last executing test programs: 3m19.85252337s ago: executing program 4 (id=167): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) fsopen(0x0, 0x1) r3 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r3, &(0x7f0000000100)='-1\x00', 0x2) 3m18.767319355s ago: executing program 4 (id=175): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000340)=""/4080, 0xfffffef0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000041, &(0x7f00000008c0)={[{@journal_async_commit}, {@grpquota}, {@noblock_validity}, {@discard}, {@nombcache}, {@debug}, {@i_version}, {@norecovery}, {@noauto_da_alloc}]}, 0x1, 0x510, &(0x7f0000001440)="$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") 3m17.60205656s ago: executing program 4 (id=186): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3m17.353138969s ago: executing program 4 (id=190): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7a, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_procfs(0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2200c851, 0x0, 0x0) r1 = syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x204018, &(0x7f0000000140)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x537, &(0x7f0000000ac0)="$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") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES64=r1, @ANYBLOB], 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x20) lseek(r3, 0xfffffffffffffffc, 0x2) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) 3m16.473829685s ago: executing program 4 (id=193): mkdir(&(0x7f00000003c0)='./file0\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x2, &(0x7f0000000000)={0x0, 0x29, 0x1, @thr={&(0x7f0000000300)="d97d558b8ba9e84ffba0e98de77a68864c0787ed520a217ccfb85fe46df9d1f9acc6aa3979705bcd885cbb2309209a9c2cc828c01c0139274a660b3fe7ba1c6c1fffcda18c", &(0x7f0000000a40)="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"}}, &(0x7f0000000040)=0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r2, 0x80045438, 0x300000000000000) timer_settime(r1, 0x0, 0x0, 0x0) timer_create(0x3, &(0x7f0000000240)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f00000004c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) gettid() mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000180)=0x2, &(0x7f00000000c0)}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0002000000000000000000000004000000000080524dad7cc1d2c8af6b47c0124e25d7c3896a6b137eb205eb830e62ddef0b85145c8d31e0d0706ca4e449eadc6bc217b996b175aa8012a65b3c1cfe0ff6276a427cbdbb2ad46a52c0c4e87e2889e16d625285a6adfc8dbe7b73d613a4b449d9170600a763cbfe8ba56c13327e9ecef8a07148a5e8bbed00a4cb2d0fd1e0383864c253bbd6d8ba430eef1950a05bd0cdd08ac59f42ab70", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/16], 0x48) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e0d05"], 0x10) 3m15.869713313s ago: executing program 4 (id=199): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file2\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x2, 0x337, &(0x7f0000000140)="$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") dup(r0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c"}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = dup(r2) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40603d07, &(0x7f0000000040)) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)='\\', 0x1}], 0x1}}], 0x1, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r4, 0x0, r5, 0x0, 0x2, 0x0) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000200)=0xfc937e2fe0fdebf6) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x42, 0x0, &(0x7f0000000180)) ioperm(0x3, 0x4, 0x100000a) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000) 3m15.23561854s ago: executing program 32 (id=199): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file2\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x2, 0x337, &(0x7f0000000140)="$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") dup(r0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c"}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = dup(r2) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40603d07, &(0x7f0000000040)) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)='\\', 0x1}], 0x1}}], 0x1, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r4, 0x0, r5, 0x0, 0x2, 0x0) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000200)=0xfc937e2fe0fdebf6) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x42, 0x0, &(0x7f0000000180)) ioperm(0x3, 0x4, 0x100000a) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000) 2m53.881073504s ago: executing program 3 (id=263): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02031a09100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e8702000100000008000040000200000000050005"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x700) 2m53.632052563s ago: executing program 3 (id=264): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000001100)=""/4122, 0x101a}], 0x1) 2m51.230746773s ago: executing program 3 (id=270): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) 2m51.008440602s ago: executing program 3 (id=272): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001300)='./file2\x00', 0x0, &(0x7f0000000180)={[{@lazytime}, {@grpjquota}, {@grpquota}, {@discard}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xe}}, {@grpquota}, {@nombcache}]}, 0x1, 0x46a, &(0x7f0000000980)="$eJzs289vFFUcAPDvzLZFQWhFFEFUFI2NP1paUDl40WjiQRMTPeCxtoUACzW0JkKIVmPwaEi8G48m/gWe9GLUk4lXvBsSolxAT2tmd6Zsl93tLpRd6H4+yTbv7bzpe9+deTNv5s0EMLD2Zn+SiPsi4mJEjNayKyp5oazctSvnZv+9cm42iUrl3b+TarmrV87NFmWL9bbkmfE0Iv0iyStZbfHM2RMz5fL86Tw/uXTyw8nFM2dfOHZy5uj80flT04cOHTww9fJL0y+uS5xZfFd3f7KwZ9eb7194e/bwhQ9+/T7Jv4+GODox3EGZvVng/1SqGpc93U1ld4GtdelkqI8NoSuliBjK9+eLMRqluL7xRuONz/vaOOC2ys5Nm1ovXq4AG1gS/W4B0B/FiT67/i0+PRp63BEuv1q7AMrivpZ/akuGIs3LDDdc366nvRFxePm/b7JP3MR9CACAbv2YjX+ebzb+S6N+jLgtnxsai4j7I2J7RDwQETsi4sGIeCgidkbEw51Ve7xINE4N3Tj+SS/daoztZOO/V/K5rdXjv2L0F2OlPLe1Gv9wcuRYeX5//puMx/CmLD/Vpo6fXv/jq1bL6sd/2Ser//CqyaX00lDDDbq5maWZjiagOnD5s4jdQ83iT1ZmApKI2BURu7v719uKxLFnv9vTqlDT+POx8JrWYZ6p8m3EM7XtvxwN8ReS9vOTk/dEeX7/ZLFX3Oi338+/06r+W4p/HWTbf/Pq/b+xyFhSP1+72H0d5//8suU1zdrxN9//R5L3qsejkfy7j2eWlk5PRYwkb9XWqv9++vq6Rb4on8U/vq95/9+er5PF/0hEZDvxoxHxWEQ8nrf9iYh4MiL2tYn/l9eeOt5l/Embf7eusvjnmh7/VprQsP27T5RO/PxDq/o72/4Hq6nx/Jvq8W8NnTbwVn47AAAAuFuk1Wfgk3RiJZ2mExO1Z/h3xOa0vLC49NyRhY9OzdWelR+L4bS40zVadz90KlnOnyaO6tX3dH6vuFh+IL9v/HXp3mp+YnahPNfn2GHQbanr/9t3Xu//mb9Kq8uuzIh4vwM2Dv0ZBldj/0/71A6g95z/YXDp/zC49H8YXM36/6cN+VKP2gL0lvM/DK61+n/P3kYCes75HwaX/g8Dqd278cnNv/Iv0d9ELN/+KtI7ItLblRjpoINs6MSNx4oh4wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAu9H8AAAD//xjg70M=") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f00000007c0)={[{@shortname_winnt}, {@utf8no}, {@fat=@nocase}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x5}}, {@utf8}, {@uni_xlate}, {@shortname_win95}, {@shortname_win95}, {@shortname_mixed}]}, 0xfd, 0x2a0, &(0x7f0000000280)="$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") r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) 2m50.45773265s ago: executing program 3 (id=275): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001800)={0x14, 0x0, &(0x7f0000001680)=[@increfs_done], 0x0, 0x0, 0x0}) 2m50.076460217s ago: executing program 1 (id=277): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f000030e000/0x1000)=nil, 0x1000}, 0x1}) 2m49.171959224s ago: executing program 1 (id=278): syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000003240), 0x0, 0x4000800) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x6a0, 0x5, 0x348, 0xb8, 0x0, 0xfeffffff, 0x208, 0x208, 0x2b0, 0x2b0, 0xffffffff, 0x2b0, 0x2b0, 0x5, 0x0, {[{{@uncond, 0x3e7, 0x70, 0xb8, 0xe000000}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote, @gre_key}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_batadv\x00', 'xfrm0\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x0, 0x7}}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @rand_addr, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @gre_key}}}}, {{@ip={@dev, @multicast1, 0x0, 0x0, 'macvlan0\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @loopback}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) 2m48.884274032s ago: executing program 3 (id=280): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) syz_clone(0x4eb82100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f0000000000)) write$cgroup_subtree(r2, 0x0, 0x0) 2m48.076022579s ago: executing program 1 (id=281): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) 2m47.598634847s ago: executing program 33 (id=280): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) syz_clone(0x4eb82100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f0000000000)) write$cgroup_subtree(r2, 0x0, 0x0) 2m47.574117346s ago: executing program 1 (id=284): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {@barrier}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@noquota}, {@nogrpid}, {@noauto_da_alloc}, {@mblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f00000003c0)='./file1\x00', 0x0, &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', 0x0, 0x0, 0x835, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000100)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2004400, &(0x7f0000000200)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYBLOB="a85f0dc3446ae0c36ba4848c770920cd9addace5c10dee3a96f810395203ae3bd777155e0b6764a2fd6da6853696460e4dc9849661ef1979cffa16b5bf59dabf336f10c3c559e5e6957f06f8cc8dc9d87dce1e2fe00f1a9e839df7923f50ee737985bd9b461e751d8f2be497d8651d589f890f61b87b83f3c7ad3ba191fa8e9a0ea1b14157305d0891f22ea0bbafcc5044e7177fcb08366d582b977b1847305408f72d19577993c4f746315483175fd218fe2194c2e6c97f561184a4f7c739d2ae93ba3016354f0d2ed26e6b810ebbbd0d1f93e7251bd3b5ed60ea3c840a2bbe7fc0", @ANYRES32, @ANYRESOCT, @ANYRES16], 0x1, 0xa23, &(0x7f0000000a80)="$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") syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x210008, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0000005733010312bb6086da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f00000001c0)="$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") open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x1c, 0x4, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea000000000000b600", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b900000000fffffffff2060000000000000200"}) r1 = open(&(0x7f00000001c0)='./file1\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x1200, 0x41004, 0x3) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2m45.646804638s ago: executing program 1 (id=290): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000140)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000540)=0x8) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x210008, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f0000002540)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x3f2, 0x20, 0x70bd28, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x10, 0x3f2, 0x300, 0x70bd2c, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x5}, 0x80) r3 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$MRT6_PIM(r3, 0x29, 0xcf, &(0x7f0000000040)=0x2, 0x4) getdents64(0xffffffffffffffff, 0x0, 0x2e) r4 = accept$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000140)={0x7, 0x7, 0x4, 0x5, 0x6, 0x0, [{0x0, 0xc, 0x20ffd85c, '\x00', 0x200}, {0x7fffffff, 0x9, 0xf99}, {0x99, 0xfff, 0xf9, '\x00', 0x84}, {0x7f, 0x2, 0x4, '\x00', 0x200}, {0x7, 0x7, 0x1, '\x00', 0x400}, {0x7, 0x9, 0x6, '\x00', 0x2000}]}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x2242891, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f003d"]) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x3f2e}, 0x8, 0x0) landlock_restrict_self(r6, 0x0) creat(&(0x7f0000000200)='./file0/../file0/file0\x00', 0x4) sendfile(r1, r1, 0x0, 0x80000000) 2m43.77504039s ago: executing program 1 (id=294): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0xb) read$FUSE(0xffffffffffffffff, &(0x7f0000004a40)={0x2020}, 0xb6944300f3302f56) r1 = fsmount(0xffffffffffffffff, 0x1, 0x6) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x4e402, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000100)={0xffffffffffffffff, 0x6, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0xc, 0x0, "444e1eed4cd88579e76ab9daa8c452e5ee7d3e56b32361dbe1e23e186fb297a4a7ce47d5842c40cc197330a4ea15d0d1f53a7d0664e59f1fa21a81e7af872500", "f4350e9d92325ebfa93ac3894faf899ed86d77ba26fe2663292e1f143778c139914294b7ca849eefe3a947e7f3361f662d50e98c75eaf8759443cbcc1d99c547", "8489e235ed2e73616125a9fab175c331065265da8be8fa3222138127cdf63b1a", [0x7f, 0x7fffffff]}}) close_range(r0, r1, 0x2) r3 = syz_clone(0x2000200, 0x0, 0x49, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="190000e2ffffff00000000000000f700"/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8}) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0x40405514, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) 2m43.554622839s ago: executing program 34 (id=294): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0xb) read$FUSE(0xffffffffffffffff, &(0x7f0000004a40)={0x2020}, 0xb6944300f3302f56) r1 = fsmount(0xffffffffffffffff, 0x1, 0x6) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x4e402, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000100)={0xffffffffffffffff, 0x6, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0xc, 0x0, "444e1eed4cd88579e76ab9daa8c452e5ee7d3e56b32361dbe1e23e186fb297a4a7ce47d5842c40cc197330a4ea15d0d1f53a7d0664e59f1fa21a81e7af872500", "f4350e9d92325ebfa93ac3894faf899ed86d77ba26fe2663292e1f143778c139914294b7ca849eefe3a947e7f3361f662d50e98c75eaf8759443cbcc1d99c547", "8489e235ed2e73616125a9fab175c331065265da8be8fa3222138127cdf63b1a", [0x7f, 0x7fffffff]}}) close_range(r0, r1, 0x2) r3 = syz_clone(0x2000200, 0x0, 0x49, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="190000e2ffffff00000000000000f700"/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8}) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0x40405514, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) 2m30.801502402s ago: executing program 0 (id=325): socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x80000, 0x0) flock(r0, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000840)=ANY=[@ANYBLOB="000000004c90020000000000030001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000c3"]) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000001080)={0x7, r0, 0x1b, {0x9, 0x3}, 0x6}, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) truncate(&(0x7f0000000000)='./file1\x00', 0x1104) 2m29.389397775s ago: executing program 0 (id=327): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000640)=""/102400, 0x19000) semctl$GETALL(0x0, 0x0, 0xd, 0x0) r2 = semget$private(0x0, 0x6, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) semtimedop(r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000001480)={{0x6, 0x6, 0x2, 0xb, '\x00', 0x2}, 0x1, [0x7, 0x9, 0xc, 0x8000, 0xfffffffffffffff7, 0x2, 0xe, 0x3, 0x9, 0xfff, 0x6, 0x8, 0x7, 0x9, 0x9, 0x64c5f289, 0x3000000, 0x0, 0x100, 0x3, 0x5e0d, 0x3, 0x4, 0x5, 0x7fff, 0x7fffffffffffffff, 0x10, 0x2, 0x1ff, 0x0, 0xffff, 0x966a, 0xe, 0x0, 0x20000, 0x0, 0x1, 0x10000, 0x6, 0x74e, 0x100000000, 0x3d, 0x7, 0x4, 0x1ff, 0xe86, 0x5, 0x9, 0x4, 0x96d, 0x4, 0x1, 0x7f80000000000000, 0x7, 0x5, 0x80, 0x17, 0xffffffffffffffff, 0x64, 0x6, 0xc5b6, 0x8, 0x10, 0xb612, 0x5, 0x2, 0x4, 0x1, 0x19125dd8, 0x1, 0x6, 0x3, 0x9, 0x8, 0x7, 0x101, 0x4, 0x1000, 0xe60b, 0x8, 0x0, 0x0, 0x1, 0x6, 0xd, 0x1, 0x6, 0x8000000000000000, 0xd, 0x1000, 0xfffffffffffffff1, 0x2, 0x4, 0x2, 0x4, 0x576, 0x0, 0x5, 0x100000001, 0x9, 0xfffffffffffffffc, 0x3, 0x0, 0xf2, 0x80, 0x6, 0x8d, 0xc, 0x6, 0x7, 0xe, 0x4, 0xffffffffffffffff, 0x6, 0xff, 0x9, 0x4, 0xfffffffffffffffc, 0xc2a, 0xfffffffffffffffc, 0x3, 0xffff, 0x8, 0x4, 0x8001, 0x0, 0x9, 0xfffffffffffffffe]}) 2m27.412938887s ago: executing program 0 (id=331): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f95e24fc60040068000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2m20.355048845s ago: executing program 0 (id=349): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000240)={[{@nobarrier}, {@gid}, {@creator={'creator', 0x3d, "bd3d66f1"}}, {@creator={'creator', 0x3d, "64eb8ba9"}}, {@nodecompose}, {@umask={'umask', 0x3d, 0xde5}}, {@barrier}]}, 0x3, 0x6a4, &(0x7f0000001b40)="$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") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid}]}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f000000ac40)={0x2020}, 0x2020) 2m19.948031303s ago: executing program 0 (id=351): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073019d00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2m19.28394311s ago: executing program 0 (id=352): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xa000000, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, &(0x7f0000000040)=0x1c, 0x80400) shutdown(r1, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) 2m18.754346198s ago: executing program 35 (id=352): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xa000000, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, &(0x7f0000000040)=0x1c, 0x80400) shutdown(r1, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) 1m2.85220939s ago: executing program 8 (id=612): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000640)=""/102400, 0x19000) semctl$GETALL(0x0, 0x0, 0xd, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000b00)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x288, 0x1b8, 0xc8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xe8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 59.562034765s ago: executing program 8 (id=618): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) r1 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000040)=0xf) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) gettid() futex(&(0x7f000000cffc), 0x1, 0x800000, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDGKBMODE(r3, 0x4b32, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0x0, 0xbf}) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c0ef815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaad1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69922050000f5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762e122428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302be7ff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9d3fded31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000bb60bc1f1635caf0ca9eabf804adc94e0a73923976299c7ac285542e5de1dd14183f1bb171eabe19fe98f551e1b635300d8e38f07eda29341535e532a6d64ed36fac9c77827bf85ac369eac8879e515b58a03438561c5e78157649c6d45e7e621b79d724e277f1ee49e5b63e81180626a73510be26082a097de42b016336707866d422a93e01c1cbe0cefd4a89dc24b0d7f549908b8620ffd7d900a0a96a381fdd763b39f0bc0af5faf593c5d39fdf43430e4b7c23b5cf691792248cfb9ec9f882dd19a9f6e9426b4f88fe14487942bb34e585083f7b98900682e2683922a94e2f0baecc00f74071d025220bcdbc7f5575ce72981e918681b5a0b1ee9af749885fd8cefb9e182b326eaebad4616647fe1c8c16e42e123c9651f634e962219f"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) 52.648453435s ago: executing program 8 (id=631): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x2b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r7, 0x0, 0x7, 0x9) read(r6, &(0x7f0000032440)=""/102364, 0x18fdc) write$P9_RAUTH(r7, &(0x7f0000000240)={0x14, 0x67, 0x2, {0x80, 0x0, 0x8}}, 0x14) close_range(r5, r6, 0x0) 46.431765827s ago: executing program 8 (id=647): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000300)=ANY=[], 0x1, 0x27d, &(0x7f00000008c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x10c000, 0x0) 44.96811681s ago: executing program 8 (id=651): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240), 0x0, 0x1a3, &(0x7f0000000000)="$eJzs0L9rE2Ecx/H397nLjwpVTsUhgg1YPC9Uk0vVwcXgFCEHDi6CQUMam2KCppfBlha6SEGq/Rd0quCiQp1EFJyLg+Cg59JNmqE4iINE7vKYf6LPC+4+fL7cj4dvO+yFGeDv/kqTCgmLw3xGuAJMyWim1Cjf6v5T5+YouKr7hs4XOnPh0vK9RqfTWsxfzuPAy9R4IPArmY2f4TUnFAOhgnzdX2k25E7AsEJXzQU4NQpPsOr0vKfk7EmO38Zi6G5wTdETtwZHiv3ug2K4tHxuoduYb823oDx7qXShVLpYLt5d6LRK24j3WBTPWMULyARMeKuk6jzasQ8xI4jXVpElhQHpOps71tnTM/F+9hgifHAHZL7b7by6wRmyt3C2qXJMeI4VMF1jQmGT/KiKXFdvxLe/2L9TiuyaZZ1v3u/Mrd9U8ie9VZG9rPi7pFyfcsFn1oEcR/nIesR0RDViK2L3B1PyLl7R/73aa/H9lW4nOQVpHjb6/UU/DZ/EDSjHlwOTyedUci4H3ut3BOw4v+luGIZhGIZhGIZhHAT/AgAA///W7GMM") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r2}) 43.795724205s ago: executing program 8 (id=658): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x14, &(0x7f0000002440)=ANY=[], 0xff, 0xc0c, &(0x7f00000008c0)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f00000000c0)='./bus\x00', 0xca942, 0x0) pwrite64(r2, &(0x7f0000000300)='\x00', 0x1, 0x10000000005) close_range(r1, 0xffffffffffffffff, 0x0) 42.265112008s ago: executing program 36 (id=658): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x14, &(0x7f0000002440)=ANY=[], 0xff, 0xc0c, &(0x7f00000008c0)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f00000000c0)='./bus\x00', 0xca942, 0x0) pwrite64(r2, &(0x7f0000000300)='\x00', 0x1, 0x10000000005) close_range(r1, 0xffffffffffffffff, 0x0) 27.240938822s ago: executing program 6 (id=698): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0x0) semget$private(0x0, 0x6, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000b00)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x288, 0x1b8, 0xc8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xe8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 26.264355037s ago: executing program 6 (id=701): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000640)=""/102400, 0x19000) semctl$GETALL(0x0, 0x0, 0xd, 0x0) r2 = semget$private(0x0, 0x6, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) semtimedop(r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000001480)={{0x6, 0x6, 0x2, 0xb, '\x00', 0x2}, 0x1, [0x7, 0x9, 0xc, 0x8000, 0xfffffffffffffff7, 0x2, 0xe, 0x3, 0x9, 0xfff, 0x6, 0x8, 0x7, 0x9, 0x9, 0x64c5f289, 0x3000000, 0x0, 0x100, 0x3, 0x5e0d, 0x3, 0x4, 0x5, 0x7fff, 0x7fffffffffffffff, 0x10, 0x2, 0x1ff, 0x0, 0xffff, 0x966a, 0xe, 0x0, 0x20000, 0x0, 0x1, 0x10000, 0x6, 0x74e, 0x100000000, 0x3d, 0x7, 0x4, 0x1ff, 0xe86, 0x5, 0x9, 0x4, 0x96d, 0x4, 0x1, 0x7f80000000000000, 0x7, 0x5, 0x80, 0x17, 0xffffffffffffffff, 0x64, 0x6, 0xc5b6, 0x8, 0x10, 0xb612, 0x5, 0x2, 0x4, 0x1, 0x19125dd8, 0x1, 0x6, 0x3, 0x9, 0x8, 0x7, 0x101, 0x4, 0x1000, 0xe60b, 0x8, 0x0, 0x0, 0x1, 0x6, 0xd, 0x1, 0x6, 0x8000000000000000, 0xd, 0x1000, 0xfffffffffffffff1, 0x2, 0x4, 0x2, 0x4, 0x576, 0x0, 0x5, 0x100000001, 0x9, 0xfffffffffffffffc, 0x3, 0x0, 0xf2, 0x80, 0x6, 0x8d, 0xc, 0x6, 0x7, 0xe, 0x4, 0xffffffffffffffff, 0x6, 0xff, 0x9, 0x4, 0xfffffffffffffffc, 0xc2a, 0xfffffffffffffffc, 0x3, 0xffff, 0x8, 0x4, 0x8001, 0x0, 0x9, 0xfffffffffffffffe]}) 22.794304052s ago: executing program 6 (id=707): r0 = openat(0xffffffffffffffff, 0x0, 0x325240, 0x23) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000a6da00000000000000b5b13029cafef98cb45c480f409b59851980e0717f90372160ab6eea3d1453d7e0961d10cf812dd3bba7cb2e1e75dd5566546f2c3bff1de97ad9eb5d939a14ebc52fd20e47c42905d181f128fc26", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000380)=0xff) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0x9) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x7f) read$msr(r5, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) 16.181297422s ago: executing program 6 (id=716): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000640)=""/102400, 0x19000) semctl$GETALL(0x0, 0x0, 0xd, 0x0) r2 = semget$private(0x0, 0x6, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) semtimedop(r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000001480)={{0x6, 0x6, 0x2, 0xb, '\x00', 0x2}, 0x1, [0x7, 0x9, 0xc, 0x8000, 0xfffffffffffffff7, 0x2, 0xe, 0x3, 0x9, 0xfff, 0x6, 0x8, 0x7, 0x9, 0x9, 0x64c5f289, 0x3000000, 0x0, 0x100, 0x3, 0x5e0d, 0x3, 0x4, 0x5, 0x7fff, 0x7fffffffffffffff, 0x10, 0x2, 0x1ff, 0x0, 0xffff, 0x966a, 0xe, 0x0, 0x20000, 0x0, 0x1, 0x10000, 0x6, 0x74e, 0x100000000, 0x3d, 0x7, 0x4, 0x1ff, 0xe86, 0x5, 0x9, 0x4, 0x96d, 0x4, 0x1, 0x7f80000000000000, 0x7, 0x5, 0x80, 0x17, 0xffffffffffffffff, 0x64, 0x6, 0xc5b6, 0x8, 0x10, 0xb612, 0x5, 0x2, 0x4, 0x1, 0x19125dd8, 0x1, 0x6, 0x3, 0x9, 0x8, 0x7, 0x101, 0x4, 0x1000, 0xe60b, 0x8, 0x0, 0x0, 0x1, 0x6, 0xd, 0x1, 0x6, 0x8000000000000000, 0xd, 0x1000, 0xfffffffffffffff1, 0x2, 0x4, 0x2, 0x4, 0x576, 0x0, 0x5, 0x100000001, 0x9, 0xfffffffffffffffc, 0x3, 0x0, 0xf2, 0x80, 0x6, 0x8d, 0xc, 0x6, 0x7, 0xe, 0x4, 0xffffffffffffffff, 0x6, 0xff, 0x9, 0x4, 0xfffffffffffffffc, 0xc2a, 0xfffffffffffffffc, 0x3, 0xffff, 0x8, 0x4, 0x8001, 0x0, 0x9, 0xfffffffffffffffe]}) 13.066020878s ago: executing program 6 (id=723): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x441, &(0x7f0000000780)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = open$dir(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000080)=@v1={0x0, @adiantum, 0x2, @desc3}) link(&(0x7f00000000c0)='./file2\x00', &(0x7f00000002c0)='./bus/file0\x00') 11.652182312s ago: executing program 2 (id=724): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x1, r2, 0x0) ftruncate(r1, 0xdcb) 8.714311239s ago: executing program 5 (id=730): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88372091cd397b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca00000000000000000000007925d0f1256330b9e2aa9a18cea8e009116f63c6c7d8f7f95bf0f6731e5eb1dcdc534f357b9f08e7a9a3aebeca145d695053b5bef004ca24e6c57ed10f01488d38b8b0b68d93e3cf630837915d518fde2115e66615786fe7b9216de958119cf762cac77ac829a02f48e72c0d2841880b2c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000080)={0x0, 0x6}) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x2) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000180)={[{@nolazytime}, {}]}, 0x6, 0x4eb, &(0x7f0000000a40)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) write$binfmt_script(r3, &(0x7f0000000380), 0x208e24b) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks}, {@minixdf}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000240)={0x3920e, r4, 0xfffffffe, 0x0, 0x0, 0x3}) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x7fff0000}]}) r8 = msgget$private(0x0, 0x442) msgsnd(r8, &(0x7f0000003540)=ANY=[], 0xe8, 0x800) msgrcv(r8, 0x0, 0x0, 0x1, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000001c40)={{0x1, 0x2, 0x8f, 0x5, 0x0, 0x58}, 0x245, [0x6, 0x3, 0x3, 0x7, 0x100, 0x4ef, 0xfffffc00, 0x0, 0x4b6b, 0xffffffff, 0x1, 0x8001, 0x690, 0x400, 0x6, 0x7, 0xfffffff7, 0x7, 0x2, 0x8, 0x1, 0x3f, 0x5, 0x0, 0x7, 0x9, 0x6, 0x81, 0x4, 0x1, 0x2, 0x1, 0x3, 0xffffffff, 0xc, 0xfffffe00, 0x7fff, 0x3ff, 0x0, 0x8000, 0x9, 0x63d2, 0x9b14, 0x0, 0x2a, 0x2390, 0xfffffffa, 0x8001, 0xff, 0x8, 0x1000, 0x10000, 0x2, 0x3ba5, 0x7, 0x7, 0x6, 0x2, 0x4a, 0x7, 0x6, 0x2, 0xfffffff7, 0x3, 0x0, 0xff, 0x5, 0x21, 0x6e67, 0x5, 0x2, 0x4, 0x7, 0xd, 0x5d, 0x9, 0x65, 0x80000000, 0x10000, 0x3, 0x7fff, 0x7, 0x7fc, 0x3000000, 0xfffffffb, 0x8, 0x7, 0x63, 0xa9ec, 0x9, 0x1000, 0x5, 0x7, 0x100000, 0x4, 0x2b, 0x4, 0xfff, 0x2, 0x0, 0x8, 0x1, 0x2cd5, 0xf, 0x63b, 0x1, 0x0, 0x100, 0x0, 0x8, 0x7, 0x2, 0xf34, 0x5, 0x2, 0x8, 0x1000, 0x7, 0x3, 0x30d9, 0xfffffff7, 0x7, 0xffffffff, 0x800, 0x80, 0xe, 0x8, 0x5, 0x5, 0x400, 0x4, 0xe2, 0x3ff, 0x3, 0x42b, 0x5, 0xfffffff9, 0x6, 0x0, 0x2, 0x4, 0x10000, 0xffe00000, 0x8001, 0x8, 0x7, 0xfffffff7, 0x401, 0x7fff, 0x10000, 0x81, 0x4, 0x4, 0x1, 0x43d, 0x8759, 0x0, 0x2, 0x52b, 0x1, 0x6, 0x0, 0x3, 0x5ed1, 0x9, 0x7f1, 0x8001, 0x0, 0x3, 0x5, 0x0, 0x4, 0x80000000, 0x4, 0x0, 0x8, 0xff, 0x1ff, 0x80, 0x6d8, 0x0, 0x790, 0x5, 0x2, 0x8, 0x9e6, 0x9, 0x3, 0x0, 0x3ff, 0x3, 0x78, 0x7, 0xfffffffd, 0x7, 0x800, 0x80000000, 0x0, 0xd, 0x100, 0x268, 0x8, 0x1, 0x0, 0x9, 0x8, 0x6, 0x2, 0x594, 0x3, 0x3, 0x2, 0x6, 0x1000, 0x4, 0x8000, 0x5, 0xc020, 0x789, 0x9ad, 0x9, 0x4, 0x8, 0x3, 0x81, 0xd2, 0xf, 0x6, 0x3, 0x6, 0xc, 0x6, 0x8d, 0x2d6, 0x9, 0x100, 0x8, 0x7, 0x3, 0xfffffffd, 0x7, 0xbd, 0x0, 0x9, 0xbe, 0x2, 0x23, 0x4, 0xdc0, 0x1, 0x6, 0x10000, 0x1, 0x17, 0x5, 0x7fff, 0x4, 0x7, 0x1000, 0x81, 0x3, 0x7fff, 0x80000000, 0x91ab, 0x7, 0x4e, 0x4, 0x9, 0xffffffff, 0xd, 0x2, 0x5, 0x100, 0x5, 0xccf, 0x2, 0x7, 0x7, 0x1, 0x8, 0xfffffff9, 0x4, 0xffffffff, 0x5869, 0x4, 0xd4, 0x6, 0x4, 0x5, 0x6, 0x0, 0x7, 0x2, 0xffff, 0x0, 0x4, 0x3, 0x4, 0x8, 0x2, 0x5, 0xffffffc0, 0xd, 0x222, 0x85109bd, 0xfffffff9, 0x6, 0x1000, 0x215, 0x9, 0x8, 0x7, 0xd, 0x4, 0xfffffffe, 0xb679, 0x0, 0xdf, 0x47967cfd, 0xe0d, 0x10001, 0x6, 0x5, 0xf3, 0x7f, 0x280000, 0x3, 0x54d, 0x1000, 0x7, 0x3, 0x8000, 0xfffffffe, 0x5, 0x1, 0x5, 0x8, 0xfffffc01, 0x4, 0x0, 0x7c8, 0x8001, 0x0, 0x80000000, 0x0, 0x3, 0x92a8, 0x5b04ab4b, 0xa6, 0xfffffffa, 0xfffffff7, 0x21b7, 0x9, 0x800, 0x7, 0x6, 0x42, 0x8, 0x2, 0xfffffffd, 0x2, 0x1000, 0x2c7, 0x3, 0x7, 0x5, 0xfc000000, 0xf, 0x3, 0x0, 0x1, 0x8, 0x6, 0x1ff, 0x9, 0x3, 0x4, 0xfa0, 0x5, 0x14c000, 0x1, 0x6, 0x4, 0x1, 0x2, 0xae3, 0x6, 0x1, 0x2, 0x84a3, 0x9, 0x7, 0x3, 0xa, 0x7ff, 0x5, 0x70000000, 0x80000000, 0x0, 0x5, 0xfffffffd, 0x7fff, 0xffffffff, 0x9, 0x0, 0xd4, 0xffffffff, 0xa, 0xff, 0xb, 0x7, 0x5, 0x6, 0x4, 0x8, 0x8, 0x1ff, 0x2, 0x10, 0x7, 0x3, 0x400, 0x2, 0xd1e, 0x400, 0x1, 0x4, 0x0, 0x17c, 0x0, 0x7, 0x88, 0x3, 0x9, 0x7, 0x4b9620db, 0x3, 0x1, 0x6, 0xfffffff7, 0x4, 0x8, 0x4, 0x8, 0x9, 0x7, 0xfffffc33, 0x10, 0x4513464, 0xffffff81, 0x5, 0x4, 0x101, 0x1, 0x2, 0x2, 0x7f, 0x5, 0xd35f, 0xffffff4f, 0x1, 0x5, 0x401, 0x0, 0x2, 0x6, 0x3, 0x0, 0x5, 0x4, 0x6, 0x3, 0x7fffffff, 0x8, 0x61, 0x0, 0x5, 0x7fffffff, 0x6, 0x9, 0x4, 0x10, 0x3, 0x6, 0xffffffff, 0xb9f, 0xfffffec5, 0x6, 0x5, 0x2, 0x841, 0x2, 0x4, 0x5, 0x0, 0xc7, 0x7f9, 0xd, 0x4, 0x800, 0xf, 0xa, 0x7fffffff, 0x8, 0x7f, 0xc0000, 0x47, 0x5, 0x3, 0x9, 0x9, 0x3, 0x7, 0x4, 0x944, 0x1, 0x7ff, 0x2, 0xc, 0x5, 0x4, 0x8, 0x5, 0x10, 0x2, 0x9, 0x2, 0x4, 0x6, 0x9, 0x9, 0x81, 0xfa52, 0x0, 0x8000, 0x1, 0xfffffffa, 0x6, 0x5, 0x1, 0x1, 0x4, 0x2, 0xffff, 0xce, 0x181c, 0x43a5, 0x8, 0x3ff, 0x80000001, 0x81, 0x5, 0x6, 0x9, 0xffffffff, 0x5, 0x80000000, 0x4, 0x3, 0x4, 0x9, 0x7f, 0x81, 0xfff, 0xf, 0x7, 0x0, 0x3e0, 0x9, 0xe, 0x7, 0x2, 0x6, 0xfffffffa, 0x1, 0x1, 0x7, 0xe8f1, 0x1, 0xffffffff, 0x3, 0x9, 0x4, 0xb, 0xe9ca, 0xdc7b, 0xff, 0x1a4, 0xf250, 0x400, 0x323, 0x5, 0x1, 0x9, 0x150, 0xa, 0x8, 0xa, 0xfff, 0x3, 0x6, 0x1aed, 0x7, 0x5, 0x7, 0x20000006, 0x6, 0x100, 0xffff, 0x6, 0x1, 0x10000, 0x80, 0x6, 0x7, 0x0, 0x10000, 0x5, 0x7fff, 0x2, 0xcee, 0x8, 0x5, 0x8, 0x6, 0x41e, 0x2, 0x8f91, 0x8, 0x200, 0x2, 0xffff, 0x800, 0x7, 0x7fffffff, 0x7, 0x5, 0x8, 0x1, 0x407dc8e3, 0x966, 0x80000001, 0x4, 0x1, 0x46, 0x6, 0x5, 0x5, 0x45b, 0x5, 0x2, 0x4, 0x9, 0x8000, 0x6, 0x2003, 0x2, 0x1000000, 0x0, 0x2490, 0x5, 0x7, 0x99, 0xb, 0x6, 0x44, 0xfffffffd, 0x4, 0xad8, 0x2, 0x7ff, 0x2, 0x6b9, 0x7fffffff, 0x7ef5, 0x6, 0x8, 0x7ff, 0x3b, 0x5, 0x6, 0x100, 0x401, 0x3, 0xffffffff, 0xa1, 0x7ff, 0x3ff, 0x4, 0xf, 0x7, 0x8c, 0x9, 0x101, 0x800, 0x9, 0x400, 0x20, 0x3, 0x6, 0x6, 0x8, 0xfff, 0x1, 0x0, 0x7, 0x4, 0x4d, 0x4, 0x5, 0x1, 0x10000, 0x2, 0x0, 0x81, 0x8e, 0xd, 0x209, 0x3, 0x8, 0x7, 0xfffffff0, 0x1, 0x3, 0x3, 0xfffffff9, 0xad0, 0x1, 0x40, 0x8, 0x81, 0x10, 0x5, 0x4, 0x4, 0x4, 0x6, 0x2, 0x6, 0x5, 0x401, 0x5cfd, 0x4, 0x3, 0x3, 0x5f06, 0x80000001, 0x6, 0xffffffff, 0x400, 0x1, 0xc, 0x50, 0x2, 0x4, 0xf, 0x9, 0x4, 0x401, 0x8, 0x3, 0x8, 0x4, 0x1, 0x1, 0x80, 0x3, 0xfffffff9, 0x1, 0x7fae, 0x1, 0x0, 0x7, 0x1, 0x4, 0x100, 0x75a, 0x4, 0x10004, 0x24ed, 0x8001, 0x6, 0x3, 0x80000000, 0x7f, 0x8a, 0x84, 0x7, 0x3e13, 0x0, 0x8001, 0x80000000, 0xfffffffb, 0x8, 0x0, 0x1000000, 0x1, 0x3, 0x4, 0x8, 0x8, 0x8e49, 0x3, 0x9, 0x2, 0xfffffffb, 0x5, 0xcf63, 0x0, 0x8, 0x6, 0x7, 0x8000, 0x4, 0x6, 0x7f, 0xfffffffa, 0x6, 0x6, 0x0, 0x9, 0x637, 0x9, 0x10, 0xffffffff, 0x0, 0x100, 0xfffffff7, 0xd, 0x3, 0x3, 0xe, 0x5, 0x401, 0x5, 0x925, 0x7, 0x3, 0x1, 0x0, 0x0, 0x9, 0x2, 0x7, 0x82, 0x7f, 0x6, 0x200, 0xfffffe00, 0xcfd5, 0x0, 0x5000000, 0x4, 0x1, 0xd629, 0x2, 0x8, 0xff, 0x800000, 0x2, 0x0, 0x8, 0xe, 0x995, 0x1, 0x34, 0x3, 0x3, 0xffff13d4, 0x6, 0xb, 0x40, 0x40, 0xfffffff8, 0x9, 0x7, 0x5, 0x100, 0x4, 0x0, 0xc14, 0x80000001, 0x0, 0x1, 0x2, 0x6, 0x3, 0xb72f, 0x1, 0x4, 0xa8c, 0x9, 0x1, 0x1, 0x81, 0x3, 0x9, 0x1, 0xc, 0x8, 0x69, 0x0, 0xfffff850, 0x7, 0xca0, 0x0, 0x0, 0x2, 0x400, 0x8001, 0x3, 0xffff, 0x7, 0xffffe52a, 0x4, 0xb, 0x1, 0x4, 0x80, 0x5bd3, 0x401, 0x800, 0xfffffff6, 0x7, 0xffffff74, 0x7, 0x1, 0x8, 0x1, 0x4, 0x3, 0x9, 0x5, 0x5, 0x101, 0x82e, 0x5, 0xc03, 0xf0, 0x6, 0x1a747dd0, 0x6, 0xb970, 0x0, 0x200, 0x3, 0x7, 0x1, 0x7, 0x1, 0x6, 0x1, 0x0, 0x7, 0x7, 0x6, 0xffff, 0x7, 0xffffffe2, 0xd, 0x9, 0x22, 0x3, 0x4, 0x9b9, 0x7, 0x24, 0x6, 0x1, 0x2, 0x2, 0x4, 0x1, 0x8217, 0x0, 0x59, 0x9, 0x5, 0x1, 0x8, 0x1, 0x7, 0x6, 0x7, 0x6, 0x723, 0xffffffc0, 0x3ff, 0x8, 0x0, 0x7fff, 0x10000000, 0x400, 0x1000, 0xffffffff, 0x0, 0x4, 0x1, 0x5, 0x3, 0x0, 0x8, 0x5, 0x4, 0x8, 0x3, 0x92c3, 0x2, 0x88000, 0x10, 0x0, 0x9, 0xfffffffc, 0x9, 0x3f, 0xe37, 0x158, 0x7fff, 0x8, 0x25c, 0xc27, 0x8, 0xdc, 0x5]}) 8.324881717s ago: executing program 7 (id=731): utime(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40c00, 0xd503}}, 0x20}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 8.108141596s ago: executing program 7 (id=732): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000), 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0xfff, 0x0) 7.660816654s ago: executing program 2 (id=733): socket$nl_generic(0x10, 0x3, 0x10) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r0 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = semget$private(0x0, 0x0, 0x0) semctl$IPC_INFO(r3, 0x3, 0x3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63081b28559b3367", 0xb}], 0x1) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0xc0086202, &(0x7f0000000080)=0x1) 7.514516754s ago: executing program 5 (id=734): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000005080)='./file1\x00', 0x1, 0x8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000080)="3b464c3bcd2bd7d2b1a92eca79c286a06dffdfeb623ea9e40a2c95cd702350d944237596556c9479bf1521276d845eb45d2cd8e6380fc6", 0x37}, {&(0x7f0000000180)="fa302c5276f60e090ecdcd2ab8152552e0ec74a69db872f09ac999fb27496391dbf3d0bc94611c29a7ddbe0b2b272911544465bb22aa", 0x36}, {&(0x7f00000002c0)="87c3752dd3dafc", 0x7}], 0x3}}], 0x1, 0x0) 5.599945255s ago: executing program 7 (id=735): r0 = openat(0xffffffffffffffff, 0x0, 0x325240, 0x23) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000a6da00000000000000b5b13029cafef98cb45c480f409b59851980e0717f90372160ab6eea3d1453d7e0961d10cf812dd3bba7cb2e1e75dd5566546f2c3bff1de97ad9eb5d939a14ebc52fd20e47c42905d181f128fc26", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000380)=0xff) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x9) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x7f) read$msr(0xffffffffffffffff, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) 5.599590935s ago: executing program 2 (id=736): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000040c0)={0x8, {"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", 0x1000}}, 0x1006) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000200)={[{@shortad}, {@partition={'partition', 0x3d, 0x5}}, {@noadinicb}, {@uid}, {@gid}, {@volume={'volume', 0x3d, 0x6}}]}, 0x1, 0x489, &(0x7f0000000580)="$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") 4.826121472s ago: executing program 2 (id=737): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fsc']) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x8, 0x1, 0xbe, 0x6}, {0xe90, 0x54, 0x0, 0x8001}, {0xa, 0x0, 0x3, 0x5}, {0x2, 0x9, 0x2, 0x8}]}) 4.796258982s ago: executing program 7 (id=738): socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x80000, 0x0) flock(r0, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 3.803002287s ago: executing program 7 (id=739): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000640)=""/102400, 0x19000) semctl$GETALL(0x0, 0x0, 0xd, 0x0) semget$private(0x0, 0x6, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000b00)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x288, 0x1b8, 0xc8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xe8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 3.718238347s ago: executing program 2 (id=740): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$unix(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="c60a", 0x2}], 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="100000000000000001000000010000002c000000000000000100000001000000", @ANYRES32, @ANYRES32=r3], 0x40}, 0x1001) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002502000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe5d6405000000000075040000000d00000701000000000000b70400001000e5206a0700fe00000000850000007d000000b70000000a00000095000000000000006458c2c62fc206000000f909a63796c113a80c19aab9d60700ffffffff483be3f0d3253730e78000000062c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766aeb39439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c013700e69274f8e9c31975e551558055dc2dc29edc33b375fa325dcf3e91e20f63d7030dbe7ff7f51fe89c3d17cf45a1616ad237682057034dfdc81f5a53cd640212c88e8b687a2446049577c75b76b775c1e301caf2465ed4b2ad56b848d046c52bfc3737127120ab17d82a294d174f240a3cdc725cfe6e839a1f80f59486578e45b008d39ab618f660e3c53ed4409aa92ae4fecd913060ca74ed8a303e22de12087a217d8d7be0ae1117cc791313b1318497dd5ebeef0d7e1795a6ff20f699870ebb137cffa79465da52ab2b3430ba0ba59152496a1ea5dd1e4dee46f6d3688603b5f25a588a31da4e481884074e211dd09a8b8039d0834507656ed7d552a990c1354d7638b2c2215dd9f606b01a92fabc6eb6fa033a86f8920e2168a80d7c86da5ad1d27c8d2a180e56046a49b989128ea736894d3eef8dca16ed63520be4654ddb14bfe4268c487c5a75c044e21021c089608c50adbc4e3f4c6a4ca86c7d2df5bc7c76e413d05e8f57b1e22d4af34f9d4d2e6e4d4f57f47aebdd5f98f67834c656b2fe09df4a1b15116fceaa404a6df278c7c629f584ba8d37c1137c2263ae02ad3718a03a886eb"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r5, 0xe0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 2.20741589s ago: executing program 5 (id=741): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="009917593d44d685cf8176521846a9e90205b4b89c0ed49b3e1201fa4a79b0b9651316a89d7e4038e94e54fdffa25c529d1cb4e43bf7e12bd2a555681300b85d6621470c304d6ba5731161f3f1da1193a85525e8c9a5a95798070ca48fa7edcf62e37626480f673141bee1ea2522f8b61aac12f984c1216683ae80e6146169cfb7aa7c50dd4c52259faaee2fedc1077bda4c3e65d7005d0ab71db65617abeb3c51b056d955f1285ed9d26d7c910bf3291f6b349ce7eee33a31a484c31993effe39fcfa55e722a20bf90b2f43ffbfd19afaeb1d6e9683ce09f4c8eb9591f0772a12"], 0x1, 0xc3c, &(0x7f0000000d00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000d80), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x10000000000002a9, 0x0, 0x0) 1.751742158s ago: executing program 7 (id=742): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000c00)={0x1, 0x1}) 1.723787168s ago: executing program 2 (id=743): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$unix(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="c60a", 0x2}], 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="100000000000000001000000010000002c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r5], 0x40}, 0x1001) close_range(r4, 0xffffffffffffffff, 0x0) 1.564161147s ago: executing program 6 (id=744): semget$private(0x0, 0x1, 0x500) mremap(&(0x7f00003ab000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f000024a000/0x1000)=nil) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r0 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000040)=0x5) remap_file_pages(&(0x7f0000157000/0x2000)=nil, 0x2000, 0x0, 0x157, 0x0) 1.110664055s ago: executing program 5 (id=745): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x1ff, 0x38, &(0x7f00000002c0)=""/56, 0x41100, 0x0, '\x00', r1, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x0, 0x1, 0xe, 0x3}, 0x10, 0x129a1, r0, 0x0, &(0x7f0000000400)=[0x1], 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setsig(0x4203, r2, 0x8, &(0x7f0000000080)={0x4, 0x0, 0x55c000}) 487.105412ms ago: executing program 5 (id=746): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0x6) 0s ago: executing program 5 (id=747): r0 = openat(0xffffffffffffffff, 0x0, 0x325240, 0x23) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000a6da00000000000000b5b13029cafef98cb45c480f409b59851980e0717f90372160ab6eea3d1453d7e0961d10cf812dd3bba7cb2e1e75dd5566546f2c3bff1de97ad9eb5d939a14ebc52fd20e47c42905d181f128fc26", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000380)=0xff) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x9) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x7f) read$msr(0xffffffffffffffff, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) kernel console output (not intermixed with test programs): k is pending, handler #282!!! [ 99.144663][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 99.152961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 99.161220][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 99.169517][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 99.525487][ T4601] XFS (loop2): Mounting V5 Filesystem [ 99.532820][ T4328] kernel write not supported for file /uinput (pid: 4328 comm: kworker/1:7) [ 99.658853][ T4599] loop4: detected capacity change from 0 to 32768 [ 99.694050][ T4628] loop0: detected capacity change from 0 to 2048 [ 99.718414][ T4628] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.798453][ T4599] XFS (loop4): Mounting V5 Filesystem [ 99.803995][ T4601] XFS (loop2): Ending clean mount [ 99.926108][ T4599] XFS (loop4): Ending clean mount [ 100.037807][ T4599] overlayfs: './file1' not a directory [ 100.103388][ T4641] loop0: detected capacity change from 0 to 1024 [ 100.194737][ T4641] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.90: Invalid block bitmap block 0 in block_group 0 [ 100.296748][ T4641] Quota error (device loop0): write_blk: dquota write failed [ 100.305836][ T4249] XFS (loop4): Unmounting Filesystem [ 100.325142][ T4641] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 100.356292][ T4641] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.90: Failed to acquire dquot type 0 [ 100.419950][ T4641] EXT4-fs error (device loop0): ext4_free_blocks:6210: comm syz.0.90: Freeing blocks not in datazone - block = 0, count = 4096 [ 100.469756][ T4641] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.90: Invalid inode bitmap blk 0 in block_group 0 [ 100.496233][ T4316] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-8 [ 100.527641][ T4316] EXT4-fs error (device loop0): ext4_release_dquot:6817: comm kworker/u4:6: Failed to release dquot type 0 [ 100.534731][ T4254] XFS (loop2): Unmounting Filesystem [ 100.569793][ T4641] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 100.618894][ T4641] EXT4-fs (loop0): 1 orphan inode deleted [ 100.624707][ T4641] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 100.720191][ T4641] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 100.829187][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 101.026791][ T4648] netlink: 'syz.0.94': attribute type 4 has an invalid length. [ 101.180615][ T4643] loop3: detected capacity change from 0 to 32768 [ 101.288640][ T4643] XFS (loop3): Mounting V5 Filesystem [ 101.457680][ T4663] capability: warning: `syz.0.96' uses deprecated v2 capabilities in a way that may be insecure [ 101.477720][ T4643] XFS (loop3): Ending clean mount [ 101.602383][ T4666] loop4: detected capacity change from 0 to 1024 [ 101.630032][ T4666] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 101.695482][ T4666] netlink: 48 bytes leftover after parsing attributes in process `syz.4.97'. [ 101.716904][ T4669] syz.0.98[4669] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.717024][ T4669] syz.0.98[4669] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.746263][ T4255] XFS (loop3): Unmounting Filesystem [ 101.934315][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 102.101782][ T4657] loop2: detected capacity change from 0 to 32768 [ 102.331133][ T4677] loop0: detected capacity change from 0 to 2048 [ 102.413338][ T4677] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.445490][ T4657] XFS (loop2): Mounting V5 Filesystem [ 102.597819][ T4657] XFS (loop2): Ending clean mount [ 102.630279][ T4657] XFS (loop2): Quotacheck needed: Please wait. [ 102.888275][ T4657] XFS (loop2): Quotacheck: Done. [ 103.258773][ T4254] XFS (loop2): Unmounting Filesystem [ 103.401223][ T4697] UDF-fs: error (device loop0): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 103.414263][ T4697] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232 [ 103.458672][ T4698] loop3: detected capacity change from 0 to 1024 [ 103.593219][ T4698] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 103.694734][ T4705] loop4: detected capacity change from 0 to 8 [ 103.782692][ T4705] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 103.861598][ T4709] loop1: detected capacity change from 0 to 1024 [ 103.868822][ T4709] EXT4-fs: Ignoring removed i_version option [ 103.875024][ T4709] EXT4-fs: Ignoring removed i_version option [ 103.951027][ T4709] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 104.074771][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 104.275409][ T4257] EXT4-fs (loop1): unmounting filesystem. [ 105.335613][ T4730] loop1: detected capacity change from 0 to 256 [ 105.578887][ T4736] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.587583][ T4736] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.151165][ T4757] xt_hashlimit: max too large, truncated to 1048576 [ 106.191473][ T4757] Cannot find set identified by id 0 to match [ 106.421208][ T4761] loop0: detected capacity change from 0 to 512 [ 106.450919][ T4761] EXT4-fs: Ignoring removed mblk_io_submit option [ 106.551341][ T4761] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.130: invalid block [ 106.673627][ T4761] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.130: invalid indirect mapped block 10 (level 1) [ 106.725149][ T4761] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.130: invalid indirect mapped block 8 (level 1) [ 106.789692][ T4761] EXT4-fs (loop0): 1 truncate cleaned up [ 106.795459][ T4761] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 107.075497][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 107.555999][ T4792] loop3: detected capacity change from 0 to 512 [ 107.708556][ T4792] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 107.766718][ T4792] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.874386][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 107.968877][ T4798] loop2: detected capacity change from 0 to 2048 [ 108.235096][ T4798] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 108.262158][ T4803] process 'syz.1.144' launched '/dev/fd/6' with NULL argv: empty string added [ 108.610084][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 108.710529][ T4810] loop3: detected capacity change from 0 to 1024 [ 109.228907][ T4810] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 110.501308][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 110.746095][ T4836] overlayfs: unrecognized mount option "uuid=auto" or missing value [ 111.859496][ T4859] netlink: 60 bytes leftover after parsing attributes in process `syz.4.162'. [ 111.863142][ T4853] loop0: detected capacity change from 0 to 2048 [ 111.932169][ T4859] netlink: 60 bytes leftover after parsing attributes in process `syz.4.162'. [ 111.953566][ T4858] netlink: 60 bytes leftover after parsing attributes in process `syz.4.162'. [ 112.003974][ T4861] netlink: 60 bytes leftover after parsing attributes in process `syz.4.162'. [ 112.043977][ T4853] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 112.106615][ T4866] syz.2.164 uses obsolete (PF_INET,SOCK_PACKET) [ 112.167879][ T4853] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 112.225696][ T4853] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 112.239653][ T4853] EXT4-fs (loop0): This should not happen!! Data will be lost [ 112.239653][ T4853] [ 112.249564][ T4853] EXT4-fs (loop0): Total free blocks count 0 [ 112.256528][ T4853] EXT4-fs (loop0): Free/Dirty block details [ 112.262644][ T4853] EXT4-fs (loop0): free_blocks=66060288 [ 112.269478][ T4853] EXT4-fs (loop0): dirty_blocks=16 [ 112.274759][ T4853] EXT4-fs (loop0): Block reservation details [ 112.283736][ T4853] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 112.292416][ T27] audit: type=1804 audit(1734769956.691:2): pid=4874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.161" name="/newroot/38/file0/file1" dev="loop0" ino=15 res=1 errno=0 [ 112.296088][ T4874] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 112.443115][ T4871] device sit0 entered promiscuous mode [ 113.690321][ T4898] loop4: detected capacity change from 0 to 512 [ 113.778205][ T4898] EXT4-fs: Ignoring removed i_version option [ 113.846633][ T4898] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 114.891856][ T4930] loop1: detected capacity change from 0 to 2048 [ 115.044622][ T4934] loop4: detected capacity change from 0 to 164 [ 115.046451][ T4930] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.115900][ T4947] loop3: detected capacity change from 0 to 1024 [ 116.211382][ T4951] loop2: detected capacity change from 0 to 512 [ 116.266486][ T4953] UDF-fs: error (device loop1): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 116.273006][ T4951] EXT4-fs: Ignoring removed i_version option [ 116.294114][ T4952] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 116.303270][ T4953] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232 [ 116.344482][ T4951] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 116.483695][ T4341] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.670842][ T4341] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.857668][ T4341] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.966820][ T4959] loop2: detected capacity change from 0 to 512 [ 117.010998][ T4961] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 117.110735][ T4959] Quota error (device loop2): v2_read_file_info: Can't read info structure [ 117.148900][ T4959] EXT4-fs warning (device loop2): ext4_enable_quotas:7029: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 117.178543][ T4341] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.253446][ T27] audit: type=1326 audit(1734769961.651:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.0.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff226585d29 code=0x7ffc0000 [ 117.279323][ T4959] EXT4-fs (loop2): mount failed [ 117.333160][ T27] audit: type=1326 audit(1734769961.691:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.0.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7ff226585d29 code=0x7ffc0000 [ 117.360524][ T4961] loop3: detected capacity change from 0 to 1024 [ 117.609543][ T27] audit: type=1326 audit(1734769961.691:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.0.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff226585d29 code=0x7ffc0000 [ 117.631702][ T27] audit: type=1326 audit(1734769961.691:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.0.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff226585d29 code=0x7ffc0000 [ 119.622459][ T4261] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 119.635751][ T4261] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 119.644459][ T4261] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 119.654369][ T4261] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 119.662753][ T4261] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 119.670126][ T4261] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 120.356352][ C0] sched: RT throttling activated [ 121.797720][ T4269] Bluetooth: hci0: command 0x0409 tx timeout [ 122.594193][ T5001] netlink: 'syz.0.209': attribute type 3 has an invalid length. [ 122.603212][ T5001] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.209'. [ 122.928734][ T4978] chnl_net:caif_netlink_parms(): no params data found [ 122.977658][ T5006] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 123.353995][ T5021] loop3: detected capacity change from 0 to 1024 [ 123.447522][ T5021] EXT4-fs: Ignoring removed orlov option [ 123.511794][ T5024] loop1: detected capacity change from 0 to 128 [ 123.532997][ T5021] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 123.615460][ T5024] FAT-fs (loop1): FAT read failed (blocknr 252) [ 123.673234][ T4978] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.706658][ T4978] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.725181][ T4978] device bridge_slave_0 entered promiscuous mode [ 123.919478][ T4261] Bluetooth: hci0: command 0x041b tx timeout [ 123.938807][ T4978] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.945974][ T4978] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.977626][ T4978] device bridge_slave_1 entered promiscuous mode [ 124.085928][ T27] audit: type=1326 audit(1734769968.271:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5029 comm="syz.0.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff226585d29 code=0x7ffc0000 [ 124.118176][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 124.214837][ T27] audit: type=1326 audit(1734769968.271:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5029 comm="syz.0.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff226585d29 code=0x7ffc0000 [ 124.296494][ T27] audit: type=1326 audit(1734769968.271:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5029 comm="syz.0.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff226585d29 code=0x7ffc0000 [ 124.368858][ T27] audit: type=1326 audit(1734769968.271:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5029 comm="syz.0.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff226585d29 code=0x7ffc0000 [ 124.475595][ T27] audit: type=1326 audit(1734769968.271:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5029 comm="syz.0.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff226585d29 code=0x7ffc0000 [ 124.556518][ T4271] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 124.734279][ T27] audit: type=1326 audit(1734769968.271:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5029 comm="syz.0.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff226585d29 code=0x7ffc0000 [ 124.866841][ T27] audit: type=1326 audit(1734769968.271:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5029 comm="syz.0.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff226585d29 code=0x7ffc0000 [ 125.108005][ T27] audit: type=1326 audit(1734769968.271:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5029 comm="syz.0.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff226585d29 code=0x7ffc0000 [ 125.416513][ T27] audit: type=1326 audit(1734769968.271:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5029 comm="syz.0.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7ff226585d29 code=0x7ffc0000 [ 125.503799][ T4978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.562643][ T27] audit: type=1326 audit(1734769968.271:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5029 comm="syz.0.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff226585d29 code=0x7ffc0000 [ 125.618351][ T4978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.738036][ T4978] team0: Port device team_slave_0 added [ 125.746265][ T4978] team0: Port device team_slave_1 added [ 125.779652][ T5047] loop2: detected capacity change from 0 to 2048 [ 125.879320][ T5047] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.892648][ T4978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.906440][ T4978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.966451][ T4261] Bluetooth: hci0: command 0x040f tx timeout [ 125.987273][ T4978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.785773][ T4978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.796585][ T4978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.931334][ T4978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.076636][ T5063] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 127.417484][ T5074] loop1: detected capacity change from 0 to 2048 [ 127.449884][ T4978] device hsr_slave_0 entered promiscuous mode [ 127.491985][ T4978] device hsr_slave_1 entered promiscuous mode [ 127.557329][ T5074] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.596726][ T4978] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.604365][ T4978] Cannot create hsr debugfs directory [ 127.806741][ T4341] device hsr_slave_0 left promiscuous mode [ 127.906927][ T4341] device hsr_slave_1 left promiscuous mode [ 128.017569][ T4341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.046979][ T4261] Bluetooth: hci0: command 0x0419 tx timeout [ 128.056620][ T4341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.218079][ T4341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.225569][ T4341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.240564][ T5090] loop3: detected capacity change from 0 to 1024 [ 128.338175][ T4341] device bridge_slave_1 left promiscuous mode [ 128.345927][ T4341] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.360071][ T5092] loop0: detected capacity change from 0 to 2048 [ 128.372208][ T4271] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 128.383786][ T5090] loop7: detected capacity change from 0 to 16384 [ 128.400505][ T4341] device bridge_slave_0 left promiscuous mode [ 128.424911][ T4341] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.495806][ T5092] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 128.546705][ T5094] loop7: detected capacity change from 16384 to 16383 [ 128.553449][ T5095] loop2: detected capacity change from 0 to 256 [ 128.587413][ T4341] device veth1_macvtap left promiscuous mode [ 128.593998][ T4341] device veth0_macvtap left promiscuous mode [ 128.602866][ T5092] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.622871][ T5095] exfat: Deprecated parameter 'namecase' [ 128.634823][ T4341] device veth1_vlan left promiscuous mode [ 128.662210][ T4341] device veth0_vlan left promiscuous mode [ 128.852836][ T5095] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 130.153313][ T5108] netlink: 24 bytes leftover after parsing attributes in process `syz.1.235'. [ 131.058335][ T7] hid-generic 0000:0001:FFFFFFFF.0001: item fetching failed at offset 0/1 [ 131.070566][ T7] hid-generic: probe of 0000:0001:FFFFFFFF.0001 failed with error -22 [ 131.337634][ T5117] futex_wake_op: syz.2.240 tries to shift op by 144; fix this program [ 131.701398][ T5122] loop0: detected capacity change from 0 to 164 [ 131.968757][ T5126] loop2: detected capacity change from 0 to 512 [ 132.009650][ T5126] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 132.023478][ T5126] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 132.152946][ T5126] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 132.170529][ T5126] EXT4-fs (loop2): 1 truncate cleaned up [ 132.176502][ T5126] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 132.664225][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 132.851587][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.858602][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.952074][ T5130] fuse: Bad value for 'fd' [ 133.096812][ T4341] team0 (unregistering): Port device team_slave_1 removed [ 133.332784][ T4341] team0 (unregistering): Port device team_slave_0 removed [ 133.455831][ T4341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.595587][ T4341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.903689][ T5133] loop2: detected capacity change from 0 to 2048 [ 133.943175][ T5133] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.328420][ T5135] UDF-fs: error (device loop2): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 134.341409][ T5135] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232 [ 135.224619][ T4341] bond0 (unregistering): Released all slaves [ 135.370344][ T5142] futex_wake_op: syz.2.248 tries to shift op by 144; fix this program [ 135.628020][ T5145] loop0: detected capacity change from 0 to 256 [ 136.549284][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 136.549300][ T27] audit: type=1326 audit(1734769980.951:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5143 comm="syz.0.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff226585d29 code=0x7fc00000 [ 136.713483][ T5154] loop3: detected capacity change from 0 to 128 [ 136.856176][ T4978] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 136.882295][ T5154] netlink: 52 bytes leftover after parsing attributes in process `syz.3.252'. [ 136.955267][ T4978] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 136.964076][ T27] audit: type=1326 audit(1734769981.361:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5153 comm="syz.3.252" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f03ae585d29 code=0x0 [ 137.057303][ T4978] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 137.132818][ T4978] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 138.174240][ T4978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.231346][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.318031][ T5185] netlink: 'syz.0.261': attribute type 3 has an invalid length. [ 138.397691][ T5185] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.261'. [ 138.417536][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.036173][ T4978] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.430528][ T4978] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 140.369909][ T4978] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 140.456438][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.719051][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.907539][ T4547] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.914786][ T4547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.938929][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.966197][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.986279][ T4547] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.993523][ T4547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.004376][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 141.019649][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 141.062126][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 141.095944][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 141.107388][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 141.138036][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 141.152236][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 141.172288][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 141.192909][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 141.194716][ T5214] loop2: detected capacity change from 0 to 1024 [ 141.227710][ T5216] loop3: detected capacity change from 0 to 512 [ 141.247249][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 141.307242][ T5216] EXT4-fs: Ignoring removed mblk_io_submit option [ 141.315293][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 141.337063][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 141.366720][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 141.378115][ T5216] EXT4-fs (loop3): 1 truncate cleaned up [ 141.383834][ T5216] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 141.470448][ T5214] hfsplus: xattr searching failed [ 141.683430][ T5226] loop1: detected capacity change from 0 to 1024 [ 141.691855][ T4255] EXT4-fs error (device loop3): ext4_map_blocks:634: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 141.693930][ T5226] EXT4-fs: Ignoring removed orlov option [ 141.820154][ T5226] EXT4-fs (loop1): Test dummy encryption mode enabled [ 141.881049][ T5226] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 141.971271][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 141.987568][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 141.993524][ T4978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.017356][ T4255] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5885: Out of memory [ 142.063907][ T4255] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #12: comm syz-executor: mark_inode_dirty error [ 142.096396][ T4257] EXT4-fs (loop1): unmounting filesystem. [ 142.142884][ T4255] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5885: Out of memory [ 142.206844][ T4255] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #2: comm syz-executor: mark_inode_dirty error [ 142.342593][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 144.162678][ T5244] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.474701][ T5244] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.671512][ T5273] loop1: detected capacity change from 0 to 1024 [ 144.723824][ T5273] EXT4-fs: Ignoring removed mblk_io_submit option [ 144.745748][ T5244] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.995979][ T5273] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 145.073004][ T5244] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.285468][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 145.347284][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 145.413030][ T4978] device veth0_vlan entered promiscuous mode [ 145.457152][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 145.477355][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 145.509532][ T4978] device veth1_vlan entered promiscuous mode [ 145.545497][ T5283] loop0: detected capacity change from 0 to 16 [ 145.553928][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 145.567923][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 145.606848][ T5273] loop1: detected capacity change from 1024 to 0 [ 145.633394][ C0] I/O error, dev loop1, sector 16 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 145.643083][ C0] I/O error, dev loop1, sector 18 op 0x0:(READ) flags 0x80700 phys_seg 5 prio class 2 [ 145.652789][ C0] I/O error, dev loop1, sector 10 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 2 [ 145.665491][ T5285] EXT4-fs error (device loop1): ext4_get_inode_loc:4644: inode #15: block 8: comm syz.1.284: unable to read itable block [ 145.675423][ T5283] erofs: (device loop0): mounted with root inode @ nid 36. [ 145.757551][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 145.771303][ T46] loop: Write error at byte offset 9223372036854776831, length 1024. [ 145.782050][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 145.798432][ T5283] input: syz0 as /devices/virtual/input/input9 [ 145.856195][ C0] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 145.865999][ C0] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 145.876195][ C0] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 145.900145][ T4978] device veth0_macvtap entered promiscuous mode [ 145.901036][ T5285] EXT4-fs (loop1): I/O error while writing superblock [ 145.940674][ T4978] device veth1_macvtap entered promiscuous mode [ 145.948430][ T27] audit: type=1800 audit(1734769990.351:34): pid=5285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.284" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 146.456690][ T4978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.476692][ C1] I/O error, dev loop1, sector 32 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 146.493995][ C1] I/O error, dev loop1, sector 10 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 146.503648][ C1] I/O error, dev loop1, sector 12 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2 [ 146.513753][ T4257] EXT4-fs error (device loop1): ext4_get_inode_loc:4644: inode #2: block 5: comm syz-executor: unable to read itable block [ 146.528599][ T4978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.550797][ T4269] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 146.561892][ T4269] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 146.564351][ T4978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.570242][ T4304] loop: Write error at byte offset 9223372036854776831, length 1024. [ 146.588135][ C0] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 146.597803][ C0] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 146.607403][ C0] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 146.615808][ T4257] EXT4-fs (loop1): I/O error while writing superblock [ 146.616040][ T4269] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 146.635576][ T4978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.640164][ T4257] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5885: IO failure [ 146.645659][ T4269] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 146.660515][ T5300] erofs: (device loop0): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 146.676993][ T4259] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 146.687288][ T4259] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 146.737559][ T4547] loop: Write error at byte offset 9223372036854776831, length 1024. [ 146.762929][ T5300] erofs: (device loop0): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 146.766962][ T4978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.783519][ C0] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 146.785399][ T4978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.791925][ T4257] EXT4-fs (loop1): I/O error while writing superblock [ 146.802230][ T4978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.819247][ T4978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.824904][ T5300] erofs: (device loop0): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 146.831106][ T4978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.858652][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 146.886674][ T4257] EXT4-fs error (device loop1): ext4_dirty_inode:6089: inode #2: comm syz-executor: mark_inode_dirty error [ 146.901609][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 146.920255][ T5300] erofs: (device loop0): z_erofs_readahead: readahead error at page 17 @ nid 36 [ 147.322370][ T5300] erofs: (device loop0): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 147.346743][ T4974] loop: Write error at byte offset 9223372036854776831, length 1024. [ 147.355046][ C0] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 147.358136][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 147.377021][ T5300] erofs: (device loop0): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 147.400733][ T4257] EXT4-fs (loop1): I/O error while writing superblock [ 147.409110][ T5300] syz.0.287: attempt to access beyond end of device [ 147.409110][ T5300] loop0: rw=524288, sector=376, nr_sectors = 16 limit=16 [ 147.435912][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 147.505194][ T4974] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4629: inode #2: block 5: comm kworker/u4:13: unable to read itable block [ 147.520590][ T4978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.531563][ T5300] syz.0.287: attempt to access beyond end of device [ 147.531563][ T5300] loop0: rw=524288, sector=384, nr_sectors = 16 limit=16 [ 147.558853][ T4978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.574027][ T5300] syz.0.287: attempt to access beyond end of device [ 147.574027][ T5300] loop0: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 147.598042][ T5300] syz.0.287: attempt to access beyond end of device [ 147.598042][ T5300] loop0: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 147.611690][ T4978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.625132][ T5300] syz.0.287: attempt to access beyond end of device [ 147.625132][ T5300] loop0: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 147.628615][ T4497] loop: Write error at byte offset 9223372036854776831, length 1024. [ 147.668460][ T5300] syz.0.287: attempt to access beyond end of device [ 147.668460][ T5300] loop0: rw=524288, sector=728, nr_sectors = 16 limit=16 [ 147.682171][ T4978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.706492][ T4978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.707816][ C0] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 147.725283][ T4974] EXT4-fs (loop1): I/O error while writing superblock [ 147.732263][ T4978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.743025][ T4978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.756626][ T4978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.764054][ T4257] EXT4-fs (loop1): unmounting filesystem. [ 147.770312][ T4978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.785329][ T4497] loop: Write error at byte offset 9223372036854776831, length 1024. [ 147.795454][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 147.803957][ C0] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 147.813263][ T4257] EXT4-fs (loop1): I/O error while writing superblock [ 147.820271][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 147.851334][ T56] loop: Write error at byte offset 9223372036854841343, length 1024. [ 147.876558][ C1] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 147.969204][ T4978] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.993591][ T4978] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.011852][ T4978] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.020884][ T4978] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.616827][ T4547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.749110][ T4547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.767553][ T4259] Bluetooth: hci3: command 0x0409 tx timeout [ 151.118412][ T4259] Bluetooth: hci3: command 0x041b tx timeout [ 151.215075][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 151.260932][ T5325] loop2: detected capacity change from 0 to 128 [ 151.353298][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.373242][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.381521][ T5325] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 151.462887][ T5325] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 151.500656][ T5292] chnl_net:caif_netlink_parms(): no params data found [ 151.525295][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 151.554384][ T4261] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 151.564431][ T4261] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.575374][ T4261] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.597480][ T4261] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.605998][ T4261] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 151.613935][ T4261] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 152.327208][ T5244] device hsr_slave_0 left promiscuous mode [ 152.340577][ T5244] device hsr_slave_1 left promiscuous mode [ 152.350580][ T5244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.358673][ T5244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.371222][ T5244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.500257][ T5244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.549293][ T5244] device bridge_slave_1 left promiscuous mode [ 152.555627][ T5244] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.806844][ T5355] x_tables: unsorted entry at hook 2 [ 152.905509][ T5244] device bridge_slave_0 left promiscuous mode [ 152.945497][ T5244] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.938622][ T4259] Bluetooth: hci3: command 0x040f tx timeout [ 153.938679][ T4261] Bluetooth: hci4: command 0x0409 tx timeout [ 153.991708][ T5244] device veth1_macvtap left promiscuous mode [ 154.075758][ T5244] device veth0_macvtap left promiscuous mode [ 154.083128][ T5244] device veth1_vlan left promiscuous mode [ 154.089125][ T5244] device veth0_vlan left promiscuous mode [ 154.863918][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 155.803307][ T5244] team0 (unregistering): Port device team_slave_1 removed [ 155.845891][ T5244] team0 (unregistering): Port device team_slave_0 removed [ 155.892358][ T5244] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.934184][ T5244] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.966726][ T4261] Bluetooth: hci4: command 0x041b tx timeout [ 155.972959][ T4269] Bluetooth: hci3: command 0x0419 tx timeout [ 156.359489][ T5244] bond0 (unregistering): Released all slaves [ 156.578149][ T5292] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.585885][ T5292] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.612049][ T5292] device bridge_slave_0 entered promiscuous mode [ 156.647861][ T5292] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.670992][ T5292] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.682951][ T5382] loop5: detected capacity change from 0 to 8 [ 156.697649][ T5292] device bridge_slave_1 entered promiscuous mode [ 156.715391][ T5384] netlink: 88 bytes leftover after parsing attributes in process `syz.0.309'. [ 156.819461][ T5382] SQUASHFS error: Failed to read block 0x4e8: -5 [ 156.833440][ T5292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.847503][ T5382] SQUASHFS error: Failed to read block 0x4de: -5 [ 156.853973][ T5382] SQUASHFS error: Failed to read block 0x4de: -5 [ 156.876996][ T5292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.930973][ T5382] SQUASHFS error: Failed to read block 0x4de: -5 [ 156.942234][ T5389] loop2: detected capacity change from 0 to 512 [ 156.955030][ T27] audit: type=1800 audit(1734770001.351:35): pid=5382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.308" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 157.020487][ T5292] team0: Port device team_slave_0 added [ 157.048620][ T5292] team0: Port device team_slave_1 added [ 157.112717][ T5389] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 157.135633][ T5389] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.270526][ T5398] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 157.326717][ T5292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.333709][ T5292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.420654][ T5292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.445908][ T27] audit: type=1800 audit(1734770001.841:36): pid=5389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.310" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 157.510753][ T27] audit: type=1800 audit(1734770001.891:37): pid=5399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.310" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 157.513474][ T5405] binder: BINDER_SET_CONTEXT_MGR already set [ 157.549140][ T5292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.556154][ T5292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.560622][ T5405] binder: 5403:5405 ioctl 4018620d 20000040 returned -16 [ 157.682907][ T5292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.747169][ T5332] chnl_net:caif_netlink_parms(): no params data found [ 157.776527][ T4303] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 157.862337][ T5292] device hsr_slave_0 entered promiscuous mode [ 157.877435][ T5292] device hsr_slave_1 entered promiscuous mode [ 157.907559][ T5292] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.924437][ T5292] Cannot create hsr debugfs directory [ 157.993458][ T4303] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.025335][ T4303] usb 6-1: config 0 interface 0 has no altsetting 0 [ 158.033561][ T4303] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 158.043327][ T4303] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.051600][ T4259] Bluetooth: hci4: command 0x040f tx timeout [ 158.066417][ T4303] usb 6-1: config 0 descriptor?? [ 158.211295][ T5244] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.269378][ T5332] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.285086][ T5332] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.294610][ T5332] device bridge_slave_0 entered promiscuous mode [ 158.360255][ T5244] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.389241][ T5332] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.404560][ T5431] loop0: detected capacity change from 0 to 512 [ 158.411907][ T5332] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.422278][ T5332] device bridge_slave_1 entered promiscuous mode [ 158.479452][ T5431] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 158.486729][ T4303] usbhid 6-1:0.0: can't add hid device: -71 [ 158.495099][ T4303] usbhid: probe of 6-1:0.0 failed with error -71 [ 158.522257][ T4303] usb 6-1: USB disconnect, device number 2 [ 158.542864][ T5431] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.642570][ T5244] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.684901][ T5332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.732829][ T5244] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.751079][ T5332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.812060][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 158.885221][ T5332] team0: Port device team_slave_0 added [ 158.942577][ T5332] team0: Port device team_slave_1 added [ 159.003599][ T5292] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 159.068174][ T5292] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 159.086710][ T5332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.093794][ T5332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.156173][ T5442] loop0: detected capacity change from 0 to 164 [ 159.197115][ T5332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.223964][ T5442] rock: directory entry would overflow storage [ 159.225865][ T5292] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 159.249528][ T5442] rock: sig=0x66, size=4, remaining=3 [ 159.322413][ T5442] rock: directory entry would overflow storage [ 159.352306][ T5442] rock: sig=0x66, size=4, remaining=3 [ 159.360630][ T5332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.379096][ T5332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.383726][ T5442] 9pnet: p9_errstr2errno: server reported unknown error ,sbsector=0x0000000000000000,uid=00000000000000000000 [ 159.440882][ T5332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.462262][ T5292] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 160.126466][ T4259] Bluetooth: hci4: command 0x0419 tx timeout [ 160.269011][ T5332] device hsr_slave_0 entered promiscuous mode [ 160.306807][ T5332] device hsr_slave_1 entered promiscuous mode [ 160.383205][ T5332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.397046][ T5454] loop0: detected capacity change from 0 to 1024 [ 160.426777][ T5332] Cannot create hsr debugfs directory [ 160.475616][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 161.322684][ T56] hfsplus: b-tree write err: -5, ino 4 [ 162.733569][ T5292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.873127][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 162.883036][ T5467] loop5: detected capacity change from 0 to 4096 [ 162.897180][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 162.918901][ T5467] ext4: Unknown parameter 'smackfsdef' [ 162.930259][ T5292] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.006439][ T5406] blk_print_req_error: 11 callbacks suppressed [ 163.006457][ T5406] I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 163.187252][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.225878][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.247061][ T4345] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.254233][ T4345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.423564][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 163.474798][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.484244][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.592783][ T4345] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.600056][ T4345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.897565][ T5489] loop5: detected capacity change from 0 to 512 [ 164.015844][ T5332] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 164.097510][ T5489] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 164.108148][ T5489] EXT4-fs (loop5): orphan cleanup on readonly fs [ 164.129751][ T5332] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 164.157280][ T5489] Quota error (device loop5): v2_read_file_info: Free block number 14655488 out of range (1, 6). [ 164.187909][ T5332] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 164.217097][ T5489] EXT4-fs warning (device loop5): ext4_enable_quotas:7029: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 164.254916][ T5332] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 164.307572][ T5489] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 164.376531][ T5489] EXT4-fs (loop5): 1 orphan inode deleted [ 164.414621][ T5489] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 164.652560][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.673783][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.718884][ T4978] EXT4-fs (loop5): unmounting filesystem. [ 164.949562][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 164.964414][ T5501] loop5: detected capacity change from 0 to 512 [ 164.976852][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 165.016052][ T5501] EXT4-fs (loop5): Test dummy encryption mode enabled [ 165.020452][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 165.046528][ T5501] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 165.061704][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 165.144972][ T5501] EXT4-fs (loop5): 1 truncate cleaned up [ 165.150939][ T5501] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 165.365528][ T5511] loop2: detected capacity change from 0 to 1024 [ 165.416913][ T5244] device hsr_slave_0 left promiscuous mode [ 165.431709][ T5244] device hsr_slave_1 left promiscuous mode [ 165.447294][ T5244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.475359][ T5511] hfsplus: invalid secondary volume header [ 165.684197][ T5244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.126863][ T5511] hfsplus: unable to find HFS+ superblock [ 166.148274][ T5244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.186624][ T5244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.230936][ T5244] device bridge_slave_1 left promiscuous mode [ 166.277870][ T5244] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.301453][ T4978] EXT4-fs (loop5): unmounting filesystem. [ 166.324032][ T5244] device bridge_slave_0 left promiscuous mode [ 166.336589][ T5244] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.548424][ T5244] device veth1_macvtap left promiscuous mode [ 166.554580][ T5244] device veth0_macvtap left promiscuous mode [ 166.606801][ T5244] device veth0_vlan left promiscuous mode [ 166.930867][ T5530] loop5: detected capacity change from 0 to 164 [ 167.121540][ T5533] netlink: 'syz.0.331': attribute type 3 has an invalid length. [ 167.131209][ T5533] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.331'. [ 168.326987][ T5244] team0 (unregistering): Port device team_slave_1 removed [ 168.504547][ T5244] team0 (unregistering): Port device team_slave_0 removed [ 168.672025][ T5244] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.855115][ T5244] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.318487][ T5549] loop2: detected capacity change from 0 to 128 [ 169.421252][ T5549] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 169.610883][ T5549] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.963478][ T5551] loop2: detected capacity change from 0 to 256 [ 170.021589][ T5551] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 170.357833][ T5244] bond0 (unregistering): Released all slaves [ 170.368471][ T4269] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 170.400025][ T4269] Bluetooth: hci1: Injecting HCI hardware error event [ 170.410909][ T4259] Bluetooth: hci1: hardware error 0x00 [ 170.753691][ T5557] loop2: detected capacity change from 0 to 1024 [ 170.768685][ T5557] hfsplus: unable to parse mount options [ 171.506724][ T5406] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 171.552603][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 171.560903][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 171.569842][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.578586][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.587412][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.608423][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 171.776618][ T5332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.837533][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.845520][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.899699][ T5332] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.944186][ T5561] loop0: detected capacity change from 0 to 1024 [ 171.955635][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.978283][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.014061][ T4497] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.021303][ T4497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.067289][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.085356][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.104973][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.126995][ T4974] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.134245][ T4974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.172170][ T4256] hfsplus: bad catalog entry type [ 172.203728][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.258204][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.275483][ T4256] hfsplus: bad catalog entry type [ 172.296671][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.325974][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.343812][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.353676][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.399549][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 172.410876][ T11] hfsplus: b-tree write err: -5, ino 4 [ 172.442390][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.482376][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.493365][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 172.509247][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.525059][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 172.636007][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 172.646186][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 172.687204][ T5292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.856659][ T4259] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 173.019399][ T5244] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.196769][ T5244] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.346119][ T5244] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.398317][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 173.405899][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 173.514140][ T5244] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.632313][ T5332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.765412][ T5601] netlink: 'syz.5.357': attribute type 3 has an invalid length. [ 173.797188][ T5601] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.357'. [ 173.818419][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 173.847238][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 173.982660][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 174.028356][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 174.754984][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 174.832604][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 175.400861][ T4261] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 175.411447][ T4269] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 175.421043][ T4261] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 175.432781][ T4269] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 175.446235][ T4261] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 175.455034][ T4261] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 176.203120][ T5631] loop2: detected capacity change from 0 to 2048 [ 176.348444][ T5631] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 176.376631][ T5631] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.410068][ T5618] chnl_net:caif_netlink_parms(): no params data found [ 176.466417][ T4298] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 176.499166][ T5631] fs-verity: sha512 using implementation "sha512-avx2" [ 176.676521][ T4298] usb 6-1: Using ep0 maxpacket: 16 [ 176.682474][ T4298] usb 6-1: too many configurations: 16, using maximum allowed: 8 [ 176.717644][ T4298] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.751387][ T4298] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 176.797242][ T4298] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.819593][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 176.830897][ T4298] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 176.898248][ T4298] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.916788][ T4298] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 176.932556][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.946639][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.954961][ T5618] device bridge_slave_0 entered promiscuous mode [ 176.969584][ T4298] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.991516][ T4298] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.025938][ T4298] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.047043][ T4298] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.059405][ T5292] device veth0_vlan entered promiscuous mode [ 177.067532][ T4298] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.092610][ T4298] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.129863][ T4298] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.157522][ T4298] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.203230][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.213243][ T4298] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.224275][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.242609][ T5618] device bridge_slave_1 entered promiscuous mode [ 177.249540][ T4298] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.265027][ T4298] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 177.280458][ T4298] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.296464][ T4298] usb 6-1: Product: syz [ 177.300821][ T4298] usb 6-1: Manufacturer: syz [ 177.305451][ T4298] usb 6-1: SerialNumber: syz [ 177.409769][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.431744][ T5292] device veth1_vlan entered promiscuous mode [ 177.486752][ T4259] Bluetooth: hci2: command 0x0409 tx timeout [ 177.553597][ T4298] usb 6-1: 0:2 : does not exist [ 177.578013][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.595754][ T4298] usb 6-1: USB disconnect, device number 3 [ 177.708426][ T5618] team0: Port device team_slave_0 added [ 177.723413][ T5292] device veth0_macvtap entered promiscuous mode [ 177.799089][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 177.819011][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 177.822827][ T5665] loop2: detected capacity change from 0 to 512 [ 177.834898][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 177.849880][ T5406] udevd[5406]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.867726][ T5618] team0: Port device team_slave_1 added [ 177.876041][ T5292] device veth1_macvtap entered promiscuous mode [ 177.910140][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 177.929144][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 177.952057][ T5665] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 177.976714][ T5665] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 177.977600][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 178.076988][ T5332] device veth0_vlan entered promiscuous mode [ 178.153894][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.172618][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.256394][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.271728][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 178.278538][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.285505][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.376001][ T5680] loop5: detected capacity change from 0 to 2048 [ 178.396958][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.436367][ T5680] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.451219][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 178.468699][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 178.501291][ T5332] device veth1_vlan entered promiscuous mode [ 178.569235][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 178.579457][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 178.615623][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 178.698807][ T5292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.719899][ T5292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.740227][ T5292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.761265][ T5292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.781819][ T5292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.809767][ T5292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.822277][ T5292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.921055][ T5618] device hsr_slave_0 entered promiscuous mode [ 178.943443][ T5618] device hsr_slave_1 entered promiscuous mode [ 179.051638][ T5693] loop2: detected capacity change from 0 to 164 [ 179.120615][ T5694] UDF-fs: error (device loop5): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 179.133755][ T5694] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232 [ 179.197470][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 179.220877][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 179.234073][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 179.246467][ T5292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.258121][ T5292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.272961][ T5292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.286463][ T5292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.296952][ T5292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.307770][ T5292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.338087][ T5292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.354019][ T5332] device veth0_macvtap entered promiscuous mode [ 179.468125][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 179.504538][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 179.559125][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 179.577600][ T4259] Bluetooth: hci2: command 0x041b tx timeout [ 179.591407][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 179.651528][ T5332] device veth1_macvtap entered promiscuous mode [ 179.804106][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 179.814301][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 179.838159][ T5292] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.860807][ T5292] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.881053][ T5292] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.937142][ T5292] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.071571][ T5244] device hsr_slave_0 left promiscuous mode [ 180.093138][ T5244] device hsr_slave_1 left promiscuous mode [ 180.133300][ T5244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.144574][ T5244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.167266][ T5244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.175357][ T5244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.187586][ T5244] device bridge_slave_1 left promiscuous mode [ 180.194122][ T5244] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.218096][ T5244] device bridge_slave_0 left promiscuous mode [ 180.245133][ T5244] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.308744][ T5244] device veth1_macvtap left promiscuous mode [ 180.326771][ T5244] device veth0_macvtap left promiscuous mode [ 180.332962][ T5244] device veth1_vlan left promiscuous mode [ 180.345562][ T5244] device veth0_vlan left promiscuous mode [ 180.523844][ T5708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.379'. [ 180.743782][ T5714] loop5: detected capacity change from 0 to 256 [ 180.764218][ T5714] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 181.187334][ T5244] team0 (unregistering): Port device team_slave_1 removed [ 181.203489][ T5717] loop5: detected capacity change from 0 to 164 [ 181.309991][ T5244] team0 (unregistering): Port device team_slave_0 removed [ 181.395490][ T5244] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.453990][ T5244] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.656523][ T4259] Bluetooth: hci2: command 0x040f tx timeout [ 182.099226][ T5244] bond0 (unregistering): Released all slaves [ 182.234217][ T5332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.259747][ T5332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.273338][ T5332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.287426][ T5721] loop5: detected capacity change from 0 to 512 [ 182.291275][ T5332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.314197][ T5332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.315473][ T5721] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 182.326515][ T5332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.339344][ T5721] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.383: bad orphan inode 131083 [ 182.353708][ T5332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.356225][ T5721] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 182.370541][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 182.371431][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 182.415978][ T5332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.453267][ T5332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.494162][ T5332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.512159][ T5332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.543821][ T5332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.576519][ T5332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.599980][ T5332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.631722][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 182.643287][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 182.697290][ T4978] EXT4-fs (loop5): unmounting filesystem. [ 182.713256][ T5332] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.724821][ T5332] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.733697][ T5332] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.762288][ T5332] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.806960][ T4345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.815083][ T4345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.917494][ T5732] loop5: detected capacity change from 0 to 512 [ 182.925937][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 182.961664][ T5732] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 182.982553][ T5732] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.044747][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.060415][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.111938][ T27] audit: type=1800 audit(1734770027.511:38): pid=5735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.386" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 183.163074][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 183.176034][ T27] audit: type=1800 audit(1734770027.551:39): pid=5735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.386" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 183.208110][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.239952][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.322819][ T5618] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 183.381114][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 183.441014][ T5740] loop6: detected capacity change from 0 to 512 [ 183.446836][ T5618] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 183.456075][ T4341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.481518][ T5618] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 183.483052][ T4341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.501021][ T5740] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 183.530157][ T5618] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 183.547977][ T5740] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 183.557886][ T5742] loop2: detected capacity change from 0 to 1024 [ 183.565400][ T5742] EXT4-fs: Ignoring removed i_version option [ 183.577544][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 183.602025][ T5740] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.282: casefold flag without casefold feature [ 183.616144][ T5742] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 183.633503][ T5740] EXT4-fs (loop6): Remounting filesystem read-only [ 183.652312][ T5740] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.282: couldn't read orphan inode 15 (err -117) [ 183.695875][ T5742] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 183.706036][ T5740] EXT4-fs (loop6): Remounting filesystem read-only [ 183.734240][ T4259] Bluetooth: hci2: command 0x0419 tx timeout [ 183.746810][ T5740] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 183.775423][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.791803][ T5244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.805907][ T5244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.829438][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.845845][ T5244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.855764][ T5244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.864677][ T5244] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.871875][ T5244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.889758][ T5244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.926721][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.943578][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.956532][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.963683][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.972449][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 183.980194][ T5292] EXT4-fs (loop6): unmounting filesystem. [ 183.984224][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.003352][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 184.024727][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.044806][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.072714][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.089601][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.146189][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 184.180262][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.197651][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.212118][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.222544][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.249051][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 184.470290][ T5759] loop2: detected capacity change from 0 to 256 [ 184.525985][ T5759] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 184.605370][ T5759] syz.2.393: attempt to access beyond end of device [ 184.605370][ T5759] loop2: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 184.645981][ T5759] syz.2.393: attempt to access beyond end of device [ 184.645981][ T5759] loop2: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 184.704792][ T27] audit: type=1800 audit(1734770029.101:40): pid=5759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.393" name="file1" dev="loop2" ino=1048615 res=0 errno=0 [ 184.775878][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 184.792370][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 184.805577][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.194887][ T5776] loop2: detected capacity change from 0 to 128 [ 185.225737][ T5776] EXT4-fs (loop2): Test dummy encryption mode enabled [ 185.250731][ T5776] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 185.267946][ T5776] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 185.421736][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 185.572162][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 185.589160][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 185.630366][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 185.660740][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 185.672263][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 185.701882][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 185.726021][ T5618] device veth0_vlan entered promiscuous mode [ 185.784898][ T5618] device veth1_vlan entered promiscuous mode [ 185.865938][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 185.892057][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 185.919054][ T4978] EXT4-fs (loop5): unmounting filesystem. [ 185.922916][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 185.950317][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 185.980848][ T5618] device veth0_macvtap entered promiscuous mode [ 186.055886][ T5618] device veth1_macvtap entered promiscuous mode [ 186.088262][ T5798] loop2: detected capacity change from 0 to 512 [ 186.114394][ T5798] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 186.156107][ T5618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.180420][ T5798] EXT4-fs (loop2): invalid journal inode [ 186.193815][ T5618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.204801][ T5798] EXT4-fs (loop2): can't get journal size [ 186.229237][ T5618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.245495][ T5618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.265002][ T5798] EXT4-fs (loop2): 1 truncate cleaned up [ 186.271268][ T5798] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 186.280209][ T5618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.311157][ T5618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.321191][ T5618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.336404][ T5618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.358940][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.416541][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 186.451318][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 186.469663][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 186.485359][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 186.523987][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 187.263224][ T5819] loop5: detected capacity change from 0 to 2048 [ 188.303612][ T5834] loop5: detected capacity change from 0 to 1024 [ 188.340167][ T5618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.406350][ T5618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.416824][ T5618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.446544][ T5618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.466374][ T5618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.486544][ T5618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.511289][ T5618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.535594][ T5618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.575330][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.603935][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 188.627376][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 188.692188][ T5618] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.701701][ T5618] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.721985][ T5618] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.732500][ T5618] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.130577][ T4345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.146809][ T4345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.208518][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 189.259839][ T4974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.271340][ T4974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.312780][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 189.512871][ T5857] raw_sendmsg: syz.8.353 forgot to set AF_INET. Fix it! [ 189.655747][ T5862] loop5: detected capacity change from 0 to 512 [ 189.659973][ T5861] loop2: detected capacity change from 0 to 512 [ 189.715057][ T5862] EXT4-fs: Ignoring removed oldalloc option [ 189.737005][ T5861] EXT4-fs (loop2): Test dummy encryption mode enabled [ 189.743371][ T5864] loop6: detected capacity change from 0 to 1024 [ 189.743822][ T5861] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 189.818245][ T5868] loop8: detected capacity change from 0 to 8 [ 189.818736][ T5864] EXT4-fs: Ignoring removed orlov option [ 189.831401][ T5862] EXT4-fs error (device loop5): ext4_xattr_inode_iget:400: comm syz.5.431: Parent and EA inode have the same ino 15 [ 189.836473][ T5864] EXT4-fs: Ignoring removed nomblk_io_submit option [ 189.853941][ T5862] EXT4-fs (loop5): Remounting filesystem read-only [ 189.862749][ T5862] EXT4-fs (loop5): 1 orphan inode deleted [ 189.873587][ T5862] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 189.902549][ T5864] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 189.936731][ T5861] EXT4-fs (loop2): 1 truncate cleaned up [ 189.946752][ T5861] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 189.970097][ T5864] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 190.005312][ T5864] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 190.152004][ T27] audit: type=1804 audit(1734770034.551:41): pid=5864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.434" name="/newroot/16/file1/file1" dev="loop6" ino=15 res=1 errno=0 [ 190.225962][ T27] audit: type=1804 audit(1734770034.601:42): pid=5864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.434" name="/newroot/16/file1/file1" dev="loop6" ino=15 res=1 errno=0 [ 190.473344][ T4978] EXT4-fs (loop5): unmounting filesystem. [ 190.485158][ T5292] EXT4-fs (loop6): unmounting filesystem. [ 190.645266][ T5861] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 190.724155][ T5888] loop6: detected capacity change from 0 to 128 [ 190.748699][ T5888] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 190.835752][ T5861] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 191.031006][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 191.031034][ T5900] loop5: detected capacity change from 0 to 16 [ 191.104124][ T5900] erofs: (device loop5): mounted with root inode @ nid 36. [ 191.154386][ T5900] erofs: (device loop5): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 191.252831][ T5904] loop2: detected capacity change from 0 to 16 [ 191.273900][ T5900] erofs: (device loop5): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 191.319813][ T5900] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 191.337664][ T5406] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 191.365413][ T5904] loop2: detected capacity change from 0 to 512 [ 192.082687][ T5908] loop6: detected capacity change from 0 to 736 [ 193.156721][ T5904] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.443: casefold flag without casefold feature [ 193.194495][ T5904] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.443: couldn't read orphan inode 15 (err -117) [ 193.240039][ T5904] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 193.282028][ T5908] Symlink component flag not implemented [ 193.296179][ T5904] EXT4-fs (loop2): shut down requested (2) [ 193.301425][ T5908] Symlink component flag not implemented (122) [ 193.457699][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 193.466466][ T26] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 193.653254][ T5923] loop2: detected capacity change from 0 to 1024 [ 193.676613][ T26] usb 9-1: Using ep0 maxpacket: 32 [ 193.684225][ T26] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 193.697177][ T5923] EXT4-fs: Ignoring removed orlov option [ 193.710027][ T26] usb 9-1: config 0 has no interface number 0 [ 193.745922][ T26] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 193.757183][ T5923] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 193.786465][ T26] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.794526][ T26] usb 9-1: Product: syz [ 193.822246][ T5926] loop6: detected capacity change from 0 to 256 [ 193.877888][ T26] usb 9-1: Manufacturer: syz [ 193.882823][ T26] usb 9-1: SerialNumber: syz [ 193.948617][ T26] usb 9-1: config 0 descriptor?? [ 193.948832][ T5926] syz.6.451: attempt to access beyond end of device [ 193.948832][ T5926] loop6: rw=2049, sector=256, nr_sectors = 68 limit=256 [ 193.988057][ T26] smsc95xx v2.0.0 [ 194.088568][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 194.396894][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.403315][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.034739][ T26] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 195.099930][ T26] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 195.161739][ T5935] loop2: detected capacity change from 0 to 16 [ 195.202548][ T5935] erofs: (device loop2): mounted with root inode @ nid 36. [ 195.668768][ T5941] loop2: detected capacity change from 0 to 1024 [ 195.734445][ T26] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 195.759277][ T26] smsc95xx: probe of 9-1:0.67 failed with error -71 [ 195.779993][ T5941] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 195.797869][ T26] usb 9-1: USB disconnect, device number 2 [ 196.483341][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 200.371279][ T5981] loop8: detected capacity change from 0 to 128 [ 200.610228][ T5981] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 200.718345][ T5981] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 201.684778][ T5985] loop5: detected capacity change from 0 to 512 [ 201.831613][ T5985] EXT4-fs (loop5): Test dummy encryption mode enabled [ 201.876440][ T5985] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 201.943316][ T5985] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002] [ 202.012955][ T5985] System zones: 1-12 [ 202.115932][ T5985] EXT4-fs (loop5): 1 truncate cleaned up [ 202.134549][ T5985] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 202.384819][ T4978] EXT4-fs (loop5): unmounting filesystem. [ 202.575669][ T5994] loop5: detected capacity change from 0 to 16 [ 202.627282][ T5994] erofs: (device loop5): mounted with root inode @ nid 36. [ 202.630543][ T5306] UDF-fs: error (device loop8): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 202.726699][ T5306] UDF-fs: error (device loop8): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 202.777379][ T5306] UDF-fs: error (device loop8): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 203.013226][ T5306] UDF-fs: error (device loop8): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 203.218809][ T5306] UDF-fs: error (device loop8): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 203.236452][ T5306] UDF-fs: error (device loop8): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 205.141025][ T6014] loop5: detected capacity change from 0 to 2048 [ 205.958320][ T6020] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 206.131545][ T6014] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 206.770004][ T6032] netlink: 'syz.2.486': attribute type 3 has an invalid length. [ 207.499234][ T4259] Bluetooth: hci0: command 0x0c1a tx timeout [ 207.525407][ T6032] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.486'. [ 207.749242][ T4978] EXT4-fs (loop5): unmounting filesystem. [ 208.547228][ T6048] loop2: detected capacity change from 0 to 8 [ 208.553858][ T6048] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 208.869066][ T4345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.899927][ T4345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.290513][ T6064] x_tables: unsorted entry at hook 2 [ 210.532234][ T6067] loop6: detected capacity change from 0 to 512 [ 210.582935][ T6067] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 210.648177][ T6067] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 210.680771][ T6067] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.496: Corrupt directory, running e2fsck is recommended [ 210.845549][ T6067] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 210.854550][ T6067] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2186: inode #15: comm syz.6.496: corrupted in-inode xattr [ 210.907288][ T6067] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.496: couldn't read orphan inode 15 (err -117) [ 212.490614][ T6067] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 212.790927][ T5292] EXT4-fs (loop6): unmounting filesystem. [ 213.174272][ T6086] netlink: 8 bytes leftover after parsing attributes in process `syz.6.503'. [ 213.541342][ T6091] loop6: detected capacity change from 0 to 256 [ 213.650434][ T5406] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 213.781890][ T6097] loop8: detected capacity change from 0 to 512 [ 213.904228][ T6097] EXT4-fs error (device loop8): ext4_do_update_inode:5224: inode #3: comm syz.8.508: corrupted inode contents [ 214.137206][ T6097] EXT4-fs error (device loop8): ext4_dirty_inode:6089: inode #3: comm syz.8.508: mark_inode_dirty error [ 214.214360][ T6097] EXT4-fs error (device loop8): ext4_do_update_inode:5224: inode #3: comm syz.8.508: corrupted inode contents [ 214.376001][ T6097] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #3: comm syz.8.508: mark_inode_dirty error [ 214.392377][ T6097] Quota error (device loop8): write_blk: dquota write failed [ 214.400134][ T6097] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 214.410381][ T6097] EXT4-fs error (device loop8): ext4_acquire_dquot:6794: comm syz.8.508: Failed to acquire dquot type 0 [ 214.538558][ T6097] EXT4-fs (loop8): 1 orphan inode deleted [ 215.608495][ T4341] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 215.616430][ T6097] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 215.666832][ T6110] fuse: Bad value for 'fd' [ 215.712914][ T6097] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.081591][ T4341] EXT4-fs error (device loop8): ext4_release_dquot:6817: comm kworker/u4:7: Failed to release dquot type 1 [ 216.416227][ T27] audit: type=1800 audit(1734770060.811:43): pid=6097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.508" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 216.638516][ T5618] EXT4-fs (loop8): unmounting filesystem. [ 216.794450][ T5244] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 217.939169][ T5244] EXT4-fs error (device loop8): ext4_release_dquot:6817: comm kworker/u4:15: Failed to release dquot type 1 [ 218.174768][ T6128] loop8: detected capacity change from 0 to 2048 [ 218.349425][ T6130] loop5: detected capacity change from 0 to 128 [ 218.440512][ T6130] EXT4-fs (loop5): Test dummy encryption mode enabled [ 218.477035][ T6130] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 218.510639][ T6130] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 219.449386][ T4978] EXT4-fs (loop5): unmounting filesystem. [ 219.807611][ T6147] loop8: detected capacity change from 0 to 128 [ 220.123134][ T6152] loop6: detected capacity change from 0 to 2048 [ 220.135510][ T6152] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 220.368903][ T6155] UDF-fs: error (device loop6): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 220.381601][ T6155] UDF-fs: error (device loop6): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232 [ 221.943650][ T27] audit: type=1326 audit(1734770066.341:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6163 comm="syz.2.517" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fafd4b85d29 code=0x0 [ 223.590586][ T6177] loop2: detected capacity change from 0 to 8192 [ 223.638553][ T6177] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 227.243328][ T6208] loop5: detected capacity change from 0 to 512 [ 227.693411][ T6208] EXT4-fs: Ignoring removed nobh option [ 227.756423][ T6208] EXT4-fs: Ignoring removed nobh option [ 227.762866][ T6208] ext4: Unknown parameter 'uid<00000000000000000000' [ 228.534050][ T6223] loop5: detected capacity change from 0 to 2048 [ 228.592743][ T6223] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 228.645554][ T6223] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 229.909575][ T6237] loop6: detected capacity change from 0 to 512 [ 230.069623][ T6237] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 230.154220][ T6237] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.165020][ T6242] loop5: detected capacity change from 0 to 256 [ 230.366098][ T27] audit: type=1800 audit(1734770074.761:45): pid=6246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.553" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 230.410671][ T27] audit: type=1800 audit(1734770074.791:46): pid=6246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.553" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 234.321067][ T5292] EXT4-fs (loop6): unmounting filesystem. [ 235.474438][ T6290] loop6: detected capacity change from 0 to 256 [ 235.536579][ T6290] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 235.593933][ T6290] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 235.635996][ T6290] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 237.276460][ T6305] x_tables: unsorted entry at hook 2 [ 240.111826][ T6331] loop2: detected capacity change from 0 to 1024 [ 240.135406][ T6331] EXT4-fs: Ignoring removed orlov option [ 240.141881][ T6331] EXT4-fs: Ignoring removed i_version option [ 240.156141][ T6331] EXT4-fs (loop2): Test dummy encryption mode enabled [ 240.295882][ T6326] kvm: emulating exchange as write [ 240.303448][ T6331] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 240.628600][ T6347] loop8: detected capacity change from 0 to 512 [ 240.650415][ T6347] EXT4-fs: Ignoring removed bh option [ 240.676659][ T6347] EXT4-fs: Ignoring removed mblk_io_submit option [ 240.908255][ T6331] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 241.049509][ T6347] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 241.289101][ T6347] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 241.351528][ T6347] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 241.599812][ T6347] EXT4-fs (loop8): shut down requested (2) [ 241.635628][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 242.178878][ T6362] netlink: 32 bytes leftover after parsing attributes in process `syz.5.593'. [ 242.305926][ T5618] EXT4-fs (loop8): unmounting filesystem. [ 242.628924][ T6373] loop6: detected capacity change from 0 to 512 [ 243.700872][ T6377] x_tables: unsorted entry at hook 2 [ 243.871843][ T4269] Bluetooth: hci0: command 0x0406 tx timeout [ 244.044485][ T6373] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 244.074806][ T6373] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.128670][ T6384] Zero length message leads to an empty skb [ 246.495606][ T5292] EXT4-fs (loop6): unmounting filesystem. [ 247.308404][ T6406] netlink: 32 bytes leftover after parsing attributes in process `syz.6.604'. [ 248.038186][ T6410] loop8: detected capacity change from 0 to 128 [ 248.154058][ T6410] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 248.201403][ T6410] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 248.383334][ T6410] EXT4-fs (loop8): re-mounted. Quota mode: none. [ 248.702697][ T5618] EXT4-fs (loop8): unmounting filesystem. [ 250.827037][ T6435] x_tables: unsorted entry at hook 2 [ 252.197557][ T6439] loop6: detected capacity change from 0 to 1024 [ 253.557759][ T6454] loop6: detected capacity change from 0 to 2048 [ 254.088179][ T6454] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 254.690276][ T5292] EXT4-fs (loop6): unmounting filesystem. [ 256.526523][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.532906][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.752621][ T6476] loop2: detected capacity change from 0 to 512 [ 256.825752][ T6476] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 257.134933][ T6476] EXT4-fs (loop2): failed to open journal device unknown-block(4,0) -6 [ 257.397830][ T6484] x_tables: unsorted entry at hook 2 [ 261.008479][ T6508] 9pnet_fd: Insufficient options for proto=fd [ 261.146096][ T6514] loop6: detected capacity change from 0 to 512 [ 261.306419][ T6514] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 261.331851][ T6514] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.842909][ T6509] loop5: detected capacity change from 0 to 512 [ 261.849683][ T6509] EXT4-fs: Ignoring removed oldalloc option [ 261.900693][ T6509] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 261.923423][ T27] audit: type=1800 audit(1734770106.321:47): pid=6520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.625" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 261.948536][ T6509] EXT4-fs (loop5): 1 truncate cleaned up [ 261.954212][ T6509] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 262.098859][ T6522] loop2: detected capacity change from 0 to 8 [ 262.126249][ T6522] Major/Minor mismatch, trying to mount newer 63.0 filesystem [ 262.201067][ T6522] Please update your kernel [ 262.221433][ T27] audit: type=1800 audit(1734770106.471:48): pid=6509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.635" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 263.290184][ T27] audit: type=1800 audit(1734770107.691:49): pid=6524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.625" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 263.457431][ T4978] EXT4-fs (loop5): unmounting filesystem. [ 265.411581][ T5292] EXT4-fs (loop6): unmounting filesystem. [ 265.871828][ T6561] loop8: detected capacity change from 0 to 128 [ 267.050249][ T5618] FAT-fs (loop8): error, invalid access to FAT (entry 0xffff0000) [ 267.065707][ T5618] FAT-fs (loop8): Filesystem has been set read-only [ 267.135070][ T6571] loop5: detected capacity change from 0 to 8 [ 267.178922][ T6570] loop2: detected capacity change from 0 to 1024 [ 267.202838][ T6571] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 267.212400][ T5618] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 267.356841][ T5618] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 267.448160][ T6570] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 267.490019][ T6570] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.727902][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 267.994950][ T6582] loop2: detected capacity change from 0 to 512 [ 268.124073][ T6582] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 268.191471][ T6582] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.217114][ T27] audit: type=1800 audit(1734770113.621:50): pid=6591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.654" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 269.274938][ T6547] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.299657][ T27] audit: type=1800 audit(1734770113.641:51): pid=6591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.654" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 269.825720][ T6547] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.858037][ T6605] loop6: detected capacity change from 0 to 8 [ 270.950976][ T5406] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 271.099719][ T6605] loop6: detected capacity change from 0 to 128 [ 271.160973][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 271.162596][ T6547] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.195935][ T6605] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 271.235189][ T6605] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 271.497796][ T6547] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.555707][ T5292] EXT4-fs (loop6): unmounting filesystem. [ 272.409359][ T4259] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 272.427277][ T4259] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 272.448100][ T4259] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 272.458844][ T4259] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 272.468701][ T4259] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 272.618047][ T4259] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 273.166437][ T4261] Bluetooth: hci3: command 0x0406 tx timeout [ 273.616876][ T6632] x_tables: unsorted entry at hook 2 [ 274.254723][ T6639] netlink: 4 bytes leftover after parsing attributes in process `syz.5.672'. [ 275.703482][ T4261] Bluetooth: hci2: command 0x0409 tx timeout [ 277.262928][ T6622] chnl_net:caif_netlink_parms(): no params data found [ 277.746522][ T4259] Bluetooth: hci2: command 0x041b tx timeout [ 278.079388][ T6666] loop2: detected capacity change from 0 to 128 [ 278.112511][ T6666] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 278.142483][ T6666] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.266238][ T6622] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.286115][ T6622] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.321013][ T6622] device bridge_slave_0 entered promiscuous mode [ 278.339272][ T6622] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.348868][ T6622] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.362793][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 278.378037][ T6622] device bridge_slave_1 entered promiscuous mode [ 278.455301][ T6674] loop2: detected capacity change from 0 to 512 [ 278.469578][ T6674] ext4: Unknown parameter 'dont_hash' [ 278.539233][ T6674] loop2: detected capacity change from 0 to 164 [ 278.554723][ T6547] device hsr_slave_0 left promiscuous mode [ 278.568172][ T6547] device hsr_slave_1 left promiscuous mode [ 278.582776][ T6547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.605945][ T6547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.625023][ T6547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.633611][ T6547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.663889][ T5406] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 278.699223][ T4261] Bluetooth: hci3: unknown advertising packet type: 0x65 [ 278.701445][ T4261] Bluetooth: hci3: Malformed LE Event: 0x02 [ 278.718423][ T6674] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 278.737731][ T6547] device bridge_slave_1 left promiscuous mode [ 278.748560][ T6674] isofs_fill_super: bread failed, dev=loop2, iso_blknum=16, block=32 [ 278.755503][ T126] hid-generic 0005:15C2:5500.0002: item fetching failed at offset 0/1 [ 278.770324][ T126] hid-generic: probe of 0005:15C2:5500.0002 failed with error -22 [ 278.780973][ T6547] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.794891][ T6547] device bridge_slave_0 left promiscuous mode [ 278.802103][ T6547] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.905284][ T6547] device veth1_macvtap left promiscuous mode [ 278.925013][ T6547] device veth0_macvtap left promiscuous mode [ 278.944844][ T6547] device veth1_vlan left promiscuous mode [ 278.966064][ T6547] device veth0_vlan left promiscuous mode [ 279.746548][ T6682] loop2: detected capacity change from 0 to 1024 [ 279.807681][ T4261] Bluetooth: hci2: command 0x040f tx timeout [ 279.869157][ T6682] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 280.276047][ T6684] loop6: detected capacity change from 0 to 1024 [ 280.302442][ T6684] EXT4-fs: Ignoring removed nobh option [ 280.325331][ T6684] EXT4-fs: Ignoring removed bh option [ 280.361858][ T6684] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 280.419904][ T6684] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 280.759397][ T6684] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3841: comm syz.6.685: Allocating blocks 497-513 which overlap fs metadata [ 280.777262][ T6691] x_tables: unsorted entry at hook 2 [ 281.642365][ T6684] EXT4-fs (loop6): pa ffff88805188f000: logic 256, phys. 385, len 8 [ 281.651098][ T6684] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 281.888032][ T4259] Bluetooth: hci2: command 0x0419 tx timeout [ 282.949569][ T5292] EXT4-fs (loop6): unmounting filesystem. [ 284.434508][ T6547] team0 (unregistering): Port device team_slave_1 removed [ 284.680608][ T6547] team0 (unregistering): Port device team_slave_0 removed [ 284.905958][ T6547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.150246][ T6730] loop5: detected capacity change from 0 to 128 [ 285.274340][ T6724] x_tables: unsorted entry at hook 2 [ 285.286991][ T6547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.362793][ T4340] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 285.540226][ T6739] loop5: detected capacity change from 0 to 128 [ 285.678614][ T4340] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.722138][ T4340] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 285.806570][ T4340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.819074][ T4340] usb 3-1: config 0 descriptor?? [ 285.826002][ T6739] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 285.848380][ T6739] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 286.207685][ T6746] fscrypt: loop5: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 286.291722][ T4340] lg-g15 0003:046D:C222.0003: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 286.403082][ T4978] EXT4-fs (loop5): unmounting filesystem. [ 286.463271][ T4300] usb 3-1: USB disconnect, device number 2 [ 288.536398][ T4261] Bluetooth: hci4: command 0x0406 tx timeout [ 291.343835][ T6547] bond0 (unregistering): Released all slaves [ 291.849167][ T6770] loop2: detected capacity change from 0 to 512 [ 291.988919][ T6622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.057790][ T6622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.068669][ T6770] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 292.087773][ T6770] EXT4-fs (loop2): 1 truncate cleaned up [ 292.093503][ T6770] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 292.309384][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 292.324847][ T6622] team0: Port device team_slave_0 added [ 292.358940][ T6622] team0: Port device team_slave_1 added [ 292.556859][ T6622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.566622][ T6622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.804167][ T6622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.837555][ T6622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.844673][ T6622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.872253][ T6622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.485553][ T6778] loop2: detected capacity change from 0 to 2048 [ 294.500100][ T6778] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 294.699608][ T6622] device hsr_slave_0 entered promiscuous mode [ 294.768679][ T6782] UDF-fs: error (device loop2): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 294.781361][ T6782] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232 [ 295.304996][ T6622] device hsr_slave_1 entered promiscuous mode [ 296.921558][ T6800] loop5: detected capacity change from 0 to 512 [ 297.067310][ T6800] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 297.112757][ T6800] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.317437][ T27] audit: type=1800 audit(1734770141.721:52): pid=6800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.717" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 297.352295][ T6622] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 297.407012][ T27] audit: type=1800 audit(1734770141.741:53): pid=6800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.717" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 298.569344][ T6622] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 298.628579][ T4978] EXT4-fs (loop5): unmounting filesystem. [ 298.635602][ T6622] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 298.676216][ T6622] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 300.468368][ T6622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.484568][ T6434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 300.507539][ T6434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 300.551504][ T6622] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.583320][ T6434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 300.617627][ T6434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 300.641076][ T6434] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.648261][ T6434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.702549][ T6434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 300.727029][ T6434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 300.757192][ T6434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 300.786706][ T6434] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.793865][ T6434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.834976][ T6434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 300.862309][ T6434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 300.900295][ T6434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 300.942017][ T6434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 300.994415][ T6434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 301.037328][ T6434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 301.091742][ T6434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 301.143607][ T6434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 301.194359][ T6622] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 301.247404][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 301.427390][ T6434] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 301.436226][ T6434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 301.780936][ T6434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 302.550264][ T6834] x_tables: unsorted entry at hook 2 [ 303.603913][ T6843] loop5: detected capacity change from 0 to 512 [ 303.798398][ T6843] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 303.857324][ T6843] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.157698][ T27] audit: type=1800 audit(1734770148.561:54): pid=6854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.730" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 304.224895][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 304.243208][ T27] audit: type=1800 audit(1734770148.561:55): pid=6854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.730" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 304.270974][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 304.327099][ T6622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.612256][ T4978] EXT4-fs (loop5): unmounting filesystem. [ 306.808632][ T6874] loop2: detected capacity change from 0 to 128 [ 306.836555][ T6874] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 306.861482][ T6874] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 307.365702][ T6878] loop6: detected capacity change from 0 to 512 [ 307.426565][ T6878] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 307.501703][ T6878] EXT4-fs (loop6): 1 truncate cleaned up [ 308.281530][ T6878] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 308.346766][ T6491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 308.436560][ T6491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 308.522604][ T6878] syz.6.723 (pid 6878) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 308.544193][ T6491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 310.282069][ T6888] x_tables: unsorted entry at hook 2 [ 310.377318][ T6491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 310.419896][ T6622] device veth0_vlan entered promiscuous mode [ 310.447069][ T6491] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 310.493103][ T6491] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 310.533878][ T5292] EXT4-fs (loop6): unmounting filesystem. [ 310.533940][ T6896] loop5: detected capacity change from 0 to 2048 [ 310.551662][ T6622] device veth1_vlan entered promiscuous mode [ 310.613352][ T6896] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 310.659083][ T6896] UDF-fs: Scanning with blocksize 512 failed [ 310.667632][ T6622] device veth0_macvtap entered promiscuous mode [ 310.686167][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 310.702206][ T6896] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 310.734754][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 310.752918][ T6622] device veth1_macvtap entered promiscuous mode [ 310.771486][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 310.798052][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 310.846149][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.894043][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.912113][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.926609][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.961843][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.985467][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.009564][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.021013][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.036961][ T6622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.045218][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 311.081295][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 311.145595][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.176322][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.264601][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.277933][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.312170][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.354948][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.375597][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.421212][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.454532][ T6622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.476839][ T6491] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 311.506835][ T6491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 311.531195][ T6622] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.556319][ T6622] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.585606][ T6622] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.627247][ T6622] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.889190][ T6905] Bluetooth: MGMT ver 1.22 [ 311.900930][ T4547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.915955][ T4547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.963932][ T5306] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 311.992127][ T6491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.012043][ T6491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.063567][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 312.134649][ T6898] mmap: syz.6.744 (6898) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 312.165928][ T6898] [ 312.168302][ T6898] ====================================================== [ 312.175330][ T6898] WARNING: possible circular locking dependency detected [ 312.182347][ T6898] 6.1.121-syzkaller #0 Tainted: G W [ 312.188949][ T6898] ------------------------------------------------------ [ 312.195980][ T6898] syz.6.744/6898 is trying to acquire lock: [ 312.201865][ T6898] ffff888079f07a80 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: process_measurement+0x446/0x21b0 [ 312.212600][ T6898] [ 312.212600][ T6898] but task is already holding lock: [ 312.219978][ T6898] ffff88807d51ae58 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x207/0x8b0 [ 312.230049][ T6898] [ 312.230049][ T6898] which lock already depends on the new lock. [ 312.230049][ T6898] [ 312.240549][ T6898] [ 312.240549][ T6898] the existing dependency chain (in reverse order) is: [ 312.249576][ T6898] [ 312.249576][ T6898] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 312.257261][ T6898] lock_acquire+0x1f8/0x5a0 [ 312.262402][ T6898] down_read_killable+0xc6/0xd10 [ 312.267985][ T6898] mmap_read_lock_killable+0x1d/0x60 [ 312.273820][ T6898] lock_mm_and_find_vma+0x2a7/0x2e0 [ 312.279543][ T6898] exc_page_fault+0x169/0x620 [ 312.284739][ T6898] asm_exc_page_fault+0x22/0x30 [ 312.290117][ T6898] fault_in_readable+0x1c8/0x340 [ 312.295573][ T6898] fault_in_iov_iter_readable+0xdb/0x270 [ 312.301759][ T6898] generic_perform_write+0x207/0x5e0 [ 312.307586][ T6898] __generic_file_write_iter+0x176/0x400 [ 312.313738][ T6898] generic_file_write_iter+0xab/0x310 [ 312.319632][ T6898] vfs_write+0x857/0xbc0 [ 312.324414][ T6898] ksys_write+0x19c/0x2c0 [ 312.329270][ T6898] do_syscall_64+0x3b/0xb0 [ 312.334223][ T6898] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 312.340644][ T6898] [ 312.340644][ T6898] -> #0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 312.349344][ T6898] validate_chain+0x1661/0x5950 [ 312.354734][ T6898] __lock_acquire+0x125b/0x1f80 [ 312.360396][ T6898] lock_acquire+0x1f8/0x5a0 [ 312.365440][ T6898] down_write+0x36/0x60 [ 312.370127][ T6898] process_measurement+0x446/0x21b0 [ 312.375887][ T6898] ima_file_mmap+0x121/0x1c0 [ 312.381044][ T6898] __se_sys_remap_file_pages+0x67a/0x8b0 [ 312.387296][ T6898] do_syscall_64+0x3b/0xb0 [ 312.392279][ T6898] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 312.398704][ T6898] [ 312.398704][ T6898] other info that might help us debug this: [ 312.398704][ T6898] [ 312.408932][ T6898] Possible unsafe locking scenario: [ 312.408932][ T6898] [ 312.416664][ T6898] CPU0 CPU1 [ 312.422022][ T6898] ---- ---- [ 312.427383][ T6898] lock(&mm->mmap_lock); [ 312.431754][ T6898] lock(&sb->s_type->i_mutex_key#12); [ 312.439733][ T6898] lock(&mm->mmap_lock); [ 312.446582][ T6898] lock(&sb->s_type->i_mutex_key#12); [ 312.452044][ T6898] [ 312.452044][ T6898] *** DEADLOCK *** [ 312.452044][ T6898] [ 312.460197][ T6898] 1 lock held by syz.6.744/6898: [ 312.465127][ T6898] #0: ffff88807d51ae58 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x207/0x8b0 [ 312.475608][ T6898] [ 312.475608][ T6898] stack backtrace: [ 312.481526][ T6898] CPU: 1 PID: 6898 Comm: syz.6.744 Tainted: G W 6.1.121-syzkaller #0 [ 312.491160][ T6898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 312.501229][ T6898] Call Trace: [ 312.504506][ T6898] [ 312.507432][ T6898] dump_stack_lvl+0x1e3/0x2cb [ 312.512123][ T6898] ? nf_tcp_handle_invalid+0x642/0x642 [ 312.517591][ T6898] ? print_circular_bug+0x12b/0x1a0 [ 312.522787][ T6898] check_noncircular+0x2fa/0x3b0 [ 312.527753][ T6898] ? add_chain_block+0x850/0x850 [ 312.532684][ T6898] ? lockdep_lock+0x11f/0x2a0 [ 312.537367][ T6898] ? _find_first_zero_bit+0xd0/0x100 [ 312.542663][ T6898] validate_chain+0x1661/0x5950 [ 312.547532][ T6898] ? reacquire_held_locks+0x660/0x660 [ 312.552941][ T6898] ? look_up_lock_class+0x77/0x140 [ 312.558245][ T6898] ? register_lock_class+0x100/0x990 [ 312.563563][ T6898] ? ima_match_policy+0x104/0x2330 [ 312.569029][ T6898] ? __lock_acquire+0x1f80/0x1f80 [ 312.574057][ T6898] ? is_dynamic_key+0x260/0x260 [ 312.578937][ T6898] ? mark_lock+0x9a/0x340 [ 312.583272][ T6898] __lock_acquire+0x125b/0x1f80 [ 312.588152][ T6898] lock_acquire+0x1f8/0x5a0 [ 312.592657][ T6898] ? process_measurement+0x446/0x21b0 [ 312.598034][ T6898] ? read_lock_is_recursive+0x10/0x10 [ 312.603405][ T6898] ? ima_lsm_policy_change+0x620/0x620 [ 312.608862][ T6898] ? __might_sleep+0xb0/0xb0 [ 312.613468][ T6898] ? ima_get_action+0x71/0xa0 [ 312.618156][ T6898] down_write+0x36/0x60 [ 312.622309][ T6898] ? process_measurement+0x446/0x21b0 [ 312.627684][ T6898] process_measurement+0x446/0x21b0 [ 312.632890][ T6898] ? ima_file_mmap+0x1c0/0x1c0 [ 312.637652][ T6898] ? __lock_acquire+0x1f80/0x1f80 [ 312.642697][ T6898] ? aa_path_link+0xea0/0xea0 [ 312.647372][ T6898] ? mtree_load+0xc45/0xdf0 [ 312.651880][ T6898] ? aa_get_current_label+0x111/0x1d0 [ 312.657379][ T6898] ? apparmor_current_getsecid_subj+0xac/0x110 [ 312.663542][ T6898] ima_file_mmap+0x121/0x1c0 [ 312.668238][ T6898] ? ima_file_free+0x3c0/0x3c0 [ 312.673024][ T6898] ? bpf_lsm_mmap_file+0x5/0x10 [ 312.677878][ T6898] ? security_mmap_file+0x11a/0x170 [ 312.683076][ T6898] __se_sys_remap_file_pages+0x67a/0x8b0 [ 312.688713][ T6898] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 312.694428][ T6898] ? print_irqtrace_events+0x210/0x210 [ 312.699887][ T6898] ? print_irqtrace_events+0x210/0x210 [ 312.705348][ T6898] ? syscall_enter_from_user_mode+0x2e/0x230 [ 312.711326][ T6898] ? lockdep_hardirqs_on+0x94/0x130 [ 312.716531][ T6898] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 312.722286][ T6898] do_syscall_64+0x3b/0xb0 [ 312.726710][ T6898] ? clear_bhb_loop+0x45/0xa0 [ 312.731381][ T6898] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 312.737297][ T6898] RIP: 0033:0x7f8be0585d29 [ 312.741711][ T6898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.761348][ T6898] RSP: 002b:00007f8be12e3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 312.769777][ T6898] RAX: ffffffffffffffda RBX: 00007f8be0775fa0 RCX: 00007f8be0585d29 [ 312.777765][ T6898] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020157000 [ 312.785738][ T6898] RBP: 00007f8be0601aa8 R08: 0000000000000000 R09: 0000000000000000 [ 312.793709][ T6898] R10: 0000000000000157 R11: 0000000000000246 R12: 0000000000000000 [ 312.801683][ T6898] R13: 0000000000000000 R14: 00007f8be0775fa0 R15: 00007ffd1262a958 [ 312.809663][ T6898] [ 317.168866][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.175223][ T1273] ieee802154 phy1 wpan1: encryption failed: -22