last executing test programs: 15m58.84230607s ago: executing program 32 (id=38): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x9db155b4338cbebb, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x400, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300001c000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="001300"}) 15m45.44112068s ago: executing program 33 (id=75): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) 15m42.048062194s ago: executing program 34 (id=81): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 15m29.488369457s ago: executing program 35 (id=79): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x80f2, r1}, 0x38) 14m33.677364749s ago: executing program 36 (id=250): r0 = getpid() r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, r2, 0x0, 0x0, 0x0}, 0x30) 14m33.389655342s ago: executing program 37 (id=253): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e00000000000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0000000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000"], 0x48) 14m31.1823654s ago: executing program 38 (id=261): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x19, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 14m7.961860574s ago: executing program 39 (id=351): socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x3b2f, &(0x7f0000000000)={0x0, 0x603b, 0x10, 0x1, 0x2a8}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a000000040000"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 13m23.833707383s ago: executing program 40 (id=446): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c010000100013070000000000000000fc020000000000000000000000000001fe8000000000000000000000000000aa0800"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000000000033000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x14c}}, 0x0) 13m0.19221765s ago: executing program 41 (id=464): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}, 0x1}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e0"], 0xdc}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 12m22.090673732s ago: executing program 42 (id=528): unshare(0x2c020400) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f00000021c0)={0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) 12m6.575193632s ago: executing program 43 (id=551): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0xfdef) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0xc0006, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYRES64, @ANYRESDEC]) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000022c0)={[{@errors_remount}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r0, 0x4068aea3, &(0x7f00000002c0)={0x74, 0x0, 0x30}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x5b, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f00000000c0)=ANY=[@ANYBLOB]) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r3, 0x2007ffa) sendfile(r3, r3, 0x0, 0x800000009) sendfile(r3, r3, 0x0, 0xffffffff) 9m27.031439331s ago: executing program 44 (id=810): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x3, &(0x7f00000000c0)=ANY=[], 0x21, 0x1b2, &(0x7f0000000a40)="$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") syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000200)={[{@norecovery}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4e1, &(0x7f0000001080)="$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") socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) socket$netlink(0x10, 0x3, 0x15) 9m8.158243034s ago: executing program 45 (id=866): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x400, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 8m25.973657606s ago: executing program 46 (id=952): connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x20800, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@resgid}, {}, {@minixdf}, {@norecovery}, {@debug_want_extra_isize}, {@lazytime}, {@nodelalloc}, {@journal_checksum}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}]}, 0xfe, 0x55b, &(0x7f0000001040)="$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") symlink(&(0x7f0000001780)='./file0/../file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) inotify_init1(0x0) fanotify_mark(0xffffffffffffffff, 0x455, 0x8, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) readv(r1, &(0x7f0000000740)=[{&(0x7f0000000480)=""/215, 0xd7}], 0x1) close(r1) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) 7m13.116389443s ago: executing program 47 (id=1138): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) setregid(0x0, 0xee00) keyctl$session_to_parent(0x12) 7m11.629103593s ago: executing program 48 (id=1141): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) 6m57.244883073s ago: executing program 49 (id=1170): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x26}, 0x1}, 0x1c) socket$unix(0x1, 0x5, 0x0) timerfd_create(0x9, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeda}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(0xffffffffffffffff, 0x4) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x4000815) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/pm_debug_messages', 0x100102, 0x0) sendfile(r5, r5, 0x0, 0x6) 6m43.458141766s ago: executing program 5 (id=1185): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000240)={0xd6, 0x1000, 0x1000, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000700)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 6m42.665835189s ago: executing program 5 (id=1186): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='nfs4\x00', 0x0, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) dup(0xffffffffffffffff) close(0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in6=@private0, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x20, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4}, 0x9}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x8040) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) socket$inet6(0xa, 0x3, 0x87) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000048000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 6m40.869892454s ago: executing program 5 (id=1188): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) unshare(0x22020600) 6m40.294437451s ago: executing program 50 (id=1188): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) unshare(0x22020600) 6m24.999773815s ago: executing program 51 (id=1218): ioperm(0x0, 0x1, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 6m19.862911789s ago: executing program 52 (id=1232): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000700)={0x54, r1, 0x1, 0x0, 0x80, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x36, 0x33, @action={{{}, {0x1}, @broadcast, @device_b}, @vht_group_id={0x15, 0x1, {0x4, "b83f33ffff8ba93a050ba3da3924605f"}}}}]}, 0x54}}, 0x0) 5m53.170749462s ago: executing program 3 (id=1273): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x3, 0x3a, '*{', 0x3a, '@', 0x3a, './bus', 0x3a, [0x4f, 0x50, 0x4f, 0x43, 0x50, 0x43]}, 0x2e) 5m52.380391036s ago: executing program 3 (id=1274): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x33) 5m51.228103149s ago: executing program 3 (id=1277): unshare(0x22000400) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 5m50.688648382s ago: executing program 3 (id=1279): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000240)={0xd6, 0x1000, 0x1000, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000700)="f387f3d0d636834c015f24e62c2e7c82d107a6808737c85e69706da9c8440000009c0ebf8e3f0a7efe0ed91d923af04bf049364e1b69237c6258215d8f1e91bd3bd03e7f3876d52ef012264768d6b703075024a5164aebe8ba1203b8512b2258bb6dfa2f55f496386fd12d29590c6eee14a6c7bc9d4c9c26") ptrace$cont(0x21, r0, 0x80000001, 0x4) 5m48.750625399s ago: executing program 3 (id=1286): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$cgroup2(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000000), 0x81, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@lazytime}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nobarrier}, {@oldalloc}, {@max_batch_time={'max_batch_time', 0x3d, 0xffff}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") 5m46.62220953s ago: executing program 53 (id=1290): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x446102) dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4}, 0x50) close(0x3) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000100)='reno\x00', 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r5, 0xffffffffffffffff, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000300)='reno\x00', 0x5) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) 5m46.611690031s ago: executing program 3 (id=1294): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000240)={0xd6, 0x1000, 0x1000, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000700)="f387f3d0d636834c015f24e62c2e7c82d107a6808737c85e69706da9c8440000009c0ebf8e3f0a7efe0ed91d923af04bf049364e1b69237c6258215d8f1e91bd3bd03e7f3876d52ef012264768d6b703075024a5164aebe8ba1203b8512b2258bb6dfa2f55f496386fd12d29590c6eee14a6c7bc9d4c9c26915315ab4f01f3b278") ptrace$cont(0x21, r0, 0x80000001, 0x4) 5m46.342580503s ago: executing program 54 (id=1294): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000240)={0xd6, 0x1000, 0x1000, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000700)="f387f3d0d636834c015f24e62c2e7c82d107a6808737c85e69706da9c8440000009c0ebf8e3f0a7efe0ed91d923af04bf049364e1b69237c6258215d8f1e91bd3bd03e7f3876d52ef012264768d6b703075024a5164aebe8ba1203b8512b2258bb6dfa2f55f496386fd12d29590c6eee14a6c7bc9d4c9c26915315ab4f01f3b278") ptrace$cont(0x21, r0, 0x80000001, 0x4) 5m31.677786736s ago: executing program 7 (id=1333): syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="000ef4000000f424abd92c565da49cc0b12747"], 0x0}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x9, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 5m30.829632504s ago: executing program 7 (id=1336): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@ipv6_deladdrlabel={0x38, 0x48, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x4040) 5m30.412257058s ago: executing program 7 (id=1338): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file2\x00', 0x21000e, &(0x7f0000000380), 0x1, 0x52e, &(0x7f0000000e00)="$eJzs3c1vHGcZAPBnxrvBaVzsAodSqR+iQUkF2Y1r2loc2iIQt0qgcg+WvbGsrLORd93GVoUc8QcgIQSVOHHigsSNCxLqn4CQKtE7AgRCkMKBAzBoZmdTZztrO+p+JPbvJ72777yzO8/zbryz73xkJoAz67mIeD0i5iLihYhYLNvTssRBv+Sv+/DuO+t5yZvf/HsSSdkWUVTvuVC+bb7/VKm7t39jrd1u7ZTTzd72rWZ3b//K1vbaZmuzdXNlZfnl1VdWX1q9OpZ+5v169Rt//vEPfv7NV3/z5bf/cO2vl7+XJ/31cv6gX+NTfHrxQfFYzz+Le2oRsTPeYDMzV/anPutEAAA4kXyU+pmI+EIx/l+MuWI0Vxge0s1PPzsAAABgHLLXFuI/SUQGAAAAnFqvRcRCJGmjPBdgIdK00eifw/u5eCxtd7q9L13v7N7cyOdFLEU9vb7Vbl0tz6ldinqSTy8X9Y+mXxyaXomIJyLiR4vni+nGeqe9MeudHwAAAHBGXBja/v/XYn/7HwAAADhllmadAAAAADBxo7b/kynnAQAAAEyO4/8AAABwqn3rjTfykg3uf73x1t7ujc5bVzZa3RuN7d31xnpn51Zjs9PZLK7Zt33UsuoR0e50bn0lYvd2s9fq9prdvf1r253dm71rW+4fCAAAALPyxLPvfZBExMFXzxcldy5/mBvxBucKwKmRPsiL/zS5PIDpG/UzfwLnxpkHMH21WScAzM7BrBMAZu2+S31UDAoOn7xz3z6D304uJwAAYLwufb76+H+tPJ//CPb/wyPu8La8YwFwtnyC4//AI85vPpxd9QcaAdyZYCbArBx3q4+RF++oOv5fuWcwy45dFgAAMFELRXk2bZTHAhciTRuNiMeL/+pfT65vtVtXI+LTEfH7xfqn8unl4p2J2wMCAAAAAAAAAAAAAAAAAAAAAAAAwAllWRIZAAAAcKpFpH9Jyvt/XVq8uDC8f+Bc8u/FKG/p9fZP3/zJ7bVeb2c5b//Hvfbeu2X7i7PYgwEAAABnUe3IuYPt9MF2PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACM04d331kflGnG/dvXImKpKn4t5ovn+ahHxGP/TKJ26H1JRMyNIf7BnYh4sip+kqcVS2UWw/HTiDg/nfhPZ1lWGf/CGOLDWfZevv55ver7l8ZzxXP1979Wlk/qvvXfuV8dmpPeW//NjVj/PX7CGE+9/8vmyPh3Ip6qVa9/BvGTEfGfr1pgxYfy3e/s73+ssb/wyH4Wcany9ye5L1azt32r2d3bv7K1vbbZ2mzdXFlZfnn1ldWXVq82r2+1W+VjZR9/+PSv/zfU9N+sr+h/jIi/dEz/L+aV+qHGbDhMGez923c/26/WhxZRxL/8fPXf35NHxM//Jr5Y/g7k8y8N6gf9+mHP/OJ3z1QmVsbfGNH/4/79L49a6JAXvv39P57wpQDAFHT39m+stdutnYlX3s2ybFqxTl6J9KQvLoaLU/3EplsZjO4mFmL+YenplCsXH440HqQyjj1bAADAw+ajQf+sMwEAAAAAAAAAAAAAAAAAAICzq7sX6aQvJzYc82A2XQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONL/AwAA///zaNkr") sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) 5m27.676694638s ago: executing program 7 (id=1340): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") setuid(0xee00) r0 = fanotify_init(0x200, 0x0) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) fanotify_mark(r0, 0x39, 0x1a, 0xffffffffffffffff, 0x0) 5m27.224438185s ago: executing program 7 (id=1341): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x55}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x421b8, 0x14027}}, 0x20}, 0x1, 0x0, 0x0, 0x8090}, 0x4008000) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}) r3 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x8, 0xa11, &(0x7f0000005940)="$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") 5m26.484799465s ago: executing program 7 (id=1342): unshare(0x4020400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x12, 0x12, r0, 0x59c95000) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) 5m25.927612379s ago: executing program 55 (id=1342): unshare(0x4020400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x12, 0x12, r0, 0x59c95000) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) 3m27.78167378s ago: executing program 6 (id=1641): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x20048a, &(0x7f0000000040)={[{@grpjquota}, {@noinit_itable}, {@abort}, {@block_validity}]}, 0x12, 0x51a, &(0x7f0000001200)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x121c80, 0x47) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000280)=0x4000fdfd) 3m20.469473919s ago: executing program 6 (id=1662): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010001000107144e230005000000003a000000000010000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 3m18.290584625s ago: executing program 6 (id=1664): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) getxattr(&(0x7f0000000300)='./file0\x00', &(0x7f00000004c0)=@known='security.selinux\x00', 0x0, 0x0) dup3(r0, r0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[]) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8014, &(0x7f0000000000)=ANY=[], 0x3, 0x7c9, &(0x7f0000000200)="$eJzs3U1oHPfZAPBnZMlxFDAm74vfYBxn7OQFBxxltXKUV+SQbFYjeZLVrthdvdiUkppYDsJyEpKGNr4kppC0paX01GOaa2+9tRRa6KEfl0Jz6KW3QE4lhX6REgoqM7srS9Zn/CEn9e8nrPnvzPOf/zOz63l2VruzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEUp+uVMaTaOTNhbPp1urT7dbcNssH6/vFusk6z6wbNyIp/sWBA/HJ33rz/vva4sPFrxNxtHfraBwoJgfiyn2HDz31X8NDg/7bJHSjju8yLol4u0jq0vnl5cXX0nTodiSzR779s8/c5Z8rxe/ZrJl3Ip+rzWZp3mmlU5OTlcfPzHTSmbyRdc51utlcWm9ntW6rnZ6sP5qOT01NpNnYudZCc3a61sgGM598rFqpTKbPjc1ntXan1Xz8uejUz+SNRt6cLWOqla9FEfNk8UB8Pu+m3aw2l6YXl5YXJ3ZKtQga32zBvt5ddvSRQx+98eFflxaLB+RWK0n6D8zq+Hi1Oj75xNQTT1Yqw9VKdf2MynViNSKGIoqI2/Kg5Qvk1h7A4SYM9et/NCKPZizE2Ug3+RmJekxHO1oxV9z+w8iGiL5B/f/fx//8u+3GXVv/B1X+gWuLj0RZ/4/1bh3bqv5vmute/rweb8aVuBTnYzmWYzFeu+MZ7fAzdLNrSNbdmo0smpFHJ1qRx1zUyjlpf04aUzEZk1GJF+JMzEQn0piJPBqRRSfORSe6kZWPqHq0I4tadKMV7UjjZNTj0UhjPKZiKiYijSzG4ly0YiGaMRvTUSvXcjGWyv0+cV2Wh++Nn770+4/eK9qrQePbbVbxZK4I+ss2QRvK/bb1f2WleL5wfYT6fxfYv93C23AUhxuzMqj/AAAAwH+spHz1vTj/H4kHy9ZM3si+dKfTAgAAAG6h8i//R4vJSNF6MJLi/L+ySeQHe54bAAAAcGsk5WfskogYjYd6rYuxFG/HYmz2IkBEHNrrFAEAAICbVP79/1gxGY14q5wxuFzKFuf/AAAAwBfNN7e6xv6Hg2vsdubvSX4+EhEjydX5s48kl2tFXO3yvl6//uT/V9fYnTmSHOyvpJxMDl+5L4mI4Xp2NBlc/fJf9/SmH5e/jwyvdt/qWv9Ju71tArF9AuWt+E4c78Ucv1BO7ut3GU56o4zO5I1srN5qPFVeErH4133j5aWvRxSjf6s5dzCJi0vLi2MvvrJ8oczlatH96uX+BRQ3XEdxm1xW+nsgHtx8i0fKD2L0xx3tjVtZu/1Dve5D24+ZrB3znTjRizkx2puODpb0xjxQjDk+9tR41GoHh7rZ2e4bK2u2vp/F+OqWj9zQlr8TD/diHj75cG+ySRbVdVm8vDGL6tr9v7t9sess3jv+1tl//KqVZBM7ZTHxGbJY2RdxfRYAd8rF8qo/16rQvWUV+nSlp6j/vbpbFKtaL6BvF8fav18bZfVZxqD/mlo3HNdX96HVA+PuqvtK9I7oJ3sxJ3vPJ4aPbFJXKpsc0V9devXX/SP66R/94IdfPvabH5fj3kh1e+SZ357uxTzaj73/l1vU2GKbv3tdVX2/6PH+luN2GtUkrkbs++rlV+Pw629eeWzp8vmXFl9afLlanZisnK5Unqju78eOlM8YtqmAANy9dv6OnS0jBnUmOX3dWXVcWF937199S8FYvBivxHJciFPlpw0i4qHNxx1d8zaEUzuctY6u+YaXUzucW16LrW6MTWKL2Ik1e+x/vl9OPrktdwcA7IkTO9Thber/6ivzp3Y4715fy/unxYOz49i6lm/m/27r3gCAu0PW/jgZ7b6btNv5/AvjU1Pjte6ZLG236s+n7Xx6NkvzZjdr18/UmrNZOt9udVv1wQvH01kn7SzMz7fa3XSm1U5jqJOfLb/5Pe1/9Xsnm6s1u3m9M9/Iap0srbea3Vq9m07nnXo6v/BsI++cydpl5858Vs9n8nqtm7eaaae10K5nY2naybI1gfl01uzmM3nRbKbz7Xyu1r4aEY2FuSydzjr1dj7fbfVWOBgrb8602nPlasc2bv6f9np/A8DnwetvXrl0fnl58bUba/xxN8F3ehsBgPVUaQAAAAAAAAAAAAAA+Pxbff//oUGjmHsTnwj8bI174rYPcdc2ijvyc5DGnW185emnL20V8+xbD5zZ3Xpit5+UjXcPRuz/yfd6c57ZOvgb/f9/t2ZLP4iIG+i+kmyy6NOVXmPdYWL/3h+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCjfwcAAP//wmpdDQ==") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) 3m17.830193462s ago: executing program 6 (id=1667): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x8, &(0x7f0000000180)=ANY=[], 0x1, 0x61d, &(0x7f0000000cc0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x1, 0x0, 0x10000) socket$inet_udp(0x2, 0x2, 0x0) 3m15.024937039s ago: executing program 6 (id=1672): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000040)={0x2, 0x1, '\x00', [@pad1, @pad1, @enc_lim={0x4, 0x1, 0x5}]}, 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1fff, 0x6, @mcast2, 0x4}, 0x1c) write(r0, &(0x7f0000000140)="8265000000000000", 0x5ac) 3m10.006123243s ago: executing program 6 (id=1680): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0x2, 0x2, 0x8, 0x7}, 0x3b, [0x401, 0x7ff, 0x401, 0x8, 0x10000, 0x45, 0x200, 0x401, 0x7, 0x290, 0xfc, 0x80000000, 0x8, 0x3, 0xfffffd05, 0x9, 0x50d6, 0x7ff, 0xa, 0x0, 0xd4, 0x4, 0x5, 0x1d231da2, 0x6, 0x5, 0x0, 0x9, 0x0, 0x3, 0x101, 0x0, 0x800, 0xfffffffa, 0x9, 0x7, 0x8, 0x9, 0xf94d, 0x7, 0x3, 0xffffff00, 0xbeb, 0x575c, 0x2, 0x57, 0x2, 0x0, 0x5, 0x5, 0x1, 0x2, 0x1, 0x3, 0x6, 0x670, 0x9, 0x8000, 0x2, 0x9e, 0x0, 0x2, 0x1, 0x1], [0x4, 0x8000, 0xa, 0xfffff2e1, 0x9ca4, 0x7b, 0x0, 0x7f, 0x72a8, 0x400, 0x86, 0x2, 0x4, 0x56e, 0x0, 0x4, 0x100, 0x88a, 0x2, 0x8, 0xb2, 0x106c, 0xa2b8, 0xc60, 0x6740, 0xf2f1, 0x5, 0x1, 0x5, 0xfffffffd, 0x3, 0x0, 0x7fffffff, 0x1, 0x81, 0x6, 0x6, 0x0, 0x183, 0x401, 0x6, 0xf, 0xd349, 0x9, 0x6, 0x0, 0x9, 0x0, 0x7fff, 0x2, 0xffffffb1, 0x1, 0x6, 0x6, 0x9, 0x1, 0x2, 0x800, 0x4, 0x3, 0x4, 0x7fffffff, 0xc2577131, 0x7], [0x4, 0x5, 0x8, 0x2, 0x5, 0x80, 0xfffffff7, 0x3, 0x8, 0xb5, 0xfffffffa, 0x100, 0x0, 0x1, 0x1, 0x7, 0x8a85, 0x4, 0x430fb4df, 0x3, 0x7, 0x8, 0x8, 0x2, 0x2, 0x9, 0x1000, 0x54e934b9, 0x37, 0x10001, 0x0, 0x8000, 0x2e, 0x4, 0x6, 0x6, 0x5, 0xcf9, 0x6, 0x9, 0x2, 0xe, 0xffffff0e, 0x0, 0xffffffff, 0x0, 0xfffffffd, 0x5, 0x0, 0xa, 0x7fffffff, 0xffffffc0, 0x5, 0x6, 0xfff, 0x101, 0x7, 0x8, 0x2, 0x3, 0x5, 0x81, 0xfffffff8, 0xb6], [0x4, 0x2, 0x4, 0x1, 0x6, 0x7, 0x2, 0x8, 0x19, 0x0, 0x8000, 0x7fff, 0xd, 0x1, 0x5, 0x5, 0x4, 0x9, 0x5, 0x200, 0x7, 0xffffff7f, 0x4689, 0xe97f, 0x80000000, 0x5, 0xcd3, 0x80000000, 0x5, 0xfffff800, 0xe, 0x26419275, 0x80000001, 0x3, 0xfff, 0x8, 0xef7, 0x4ff, 0x1, 0xfffffff0, 0x7, 0x7b9, 0x52a, 0x5, 0x0, 0x6, 0x7fff, 0x7, 0x3ff, 0x0, 0x2, 0xb2a, 0x3, 0x189f, 0x9, 0x9, 0xffff, 0xd, 0xfb9, 0x77, 0x5, 0xfffffffa, 0x6e, 0x1]}, 0x45c) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d0200000000000000000000000038"], 0x51) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 3m9.224146547s ago: executing program 56 (id=1680): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0x2, 0x2, 0x8, 0x7}, 0x3b, [0x401, 0x7ff, 0x401, 0x8, 0x10000, 0x45, 0x200, 0x401, 0x7, 0x290, 0xfc, 0x80000000, 0x8, 0x3, 0xfffffd05, 0x9, 0x50d6, 0x7ff, 0xa, 0x0, 0xd4, 0x4, 0x5, 0x1d231da2, 0x6, 0x5, 0x0, 0x9, 0x0, 0x3, 0x101, 0x0, 0x800, 0xfffffffa, 0x9, 0x7, 0x8, 0x9, 0xf94d, 0x7, 0x3, 0xffffff00, 0xbeb, 0x575c, 0x2, 0x57, 0x2, 0x0, 0x5, 0x5, 0x1, 0x2, 0x1, 0x3, 0x6, 0x670, 0x9, 0x8000, 0x2, 0x9e, 0x0, 0x2, 0x1, 0x1], [0x4, 0x8000, 0xa, 0xfffff2e1, 0x9ca4, 0x7b, 0x0, 0x7f, 0x72a8, 0x400, 0x86, 0x2, 0x4, 0x56e, 0x0, 0x4, 0x100, 0x88a, 0x2, 0x8, 0xb2, 0x106c, 0xa2b8, 0xc60, 0x6740, 0xf2f1, 0x5, 0x1, 0x5, 0xfffffffd, 0x3, 0x0, 0x7fffffff, 0x1, 0x81, 0x6, 0x6, 0x0, 0x183, 0x401, 0x6, 0xf, 0xd349, 0x9, 0x6, 0x0, 0x9, 0x0, 0x7fff, 0x2, 0xffffffb1, 0x1, 0x6, 0x6, 0x9, 0x1, 0x2, 0x800, 0x4, 0x3, 0x4, 0x7fffffff, 0xc2577131, 0x7], [0x4, 0x5, 0x8, 0x2, 0x5, 0x80, 0xfffffff7, 0x3, 0x8, 0xb5, 0xfffffffa, 0x100, 0x0, 0x1, 0x1, 0x7, 0x8a85, 0x4, 0x430fb4df, 0x3, 0x7, 0x8, 0x8, 0x2, 0x2, 0x9, 0x1000, 0x54e934b9, 0x37, 0x10001, 0x0, 0x8000, 0x2e, 0x4, 0x6, 0x6, 0x5, 0xcf9, 0x6, 0x9, 0x2, 0xe, 0xffffff0e, 0x0, 0xffffffff, 0x0, 0xfffffffd, 0x5, 0x0, 0xa, 0x7fffffff, 0xffffffc0, 0x5, 0x6, 0xfff, 0x101, 0x7, 0x8, 0x2, 0x3, 0x5, 0x81, 0xfffffff8, 0xb6], [0x4, 0x2, 0x4, 0x1, 0x6, 0x7, 0x2, 0x8, 0x19, 0x0, 0x8000, 0x7fff, 0xd, 0x1, 0x5, 0x5, 0x4, 0x9, 0x5, 0x200, 0x7, 0xffffff7f, 0x4689, 0xe97f, 0x80000000, 0x5, 0xcd3, 0x80000000, 0x5, 0xfffff800, 0xe, 0x26419275, 0x80000001, 0x3, 0xfff, 0x8, 0xef7, 0x4ff, 0x1, 0xfffffff0, 0x7, 0x7b9, 0x52a, 0x5, 0x0, 0x6, 0x7fff, 0x7, 0x3ff, 0x0, 0x2, 0xb2a, 0x3, 0x189f, 0x9, 0x9, 0xffff, 0xd, 0xfb9, 0x77, 0x5, 0xfffffffa, 0x6e, 0x1]}, 0x45c) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d0200000000000000000000000038"], 0x51) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 2m28.004545211s ago: executing program 1 (id=1760): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) unshare(0x6020400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x14, &(0x7f0000000040), 0x50) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) read$FUSE(r5, &(0x7f0000000a00)={0x2020}, 0x2020) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) 2m26.016400362s ago: executing program 5 (id=1681): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x8, &(0x7f0000000180)=ANY=[], 0x1, 0x61d, &(0x7f0000000cc0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x1, 0x0, 0x10000) socket$inet_udp(0x2, 0x2, 0x0) 2m25.975668385s ago: executing program 1 (id=1762): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100090808004149004001040800", 0x58}], 0x1) 2m25.556954909s ago: executing program 5 (id=1763): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd(0x401) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, &(0x7f0000000280)=""/139, &(0x7f0000000040)=0x8b) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0434caeaaa73fc8de77c7848fe53f41142b3d24bd07f8813c14b6c062bfd7e619a11025da64528bfb82b6910888d3acc0121f93c5e2a12de9cfead51baf139fbd4cf16adb7c0911db8d71378e3e5bb157377fd491260aa2c003d1463bad314a4d477891d70988cf74ac2508a32748bec7ed2008f25ce2ab00024abd056f9c4f8dec1"], 0x9) 2m23.536386222s ago: executing program 1 (id=1768): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x91c7, 0x101802) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000580)={0x2, 0x8, 0xfff, 0x5, 0x0, 0xfd, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f00000000c0)='ecryptfs\x00', 0x0) lseek(r0, 0x401, 0x0) request_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000080)='].\x00', 0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r5], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r6 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r6, @ANYBLOB="0700000000000000000005000000180003800800040000000000080002000900000004000100180001801400020073797a5f74756e000000000000000000"], 0x44}}, 0x0) socket$inet6(0xa, 0x80002, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r8 = dup2(r7, r7) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x5, 0xc0000000, 0x10}) ioctl$BLKTRACESTOP(r8, 0x1275, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x2, @mcast2, 0x5}, 0x1c) 2m21.69263793s ago: executing program 5 (id=1770): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0x6, 0xc}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0xc, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2m20.183362402s ago: executing program 57 (id=1770): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0x6, 0xc}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0xc, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2m20.167378564s ago: executing program 1 (id=1773): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x8, &(0x7f0000000180)=ANY=[], 0x1, 0x61d, &(0x7f0000000cc0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x1, 0x0, 0x10000) socket$inet_udp(0x2, 0x2, 0x0) 2m19.782322245s ago: executing program 1 (id=1776): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd(0x401) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f0000000280)=""/139, &(0x7f0000000040)=0x8b) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) iopl(0x3) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0434caeaaa73fc8de77c7848fe53f41142b3d24bd07f8813c14b6c062bfd7e619a11025da64528bfb82b6910888d3acc0121f93c5e2a12de9cfead51baf139fbd4cf16adb7c0911db8d71378e3e5bb157377fd491260aa2c003d1463bad314a4d477891d70988cf74ac2508a32748bec7ed2008f25ce2ab00024abd056f9c4f8dec1"], 0x9) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[], 0x20) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x100404c, &(0x7f00000001c0)=ANY=[], 0x3, 0x1cc, &(0x7f0000000580)="$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") close(0x3) 2m19.09744959s ago: executing program 1 (id=1780): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x91c7, 0x101802) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000580)={0x2, 0x8, 0xfff, 0x5, 0x0, 0xfd, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f00000000c0)='ecryptfs\x00', 0x0) lseek(r0, 0x401, 0x0) request_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000080)='].\x00', 0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r5], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r6 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r6, @ANYBLOB="0700000000000000000005000000180003800800040000000000080002000900000004000100180001801400020073797a5f74756e000000000000000000"], 0x44}}, 0x0) socket$inet6(0xa, 0x80002, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r8 = dup2(r7, r7) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x5, 0xc0000000, 0x10}) ioctl$BLKTRACESTOP(r8, 0x1275, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x2, @mcast2, 0x5}, 0x1c) 2m18.397940436s ago: executing program 58 (id=1780): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x91c7, 0x101802) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000580)={0x2, 0x8, 0xfff, 0x5, 0x0, 0xfd, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f00000000c0)='ecryptfs\x00', 0x0) lseek(r0, 0x401, 0x0) request_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000080)='].\x00', 0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r5], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r6 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r6, @ANYBLOB="0700000000000000000005000000180003800800040000000000080002000900000004000100180001801400020073797a5f74756e000000000000000000"], 0x44}}, 0x0) socket$inet6(0xa, 0x80002, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r8 = dup2(r7, r7) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x5, 0xc0000000, 0x10}) ioctl$BLKTRACESTOP(r8, 0x1275, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x2, @mcast2, 0x5}, 0x1c) 1m21.56463925s ago: executing program 0 (id=1886): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) unshare(0x6020400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x14, &(0x7f0000000040), 0x50) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0, 0x800, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) 1m19.549785743s ago: executing program 0 (id=1887): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1000c16, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) write$tun(r1, &(0x7f0000000040)=ANY=[], 0x1043) pwrite64(r0, &(0x7f00000001c0)='Q', 0x1, 0x791) 1m14.139778769s ago: executing program 0 (id=1897): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd(0x401) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f0000000280)=""/139, &(0x7f0000000040)=0x8b) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) iopl(0x3) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0434caeaaa73fc8de77c7848fe53f41142b3d24bd07f8813c14b6c062bfd7e619a11025da64528bfb82b6910888d3acc0121f93c5e2a12de9cfead51baf139fbd4cf16adb7c0911db8d71378e3e5bb157377fd491260aa2c003d1463bad314a4d477891d70988cf74ac2508a32748bec7ed2008f25ce2ab00024abd056f9c4f8dec1"], 0x9) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[], 0x20) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x100404c, &(0x7f00000001c0)=ANY=[], 0x3, 0x1cc, &(0x7f0000000580)="$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") close(0x3) 1m13.299450217s ago: executing program 0 (id=1900): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='shortad,partition=00000000000000000005,noadinicb,uid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=r0, @ANYBLOB=',volume=0000000000000006,\x00\x00\x00\x00\x00'], 0x1, 0x498, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x20000000008) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_clone(0x12800100, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) r5 = accept4(r4, 0x0, 0x0, 0x0) write(r5, &(0x7f0000000040)="cb", 0xfffffdef) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) openat(r1, &(0x7f00000000c0)='.\x00', 0x515401, 0x408) 1m9.575541637s ago: executing program 0 (id=1913): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x91c7, 0x101802) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000580)={0x2, 0x8, 0xfff, 0x5, 0x0, 0xfd, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f00000000c0)='ecryptfs\x00', 0x0) lseek(0xffffffffffffffff, 0x401, 0x0) request_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000080)='].\x00', 0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r4], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r5 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r5, @ANYBLOB="0700000000000000000005000000180003800800040000000000080002000900000004000100180001801400020073797a5f74756e000000000000000000"], 0x44}}, 0x0) socket$inet6(0xa, 0x80002, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r7 = dup2(r6, r6) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x5, 0xc0000000, 0x10}) 1m8.476690586s ago: executing program 0 (id=1919): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) add_key$fscrypt_v1(&(0x7f00000012c0), &(0x7f0000001300)={'fscrypt:', @auto=[0x31, 0x63, 0x34, 0x63, 0x61, 0x39, 0x37, 0x39, 0x62, 0x37, 0x30, 0x33, 0x37, 0x61, 0x31, 0x65]}, &(0x7f0000001340)={0x0, "9231f6cd98b03d0d1713b67d5cf98e32ca5e123cd1bc9944e0c3439d9ef54ae7983b97a5448eae27b3c44fde9f6083c7bdcf5366466a5b0f8fa2afef66f07475", 0x10}, 0x48, 0xfffffffffffffffb) 1m7.047254851s ago: executing program 59 (id=1919): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) add_key$fscrypt_v1(&(0x7f00000012c0), &(0x7f0000001300)={'fscrypt:', @auto=[0x31, 0x63, 0x34, 0x63, 0x61, 0x39, 0x37, 0x39, 0x62, 0x37, 0x30, 0x33, 0x37, 0x61, 0x31, 0x65]}, &(0x7f0000001340)={0x0, "9231f6cd98b03d0d1713b67d5cf98e32ca5e123cd1bc9944e0c3439d9ef54ae7983b97a5448eae27b3c44fde9f6083c7bdcf5366466a5b0f8fa2afef66f07475", 0x10}, 0x48, 0xfffffffffffffffb) 17.051680654s ago: executing program 4 (id=2113): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xfffff000) 15.398628668s ago: executing program 4 (id=2120): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x80000000) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r1, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) recvmmsg(r0, &(0x7f00000073c0)=[{{0x0, 0x0, &(0x7f0000003d80)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) shutdown(r0, 0x1) 15.044133586s ago: executing program 4 (id=2123): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e06000d08"], 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rmdir(&(0x7f0000000080)='./bus\x00') syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x400017e) mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0xa4) 14.636688159s ago: executing program 4 (id=2125): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 10.812635618s ago: executing program 4 (id=2139): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0) fallocate(r4, 0x3, 0x80007, 0x8000c60) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r5, r5}, 0x4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6, 0x11, r5, 0x941a0000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2d6248b52302324, 0x0, 0x886}, 0x50) 9.563621579s ago: executing program 4 (id=2142): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x6c1, &(0x7f00000003c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0) 6.015369454s ago: executing program 8 (id=2157): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffff088) syz_open_dev$evdev(&(0x7f0000000180), 0xca, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r7, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f0000000280)=[{0x3, 0x0, {0x1, 0xf0, 0x2}, {0x3ca1d9a9d3f903f4, 0xff, 0x2}, 0xff, 0xff}], 0x20) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r6, {0x5, 0xb}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4014}, 0xc4) 4.773615285s ago: executing program 8 (id=2161): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x9, 0x5, 0x41}, 0x50) syz_emit_ethernet(0x200000, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x6c1, &(0x7f00000003c0)="$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") r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}]}, 0x10) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x7, 0x0, 0x0) 3.360250169s ago: executing program 8 (id=2163): syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="000ef4000000f424abd92c565da49cc0b12747"], 0x0}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x9, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 3.127938747s ago: executing program 2 (id=2165): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rmdir(&(0x7f0000000080)='./bus\x00') syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x400017e) mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0xa4) 3.071076272s ago: executing program 9 (id=2166): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = dup(r0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x1405, 0x20, 0x70bd25, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4801}, 0x90) 2.740713729s ago: executing program 9 (id=2167): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 2.612869379s ago: executing program 2 (id=2168): chmod(0x0, 0x0) 2.59636219s ago: executing program 8 (id=2169): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f00000028c0)={0x0, 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x401, 0x0, 0x101, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 2.200526702s ago: executing program 9 (id=2170): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000040000000400000006"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000800000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) faccessat(0xffffffffffffff9c, 0x0, 0x2) 1.996529249s ago: executing program 9 (id=2171): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_read_part_table(0x5c8, &(0x7f0000000600)="$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") r1 = mq_open(0x0, 0x42, 0x0, 0x0) mq_timedreceive(r1, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) sendmmsg$inet(r2, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_emit_ethernet(0x106, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) move_mount(0xffffffffffffffff, 0x0, r3, 0x0, 0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$rfkill(0xffffffffffffff9c, 0x0, 0x44040, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) utime(&(0x7f0000000080)='./file0\x00', 0x0) 1.962531721s ago: executing program 2 (id=2172): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r0}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @auto=[0x34, 0x30, 0x30, 0x6a, 0x37, 0x37, 0x39, 0x38, 0x35, 0x62, 0x34, 0x35, 0x0, 0x33, 0x36, 0x32]}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3577e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7f0302cb566a0982f8938caa52dd8d39af14c31ed56ad593000800", 0x3e}, 0x48, 0xfffffffffffffffe) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) lchown(0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00') lseek(r4, 0x2000, 0x0) pread64(r3, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) 1.818295463s ago: executing program 8 (id=2173): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(0x0, 0x86442, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) getxattr(&(0x7f0000000300)='./file0\x00', &(0x7f00000004c0)=@known='security.selinux\x00', 0x0, 0x0) dup3(r0, r0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[]) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8014, &(0x7f0000000000)=ANY=[], 0x3, 0x7c9, &(0x7f0000000200)="$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") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) 1.592642861s ago: executing program 2 (id=2174): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) msgctl$IPC_STAT(0x0, 0x2, 0x0) 1.452747333s ago: executing program 9 (id=2175): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e06000d08"], 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rmdir(&(0x7f0000000080)='./bus\x00') syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x400017e) mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0xa4) 698.957513ms ago: executing program 8 (id=2176): syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="000ef4000000f424abd92c565da49cc0b12747"], 0x0}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x9, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 568.784644ms ago: executing program 2 (id=2177): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 556.922415ms ago: executing program 9 (id=2178): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/210, 0xd2, 0x1, 0x29}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0xfffffffc, &(0x7f00000006c0)="04d2"}) 0s ago: executing program 2 (id=2179): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1) kernel console output (not intermixed with test programs): of 9-1:1.0 failed with error -5 [ 784.195099][ T26] usb 9-1: USB disconnect, device number 5 [ 784.221944][T12429] udevd[12429]: setting mode of /dev/bus/usb/009/005 to 020664 failed: No such file or directory [ 784.267965][T12429] udevd[12429]: setting owner of /dev/bus/usb/009/005 to uid=0, gid=0 failed: No such file or directory [ 784.306859][T13261] loop1: detected capacity change from 0 to 1024 [ 784.337430][T13261] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 784.364393][T13261] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 784.373577][T13261] EXT4-fs (loop1): orphan cleanup on readonly fs [ 784.383015][T13261] EXT4-fs error (device loop1): ext4_free_blocks:6676: comm syz.1.1405: Freeing blocks not in datazone - block = 0, count = 4096 [ 784.431422][T13261] EXT4-fs (loop1): 1 orphan inode deleted [ 784.443732][T13261] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 784.599520][T12975] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.768017][T13271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 784.815594][T13271] batadv_slave_0: entered promiscuous mode [ 784.891529][T13273] loop1: detected capacity change from 0 to 512 [ 785.019312][T13273] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 785.620236][T13273] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 785.718026][T13273] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 786.750739][T12975] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 789.772142][T13304] loop6: detected capacity change from 0 to 1764 [ 790.231156][T13315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1416'. [ 790.241672][T13315] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1416'. [ 790.429366][T13320] loop1: detected capacity change from 0 to 512 [ 790.481862][T13320] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1417: invalid indirect mapped block 10 (level 1) [ 790.517992][T13320] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1417: invalid indirect mapped block 8 (level 1) [ 790.636306][T13320] EXT4-fs (loop1): 1 truncate cleaned up [ 790.669755][T13320] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 790.815180][T12975] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.817457][T13364] loop6: detected capacity change from 0 to 16 [ 793.840231][T13364] erofs: (device loop6): erofs_read_inode: bogus i_mode (0) @ nid 18446744073575399424 [ 794.183185][T13369] binder: 13368:13369 unknown command 0 [ 794.222999][T13369] binder: 13368:13369 ioctl c0306201 200000000080 returned -22 [ 794.461862][T13374] loop1: detected capacity change from 0 to 512 [ 794.499476][T13374] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 794.788576][T13376] binder: 13368:13376 ioctl c0306201 200000000280 returned -14 [ 794.867875][T13376] binder: 13368:13376 ioctl 4142 0 returned -22 [ 794.888219][T13374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 794.923078][T13374] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 795.032074][T13369] loop8: detected capacity change from 0 to 256 [ 795.285770][T13006] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 795.866522][T12975] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 797.134215][T13408] loop6: detected capacity change from 0 to 1024 [ 797.202861][T13408] EXT4-fs (loop6): Test dummy encryption mode enabled [ 797.725116][T13408] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 798.242581][T12677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 798.447816][ T26] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 798.514308][T13425] loop6: detected capacity change from 0 to 16 [ 798.534834][T13425] erofs: (device loop6): mounted with root inode @ nid 36. [ 798.567037][T13425] erofs: (device loop6): erofs_init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet [ 798.637680][ T26] usb 2-1: Using ep0 maxpacket: 32 [ 798.673892][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.698277][ T26] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 798.707416][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.749477][ T26] usb 2-1: config 0 descriptor?? [ 798.765415][ T26] hub 2-1:0.0: USB hub found [ 798.942249][T13432] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1441'. [ 799.163193][ T26] hub 2-1:0.0: 1 port detected [ 799.609929][T13435] loop6: detected capacity change from 0 to 512 [ 799.648573][T13435] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 799.724002][T13435] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 799.837695][T13435] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 800.266349][ T9] usb 2-1: USB disconnect, device number 2 [ 800.708342][T12677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 801.098570][ T26] usb 2-1-port1: config error [ 801.313894][T13469] loop8: detected capacity change from 0 to 512 [ 801.325575][T13469] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 801.393549][T13469] EXT4-fs (loop8): 1 orphan inode deleted [ 801.399527][T13469] EXT4-fs (loop8): 1 truncate cleaned up [ 801.406781][T13469] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 801.674624][T13481] loop1: detected capacity change from 0 to 764 [ 801.943559][T13482] rock: directory entry would overflow storage [ 801.951353][T13482] rock: sig=0x5850, size=36, remaining=7 [ 802.084396][T13482] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 802.091030][T13482] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 802.101079][T13482] vhci_hcd vhci_hcd.0: Device attached [ 802.440537][T13483] vhci_hcd: connection closed [ 802.464949][T12684] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 802.479084][ T58] vhci_hcd: stop threads [ 802.483562][ T58] vhci_hcd: release socket [ 802.507695][ T58] vhci_hcd: disconnect device [ 804.139332][T13507] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1459'. [ 804.355331][T13514] loop6: detected capacity change from 0 to 1024 [ 804.388738][T13514] EXT4-fs: Ignoring removed oldalloc option [ 804.398257][T13514] EXT4-fs: Ignoring removed bh option [ 804.421962][T13514] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 804.480605][T13514] EXT4-fs (loop6): can't mount with data_err=abort, fs mounted w/o journal [ 804.571208][ T8036] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 804.591340][T13523] loop2: detected capacity change from 0 to 7 [ 804.615492][T13523] Dev loop2: unable to read RDB block 7 [ 804.634121][T13523] loop2: AHDI p1 p2 p3 [ 804.653773][T13523] loop2: partition table partially beyond EOD, truncated [ 804.682112][T13523] loop2: p1 start 1601398130 is beyond EOD, truncated [ 804.696025][T13523] loop2: p2 start 1702059890 is beyond EOD, truncated [ 804.770193][ T8036] usb 9-1: Using ep0 maxpacket: 32 [ 804.786522][ T8036] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.814836][ T8036] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 804.824650][ T8036] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.845229][ T8036] usb 9-1: config 0 descriptor?? [ 804.853784][ T8036] hub 9-1:0.0: USB hub found [ 805.062474][ T8036] hub 9-1:0.0: 1 port detected [ 805.434588][T13546] loop6: detected capacity change from 0 to 256 [ 805.526790][T13546] FAT-fs (loop6): Unrecognized mount option "iochFrÒ¹³¶set=ascii" or missing value [ 806.608585][T11303] usb 9-1: USB disconnect, device number 6 [ 806.794246][T13563] pimreg: entered allmulticast mode [ 806.801948][T13561] loop6: detected capacity change from 0 to 512 [ 806.821809][T13561] EXT4-fs: Ignoring removed orlov option [ 806.857814][ T8036] usb 9-1-port1: config error [ 806.863574][T13561] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 806.899560][T13561] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 807.006780][T13561] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2244: inode #15: comm syz.6.1468: corrupted in-inode xattr: e_value size too large [ 807.031839][T13561] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1468: couldn't read orphan inode 15 (err -117) [ 807.076157][T13561] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 807.888545][T13583] loop2: detected capacity change from 0 to 7 [ 807.914603][T13577] 9pnet_fd: Insufficient options for proto=fd [ 807.950565][T13583] Dev loop2: unable to read RDB block 7 [ 807.956264][T13583] loop2: AHDI p1 p2 p3 [ 808.001371][T13583] loop2: partition table partially beyond EOD, truncated [ 808.034650][T12677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.035259][T13583] loop2: p1 start 1601398130 is beyond EOD, truncated [ 808.052318][T13583] loop2: p2 start 1702059890 is beyond EOD, truncated [ 808.086749][ T5158] Dev loop2: unable to read RDB block 7 [ 808.104389][ T5158] loop2: AHDI p1 p2 p3 [ 808.131808][ T5158] loop2: partition table partially beyond EOD, truncated [ 808.153686][ T5158] loop2: p1 start 1601398130 is beyond EOD, truncated [ 808.177555][ T5158] loop2: p2 start 1702059890 is beyond EOD, truncated [ 810.439952][ T5794] Bluetooth: hci0: command 0x0406 tx timeout [ 810.706162][T13638] loop8: detected capacity change from 0 to 1764 [ 810.876918][T12429] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 813.017668][ T9] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 813.224795][ T9] usb 9-1: New USB device found, idVendor=0af0, idProduct=7201, bcdDevice=ad.9d [ 813.234179][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.259591][ T9] usb 9-1: config 0 descriptor?? [ 815.368169][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 815.375821][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 815.774335][T13683] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1495'. [ 815.954462][T13693] loop2: detected capacity change from 0 to 7 [ 815.994890][T13693] Dev loop2: unable to read RDB block 7 [ 816.012491][T13693] loop2: unable to read partition table [ 816.019441][T13693] loop2: partition table beyond EOD, truncated [ 816.036011][T13693] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 816.072426][ T9] usb 9-1: USB disconnect, device number 7 [ 816.121420][T13697] syz_tun: entered allmulticast mode [ 816.179501][T13696] syz_tun: left allmulticast mode [ 817.500471][T13710] blktrace: Concurrent blktraces are not allowed on loop2 [ 819.582217][T11304] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 819.804146][T11304] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 819.857558][T11304] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 819.887547][T11304] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 819.937928][T11304] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 819.990726][T11304] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.017871][T11304] usb 9-1: config 0 descriptor?? [ 820.515205][T11304] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 820.538366][T11304] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 820.545863][T11304] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 820.617653][T11304] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 820.625214][T11304] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 820.704614][T11304] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 820.729612][T11304] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 820.760215][T11304] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 820.807671][T11304] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 820.815169][T11304] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 820.868372][T11304] plantronics 0003:047F:FFFF.000C: unbalanced collection at end of report description [ 820.900120][T11304] plantronics 0003:047F:FFFF.000C: parse failed [ 820.922331][T11304] plantronics: probe of 0003:047F:FFFF.000C failed with error -22 [ 820.981107][T11304] usb 9-1: USB disconnect, device number 8 [ 824.343657][T13751] loop6: detected capacity change from 0 to 128 [ 825.262295][T13755] loop6: detected capacity change from 0 to 512 [ 825.276352][T13756] loop1: detected capacity change from 0 to 128 [ 825.303468][T13756] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 825.330837][T13756] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 825.406903][T13755] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 825.546573][T13755] System zones: 0-2, 18-18, 34-34 [ 826.088541][T13755] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 826.138874][T13755] EXT4-fs (loop6): Remounting filesystem read-only [ 826.197741][T13755] EXT4-fs (loop6): 1 truncate cleaned up [ 826.223965][T13755] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 826.267656][ T3443] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 826.282941][T13755] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 826.334631][ T3443] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 826.367522][ T3443] Quota error (device loop6): write_blk: dquota write failed [ 826.374993][ T3443] Quota error (device loop6): remove_free_dqentry: Can't write block (5) with free entries [ 826.437544][ T3443] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 826.496925][ T3443] Quota error (device loop6): write_blk: dquota write failed [ 826.524094][ T3443] Quota error (device loop6): free_dqentry: Can't move quota data block (5) to free list [ 826.567928][ T3443] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 826.569056][T12677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.603875][ T3443] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 826.644088][ T3443] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 826.668443][ T58] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 826.692174][ T3443] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 828.465217][T13788] blktrace: Concurrent blktraces are not allowed on loop8 [ 829.671593][T13795] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.679242][T13795] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.877777][T13799] loop1: detected capacity change from 0 to 1764 [ 830.456480][T13813] loop1: detected capacity change from 0 to 512 [ 830.471279][T13807] loop8: detected capacity change from 0 to 2048 [ 830.493597][T13813] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 830.582174][T13813] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 830.771960][T13813] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 831.607049][T13807] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 831.769862][T13807] UDF-fs: Scanning with blocksize 512 failed [ 831.956779][T13807] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 832.436686][T13831] pimreg: entered allmulticast mode [ 833.155655][T13847] loop6: detected capacity change from 0 to 1764 [ 833.317823][T12429] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 834.168277][T13877] loop8: detected capacity change from 0 to 16 [ 834.208593][T13877] erofs: (device loop8): erofs_read_inode: bogus i_mode (0) @ nid 18446744073575399424 [ 834.445322][T12428] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 837.155711][T12975] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 838.682992][T13946] loop8: detected capacity change from 0 to 512 [ 839.318793][T13946] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 839.455772][T13946] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 839.557717][T13946] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 839.632131][T13958] loop6: detected capacity change from 0 to 256 [ 839.656475][T13963] bridge: RTM_NEWNEIGH with invalid ether address [ 840.124358][T13973] loop6: detected capacity change from 0 to 764 [ 840.288496][T13974] rock: directory entry would overflow storage [ 840.296528][T13974] rock: sig=0x5850, size=36, remaining=7 [ 841.096710][T13983] blktrace: Concurrent blktraces are not allowed on loop8 [ 841.569245][T13990] loop6: detected capacity change from 0 to 1764 [ 841.776016][T13998] loop6: detected capacity change from 0 to 512 [ 842.071760][T13998] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.1558: iget: bad i_size value: 38620345925642 [ 842.518741][T13998] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1558: couldn't read orphan inode 15 (err -117) [ 842.613337][T13998] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 842.739769][T13998] EXT4-fs error (device loop6): ext4_lookup:1858: inode #15: comm syz.6.1558: iget: bad i_size value: 38620345925642 [ 843.079186][T12677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 843.435326][T14013] loop1: detected capacity change from 0 to 764 [ 843.615156][T14019] rock: directory entry would overflow storage [ 843.639265][T14019] rock: sig=0x5850, size=36, remaining=7 [ 844.549441][T12684] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 844.672045][T14031] loop6: detected capacity change from 0 to 1764 [ 844.860206][T12429] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 846.109019][T14050] blktrace: Concurrent blktraces are not allowed on loop2 [ 847.887841][T14063] binder: 14060:14063 unknown command 0 [ 847.893650][T14063] binder: 14060:14063 ioctl c0306201 200000000080 returned -22 [ 848.517158][T14064] binder: 14060:14064 ioctl c0306201 200000000280 returned -11 [ 848.721749][T14074] binder: 14073:14074 ioctl 4018620d 0 returned -22 [ 848.761021][T14074] binder: 14073:14074 unknown command 0 [ 848.767856][T14074] binder: 14073:14074 ioctl c0306201 200000000080 returned -22 [ 848.812509][T14074] binder: 14073:14074 ioctl c0306201 2000000001c0 returned -14 [ 849.014334][T14085] loop1: detected capacity change from 0 to 512 [ 849.080998][T14085] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 849.104284][T14085] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 849.136776][T14085] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 849.168767][T14085] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 849.211423][T14085] System zones: 0-2, 18-18, 34-34 [ 849.228438][T14085] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.1579: iget: bad i_size value: 360287970189639680 [ 849.329198][T14085] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1579: couldn't read orphan inode 15 (err -117) [ 849.370867][T14085] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 849.490652][T14082] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.1579: iget: bad i_size value: 360287970189639680 [ 849.827996][T14085] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.1579: iget: bad i_size value: 360287970189639680 [ 850.220744][T14099] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 3: comm syz.1.1579: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 851.542198][T12975] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 851.591035][T14118] blktrace: Concurrent blktraces are not allowed on loop8 [ 851.938810][T14132] binder: 14131:14132 ioctl 4018620d 0 returned -22 [ 851.956802][T14132] binder: 14131:14132 unknown command 0 [ 851.966302][T14132] binder: 14131:14132 ioctl c0306201 200000000080 returned -22 [ 851.988810][T14132] binder: 14131:14132 ioctl c0306201 2000000001c0 returned -14 [ 852.335425][T14142] loop1: detected capacity change from 0 to 2048 [ 852.392681][T14142] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 852.440952][T14142] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 852.477227][T14142] UDF-fs: Scanning with blocksize 512 failed [ 852.532196][T14142] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 855.559762][T14163] loop8: detected capacity change from 0 to 512 [ 855.719196][T14163] EXT4-fs: Ignoring removed nomblk_io_submit option [ 856.196491][T14163] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 856.667320][T14175] binder: 14174:14175 ioctl 4018620d 0 returned -22 [ 856.689107][T14175] binder: 14174:14175 unknown command 0 [ 856.694746][T14175] binder: 14174:14175 ioctl c0306201 200000000080 returned -22 [ 856.718668][T14175] binder: 14174:14175 ioctl c0306201 2000000001c0 returned -14 [ 856.799163][T12684] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 857.216551][T14186] xt_nfacct: accounting object `syz1' does not exist [ 858.136111][T14193] loop8: detected capacity change from 0 to 512 [ 858.317183][T14193] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 858.341147][T11629] Bluetooth: hci0: command 0x0406 tx timeout [ 858.347975][T11629] Bluetooth: hci3: command 0x0406 tx timeout [ 858.764979][T14193] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 858.887735][T14193] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 859.782358][T14222] blktrace: Concurrent blktraces are not allowed on loop12 [ 860.290021][T12684] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 862.374766][T14265] loop1: detected capacity change from 0 to 512 [ 862.568615][T14265] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 862.638901][T14270] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1622'. [ 862.688805][T14270] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 862.744085][T14265] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 862.777683][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 862.792747][T14265] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 863.001400][T14279] loop8: detected capacity change from 0 to 256 [ 863.055734][T14279] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 863.103520][T14279] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 863.150065][T14279] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 863.895344][T14300] loop6: detected capacity change from 0 to 16 [ 863.948500][T14300] erofs: (device loop6): erofs_read_inode: bogus i_mode (0) @ nid 18446744073575399424 [ 865.564576][T14317] blktrace: Concurrent blktraces are not allowed on loop8 [ 865.785524][T12975] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 866.171884][T14325] loop1: detected capacity change from 0 to 764 [ 866.204818][T14328] loop8: detected capacity change from 0 to 512 [ 866.245343][T14328] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 866.267794][T14325] rock: directory entry would overflow storage [ 866.273991][T14325] rock: sig=0x5850, size=36, remaining=7 [ 866.379653][T14328] EXT4-fs (loop8): 1 truncate cleaned up [ 866.386706][T14328] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 866.665700][T12684] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 867.867092][T14352] binder: 14350:14352 unknown command 0 [ 867.883472][T14352] binder: 14350:14352 ioctl c0306201 200000000080 returned -22 [ 870.123619][T14367] loop6: detected capacity change from 0 to 512 [ 870.160012][T14371] loop8: detected capacity change from 0 to 764 [ 870.346150][T14371] rock: directory entry would overflow storage [ 870.352528][T14371] rock: sig=0x5850, size=36, remaining=7 [ 870.404046][T14367] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 870.482809][T14367] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 870.544873][T14367] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 870.784436][T14378] binder: 14377:14378 ioctl 4018620d 0 returned -22 [ 870.855296][T14378] binder: 14377:14378 unknown command 0 [ 870.895547][T14378] binder: 14377:14378 ioctl c0306201 200000000080 returned -22 [ 870.932634][T14378] binder: 14377:14378 ioctl c0306201 2000000001c0 returned -14 [ 872.368220][T14408] loop8: detected capacity change from 0 to 764 [ 872.578421][T14408] rock: directory entry would overflow storage [ 872.585182][T14408] rock: sig=0x5850, size=36, remaining=7 [ 872.667897][T14413] blktrace: Concurrent blktraces are not allowed on loop2 [ 873.179400][ T5790] Bluetooth: hci2: command 0x0406 tx timeout [ 876.704716][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 876.711299][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.806284][T12677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 878.241777][T14455] binder: 14454:14455 unknown command 0 [ 878.264169][T14455] binder: 14454:14455 ioctl c0306201 200000000080 returned -22 [ 878.272843][T14457] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1662'. [ 878.782378][ T5790] Bluetooth: hci2: command 0x0406 tx timeout [ 879.018332][T14455] binder: 14454:14455 ioctl c0306201 200000000280 returned -14 [ 879.118611][T14464] loop6: detected capacity change from 0 to 764 [ 879.173314][T14464] rock: directory entry would overflow storage [ 879.181062][T14464] rock: sig=0x5850, size=36, remaining=7 [ 880.245447][T14477] loop6: detected capacity change from 0 to 1024 [ 887.609863][ T34] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.930059][ T34] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.130465][T14525] loop8: detected capacity change from 0 to 512 [ 888.169235][T14525] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 888.229985][ T34] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.281830][T14525] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 888.328202][T14525] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 888.921194][ T34] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.138158][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 889.155963][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 889.168158][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 889.178719][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 889.193097][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 889.200811][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 890.599130][T14552] loop1: detected capacity change from 0 to 1024 [ 890.647317][T14552] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 890.754272][T14552] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 891.115117][ T28] audit: type=1800 audit(1756623874.164:110): pid=14552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1679" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 891.279689][ T5790] Bluetooth: hci0: command tx timeout [ 891.328216][T14558] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4031: comm syz.1.1679: Allocating blocks 497-513 which overlap fs metadata [ 891.654550][T14558] EXT4-fs (loop1): Remounting filesystem read-only [ 891.843314][T14551] EXT4-fs (loop1): pa ffff8880582113a0: logic 0, phys. 113, len 25 [ 891.940474][T12975] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 891.996412][T14537] chnl_net:caif_netlink_parms(): no params data found [ 893.339116][ T5790] Bluetooth: hci0: command tx timeout [ 895.288837][T12684] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 895.419946][ T5790] Bluetooth: hci0: command tx timeout [ 895.939516][T14537] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.967636][T14537] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.974987][T14537] bridge_slave_0: entered allmulticast mode [ 896.019490][T14537] bridge_slave_0: entered promiscuous mode [ 896.039289][T14537] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.047053][T14537] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.067821][T14537] bridge_slave_1: entered allmulticast mode [ 896.075330][T14537] bridge_slave_1: entered promiscuous mode [ 897.837680][ T5790] Bluetooth: hci0: command tx timeout [ 898.033978][T14537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 900.380428][T14537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 900.520391][T14606] blktrace: Concurrent blktraces are not allowed on loop2 [ 901.331412][T14537] team0: Port device team_slave_0 added [ 901.365436][T14537] team0: Port device team_slave_1 added [ 901.386970][T14609] loop1: detected capacity change from 0 to 512 [ 901.503540][T14609] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 901.618172][T14609] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 901.714464][T14609] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 902.401144][T12975] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 902.416447][ T34] hsr_slave_0: left promiscuous mode [ 902.434161][ T34] hsr_slave_1: left promiscuous mode [ 902.570273][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 902.655237][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 902.771859][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 902.879705][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 903.348560][ T34] bridge_slave_1: left allmulticast mode [ 903.412079][ T34] bridge_slave_1: left promiscuous mode [ 903.642397][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.865903][T14635] loop1: detected capacity change from 0 to 16 [ 903.997964][T14635] erofs: (device loop1): mounted with root inode @ nid 36. [ 904.041494][ T34] bridge_slave_0: left allmulticast mode [ 904.047372][ T34] bridge_slave_0: left promiscuous mode [ 904.054144][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.082916][T14635] syz.1.1698: attempt to access beyond end of device [ 904.082916][T14635] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 904.134899][T14635] syz.1.1698: attempt to access beyond end of device [ 904.134899][T14635] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 904.351695][ T34] veth1_macvtap: left promiscuous mode [ 904.357372][ T34] veth0_macvtap: left promiscuous mode [ 904.371479][ T34] veth1_vlan: left promiscuous mode [ 904.387286][ T34] veth0_vlan: left promiscuous mode [ 904.533549][T14654] loop8: detected capacity change from 0 to 512 [ 906.296676][T14654] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 906.519238][T14654] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 906.597238][T14654] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 907.135182][T12684] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 908.640078][T14689] loop1: detected capacity change from 0 to 512 [ 908.673680][T14689] EXT4-fs: Ignoring removed nomblk_io_submit option [ 908.748694][T14689] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 911.065895][ T34] team0 (unregistering): Port device team_slave_1 removed [ 911.347604][T14664] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 505: padding at end of block bitmap is not set [ 912.001239][ T34] team0 (unregistering): Port device team_slave_0 removed [ 912.176238][T12975] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 912.373876][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 912.582624][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 912.934787][T14714] blktrace: Concurrent blktraces are not allowed on loop2 [ 913.495847][T14716] loop2: detected capacity change from 0 to 7 [ 913.519779][T14716] Dev loop2: unable to read RDB block 7 [ 913.540963][T14716] loop2: unable to read partition table [ 913.583733][T14716] loop2: partition table beyond EOD, truncated [ 913.597279][T14716] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 915.961820][ T8036] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 915.992172][ T8036] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 916.000991][ T8036] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 916.009345][ T8036] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 916.017814][ T8036] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 916.025283][ T8036] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 916.033630][ T8036] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 916.054311][ T8036] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 916.065787][ T8036] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 916.076201][ T8036] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 916.087817][ T8036] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 916.095734][ T8036] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 916.110322][ T8036] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 916.123312][ T8036] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 916.133700][ T8036] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 916.145345][ T8036] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 916.160275][ T8036] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 916.204206][ T8036] hid-generic 0002:0004:0009.000D: hidraw0: HID v0.04 Device [syz0] on syz0 [ 916.537752][T14739] fido_id[14739]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 917.106189][T14743] blktrace: Concurrent blktraces are not allowed on loop16 [ 917.459976][ T34] bond0 (unregistering): Released all slaves [ 917.694700][T14537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 917.706142][T14537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 917.751783][T14752] loop2: detected capacity change from 0 to 7 [ 917.780536][T14752] Dev loop2: unable to read RDB block 7 [ 917.800069][T14752] loop2: unable to read partition table [ 917.810268][T14537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 917.831995][T14752] loop2: partition table beyond EOD, truncated [ 917.846387][T14537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 917.853695][T14537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 917.864846][T14752] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 917.901658][T14537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 917.955766][ T5158] Dev loop2: unable to read RDB block 7 [ 918.062307][T14537] hsr_slave_0: entered promiscuous mode [ 918.079099][T14537] hsr_slave_1: entered promiscuous mode [ 918.093815][ T5158] loop2: unable to read partition table [ 918.125497][T14537] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 918.142045][ T5158] loop2: partition table beyond EOD, truncated [ 918.163110][T14537] Cannot create hsr debugfs directory [ 919.339237][T14767] loop8: detected capacity change from 0 to 764 [ 919.588137][T14774] rock: directory entry would overflow storage [ 919.633339][T14774] rock: sig=0x5850, size=36, remaining=7 [ 919.662446][T14778] blktrace: Concurrent blktraces are not allowed on loop8 [ 920.890841][T14787] loop1: detected capacity change from 0 to 512 [ 920.936494][T14787] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 921.041607][T14787] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 921.123580][T14787] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 922.609585][T12975] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 922.917911][T14537] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 923.158632][T14537] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 923.248656][T14537] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 923.302910][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 923.321231][T14537] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 923.382395][T14813] loop2: detected capacity change from 0 to 7 [ 923.397868][T14813] Dev loop2: unable to read RDB block 7 [ 923.409869][T14813] loop2: unable to read partition table [ 923.433809][T14813] loop2: partition table beyond EOD, truncated [ 923.447617][T14813] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 923.503946][ T5158] Dev loop2: unable to read RDB block 7 [ 923.524333][ T5158] loop2: unable to read partition table [ 923.537686][ T5158] loop2: partition table beyond EOD, truncated [ 923.627976][T14823] blktrace: Concurrent blktraces are not allowed on loop8 [ 923.683640][T14537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 923.748484][T14537] 8021q: adding VLAN 0 to HW filter on device team0 [ 923.819248][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.826454][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 923.851942][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 923.859337][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 925.312519][T14537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 925.347779][ T5859] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 925.770664][ T5859] usb 2-1: config 0 has an invalid descriptor of length 181, skipping remainder of the config [ 925.787503][ T5859] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 925.796657][ T5859] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 926.069515][T14537] veth0_vlan: entered promiscuous mode [ 926.139911][T14537] veth1_vlan: entered promiscuous mode [ 926.186415][ T5859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.210170][ T5859] usb 2-1: config 0 descriptor?? [ 926.320692][T14537] veth0_macvtap: entered promiscuous mode [ 926.363585][T14537] veth1_macvtap: entered promiscuous mode [ 926.433421][ T5859] usb 2-1: USB disconnect, device number 3 [ 926.456385][T14537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.506051][T14537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.539304][T14537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 926.567914][T14537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.597676][T14537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.617771][T14537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.647726][T14537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.667516][T14537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.699166][T14537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.729449][T14537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 926.783673][T14537] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.810934][T14537] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.838663][T14537] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.863287][T14537] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.422330][T14886] loop1: detected capacity change from 0 to 8 [ 928.525790][ T3472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 928.540507][T14886] SQUASHFS error: Failed to read block 0x6e6: -5 [ 928.547361][T14886] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 928.602858][ T3472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 928.642998][T14886] SQUASHFS error: Unable to read directory block [631:26] [ 928.715621][T14889] blktrace: Concurrent blktraces are not allowed on loop16 [ 929.316454][ T7007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 929.380902][ T7007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 931.211064][T14895] loop8: detected capacity change from 0 to 512 [ 931.273589][T14895] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 931.346172][T14895] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 931.398310][T14895] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 931.462466][T14904] loop5: detected capacity change from 0 to 1024 [ 932.001645][T12684] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 932.623812][T14921] loop8: detected capacity change from 0 to 16 [ 932.636407][T14921] erofs: (device loop8): erofs_read_inode: bogus i_mode (0) @ nid 18446744073575399424 [ 933.370055][T12429] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 935.913917][T14942] blktrace: Concurrent blktraces are not allowed on loop2 [ 936.444654][ T7007] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.791986][ T7007] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.021432][ T7007] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.203807][ T7007] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.212248][T14949] loop1: detected capacity change from 0 to 1024 [ 937.439434][T14954] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 938.146734][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 938.157627][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 938.273161][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 938.287075][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 938.297238][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 938.309006][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 938.344699][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 938.352676][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 938.479792][T14971] loop8: detected capacity change from 0 to 512 [ 938.487310][T14971] ext2: Unknown parameter 'smackfsroot' [ 938.578390][T12429] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 940.301818][T14990] loop8: detected capacity change from 0 to 764 [ 940.443405][T14994] rock: directory entry would overflow storage [ 940.456739][T14994] rock: sig=0x5850, size=36, remaining=7 [ 940.458659][ T5790] Bluetooth: hci0: command tx timeout [ 941.181883][T14966] chnl_net:caif_netlink_parms(): no params data found [ 941.322093][ T5794] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 941.334974][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 941.349762][ T5794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 941.359761][ T5794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 941.371267][ T5794] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 941.382792][ T5794] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 941.778453][ T7007] hsr_slave_0: left promiscuous mode [ 941.798129][ T7007] hsr_slave_1: left promiscuous mode [ 941.808974][ T7007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 941.816462][ T7007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 941.840256][ T7007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 941.858307][ T7007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 941.872829][ T7007] bridge_slave_1: left allmulticast mode [ 941.882326][ T7007] bridge_slave_1: left promiscuous mode [ 941.895211][ T7007] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.936445][ T7007] bridge_slave_0: left allmulticast mode [ 941.952889][ T7007] bridge_slave_0: left promiscuous mode [ 941.982808][ T7007] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.128034][ T7007] veth1_macvtap: left promiscuous mode [ 942.133662][ T7007] veth0_macvtap: left promiscuous mode [ 942.163189][ T7007] veth1_vlan: left promiscuous mode [ 942.169240][ T7007] veth0_vlan: left promiscuous mode [ 943.386678][ T5794] Bluetooth: hci0: command tx timeout [ 943.418807][ T5794] Bluetooth: hci2: command tx timeout [ 944.127550][ T8044] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 944.348774][ T8044] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 944.357309][ T8044] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 944.392231][ T8044] usb 9-1: config 0 has no interfaces? [ 944.398175][ T8044] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 944.407284][ T8044] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.445407][ T8044] usb 9-1: config 0 descriptor?? [ 944.953291][ T7007] team0 (unregistering): Port device team_slave_1 removed [ 945.030378][ T7007] team0 (unregistering): Port device team_slave_0 removed [ 945.107055][ T7007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 945.185509][ T7007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 945.438971][ T5794] Bluetooth: hci0: command tx timeout [ 945.519222][ T5794] Bluetooth: hci2: command tx timeout [ 947.497568][ T5794] Bluetooth: hci0: command tx timeout [ 947.652292][ T5794] Bluetooth: hci2: command tx timeout [ 947.710452][ T7007] bond0 (unregistering): Released all slaves [ 947.859678][T14966] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.869722][T14966] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.898368][T14966] bridge_slave_0: entered allmulticast mode [ 947.914718][T14966] bridge_slave_0: entered promiscuous mode [ 948.177769][T14966] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.259799][T14966] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.364547][T14966] bridge_slave_1: entered allmulticast mode [ 948.539688][T14966] bridge_slave_1: entered promiscuous mode [ 948.604253][T11304] usb 9-1: USB disconnect, device number 9 [ 948.705922][T14966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 948.801253][T14966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 948.951009][T14966] team0: Port device team_slave_0 added [ 948.968707][T14966] team0: Port device team_slave_1 added [ 949.066693][T14966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 949.074364][T14966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 949.102924][T14966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 949.122985][T14966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 949.130356][T14966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 949.159407][T14966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 949.340780][T14966] hsr_slave_0: entered promiscuous mode [ 949.352726][T14966] hsr_slave_1: entered promiscuous mode [ 949.359516][T14966] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 949.367146][T14966] Cannot create hsr debugfs directory [ 949.468657][ T7007] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.589443][ T7007] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.642134][T15003] chnl_net:caif_netlink_parms(): no params data found [ 949.720081][ T7007] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.737688][ T5794] Bluetooth: hci2: command tx timeout [ 949.860121][ T7007] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.030234][T15003] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.069240][T15003] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.088766][T15003] bridge_slave_0: entered allmulticast mode [ 950.096356][T15003] bridge_slave_0: entered promiscuous mode [ 950.108958][T15003] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.116840][T15003] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.124158][T15003] bridge_slave_1: entered allmulticast mode [ 950.131901][T15003] bridge_slave_1: entered promiscuous mode [ 950.210570][T15003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 950.240695][T15003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 950.331770][T15003] team0: Port device team_slave_0 added [ 950.462185][T15003] team0: Port device team_slave_1 added [ 950.600466][T15003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 950.612345][T15003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 950.677371][T15003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 950.750678][T15003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 950.765277][T15003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 950.799601][T15003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 950.887245][T15092] netlink: 844 bytes leftover after parsing attributes in process `syz.8.1798'. [ 951.146766][T15102] input: syz1 as /devices/virtual/input/input13 [ 951.172452][T15003] hsr_slave_0: entered promiscuous mode [ 951.195197][T15003] hsr_slave_1: entered promiscuous mode [ 951.215695][T15003] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 951.225470][T15003] Cannot create hsr debugfs directory [ 951.527602][T14966] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 951.583469][T15112] loop8: detected capacity change from 0 to 8 [ 951.677065][T14966] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 951.712440][T15112] SQUASHFS error: Unable to read directory block [629:26] [ 951.862487][T14966] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 951.985684][T14966] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 952.541639][T15140] loop2: detected capacity change from 0 to 7 [ 952.551116][T15140] Dev loop2: unable to read RDB block 7 [ 952.556782][T15140] loop2: unable to read partition table [ 952.565229][T15140] loop2: partition table beyond EOD, truncated [ 952.623477][T15140] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 952.736088][T15141] netlink: 844 bytes leftover after parsing attributes in process `syz.4.1802'. [ 952.975013][ T7007] hsr_slave_0: left promiscuous mode [ 952.982269][ T7007] hsr_slave_1: left promiscuous mode [ 952.991380][ T7007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 952.999065][ T7007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 953.016700][ T7007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 953.024466][ T7007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 953.042901][ T7007] bridge_slave_1: left allmulticast mode [ 953.049321][ T7007] bridge_slave_1: left promiscuous mode [ 953.066036][ T7007] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.080810][ T7007] bridge_slave_0: left allmulticast mode [ 953.097326][ T7007] bridge_slave_0: left promiscuous mode [ 953.113649][ T7007] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.201328][ T7007] veth1_macvtap: left promiscuous mode [ 953.207141][ T7007] veth0_macvtap: left promiscuous mode [ 953.247850][ T7007] veth1_vlan: left promiscuous mode [ 953.253629][ T7007] veth0_vlan: left promiscuous mode [ 953.840239][T15167] blktrace: Concurrent blktraces are not allowed on loop16 [ 954.291437][ T7007] pimreg (unregistering): left allmulticast mode [ 955.600894][T15194] loop2: detected capacity change from 0 to 7 [ 955.624432][T15194] Dev loop2: unable to read RDB block 7 [ 955.637319][T15194] loop2: unable to read partition table [ 955.655396][T15194] loop2: partition table beyond EOD, truncated [ 955.665068][T15194] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 955.921147][ T7007] team0 (unregistering): Port device team_slave_1 removed [ 956.011024][ T7007] team0 (unregistering): Port device team_slave_0 removed [ 956.134071][ T7007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 956.314845][ T7007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 956.707802][T15200] blktrace: Concurrent blktraces are not allowed on loop16 [ 957.727564][T15204] loop8: detected capacity change from 0 to 16 [ 957.757347][T15204] erofs: (device loop8): erofs_read_inode: bogus i_mode (0) @ nid 18446744073575399424 [ 958.749878][ T7007] bond0 (unregistering): Released all slaves [ 958.954167][T14966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 959.092356][T14966] 8021q: adding VLAN 0 to HW filter on device team0 [ 959.202021][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.209270][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 959.258177][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.265392][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 959.462613][T14966] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 961.372377][T15003] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 961.546138][T15003] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 961.630312][T15003] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 961.672187][T15003] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 962.114694][T14966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 962.285029][T15003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 962.333138][T14966] veth0_vlan: entered promiscuous mode [ 962.492154][T14966] veth1_vlan: entered promiscuous mode [ 962.930256][T15003] 8021q: adding VLAN 0 to HW filter on device team0 [ 963.065617][ T7007] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.072991][ T7007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 963.266763][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.274047][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 963.329330][T14966] veth0_macvtap: entered promiscuous mode [ 963.370455][T14966] veth1_macvtap: entered promiscuous mode [ 963.431104][T15003] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 963.509226][T14966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 963.544777][T14966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 963.584248][T14966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.607576][T14966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 963.629026][T14966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.673537][T14966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 963.739520][T14966] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.759859][T14966] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.787456][T14966] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.796243][T14966] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.039604][ T3443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.068794][ T3443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.135854][T15268] loop8: detected capacity change from 0 to 512 [ 964.165437][ T7007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.183326][ T7007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.196155][T15268] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 965.402420][T15268] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 965.459147][T15268] System zones: 0-1, 15-15, 18-18, 34-34 [ 965.465325][T15268] EXT4-fs (loop8): orphan cleanup on readonly fs [ 965.484959][T15003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 965.504597][T15268] Quota error (device loop8): v2_read_header: Failed header read: expected=8 got=0 [ 965.543968][T15268] EXT4-fs warning (device loop8): ext4_enable_quotas:7175: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 965.627649][T15268] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 965.653300][T15268] EXT4-fs (loop8): 1 truncate cleaned up [ 965.701627][T15268] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 965.716221][T15003] veth0_vlan: entered promiscuous mode [ 965.743625][T15279] loop0: detected capacity change from 0 to 256 [ 965.775783][T15003] veth1_vlan: entered promiscuous mode [ 965.822646][T15268] fscrypt (loop8, inode 16): Error -61 getting encryption context [ 965.839700][T15051] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 965.876680][T15279] loop0: detected capacity change from 0 to 8 [ 965.876883][T15051] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 965.905715][T15003] veth0_macvtap: entered promiscuous mode [ 965.948369][T15003] veth1_macvtap: entered promiscuous mode [ 965.989010][T12684] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 966.019804][T15003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 966.073508][T15003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.121459][T15003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 966.171053][T15003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 966.210281][T15003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.236927][T15003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 966.269262][T15003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.296211][T15003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 966.297131][T15287] loop8: detected capacity change from 0 to 512 [ 966.324471][T15003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.355125][T15287] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 966.364281][T15003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 966.403062][T15003] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.407486][T15287] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 966.440293][T15003] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.459656][T15003] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.490227][T15003] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.508293][T15287] EXT4-fs (loop8): warning: checktime reached, running e2fsck is recommended [ 966.533535][T15287] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 966.562327][T15287] System zones: 0-2, 18-18, 34-34 [ 966.620688][T15287] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.1828: iget: bad i_size value: 360287970189639680 [ 966.705258][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.722015][T15287] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.1828: couldn't read orphan inode 15 (err -117) [ 966.740302][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.762536][T15287] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 966.827571][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.836428][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.908325][T15287] EXT4-fs error (device loop8): ext4_lookup:1858: inode #15: comm syz.8.1828: iget: bad i_size value: 360287970189639680 [ 967.060255][T15296] EXT4-fs error (device loop8): ext4_find_dest_de:2115: inode #2: block 3: comm syz.8.1828: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 967.604860][T15302] loop0: detected capacity change from 0 to 512 [ 967.672421][T15287] EXT4-fs error (device loop8): ext4_lookup:1858: inode #15: comm syz.8.1828: iget: bad i_size value: 360287970189639680 [ 967.691487][T15302] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 967.986383][T15302] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 968.069242][T15302] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 968.150485][T12684] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 968.257162][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 969.625649][T14966] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 971.780176][T15327] loop0: detected capacity change from 0 to 2048 [ 971.893210][T15327] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 971.927816][T15327] UDF-fs: Scanning with blocksize 512 failed [ 971.970494][T15327] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 972.122281][T15342] loop2: detected capacity change from 0 to 164 [ 972.134985][T15327] netlink: 'syz.0.1831': attribute type 25 has an invalid length. [ 972.148439][T15327] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1831'. [ 972.171231][T15342] rock: directory entry would overflow storage [ 972.190529][T15342] rock: sig=0x5053, size=7, remaining=4 [ 972.196264][T15342] isofs_fill_super: root inode is not a directory. Corrupted media? [ 972.521701][T15348] loop8: detected capacity change from 0 to 16 [ 972.535269][T15348] erofs: (device loop8): erofs_read_inode: bogus i_mode (0) @ nid 18446744073575399424 [ 972.612520][T15051] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 973.245089][T15358] loop8: detected capacity change from 0 to 512 [ 973.288953][T15358] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 973.334220][T15358] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 973.377794][T15358] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 974.419054][T12684] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 975.865371][T15385] loop8: detected capacity change from 0 to 512 [ 976.031293][T15385] EXT4-fs (loop8): 1 orphan inode deleted [ 976.091179][T15385] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 976.110832][ T34] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 976.128017][T15385] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 976.148116][ T34] EXT4-fs error (device loop8): ext4_release_dquot:6976: comm kworker/u4:2: Failed to release dquot type 1 [ 976.380960][T15396] loop2: detected capacity change from 0 to 1024 [ 976.412268][T15396] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 976.474628][T15396] EXT4-fs error (device loop2): ext4_map_blocks:718: inode #3: block 1: comm syz.2.1846: lblock 1 mapped to illegal pblock 1 (length 1) [ 976.493740][T15396] Quota error (device loop2): write_blk: dquota write failed [ 976.502522][T15396] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 976.522116][T15396] EXT4-fs error (device loop2): ext4_acquire_dquot:6940: comm syz.2.1846: Failed to acquire dquot type 0 [ 976.538219][T15396] EXT4-fs error (device loop2): ext4_free_blocks:6676: comm syz.2.1846: Freeing blocks not in datazone - block = 0, count = 4096 [ 976.562551][T15396] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.1846: Invalid inode bitmap blk 0 in block_group 0 [ 976.577744][T15396] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem [ 976.587673][T15300] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 976.591887][T15396] EXT4-fs (loop2): 1 orphan inode deleted [ 976.613808][T15396] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 976.678026][T15396] EXT4-fs error (device loop2): ext4_lookup:1858: inode #16: comm syz.2.1846: iget: bad extra_isize 65535 (inode size 256) [ 976.681578][T15300] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 976.736602][T15396] EXT4-fs error (device loop2): ext4_search_dir:1549: inode #2: block 16: comm syz.2.1846: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 976.768718][T15300] EXT4-fs error (device loop2): ext4_release_dquot:6976: comm kworker/u4:13: Failed to release dquot type 0 [ 977.456163][T15413] loop0: detected capacity change from 0 to 16 [ 977.531352][T15413] erofs: (device loop0): erofs_read_inode: bogus i_mode (0) @ nid 18446744073575399424 [ 977.554969][T15405] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 977.561578][T15405] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 977.888860][T15405] vhci_hcd vhci_hcd.0: Device attached [ 978.099047][T15396] EXT4-fs error (device loop2): ext4_search_dir:1549: inode #2: block 16: comm syz.2.1846: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 978.181669][T15406] vhci_hcd: connection closed [ 978.183551][ T43] vhci_hcd: stop threads [ 978.208136][ T43] vhci_hcd: release socket [ 978.227733][ T43] vhci_hcd: disconnect device [ 978.761131][ T1078] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 978.772465][ T1078] EXT4-fs error (device loop8): ext4_release_dquot:6976: comm kworker/u4:5: Failed to release dquot type 1 [ 978.914070][T15003] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 979.244851][T15429] loop2: detected capacity change from 0 to 512 [ 979.314731][T15429] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 979.336681][T12684] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 979.433491][T15429] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 979.547623][T15429] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 981.930574][T15003] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 987.707658][ T5794] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 987.716610][ T5794] Bluetooth: hci2: Injecting HCI hardware error event [ 987.726958][ T5790] Bluetooth: hci2: hardware error 0x00 [ 990.662801][ T5790] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 990.706688][T15524] loop8: detected capacity change from 0 to 2048 [ 990.844385][T15524] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 991.512811][T15538] loop0: detected capacity change from 0 to 512 [ 991.587284][T15538] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 991.640442][T15538] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 991.669928][ T5790] Bluetooth: hci3: unexpected event for opcode 0x080d [ 991.696169][T15538] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 993.766449][T14966] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 995.689158][T15588] loop2: detected capacity change from 0 to 512 [ 995.736808][T15588] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 995.746916][ T5790] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 995.756150][ T5790] Bluetooth: hci3: Injecting HCI hardware error event [ 995.769864][ T5790] Bluetooth: hci3: hardware error 0x00 [ 997.596406][T15588] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 997.647711][T15588] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 997.879548][ T5790] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 998.578921][T15003] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 999.071892][T15608] blktrace: Concurrent blktraces are not allowed on loop8 [ 999.583078][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 999.592449][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.638229][T15615] loop0: detected capacity change from 0 to 128 [ 1001.389407][T15615] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1001.446054][T15615] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1001.581045][T15615] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 1001.632822][T15615] EXT4-fs error (device loop0): ext4_dirty_inode:6106: inode #12: comm syz.0.1887: mark_inode_dirty error [ 1001.697337][T15615] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 1001.762046][T15615] EXT4-fs error (device loop0): ext4_dirty_inode:6106: inode #12: comm syz.0.1887: mark_inode_dirty error [ 1001.833393][T15615] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.1887: Invalid block bitmap block 0 in block_group 0 [ 1001.905866][T15615] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 1001.960860][T15615] EXT4-fs error (device loop0): ext4_dirty_inode:6106: inode #12: comm syz.0.1887: mark_inode_dirty error [ 1002.018912][T15615] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 1002.055887][T15615] EXT4-fs error (device loop0): ext4_ext_truncate:4451: inode #12: comm syz.0.1887: mark_inode_dirty error [ 1002.162437][T15615] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 1003.140531][T14966] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1003.407572][T15655] loop0: detected capacity change from 0 to 16 [ 1003.426874][T15655] erofs: (device loop0): erofs_read_inode: bogus i_mode (0) @ nid 18446744073575399424 [ 1003.960918][T15661] blktrace: Concurrent blktraces are not allowed on loop16 [ 1004.152691][T15668] loop0: detected capacity change from 0 to 128 [ 1004.172152][T15668] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1004.206840][T15668] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1006.389039][ T28] audit: type=1326 audit(1756623989.504:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15685 comm="syz.8.1905" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f521bb8ebe9 code=0x0 [ 1007.659665][T14966] UDF-fs: error (device loop0): udf_read_inode: (ino 98) failed !bh [ 1007.695725][T14966] UDF-fs: error (device loop0): udf_read_inode: (ino 98) failed !bh [ 1007.992506][T15723] binder: 15721:15723 unknown command 0 [ 1008.029639][T15723] binder: 15721:15723 ioctl c0306201 200000000080 returned -22 [ 1008.078042][T15723] binder: BINDER_SET_CONTEXT_MGR already set [ 1008.097647][T15723] binder: 15721:15723 ioctl 4018620d 200000000040 returned -16 [ 1008.178595][T15723] binder: 15721:15723 ioctl c0306201 200000000280 returned -11 [ 1009.598815][ T34] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.788858][ T34] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.799101][T15749] loop8: detected capacity change from 0 to 16 [ 1009.810220][T15749] erofs: (device loop8): erofs_read_inode: bogus i_mode (0) @ nid 18446744073575399424 [ 1009.879252][T15051] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1010.001797][ T34] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.229856][ T34] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.359142][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1011.373026][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1011.387303][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1011.422264][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1011.430991][ T5794] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1011.442351][ T5794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1011.673492][T15783] loop2: detected capacity change from 0 to 764 [ 1011.896856][T15787] rock: directory entry would overflow storage [ 1011.903779][T15787] rock: sig=0x5850, size=36, remaining=7 [ 1012.270261][T15794] loop2: detected capacity change from 0 to 7 [ 1012.300692][T15051] Dev loop2: unable to read RDB block 7 [ 1012.338867][T15051] loop2: unable to read partition table [ 1012.363575][T15051] loop2: partition table beyond EOD, truncated [ 1012.482202][T15794] Dev loop2: unable to read RDB block 7 [ 1012.488215][T15794] loop2: unable to read partition table [ 1012.498173][T15794] loop2: partition table beyond EOD, truncated [ 1012.504419][T15794] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1013.597643][ T5794] Bluetooth: hci0: command tx timeout [ 1013.832567][T15817] binder: 15815:15817 unknown command 0 [ 1013.876087][T15817] binder: 15815:15817 ioctl c0306201 200000000080 returned -22 [ 1013.944933][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 1013.993896][T15817] binder: 15815:15817 ioctl 4018620d 200000000040 returned -16 [ 1014.807975][T15817] binder: 15815:15817 ioctl c0306201 200000000280 returned -11 [ 1015.205300][T15828] loop8: detected capacity change from 0 to 16 [ 1015.223993][T15828] erofs: (device loop8): erofs_read_inode: bogus i_mode (0) @ nid 18446744073575399424 [ 1015.316445][ T34] hsr_slave_0: left promiscuous mode [ 1015.361573][ T34] hsr_slave_1: left promiscuous mode [ 1015.408916][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1015.445834][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1015.474787][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1015.496720][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1015.552025][ T34] bridge_slave_1: left allmulticast mode [ 1015.573438][ T34] bridge_slave_1: left promiscuous mode [ 1015.586655][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.613885][ T34] bridge_slave_0: left allmulticast mode [ 1015.631616][ T34] bridge_slave_0: left promiscuous mode [ 1015.643461][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.673174][ T5790] Bluetooth: hci0: command tx timeout [ 1017.026134][ T34] veth1_macvtap: left promiscuous mode [ 1017.067737][ T34] veth0_macvtap: left promiscuous mode [ 1017.087817][ T34] veth1_vlan: left promiscuous mode [ 1017.093238][ T34] veth0_vlan: left promiscuous mode [ 1017.739714][ T5790] Bluetooth: hci0: command tx timeout [ 1018.204728][T15858] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1947'. [ 1019.827533][ T5790] Bluetooth: hci0: command tx timeout [ 1020.088558][ T34] team0 (unregistering): Port device team_slave_1 removed [ 1020.207277][ T34] team0 (unregistering): Port device team_slave_0 removed [ 1020.336393][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1020.448839][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1022.330047][T15878] loop2: detected capacity change from 0 to 16 [ 1022.340033][T15878] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 18446744073575399424 [ 1023.288731][ T34] bond0 (unregistering): Released all slaves [ 1023.513431][T15774] chnl_net:caif_netlink_parms(): no params data found [ 1024.032226][T15774] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.052455][T15901] loop2: detected capacity change from 0 to 128 [ 1024.057856][T15774] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.077102][T15774] bridge_slave_0: entered allmulticast mode [ 1024.113072][T15774] bridge_slave_0: entered promiscuous mode [ 1024.131013][T15774] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.147643][T15774] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.168175][T15774] bridge_slave_1: entered allmulticast mode [ 1024.175696][T15774] bridge_slave_1: entered promiscuous mode [ 1024.237550][T15901] FAT-fs (loop2): bogus number of FAT structure [ 1024.268805][T15901] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 1024.287107][T15901] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1024.453416][T15905] loop8: detected capacity change from 0 to 1024 [ 1024.505393][T15774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1024.546630][T15905] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1024.557791][T15905] hfsplus: xattr searching failed [ 1024.580240][T15774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1024.581565][ T28] audit: type=1800 audit(1756624007.694:112): pid=15905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1960" name="file1" dev="loop8" ino=20 res=0 errno=0 [ 1024.613045][T15910] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1024.637487][T15910] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1024.743554][T15774] team0: Port device team_slave_0 added [ 1024.764894][T15774] team0: Port device team_slave_1 added [ 1024.951722][T15774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1024.981477][T15774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1025.012137][T15774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1025.025787][T15774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1025.032989][T15774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1025.067442][T15774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1025.165026][T15925] loop2: detected capacity change from 0 to 16 [ 1025.190939][T15925] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 18446744073575399424 [ 1025.233315][T15774] hsr_slave_0: entered promiscuous mode [ 1025.281768][T15774] hsr_slave_1: entered promiscuous mode [ 1025.308156][T15774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1025.337129][T15774] Cannot create hsr debugfs directory [ 1025.370126][ T43] hfsplus: b-tree write err: -5, ino 4 [ 1025.541410][T15930] loop8: detected capacity change from 0 to 128 [ 1025.598701][T15930] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1025.694577][T15930] ext4 filesystem being mounted at /157/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1025.799327][T15930] fscrypt: loop8: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 1025.876086][T12684] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1026.818642][T15774] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1026.879353][T15774] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1026.907302][T15774] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1026.943195][T15774] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1027.148109][T15961] loop2: detected capacity change from 0 to 7 [ 1027.184264][T15961] Dev loop2: unable to read RDB block 7 [ 1027.198165][T15961] loop2: unable to read partition table [ 1027.214891][T15961] loop2: partition table beyond EOD, truncated [ 1027.238073][T15961] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1027.395569][T15774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1027.525760][T15774] 8021q: adding VLAN 0 to HW filter on device team0 [ 1027.591176][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.598467][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1027.614881][T15976] binder: BINDER_SET_CONTEXT_MGR already set [ 1027.622336][T15976] binder: 15975:15976 ioctl 4018620d 200000000040 returned -16 [ 1027.631308][T15976] binder: 15975:15976 ioctl c0306201 200000000280 returned -11 [ 1027.717218][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.724510][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1028.280631][T15984] input: syz0 as /devices/virtual/input/input14 [ 1028.307000][T15984] "syz.8.1975" (15984) uses obsolete ecb(arc4) skcipher [ 1029.112973][T15989] loop8: detected capacity change from 0 to 128 [ 1029.164823][T15989] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1029.560150][T15774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1031.278681][T16008] binder: BINDER_SET_CONTEXT_MGR already set [ 1031.284857][T16008] binder: 16007:16008 ioctl 4018620d 200000000040 returned -16 [ 1031.329314][T16008] binder: 16007:16008 ioctl c0306201 200000000280 returned -11 [ 1033.382255][T15774] veth0_vlan: entered promiscuous mode [ 1033.400849][T16018] loop2: detected capacity change from 0 to 7 [ 1033.415324][T15774] veth1_vlan: entered promiscuous mode [ 1033.445638][T16018] Dev loop2: unable to read RDB block 7 [ 1033.471864][T16018] loop2: unable to read partition table [ 1033.491751][T16018] loop2: partition table beyond EOD, truncated [ 1033.517491][T16018] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1033.552264][T15774] veth0_macvtap: entered promiscuous mode [ 1033.588914][T15774] veth1_macvtap: entered promiscuous mode [ 1033.662130][T15774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.686204][T15774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.719060][T15774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1033.766126][T15774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.791290][T15774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.801456][T15774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.816970][T15774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.832371][T15774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.843108][T15774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.004744][T15774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1034.025319][T15774] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.034384][T15774] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.044837][T15774] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.053835][T15774] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.001143][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1035.038049][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1035.069480][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1035.094341][ T28] audit: type=1326 audit(1756624018.204:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16037 comm="syz.2.1992" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff58cf8ebe9 code=0x0 [ 1035.148060][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1035.422756][T16045] veth1_to_bridge: entered promiscuous mode [ 1035.452453][T16045] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check. [ 1035.570308][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.818939][T16054] loop2: detected capacity change from 0 to 7 [ 1035.839301][T16054] Dev loop2: unable to read RDB block 7 [ 1035.844981][T16054] loop2: unable to read partition table [ 1035.866283][T16054] loop2: partition table beyond EOD, truncated [ 1035.893189][T16054] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1037.244161][T16073] binder: 16071:16073 unknown command 0 [ 1037.283744][T16073] binder: 16071:16073 ioctl c0306201 200000000080 returned -22 [ 1037.326242][T16073] binder: 16071:16073 ioctl c0306201 200000000280 returned -11 [ 1037.790787][T16088] loop2: detected capacity change from 0 to 1024 [ 1038.457491][T16088] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1038.487841][T16088] hfsplus: xattr searching failed [ 1038.551659][ T28] audit: type=1800 audit(1756624021.634:114): pid=16088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2007" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 1038.572880][T16091] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1038.740209][ T11] hfsplus: b-tree write err: -5, ino 4 [ 1038.814048][T16099] loop8: detected capacity change from 0 to 1024 [ 1038.830536][T16098] loop9: detected capacity change from 0 to 512 [ 1038.890557][T16098] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1038.913684][T16099] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1038.923305][T16099] hfsplus: xattr searching failed [ 1038.945045][T16099] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1038.947431][ T28] audit: type=1800 audit(1756624022.054:115): pid=16099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2008" name="file1" dev="loop8" ino=20 res=0 errno=0 [ 1038.977803][T16098] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 1038.988338][T16099] hfsplus: xattr searching failed [ 1039.029931][T16098] EXT4-fs (loop9): warning: checktime reached, running e2fsck is recommended [ 1039.071947][T16098] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 1039.086905][T16098] System zones: 0-2, 18-18, 34-34 [ 1039.104645][T16104] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1039.113989][T16098] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.2009: iget: bad i_size value: 360287970189639680 [ 1039.217735][T16098] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.2009: couldn't read orphan inode 15 (err -117) [ 1039.271791][T16098] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1039.353548][ T3443] hfsplus: b-tree write err: -5, ino 4 [ 1039.898412][T16118] EXT4-fs error (device loop9): ext4_find_dest_de:2115: inode #2: block 3: comm syz.9.2009: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 1040.042814][T16120] binder: 16119:16120 unknown command 0 [ 1040.052144][T16120] binder: 16119:16120 ioctl c0306201 200000000080 returned -22 [ 1040.122183][T16120] binder: 16119:16120 ioctl c0306201 200000000280 returned -11 [ 1040.139396][T15774] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1041.545399][ T28] audit: type=1326 audit(1756624024.654:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16137 comm="syz.2.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58cf8ebe9 code=0x7ffc0000 [ 1041.588805][T16144] loop2: detected capacity change from 0 to 7 [ 1041.610434][T15051] Dev loop2: unable to read RDB block 7 [ 1041.616150][T15051] loop2: unable to read partition table [ 1041.628183][ T28] audit: type=1326 audit(1756624024.654:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16137 comm="syz.2.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58cf8ebe9 code=0x7ffc0000 [ 1041.647865][T15051] loop2: partition table beyond EOD, truncated [ 1041.668066][T16144] Dev loop2: unable to read RDB block 7 [ 1041.676216][T16144] loop2: unable to read partition table [ 1041.679724][ T28] audit: type=1326 audit(1756624024.654:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16137 comm="syz.2.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7ff58cf8ebe9 code=0x7ffc0000 [ 1041.704650][T16144] loop2: partition table beyond EOD, truncated [ 1041.704688][T16144] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1041.744246][ T28] audit: type=1326 audit(1756624024.654:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16137 comm="syz.2.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58cf8ebe9 code=0x7ffc0000 [ 1041.805436][ T5158] Dev loop2: unable to read RDB block 7 [ 1041.816350][ T28] audit: type=1326 audit(1756624024.654:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16137 comm="syz.2.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58cf8ebe9 code=0x7ffc0000 [ 1041.824737][ T5158] loop2: unable to read partition table [ 1041.884276][ T5158] loop2: partition table beyond EOD, truncated [ 1041.894628][ T28] audit: type=1326 audit(1756624024.694:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16137 comm="syz.2.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7ff58cf8ebe9 code=0x7ffc0000 [ 1042.894776][T16167] loop2: detected capacity change from 0 to 512 [ 1042.936015][T16169] binder: 16168:16169 unknown command 0 [ 1042.942276][T16167] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1042.963835][T16169] binder: 16168:16169 ioctl c0306201 200000000080 returned -22 [ 1042.975859][T16167] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1043.019921][T16167] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 1043.080980][T16169] binder: 16168:16169 ioctl c0306201 200000000280 returned -11 [ 1043.101002][T16167] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 1043.109420][T16167] System zones: 0-2, 18-18, 34-34 [ 1043.132017][T16167] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.2025: iget: bad i_size value: 360287970189639680 [ 1043.148165][T16167] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2025: couldn't read orphan inode 15 (err -117) [ 1043.196498][T16167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1043.351093][T16167] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 3: comm syz.2.2025: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 1043.442132][T15003] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1043.446972][T16179] loop9: detected capacity change from 0 to 764 [ 1043.729957][T16181] rock: directory entry would overflow storage [ 1043.737939][T16181] rock: sig=0x5850, size=36, remaining=7 [ 1044.391593][T16187] loop8: detected capacity change from 0 to 1024 [ 1044.544264][T16187] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1044.564537][T16187] hfsplus: xattr searching failed [ 1044.581464][ T28] audit: type=1800 audit(1756624027.694:122): pid=16187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2030" name="file1" dev="loop8" ino=20 res=0 errno=0 [ 1044.605013][T16187] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1044.631272][T16187] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1044.817931][ T34] hfsplus: b-tree write err: -5, ino 4 [ 1044.916479][T16199] loop2: detected capacity change from 0 to 7 [ 1044.939032][T16199] Dev loop2: unable to read RDB block 7 [ 1044.965308][T16199] loop2: unable to read partition table [ 1045.004960][T16199] loop2: partition table beyond EOD, truncated [ 1045.017793][T16199] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1045.965456][T16229] loop9: detected capacity change from 0 to 764 [ 1046.119444][ T28] audit: type=1326 audit(1756624029.184:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16233 comm="syz.4.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e3a78ebe9 code=0x7ffc0000 [ 1046.163270][T16236] rock: directory entry would overflow storage [ 1046.172971][T16236] rock: sig=0x5850, size=36, remaining=7 [ 1046.408291][ T28] audit: type=1326 audit(1756624029.184:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16233 comm="syz.4.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e3a78ebe9 code=0x7ffc0000 [ 1046.668271][ T28] audit: type=1326 audit(1756624029.684:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16233 comm="syz.4.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e3a78ebe9 code=0x7ffc0000 [ 1046.711632][ T28] audit: type=1326 audit(1756624029.684:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16233 comm="syz.4.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e3a78ebe9 code=0x7ffc0000 [ 1046.843511][ T28] audit: type=1326 audit(1756624029.684:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16233 comm="syz.4.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e3a78ebe9 code=0x7ffc0000 [ 1046.938704][ T28] audit: type=1326 audit(1756624029.754:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16233 comm="syz.4.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e3a78ebe9 code=0x7ffc0000 [ 1047.019156][ T28] audit: type=1326 audit(1756624029.754:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16233 comm="syz.4.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e3a78ebe9 code=0x7ffc0000 [ 1047.142542][ T28] audit: type=1326 audit(1756624029.754:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16233 comm="syz.4.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e3a78ebe9 code=0x7ffc0000 [ 1047.164850][T16249] syz.4.2045[16249] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1047.165965][ T28] audit: type=1326 audit(1756624029.754:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16233 comm="syz.4.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e3a78ebe9 code=0x7ffc0000 [ 1047.226657][ T28] audit: type=1326 audit(1756624029.754:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16233 comm="syz.4.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e3a78ebe9 code=0x7ffc0000 [ 1047.378578][T16249] syz.4.2045[16249] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1047.542986][T16245] loop2: detected capacity change from 0 to 512 [ 1047.777653][ T28] audit: type=1326 audit(1756624029.774:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16233 comm="syz.4.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e3a78ebe9 code=0x7ffc0000 [ 1047.881650][T16245] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1047.959359][ T28] audit: type=1326 audit(1756624029.774:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16233 comm="syz.4.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e3a78ebe9 code=0x7ffc0000 [ 1048.090792][T16245] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.2046: invalid indirect mapped block 4294967295 (level 0) [ 1048.182824][T16260] netlink: 256 bytes leftover after parsing attributes in process `syz.8.2049'. [ 1048.196797][T16245] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.2046: invalid indirect mapped block 4294967295 (level 1) [ 1048.256593][T16245] EXT4-fs (loop2): 1 orphan inode deleted [ 1048.287798][T16245] EXT4-fs (loop2): 1 truncate cleaned up [ 1048.314861][T16245] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1048.948004][T16253] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1049.037056][T16263] loop8: detected capacity change from 0 to 8192 [ 1049.065323][T16263] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1049.128146][T15003] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1050.099792][T16307] loop9: detected capacity change from 0 to 1024 [ 1050.144841][T16307] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1050.162962][T16307] hfsplus: xattr searching failed [ 1050.183493][T16307] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1050.213303][T16307] hfsplus: xattr searching failed [ 1050.348040][T16315] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1051.065381][T16334] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1051.102982][T16334] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1051.148584][T16334] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1051.219098][ T1078] hfsplus: b-tree write err: -5, ino 4 [ 1051.242271][T16334] batman_adv: batadv0: Interface activated: ip6gretap1 [ 1051.532477][T16350] binder: 16348:16350 unknown command 0 [ 1051.552344][T16350] binder: 16348:16350 ioctl c0306201 200000000080 returned -22 [ 1051.581574][T16350] binder: 16348:16350 ioctl c0306201 200000000280 returned -11 [ 1051.716617][T16355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2073'. [ 1052.915392][T16370] sctp: failed to load transform for md5: -2 [ 1053.568816][T16386] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2080'. [ 1053.605960][T16388] loop2: detected capacity change from 0 to 7 [ 1053.621484][T16386] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2080'. [ 1053.634106][T15051] Dev loop2: unable to read RDB block 7 [ 1053.659900][T15051] loop2: unable to read partition table [ 1053.678650][T15051] loop2: partition table beyond EOD, truncated [ 1053.685942][T16388] Dev loop2: unable to read RDB block 7 [ 1053.694982][T16388] loop2: unable to read partition table [ 1053.704472][T16388] loop2: partition table beyond EOD, truncated [ 1053.712615][T16388] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1053.997206][T16398] binder: 16396:16398 unknown command 0 [ 1054.013225][T16398] binder: 16396:16398 ioctl c0306201 200000000080 returned -22 [ 1054.044009][T16398] binder: 16396:16398 ioctl c0306201 200000000280 returned -11 [ 1055.393119][T16422] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2090'. [ 1055.508799][T16427] binder: 16426:16427 unknown command 0 [ 1055.515918][T16427] binder: 16426:16427 ioctl c0306201 200000000080 returned -22 [ 1055.536285][T16427] binder: 16426:16427 ioctl c0306201 200000000280 returned -11 [ 1055.599400][T16431] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2094'. [ 1055.984758][T16437] loop2: detected capacity change from 0 to 1024 [ 1056.132300][T16437] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1056.147593][T16437] hfsplus: xattr searching failed [ 1056.157094][T16437] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1056.157658][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 1056.157675][ T28] audit: type=1800 audit(1756624039.264:156): pid=16437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2096" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 1056.163562][T16437] hfsplus: xattr searching failed [ 1056.241885][T16447] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1057.070613][T16456] loop9: detected capacity change from 0 to 128 [ 1057.132808][ T43] hfsplus: b-tree write err: -5, ino 4 [ 1057.149613][T16456] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 1057.167719][T16456] System zones: 1-3, 19-19, 35-36 [ 1057.179829][T16456] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1057.282456][T16456] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1057.726031][T15774] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1058.403494][T16471] tipc: Started in network mode [ 1058.438499][T16471] tipc: Node identity ac141413, cluster identity 4711 [ 1058.446317][T16471] tipc: New replicast peer: 10.1.1.2 [ 1058.508912][T16471] tipc: Enabled bearer , priority 10 [ 1058.735115][T16483] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1058.847818][T16486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2108'. [ 1058.888386][T16486] hsr_slave_0: left promiscuous mode [ 1058.907937][T16486] hsr_slave_1: left promiscuous mode [ 1059.176893][T16500] loop8: detected capacity change from 0 to 764 [ 1059.216216][T16499] loop2: detected capacity change from 0 to 1024 [ 1059.298702][T16501] rock: directory entry would overflow storage [ 1059.305026][T16501] rock: sig=0x5850, size=36, remaining=7 [ 1059.638046][T16479] tipc: Node number set to 2886997011 [ 1060.169817][T16499] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1060.176270][T16499] hfsplus: xattr searching failed [ 1060.249210][ T28] audit: type=1800 audit(1756624043.364:157): pid=16499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2112" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 1060.258171][T16505] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1060.357769][T16505] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1061.048871][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1061.055397][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1061.327892][ T28] audit: type=1326 audit(1756624044.414:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16521 comm="syz.8.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521bb8ebe9 code=0x7ffc0000 [ 1061.445367][ T28] audit: type=1326 audit(1756624044.414:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16521 comm="syz.8.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521bb8ebe9 code=0x7ffc0000 [ 1061.487998][ T28] audit: type=1326 audit(1756624044.424:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16521 comm="syz.8.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f521bb8ebe9 code=0x7ffc0000 [ 1061.511214][ T1078] hfsplus: b-tree write err: -5, ino 4 [ 1061.563686][ T28] audit: type=1326 audit(1756624044.424:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16521 comm="syz.8.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521bb8ebe9 code=0x7ffc0000 [ 1061.672722][ T28] audit: type=1326 audit(1756624044.424:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16521 comm="syz.8.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f521bb8ebe9 code=0x7ffc0000 [ 1061.732493][T16529] loop8: detected capacity change from 0 to 128 [ 1061.775037][T16529] EXT4-fs: Ignoring removed nobh option [ 1061.807431][ T28] audit: type=1326 audit(1756624044.424:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16521 comm="syz.8.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521bb8ebe9 code=0x7ffc0000 [ 1061.882235][ T28] audit: type=1326 audit(1756624044.424:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16521 comm="syz.8.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521bb8ebe9 code=0x7ffc0000 [ 1061.923760][ T28] audit: type=1326 audit(1756624044.424:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16521 comm="syz.8.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f521bb8ebe9 code=0x7ffc0000 [ 1061.939467][T16529] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1061.960108][ T28] audit: type=1326 audit(1756624044.424:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16521 comm="syz.8.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521bb8ebe9 code=0x7ffc0000 [ 1062.012537][T16529] ext4 filesystem being mounted at /196/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1062.067217][T16529] EXT4-fs error (device loop8): __ext4_find_entry:1696: inode #2: comm syz.8.2119: checksumming directory block 0 [ 1062.097454][ T28] audit: type=1326 audit(1756624044.424:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16521 comm="syz.8.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521bb8ebe9 code=0x7ffc0000 [ 1062.158808][T16529] EXT4-fs error (device loop8): __ext4_find_entry:1696: inode #2: comm syz.8.2119: checksumming directory block 0 [ 1062.210929][T16529] EXT4-fs error (device loop8): __ext4_find_entry:1696: inode #2: comm syz.8.2119: checksumming directory block 0 [ 1062.223976][T16540] loop2: detected capacity change from 0 to 764 [ 1062.323417][T16543] EXT4-fs error (device loop8): __ext4_find_entry:1696: inode #2: comm syz.8.2119: checksumming directory block 0 [ 1062.473711][T16548] rock: directory entry would overflow storage [ 1062.482112][T16548] rock: sig=0x5850, size=36, remaining=7 [ 1063.108673][T12684] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1063.177736][ T5790] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1063.189488][ T5790] Bluetooth: hci0: Injecting HCI hardware error event [ 1063.199464][ T5794] Bluetooth: hci0: hardware error 0x00 [ 1064.705949][T16575] loop8: detected capacity change from 0 to 1024 [ 1065.066406][ T11] hfsplus: b-tree write err: -5, ino 4 [ 1065.257855][ T5790] Bluetooth: hci0: unexpected event for opcode 0x080d [ 1065.337549][ T5794] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1065.403124][T16586] netlink: 9 bytes leftover after parsing attributes in process `syz.8.2134'. [ 1065.415973][T16586] 0·: renamed from hsr0 (while UP) [ 1065.425231][T16586] 0·: entered allmulticast mode [ 1065.435578][T16586] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 1065.839356][T16592] loop8: detected capacity change from 0 to 764 [ 1065.842769][T16594] loop2: detected capacity change from 0 to 512 [ 1065.899748][T16594] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1066.038864][T16594] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1066.082382][T16598] rock: directory entry would overflow storage [ 1066.095058][T16598] rock: sig=0x5850, size=36, remaining=7 [ 1066.426295][T16594] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 1066.538328][T16594] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 1066.549293][T16594] System zones: 0-2, 18-18, 34-34 [ 1066.558096][T16594] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.2137: iget: bad i_size value: 360287970189639680 [ 1066.631435][T16594] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2137: couldn't read orphan inode 15 (err -117) [ 1066.840653][T16594] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1067.982809][T16614] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 3: comm syz.2.2137: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 1068.421071][T15003] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1068.727200][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 1068.727218][ T28] audit: type=1326 audit(1756624051.834:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16628 comm="syz.2.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58cf8ebe9 code=0x7ffc0000 [ 1068.860930][ T28] audit: type=1326 audit(1756624051.864:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16628 comm="syz.2.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7ff58cf8ebe9 code=0x7ffc0000 [ 1068.966343][ T28] audit: type=1326 audit(1756624051.934:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16628 comm="syz.2.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58cf8ebe9 code=0x7ffc0000 [ 1069.094298][ T28] audit: type=1326 audit(1756624051.934:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16628 comm="syz.2.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58cf8ebe9 code=0x7ffc0000 [ 1069.183360][T16637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2150'. [ 1069.237619][T16637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1069.245260][T16637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1069.373294][T16643] loop2: detected capacity change from 0 to 7 [ 1069.416103][T15051] Dev loop2: unable to read RDB block 7 [ 1069.433107][T16637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1069.448954][T15051] loop2: unable to read partition table [ 1069.454907][T15051] loop2: partition table beyond EOD, truncated [ 1069.465471][T16637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1069.619784][T16643] Dev loop2: unable to read RDB block 7 [ 1069.687179][T16637] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 1069.744341][T16643] loop2: unable to read partition table [ 1069.866526][T16637] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1069.896623][T16643] loop2: partition table beyond EOD, truncated [ 1070.053659][T16643] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1070.141636][ T5158] Dev loop2: unable to read RDB block 7 [ 1070.172121][ T5158] loop2: unable to read partition table [ 1070.204717][ T5158] loop2: partition table beyond EOD, truncated [ 1070.412312][T16650] loop9: detected capacity change from 0 to 1024 [ 1070.475483][T16650] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1070.548689][T16650] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1070.616368][ T5790] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1070.625366][ T28] audit: type=1800 audit(1756624053.734:209): pid=16650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2153" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1070.663973][T16650] EXT4-fs error (device loop9): ext4_map_blocks:718: inode #15: comm syz.9.2153: lblock 0 mapped to illegal pblock 0 (length 1) [ 1070.715630][ T5790] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1070.726721][ T5790] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1070.737053][ T5790] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1070.748166][ T5790] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1070.755877][ T5790] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1070.802877][T16650] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 1070.849611][T16650] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1070.849611][T16650] [ 1070.893511][T16663] loop2: detected capacity change from 0 to 512 [ 1070.998788][T16663] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1071.080598][T16663] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1071.115838][T15774] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1071.141412][T16663] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 1071.242080][T16663] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 1071.314431][T16663] System zones: 0-2, 18-18, 34-34 [ 1071.408908][ C1] vcan0: j1939_tp_txtimer: 0xffff88805e453800: tx aborted with unknown reason: -2 [ 1071.421387][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e450000: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 1071.441997][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e453800: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 1071.444739][T16663] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.2154: iget: bad i_size value: 360287970189639680 [ 1071.501657][T16673] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2157'. [ 1071.521096][T16663] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2154: couldn't read orphan inode 15 (err -117) [ 1071.566237][T16663] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1071.692672][T16680] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 3: comm syz.2.2154: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 1072.130621][T15003] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1072.432694][T16658] chnl_net:caif_netlink_parms(): no params data found [ 1072.465653][T16694] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 1072.712411][T16699] loop8: detected capacity change from 0 to 1024 [ 1072.837573][T16699] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1072.846935][T16658] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.857877][ T5790] Bluetooth: hci4: command tx timeout [ 1072.868988][T16699] hfsplus: xattr searching failed [ 1072.876946][ T28] audit: type=1800 audit(1756624055.984:210): pid=16699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2161" name="file1" dev="loop8" ino=20 res=0 errno=0 [ 1072.887800][T16658] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.914175][T16699] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1072.937879][T16658] bridge_slave_0: entered allmulticast mode [ 1072.947646][T16699] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1072.994829][T16658] bridge_slave_0: entered promiscuous mode [ 1073.012119][T16658] bridge0: port 2(bridge_slave_1) entered blocking state [ 1073.034580][T16658] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.059230][T16658] bridge_slave_1: entered allmulticast mode [ 1073.075756][T16710] loop2: detected capacity change from 0 to 764 [ 1073.082464][T16658] bridge_slave_1: entered promiscuous mode [ 1073.267728][T16712] rock: directory entry would overflow storage [ 1073.289212][T16712] rock: sig=0x5850, size=36, remaining=7 [ 1073.637847][T16658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1073.778919][T16658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1073.895122][ T2933] hfsplus: b-tree write err: -5, ino 4 [ 1074.003790][T16658] team0: Port device team_slave_0 added [ 1074.032727][T16658] team0: Port device team_slave_1 added [ 1074.055291][T16717] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2164'. [ 1074.282053][T16658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1074.283006][ T28] audit: type=1326 audit(1756624057.394:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16723 comm="syz.9.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8658ebe9 code=0x7ffc0000 [ 1074.305494][T16658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1074.350425][ T28] audit: type=1326 audit(1756624057.394:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16723 comm="syz.9.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f5d8658ebe9 code=0x7ffc0000 [ 1074.375881][T16658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1074.407696][ T28] audit: type=1326 audit(1756624057.394:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16723 comm="syz.9.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8658ebe9 code=0x7ffc0000 [ 1074.433419][T16658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1074.462518][T16658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1074.497647][ T28] audit: type=1326 audit(1756624057.394:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16723 comm="syz.9.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8658ebe9 code=0x7ffc0000 [ 1074.541800][T16658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1074.553804][ T28] audit: type=1326 audit(1756624057.434:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16723 comm="syz.9.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5d8658ebe9 code=0x7ffc0000 [ 1074.588801][ T28] audit: type=1326 audit(1756624057.434:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16723 comm="syz.9.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8658ebe9 code=0x7ffc0000 [ 1074.929427][ T28] audit: type=1326 audit(1756624057.494:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16723 comm="syz.9.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8658ebe9 code=0x7ffc0000 [ 1074.977651][ T5790] Bluetooth: hci4: command tx timeout [ 1075.120374][T16733] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1075.184789][T16733] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1075.217421][T16733] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1075.276568][T16733] batman_adv: batadv0: Interface activated: ip6gretap1 [ 1075.341758][T16743] loop9: detected capacity change from 0 to 2048 [ 1075.358878][T16658] hsr_slave_0: entered promiscuous mode [ 1075.380703][T16658] hsr_slave_1: entered promiscuous mode [ 1075.407214][T16743] Alternate GPT is invalid, using primary GPT. [ 1075.414108][T16743] loop9: p1 p2 p3 [ 1075.544939][T16748] loop8: detected capacity change from 0 to 764 [ 1075.839446][T16752] rock: directory entry would overflow storage [ 1075.845896][T16752] rock: sig=0x5850, size=36, remaining=7 [ 1076.376309][ T28] audit: type=1326 audit(1756624059.484:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16751 comm="syz.2.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58cf8ebe9 code=0x7ffc0000 [ 1076.487536][ T28] audit: type=1326 audit(1756624059.484:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16751 comm="syz.2.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58cf8ebe9 code=0x7ffc0000 [ 1076.585599][ T28] audit: type=1326 audit(1756624059.484:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16751 comm="syz.2.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7ff58cf8ebe9 code=0x7ffc0000 [ 1076.688020][T16759] loop2: detected capacity change from 0 to 7 [ 1076.716581][T15051] udevd[15051]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 1076.723294][T15087] udevd[15087]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 1076.757587][T16759] Dev loop2: unable to read RDB block 7 [ 1076.757639][T15630] udevd[15630]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 1076.763212][T16759] loop2: unable to read partition table [ 1076.805734][T16759] loop2: partition table beyond EOD, truncated [ 1076.832028][T16764] binder: 16763:16764 ioctl c0306201 0 returned -14 [ 1077.143472][T16759] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1077.224366][ T5790] Bluetooth: hci4: command tx timeout [ 1077.238473][T16764] binder: 16763:16764 ioctl c0306201 200000000280 returned -11 [ 1077.264106][T16658] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.427338][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1182.434357][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16764/1:b..l P15051/1:b..l P3443/1:b..l [ 1182.445338][ C0] rcu: (detected by 0, t=10502 jiffies, g=116757, q=329 ncpus=2) [ 1182.453184][ C0] task:kworker/u4:8 state:R running task stack:19896 pid:3443 ppid:2 flags:0x00004000 [ 1182.465697][ C0] Workqueue: bat_events batadv_nc_worker [ 1182.471403][ C0] Call Trace: [ 1182.474712][ C0] [ 1182.477662][ C0] __schedule+0x14d2/0x44d0 [ 1182.482200][ C0] ? asan.module_dtor+0x20/0x20 [ 1182.487125][ C0] ? mark_lock+0x94/0x320 [ 1182.491472][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1182.497498][ C0] ? preempt_schedule_irq+0xaa/0x140 [ 1182.502811][ C0] preempt_schedule_irq+0xb5/0x140 [ 1182.507962][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 1182.513700][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1182.519523][ C0] irqentry_exit+0x67/0x70 [ 1182.523974][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1182.530058][ C0] RIP: 0010:lock_acquire+0x1f2/0x410 [ 1182.535366][ C0] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f5 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 66 43 c7 44 3c 09 00 00 43 c6 44 3c 0b 00 [ 1182.555181][ C0] RSP: 0018:ffffc9000c4e7a40 EFLAGS: 00000206 [ 1182.561378][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 14e558aeafcd5c00 [ 1182.569384][ C0] RDX: 0000000000000000 RSI: ffffffff8aaacba0 RDI: ffffffff8afc7040 [ 1182.577387][ C0] RBP: ffffc9000c4e7b48 R08: dffffc0000000000 R09: 1ffffffff21b4aa0 [ 1182.585390][ C0] R10: dffffc0000000000 R11: fffffbfff21b4aa1 R12: 1ffff9200189cf54 [ 1182.593396][ C0] R13: ffffffff8cd2fbe0 R14: 0000000000000246 R15: dffffc0000000000 [ 1182.601413][ C0] ? batadv_nc_worker+0xd2/0x610 [ 1182.606368][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1182.611760][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1182.617758][ C0] ? batadv_nc_worker+0xd2/0x610 [ 1182.622713][ C0] batadv_nc_worker+0xef/0x610 [ 1182.627491][ C0] ? batadv_nc_worker+0xd2/0x610 [ 1182.632478][ C0] ? process_scheduled_works+0x957/0x15b0 [ 1182.638231][ C0] process_scheduled_works+0xa45/0x15b0 [ 1182.643860][ C0] ? assign_work+0x400/0x400 [ 1182.648488][ C0] ? assign_work+0x39e/0x400 [ 1182.653176][ C0] worker_thread+0xa55/0xfc0 [ 1182.657819][ C0] kthread+0x2fa/0x390 [ 1182.661911][ C0] ? pr_cont_work+0x560/0x560 [ 1182.666639][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1182.671343][ C0] ret_from_fork+0x48/0x80 [ 1182.675808][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1182.680412][ C0] ret_from_fork_asm+0x11/0x20 [ 1182.685308][ C0] [ 1182.688338][ C0] task:udevd state:R running task stack:23144 pid:15051 ppid:5158 flags:0x00004002 [ 1182.699128][ C0] Call Trace: [ 1182.702420][ C0] [ 1182.705359][ C0] __schedule+0x14d2/0x44d0 [ 1182.709899][ C0] ? asan.module_dtor+0x20/0x20 [ 1182.714774][ C0] ? __wake_up_sync+0x118/0x180 [ 1182.719639][ C0] ? do_raw_read_unlock+0x3d/0x80 [ 1182.724854][ C0] ? preempt_schedule+0xab/0xc0 [ 1182.729735][ C0] preempt_schedule_common+0x82/0xc0 [ 1182.735043][ C0] preempt_schedule+0xab/0xc0 [ 1182.739747][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 1182.745392][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1182.751383][ C0] ? lock_chain_count+0x20/0x20 [ 1182.756256][ C0] preempt_schedule_thunk+0x1a/0x30 [ 1182.761501][ C0] _raw_spin_unlock_irqrestore+0xfa/0x110 [ 1182.767252][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1182.772157][ C0] ? __wake_up_common+0x2a4/0x4e0 [ 1182.777199][ C0] __wake_up_sync_key+0x11f/0x190 [ 1182.782251][ C0] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 1182.788250][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 1182.793295][ C0] ? sock_def_readable+0xad/0x430 [ 1182.798333][ C0] sock_def_readable+0x1e1/0x430 [ 1182.803289][ C0] unix_dgram_sendmsg+0x10cc/0x1720 [ 1182.808521][ C0] ? unix_dgram_poll+0x670/0x670 [ 1182.813472][ C0] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1182.819930][ C0] ? ___sys_sendmsg+0x230/0x290 [ 1182.824818][ C0] ? aa_sock_msg_perm+0x94/0x150 [ 1182.829774][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1182.835087][ C0] ? security_socket_sendmsg+0x80/0xa0 [ 1182.840575][ C0] sock_write_iter+0x2bb/0x3f0 [ 1182.845356][ C0] ? sock_read_iter+0x3b0/0x3b0 [ 1182.850228][ C0] ? common_file_perm+0x198/0x1f0 [ 1182.855287][ C0] vfs_write+0x43b/0x940 [ 1182.859578][ C0] ? file_end_write+0x250/0x250 [ 1182.864459][ C0] ? __se_sys_sendmsg+0x1bc/0x270 [ 1182.869524][ C0] ? __fdget_pos+0x1d8/0x330 [ 1182.874155][ C0] ksys_write+0x147/0x250 [ 1182.878536][ C0] ? __ia32_sys_read+0x90/0x90 [ 1182.883345][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1182.888577][ C0] do_syscall_64+0x55/0xb0 [ 1182.893038][ C0] ? clear_bhb_loop+0x40/0x90 [ 1182.897730][ C0] ? clear_bhb_loop+0x40/0x90 [ 1182.902423][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1182.908363][ C0] RIP: 0033:0x7f2cd74a7407 [ 1182.912805][ C0] RSP: 002b:00007ffdd28bfc80 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 1182.921282][ C0] RAX: ffffffffffffffda RBX: 00007f2cd7b70880 RCX: 00007f2cd74a7407 [ 1182.929275][ C0] RDX: 0000000000000000 RSI: 00007ffdd28bfd27 RDI: 000000000000000a [ 1182.937264][ C0] RBP: 000000000000000a R08: 0000000000000000 R09: 0000000000000000 [ 1182.945263][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f2cd7b706e8 [ 1182.953252][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1182.961289][ C0] [ 1182.964320][ C0] task:syz.9.2178 state:R running task stack:25928 pid:16764 ppid:15774 flags:0x00004000 [ 1182.975131][ C0] Call Trace: [ 1182.978437][ C0] [ 1182.981662][ C0] __schedule+0x14d2/0x44d0 [ 1182.986218][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1182.992241][ C0] ? mark_lock+0x94/0x320 [ 1182.996581][ C0] ? asan.module_dtor+0x20/0x20 [ 1183.001457][ C0] ? preempt_schedule+0xab/0xc0 [ 1183.006321][ C0] preempt_schedule_common+0x82/0xc0 [ 1183.011620][ C0] preempt_schedule+0xab/0xc0 [ 1183.016310][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 1183.021957][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 1183.026998][ C0] preempt_schedule_thunk+0x1a/0x30 [ 1183.032217][ C0] _raw_spin_unlock+0x3a/0x40 [ 1183.036909][ C0] unmap_page_range+0x236f/0x2fe0 [ 1183.041971][ C0] ? copy_page_range+0x3600/0x3600 [ 1183.047102][ C0] ? unmap_single_vma+0x1b0/0x2a0 [ 1183.052146][ C0] unmap_vmas+0x25e/0x3a0 [ 1183.056491][ C0] ? unmap_page_range+0x2fe0/0x2fe0 [ 1183.061710][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 1183.066781][ C0] exit_mmap+0x200/0xb50 [ 1183.071040][ C0] ? exit_mm_release+0x1a/0x30 [ 1183.075820][ C0] ? vm_brk+0x30/0x30 [ 1183.079817][ C0] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 1183.085480][ C0] ? uprobe_clear_state+0x278/0x290 [ 1183.090700][ C0] ? mm_update_next_owner+0x562/0x6c0 [ 1183.096288][ C0] __mmput+0x118/0x3c0 [ 1183.100369][ C0] exit_mm+0x1da/0x2c0 [ 1183.104462][ C0] ? do_exit+0x23c0/0x23c0 [ 1183.108989][ C0] ? taskstats_exit+0x35e/0x9e0 [ 1183.113859][ C0] do_exit+0x88e/0x23c0 [ 1183.118044][ C0] ? put_task_struct+0xc0/0xc0 [ 1183.122845][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1183.128841][ C0] ? get_signal+0x1068/0x1400 [ 1183.133538][ C0] ? lock_chain_count+0x20/0x20 [ 1183.138425][ C0] ? _raw_spin_lock_irq+0xaf/0xe0 [ 1183.143471][ C0] do_group_exit+0x21b/0x2d0 [ 1183.148084][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1183.153305][ C0] get_signal+0x12fc/0x1400 [ 1183.157860][ C0] arch_do_signal_or_restart+0x96/0x780 [ 1183.163455][ C0] ? get_sigframe_size+0x20/0x20 [ 1183.168438][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 1183.174042][ C0] exit_to_user_mode_loop+0x70/0x110 [ 1183.179481][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 1183.185049][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 1183.190567][ C0] do_syscall_64+0x61/0xb0 [ 1183.194995][ C0] ? clear_bhb_loop+0x40/0x90 [ 1183.199683][ C0] ? clear_bhb_loop+0x40/0x90 [ 1183.204374][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1183.210289][ C0] RIP: 0033:0x7f5d8658ebe9 [ 1183.214712][ C0] RSP: 002b:00007f5d873610e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1183.223138][ C0] RAX: fffffffffffffe00 RBX: 00007f5d867c5fa8 RCX: 00007f5d8658ebe9 [ 1183.231123][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5d867c5fa8 [ 1183.239118][ C0] RBP: 00007f5d867c5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1183.247146][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1183.255234][ C0] R13: 00007f5d867c6038 R14: 00007ffe68906170 R15: 00007ffe68906258 [ 1183.263432][ C0] [ 1183.266470][ C0] rcu: rcu_preempt kthread starved for 10161 jiffies! g116757 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1183.277764][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1183.287740][ C0] rcu: RCU grace-period kthread stack dump: [ 1183.293669][ C0] task:rcu_preempt state:R running task stack:27496 pid:17 ppid:2 flags:0x00004000 [ 1183.304455][ C0] Call Trace: [ 1183.307759][ C0] [ 1183.310697][ C0] __schedule+0x14d2/0x44d0 [ 1183.315250][ C0] ? asan.module_dtor+0x20/0x20 [ 1183.320125][ C0] ? enqueue_timer+0x4ab/0x530 [ 1183.324904][ C0] ? __mod_timer+0x984/0xdb0 [ 1183.329515][ C0] schedule+0xbd/0x170 [ 1183.333594][ C0] schedule_timeout+0x160/0x280 [ 1183.338462][ C0] ? console_conditional_schedule+0x40/0x40 [ 1183.344374][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 1183.350313][ C0] ? update_process_times+0x1b0/0x1b0 [ 1183.355706][ C0] ? prepare_to_swait_event+0x339/0x360 [ 1183.361262][ C0] rcu_gp_fqs_loop+0x302/0x1560 [ 1183.366154][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 1183.372383][ C0] ? rcu_gp_init+0x1510/0x1510 [ 1183.377177][ C0] ? rcu_gp_cleanup+0xb4c/0xca0 [ 1183.382145][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1183.387373][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1183.392639][ C0] rcu_gp_kthread+0x99/0x380 [ 1183.397298][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1183.402460][ C0] ? __kthread_parkme+0x7a/0x1c0 [ 1183.407503][ C0] ? __kthread_parkme+0x162/0x1c0 [ 1183.412566][ C0] kthread+0x2fa/0x390 [ 1183.416809][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1183.421960][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1183.426576][ C0] ret_from_fork+0x48/0x80 [ 1183.431017][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1183.435623][ C0] ret_from_fork_asm+0x11/0x20 [ 1183.440415][ C0] [ 1183.443452][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1183.449780][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1183.455029][ C1] NMI backtrace for cpu 1 [ 1183.455050][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 1183.455067][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1183.455078][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1183.455109][ C1] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d a3 36 3a 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 1183.455124][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 1183.455139][ C1] RAX: cd65ea5064d3b000 RBX: ffffffff8161923b RCX: cd65ea5064d3b000 [ 1183.455152][ C1] RDX: 0000000000000001 RSI: ffffffff8aaaba20 RDI: ffffffff8afc7040 [ 1183.455164][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36d4b R09: 1ffff110171e6da9 [ 1183.455177][ C1] R10: dffffc0000000000 R11: ffffed10171e6daa R12: ffffffff8e4a8f28 [ 1183.455190][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110037cb780 [ 1183.455201][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1183.455216][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1183.455228][ C1] CR2: 00007ffae613c13c CR3: 000000002f93f000 CR4: 00000000003506e0 [ 1183.455278][ C1] Call Trace: [ 1183.455287][ C1] [ 1183.455292][ C1] default_idle+0x13/0x20 [ 1183.455318][ C1] default_idle_call+0x6c/0xa0 [ 1183.455346][ C1] do_idle+0x1eb/0x510 [ 1183.455369][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 1183.455388][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1183.455413][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1183.455437][ C1] cpu_startup_entry+0x43/0x60 [ 1183.455457][ C1] start_secondary+0xee/0xf0 [ 1183.455475][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 1183.455508][ C1] [ 1183.655471][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1183.661979][ T5790] Bluetooth: hci4: command tx timeout [ 1183.707419][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: failed to send rpc fd=3 want=248 sent=0 n=-1 (errno 32: Broken pipe) [ 1183.938078][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1183.944484][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1184.228991][T16768] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1184.255122][T16658] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.358177][T16768] CPU: 0 PID: 16768 Comm: syz-executor Not tainted syzkaller #0 [ 1184.365911][T16768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1184.376012][T16768] Call Trace: [ 1184.379338][T16768] [ 1184.382304][T16768] dump_stack_lvl+0x16c/0x230 [ 1184.387045][T16768] ? show_regs_print_info+0x20/0x20 [ 1184.392294][T16768] ? load_image+0x3b0/0x3b0 [ 1184.396840][T16768] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1184.403333][T16768] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1184.409890][T16768] warn_alloc+0x210/0x300 [ 1184.414285][T16768] ? zone_watermark_ok_safe+0x230/0x230 [ 1184.419898][T16768] ? _raw_spin_unlock+0x28/0x40 [ 1184.424800][T16768] __vmalloc_node_range+0x662/0x1320 [ 1184.430133][T16768] ? free_vm_area+0x50/0x50 [ 1184.434654][T16768] ? close_fd_get_file+0x65/0x70 [ 1184.439614][T16768] ? kcov_remote_reset+0xc0/0xc0 [ 1184.444570][T16768] vmalloc_user+0x74/0x80 [ 1184.448924][T16768] ? kcov_ioctl+0x58/0x630 [ 1184.453359][T16768] kcov_ioctl+0x58/0x630 [ 1184.457625][T16768] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1184.462580][T16768] ? security_file_ioctl+0x80/0xa0 [ 1184.467731][T16768] ? kcov_remote_reset+0xc0/0xc0 [ 1184.472782][T16768] __se_sys_ioctl+0xfd/0x170 [ 1184.477398][T16768] do_syscall_64+0x55/0xb0 [ 1184.481838][T16768] ? clear_bhb_loop+0x40/0x90 [ 1184.486566][T16768] ? clear_bhb_loop+0x40/0x90 [ 1184.491269][T16768] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1184.497191][T16768] RIP: 0033:0x7fece278e7eb [ 1184.501627][T16768] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 1184.521352][T16768] RSP: 002b:00007ffda4030ba0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1184.529787][T16768] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007fece278e7eb [ 1184.537776][T16768] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000d8 [ 1184.545801][T16768] RBP: 00007fece29c6038 R08: 0000000000000005 R09: 0000000000000000 [ 1184.553810][T16768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1184.561793][T16768] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1184.569798][T16768] [ 1184.574295][T16768] Mem-Info: [ 1184.577520][T16768] active_anon:5168 inactive_anon:0 isolated_anon:0 [ 1184.577520][T16768] active_file:18577 inactive_file:40360 isolated_file:0 [ 1184.577520][T16768] unevictable:768 dirty:0 writeback:25 [ 1184.577520][T16768] slab_reclaimable:11585 slab_unreclaimable:99554 [ 1184.577520][T16768] mapped:12772 shmem:1408 pagetables:371 [ 1184.577520][T16768] sec_pagetables:0 bounce:0 [ 1184.577520][T16768] kernel_misc_reclaimable:0 [ 1184.577520][T16768] free:1341518 free_pcp:6346 free_cma:0 [ 1184.763286][T16768] Node 0 active_anon:18372kB inactive_anon:0kB active_file:74308kB inactive_file:161244kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:29588kB dirty:0kB writeback:100kB shmem:4096kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11192kB pagetables:1284kB sec_pagetables:0kB all_unreclaimable? no [ 1184.796050][T16768] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1184.826617][T16768] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1184.911084][T16768] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 1184.967695][T16768] Node 0 DMA32 free:1472008kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:18324kB inactive_anon:0kB active_file:74308kB inactive_file:159924kB unevictable:1536kB writepending:100kB present:3129332kB managed:2589592kB mlocked:0kB bounce:0kB free_pcp:26432kB local_pcp:8188kB free_cma:0kB [ 1185.099741][T16768] lowmem_reserve[]: 0 0 1 1 1 [ 1185.104573][T16768] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1185.159529][T16768] lowmem_reserve[]: 0 0 0 0 0 [ 1185.164361][T16768] Node 1 Normal free:3912820kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:7236kB local_pcp:7236kB free_cma:0kB [ 1185.295781][T16768] lowmem_reserve[]: 0 0 0 0 0 [ 1185.311772][T16768] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1185.396423][T16768] Node 0 DMA32: 7011*4kB (UME) 4507*8kB (UME) 2627*16kB (UME) 1988*32kB (UME) 628*64kB (UME) 227*128kB (UME) 131*256kB (M) 77*512kB (UME) 30*1024kB (UM) 17*2048kB (UM) 280*4096kB (UM) = 1524372kB [ 1185.477876][T16768] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1185.507372][T16768] Node 1 Normal: 247*4kB (UME) 59*8kB (UME) 46*16kB (UME) 221*32kB (UME) 83*64kB (UME) 31*128kB (UME) 4*256kB (UME) 0*512kB 2*1024kB (UE) 2*2048kB (UE) 949*4096kB (UM) = 3912820kB [ 1185.547487][T16768] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1185.557120][T16768] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1185.600722][T16768] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1185.618993][T16768] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1185.732029][T16768] 57717 total pagecache pages [ 1185.737066][T16768] 0 pages in swap cache [ 1185.751339][T16768] Free swap = 124408kB [ 1185.755575][T16768] Total swap = 124996kB [ 1185.760005][T16768] 2097051 pages RAM [ 1185.763850][T16768] 0 pages HighMem/MovableOnly [ 1185.768661][T16768] 416139 pages reserved [ 1185.772851][T16768] 0 pages cma reserved [ 1186.065695][T16658] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.224798][ T3443] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.368633][ T3443] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.436635][T16658] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.479730][ T3443] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.623102][ T3443] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.269645][ T3443] hsr_slave_0: left promiscuous mode [ 1188.276455][ T3443] hsr_slave_1: left promiscuous mode [ 1188.282938][ T3443] bridge_slave_1: left allmulticast mode [ 1188.294636][ T3443] bridge_slave_1: left promiscuous mode [ 1188.306561][ T3443] bridge0: port 2(bridge_slave_1) entered disabled state [ 1188.316671][ T3443] bridge_slave_0: left allmulticast mode [ 1188.324951][ T3443] bridge_slave_0: left promiscuous mode [ 1188.331928][ T3443] bridge0: port 1(bridge_slave_0) entered disabled state [ 1188.375363][ T3443] veth1_macvtap: left promiscuous mode [ 1188.386958][ T3443] veth0_macvtap: left promiscuous mode [ 1188.395158][ T3443] veth1_vlan: left promiscuous mode [ 1188.401919][ T3443] veth0_vlan: left promiscuous mode [ 1189.177170][ T3443] team0 (unregistering): Port device team_slave_1 removed [ 1189.255495][ T3443] team0 (unregistering): Port device team_slave_0 removed [ 1189.323310][ T3443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1189.402292][ T3443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1190.151610][ T3443] bond0 (unregistering): Released all slaves [ 1190.713647][ T3443] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.819390][ T3443] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.910761][ T3443] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.998310][ T3443] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0