_sectors = 2 limit=47 [ 292.552042][T10779] Buffer I/O error on dev loop7, logical block 24, lost async page write [ 292.589947][T10779] syz.7.1455: attempt to access beyond end of device [ 292.589947][T10779] loop7: rw=1, sector=50, nr_sectors = 2 limit=47 [ 292.612837][T10779] Buffer I/O error on dev loop7, logical block 25, lost async page write [ 292.772266][T10791] overlayfs: failed to clone upperpath [ 293.722733][T10817] loop7: detected capacity change from 0 to 2048 [ 294.121555][T10817] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.189856][T10817] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.759367][T10810] loop0: detected capacity change from 0 to 32768 [ 294.857427][T10270] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.908313][T10810] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1466 (10810) [ 295.081536][T10810] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 295.105367][T10810] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 295.558746][T10810] BTRFS info (device loop0): rebuilding free space tree [ 295.652916][T10810] BTRFS info (device loop0): allowing degraded mounts [ 295.698933][T10810] BTRFS info (device loop0): enabling ssd optimizations [ 295.735075][T10810] BTRFS info (device loop0): enabling free space tree [ 295.789990][T10810] BTRFS info (device loop0): force clearing of disk cache [ 295.835099][T10810] BTRFS info (device loop0): use zstd compression, level 3 [ 295.881013][T10810] BTRFS info (device loop0): max_inline set to 0 [ 296.379429][ T30] audit: type=1800 audit(1757062151.463:80): pid=10810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1466" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 296.580919][T10876] overlayfs: failed to clone upperpath [ 297.140774][ T5866] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 298.054375][T10888] loop7: detected capacity change from 0 to 32768 [ 300.389192][T10980] overlayfs: failed to clone upperpath [ 301.103977][ T30] audit: type=1326 audit(1757062155.886:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11003 comm="syz.7.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfb38ebe9 code=0x7fc00000 [ 301.839247][ T30] audit: type=1326 audit(1757062156.550:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11003 comm="syz.7.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3bfb38ebe9 code=0x7fc00000 [ 301.981714][ T30] audit: type=1326 audit(1757062156.550:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11003 comm="syz.7.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfb38ebe9 code=0x7fc00000 [ 302.120714][ T30] audit: type=1326 audit(1757062156.550:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11003 comm="syz.7.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfb38ebe9 code=0x7fc00000 [ 302.161135][ T30] audit: type=1326 audit(1757062156.550:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11003 comm="syz.7.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfb38ebe9 code=0x7fc00000 [ 302.289892][ T30] audit: type=1326 audit(1757062156.550:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11003 comm="syz.7.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfb38ebe9 code=0x7fc00000 [ 302.316664][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.758387][ T30] audit: type=1326 audit(1757062156.550:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11003 comm="syz.7.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfb38ebe9 code=0x7fc00000 [ 302.785616][ C0] vkms_vblank_simulate: vblank timer overrun [ 303.034823][ T30] audit: type=1326 audit(1757062156.550:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11003 comm="syz.7.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfb38ebe9 code=0x7fc00000 [ 303.165659][ T30] audit: type=1326 audit(1757062156.550:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11003 comm="syz.7.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfb38ebe9 code=0x7fc00000 [ 303.286487][ T30] audit: type=1326 audit(1757062156.550:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11003 comm="syz.7.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfb38ebe9 code=0x7fc00000 [ 303.564415][ T30] audit: type=1326 audit(1757062156.550:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11003 comm="syz.7.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfb38ebe9 code=0x7fc00000 [ 304.267914][T11080] overlayfs: failed to clone upperpath [ 305.581502][T11101] loop7: detected capacity change from 0 to 512 [ 305.681145][T11101] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 305.814727][T11101] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.903386][T11101] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.077976][T10270] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.630935][ T8793] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.875493][ T8793] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.020842][ T8793] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.064332][T11127] loop0: detected capacity change from 0 to 32768 [ 307.115035][T11127] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1558 (11127) [ 307.258734][T11127] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 307.279881][T11127] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 307.485199][ T8793] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.556426][T11127] BTRFS info (device loop0): enabling ssd optimizations [ 307.610480][T11127] BTRFS info (device loop0): enabling free space tree [ 307.942384][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 307.963011][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 307.976867][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 307.996463][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 308.013489][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 308.049729][ T8795] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 308.167689][ T8793] bridge_slave_1: left allmulticast mode [ 308.195669][ T8793] bridge_slave_1: left promiscuous mode [ 308.221797][ T8793] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.307960][ T8793] bridge_slave_0: left allmulticast mode [ 308.320662][T11171] netlink: 'syz.3.1569': attribute type 10 has an invalid length. [ 308.344178][ T8793] bridge_slave_0: left promiscuous mode [ 308.389278][ T8793] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.576209][ T5866] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 310.029370][ T8793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.094852][ T8793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.118216][ T8793] bond0 (unregistering): Released all slaves [ 310.192002][T11171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.214161][T11171] team0: Port device bond0 added [ 310.291067][ T5868] Bluetooth: hci3: command tx timeout [ 311.071004][T11220] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 311.080231][T11220] IPv6: NLM_F_CREATE should be set when creating new route [ 311.088968][T11220] IPv6: NLM_F_CREATE should be set when creating new route [ 312.090298][ T8793] hsr_slave_0: left promiscuous mode [ 312.099355][ T8793] hsr_slave_1: left promiscuous mode [ 312.133886][ T8793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.153892][ T8793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.174106][ T8793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.183108][ T8793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.283554][ T8793] veth1_macvtap: left promiscuous mode [ 312.290240][ T8793] veth0_macvtap: left promiscuous mode [ 312.347408][ T8793] veth1_vlan: left promiscuous mode [ 312.424129][ T8793] veth0_vlan: left promiscuous mode [ 312.515442][ T5868] Bluetooth: hci3: command tx timeout [ 313.358258][T11257] overlayfs: failed to resolve './file0': -5 [ 314.068025][ T8793] team0 (unregistering): Port device team_slave_1 removed [ 314.229992][ T8793] team0 (unregistering): Port device team_slave_0 removed [ 314.752513][ T5868] Bluetooth: hci3: command tx timeout [ 315.851636][T11162] chnl_net:caif_netlink_parms(): no params data found [ 316.174876][T11162] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.219656][T11162] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.239652][T11162] bridge_slave_0: entered allmulticast mode [ 316.261906][T11162] bridge_slave_0: entered promiscuous mode [ 316.290266][T11162] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.338264][T11162] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.371326][T11162] bridge_slave_1: entered allmulticast mode [ 316.394336][T11162] bridge_slave_1: entered promiscuous mode [ 316.692180][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 316.692235][ T30] audit: type=1804 audit(1757062170.465:136): pid=11316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1615" name="/newroot/293/file0" dev="tmpfs" ino=1627 res=1 errno=0 [ 316.859970][T11162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.881291][T11162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.964499][ T5868] Bluetooth: hci3: command tx timeout [ 317.109661][T11322] loop0: detected capacity change from 0 to 136 [ 317.111257][T11162] team0: Port device team_slave_0 added [ 317.174394][T11162] team0: Port device team_slave_1 added [ 317.714541][T11162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.740409][T11162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.824456][T11162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.845971][T11162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.855610][T11162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.906182][T11162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.983053][T11162] hsr_slave_0: entered promiscuous mode [ 317.993683][T11162] hsr_slave_1: entered promiscuous mode [ 318.010657][T11162] debugfs: 'hsr0' already exists in 'hsr' [ 318.323932][T11162] Cannot create hsr debugfs directory [ 319.103148][T11344] netlink: 'syz.5.1625': attribute type 10 has an invalid length. [ 319.150709][T11346] loop0: detected capacity change from 0 to 512 [ 319.244002][T11346] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 319.278852][T11344] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 319.361399][T11346] EXT4-fs (loop0): 1 truncate cleaned up [ 319.435513][T11346] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.478885][T11162] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 319.501364][T11162] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 319.524613][ T30] audit: type=1800 audit(1757062173.111:137): pid=11346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1626" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 319.672741][T11358] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1629'. [ 319.691341][T11162] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 319.725157][T11358] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1629'. [ 319.754549][T11162] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 319.770872][ T5866] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.833632][T11358] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1629'. [ 319.933532][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.971988][T11358] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1629'. [ 320.009600][T11366] overlayfs: metacopy with no lower data found - abort lookup (/file2) [ 320.040574][T11366] overlayfs: failed to look up (file2) for ino (-5) [ 320.263859][T11162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.307913][T11162] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.653029][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 432.661430][ C1] rcu: 0-...!: (0 ticks this GP) idle=3f6c/1/0x4000000000000000 softirq=59672/59672 fqs=1 [ 432.674959][ C1] rcu: (detected by 1, t=10502 jiffies, g=46373, q=127 ncpus=2) [ 432.684228][ C1] Sending NMI from CPU 1 to CPUs 0: [ 432.684266][ C0] NMI backtrace for cpu 0 [ 432.684295][ C0] CPU: 0 UID: 0 PID: 11380 Comm: syz.5.1637 Not tainted syzkaller #0 PREEMPT(full) [ 432.684333][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 432.684359][ C0] RIP: 0010:__lock_acquire+0xa4f/0xd20 [ 432.684396][ C0] Code: e5 ff 90 0f 0b 90 90 90 31 c0 48 8b 3c 24 48 83 78 40 00 0f 84 8c 02 00 00 41 8b 46 20 25 ff 1f 00 00 48 0f a3 05 61 bd 2b 12 <73> 10 48 69 c0 c8 00 00 00 48 8d 80 30 33 6b 93 eb 40 83 3d c8 4c [ 432.684411][ C0] RSP: 0018:ffffc90000007b30 EFLAGS: 00000007 [ 432.684427][ C0] RAX: 0000000000000ff9 RBX: 0000000000000003 RCX: 000000002682c73a [ 432.684439][ C0] RDX: 0000000003f27b7d RSI: 0000000088877718 RDI: ffff88807a17bc80 [ 432.684452][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff899f5644 [ 432.684463][ C0] R10: dffffc0000000000 R11: ffffffff899f5580 R12: 0000000000000ffa [ 432.684476][ C0] R13: ffff88807a17c7b0 R14: ffff88807a17c828 R15: 79486d992682c73a [ 432.684491][ C0] FS: 0000000000000000(0000) GS:ffff8881259f9000(0000) knlGS:0000000000000000 [ 432.684505][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 432.684518][ C0] CR2: 0000001b34a20ff8 CR3: 000000000e138000 CR4: 00000000003526f0 [ 432.684534][ C0] Call Trace: [ 432.684542][ C0] [ 432.684556][ C0] ? advance_sched+0xc4/0xc90 [ 432.684579][ C0] lock_acquire+0x120/0x360 [ 432.684606][ C0] ? advance_sched+0xc4/0xc90 [ 432.684630][ C0] _raw_spin_lock+0x2e/0x40 [ 432.684655][ C0] ? advance_sched+0xc4/0xc90 [ 432.684672][ C0] advance_sched+0xc4/0xc90 [ 432.684692][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 432.684717][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 432.684746][ C0] ? __pfx_advance_sched+0x10/0x10 [ 432.684764][ C0] __hrtimer_run_queues+0x529/0xc60 [ 432.684807][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 432.684831][ C0] ? read_tsc+0x9/0x20 [ 432.684854][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 432.684891][ C0] __sysvec_apic_timer_interrupt+0x108/0x410 [ 432.684918][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 432.684936][ C0] [ 432.684942][ C0] [ 432.684949][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 432.684967][ C0] RIP: 0010:folio_remove_rmap_ptes+0x11c/0xfa0 [ 432.684995][ C0] Code: 2a 5e ae ff 4d 8d 77 08 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 10 64 12 00 4d 8b 36 4c 89 f6 48 83 e6 01 31 ff df 62 ae ff 4c 89 f0 48 83 e0 01 48 89 1c 24 0f 85 2e 09 00 00 [ 432.685009][ C0] RSP: 0018:ffffc9000bd3f538 EFLAGS: 00000246 [ 432.685024][ C0] RAX: 1ffffd40002726b1 RBX: ffffea0001393580 RCX: ffff88807a17bc80 [ 432.685038][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 432.685048][ C0] RBP: 0000000000000001 R08: ffffea0001393587 R09: 1ffffd40002726b0 [ 432.685060][ C0] R10: dffffc0000000000 R11: fffff940002726b1 R12: dffffc0000000000 [ 432.685074][ C0] R13: 0000000000012c67 R14: 0000000000000000 R15: ffffea0001393580 [ 432.685094][ C0] ? folio_remove_rmap_ptes+0xf6/0xfa0 [ 432.685119][ C0] ? page_table_check_clear+0x187/0x700 [ 432.685142][ C0] ? page_table_check_clear+0x187/0x700 [ 432.685163][ C0] ? page_table_check_clear+0x4f3/0x700 [ 432.685183][ C0] ? page_table_check_clear+0x187/0x700 [ 432.685206][ C0] unmap_page_range+0x1f7f/0x4370 [ 432.685245][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 432.685265][ C0] ? mas_find+0xb0e/0xd30 [ 432.685289][ C0] ? unmap_vmas+0x144/0x580 [ 432.685307][ C0] unmap_vmas+0x399/0x580 [ 432.685327][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 432.685354][ C0] exit_mmap+0x240/0xb40 [ 432.685376][ C0] ? uprobe_clear_state+0x20f/0x290 [ 432.685397][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 432.685416][ C0] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 432.685441][ C0] ? __pfx_exit_aio+0x10/0x10 [ 432.685469][ C0] ? uprobe_clear_state+0x27c/0x290 [ 432.685489][ C0] __mmput+0x118/0x430 [ 432.685514][ C0] exit_mm+0x1da/0x2c0 [ 432.685534][ C0] ? __pfx_exit_mm+0x10/0x10 [ 432.685554][ C0] ? rcu_is_watching+0x15/0xb0 [ 432.685572][ C0] do_exit+0x648/0x2300 [ 432.685596][ C0] ? preempt_schedule+0xae/0xc0 [ 432.685612][ C0] ? preempt_schedule_common+0x83/0xd0 [ 432.685628][ C0] ? preempt_schedule+0xae/0xc0 [ 432.685643][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 432.685659][ C0] ? __pfx_do_exit+0x10/0x10 [ 432.685680][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 432.685700][ C0] do_group_exit+0x21c/0x2d0 [ 432.685722][ C0] __x64_sys_exit_group+0x3f/0x40 [ 432.685742][ C0] x64_sys_call+0x21f7/0x2200 [ 432.685765][ C0] do_syscall_64+0xfa/0xfa0 [ 432.685782][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.685799][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.685815][ C0] ? clear_bhb_loop+0x60/0xb0 [ 432.685834][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.685851][ C0] RIP: 0033:0x7f4c0898ebe9 [ 432.685868][ C0] Code: Unable to access opcode bytes at 0x7f4c0898ebbf. [ 432.685878][ C0] RSP: 002b:00007fff81cc32b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 432.685895][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4c0898ebe9 [ 432.685907][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 432.685918][ C0] RBP: 00007fff81cc331c R08: 0000000981cc33af R09: 00000000000927c0 [ 432.685931][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000107 [ 432.685942][ C0] R13: 00000000000927c0 R14: 000000000004c4fb R15: 00007fff81cc3370 [ 432.685962][ C0] [ 432.686252][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g46373 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 433.333294][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 433.345236][ C1] rcu: RCU grace-period kthread stack dump: [ 433.352276][ C1] task:rcu_preempt state:R running task stack:27256 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 433.368445][ C1] Call Trace: [ 433.372359][ C1] [ 433.375865][ C1] __schedule+0x1798/0x4cc0 [ 433.381279][ C1] ? __lock_acquire+0xab9/0xd20 [ 433.387092][ C1] ? __pfx___schedule+0x10/0x10 [ 433.392922][ C1] ? schedule+0x91/0x360 [ 433.398000][ C1] schedule+0x165/0x360 [ 433.402970][ C1] schedule_timeout+0x12b/0x270 [ 433.408777][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 433.415218][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 433.422292][ C1] ? __pfx_process_timeout+0x10/0x10 [ 433.428641][ C1] ? prepare_to_swait_event+0x341/0x380 [ 433.435296][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 433.441128][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 433.448192][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 433.454523][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 433.460762][ C1] ? finish_swait+0xcd/0x1f0 [ 433.466257][ C1] rcu_gp_kthread+0x99/0x390 [ 433.471757][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 433.478012][ C1] ? __kthread_parkme+0x7b/0x200 [ 433.483920][ C1] ? __kthread_parkme+0x1a1/0x200 [ 433.489938][ C1] kthread+0x70e/0x8a0 [ 433.494811][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 433.501036][ C1] ? __pfx_kthread+0x10/0x10 [ 433.506531][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 433.512761][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 433.518980][ C1] ? __pfx_kthread+0x10/0x10 [ 433.524474][ C1] ret_from_fork+0x47c/0x820 [ 433.529977][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 433.536105][ C1] ? __switch_to_asm+0x39/0x70 [ 433.541811][ C1] ? __switch_to_asm+0x33/0x70 [ 433.547516][ C1] ? __pfx_kthread+0x10/0x10 [ 433.553007][ C1] ret_from_fork_asm+0x1a/0x30 [ 433.558727][ C1] [ 433.562332][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 433.569896][ C1] CPU: 1 UID: 0 PID: 11384 Comm: syz.1.1638 Not tainted syzkaller #0 PREEMPT(full) [ 433.581117][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 433.593162][ C1] RIP: 0010:smp_call_function_many_cond+0xd33/0x12d0 [ 433.601151][ C1] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 16 77 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 c1 72 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 a5 72 [ 433.624657][ C1] RSP: 0018:ffffc9000baef5a0 EFLAGS: 00000246 [ 433.631919][ C1] RAX: ffffffff81b5531b RBX: 1ffff110170c8355 RCX: 0000000000080000 [ 433.641464][ C1] RDX: ffffc90004b03000 RSI: 000000000007ffff RDI: 0000000000080000 [ 433.651016][ C1] RBP: ffffc9000baef720 R08: ffffffff8fc3ee37 R09: 1ffffffff1f87dc6 [ 433.660566][ C1] R10: dffffc0000000000 R11: fffffbfff1f87dc7 R12: ffff8880b8641aa8 [ 433.670116][ C1] R13: dffffc0000000000 R14: ffff8880b873b1c0 R15: 0000000000000000 [ 433.679662][ C1] FS: 00007ff16f4c56c0(0000) GS:ffff888125af9000(0000) knlGS:0000000000000000 [ 433.690364][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 433.698242][ C1] CR2: 0000001b3321bff8 CR3: 000000004ed4e000 CR4: 00000000003526f0 [ 433.707789][ C1] Call Trace: [ 433.711710][ C1] [ 433.715221][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 433.721249][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 433.728822][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 433.735252][ C1] ? __SCT__tp_func_sock_exceed_buf_limit+0x8/0x8 [ 433.742942][ C1] ? __pfx___text_poke+0x10/0x10 [ 433.748860][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 433.754870][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 433.760993][ C1] smp_text_poke_batch_finish+0x5f9/0x1130 [ 433.767948][ C1] ? __pfx_smp_text_poke_batch_add+0x10/0x10 [ 433.775111][ C1] ? trace_contention_end+0x39/0x120 [ 433.781442][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 433.788925][ C1] ? arch_static_call_transform+0x2d/0xc0 [ 433.795777][ C1] ? __SCT__tp_func_sock_exceed_buf_limit+0x8/0x8 [ 433.803474][ C1] __static_call_transform+0x4eb/0x750 [ 433.810011][ C1] ? __SCT__tp_func_sock_exceed_buf_limit+0x8/0x8 [ 433.817699][ C1] ? __pfx___static_call_transform+0x10/0x10 [ 433.824864][ C1] ? __SCT__tp_func_sock_exceed_buf_limit+0x8/0x8 [ 433.832548][ C1] ? __static_call_validate+0x148/0x240 [ 433.839189][ C1] ? __pfx___bpf_trace_inet_sock_set_state+0x10/0x10 [ 433.847186][ C1] ? __SCT__tp_func_sock_exceed_buf_limit+0x8/0x8 [ 433.854869][ C1] arch_static_call_transform+0x98/0xc0 [ 433.861515][ C1] __static_call_update+0xe4/0x5d0 [ 433.867635][ C1] ? __pfx___bpf_trace_inet_sock_set_state+0x10/0x10 [ 433.875627][ C1] ? __SCT__tp_func_sock_exceed_buf_limit+0x8/0x8 [ 433.883321][ C1] ? __pfx___static_call_update+0x10/0x10 [ 433.890168][ C1] ? rcu_is_watching+0x15/0xb0 [ 433.895863][ C1] ? trace_kmalloc+0x1f/0xd0 [ 433.901360][ C1] ? tracepoint_add_func+0x515/0xa10 [ 433.907690][ C1] ? __pfx___bpf_trace_inet_sock_set_state+0x10/0x10 [ 433.915685][ C1] tracepoint_add_func+0x91e/0xa10 [ 433.921817][ C1] ? __pfx___bpf_trace_inet_sock_set_state+0x10/0x10 [ 433.929810][ C1] tracepoint_probe_register_prio_may_exist+0x5f/0xa0 [ 433.937911][ C1] ? __pfx___bpf_trace_inet_sock_set_state+0x10/0x10 [ 433.945907][ C1] bpf_raw_tp_link_attach+0x4f0/0x6c0 [ 433.952366][ C1] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 433.959481][ C1] ? __fget_files+0x2a/0x420 [ 433.964999][ C1] bpf_raw_tracepoint_open+0x1b2/0x220 [ 433.971551][ C1] __sys_bpf+0x75a/0x870 [ 433.976635][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 433.982361][ C1] ? rcu_is_watching+0x15/0xb0 [ 433.988069][ C1] __x64_sys_bpf+0x7c/0x90 [ 433.993359][ C1] do_syscall_64+0xfa/0xfa0 [ 433.998748][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 434.004971][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.012231][ C1] ? clear_bhb_loop+0x60/0xb0 [ 434.017833][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.024888][ C1] RIP: 0033:0x7ff16e58ebe9 [ 434.030191][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.053727][ C1] RSP: 002b:00007ff16f4c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 434.063825][ C1] RAX: ffffffffffffffda RBX: 00007ff16e7c5fa0 RCX: 00007ff16e58ebe9 [ 434.073379][ C1] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000011 [ 434.082930][ C1] RBP: 00007ff16e611e19 R08: 0000000000000000 R09: 0000000000000000 [ 434.092475][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.102023][ C1] R13: 00007ff16e7c6038 R14: 00007ff16e7c5fa0 R15: 00007ffe9d42f7c8 [ 434.111595][ C1]