last executing test programs: 3m6.570027422s ago: executing program 1 (id=226): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file0\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="6e6f626172726965722c706172743d3078303030303030303030303030303030392c756d61736b3d30303030303030303030303030303030343030302c626172726965722c747970653df268d6512c6e6c733d69736f383835392d312c756d61736b3d30303030303030303030303030303030303030303030372c00000000"], 0x3, 0x6c0, &(0x7f0000001cc0)="$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") mkdir(&(0x7f0000000040)='./file0\x00', 0x6526befdc9551232) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) socket(0x400000000010, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10) write(r4, &(0x7f0000000000), 0x0) 3m5.421777564s ago: executing program 1 (id=234): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000680)={[{@errors_continue}, {@delalloc}, {@data_err_ignore}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@data_err_ignore}, {@nojournal_checksum}]}, 0x1, 0x4ef, &(0x7f0000000180)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x110) truncate(0x0, 0x1bf8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x22200, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) 3m4.694779962s ago: executing program 1 (id=240): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x24}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0x1, 0x32}, 0xa, @in=@local, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) 3m4.449042234s ago: executing program 1 (id=243): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="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"], 0x12, 0xc49, &(0x7f0000001cc0)="$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") setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) write$UHID_INPUT2(r0, 0x0, 0x90) 3m2.90582651s ago: executing program 1 (id=247): syz_mount_image$erofs(&(0x7f0000001240), &(0x7f0000000200)='./file0\x00', 0x2800080, &(0x7f0000001280)=ANY=[], 0xff, 0x22f, &(0x7f0000000b00)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = fanotify_init(0x10, 0x101000) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_mark(r3, 0x7e, 0x800003a, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) 3m1.208906227s ago: executing program 1 (id=256): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f00000000c0)=0xffffffff, 0x4) 3m0.737729562s ago: executing program 32 (id=256): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f00000000c0)=0xffffffff, 0x4) 2m43.678136519s ago: executing program 0 (id=298): syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f00000006c0), 0x1, 0x603, &(0x7f0000000700)="$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") creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44) mknod(0x0, 0x1000, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) 2m43.186476204s ago: executing program 0 (id=301): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x80000001}, 0x8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", 0xffffffffffffffff, 0xffffffffffffffff, 0x8000000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a45320, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x14, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x0}, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40000) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x7, 0x9}, 0x8) 2m41.399862543s ago: executing program 0 (id=304): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040001}, 0x20040800) 2m41.029360906s ago: executing program 0 (id=306): r0 = syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x1004000, &(0x7f0000000340)={[{@gid}, {@mode={'mode', 0x3d, 0x4}}, {@anchor={'anchor', 0x3d, 0x7}}, {@longad}, {@utf8}, {@unhide}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@gid_forget}, {@nostrict}, {@session}, {@gid_forget}]}, 0x1, 0xc34, &(0x7f0000001bc0)="$eJzs3U9sXNd5N+D3XHHEofx9FRM7ipPGxaQtUlmxXP2LqViFO6pptgFkWQjF7AJwJFLqwBRJkFQjG2nBdNNFFwGKoousCLRGgRQNjKYIumRaF0g2XhRZdUW0sBEUXbBFgKwCFvfOGXFIkTYjkhJpP49N/WbunHPnnHvH98qC3jkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAET83iuXz5xNj3sUAMCjdHX0q2fOuf8DwMfKdf//DwAAAAAAAAAAAAAAB12KIp6MFLNXV9N49byjfqVdu3tvbHhk624Dqep5pGpf/tTPnjt/4UsvDF3s5pX29Af032ufjddGr19uvDxzZ3Zucn5+cqIxNt2+OTMxueM97Lb/ZqeqA9C48/rdiVu35hvnnj+/4eV7g+/3P3Fi8NLQs6ef6bYdGx4ZGV1vUt/y4UParsLjaBRxOlI8972fplZEFLH7Y1F/tOd+s4FqEqeqSYwNj1QTmWq3phfKF691D0QR0ejp1Oweo63PRfTVHukctteMWCyHXw74VDm90dnWXOvG1GTjWmtuob3Qnpm+ljqjLefTiCIupoiliFjpf3B3tSiiL1J85/hquhERR7rH4YtVYfD24yj2cY47UI6zUYtYKg7BOTvA+qOIVyPFz945GTfLY5Z/4gsRr5b5g4i3ynwpIpUfjAsR723xOeJw6osi/rw8/5dW00R1PeheV658rfGV6VszPW2715Vf8v7wwJXiMd0fBjblo3HAr031KKJVXfFX08P/ZgcAAAAAAAAAAAAAAACAvTYQRXwmUrzyb39U1RVHVZd+/NLQ7w/+/96a8ac/ZD9l2+cjYrHYWU3u0VwYeC1dS2mntcTqTvdcPYr441z/963HPRgAAAAAAAAAAAAAAAAAAICPtSJ+EilefPdkWoreNcXb07cb11s3pjqrwnbX/u2umb62trbWSJ1s5hzPuZhzKedyzpWcUeT+OZs5xwc6O17Mz5dyLudcyRlHcv+czZzjORdzLuVczrmSM/py/5zNnOM5F3Mu5VzOuZIzDsjavQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHyVFFPGLSPHtb6ymSBHRjBiPTi73P+7RAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACl/lTE9yNF4w+a97f1RUSq/u04Wf5yIZpHy/xkNIfKfCmal3O2quxrfusxjJ/dqaUifhwp+utv3z/h+fzXOs/ufwzirW+uP/tsXyePdF8cfL//iRPHLw2N/NrT2z1OWw3g1JX29N17jbHhkZHRns19+d0/2bNtML9vsTdTJyLm33jz9dbU1OTcwz8oPwK76H6IHqS+gz/T2oEf4SF6EH0HYhiPZ+58DJT3//cixW+/++/dG37n/l+P/9d5dv8OHz//k/X7/4ubd7TD+3/f5n75/l/e07e6/z/Zs+3F/LuRWl9EfeHObO1ERH3+jTdPt++0bk/enpy+cObMl4eGvnz+TO1oRP1We2qy59GeHC4AAAAAAAAAAAAAAACARycV8buRovXj1dSIiHtVvdbgpaFnTz9zJI5U9VYb6rZfG71+ufHyzJ3Zucn5+cmJxth0++bMxORO365elXuNDY/sy2Q+1MA+j3+g/vLM7Btz7dt/uLDl68fql2/ML8y1bm79cgxEEdHs3XKqGvDY8Eg16Kl2a7rqem3LYvpfXi0V8R+R4uaFRvp83pbr/zdX+G+o/1/cvKN9qv//RM+28j1TKuLnkeK3/uLp+Hw1zmPxwDHL7f4mUpy6+LncLo6W7bpj6HyvQKcysGz7P5HiH36xsW23HvLJ9bZnd3xgD4ny/B+PFN//s+/Gr+dtG7//Yevzf2zzjvbp/D/Vs+3Yhu8r2PXUyef/dKR46cm34zfytg/6/o/ud2+czI3vfz/HPp3/T/VsG8zv+5t7M3UAAAAAAAAAAIBDrZaK+NtI8cORvvRC3raTv/83sXlH+/T3vz7ds21ib9Yr+tAHuz6oAAAAAHBA1FIRP4kUtxfevl9DvbH+u6f+83fW6z+H06ZXqz/n+5XqewP28s//eg3m9x3f/bQBAAAAAAAAAAAAAAAAAADgQEmpiBfyeurjVT3/xLbrqS9Hilf+67ncLp0o23XXgR+sfq1fnZk+fXlqauZma6F1Y2qyMTrbujlZ9n0qUqz+9edy36JaX7273nxnjff1tdjnIsXI33XbdtZi765N/tR627Nl209Eiv/8+41tu+tYf2q97bmy7V9Fiq//09ZtT6y3PV+2/W6k+NHXG922x8q23e9H/fR62+dvzhT7cFYAAAAAAAAAAAAAAAAAAAD4uKmlIv40Uvz3naX7tfx5/f9az9PKW9/sWe9/k3vVOv+D1fr/2z1+mPX/q+8VWNzuXQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KMpRRFvRorZq6tpub983lG/0p6+e29seGTrbgOp6nmkal/+1M+eO3/hSy8MXezmB/ffa5+J10avX268PHNndm5yfn5yojE23b45MzG54z3stv9mp6oD0Ljz+t2JW7fmG+eeP7/h5XuD7/c/cWLw0tCzp5/pth0bHhkZ7WnTV3vod39A2mb70SjiLyPFc9/7afphf0QRuz8WH/LZ2W8D1SROVZMYGx6pJjLVbk0vlC9e6x6IIqLR06nZPUaP4FzsSjNisRx+OeBT5fRGZ1tzrRtTk41rrbmF9kJ7Zvpa6oy2nE8jiriYIpYiYqX/wd3VoojXI8V3jq+mf+6PONI9Dl+8OvrVM+e2H0exj3PcgXKcjVrEUnEIztkB1h9F/GOk+Nk7J+Nf+iP6ovMTX4h4tcwfRLwVnfOdyg/GhYj3tvgccTj1RRH/W57/S6vpnf7yetC9rlz5WuMr07dmetp2ryuH/v7wKB3wa1M9ivhRdcVfTf/qv2sAAAAAAAAAAAAAAACAA6SIX40UL757MlX1wfdritvTtxvXWzemOmV93dq/bs302traWiN1splzPOdizqWcyzlXckaR++dslllfWxvPzxdzLuVczrmSM47k/jmbOcdzLuZcyrmccyVn9OX+OZs5x3Mu5lzKuZxzJWcckNo9AAAAAAAAAAAAAAAAAADgo6Wo/knx7W+sprX+zvrS49HJZeuBfuT9XwAAAP//M3/28g==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x191a461, &(0x7f0000000440)={[{@gid}]}) r1 = fcntl$dupfd(r0, 0x406, r0) getresuid(0x0, &(0x7f0000000140)=0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000300)='./file0/../file0\x00', 0x800a0, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[], [{@euid_lt}, {@fowner_gt}]}}, 0x0, 0x0, 0x0) 2m40.344307543s ago: executing program 0 (id=307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)="e1d28f59", 0x4}, {&(0x7f0000000180)="a721525077e69c80ec90e64751bbfd64b62f49df4d715ee4eec58591eaac120f0b8c9d15a0eabed90cf8a4c3731ae35c542268de815d342464a95f3e4b77e0162eab380f370863a84e4143bd", 0x4c}, {&(0x7f0000000340)="99d62254d95f4261f67d4ccac37a9520965d649371e1c724a22b0732184d6aade27c7bad429b99b1fba9212e67d14b1f455b8ca66a12a42a7d42dfbfaf02cc67a611fcdcddaf10f01ea67c73a7720a0fdd275cec139d2cef28a8a64a083b4959119e30a51d4ca4adacc760db917d1e007cfb738133d2fcf495", 0x79}, {&(0x7f00000003c0)="94bff731e44c07f2a9550e5ae4567088a7af6f7a4ef74fe3fba1ba10436e24822c413d25c40a1f16937efb7f8beeda7a3cbadb68d5bcee08b1290a33df49c7370f959d467843207c73f5", 0x4a}, {&(0x7f0000000440)="3a81765175a7fa6eb16b9ee2c0d32d604a2540da93e2b6ea7f9cbed4698be049c4b5243b9d971783abae36374240cda22a006ae0fe3e94918f31a44511d07a24cb24a87be1a61110fba7c860ae9ab6b5dc383d2f6bbad450d56cd65efedbe38a73a743903afb6352e2ebc18d95f648e3f236225f1e378a66b34d472334286a3e1106db3c01a4768b9cfecb5cafaaf3ca45f99516fe823d7dc33239d0e5f163a7d99c5e6dea05380e58e6735a96bda6399869292420", 0xb5}], 0x5, 0x80000000, 0x6) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001092acdcbca72bcf950000000000000a58000000060a010400000000000000000a0000040900010073797a31000000002c0004802802018007000100637400001c000280050003000100000008000240779270dd0800014000000009090002007379743200000000140000001100010000000000000000000200000ab97f378efaedd65879b32973774b816af9181fbd64b5a0818fd98f962c13ac95f7b587ddecc51678e34272a460b1d07f9faa8476c83d5d63556c8b17d184fd90c3223b8b3cb3e1821b2cae5166b4b26cfa37df0ac740458615d20d7ea57b62c927db7ecadf"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0000000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e06018000020000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000240)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0xfe}, [@IFA_LOCAL={0x14, 0x2, @loopback={0xfec0ffff00000000}}]}, 0x2c}}, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000300010000004500000025000000190011000600ad000200000000000006040000000000000000", 0x39}], 0x1) 2m39.553577562s ago: executing program 0 (id=309): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) 2m38.829374059s ago: executing program 33 (id=309): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) 25.358921668s ago: executing program 3 (id=653): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x24004000) 24.23750117s ago: executing program 3 (id=654): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r0, 0x0, 0x10) sendmsg$inet(r0, &(0x7f0000003480)={&(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000003380)=[{&(0x7f0000000180)="e499", 0x2}], 0x1}, 0x480) 22.433599598s ago: executing program 3 (id=655): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000004180)=0x17) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 20.550491328s ago: executing program 3 (id=661): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x5c, 0xf7}, {0x64, 0x0, 0x6, 0x5635}]}) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x804810, &(0x7f0000000180)=ANY=[], 0x1, 0x6ba, &(0x7f00000001c0)="$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") r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000400)='./file0\x00', 0x2000100) setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x0, 0x8301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) lseek(0xffffffffffffffff, 0x6, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000080)=0x7, 0x4) lseek(0xffffffffffffffff, 0x200005, 0x4) r6 = socket(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000340)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf41000000653600648d0a00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0400000000e000e218d1ddf66ed538f2523250", 0x78, 0x44014, 0x0, 0x0) 19.679012987s ago: executing program 3 (id=662): creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) getpid() syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x19000) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000001040)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb \x11\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa88\x1d%\x18V\x97s\xef\'p\xdb\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xc3\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f\xf2\xfa^\xc84\xb0aM\xfd\x8cP\xac\x9e\x9f/\x0e\x81\xaeZ\xdd\x91N\a\'u\xa0\xf6\xa57\x9b\x97\xb9\x17\xbe\x0f\x01\xbd\xd7\x8b(pfC\xf2\x01n\r\xa1\xa7%\xbf+\x11\x96\x1e\\*\v@\x88\x99]j\xbe0\xdeN_)\xf23*w\xcc\xfaOHD9\xd1\x04\xd9\x10\xab\xe9\xdc\xa3n\x13\x93q\x12\x12r\xdfn\x96\xf2(\xc7\x8d#7\xeel\x1c\xee\x1e\xccx\xfd1\x91\xbf\xb5\xdeL,\x93s\x05\xc1\xec\xb3\x89\xe5\xe2\xa9\x1c\xbb&\xff\x15\x1a`\x04d\xe6\x9e\xe0\xcf\xce\xadq\x94\'A\x96\xafet/[\x1ah!\xbf\x17\xa9H\xa0\xd5?\x85\x11\x84j*\x13\x83\x19\xd8\xc4\x1e\x16[lS&\xbb&xX\xb9\n\x8d\xd0\x9e\xbc\xa4\x8f\x04N\x8c\xfan\xcb\x83\xc2\xb6\x8e\x02\x9bC0M\xb5\xb1\x88\xbb\xf2\x8b\x94\x01\x10\xcb3I\xc0\xb5\xfd\xab\xeb@6\xaa\xf6\xcf\xb0\xe9\xca@M\xf9J\xc7\x06%i:J\x9a1+XQ\xdf\xc4}\xcd\xd4\xe9^\xc1T|\xec\x11n\xf7\x9a$\x82\x19vC\xd1\xdfy/+', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={r1, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, &(0x7f0000000140)=0x1) open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="b702000026000000bfa300000000000005000000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67d5b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e6a9f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a08060000000200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0183babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304020000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed69000000000000000000000000009a6d1852cfe790362ca800000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007976699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e671282a2d3066ac968c7d7d7db195f255b1b4a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f512493af8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f74b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeae3b0ba38d8bb1bf032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c095162b3b5fb3832ee68e2b53d44bd84bf6770157e96bbb96b5e1f165c87e7a9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3df3572a7d9ef5f6103997f1f9e4b0c3970bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18.358446781s ago: executing program 3 (id=666): r0 = syz_open_procfs(0x0, 0x0) getdents(r0, &(0x7f0000000000)=""/39, 0x82) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x6, 0x5, 0x9, 0x4, 0x5}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xfe4f, 0x0, &(0x7f0000000000)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x704, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 17.484640729s ago: executing program 34 (id=666): r0 = syz_open_procfs(0x0, 0x0) getdents(r0, &(0x7f0000000000)=""/39, 0x82) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x6, 0x5, 0x9, 0x4, 0x5}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xfe4f, 0x0, &(0x7f0000000000)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x704, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 17.466387339s ago: executing program 4 (id=670): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x26}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) 15.960457625s ago: executing program 4 (id=672): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000000)=ANY=[], 0x1, 0x6eb, &(0x7f0000001240)="$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") openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.log\x00', 0x844c1, 0x9c37611dc13d0d83) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080)) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)=ANY=[], 0x29) 9.642669171s ago: executing program 4 (id=686): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x756}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x4800) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xbd213077fa1addad, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r5}, 0xc) 9.530564392s ago: executing program 2 (id=687): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000000c0), 0x1, 0x560, &(0x7f00000003c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0x4010}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @desc3}}) 9.281852224s ago: executing program 4 (id=689): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 8.906891968s ago: executing program 4 (id=691): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)="e1d28f59", 0x4}, {&(0x7f0000000180)="a721525077e69c80ec90e64751bbfd64b62f49df4d715ee4eec58591eaac120f0b8c9d15a0eabed90cf8a4c3731ae35c542268de815d342464a95f3e4b77e0162eab380f370863a84e4143bd", 0x4c}, {&(0x7f0000000340)="99d62254d95f4261f67d4ccac37a9520965d649371e1c724a22b0732184d6aade27c7bad429b99b1fba9212e67d14b1f455b8ca66a12a42a7d42dfbfaf02cc67a611fcdcddaf10f01ea67c73a7720a0fdd275cec139d2cef28a8a64a083b4959119e30a51d4ca4adacc760db917d1e007cfb738133d2fcf495", 0x79}, {&(0x7f00000003c0)="94bff731e44c07f2a9550e5ae4567088a7af6f7a4ef74fe3fba1ba10436e24822c413d25c40a1f16937efb7f8beeda7a3cbadb68d5bcee08b1290a33df49c7370f959d467843207c73f5", 0x4a}, {&(0x7f0000000440)="3a81765175a7fa6eb16b9ee2c0d32d604a2540da93e2b6ea7f9cbed4698be049c4b5243b9d971783abae36374240cda22a006ae0fe3e94918f31a44511d07a24cb24a87be1a61110fba7c860ae9ab6b5dc383d2f6bbad450d56cd65efedbe38a73a743903afb6352e2ebc18d95f648e3f236225f1e378a66b34d472334286a3e1106db3c01a4768b9cfecb5cafaaf3ca45f99516fe823d7dc33239d0e5f163a7d99c5e6dea05380e58e6735a96bda6399869292420", 0xb5}], 0x5, 0x80000000, 0x6) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000005e40), 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000240)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0xfe}, [@IFA_LOCAL={0x14, 0x2, @loopback={0xfec0ffff00000000}}]}, 0x2c}}, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000300010000004500000025000000190011000600ad000200000000000006040000000000000000", 0x39}], 0x1) 8.193717706s ago: executing program 6 (id=692): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000840)="9c", 0x1}], 0x1}, 0x10) sendmsg$inet(r0, &(0x7f0000003480)={&(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000003380)=[{&(0x7f0000000180)="e499", 0x2}], 0x1}, 0x480) 7.545545302s ago: executing program 2 (id=693): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000b05000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) 7.366332604s ago: executing program 2 (id=694): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') writev(r0, &(0x7f00000006c0)=[{0x0, 0x2}, {&(0x7f00000004c0)='\n', 0x1}], 0x2) 7.225657595s ago: executing program 2 (id=695): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000300)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRESDEC], 0x44, 0x6f7, &(0x7f0000001f80)="$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") open(0x0, 0x8000, 0x50) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file5\x00', 0x0) r4 = fanotify_init(0xf00, 0x0) r5 = gettid() rt_sigtimedwait(&(0x7f0000000100)={[0x3ff]}, 0x0, 0x0, 0x8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) tkill(r5, 0x7) fanotify_mark(r4, 0x105, 0x40009975, 0xffffffffffffffff, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file1\x00', 0x208008de, &(0x7f0000000b40)=ANY=[], 0x80, 0x150a, &(0x7f0000002080)="$eJzs3Au0j9XWMPA511oPm6R/klvWXPPhn1wWSZJLQi5JkiRJbgkJSZKQ3HJLQhJyT3IPyS12cr/fck+SI0mSkNyS9Q2d3s95T+d9O+93+j7fOHv+xljjv+Z+njn/a+25x36e5z/G3t91GFy5bpUKtZkZ/iX415fuAJACAP0A4DoAiACgeJbiWS4fz6Cx+7/2JuLP9ci0q70CcTVJ/9M26X/aJv1P26T/aZv0P22T/qdt0v+0TfovRFq2dXrO62Wk3SGf/6dlcv3/N3K48Jiv1he+seP/IEX6n7ZJ/9M26X/aJv1P26T/aZv0/99f+f/mmPQ/bZP+C5GWXe3Pn2Vc3XG1f/6EEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQqQN58IVBgD+Y3611yWEEEIIIYQQQog/T0h/tVcghBBCCCGEEEKI//sQFGgwEEE6SA8pkAEywjWQCa6FzHAdJOB6yAI3QFa4EbJBdsgBOSEX3AS5wQKBA4YY8kBeSMLNkA9ugfxQAApCIfBQGIrArVAUboNicDsUhzugBNwJJaEUlIYycBeUhbuhHJSHCnAPVIRKUBmqwL1QFe6DanA/VIcHoAY8CDXhIagFD0NteATqwKNQFx6DevA41IcG0BAaQeP/o/yXoAu8DF2hG3SHHtATXoFe0Bv6QF/oB69Cf3gNBsDrMBAGwWB4A4bAmzAU3oJhMBxGwNswEkbBaBgDY2EcjId3YAK8CxPhPZgEk2EKTIVpMB1mwPswE2bBbPgA5sCHMBfmwXxYAAvhI1gEiyEVPoYl8AkshWWwHFbASlgFq2ENrIV1sB42wEbYBJthC2yFT2EbbIcdsBN2wW7YA5/BXvgc9sEXsB++/B/mn/27/I4ICKhQoUGD6TAdpmAKZsSMmAkzYWbMjAlMYBbMglkxK2bDbJgDc2AuzIW5MTcSEjIy5sE8mMQk5sN8mB/zY0EsiB49FsEiWBRvw2JYDItjcSyBJbAklsJSWAbLYFksi+WwHFbAClgRK2JlrIz34r14H1bDalgdq2MNrIE1sSbWwlpYG2tjHayDdbEu1sN6WB/rY0NsiI2xMTbBJtgUm2JzbI4tsAW2xJbYGltjG2yDbbEttsN22B7bYwfsgB2xE3bCl/AlfBlfxm5YUfXAntgTe2Ev7IN9sS++iv3xNXwNX8eBOAgH4xv4Br6JQ/EMDsPhOAJHYFk1CkfjGGQ1DsfjeJyAE3AiTsRJOBkn41SchtNxBs7AmTgLZ+EHOAc/xA9xHs7DBbgQF+IiXIypmIpL8CwuxWW4HFfgSlyFK3ENrsU1uB434HrchJtwC27BT/FT3I7bcSfuxN24Gz/Dz/Bz/BwH4n7cjwfwAB7Eg3gID+FhPIxH8AgexaN4DI/hcTyOJ/AknsKTeBpP4xk8i+fwHF7AC3gRX8j1TZ3dBdYNBHWZUUalU+lUikpRGVVGlUllUplVZpVQCZVFZVHlACCbyqZyqBwql8qlcqvcihQpVrHKo/KkAIDKp/Kp/Cq/KqgKKq+8KqKKqKKqqCqmiqni6g5VQt2pSqpSqpkvo8qosqq5L6fKqwqqgqqoKqnKqoqqoqqqqqqaqqaqq+qqhqqhaqqHVC3VA/vgI+pyZ+qqQVhPDcb6qoFqqBqpN/EJ1UQNxaaqmWqunlLDcRi2VE18a/WMaqNGY1v1nBqDz6v2ahx2UC+qjqqT6qxeUl1UU99VdVOTsIfqqaZiL9Vb9VF91UyspC53rLJ6XQ1Ug9Rg9YZagG+qoeotNUwNVyPU22qkGqVGqzFqrBqnxqt31AT1rpqo3lOT1GQ1RU1V09R0NUO9r2aqWWq2+kDNUR+quWqemq8WqIXqI7VILVap6mO1RH2ilqplarlaoVaqVWq1WqPWqnVqvdqgNqpNarPaoraqT9U2tV3tUDvVLrVb7VGfqb3qc7VPfaH2qy/VAfUXdVB9pQ6pr9Vh9Y06or5VR9V36pj6Xh1XP6gT6qQ6pX5Up9VP6ow6q86p8+qC+lldVL+oSyoo0KiV1troSKfT6XWKzqAz6mt0Jn2tzqyv0wl9vc6ib9BZ9Y06m86uc+icOpe+SefWVpN2mnWs8+i8Oqlv1vn0LTq/LqAL6kLa68K6iL5VF9W36WL6dl1c36FL6Dt1SV1Kl9Zl9F26rL5bl9PldQV9j66oK+nKuoq+V1fV9+lq+n5dXT+ga+gHdU39kK6lH9a19SO6jn5U19WP6Xr6cV1fN9ANdSPdWD+hm+gndVPdTDfXT+kW+mndUrfSrfUzuo1+VrfVz+l2+nndXr+gO+gXdUfdSXfWv+hLOuiuupvurnvonvoV3Uv31n10X91Pv6r769f0AP26HqgH6cH6DT1Ev6mH6rf0MD1cj9Bv65F6lB6tx+ixepwer9/RE/S7eqJ+T0/Sk/UUPVVP09N1n98qzf67/B6/XXX/Nv/df5A/4Nd336K36k/1Nr1d79A79S69W+/Re/RevVfv0/v0fr1fH9AH9EF9UB/Sh/RhfVgf0Uf00YAA+pg+ro/rE/qkPq9/1Kf1T/qMPqvP6vP6gr6gL/72PQCDRhltjIlMOpPepJgMJqO5xmQy15rM5jqTMNebLOYGk9XcaLKZ7CaHyWlymZtMbmMNGWfYxCaPyWuS5maTz9xi8psCpqApZLwpbIqYW//l/D9aX2PT2DQxTUxT09Q0N81NC9PCtDQtTWvT2rQxbUxb09a0M+1Me9PedDAdTEfT0XQ2nU0X08V0NV1Nd9Pd9DSvmF6mt+lj+pp+5lXT3/Q3A8wAM9AMNIPNYDPEDDFDzVAzzAwzI8wIM9KMNKPNaDPWjDXjzXgzwUwwE81EM8lMMlPMFDPNTDMzzAwz08w0s81sM8fMMXPNXDPfzDcLzUKzyCwyqSbVLDFLzFKzzCwzK8wKs8qsMmvMGrPOrDMbzAazyWwyS81Ws9VsM9vMDrPD7DK7zB6zx+w1e80+s8/sN/vNAXPAHDQHzSFzyBw2h80Rc8QcNUfNMXOsx3Fz3JwwJ8wpc8qcNqfNGXPGnDPnzAVzwVw0F80lc+nybV+kIhWZyETponRRSpQSZYwyRpmiTFHmKHOUiBJRlihLlDW6McoWZY9yRDmjXNFNUe7IRhS5iKM4yhPljZLRzVG+6JYof1QgKhgVinxUOCoS3RoVjW6LikW3R8WjO6IS0Z1RyahUVDoqE90VlY3ujspF5aMK0T1RxahSVDmqEt0bVY3ui6pF90fVoweiGtGDUc3ooahW9HBUO3okqhM9GtWNHovqRY9H9aMGUcOoUdT4T60fwpnsT/qutpvtbnvYnvYV28v2tn1sX9vPvmr729fsAPu6HWgH2cH2DTvEvmmH2rfsMDvcjrBv25F2lB1tx9ixdpwdb9+xE+y7dqJ9z06yk+0UO9VOs9PtDPu+nWln2dn2AzvHfmjn2nl2vl1gF9qP7CK72Kbaj+0S+4ldapfZ5XaFXWlXnb8ewK616+x6u8FutJvsZrvFbrWf2m12u91hd9pddrfdYz+ze+3ndp/9wu63X9oD9i/2oP3KHrJf28P2G3vEfmuP2u/sMfu9PW5/sCfsSXvK/mhP25/sGXvWnrPn7QX7s71of7GXbLh8c3/58k6GDKWjdJRCKZSRMlImykSZKTMlKEFZKAtlpayUjbJRDspBuSgX5abcdBkTUx7KQ0lKUj7KR/kpPxWkguTJUxEqQkWpKBWjYlScilMJKkElqSSVptJ0F91Fd9PdVJ7K0z10D1WiSlSFqlBVqkrVqBpVp+pUg2pQTapJtagW1abaVIfqUF2qS/WoHtWn+tSQGlJjakxNqAk1pabUnJpTC2pBLakltabW1IbaUFtqS+2oHbWn9tSBOlBH6kidqTN1oS7UlbpSd+pOPakn9aJe1If6UD/qR/2pPw2gATSQBtJgGkxDaAgNpaE0jIbTCHqbRtIoGk1jaCyNo/E0nibQBJpIE2kSTaIpNIWm0TSaQTNoJs2k2TSb5tAcmktzaT7Np4W0kBbRIkqlVFpCS2gpLaXltJxW0kpaTatpLa2l9bSeNtJG2kybaSttpW20jXbQDtpFu2gP7aG9tJf20T7aT/vpAB2gg3SQDtEhOkyH6QgdoaN0lI7RMTpOx+kEnaBTdIpO02k6Q2foHJ2jC/QzXaRf6BIFSnEKMrprXCZ3rcvsrnMpLoP72ziHy+lyuZtcbmddNpf9P8XknMvvCriCrpDzrrAr4m79XVzSlXKlXRl3lyvr7nblfhdXdfe5au5+V9094Kq4e3+L0/8a13APupruMVfLPe5quwaujmvk6rrHXD33uKvvGriGrpFr4Z52LV0r19o949q4Z38XL3KL3Vq3zq13G9xe97k75867o+47d8H97Lq6bq6fe9X1d6+5Ae51N9AN+l08wr3tRrpRbrQb48a6cb+Lp7ipbpqb7ma4991MN+t38UL3kZvjUt1cN8/Ndwt+jS+vKdV97Ja4T9xSt8wtdyvcSrfKrXZr/vdaV7hNbrPb4va4z9w2t93tcDvdLrf71/jyPva5L9x+96U74r51B91X7pA75g67b36NL+/vmPveHXc/uBPupDvlfnSn3U/ujDv76/4v7/1H94u75IIDRlas2XDE6Tg9p3AGzsjXcCa+ljPzdZzg6zkL38BZ+UbOxtk5B+fkXHwT52bLxI6ZY87DeTnJN3M+voXzcwEuyIXYc2EuwrdyUb6Ni/HtXJzv4BJ8J5fkUlyay/BdXJbv5nJcnivwPVyRK3FlrsL3clW+j6vx/VydH+Aa/CDX5Ie4Fj/MtfkRrsOPcl1+jOvx41yfG3BDbsSN+Qluwk9yU27GzfkpbsFPc0tuxa35GW7Dz3Jbfo7b8fPcnl/gDvwid+RO3Jlf4i78Mnflbtyde3BPfoV7cW/uw325H7/K/fk1HsCv80AexIP5DR7Cb/JQfouH8XAewW/zSB7Fo3kMj+VxPJ7f4bMLW+W4fK83iSfzFJ7K03g6z+D3eSbP4tn8Ac/hD3kuz+P5vIAX8ke8iBdzKn/MS/gTXsrLeDmv4JW8ilfzGl7L63g9b+CNvIk38xbeyp/yNt7OO3gn7+LdvIc/4738Oe/jL3g/f8kH+C98kL/iQ/w1H+Zv+Ah/y0f5Oz7G3/Nx/oFP8Ek+xT/yaf6Jz/BZPsfn+QL/zBf5F77EgSHGWMU6NnEUp4vTxylxhjhjfE2cKb42zhxfFyfi6+Ms8Q1x1vjGOFucPc4R54xzxTfFuWMbU+xijuM4T5w3TsY3x/niW+L8cYG4YFwo9nHhuEh8a1w0vi0uFt8eF4/viEvEd8Yl41LxYw+Uie+Ky8Z3x+Xi8nGF+J64YlwprhxXie+Nq8b3xdXi++Pq8QNxsfjBuGb8UFwrfjiuHT8S14kfjevGj8X14sfj+nGDuGHcKG4cPxE3iZ+Mm8bN4ubxU3GL+Om4Zdwqbh0/E7eJn/3D493jHnHP+JX4lTiE+/X85ILkwuRHyUXJxcnU5MfJJclPkkuTy5LLkyuSK5OrkquTa5Jrk+uS65MbkhuTm5Kbk1uSIVRJDx698tobH/l0Pr1P8Rl8Rn+Nz+Sv9Zn9dT7hr/dZ/A0+q7/RZ/PZfQ6f0+fyN/nc3nryzrOPfR6f1yf9zT6fv8Xn9wV8QV/Ie1/YF/GNfGPf2DfxT/qmvplv7p/yT/mn/dO+lW/ln/Ft/LO+rX/Ot/PP+/b+Bf+Cf9F39J18Z/+S7+Jf9l19N9/dd/c9fU/fy/fyfXwf38/38/19fz/AD/AD/UA/2A/2Q/wQP9QP9cP8MD/Cj/Aj/Ug/2o/2Y/1YP96P9xP8BD/RT/ST/CQ/xU/x0/w0P8PP8DP9TD/bz/Zz8s/xc/1cP9/P9wv9Qr/IL/KpPtUv8Uv8Ur/UL/fL/Uq/0q/2q/1av9av9+v9Rr/Rb/ab/Va/1W/z2/wOv8Pv8rv8Hr/H7/V7/T6/z+/3+/0Bf8Af9Af9If+1P+y/8Uf8t/6o/84f89/74/4Hf8Kf9Kf8j/60/8mf8Wf9OX/eX/A/+4v+F3/JBz8+8U5iQuLdxMTEe4lJicmJKYmpiWmJ6YkZifcTMxOzErMTHyTmJD5MzE3MS8xPLEgsTHyUWJRYnEhNfJxYkvgksTSxLLE8sSKxMrEqEcJN2+KQJ+QNyXBzyBduCflDgVAwFAo+FA5Fwq2haLgtFAu3h+LhjlAi3BlKhlKhdHg81A8NQsPQKDQOT4Qm4cnQNDQLzcNToUV4OrQMrULr8ExoE54NbcNzoV14PrQPL4QO4cXQMXQKncNLoUt4OXQN3UL30CP0DK+EXqF36BP6hn7h1dA/vBYGhNfDwDAoDA5vhCHhzTA0vBWGheFhRHg7jAyjwugwJowN48L48E6YEN4NE8N7YVKYHKaEqWFamB5mhPfDzDArzA4fhDnhwzA3zAvzw4KwMHwUFoXFITV8HJaET8LSsCwsDyvCyrAqrA5rwtqwLqwPG8LGsClsDlvC1vBp2Ba2hx1hZ9gVdoc94bOwN3we9oUvwv7wZTgQ/hIOhq/CofB1OBy+CUfCt+Fo+C4cC9+H4+GHcCKcDKfCj+F0+CmcCWfDuXA+XAg/h4vhl3BJ/mZNCCGEEOKfov/geI9/8DX127isJwBcuz3n4b+vuTHbX+e9Va4WCQB4pluHR/5jVKzYvXv3385dqiHKOw8AElfy08GVeBk0//W1GRT9h+vrrTpd4D+on7wDIOOVyr/KCFfqPw2toRnc9l/Uf+KpEYtKxOey/Df15wHkz3slJwNcia/UL/Zf1M/e5A/Wn+Gr8QBN/yYnE1yJr9QvAk/Cs9D6P50phBBCCCGEEEL8VW9Vut0fPT9ffj7PZa7kpIcr8ZXnz3/8fC6EEEIIIYQQQoir7/lOnVs90bp1s3b/5GSbBvinT04zk3L/fyxDJjL50yZX+zeTEEIIIYQQ4s925ab/aq9ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYRIu/5f/Duxq71HIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ4mr7XwEAAP//7d019A==") mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x8001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 6.79307971s ago: executing program 5 (id=697): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$setopts(0x4206, r1, 0x0, 0x21) 6.090340967s ago: executing program 2 (id=698): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) syz_clone3(&(0x7f0000001e80)={0x166002400, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0, 0xfffffefe}, 0xb3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000480)={[{@resgid}, {}, {@data_err_ignore}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000c40)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf335263bd9bffbcc2542ded71038259ca171ce1a311ef07ec3ad71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x9]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 5.82481664s ago: executing program 6 (id=699): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x48}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000000203030000000000000000000200137d0800034000004008080001008100003a"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4004) 5.063484218s ago: executing program 6 (id=700): r0 = open(0x0, 0x149442, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbf0fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) pread64(r2, &(0x7f00000001c0)=""/53, 0x35, 0xffffffffffffffff) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004084, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) ftruncate(r0, 0x200002) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x150) unshare(0x24020400) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x22002, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0xffffffffffffdffb) r5 = socket(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x178, 0x394, 0x1c0, 0x178, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @mcast2, [], [], 'team_slave_0\x00', 'netpci0\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "fc6b061134c5d5c8465af5f5caa5bd6c0dde77ff83daa984c0d76167e0608dcaa2caff7bd9c5923cccd5b483df8124249f91b8c3c2cea9bed64dc935a975401a68e34a04c1f15e50050729ba985e8c1576994e350d93a782668d4d51a1bc76bba1fde09794922ae65a804c56f092e430ebb8fa892d671c8c8035cae06810f8c6", 0x20}}, @common=@unspec=@addrtype1={{0x28}, {0xa}}]}, @common=@inet=@SET2={0x30}}, {{@ipv6={@private1, @mcast1, [], [0x0, 0x0, 0x0, 0xff000000], 'wg2\x00', 'hsr0\x00'}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "08db"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) 4.979214939s ago: executing program 5 (id=701): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={0x0, 0x30}}, 0x24004000) 4.626695963s ago: executing program 2 (id=702): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e308002", 0x1001, r2) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000240)={'fscrypt:', @auto=[0x33, 0x31, 0x36, 0x39, 0x35, 0x36, 0x32, 0x39, 0x61, 0x58, 0x61, 0x33, 0x61, 0x61, 0x61, 0x65]}, &(0x7f0000000380)={0x0, "ad3d9e3aa9376a2087f67859d94e22aa0057692c24b91f288d71aefb88ea482fff7a8725517e7c9f6bcb70c87595a776cdd20905320314d8e2421f805b17d888", 0x2c}, 0x48, r2) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000201, 0xee00, 0x0) write(r1, &(0x7f00000002c0)="36be91774cbaae32f12de28a3aace21f4444ab7aa2e6a75f2abba07fe54dda551909722756a8f97d589418cd1334d82fe854df8c0a067a3cd5b916174ea95a4f1a9e95bd3eeafd4a098ebf4f066b28580b7d8825c18a3991029ac1cbb9f62871e33a4716d04cf92190f5fb36f458096b87415fa59ea74d90c83773799e7e59c5d1a068f90a0528c34761475b2a2af2e99945cf863142c23dd0", 0x99) r3 = inotify_init() inotify_add_watch(r3, &(0x7f00000001c0)='.\x00', 0x4000423) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) io_setup(0x3, 0x0) sendfile(r1, r0, 0x0, 0x40001) 3.817280131s ago: executing program 6 (id=703): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000b05000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) 3.149802627s ago: executing program 5 (id=704): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') writev(r0, &(0x7f00000006c0)=[{0x0, 0x2}, {&(0x7f00000004c0)='\n', 0x1}], 0x2) 3.099179188s ago: executing program 6 (id=705): r0 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x30) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000500)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0xab) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x7e) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0xff) 2.947902269s ago: executing program 5 (id=706): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x0) poll(&(0x7f0000000000)=[{r1, 0xa}], 0x1, 0xa1) r2 = dup3(r1, r0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000bc0)={0x7, 0xdac0, 0x8, 0x7, 0x13, "4dd5d26bd8b1eb227705ecfba7158d29559dba", 0x5, 0xa4}) 1.741597612s ago: executing program 5 (id=707): bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x5000003a, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') exit(0x0) fchdir(r1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 817.915932ms ago: executing program 5 (id=708): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000840)="9c", 0x1}], 0x1}, 0x10) sendmsg$inet(r0, &(0x7f0000003480)={&(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000003380)=[{&(0x7f0000000180)="e499", 0x2}], 0x1}, 0x480) 267.234237ms ago: executing program 4 (id=709): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x48}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000000203030000000000000000000200137d0800034000004008080001008100003a"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4004) 0s ago: executing program 6 (id=710): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r3, r4, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = openat$cgroup_int(r6, 0x0, 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x3ff, 0x12) setresgid(0xee00, 0xee01, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r8) sendmmsg$unix(r1, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)=[@cred={{0x1c, 0x1, 0x2, {0x0, r8, r9}}}], 0x20}}], 0x2, 0x4000010) socket$inet(0x2, 0x3, 0x9) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1) kernel console output (not intermixed with test programs): BTRFS info (device loop1): using free space tree [ 84.025060][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.033478][ T4373] loop0: detected capacity change from 0 to 64 [ 84.044421][ T4369] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 84.086282][ T4369] SQUASHFS error: Unable to read directory block [247:26] [ 84.093608][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.167477][ T4328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.184966][ T26] audit: type=1800 audit(1778045707.520:2): pid=4373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 84.227314][ T4328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.235707][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.275033][ T4362] BTRFS info (device loop1): enabling ssd optimizations [ 84.707130][ T4405] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10'. [ 84.814086][ T4405] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10'. [ 84.871919][ T4280] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 84.915368][ T4406] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10'. [ 84.945880][ T4409] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10'. [ 85.296442][ T4374] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop1 scanned by udevd (4374) [ 85.471163][ T4435] loop0: detected capacity change from 0 to 64 [ 86.374211][ T4456] loop4: detected capacity change from 0 to 1024 [ 86.459475][ T4428] loop2: detected capacity change from 0 to 32768 [ 86.529730][ T129] cfg80211: failed to load regulatory.db [ 86.555320][ T4428] [ 86.555320][ T4428] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.555320][ T4428] [ 87.225855][ T4285] [ 87.225855][ T4285] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.225855][ T4285] [ 87.277345][ T4285] [ 87.277345][ T4285] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.277345][ T4285] [ 87.322191][ T4448] loop3: detected capacity change from 0 to 32768 [ 87.410774][ T4448] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 87.458142][ T46] hfsplus: b-tree write err: -5, ino 25 [ 87.464918][ T46] hfsplus: b-tree write err: -5, ino 4 [ 87.470833][ T46] hfsplus: b-tree write err: -5, ino 2 [ 87.496542][ T46] hfsplus: b-tree write err: -5, ino 26 [ 87.880532][ T4350] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 88.099318][ T4480] Zero length message leads to an empty skb [ 88.414798][ T4492] loop3: detected capacity change from 0 to 512 [ 88.422321][ T4490] loop2: detected capacity change from 0 to 1024 [ 88.659277][ T4492] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.46: iget: bad i_size value: 38620345925642 [ 88.704238][ T4492] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.46: couldn't read orphan inode 15 (err -117) [ 89.177331][ T4492] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 89.356072][ T26] audit: type=1800 audit(1778045712.660:3): pid=4492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.46" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 89.380186][ T4492] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.46: bg 0: block 5: invalid block bitmap [ 89.436565][ T46] hfsplus: b-tree write err: -5, ino 25 [ 89.442750][ T46] hfsplus: b-tree write err: -5, ino 4 [ 89.486088][ T46] hfsplus: b-tree write err: -5, ino 2 [ 89.526202][ T46] hfsplus: b-tree write err: -5, ino 26 [ 89.653658][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 90.079851][ T4495] loop4: detected capacity change from 0 to 32768 [ 90.106404][ T4495] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 90.299496][ T4530] loop3: detected capacity change from 0 to 1024 [ 90.726402][ T4374] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 91.336151][ T11] hfsplus: b-tree write err: -5, ino 25 [ 91.342049][ T11] hfsplus: b-tree write err: -5, ino 4 [ 91.350888][ T4549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.69'. [ 91.366912][ T11] hfsplus: b-tree write err: -5, ino 2 [ 91.381223][ T4548] loop2: detected capacity change from 0 to 2048 [ 91.400144][ T11] hfsplus: b-tree write err: -5, ino 26 [ 91.496932][ T4548] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840c018, mo2=0002] [ 91.532105][ T4548] System zones: 0-4 [ 91.575110][ T4548] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 91.596163][ T4548] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.989129][ T4566] loop1: detected capacity change from 0 to 512 [ 91.994600][ T4565] loop4: detected capacity change from 0 to 64 [ 92.039904][ T4566] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.75: iget: bad i_size value: 38620345925642 [ 92.099292][ T4542] loop0: detected capacity change from 0 to 32768 [ 92.108227][ T4542] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.66 (4542) [ 92.122576][ T4566] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.75: couldn't read orphan inode 15 (err -117) [ 92.136062][ T4542] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 92.146362][ T4542] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 92.155109][ T4542] BTRFS info (device loop0): setting nodatasum [ 92.161425][ T4542] BTRFS info (device loop0): force zlib compression, level 3 [ 92.168889][ T4542] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 92.178908][ T4542] BTRFS info (device loop0): use lzo compression, level 0 [ 92.191045][ T4566] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 92.200253][ T4542] BTRFS info (device loop0): turning on flush-on-commit [ 92.200277][ T4542] BTRFS info (device loop0): enabling auto defrag [ 92.200322][ T4542] BTRFS info (device loop0): max_inline at 4096 [ 92.200344][ T4542] BTRFS info (device loop0): using free space tree [ 92.370619][ T26] audit: type=1800 audit(1778045715.710:4): pid=4566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.75" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 92.396877][ T4566] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.75: bg 0: block 5: invalid block bitmap [ 92.454588][ T4542] BTRFS info (device loop0): enabling ssd optimizations [ 92.582437][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 92.610984][ T4271] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 92.850083][ T4565] syz.4.74: attempt to access beyond end of device [ 92.850083][ T4565] loop4: rw=2049, sector=111, nr_sectors = 48 limit=64 [ 92.893997][ T4384] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop0 scanned by udevd (4384) [ 92.903487][ T4565] syz.4.74: attempt to access beyond end of device [ 92.903487][ T4565] loop4: rw=2049, sector=159, nr_sectors = 1 limit=64 [ 93.030835][ T4565] Buffer I/O error on dev loop4, logical block 159, lost async page write [ 93.053999][ T4565] syz.4.74: attempt to access beyond end of device [ 93.053999][ T4565] loop4: rw=2049, sector=160, nr_sectors = 1 limit=64 [ 93.082690][ T4596] loop3: detected capacity change from 0 to 1024 [ 93.131259][ T4565] Buffer I/O error on dev loop4, logical block 160, lost async page write [ 93.179847][ T4596] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 93.226068][ T4565] syz.4.74: attempt to access beyond end of device [ 93.226068][ T4565] loop4: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 93.344675][ T4565] Buffer I/O error on dev loop4, logical block 161, lost async page write [ 93.396746][ T4565] syz.4.74: attempt to access beyond end of device [ 93.396746][ T4565] loop4: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 93.469481][ T4565] Buffer I/O error on dev loop4, logical block 162, lost async page write [ 93.493630][ T4565] syz.4.74: attempt to access beyond end of device [ 93.493630][ T4565] loop4: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 93.507256][ T4565] Buffer I/O error on dev loop4, logical block 163, lost async page write [ 93.516117][ T4565] syz.4.74: attempt to access beyond end of device [ 93.516117][ T4565] loop4: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 93.529482][ T4565] Buffer I/O error on dev loop4, logical block 167, lost async page write [ 93.545090][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 93.568682][ T4565] syz.4.74: attempt to access beyond end of device [ 93.568682][ T4565] loop4: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 93.701570][ T4565] Buffer I/O error on dev loop4, logical block 169, lost async page write [ 93.736610][ T4565] syz.4.74: attempt to access beyond end of device [ 93.736610][ T4565] loop4: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 93.774170][ T4565] Buffer I/O error on dev loop4, logical block 171, lost async page write [ 93.793529][ T4565] syz.4.74: attempt to access beyond end of device [ 93.793529][ T4565] loop4: rw=2049, sector=172, nr_sectors = 1 limit=64 [ 93.831693][ T4565] Buffer I/O error on dev loop4, logical block 172, lost async page write [ 93.844891][ T4565] Buffer I/O error on dev loop4, logical block 173, lost async page write [ 93.951251][ T4548] fs-verity: sha256 using implementation "sha256-avx2" [ 93.982109][ T4548] fs-verity (loop2, inode 18): fs-verity keyring is empty, rejecting signed file! [ 94.060666][ T4591] loop1: detected capacity change from 0 to 32768 [ 94.155149][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 94.630966][ T4607] loop3: detected capacity change from 0 to 32768 [ 94.692741][ T4607] [ 94.692741][ T4607] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 94.692741][ T4607] [ 94.789246][ T4603] loop0: detected capacity change from 0 to 32768 [ 94.899050][ T4278] [ 94.899050][ T4278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 94.899050][ T4278] [ 94.923600][ T4628] loop1: detected capacity change from 0 to 512 [ 94.940335][ T4278] [ 94.940335][ T4278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 94.940335][ T4278] [ 94.976039][ T4628] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.87: iget: bad i_size value: 38620345925642 [ 95.005603][ T4603] XFS (loop0): Mounting V5 Filesystem [ 95.096837][ T4628] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.87: couldn't read orphan inode 15 (err -117) [ 95.158897][ T4603] XFS (loop0): Ending clean mount [ 95.176564][ T4628] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 95.215198][ T26] audit: type=1800 audit(1778045718.550:5): pid=4628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.87" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 95.251768][ T4628] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.87: bg 0: block 5: invalid block bitmap [ 95.329246][ T4644] loop4: detected capacity change from 0 to 64 [ 95.488814][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 95.603803][ T4271] XFS (loop0): Unmounting Filesystem [ 95.747499][ T4648] loop1: detected capacity change from 0 to 1024 [ 96.772073][ T4402] hfsplus: b-tree write err: -5, ino 25 [ 96.806151][ T4402] hfsplus: b-tree write err: -5, ino 4 [ 96.860218][ T4402] hfsplus: b-tree write err: -5, ino 2 [ 96.865786][ T4402] hfsplus: b-tree write err: -5, ino 26 [ 97.124688][ T4668] netlink: 'syz.0.101': attribute type 4 has an invalid length. [ 97.191311][ T4650] loop3: detected capacity change from 0 to 32768 [ 97.224549][ T4668] netlink: 'syz.0.101': attribute type 17 has an invalid length. [ 97.300079][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 97.676105][ T4687] netlink: 'syz.4.109': attribute type 29 has an invalid length. [ 97.696394][ T4687] netlink: 'syz.4.109': attribute type 29 has an invalid length. [ 97.740198][ T4689] netlink: 'syz.4.109': attribute type 29 has an invalid length. [ 97.867008][ T4696] netlink: 36 bytes leftover after parsing attributes in process `syz.0.111'. [ 98.466000][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 98.934421][ T4678] loop1: detected capacity change from 0 to 32768 [ 98.952528][ T4720] loop2: detected capacity change from 0 to 1024 [ 99.005537][ T4678] XFS (loop1): Mounting V5 Filesystem [ 99.143195][ T4678] XFS (loop1): Ending clean mount [ 99.767756][ T4733] hfsplus: xattr search failed [ 99.915807][ T9] hfsplus: b-tree write err: -5, ino 25 [ 99.942412][ T9] hfsplus: b-tree write err: -5, ino 4 [ 99.986688][ T9] hfsplus: b-tree write err: -5, ino 2 [ 99.992660][ T9] hfsplus: b-tree write err: -5, ino 26 [ 100.005855][ T4280] XFS (loop1): Unmounting Filesystem [ 101.533451][ T4768] netlink: 'syz.3.129': attribute type 4 has an invalid length. [ 101.690969][ T4765] netlink: 'syz.3.129': attribute type 17 has an invalid length. [ 101.720966][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 101.826486][ T4775] netlink: 36 bytes leftover after parsing attributes in process `syz.2.134'. [ 101.891673][ T4777] netlink: 'syz.1.133': attribute type 4 has an invalid length. [ 102.522722][ T4781] netlink: 'syz.1.133': attribute type 17 has an invalid length. [ 102.571071][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 102.854334][ T4790] loop4: detected capacity change from 0 to 1024 [ 102.964571][ T4773] loop0: detected capacity change from 0 to 32768 [ 103.108609][ T4773] XFS (loop0): Mounting V5 Filesystem [ 103.227123][ T4773] XFS (loop0): Ending clean mount [ 103.330180][ T4271] XFS (loop0): Unmounting Filesystem [ 103.511083][ T4788] loop3: detected capacity change from 0 to 32768 [ 103.567564][ T4788] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 103.766371][ T11] hfsplus: b-tree write err: -5, ino 25 [ 103.772179][ T11] hfsplus: b-tree write err: -5, ino 4 [ 103.807035][ T11] hfsplus: b-tree write err: -5, ino 2 [ 103.812605][ T11] hfsplus: b-tree write err: -5, ino 26 [ 104.055712][ T4374] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 104.265943][ T4826] netlink: 'syz.3.151': attribute type 4 has an invalid length. [ 104.328199][ T4826] netlink: 'syz.3.151': attribute type 17 has an invalid length. [ 104.363011][ T4831] netlink: 36 bytes leftover after parsing attributes in process `syz.1.153'. [ 104.615884][ T4835] loop2: detected capacity change from 0 to 64 [ 105.224227][ T4842] loop0: detected capacity change from 0 to 1024 [ 105.386823][ T4835] bio_check_eod: 81 callbacks suppressed [ 105.386841][ T4835] syz.2.154: attempt to access beyond end of device [ 105.386841][ T4835] loop2: rw=2049, sector=111, nr_sectors = 48 limit=64 [ 105.479906][ T4835] syz.2.154: attempt to access beyond end of device [ 105.479906][ T4835] loop2: rw=2049, sector=159, nr_sectors = 1 limit=64 [ 105.495558][ T4835] buffer_io_error: 70 callbacks suppressed [ 105.495574][ T4835] Buffer I/O error on dev loop2, logical block 159, lost async page write [ 105.515794][ T4835] syz.2.154: attempt to access beyond end of device [ 105.515794][ T4835] loop2: rw=2049, sector=160, nr_sectors = 1 limit=64 [ 105.535689][ T4835] Buffer I/O error on dev loop2, logical block 160, lost async page write [ 105.545226][ T4835] syz.2.154: attempt to access beyond end of device [ 105.545226][ T4835] loop2: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 105.555456][ T4847] netlink: 1192 bytes leftover after parsing attributes in process `syz.4.158'. [ 105.607389][ T4835] Buffer I/O error on dev loop2, logical block 161, lost async page write [ 105.645883][ T4848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.158'. [ 105.682513][ T4835] syz.2.154: attempt to access beyond end of device [ 105.682513][ T4835] loop2: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 105.719803][ T4848] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.158'. [ 105.736222][ T4835] Buffer I/O error on dev loop2, logical block 162, lost async page write [ 105.781722][ T4835] syz.2.154: attempt to access beyond end of device [ 105.781722][ T4835] loop2: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 105.795936][ T4835] Buffer I/O error on dev loop2, logical block 163, lost async page write [ 105.809982][ T4835] syz.2.154: attempt to access beyond end of device [ 105.809982][ T4835] loop2: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 105.829017][ T4839] loop3: detected capacity change from 0 to 32768 [ 105.835756][ T4835] Buffer I/O error on dev loop2, logical block 167, lost async page write [ 105.849109][ T4835] syz.2.154: attempt to access beyond end of device [ 105.849109][ T4835] loop2: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 105.864080][ T4835] Buffer I/O error on dev loop2, logical block 169, lost async page write [ 105.869227][ T4839] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 105.885232][ T4835] syz.2.154: attempt to access beyond end of device [ 105.885232][ T4835] loop2: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 105.904248][ T4835] Buffer I/O error on dev loop2, logical block 171, lost async page write [ 105.922595][ T4835] syz.2.154: attempt to access beyond end of device [ 105.922595][ T4835] loop2: rw=2049, sector=172, nr_sectors = 1 limit=64 [ 105.951831][ T4835] Buffer I/O error on dev loop2, logical block 172, lost async page write [ 105.963194][ T4835] Buffer I/O error on dev loop2, logical block 173, lost async page write [ 106.074362][ T4857] netlink: 'syz.3.163': attribute type 29 has an invalid length. [ 106.082698][ T4857] netlink: 'syz.3.163': attribute type 29 has an invalid length. [ 106.100733][ T4857] netlink: 'syz.3.163': attribute type 29 has an invalid length. [ 106.114042][ T4857] netlink: 'syz.3.163': attribute type 29 has an invalid length. [ 106.141034][ T4855] netlink: 'syz.1.161': attribute type 10 has an invalid length. [ 106.159848][ T1212] hfsplus: b-tree write err: -5, ino 25 [ 106.165608][ T1212] hfsplus: b-tree write err: -5, ino 4 [ 106.216119][ T1212] hfsplus: b-tree write err: -5, ino 2 [ 106.251163][ T1212] hfsplus: b-tree write err: -5, ino 26 [ 106.369733][ T4374] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 106.556511][ T4869] netlink: 'syz.2.167': attribute type 4 has an invalid length. [ 106.668959][ T4874] netlink: 104 bytes leftover after parsing attributes in process `syz.4.168'. [ 106.692353][ T4872] netlink: 'syz.2.167': attribute type 17 has an invalid length. [ 106.723612][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 106.790030][ T4877] loop1: detected capacity change from 0 to 2048 [ 106.855775][ T4877] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840c018, mo2=0002] [ 106.884856][ T4877] System zones: 0-4 [ 106.925059][ T4877] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 106.962419][ T4877] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.125398][ T4887] ======================================================= [ 107.125398][ T4887] WARNING: The mand mount option has been deprecated and [ 107.125398][ T4887] and is ignored by this kernel. Remove the mand [ 107.125398][ T4887] option from the mount to silence this warning. [ 107.125398][ T4887] ======================================================= [ 107.487875][ T4894] loop3: detected capacity change from 0 to 1024 [ 107.774818][ T4897] loop0: detected capacity change from 0 to 1024 [ 107.795638][ T4897] EXT4-fs: Ignoring removed nomblk_io_submit option [ 107.807899][ T4885] loop2: detected capacity change from 0 to 40427 [ 107.835352][ T4885] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 107.865259][ T4885] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 107.907559][ T4885] F2FS-fs (loop2): invalid crc value [ 107.915287][ T4897] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 107.935661][ T4885] F2FS-fs (loop2): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 107.980496][ T4885] F2FS-fs (loop2): Found nat_bits in checkpoint [ 108.139324][ T4885] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 108.175088][ T4885] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 108.188020][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 108.373533][ T56] hfsplus: b-tree write err: -5, ino 25 [ 108.390603][ T56] hfsplus: b-tree write err: -5, ino 4 [ 108.449667][ T56] hfsplus: b-tree write err: -5, ino 2 [ 108.455356][ T56] hfsplus: b-tree write err: -5, ino 26 [ 108.878449][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 109.313162][ T4934] loop2: detected capacity change from 0 to 1024 [ 110.232815][ T11] hfsplus: b-tree write err: -5, ino 25 [ 110.239734][ T11] hfsplus: b-tree write err: -5, ino 4 [ 110.245398][ T11] hfsplus: b-tree write err: -5, ino 2 [ 110.280127][ T11] hfsplus: b-tree write err: -5, ino 26 [ 110.459523][ T4957] loop2: detected capacity change from 0 to 1764 [ 110.660864][ T4963] netlink: 36 bytes leftover after parsing attributes in process `syz.4.201'. [ 111.230299][ T4959] loop0: detected capacity change from 0 to 4096 [ 111.531691][ T4959] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.602001][ T4939] loop3: detected capacity change from 0 to 40427 [ 111.613233][ T4959] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 111.647913][ T4939] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 111.670476][ T4939] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 111.702773][ T4939] F2FS-fs (loop3): invalid crc value [ 111.710130][ T4939] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 111.800917][ T4939] F2FS-fs (loop3): Found nat_bits in checkpoint [ 111.938951][ T4939] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 111.957937][ T4939] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 111.970806][ T4959] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Out of memory [ 112.018216][ T4959] EXT4-fs error (device loop0): add_dirent_to_buf:2216: inode #2: comm syz.0.200: mark_inode_dirty error [ 112.174877][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 112.818433][ T4282] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 112.844827][ T5001] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 113.040123][ T5010] 9pnet_fd: Insufficient options for proto=fd [ 113.196734][ T5013] device batadv_slave_1 entered promiscuous mode [ 113.206005][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 113.206315][ T5009] device batadv_slave_1 left promiscuous mode [ 113.216036][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 113.457814][ T5023] loop0: detected capacity change from 0 to 1024 [ 114.024064][ T5036] netlink: 36 bytes leftover after parsing attributes in process `syz.4.221'. [ 114.469338][ T5040] netlink: 'syz.0.223': attribute type 4 has an invalid length. [ 114.529534][ T5046] loop1: detected capacity change from 0 to 64 [ 114.573412][ T5040] netlink: 'syz.0.223': attribute type 17 has an invalid length. [ 114.597334][ T26] audit: type=1800 audit(1778045737.940:6): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.224" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 114.995923][ T5051] loop1: detected capacity change from 0 to 1024 [ 115.124879][ T5052] device batadv_slave_1 entered promiscuous mode [ 115.133067][ T5050] device batadv_slave_1 left promiscuous mode [ 115.326007][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 115.345991][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 115.355988][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 115.365987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 115.375990][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 115.385987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 115.395988][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 115.487298][ T5031] loop2: detected capacity change from 0 to 40427 [ 115.501077][ T5031] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 115.508369][ T5031] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 115.524072][ T5031] F2FS-fs (loop2): invalid crc value [ 115.534266][ T5031] F2FS-fs (loop2): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 115.609968][ T5031] F2FS-fs (loop2): Found nat_bits in checkpoint [ 115.875675][ T4328] hfsplus: b-tree write err: -5, ino 25 [ 115.898738][ T4328] hfsplus: b-tree write err: -5, ino 4 [ 115.904393][ T4328] hfsplus: b-tree write err: -5, ino 2 [ 115.910436][ T5031] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 115.936142][ T5031] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 115.952717][ T4328] hfsplus: b-tree write err: -5, ino 26 [ 116.104145][ T5079] loop1: detected capacity change from 0 to 512 [ 116.169675][ T4285] bio_check_eod: 8 callbacks suppressed [ 116.169691][ T4285] syz-executor: attempt to access beyond end of device [ 116.169691][ T4285] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 116.212082][ T5079] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.234: iget: bad i_size value: 38620345925642 [ 116.308324][ T5079] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.234: couldn't read orphan inode 15 (err -117) [ 116.332211][ T5079] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 116.452032][ T5079] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.234: bg 0: block 5: invalid block bitmap [ 116.583846][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 116.638718][ T5091] loop2: detected capacity change from 0 to 64 [ 116.698348][ T26] audit: type=1800 audit(1778045740.040:7): pid=5091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.236" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 116.916535][ T5097] loop1: detected capacity change from 0 to 128 [ 116.952944][ T5097] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 116.977863][ T5097] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 117.032152][ T5099] loop2: detected capacity change from 0 to 1024 [ 117.515132][ T5102] hfsplus: trying to free free bnode 0(1) [ 117.960554][ T5105] netlink: 36 bytes leftover after parsing attributes in process `syz.3.244'. [ 118.016858][ T4328] hfsplus: b-tree write err: -5, ino 25 [ 118.041662][ T4328] hfsplus: b-tree write err: -5, ino 4 [ 118.048581][ T5097] loop1: detected capacity change from 128 to 0 [ 118.161382][ T4328] hfsplus: b-tree write err: -5, ino 2 [ 118.167516][ T4328] hfsplus: b-tree write err: -5, ino 26 [ 118.278107][ T5095] loop0: detected capacity change from 0 to 32768 [ 118.429924][ C0] I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 118.436993][ T5095] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 118.451898][ T4280] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 118.492224][ T5112] loop4: detected capacity change from 0 to 64 [ 118.589726][ C0] I/O error, dev loop1, sector 70 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 118.599431][ T4280] EXT4-fs error (device loop1): ext4_get_inode_loc:4658: inode #2: block 35: comm syz-executor: unable to read itable block [ 118.635496][ T5107] loop: Write error at byte offset 9223372036854776831, length 1024. [ 118.816339][ C0] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 118.825879][ C0] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 118.835719][ C0] buffer_io_error: 6 callbacks suppressed [ 118.835730][ C0] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 118.849784][ T4280] EXT4-fs (loop1): I/O error while writing superblock [ 118.849838][ T4280] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: IO failure [ 118.877756][ T4402] loop: Write error at byte offset 9223372036854776831, length 1024. [ 118.897638][ C1] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 118.907248][ C1] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 118.916778][ C1] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 118.928179][ T4280] EXT4-fs (loop1): I/O error while writing superblock [ 118.935005][ T4280] EXT4-fs error (device loop1): ext4_dirty_inode:6156: inode #2: comm syz-executor: mark_inode_dirty error [ 118.962005][ T4402] loop: Write error at byte offset 9223372036854776831, length 1024. [ 119.010819][ C1] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 119.020428][ C1] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 119.029977][ C1] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 119.038828][ T4280] EXT4-fs (loop1): I/O error while writing superblock [ 119.136234][ C0] I/O error, dev loop1, sector 70 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 119.146219][ T5107] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4643: inode #2: block 35: comm kworker/u4:15: unable to read itable block [ 119.151202][ T4350] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 119.210765][ T4402] loop: Write error at byte offset 9223372036854776831, length 1024. [ 119.247224][ C1] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 119.256867][ C1] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 119.265184][ T5107] EXT4-fs (loop1): I/O error while writing superblock [ 119.291123][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 119.308551][ T4402] loop: Write error at byte offset 9223372036854776831, length 1024. [ 119.326279][ C1] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 119.334771][ T4280] EXT4-fs (loop1): I/O error while writing superblock [ 119.474679][ T5127] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 119.524246][ T5127] EXT4-fs (loop2): invalid journal inode [ 119.563059][ T5129] block device autoloading is deprecated and will be removed. [ 119.583442][ T5127] EXT4-fs (loop2): can't get journal size [ 119.616674][ T5127] EXT4-fs (loop2): 1 truncate cleaned up [ 119.632706][ T5127] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 119.780757][ T5132] set_capacity_and_notify: 1 callbacks suppressed [ 119.780816][ T5132] loop3: detected capacity change from 0 to 1024 [ 119.784899][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 119.869651][ T5134] netlink: 20 bytes leftover after parsing attributes in process `syz.0.252'. [ 120.187027][ T5132] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 120.297438][ T5107] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.388356][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 120.444440][ T5107] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.588564][ T5107] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.488389][ T5107] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.550361][ T5154] loop2: detected capacity change from 0 to 16 [ 122.627600][ T5154] erofs: (device loop2): mounted with root inode @ nid 36. [ 124.259285][ T5162] loop2: detected capacity change from 0 to 1024 [ 124.737587][ T4283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 124.748587][ T4283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 124.757558][ T4283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 124.765787][ T4283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 124.774033][ T4283] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 124.781662][ T4283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 124.800615][ T5173] md: superblock version -352309147 not known [ 124.865174][ T5173] md: couldn't set array info. -22 [ 124.896617][ T5180] netlink: 20 bytes leftover after parsing attributes in process `syz.3.268'. [ 125.017165][ T5183] loop4: detected capacity change from 0 to 64 [ 125.230199][ T5162] EXT4-fs: Ignoring removed i_version option [ 125.242172][ T5162] EXT4-fs: inline encryption not supported [ 125.263000][ T5162] EXT4-fs: Ignoring removed orlov option [ 125.273650][ T5162] EXT4-fs (loop2): Test dummy encryption mode enabled [ 125.935241][ T5162] EXT4-fs: error -4 creating inode table initialization thread [ 125.946638][ T5162] EXT4-fs (loop2): mount failed [ 126.836163][ T4282] Bluetooth: hci3: command 0x0409 tx timeout [ 127.468367][ T5210] loop2: detected capacity change from 0 to 1024 [ 127.479343][ T5175] chnl_net:caif_netlink_parms(): no params data found [ 127.770451][ T5213] input: syz1 as /devices/virtual/input/input5 [ 127.785707][ T5215] loop3: detected capacity change from 0 to 1024 [ 127.927390][ T5215] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 128.027666][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 128.754205][ T5231] loop3: detected capacity change from 0 to 64 [ 128.916095][ T4282] Bluetooth: hci3: command 0x041b tx timeout [ 129.556066][ T5107] device hsr_slave_0 left promiscuous mode [ 129.583912][ T5107] device hsr_slave_1 left promiscuous mode [ 129.640926][ T5107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.653520][ T5107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.664054][ T5107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.672900][ T5107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.686564][ T5239] md: superblock version -352309147 not known [ 129.700708][ T5239] md: couldn't set array info. -22 [ 129.712337][ T5107] device bridge_slave_1 left promiscuous mode [ 129.729784][ T5107] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.742664][ T5107] device bridge_slave_0 left promiscuous mode [ 129.750919][ T5107] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.776945][ T126] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 129.885003][ T5107] device veth1_macvtap left promiscuous mode [ 129.933939][ T5107] device veth0_macvtap left promiscuous mode [ 129.944739][ T5107] device veth1_vlan left promiscuous mode [ 129.960203][ T5107] device veth0_vlan left promiscuous mode [ 129.976203][ T126] usb 1-1: Using ep0 maxpacket: 32 [ 129.987682][ T126] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 130.008578][ T126] usb 1-1: config 0 has no interface number 0 [ 130.014740][ T126] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 130.061383][ T126] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 130.119596][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.138910][ T126] usb 1-1: Product: syz [ 130.143187][ T126] usb 1-1: Manufacturer: syz [ 130.156062][ T126] usb 1-1: SerialNumber: syz [ 130.366513][ T126] usb 1-1: config 0 descriptor?? [ 130.376079][ T5235] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 130.603550][ T5235] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 130.996061][ T4282] Bluetooth: hci3: command 0x040f tx timeout [ 131.596743][ T5269] netlink: 20 bytes leftover after parsing attributes in process `syz.3.285'. [ 131.773531][ T5107] team0 (unregistering): Port device team_slave_1 removed [ 131.822426][ T5107] team0 (unregistering): Port device team_slave_0 removed [ 131.872568][ T5107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.949349][ T5107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.053030][ T126] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 132.122413][ T126] asix: probe of 1-1:0.188 failed with error -71 [ 132.161410][ T126] usb 1-1: USB disconnect, device number 2 [ 132.462239][ T5107] bond0 (unregistering): Released all slaves [ 132.579148][ T5175] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.599873][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.606600][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.616828][ T5175] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.625042][ T5175] device bridge_slave_0 entered promiscuous mode [ 132.676357][ T5175] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.693714][ T5175] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.735333][ T5175] device bridge_slave_1 entered promiscuous mode [ 132.825275][ T5175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.910981][ T5175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.270512][ T4282] Bluetooth: hci3: command 0x0419 tx timeout [ 134.424003][ T5175] team0: Port device team_slave_0 added [ 134.489510][ T5175] team0: Port device team_slave_1 added [ 134.589169][ T5175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.985999][ T5175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.106107][ T5175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.112464][ T5286] loop0: detected capacity change from 0 to 64 [ 136.172946][ T5175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.243943][ T5175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.363060][ T5175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.416428][ T5289] loop2: detected capacity change from 0 to 512 [ 136.453275][ T5289] EXT4-fs: Ignoring removed orlov option [ 136.579931][ T5175] device hsr_slave_0 entered promiscuous mode [ 136.588851][ T5289] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 136.639088][ T5175] device hsr_slave_1 entered promiscuous mode [ 136.671897][ T5175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.695488][ T5175] Cannot create hsr debugfs directory [ 136.707104][ T5289] loop2: detected capacity change from 512 to 1 [ 136.753792][ T5289] Dev loop2: unable to read RDB block 1 [ 136.776175][ T5289] loop2: unable to read partition table [ 136.810928][ T5289] loop2: partition table beyond EOD, truncated [ 136.833971][ T5289] loop_reread_partitions: partition scan of loop2 (y‚Þ˜«Ý) failed (rc=-5) [ 137.057504][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 137.095599][ T4285] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 137.137346][ T4285] syz-executor: attempt to access beyond end of device [ 137.137346][ T4285] loop2: rw=133121, sector=2, nr_sectors = 2 limit=1 [ 137.192431][ T4285] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 137.236628][ T4285] EXT4-fs (loop2): I/O error while writing superblock [ 137.243530][ T4285] EXT4-fs error (device loop2): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 137.289811][ T4285] syz-executor: attempt to access beyond end of device [ 137.289811][ T4285] loop2: rw=133121, sector=2, nr_sectors = 2 limit=1 [ 137.325580][ T4285] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 137.350190][ T5309] netlink: 'syz.0.296': attribute type 4 has an invalid length. [ 137.364377][ T4285] EXT4-fs (loop2): I/O error while writing superblock [ 137.400016][ T5309] netlink: 'syz.0.296': attribute type 17 has an invalid length. [ 137.426674][ T4285] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 137.456127][ T4285] syz-executor: attempt to access beyond end of device [ 137.456127][ T4285] loop2: rw=133121, sector=2, nr_sectors = 2 limit=1 [ 137.488776][ T5175] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 137.526309][ T4285] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 137.534641][ T4285] EXT4-fs (loop2): I/O error while writing superblock [ 137.545976][ T5175] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 137.576170][ T4285] EXT4-fs error (device loop2): ext4_quota_off:7147: inode #4: comm syz-executor: mark_inode_dirty error [ 137.588375][ T5175] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 137.626280][ T4285] syz-executor: attempt to access beyond end of device [ 137.626280][ T4285] loop2: rw=133121, sector=2, nr_sectors = 2 limit=1 [ 137.678514][ T5175] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 137.696127][ T4285] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 137.739421][ T4285] EXT4-fs (loop2): I/O error while writing superblock [ 137.762729][ T5317] loop0: detected capacity change from 0 to 1024 [ 137.784699][ T4285] syz-executor: attempt to access beyond end of device [ 137.784699][ T4285] loop2: rw=133121, sector=2, nr_sectors = 2 limit=1 [ 137.833385][ T4285] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 137.852403][ T4285] EXT4-fs (loop2): I/O error while writing superblock [ 137.896298][ T5317] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 137.912230][ T5293] kmmpd-loop2: attempt to access beyond end of device [ 137.912230][ T5293] loop2: rw=14337, sector=34, nr_sectors = 2 limit=1 [ 137.989959][ T5293] Buffer I/O error on dev loop2, logical block 17, lost sync page write [ 138.108233][ T5175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.134099][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.173178][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.178400][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 138.220246][ T5175] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.312716][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.344591][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.390177][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.397411][ T4328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.425697][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.791888][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.894468][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.942185][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.949433][ T4325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.021866][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 140.064340][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.138052][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 140.158033][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 140.188442][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 140.216353][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.245740][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.291814][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.312843][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 140.341360][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 140.360207][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 140.399114][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 140.406509][ T22] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 140.417783][ T5343] loop0: detected capacity change from 0 to 2048 [ 140.536426][ T5343] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 140.586100][ T22] usb 5-1: Using ep0 maxpacket: 16 [ 140.603393][ T22] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 140.629318][ T5343] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 140.641145][ T22] usb 5-1: config 1 has no interface number 1 [ 140.681971][ T22] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 140.713098][ T22] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 140.771879][ T22] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 140.793031][ T5343] UDF-fs: bad mount option "fd=0x0000000000000004" or missing value [ 140.830493][ T22] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 140.863210][ T5330] loop2: detected capacity change from 0 to 32768 [ 140.866301][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.918441][ T22] usb 5-1: Product: syz [ 140.922683][ T22] usb 5-1: Manufacturer: syz [ 140.933034][ T5330] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 140.950425][ T22] usb 5-1: SerialNumber: syz [ 140.955099][ T4271] UDF-fs: error (device loop0): udf_read_inode: (ino 1440) failed !bh [ 141.006250][ T4271] UDF-fs: error (device loop0): udf_read_inode: (ino 1440) failed !bh [ 141.371498][ T4374] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 141.377385][ T22] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 141.502814][ T5357] netlink: 'syz.2.308': attribute type 4 has an invalid length. [ 141.544017][ T5361] netlink: 'syz.2.308': attribute type 17 has an invalid length. [ 141.819194][ T4700] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.002916][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 142.016805][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 142.059894][ T5175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.180663][ T4700] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.194316][ T22] usb 5-1: current rate 9338373 is different from the runtime rate 9338507 [ 142.403163][ T4700] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.579645][ T22] usb 5-1: USB disconnect, device number 2 [ 142.726549][ T4700] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.772484][ T4282] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 144.781455][ T4282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 144.794350][ T4282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 144.802889][ T4282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 144.815852][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 144.846841][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 144.947987][ T48] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 145.254362][ T5395] 9pnet_fd: Insufficient options for proto=fd [ 145.301675][ T5375] loop2: detected capacity change from 0 to 32768 [ 145.362878][ T5375] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 145.508017][ T5405] netlink: 'syz.3.318': attribute type 4 has an invalid length. [ 145.722174][ T5400] netlink: 'syz.3.318': attribute type 17 has an invalid length. [ 145.866092][ T4374] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 145.974775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 146.026054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.161038][ T5175] device veth0_vlan entered promiscuous mode [ 146.186123][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 146.207324][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 146.267584][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 146.296997][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 146.402304][ T5175] device veth1_vlan entered promiscuous mode [ 146.428445][ T5390] chnl_net:caif_netlink_parms(): no params data found [ 146.502465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 146.547567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 146.578592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 146.593578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 146.670134][ T5175] device veth0_macvtap entered promiscuous mode [ 146.926191][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 148.147900][ T5431] loop3: detected capacity change from 0 to 1024 [ 148.358256][ T5175] device veth1_macvtap entered promiscuous mode [ 148.378514][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 148.395425][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 148.534529][ T5441] loop4: detected capacity change from 0 to 1024 [ 148.581353][ T5420] loop2: detected capacity change from 0 to 40427 [ 148.606792][ T5420] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 148.614742][ T5420] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 148.628142][ T5441] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 148.637022][ T5441] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.650756][ T5420] F2FS-fs (loop2): invalid crc value [ 148.656740][ T5420] F2FS-fs (loop2): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 148.705149][ T5441] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: block 3: comm syz.4.328: lblock 3 mapped to illegal pblock 3 (length 3) [ 148.705750][ T5175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.730710][ T5175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.740954][ T5175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.751643][ T5175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.761531][ T5420] F2FS-fs (loop2): Found nat_bits in checkpoint [ 148.769616][ T5175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.785594][ T5441] EXT4-fs (loop4): Remounting filesystem read-only [ 148.792563][ T5175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.804901][ T5448] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: block 3: comm syz.4.328: lblock 3 mapped to illegal pblock 3 (length 1) [ 148.819511][ T5175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.836949][ T5175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.849790][ T5448] EXT4-fs (loop4): Remounting filesystem read-only [ 148.858378][ T5440] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: block 3: comm syz.4.328: lblock 3 mapped to illegal pblock 3 (length 1) [ 148.874016][ T5175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.896143][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 148.907333][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 148.916552][ T5440] EXT4-fs (loop4): Remounting filesystem read-only [ 148.923371][ T5448] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: block 3: comm syz.4.328: lblock 3 mapped to illegal pblock 3 (length 1) [ 148.942773][ T5448] EXT4-fs (loop4): Remounting filesystem read-only [ 148.964821][ T5390] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.981111][ T5390] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.992013][ T5440] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: block 3: comm syz.4.328: lblock 3 mapped to illegal pblock 3 (length 1) [ 149.017120][ T5390] device bridge_slave_0 entered promiscuous mode [ 149.026316][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 149.073034][ T5440] EXT4-fs (loop4): Remounting filesystem read-only [ 149.088504][ T4700] device hsr_slave_0 left promiscuous mode [ 149.100201][ T9] hfsplus: b-tree write err: -5, ino 25 [ 149.106611][ T9] hfsplus: b-tree write err: -5, ino 4 [ 149.112221][ T9] hfsplus: b-tree write err: -5, ino 2 [ 149.126065][ T5420] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 149.133261][ T5448] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: block 3: comm syz.4.328: lblock 3 mapped to illegal pblock 3 (length 1) [ 149.156283][ T5420] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 149.170506][ T9] hfsplus: b-tree write err: -5, ino 26 [ 149.176781][ T4700] device hsr_slave_1 left promiscuous mode [ 149.183679][ T5448] EXT4-fs (loop4): Remounting filesystem read-only [ 149.191558][ T4700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.199326][ T5449] EXT4-fs error (device loop4): ext4_ext_remove_space:2930: inode #15: comm syz.4.328: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 149.221098][ T5449] EXT4-fs (loop4): Remounting filesystem read-only [ 149.228126][ T5449] EXT4-fs error (device loop4) in ext4_setattr:5695: Corrupt filesystem [ 149.251089][ T4700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.261525][ T5449] EXT4-fs (loop4): Remounting filesystem read-only [ 149.308112][ T4700] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.323324][ T4700] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.333507][ T4700] device bridge_slave_1 left promiscuous mode [ 149.350818][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 149.364134][ T4700] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.456619][ T4700] device bridge_slave_0 left promiscuous mode [ 149.475573][ T4700] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.596541][ T4700] device veth1_macvtap left promiscuous mode [ 149.612871][ T4700] device veth0_macvtap left promiscuous mode [ 149.636318][ T4700] device veth1_vlan left promiscuous mode [ 149.642278][ T4700] device veth0_vlan left promiscuous mode [ 150.199900][ T4283] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 150.283343][ T5470] 9pnet_fd: Insufficient options for proto=fd [ 151.076064][ T4283] Bluetooth: hci0: command 0x040f tx timeout [ 151.392678][ T4700] team0 (unregistering): Port device team_slave_1 removed [ 151.431777][ T4700] team0 (unregistering): Port device team_slave_0 removed [ 151.471233][ T4700] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.517427][ T4700] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.765307][ T4700] bond0 (unregistering): Released all slaves [ 151.850233][ T5175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.861513][ T5175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.871970][ T5175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.883042][ T5175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.893129][ T5175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.903794][ T5175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.927540][ T5175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.938785][ T5390] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.945911][ T5390] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.964799][ T5390] device bridge_slave_1 entered promiscuous mode [ 151.972648][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.982161][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.997206][ T5459] netlink: 'syz.4.330': attribute type 4 has an invalid length. [ 152.057528][ T5463] netlink: 'syz.4.330': attribute type 17 has an invalid length. [ 152.075122][ T5463] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 152.102502][ T5473] netlink: 36 bytes leftover after parsing attributes in process `syz.3.335'. [ 152.144941][ T5175] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.156691][ T5480] loop2: detected capacity change from 0 to 1024 [ 152.163665][ T5175] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.173901][ T5175] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.193005][ T5175] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.225662][ T5390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.430050][ T5390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.628367][ T5390] team0: Port device team_slave_0 added [ 152.665218][ T5390] team0: Port device team_slave_1 added [ 152.864032][ T4328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.902999][ T4328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.008123][ T5390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.027269][ T4325] hfsplus: b-tree write err: -5, ino 25 [ 153.033699][ T4325] hfsplus: b-tree write err: -5, ino 4 [ 153.043323][ T5390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.066620][ T4325] hfsplus: b-tree write err: -5, ino 2 [ 153.076569][ T5390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.095271][ T4325] hfsplus: b-tree write err: -5, ino 26 [ 153.107326][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.141511][ T5390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.153067][ T5390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.179544][ T4283] Bluetooth: hci0: command 0x0419 tx timeout [ 153.261190][ T5390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.342518][ T4328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.359171][ T4328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.422390][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 153.454673][ T5491] loop4: detected capacity change from 0 to 40427 [ 153.493288][ T5491] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 153.529398][ T5390] device hsr_slave_0 entered promiscuous mode [ 153.531489][ T5491] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 153.556950][ T5390] device hsr_slave_1 entered promiscuous mode [ 153.606310][ T5491] F2FS-fs (loop4): invalid crc value [ 153.628409][ T5491] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 153.732057][ T5491] F2FS-fs (loop4): Found nat_bits in checkpoint [ 155.335830][ T5518] loop2: detected capacity change from 0 to 512 [ 155.342723][ T5518] ext4: Unknown parameter 'hash' [ 155.445226][ T5371] blk_print_req_error: 3 callbacks suppressed [ 155.445241][ T5371] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 155.926373][ T5491] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 156.036204][ T5491] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 156.405438][ T5390] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 156.515679][ T5390] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 156.585852][ T5390] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 156.635027][ T5390] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 156.936796][ T5390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.972479][ T5535] netlink: 'syz.4.346': attribute type 4 has an invalid length. [ 157.035266][ T5535] netlink: 'syz.4.346': attribute type 17 has an invalid length. [ 157.124012][ T5541] loop3: detected capacity change from 0 to 1024 [ 157.137651][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.172242][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.215729][ T5390] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.264709][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 157.294898][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.413935][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.421140][ T4325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.446358][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 157.471792][ T5545] netlink: 'syz.4.350': attribute type 4 has an invalid length. [ 157.500087][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 157.518307][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.549020][ T4837] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.556676][ T4837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.583634][ T5547] netlink: 'syz.4.350': attribute type 17 has an invalid length. [ 157.606257][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.633409][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.669720][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 157.691485][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 157.719076][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 157.753227][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.764049][ T5528] loop5: detected capacity change from 0 to 32768 [ 157.785264][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 157.814529][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 157.847615][ T5528] XFS (loop5): Mounting V5 Filesystem [ 157.853363][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.915906][ T5528] XFS (loop5): Ending clean mount [ 158.009553][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 158.018121][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 158.238051][ T4504] hfsplus: b-tree write err: -5, ino 25 [ 158.263276][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 158.292483][ T4504] hfsplus: b-tree write err: -5, ino 4 [ 158.389115][ T4504] hfsplus: b-tree write err: -5, ino 2 [ 158.478584][ T4504] hfsplus: b-tree write err: -5, ino 26 [ 159.398711][ T4283] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 159.479749][ T5175] XFS (loop5): Unmounting Filesystem [ 159.537245][ T5566] 9pnet_fd: Insufficient options for proto=fd [ 159.615430][ T5578] loop4: detected capacity change from 0 to 64 [ 159.744849][ T5582] netlink: 36 bytes leftover after parsing attributes in process `syz.3.355'. [ 160.466877][ T5578] syz.4.353: attempt to access beyond end of device [ 160.466877][ T5578] loop4: rw=2049, sector=111, nr_sectors = 48 limit=64 [ 160.490822][ T5587] netlink: 20 bytes leftover after parsing attributes in process `syz.5.354'. [ 160.595718][ T5578] syz.4.353: attempt to access beyond end of device [ 160.595718][ T5578] loop4: rw=2049, sector=159, nr_sectors = 1 limit=64 [ 160.694610][ T5578] Buffer I/O error on dev loop4, logical block 159, lost async page write [ 160.744098][ T5578] syz.4.353: attempt to access beyond end of device [ 160.744098][ T5578] loop4: rw=2049, sector=160, nr_sectors = 1 limit=64 [ 160.784984][ T5578] Buffer I/O error on dev loop4, logical block 160, lost async page write [ 160.834348][ T5578] syz.4.353: attempt to access beyond end of device [ 160.834348][ T5578] loop4: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 160.880265][ T5578] Buffer I/O error on dev loop4, logical block 161, lost async page write [ 160.919127][ T5578] syz.4.353: attempt to access beyond end of device [ 160.919127][ T5578] loop4: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 161.011324][ T5578] Buffer I/O error on dev loop4, logical block 162, lost async page write [ 161.042797][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 161.059080][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 161.071155][ T5578] syz.4.353: attempt to access beyond end of device [ 161.071155][ T5578] loop4: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 161.113493][ T5390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.142332][ T5578] Buffer I/O error on dev loop4, logical block 163, lost async page write [ 161.166299][ T5578] syz.4.353: attempt to access beyond end of device [ 161.166299][ T5578] loop4: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 161.223410][ T5578] Buffer I/O error on dev loop4, logical block 167, lost async page write [ 161.240122][ T4402] kworker/u4:8: attempt to access beyond end of device [ 161.240122][ T4402] loop4: rw=1048577, sector=172, nr_sectors = 1 limit=64 [ 161.258168][ T5578] syz.4.353: attempt to access beyond end of device [ 161.258168][ T5578] loop4: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 161.272645][ T5598] loop3: detected capacity change from 0 to 2048 [ 161.289468][ T4402] Buffer I/O error on dev loop4, logical block 172, lost async page write [ 161.333172][ T5598] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 161.372174][ T5578] Buffer I/O error on dev loop4, logical block 169, lost async page write [ 161.396983][ T4402] kworker/u4:8: attempt to access beyond end of device [ 161.396983][ T4402] loop4: rw=1048577, sector=173, nr_sectors = 1 limit=64 [ 161.452601][ T5578] Buffer I/O error on dev loop4, logical block 171, lost async page write [ 161.466523][ T5598] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.506195][ T4402] Buffer I/O error on dev loop4, logical block 173, lost async page write [ 161.543843][ T5601] loop5: detected capacity change from 0 to 512 [ 161.688208][ T5606] binder_alloc: binder_alloc_mmap_handler: 5602 200000ffe000-200001000000 already mapped failed -16 [ 161.833356][ T5601] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 162.354144][ T5612] loop2: detected capacity change from 0 to 64 [ 162.379128][ T5601] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.358: couldn't read orphan inode 26 (err -116) [ 162.523975][ T5601] EXT4-fs (loop5): Remounting filesystem read-only [ 162.592028][ T5601] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 162.692485][ T5601] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.821332][ T5617] loop4: detected capacity change from 0 to 1024 [ 163.820751][ T4328] hfsplus: b-tree write err: -5, ino 25 [ 163.856458][ T4328] hfsplus: b-tree write err: -5, ino 4 [ 163.982363][ T4328] hfsplus: b-tree write err: -5, ino 2 [ 164.082484][ T5175] EXT4-fs (loop5): unmounting filesystem. [ 164.094597][ T4328] hfsplus: b-tree write err: -5, ino 26 [ 164.828138][ T5638] netlink: 36 bytes leftover after parsing attributes in process `syz.2.366'. [ 165.586369][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 165.596579][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 165.633464][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 165.652840][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 165.686634][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 165.701537][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 165.744772][ T5390] device veth0_vlan entered promiscuous mode [ 165.993846][ T5390] device veth1_vlan entered promiscuous mode [ 166.025727][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 166.061936][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 166.088702][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 166.108740][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 166.134140][ T5390] device veth0_macvtap entered promiscuous mode [ 166.167048][ T5390] device veth1_macvtap entered promiscuous mode [ 166.212833][ T5390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.233815][ T5390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.265412][ T5390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.301848][ T5390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.327976][ T5390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.352423][ T5390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.369634][ T5630] loop4: detected capacity change from 0 to 32768 [ 166.378716][ T5390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.392206][ T5390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.428591][ T5390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.448769][ T5390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.463312][ T5390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.473591][ T5390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.484475][ T5390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.497145][ T5630] XFS (loop4): Mounting V5 Filesystem [ 166.502973][ T5390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.513866][ T5390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.527770][ T5390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.538649][ T5390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.550605][ T5390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.587911][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 166.617992][ T5630] XFS (loop4): Ending clean mount [ 166.627337][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 166.680501][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 166.742203][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 166.772465][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 166.801906][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 166.827366][ T5390] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.845888][ T5674] loop2: detected capacity change from 0 to 64 [ 166.846153][ T5390] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.881688][ T5390] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.922000][ T5390] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.968805][ T4274] XFS (loop4): Unmounting Filesystem [ 167.291030][ T1212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.331841][ T1212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.392300][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 167.486645][ T4402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.494524][ T4402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.539453][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 167.720077][ T5674] bio_check_eod: 27 callbacks suppressed [ 167.720095][ T5674] syz.2.371: attempt to access beyond end of device [ 167.720095][ T5674] loop2: rw=2049, sector=111, nr_sectors = 48 limit=64 [ 167.806211][ T5674] syz.2.371: attempt to access beyond end of device [ 167.806211][ T5674] loop2: rw=2049, sector=159, nr_sectors = 1 limit=64 [ 167.972371][ T5674] buffer_io_error: 22 callbacks suppressed [ 167.972802][ T5674] Buffer I/O error on dev loop2, logical block 159, lost async page write [ 168.234895][ T5674] syz.2.371: attempt to access beyond end of device [ 168.234895][ T5674] loop2: rw=2049, sector=160, nr_sectors = 1 limit=64 [ 168.497920][ T5674] Buffer I/O error on dev loop2, logical block 160, lost async page write [ 168.710521][ T5674] syz.2.371: attempt to access beyond end of device [ 168.710521][ T5674] loop2: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 168.962579][ T5674] Buffer I/O error on dev loop2, logical block 161, lost async page write [ 169.077568][ T5674] syz.2.371: attempt to access beyond end of device [ 169.077568][ T5674] loop2: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 169.091049][ T5674] Buffer I/O error on dev loop2, logical block 162, lost async page write [ 169.099959][ T5674] syz.2.371: attempt to access beyond end of device [ 169.099959][ T5674] loop2: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 169.113755][ T5674] Buffer I/O error on dev loop2, logical block 163, lost async page write [ 169.122391][ T5674] syz.2.371: attempt to access beyond end of device [ 169.122391][ T5674] loop2: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 169.135896][ T5674] Buffer I/O error on dev loop2, logical block 167, lost async page write [ 169.144511][ T5674] syz.2.371: attempt to access beyond end of device [ 169.144511][ T5674] loop2: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 169.158120][ T5674] Buffer I/O error on dev loop2, logical block 169, lost async page write [ 169.166722][ T5674] syz.2.371: attempt to access beyond end of device [ 169.166722][ T5674] loop2: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 169.180207][ T5674] Buffer I/O error on dev loop2, logical block 171, lost async page write [ 169.188849][ T5674] syz.2.371: attempt to access beyond end of device [ 169.188849][ T5674] loop2: rw=2049, sector=172, nr_sectors = 1 limit=64 [ 169.202584][ T5674] Buffer I/O error on dev loop2, logical block 172, lost async page write [ 169.211808][ T5674] Buffer I/O error on dev loop2, logical block 173, lost async page write [ 169.223126][ T5691] loop6: detected capacity change from 0 to 1024 [ 169.268663][ T5693] loop4: detected capacity change from 0 to 1024 [ 169.306730][ T5691] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 169.674644][ T5390] EXT4-fs (loop6): unmounting filesystem. [ 170.015311][ T1212] hfsplus: b-tree write err: -5, ino 25 [ 170.032126][ T1212] hfsplus: b-tree write err: -5, ino 4 [ 170.076510][ T1212] hfsplus: b-tree write err: -5, ino 2 [ 170.089004][ T1212] hfsplus: b-tree write err: -5, ino 26 [ 170.185842][ T5720] loop2: detected capacity change from 0 to 1024 [ 170.666191][ T4421] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 170.986154][ T4421] usb 6-1: Using ep0 maxpacket: 8 [ 171.054666][ T4421] usb 6-1: config 5 has an invalid interface number: 5 but max is 0 [ 171.103407][ T4421] usb 6-1: config 5 has no interface number 0 [ 171.144033][ T4421] usb 6-1: config 5 interface 5 has no altsetting 0 [ 171.221215][ T5735] netlink: 'syz.4.383': attribute type 4 has an invalid length. [ 171.233839][ T4421] usb 6-1: New USB device found, idVendor=04ca, idProduct=3004, bcdDevice=6b.f7 [ 171.251441][ T1212] hfsplus: b-tree write err: -5, ino 25 [ 171.268900][ T1212] hfsplus: b-tree write err: -5, ino 4 [ 171.274490][ T1212] hfsplus: b-tree write err: -5, ino 2 [ 171.291791][ T4421] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.322145][ T1212] hfsplus: b-tree write err: -5, ino 26 [ 171.326209][ T4421] usb 6-1: Product: syz [ 171.399063][ T4421] usb 6-1: Manufacturer: syz [ 171.416720][ T4421] usb 6-1: SerialNumber: syz [ 171.434027][ T5741] netlink: 'syz.6.385': attribute type 4 has an invalid length. [ 172.860281][ T5739] netlink: 'syz.4.383': attribute type 17 has an invalid length. [ 172.887727][ T4421] usb 6-1: USB disconnect, device number 2 [ 172.946145][ T5745] netlink: 'syz.6.385': attribute type 17 has an invalid length. [ 173.056334][ T5745] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 173.176889][ T5751] loop2: detected capacity change from 0 to 64 [ 173.364326][ T5754] netlink: 20 bytes leftover after parsing attributes in process `syz.5.387'. [ 173.914350][ T5759] loop6: detected capacity change from 0 to 1024 [ 175.699857][ T4837] hfsplus: b-tree write err: -5, ino 25 [ 175.705699][ T4837] hfsplus: b-tree write err: -5, ino 4 [ 175.746170][ T4837] hfsplus: b-tree write err: -5, ino 2 [ 175.774334][ T4837] hfsplus: b-tree write err: -5, ino 26 [ 175.888608][ T5779] loop6: detected capacity change from 0 to 8 [ 175.952910][ T5779] SQUASHFS error: Failed to read block 0x6e6: -5 [ 175.968164][ T5779] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 175.994113][ T5779] SQUASHFS error: Unable to read directory block [631:26] [ 176.049214][ T5782] Bluetooth: MGMT ver 1.22 [ 176.307287][ T5793] netlink: 'syz.6.399': attribute type 4 has an invalid length. [ 176.350327][ T5793] netlink: 'syz.6.399': attribute type 17 has an invalid length. [ 176.525611][ T5797] netlink: 'syz.4.401': attribute type 4 has an invalid length. [ 176.602961][ T5797] netlink: 'syz.4.401': attribute type 17 has an invalid length. [ 177.070671][ T5807] device batadv_slave_1 entered promiscuous mode [ 177.598105][ T5801] device batadv_slave_1 left promiscuous mode [ 177.640087][ T5809] loop4: detected capacity change from 0 to 64 [ 177.736902][ T5811] loop5: detected capacity change from 0 to 1024 [ 178.126045][ T4283] Bluetooth: hci0: command 0x0c20 tx timeout [ 178.167810][ T5809] bio_check_eod: 35 callbacks suppressed [ 178.167826][ T5809] syz.4.404: attempt to access beyond end of device [ 178.167826][ T5809] loop4: rw=2049, sector=111, nr_sectors = 48 limit=64 [ 178.187444][ T5809] syz.4.404: attempt to access beyond end of device [ 178.187444][ T5809] loop4: rw=2049, sector=159, nr_sectors = 1 limit=64 [ 178.201264][ T5809] buffer_io_error: 30 callbacks suppressed [ 178.201279][ T5809] Buffer I/O error on dev loop4, logical block 159, lost async page write [ 178.216898][ T5809] syz.4.404: attempt to access beyond end of device [ 178.216898][ T5809] loop4: rw=2049, sector=160, nr_sectors = 1 limit=64 [ 178.230968][ T5809] Buffer I/O error on dev loop4, logical block 160, lost async page write [ 178.239763][ T5809] syz.4.404: attempt to access beyond end of device [ 178.239763][ T5809] loop4: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 178.291867][ T5809] Buffer I/O error on dev loop4, logical block 161, lost async page write [ 178.311062][ T5809] syz.4.404: attempt to access beyond end of device [ 178.311062][ T5809] loop4: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 178.342336][ T5809] Buffer I/O error on dev loop4, logical block 162, lost async page write [ 178.352575][ T5809] syz.4.404: attempt to access beyond end of device [ 178.352575][ T5809] loop4: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 178.401464][ T5809] Buffer I/O error on dev loop4, logical block 163, lost async page write [ 178.416288][ T5809] syz.4.404: attempt to access beyond end of device [ 178.416288][ T5809] loop4: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 178.576167][ T5809] Buffer I/O error on dev loop4, logical block 167, lost async page write [ 178.584791][ T5809] syz.4.404: attempt to access beyond end of device [ 178.584791][ T5809] loop4: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 178.599579][ T9] hfsplus: b-tree write err: -5, ino 25 [ 178.605312][ T9] hfsplus: b-tree write err: -5, ino 4 [ 178.607394][ T5826] loop6: detected capacity change from 0 to 1024 [ 178.642637][ T5826] EXT4-fs: Ignoring removed nobh option [ 178.648754][ T5809] Buffer I/O error on dev loop4, logical block 169, lost async page write [ 178.666065][ T5809] syz.4.404: attempt to access beyond end of device [ 178.666065][ T5809] loop4: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 178.669621][ T9] hfsplus: b-tree write err: -5, ino 2 [ 178.686268][ T5826] EXT4-fs: inline encryption not supported [ 178.714594][ T5826] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 178.729804][ T5829] loop2: detected capacity change from 0 to 256 [ 178.732521][ T5809] Buffer I/O error on dev loop4, logical block 171, lost async page write [ 178.752570][ T5826] EXT4-fs (loop6): bad geometry: bigalloc file system with non-zero first_data_block [ 178.752570][ T5826] [ 178.756995][ T9] hfsplus: b-tree write err: -5, ino 26 [ 178.817533][ T5809] syz.4.404: attempt to access beyond end of device [ 178.817533][ T5809] loop4: rw=2049, sector=172, nr_sectors = 1 limit=64 [ 179.098728][ T5809] Buffer I/O error on dev loop4, logical block 172, lost async page write [ 179.302799][ T5809] Buffer I/O error on dev loop4, logical block 173, lost async page write [ 180.483718][ T5839] netlink: 20 bytes leftover after parsing attributes in process `syz.3.411'. [ 180.629917][ T5847] process 'syz.2.415' launched './file1' with NULL argv: empty string added [ 181.247855][ T5860] dns_resolver: Unsupported server list version (6) [ 181.365268][ T5861] fuse: Bad value for 'fd' [ 182.883580][ T5870] loop3: detected capacity change from 0 to 1024 [ 183.197236][ T5877] device batadv_slave_1 entered promiscuous mode [ 183.604607][ T5864] device batadv_slave_1 left promiscuous mode [ 183.803176][ T11] hfsplus: b-tree write err: -5, ino 25 [ 183.837270][ T11] hfsplus: b-tree write err: -5, ino 4 [ 183.865518][ T11] hfsplus: b-tree write err: -5, ino 2 [ 184.045834][ T11] hfsplus: b-tree write err: -5, ino 26 [ 184.521886][ T5889] loop2: detected capacity change from 0 to 64 [ 184.945893][ T5892] netlink: 20 bytes leftover after parsing attributes in process `syz.4.426'. [ 185.059498][ T5895] loop3: detected capacity change from 0 to 1024 [ 185.189055][ T5898] loop6: detected capacity change from 0 to 512 [ 185.945052][ T5898] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 186.056121][ T5898] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 186.129315][ T4402] hfsplus: b-tree write err: -5, ino 25 [ 186.135037][ T4402] hfsplus: b-tree write err: -5, ino 4 [ 186.209168][ T4402] hfsplus: b-tree write err: -5, ino 2 [ 186.214797][ T4402] hfsplus: b-tree write err: -5, ino 26 [ 186.236260][ T4421] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 186.363948][ T5889] bio_check_eod: 8 callbacks suppressed [ 186.363964][ T5889] syz.2.425: attempt to access beyond end of device [ 186.363964][ T5889] loop2: rw=2049, sector=111, nr_sectors = 48 limit=64 [ 186.430486][ T5390] EXT4-fs (loop6): unmounting filesystem. [ 186.437460][ T4421] usb 5-1: unable to get BOS descriptor or descriptor too short [ 186.448152][ T4421] usb 5-1: not running at top speed; connect to a high speed hub [ 186.489953][ T4421] usb 5-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 186.561846][ T4421] usb 5-1: config 1 interface 0 has no altsetting 0 [ 186.584810][ T4421] usb 5-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 186.612354][ T4421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.647004][ T4421] usb 5-1: Product: syz [ 186.692643][ T4421] usb 5-1: Manufacturer: syz [ 186.725189][ T4421] usb 5-1: SerialNumber: syz [ 186.745676][ T5889] syz.2.425: attempt to access beyond end of device [ 186.745676][ T5889] loop2: rw=2049, sector=159, nr_sectors = 1 limit=64 [ 188.090149][ T5889] buffer_io_error: 6 callbacks suppressed [ 188.090167][ T5889] Buffer I/O error on dev loop2, logical block 159, lost async page write [ 188.108914][ T5889] syz.2.425: attempt to access beyond end of device [ 188.108914][ T5889] loop2: rw=2049, sector=160, nr_sectors = 1 limit=64 [ 188.123073][ T5889] Buffer I/O error on dev loop2, logical block 160, lost async page write [ 188.132269][ T5889] syz.2.425: attempt to access beyond end of device [ 188.132269][ T5889] loop2: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 188.132423][ T4421] usbhid 5-1:1.0: can't add hid device: -71 [ 188.152334][ T5889] Buffer I/O error on dev loop2, logical block 161, lost async page write [ 188.161714][ T4421] usbhid: probe of 5-1:1.0 failed with error -71 [ 188.175399][ T4421] usb 5-1: USB disconnect, device number 3 [ 188.239819][ T5889] syz.2.425: attempt to access beyond end of device [ 188.239819][ T5889] loop2: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 188.316033][ T5889] Buffer I/O error on dev loop2, logical block 162, lost async page write [ 188.350531][ T5889] syz.2.425: attempt to access beyond end of device [ 188.350531][ T5889] loop2: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 188.406296][ T5889] Buffer I/O error on dev loop2, logical block 163, lost async page write [ 188.483491][ T5889] syz.2.425: attempt to access beyond end of device [ 188.483491][ T5889] loop2: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 188.498634][ T5930] loop5: detected capacity change from 0 to 764 [ 188.573385][ T5889] Buffer I/O error on dev loop2, logical block 167, lost async page write [ 188.603486][ T5930] Symlink component flag not implemented [ 188.763652][ T5889] syz.2.425: attempt to access beyond end of device [ 188.763652][ T5889] loop2: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 188.778540][ T5930] Symlink component flag not implemented (116) [ 188.856009][ T5938] device batadv_slave_1 entered promiscuous mode [ 188.953324][ T5939] netlink: 'syz.4.435': attribute type 4 has an invalid length. [ 189.157378][ T5889] Buffer I/O error on dev loop2, logical block 169, lost async page write [ 189.278379][ T5889] syz.2.425: attempt to access beyond end of device [ 189.278379][ T5889] loop2: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 189.536448][ T5932] device batadv_slave_1 left promiscuous mode [ 189.606584][ T5939] netlink: 'syz.4.435': attribute type 17 has an invalid length. [ 189.668648][ T5889] Buffer I/O error on dev loop2, logical block 171, lost async page write [ 189.756171][ T5889] syz.2.425: attempt to access beyond end of device [ 189.756171][ T5889] loop2: rw=2049, sector=172, nr_sectors = 1 limit=64 [ 189.836657][ T5946] loop3: detected capacity change from 0 to 512 [ 189.871450][ T5945] loop6: detected capacity change from 0 to 2048 [ 189.895457][ T5889] Buffer I/O error on dev loop2, logical block 172, lost async page write [ 189.919472][ T5946] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 189.971710][ T5945] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 189.972336][ T5946] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 190.036354][ T5889] Buffer I/O error on dev loop2, logical block 173, lost async page write [ 190.084839][ T5946] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 190.111679][ T26] audit: type=1800 audit(1778045821.457:8): pid=5945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.437" name="file1" dev="loop6" ino=1415 res=0 errno=0 [ 190.187126][ T5946] System zones: 0-2, 18-18, 34-35 [ 190.232861][ T5946] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 190.342711][ T5957] loop5: detected capacity change from 0 to 128 [ 190.480176][ T5957] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 190.524135][ T5957] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 190.644341][ T5963] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:477: comm syz.5.440: Invalid block bitmap block 0 in block_group 0 [ 190.660211][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 190.906830][ T5967] loop2: detected capacity change from 0 to 64 [ 190.981360][ T5969] netlink: 20 bytes leftover after parsing attributes in process `syz.4.441'. [ 191.202573][ T5175] EXT4-fs (loop5): unmounting filesystem. [ 191.670369][ T5974] loop5: detected capacity change from 0 to 1024 [ 191.761708][ T5977] loop4: detected capacity change from 0 to 1024 [ 191.772498][ T5974] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 191.927750][ T5967] bio_check_eod: 8 callbacks suppressed [ 191.927766][ T5967] syz.2.442: attempt to access beyond end of device [ 191.927766][ T5967] loop2: rw=2049, sector=111, nr_sectors = 48 limit=64 [ 191.987603][ T5967] syz.2.442: attempt to access beyond end of device [ 191.987603][ T5967] loop2: rw=2049, sector=159, nr_sectors = 1 limit=64 [ 192.121975][ T5967] syz.2.442: attempt to access beyond end of device [ 192.121975][ T5967] loop2: rw=2049, sector=160, nr_sectors = 1 limit=64 [ 192.135772][ T5967] syz.2.442: attempt to access beyond end of device [ 192.135772][ T5967] loop2: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 192.596148][ T5967] syz.2.442: attempt to access beyond end of device [ 192.596148][ T5967] loop2: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 192.786283][ T5967] syz.2.442: attempt to access beyond end of device [ 192.786283][ T5967] loop2: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 192.806426][ T4697] hfsplus: b-tree write err: -5, ino 25 [ 192.812186][ T4697] hfsplus: b-tree write err: -5, ino 4 [ 192.812626][ T5175] EXT4-fs (loop5): unmounting filesystem. [ 192.891148][ T4697] hfsplus: b-tree write err: -5, ino 2 [ 192.907745][ T5967] syz.2.442: attempt to access beyond end of device [ 192.907745][ T5967] loop2: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 192.926068][ T4697] hfsplus: b-tree write err: -5, ino 26 [ 193.078467][ T5967] syz.2.442: attempt to access beyond end of device [ 193.078467][ T5967] loop2: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 193.302193][ T5997] device batadv_slave_1 entered promiscuous mode [ 193.523878][ T5999] netlink: 20 bytes leftover after parsing attributes in process `syz.5.448'. [ 193.690072][ T5967] buffer_io_error: 12 callbacks suppressed [ 193.690088][ T5967] Buffer I/O error on dev loop2, logical block 169, lost async page write [ 193.726157][ T5967] syz.2.442: attempt to access beyond end of device [ 193.726157][ T5967] loop2: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 193.726870][ T5988] device batadv_slave_1 left promiscuous mode [ 193.750823][ T5967] Buffer I/O error on dev loop2, logical block 171, lost async page write [ 193.858306][ T5967] syz.2.442: attempt to access beyond end of device [ 193.858306][ T5967] loop2: rw=2049, sector=172, nr_sectors = 1 limit=64 [ 193.979469][ T5967] Buffer I/O error on dev loop2, logical block 172, lost async page write [ 193.988184][ T5967] Buffer I/O error on dev loop2, logical block 173, lost async page write [ 193.997148][ T5967] Buffer I/O error on dev loop2, logical block 174, lost async page write [ 194.005725][ T5967] Buffer I/O error on dev loop2, logical block 175, lost async page write [ 194.025870][ T5967] Buffer I/O error on dev loop2, logical block 176, lost async page write [ 194.039868][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.048130][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.212614][ T5967] Buffer I/O error on dev loop2, logical block 177, lost async page write [ 194.223449][ T6009] loop5: detected capacity change from 0 to 64 [ 194.254355][ T5967] Buffer I/O error on dev loop2, logical block 179, lost async page write [ 194.331636][ T6010] md: superblock version -352309147 not known [ 194.339092][ T5967] Buffer I/O error on dev loop2, logical block 180, lost async page write [ 194.359673][ T6010] md: couldn't set array info. -22 [ 194.385874][ T6010] md: md2 stopped. [ 195.040651][ T6022] netlink: 20 bytes leftover after parsing attributes in process `syz.6.456'. [ 195.794111][ T6002] loop3: detected capacity change from 0 to 32768 [ 198.480145][ T6038] loop5: detected capacity change from 0 to 1024 [ 199.112301][ T6046] netlink: 20 bytes leftover after parsing attributes in process `syz.3.463'. [ 199.220567][ T6044] device batadv_slave_1 entered promiscuous mode [ 199.308803][ T6038] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 199.320611][ T6039] device batadv_slave_1 left promiscuous mode [ 199.695546][ T6052] loop3: detected capacity change from 0 to 64 [ 199.760648][ T5175] EXT4-fs (loop5): unmounting filesystem. [ 200.229033][ T6063] netlink: 20 bytes leftover after parsing attributes in process `syz.5.467'. [ 200.820060][ T6052] bio_check_eod: 26 callbacks suppressed [ 200.820079][ T6052] syz.3.465: attempt to access beyond end of device [ 200.820079][ T6052] loop3: rw=2049, sector=111, nr_sectors = 48 limit=64 [ 200.926186][ T6052] syz.3.465: attempt to access beyond end of device [ 200.926186][ T6052] loop3: rw=2049, sector=159, nr_sectors = 1 limit=64 [ 200.939691][ T6052] buffer_io_error: 16 callbacks suppressed [ 200.939705][ T6052] Buffer I/O error on dev loop3, logical block 159, lost async page write [ 200.994374][ T6052] syz.3.465: attempt to access beyond end of device [ 200.994374][ T6052] loop3: rw=2049, sector=160, nr_sectors = 1 limit=64 [ 201.019203][ T6068] netlink: 'syz.4.468': attribute type 4 has an invalid length. [ 201.958618][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 201.961010][ T4283] Bluetooth: hci1: command 0x0406 tx timeout [ 201.964661][ T4282] Bluetooth: hci4: command 0x0406 tx timeout [ 202.006137][ T6068] netlink: 'syz.4.468': attribute type 17 has an invalid length. [ 202.015995][ T6052] Buffer I/O error on dev loop3, logical block 160, lost async page write [ 202.024576][ T6052] syz.3.465: attempt to access beyond end of device [ 202.024576][ T6052] loop3: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 202.039168][ T6072] loop6: detected capacity change from 0 to 64 [ 202.136136][ T6052] Buffer I/O error on dev loop3, logical block 161, lost async page write [ 202.144825][ T6052] syz.3.465: attempt to access beyond end of device [ 202.144825][ T6052] loop3: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 202.225424][ T6052] Buffer I/O error on dev loop3, logical block 162, lost async page write [ 202.271474][ T6052] syz.3.465: attempt to access beyond end of device [ 202.271474][ T6052] loop3: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 202.334614][ T6052] Buffer I/O error on dev loop3, logical block 163, lost async page write [ 202.413392][ T6052] syz.3.465: attempt to access beyond end of device [ 202.413392][ T6052] loop3: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 202.414013][ T6072] syz.6.470: attempt to access beyond end of device [ 202.414013][ T6072] loop6: rw=2049, sector=111, nr_sectors = 48 limit=64 [ 202.486275][ T6052] Buffer I/O error on dev loop3, logical block 167, lost async page write [ 202.516224][ T6072] syz.6.470: attempt to access beyond end of device [ 202.516224][ T6072] loop6: rw=2049, sector=159, nr_sectors = 1 limit=64 [ 202.529666][ T6052] syz.3.465: attempt to access beyond end of device [ 202.529666][ T6052] loop3: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 202.558771][ T6072] Buffer I/O error on dev loop6, logical block 159, lost async page write [ 202.582206][ T6052] Buffer I/O error on dev loop3, logical block 169, lost async page write [ 202.596076][ T6072] Buffer I/O error on dev loop6, logical block 160, lost async page write [ 202.614885][ T6052] Buffer I/O error on dev loop3, logical block 171, lost async page write [ 203.099473][ T6091] netlink: 36 bytes leftover after parsing attributes in process `syz.3.475'. [ 203.385169][ T6099] netlink: 20 bytes leftover after parsing attributes in process `syz.4.476'. [ 204.840254][ T6112] netlink: 20 bytes leftover after parsing attributes in process `syz.6.479'. [ 206.891502][ T6125] loop6: detected capacity change from 0 to 2048 [ 207.021433][ T6125] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 207.127596][ T6130] loop2: detected capacity change from 0 to 64 [ 207.508695][ T5390] EXT4-fs (loop6): unmounting filesystem. [ 207.735279][ T6136] netlink: 20 bytes leftover after parsing attributes in process `syz.6.485'. [ 207.765644][ T6136] netlink: 20 bytes leftover after parsing attributes in process `syz.6.485'. [ 207.957706][ T6141] loop6: detected capacity change from 0 to 64 [ 208.041134][ T6130] bio_check_eod: 26 callbacks suppressed [ 208.041153][ T6130] syz.2.484: attempt to access beyond end of device [ 208.041153][ T6130] loop2: rw=2049, sector=111, nr_sectors = 48 limit=64 [ 208.178271][ T6130] syz.2.484: attempt to access beyond end of device [ 208.178271][ T6130] loop2: rw=2049, sector=159, nr_sectors = 1 limit=64 [ 208.225817][ T6118] loop5: detected capacity change from 0 to 32768 [ 208.288585][ T6130] buffer_io_error: 22 callbacks suppressed [ 208.288600][ T6130] Buffer I/O error on dev loop2, logical block 159, lost async page write [ 208.319103][ T6130] syz.2.484: attempt to access beyond end of device [ 208.319103][ T6130] loop2: rw=2049, sector=160, nr_sectors = 1 limit=64 [ 208.448848][ T6118] XFS (loop5): Mounting V5 Filesystem [ 208.492475][ T6130] Buffer I/O error on dev loop2, logical block 160, lost async page write [ 208.501190][ T6130] syz.2.484: attempt to access beyond end of device [ 208.501190][ T6130] loop2: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 208.540466][ T6130] Buffer I/O error on dev loop2, logical block 161, lost async page write [ 208.565617][ T6152] netlink: 20 bytes leftover after parsing attributes in process `syz.4.487'. [ 208.609003][ T6118] XFS (loop5): Ending clean mount [ 208.628018][ T6130] syz.2.484: attempt to access beyond end of device [ 208.628018][ T6130] loop2: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 208.641945][ T6130] Buffer I/O error on dev loop2, logical block 162, lost async page write [ 208.650935][ T6130] syz.2.484: attempt to access beyond end of device [ 208.650935][ T6130] loop2: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 208.664380][ T6130] Buffer I/O error on dev loop2, logical block 163, lost async page write [ 208.673082][ T6130] syz.2.484: attempt to access beyond end of device [ 208.673082][ T6130] loop2: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 208.686633][ T6130] Buffer I/O error on dev loop2, logical block 167, lost async page write [ 208.695278][ T6130] syz.2.484: attempt to access beyond end of device [ 208.695278][ T6130] loop2: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 208.708822][ T6130] Buffer I/O error on dev loop2, logical block 169, lost async page write [ 208.717523][ T6130] syz.2.484: attempt to access beyond end of device [ 208.717523][ T6130] loop2: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 208.731670][ T6130] Buffer I/O error on dev loop2, logical block 171, lost async page write [ 208.741757][ T6130] syz.2.484: attempt to access beyond end of device [ 208.741757][ T6130] loop2: rw=2049, sector=172, nr_sectors = 1 limit=64 [ 208.759986][ T6130] Buffer I/O error on dev loop2, logical block 172, lost async page write [ 208.775889][ T6130] Buffer I/O error on dev loop2, logical block 173, lost async page write [ 208.975785][ T5175] XFS (loop5): Unmounting Filesystem [ 211.216947][ T6177] netlink: 20 bytes leftover after parsing attributes in process `syz.6.490'. [ 213.059489][ T6195] loop3: detected capacity change from 0 to 64 [ 213.289018][ T6199] loop4: detected capacity change from 0 to 64 [ 213.547755][ T6205] netlink: 20 bytes leftover after parsing attributes in process `syz.5.501'. [ 213.925617][ T6195] bio_check_eod: 26 callbacks suppressed [ 213.925634][ T6195] syz.3.498: attempt to access beyond end of device [ 213.925634][ T6195] loop3: rw=2049, sector=111, nr_sectors = 48 limit=64 [ 214.009807][ T6195] syz.3.498: attempt to access beyond end of device [ 214.009807][ T6195] loop3: rw=2049, sector=159, nr_sectors = 1 limit=64 [ 214.026012][ T6195] buffer_io_error: 22 callbacks suppressed [ 214.026026][ T6195] Buffer I/O error on dev loop3, logical block 159, lost async page write [ 214.062064][ T6195] syz.3.498: attempt to access beyond end of device [ 214.062064][ T6195] loop3: rw=2049, sector=160, nr_sectors = 1 limit=64 [ 214.088253][ T6194] loop6: detected capacity change from 0 to 32768 [ 214.110925][ T6195] Buffer I/O error on dev loop3, logical block 160, lost async page write [ 214.150405][ T6195] syz.3.498: attempt to access beyond end of device [ 214.150405][ T6195] loop3: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 214.202034][ T6195] Buffer I/O error on dev loop3, logical block 161, lost async page write [ 214.251907][ T6195] syz.3.498: attempt to access beyond end of device [ 214.251907][ T6195] loop3: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 214.276083][ T6199] syz.4.500: attempt to access beyond end of device [ 214.276083][ T6199] loop4: rw=2049, sector=111, nr_sectors = 48 limit=64 [ 214.301732][ T6195] Buffer I/O error on dev loop3, logical block 162, lost async page write [ 214.310669][ T6195] syz.3.498: attempt to access beyond end of device [ 214.310669][ T6195] loop3: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 214.329972][ T6199] syz.4.500: attempt to access beyond end of device [ 214.329972][ T6199] loop4: rw=2049, sector=159, nr_sectors = 1 limit=64 [ 214.343847][ T6199] Buffer I/O error on dev loop4, logical block 159, lost async page write [ 214.347028][ T6195] Buffer I/O error on dev loop3, logical block 163, lost async page write [ 214.365491][ T6199] syz.4.500: attempt to access beyond end of device [ 214.365491][ T6199] loop4: rw=2049, sector=160, nr_sectors = 1 limit=64 [ 214.388651][ T6194] XFS (loop6): Mounting V5 Filesystem [ 214.399598][ T6195] syz.3.498: attempt to access beyond end of device [ 214.399598][ T6195] loop3: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 214.426978][ T6195] Buffer I/O error on dev loop3, logical block 167, lost async page write [ 214.435662][ T6199] Buffer I/O error on dev loop4, logical block 160, lost async page write [ 214.463216][ T6195] Buffer I/O error on dev loop3, logical block 169, lost async page write [ 214.486409][ T6199] Buffer I/O error on dev loop4, logical block 161, lost async page write [ 214.550570][ T6194] XFS (loop6): Ending clean mount [ 214.638183][ T6196] loop2: detected capacity change from 0 to 40427 [ 214.683530][ T6196] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 214.696207][ T4421] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 214.721710][ T6196] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 214.724230][ T5390] XFS (loop6): Unmounting Filesystem [ 214.788507][ T6196] F2FS-fs (loop2): invalid crc value [ 214.793903][ T6196] F2FS-fs (loop2): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 214.847463][ T6196] F2FS-fs (loop2): Found nat_bits in checkpoint [ 214.908330][ T4421] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 214.954398][ T4421] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.028808][ T4421] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.190077][ T4421] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 215.470099][ T4421] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 215.470195][ T6196] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 215.493816][ T4421] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 215.660984][ T4421] usb 6-1: Manufacturer: syz [ 215.859715][ T6196] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 215.882393][ T4421] usb 6-1: config 0 descriptor?? [ 216.338418][ T6236] netlink: 20 bytes leftover after parsing attributes in process `syz.4.505'. [ 217.263719][ T4421] appleir 0003:05AC:8243.0001: item fetching failed at offset 0/1 [ 217.296161][ T4421] appleir 0003:05AC:8243.0001: parse failed [ 217.302314][ T4421] appleir: probe of 0003:05AC:8243.0001 failed with error -22 [ 217.409266][ T6247] loop3: detected capacity change from 0 to 128 [ 217.471455][ T6247] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 217.513180][ T4421] usb 6-1: USB disconnect, device number 3 [ 217.578339][ T6247] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 217.627987][ T6247] ext2 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.048749][ T6260] netlink: 20 bytes leftover after parsing attributes in process `syz.2.512'. [ 218.750765][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 219.335655][ T6271] loop5: detected capacity change from 0 to 1024 [ 219.722780][ T6275] netlink: 20 bytes leftover after parsing attributes in process `syz.3.516'. [ 220.360488][ T5107] hfsplus: b-tree write err: -5, ino 25 [ 220.376809][ T5107] hfsplus: b-tree write err: -5, ino 4 [ 220.398389][ T5107] hfsplus: b-tree write err: -5, ino 2 [ 220.415584][ T5107] hfsplus: b-tree write err: -5, ino 26 [ 221.963088][ T6289] loop3: detected capacity change from 0 to 256 [ 222.211108][ T6297] loop6: detected capacity change from 0 to 2048 [ 222.240120][ T6299] mmap: syz.5.525 (6299): VmData 37457920 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. [ 222.351202][ T6293] loop4: detected capacity change from 0 to 1764 [ 224.778600][ T6305] netlink: 24 bytes leftover after parsing attributes in process `syz.3.527'. [ 224.877653][ T6297] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840c018, mo2=0002] [ 224.896303][ T6297] System zones: 0-4 [ 224.908536][ T6297] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 225.016733][ T6297] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.114089][ T6319] netlink: 'syz.2.528': attribute type 4 has an invalid length. [ 225.186134][ T6319] netlink: 'syz.2.528': attribute type 17 has an invalid length. [ 225.228360][ T6324] netlink: 'syz.5.529': attribute type 4 has an invalid length. [ 225.329438][ T6324] netlink: 'syz.5.529': attribute type 17 has an invalid length. [ 225.374655][ T6324] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 225.682433][ T6329] loop2: detected capacity change from 0 to 1024 [ 225.773652][ T6329] hfsplus: bad catalog entry used to create inode [ 225.804456][ T6329] hfsplus: failed to load root directory [ 226.528920][ T6337] input: syz1 as /devices/virtual/input/input6 [ 227.352987][ T5390] EXT4-fs (loop6): unmounting filesystem. [ 228.450865][ T6352] loop5: detected capacity change from 0 to 128 [ 228.663665][ T6352] bio_check_eod: 26 callbacks suppressed [ 228.663682][ T6352] syz.5.538: attempt to access beyond end of device [ 228.663682][ T6352] loop5: rw=2051, sector=128, nr_sectors = 913 limit=128 [ 228.683844][ T6360] loop2: detected capacity change from 0 to 1024 [ 228.741521][ T6362] netlink: 20 bytes leftover after parsing attributes in process `syz.3.530'. [ 229.071285][ T6360] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 229.459589][ T6367] loop4: detected capacity change from 0 to 8 [ 229.515702][ T6367] SQUASHFS error: zlib decompression failed, data probably corrupt [ 229.546487][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 229.563409][ T6367] SQUASHFS error: Failed to read block 0x9b: -5 [ 229.586068][ T6367] SQUASHFS error: Unable to read metadata cache entry [99] [ 229.595528][ T6372] netlink: 'syz.3.542': attribute type 4 has an invalid length. [ 229.677106][ T6367] SQUASHFS error: Unable to read inode 0x127 [ 229.689399][ T6374] loop6: detected capacity change from 0 to 1024 [ 229.743237][ T6372] netlink: 'syz.3.542': attribute type 17 has an invalid length. [ 231.670733][ T6384] hfsplus: xattr search failed [ 231.927243][ T6387] No such timeout policy "syz1" [ 231.986643][ T6102] hfsplus: b-tree write err: -5, ino 25 [ 231.992505][ T6102] hfsplus: b-tree write err: -5, ino 4 [ 232.060359][ T6102] hfsplus: b-tree write err: -5, ino 2 [ 232.080616][ T6102] hfsplus: b-tree write err: -5, ino 26 [ 233.405312][ T6397] loop6: detected capacity change from 0 to 2048 [ 233.586475][ T6397] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840c018, mo2=0002] [ 233.603182][ T6397] System zones: 0-4 [ 233.624280][ T6397] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 233.696092][ T6397] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.889371][ T6414] loop3: detected capacity change from 0 to 1024 [ 234.626101][ T6414] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 235.029577][ T6425] loop5: detected capacity change from 0 to 1024 [ 235.080935][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 235.617770][ T6425] sched: RT throttling activated [ 236.061086][ T4402] hfsplus: b-tree write err: -5, ino 25 [ 236.089970][ T4402] hfsplus: b-tree write err: -5, ino 4 [ 236.095598][ T4402] hfsplus: b-tree write err: -5, ino 2 [ 236.117534][ T5390] EXT4-fs (loop6): unmounting filesystem. [ 236.136812][ T4402] hfsplus: b-tree write err: -5, ino 26 [ 236.376281][ T6447] netlink: 'syz.6.559': attribute type 4 has an invalid length. [ 236.445940][ T6447] netlink: 'syz.6.559': attribute type 17 has an invalid length. [ 236.875456][ T6449] loop3: detected capacity change from 0 to 1024 [ 237.915670][ T6461] netlink: 12 bytes leftover after parsing attributes in process `syz.6.566'. [ 239.223085][ T6468] loop3: detected capacity change from 0 to 1024 [ 240.206974][ T46] hfsplus: b-tree write err: -5, ino 25 [ 240.212739][ T46] hfsplus: b-tree write err: -5, ino 4 [ 240.258945][ T46] hfsplus: b-tree write err: -5, ino 2 [ 240.294109][ T46] hfsplus: b-tree write err: -5, ino 26 [ 242.048896][ T6498] netlink: 'syz.4.577': attribute type 4 has an invalid length. [ 242.071949][ T6497] loop6: detected capacity change from 0 to 2048 [ 242.116424][ T6497] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 242.191341][ T6498] netlink: 'syz.4.577': attribute type 17 has an invalid length. [ 243.878602][ T6506] loop6: detected capacity change from 0 to 128 [ 244.084341][ T6506] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 244.093500][ T6506] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.310838][ T4282] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 244.320536][ T4282] Bluetooth: hci0: Injecting HCI hardware error event [ 244.330721][ T48] Bluetooth: hci0: hardware error 0x00 [ 244.927524][ T6503] EXT4-fs warning (device loop6): ext4_group_add:1743: No reserved GDT blocks, can't resize [ 244.960528][ T6504] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 245.174818][ T5390] EXT4-fs (loop6): unmounting filesystem. [ 245.244730][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 245.256855][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 245.266118][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.273569][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 245.380897][ T6516] loop5: detected capacity change from 0 to 2048 [ 245.504484][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.583'. [ 245.521819][ T6516] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840c018, mo2=0002] [ 245.558914][ T6516] System zones: 0-4 [ 245.574057][ T6516] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 245.705188][ T6516] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.734090][ T6527] netlink: 'syz.4.582': attribute type 4 has an invalid length. [ 245.853583][ T6528] netlink: 'syz.4.582': attribute type 17 has an invalid length. [ 247.195209][ T6550] netlink: 20 bytes leftover after parsing attributes in process `syz.2.588'. [ 247.787750][ T48] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 248.408058][ T6553] loop4: detected capacity change from 0 to 128 [ 249.002390][ T6553] EXT4-fs (loop4): Test dummy encryption mode enabled [ 249.205967][ T6553] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 249.236499][ T6553] ext4 filesystem being mounted at /133/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 249.579031][ T5175] EXT4-fs (loop5): unmounting filesystem. [ 250.096160][ T4355] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 250.286303][ T4355] usb 4-1: Using ep0 maxpacket: 32 [ 250.293760][ T4355] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.361837][ T4355] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 0.00 [ 250.388137][ T4355] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.434868][ T6590] loop6: detected capacity change from 0 to 8 [ 250.446652][ T4355] usb 4-1: config 0 descriptor?? [ 250.452587][ T6591] netlink: 'syz.5.597': attribute type 4 has an invalid length. [ 250.477506][ T4355] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 250.517061][ T6591] netlink: 'syz.5.597': attribute type 17 has an invalid length. [ 250.532086][ T4355] usb 4-1: Detected SIO [ 250.538035][ T6590] unable to read fragment index table [ 250.573480][ T4355] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 251.401748][ T6553] fscrypt (loop4): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 252.335929][ T6603] xt_time: unknown flags 0xc [ 252.536683][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 252.892970][ T6621] loop6: detected capacity change from 0 to 128 [ 252.977682][ T6624] netlink: 20 bytes leftover after parsing attributes in process `syz.5.599'. [ 254.564023][ T6628] loop4: detected capacity change from 0 to 2048 [ 254.703870][ T6628] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840c018, mo2=0002] [ 254.763915][ T6628] System zones: 0-4 [ 254.776089][ T4421] usb 4-1: USB disconnect, device number 2 [ 254.852786][ T4421] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 254.863059][ T6628] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 254.916438][ T6628] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.936682][ T4421] ftdi_sio 4-1:0.0: device disconnected [ 255.266962][ T6655] netlink: 'syz.2.609': attribute type 4 has an invalid length. [ 255.345355][ T6655] netlink: 'syz.2.609': attribute type 17 has an invalid length. [ 255.479280][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.485668][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.137213][ T6666] loop6: detected capacity change from 0 to 4096 [ 257.145517][ T6666] EXT4-fs (loop6): Test dummy encryption mode enabled [ 257.178411][ T6666] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 257.274319][ T6670] loop2: detected capacity change from 0 to 2048 [ 257.309547][ T6670] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 258.008224][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 258.279349][ T6666] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 258.308543][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 258.466255][ T5390] EXT4-fs (loop6): unmounting filesystem. [ 261.730999][ T6735] device batadv_slave_1 entered promiscuous mode [ 261.850790][ T6724] device batadv_slave_1 left promiscuous mode [ 262.054946][ T6732] loop2: detected capacity change from 0 to 2048 [ 262.575382][ T6732] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840c018, mo2=0002] [ 262.632937][ T6732] System zones: 0-4 [ 262.730402][ T6732] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 264.251544][ T6732] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.375875][ T6754] netlink: 'syz.3.633': attribute type 4 has an invalid length. [ 264.476448][ T6754] netlink: 'syz.3.633': attribute type 17 has an invalid length. [ 267.613731][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 268.600913][ T6783] device batadv_slave_1 entered promiscuous mode [ 268.820085][ T6777] device batadv_slave_1 left promiscuous mode [ 273.792354][ T6815] loop6: detected capacity change from 0 to 8192 [ 273.947579][ T6818] loop4: detected capacity change from 0 to 8 [ 280.842739][ T6861] loop3: detected capacity change from 0 to 1024 [ 281.098211][ T6865] netlink: 'syz.3.661': attribute type 5 has an invalid length. [ 281.568100][ T4278] hfsplus: bad catalog entry type [ 281.667929][ T6864] hfsplus: request for non-existent node 1280 in B*Tree [ 281.675359][ T6864] hfsplus: request for non-existent node 1280 in B*Tree [ 282.202428][ T4697] hfsplus: b-tree write err: -5, ino 8 [ 283.084425][ T6881] loop4: detected capacity change from 0 to 512 [ 283.106304][ T6768] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.207699][ T6881] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.667: invalid block [ 283.234883][ T6881] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.667: invalid indirect mapped block 16394 (level 1) [ 283.335602][ T6881] EXT4-fs (loop4): 1 truncate cleaned up [ 283.385198][ T6881] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 283.435821][ T6768] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.458397][ T6881] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.667: bg 0: block 488: padding at end of block bitmap is not set [ 283.601810][ T6768] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.602684][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 285.434567][ T6768] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.802758][ T6917] loop5: detected capacity change from 0 to 1024 [ 287.195269][ T4272] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 287.226129][ T4272] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 287.234896][ T4272] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 287.246128][ T4272] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 287.985124][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 287.992574][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 288.009200][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 288.016554][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 288.024821][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 288.033148][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 288.068639][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 288.080283][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 288.088875][ T4697] hfsplus: found bad thread record in catalog [ 290.119787][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 290.147626][ T6942] loop5: detected capacity change from 0 to 256 [ 290.192515][ T6942] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 290.204235][ T6942] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 290.486685][ T6942] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 290.514831][ T6944] loop4: detected capacity change from 0 to 1024 [ 291.643042][ T4703] hfsplus: bad catalog file entry [ 291.673924][ T4703] hfsplus: b-tree write err: -5, ino 3 [ 291.871558][ T6923] chnl_net:caif_netlink_parms(): no params data found [ 292.142395][ T6968] loop2: detected capacity change from 0 to 1024 [ 292.286047][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 292.316728][ T6968] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 292.316728][ T6968] [ 292.458372][ T6768] device hsr_slave_0 left promiscuous mode [ 292.469667][ T6768] device hsr_slave_1 left promiscuous mode [ 292.480212][ T6768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.488113][ T6768] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.056314][ T6768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.064111][ T6768] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.093640][ T6768] device bridge_slave_1 left promiscuous mode [ 293.100034][ T6768] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.384921][ T6768] device bridge_slave_0 left promiscuous mode [ 293.680398][ T6768] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.936094][ T6768] device veth1_macvtap left promiscuous mode [ 293.972487][ T6768] device veth0_macvtap left promiscuous mode [ 293.991886][ T6768] device veth1_vlan left promiscuous mode [ 294.019852][ T6768] device veth0_vlan left promiscuous mode [ 294.177209][ T6994] loop2: detected capacity change from 0 to 1024 [ 294.376040][ T4282] Bluetooth: hci2: command 0x040f tx timeout [ 295.344799][ T4504] hfsplus: b-tree write err: -5, ino 25 [ 295.366339][ T4504] hfsplus: b-tree write err: -5, ino 4 [ 295.392346][ T4504] hfsplus: b-tree write err: -5, ino 2 [ 295.426177][ T4504] hfsplus: b-tree write err: -5, ino 26 [ 295.655610][ T7014] loop2: detected capacity change from 0 to 1024 [ 295.712013][ T7014] EXT4-fs: Ignoring removed orlov option [ 295.817828][ T7007] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[7008] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7007] [ 296.145822][ T7014] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 296.201263][ T7014] loop2: detected capacity change from 1024 to 64 [ 296.234166][ T4374] udevd: attempt to access beyond end of device [ 296.234166][ T4374] loop2: rw=0, sector=132, nr_sectors = 2 limit=64 [ 296.293210][ T4374] buffer_io_error: 22 callbacks suppressed [ 296.293224][ T4374] Buffer I/O error on dev loop2, logical block 66, async page read [ 296.326250][ T4374] udevd: attempt to access beyond end of device [ 296.326250][ T4374] loop2: rw=0, sector=134, nr_sectors = 2 limit=64 [ 296.384808][ T4374] Buffer I/O error on dev loop2, logical block 67, async page read [ 296.446190][ T4282] Bluetooth: hci2: command 0x0419 tx timeout [ 296.551861][ T4285] EXT4-fs warning (device loop2): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 296.596931][ T4285] EXT4-fs warning (device loop2): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 296.611456][ T4285] EXT4-fs warning (device loop2): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 296.631555][ T4285] EXT4-fs warning (device loop2): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 296.645610][ T4285] EXT4-fs warning (device loop2): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 296.659590][ T4285] EXT4-fs warning (device loop2): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 296.673618][ T4285] EXT4-fs warning (device loop2): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 296.837435][ T4285] EXT4-fs warning (device loop2): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 297.399552][ T4285] EXT4-fs warning (device loop2): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 297.413438][ T4285] EXT4-fs warning (device loop2): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 299.826312][ T6768] team0 (unregistering): Port device team_slave_1 removed [ 299.948003][ T6768] team0 (unregistering): Port device team_slave_0 removed [ 300.007707][ T6768] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.058158][ T6768] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.687591][ T6768] bond0 (unregistering): Released all slaves [ 300.897040][ T6984] netlink: 'syz.4.691': attribute type 4 has an invalid length. [ 300.917537][ T6979] netlink: 'syz.4.691': attribute type 17 has an invalid length. [ 301.196032][ T7016] kmmpd-loop2: attempt to access beyond end of device [ 301.196032][ T7016] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 301.314645][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 301.348235][ T7016] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 301.357079][ T7016] EXT4-fs error (device loop2): kmmpd:186: comm kmmpd-loop2: Error writing to MMP block [ 301.393393][ T7016] kmmpd-loop2: attempt to access beyond end of device [ 301.393393][ T7016] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 301.444623][ T7016] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 301.451543][ T6923] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.839673][ T4285] ------------[ cut here ]------------ [ 302.845175][ T4285] ODEBUG: free active (active state 0) object type: timer_list hint: print_daily_error_info+0x0/0x480 [ 302.856800][ T4285] WARNING: CPU: 0 PID: 4285 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x43c/0x530 [ 302.866906][ T4285] Modules linked in: [ 302.870860][ T4285] CPU: 0 PID: 4285 Comm: syz-executor Not tainted syzkaller #0 [ 302.878504][ T4285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 302.888621][ T4285] RIP: 0010:debug_check_no_obj_freed+0x43c/0x530 [ 302.895144][ T4285] Code: ef e8 98 af bd fd 4c 8b 45 00 48 c7 c7 80 1c df 8a 48 c7 c6 40 19 df 8a 48 c7 c2 e0 1d df 8a 8b 0c 24 4d 89 e9 e8 14 13 38 fd <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 95 56 0a [ 302.914927][ T4285] RSP: 0018:ffffc900046c7a68 EFLAGS: 00010246 [ 302.921081][ T4285] RAX: dfcce0b0715b8f00 RBX: ffffffff96f0c360 RCX: ffff88805ba40000 [ 302.929142][ T4285] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 302.937425][ T4285] RBP: ffffffff8a8deea0 R08: ffffc900046c7767 R09: 1ffff920008d8eec [ 302.945454][ T4285] R10: dffffc0000000000 R11: fffff520008d8eed R12: ffff88807383f000 [ 302.953502][ T4285] R13: ffffffff823584e0 R14: ffff88807383e000 R15: ffff88807383e728 [ 302.961514][ T4285] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 302.970477][ T4285] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 302.977082][ T4285] CR2: 000000110c437f56 CR3: 000000000c88e000 CR4: 00000000003506f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 302.985084][ T4285] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 302.993088][ T4285] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 303.001224][ T4285] Call Trace: [ 303.004519][ T4285] [ 303.007531][ T4285] slab_free_freelist_hook+0xd2/0x1a0 [ 303.012955][ T4285] ? generic_shutdown_super+0x130/0x340 [ 303.018532][ T4285] __kmem_cache_free+0xb6/0x1f0 [ 303.023404][ T4285] ? ext4_drop_inode+0x2b0/0x2b0 [ 303.028396][ T4285] generic_shutdown_super+0x130/0x340 [ 303.034023][ T4285] kill_block_super+0x7c/0xe0 [ 303.038881][ T4285] deactivate_locked_super+0x93/0xf0 [ 303.044199][ T4285] cleanup_mnt+0x42c/0x4b0 [ 303.048691][ T4285] ? lockdep_hardirqs_on+0x94/0x140 [ 303.053906][ T4285] task_work_run+0x1d0/0x260 [ 303.058576][ T4285] ? task_work_cancel+0x220/0x220 [ 303.063632][ T4285] ? do_exit+0x97d/0x2480 [ 303.068020][ T4285] ? kmem_cache_free+0xf7/0x290 [ 303.072918][ T4285] do_exit+0x982/0x2480 [ 303.077184][ T4285] ? put_task_struct+0x80/0x80 [ 303.082010][ T4285] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 303.088100][ T4285] ? lock_chain_count+0x20/0x20 [ 303.093014][ T4285] ? _raw_spin_lock_irq+0xb7/0xf0 [ 303.098156][ T4285] ? _raw_spin_lock_irqsave+0x100/0x100 [ 303.103761][ T4285] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 303.109933][ T4285] ? _raw_spin_unlock_irq+0x1f/0x40 [ 303.115188][ T4285] ? lockdep_hardirqs_on+0x94/0x140 [ 303.120471][ T4285] do_group_exit+0x217/0x2d0 [ 303.125078][ T4285] __x64_sys_exit_group+0x3b/0x40 [ 303.130150][ T4285] do_syscall_64+0x4c/0xa0 [ 303.134580][ T4285] ? clear_bhb_loop+0x60/0xb0 [ 303.139290][ T4285] ? clear_bhb_loop+0x60/0xb0 [ 303.143982][ T4285] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 303.149924][ T4285] RIP: 0033:0x7f880a59cdd9 [ 303.154365][ T4285] Code: Unable to access opcode bytes at 0x7f880a59cdaf. [ 303.161427][ T4285] RSP: 002b:00007ffe474eea68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 303.169978][ T4285] RAX: ffffffffffffffda RBX: 00007f880a6321a4 RCX: 00007f880a59cdd9 [ 303.177978][ T4285] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 303.185999][ T4285] RBP: 0000000000000027 R08: 0000000000000000 R09: 00007f880a632120 [ 303.193993][ T4285] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe474efd20 [ 303.202003][ T4285] R13: 00007f880a632120 R14: 00005555819b44e8 R15: 00007ffe474f1ee0 [ 303.210053][ T4285] [ 303.213075][ T4285] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 303.220348][ T4285] CPU: 0 PID: 4285 Comm: syz-executor Not tainted syzkaller #0 [ 303.227907][ T4285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 303.237972][ T4285] Call Trace: [ 303.241251][ T4285] [ 303.244190][ T4285] dump_stack_lvl+0x188/0x24e [ 303.248877][ T4285] ? memcpy+0x3c/0x60 [ 303.252856][ T4285] ? show_regs_print_info+0x12/0x12 [ 303.258073][ T4285] ? load_image+0x400/0x400 [ 303.262611][ T4285] panic+0x2e5/0x730 [ 303.266534][ T4285] ? bpf_jit_dump+0xd0/0xd0 [ 303.271056][ T4285] __warn+0x2f8/0x4f0 [ 303.275041][ T4285] ? debug_check_no_obj_freed+0x43c/0x530 [ 303.280793][ T4285] ? debug_check_no_obj_freed+0x43c/0x530 [ 303.286521][ T4285] report_bug+0x2ba/0x4f0 [ 303.290861][ T4285] ? debug_check_no_obj_freed+0x43c/0x530 [ 303.296784][ T4285] handle_bug+0x3a/0x70 [ 303.300953][ T4285] exc_invalid_op+0x16/0x40 [ 303.305480][ T4285] asm_exc_invalid_op+0x16/0x20 [ 303.310344][ T4285] RIP: 0010:debug_check_no_obj_freed+0x43c/0x530 [ 303.316693][ T4285] Code: ef e8 98 af bd fd 4c 8b 45 00 48 c7 c7 80 1c df 8a 48 c7 c6 40 19 df 8a 48 c7 c2 e0 1d df 8a 8b 0c 24 4d 89 e9 e8 14 13 38 fd <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 95 56 0a [ 303.336308][ T4285] RSP: 0018:ffffc900046c7a68 EFLAGS: 00010246 [ 303.342413][ T4285] RAX: dfcce0b0715b8f00 RBX: ffffffff96f0c360 RCX: ffff88805ba40000 [ 303.350504][ T4285] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 303.358501][ T4285] RBP: ffffffff8a8deea0 R08: ffffc900046c7767 R09: 1ffff920008d8eec [ 303.366513][ T4285] R10: dffffc0000000000 R11: fffff520008d8eed R12: ffff88807383f000 [ 303.374605][ T4285] R13: ffffffff823584e0 R14: ffff88807383e000 R15: ffff88807383e728 [ 303.382619][ T4285] ? ext4_group_desc_init+0x2160/0x2160 [ 303.388208][ T4285] ? debug_check_no_obj_freed+0x43c/0x530 [ 303.393939][ T4285] slab_free_freelist_hook+0xd2/0x1a0 [ 303.399324][ T4285] ? generic_shutdown_super+0x130/0x340 [ 303.404893][ T4285] __kmem_cache_free+0xb6/0x1f0 [ 303.409747][ T4285] ? ext4_drop_inode+0x2b0/0x2b0 [ 303.414684][ T4285] generic_shutdown_super+0x130/0x340 [ 303.420081][ T4285] kill_block_super+0x7c/0xe0 [ 303.424774][ T4285] deactivate_locked_super+0x93/0xf0 [ 303.430064][ T4285] cleanup_mnt+0x42c/0x4b0 [ 303.434481][ T4285] ? lockdep_hardirqs_on+0x94/0x140 [ 303.439696][ T4285] task_work_run+0x1d0/0x260 [ 303.444299][ T4285] ? task_work_cancel+0x220/0x220 [ 303.449354][ T4285] ? do_exit+0x97d/0x2480 [ 303.453689][ T4285] ? kmem_cache_free+0xf7/0x290 [ 303.458543][ T4285] do_exit+0x982/0x2480 [ 303.462715][ T4285] ? put_task_struct+0x80/0x80 [ 303.467489][ T4285] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 303.473481][ T4285] ? lock_chain_count+0x20/0x20 [ 303.478339][ T4285] ? _raw_spin_lock_irq+0xb7/0xf0 [ 303.483369][ T4285] ? _raw_spin_lock_irqsave+0x100/0x100 [ 303.488918][ T4285] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 303.494922][ T4285] ? _raw_spin_unlock_irq+0x1f/0x40 [ 303.500130][ T4285] ? lockdep_hardirqs_on+0x94/0x140 [ 303.505338][ T4285] do_group_exit+0x217/0x2d0 [ 303.509938][ T4285] __x64_sys_exit_group+0x3b/0x40 [ 303.514969][ T4285] do_syscall_64+0x4c/0xa0 [ 303.519397][ T4285] ? clear_bhb_loop+0x60/0xb0 [ 303.524077][ T4285] ? clear_bhb_loop+0x60/0xb0 [ 303.528769][ T4285] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 303.534686][ T4285] RIP: 0033:0x7f880a59cdd9 [ 303.539103][ T4285] Code: Unable to access opcode bytes at 0x7f880a59cdaf. [ 303.546120][ T4285] RSP: 002b:00007ffe474eea68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 303.554554][ T4285] RAX: ffffffffffffffda RBX: 00007f880a6321a4 RCX: 00007f880a59cdd9 [ 303.562528][ T4285] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 303.570590][ T4285] RBP: 0000000000000027 R08: 0000000000000000 R09: 00007f880a632120 [ 303.578566][ T4285] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe474efd20 [ 303.586546][ T4285] R13: 00007f880a632120 R14: 00005555819b44e8 R15: 00007ffe474f1ee0 [ 303.594527][ T4285] [ 303.598140][ T4285] Kernel Offset: disabled [ 303.602517][ T4285] Rebooting in 86400 seconds..