last executing test programs: 17.903471899s ago: executing program 5 (id=1943): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0\x00', 0x1a00801, &(0x7f0000001680)=ANY=[], 0x1, 0xc56, &(0x7f0000000f80)="$eJzs3U9sHNd9B/DfGy7FpdxWTOwqThoHm7ZIZcVy9S+mYhXuqqbZBpBlIRRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBAhQIWMzsW3FJUZYskhIlfT429d2dfW/3vZn1jCzoNy8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIjfe+3c8RNpmxf6HsJgAIAH4sLYV4+f3O76DwA8ti7d6f//AQAAAAAAAAAAAACA/SJFEU9HirkLa2miet5RP9/uv3FzfGR0+26DqerZV7Uvf+onTp46/aWXhs9083x75iP677bPxBtjl841Xp29Pjc/tbAwNdkYn2lfmZ2cuud32Gn/rY5WO6Bx/c0bk1evLjROvnhq08s3hz4ceOrw0Nnh54891207PjI6OrbRpN7bvnbfA+m4U4XHgSjiWKR44Xs/Ta2IKGLn+6L+YI/9VoPVJI5WkxgfGa0mMt1uzSyWL17s7ogiotHTqdndR9sfi6j1P9A53FkzYqkcfjngo+X0xuZa863L01ONi635xfZie3bmYuqMtpxPI4o4kyKWI2J14Pa3648iapHiO4fW0uV8149qP3yxKgy+8ziKPZzjPSjH2eiPWC46xyzt52O2jw1EEa9Hip+9dySu5PNMda75QsTrZf4g4p0yX4lI5RfjdMQH23yPeDTVoog/L4//2bU0WZ0PuueV819rfGXm6mxP2+555WNeH247Uzyk68Pglnww9vn1pB5FtKoz/lq6/9/sAAAAAAAAAAAAAAAAALDbBqOIT0eK1/7tj6q64qjq0g+dHf79oV/urRl/9i7vU7Z9MSKWio2a3I+qezuQCwMvpospPeRa4idZPYr441z/962HPRgAAAAAAAAAAAAAAAAAAIAnWhE/iRQvv38kLUfvmuLtmWuNS63L051VYbtr/3bXTF9fX19vpE42c07kXMq5nHMl52rOKHL/nM2cEzmXci7nXMm5mjP6cv+czZwTOZdyLudcybmaM2q5f85mzomcSzmXc67kXM0Z+2TtXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAx0kRRfwiUnz7G2spUkQ0IyaikysDD3t0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBpIBXx/UjR+IPmrW21iEjVvx1Hyl9OR/NAmZ+M5nCZr0TzXM5WlbXmtx7C+NmZ/lTEjyPFQP3dWwc8H//+zrNbX4N455sbzz5T62Rf98WhDweeOnzo7PDo55690+O03QCOnm/P3LjZGB8ZHR3r2VzLn/7Jnm1D+XOL3Zk6EbHw1ttvtqanp+bv/0H5FdhB90foQao9KTP1oHoQtX0xjIcz903qD+sExZ4qr/8fRIrffv/fuxf8zvW/Hr/UeXbrCh8//5ON6//LW9/oHq//ta398vW/vKZvd/1/umfby/l3I/21iPri9bn+wxH1hbfePta+3ro2dW1q5vTx418eHv7yqeP9ByLqV9vTUz2PdmV3AQAAAAAAAAAAAAAAADw4qYjfjRStH6+lRkTcrOq1hs4OP3/sub7oq+qtNtVtvzF26Vzj1dnrc/NTCwtTk43xmfaV2cmpe/24elXuNT4yuieTuavBPR7/YP3V2bm35tvX/nBx29cP1s9dXlicb13Z/uUYjCKi2bvlaDXg8ZHRatDT7dZM1fXitsX0H19/KuI/IsWV0430+bwt1/9vrfDfVP+/tPWNdrH+/3MHN+r/PtHTtPzMlIr4eaT4rb94Nj5fjfNg3LbPcru/iRRHz3w2t4sDZbvuGDr3FehUBpZt/ydS/MMvNrft1kM+vdH2xMfauY+A8vgfihTf/7Pvxq/nbZvv/7D98T+49Y3u+fhvqSS+y/0fnunZdnDT/Qp2ZfpPvPL4H4sUrzz9bvxGteX/PvL+H917bxzpNN64P8ce3f/jV3u2DeXP/c3dmjwAAAAAAAAAAMAjrD8V8beR4oejtfRS3nYvf/9vcusb7dHf//pUz7bJ3Vmv6K4PdrxTAQAAAGCf6E9F/CRSXFt891YN9eb67576z9/ZqP8cSVterf6c71eq+wbs5p//9RrKnzux82kDAAAAAAAAAAAAAAAAAADAvpJSES/l9dQnqnr+yTuup74SKV77rxdyu3S4bNddB36o+rV+YXbm2Lnp6dl6LLYuT081xuZaV6bKvs9EirW//mzuW1Trq3fXm++s8b6xFvt8pBj9u27bzlrs3bXJn9loe6Js+4lI8Z9/v7ltXpo6rx1dtT1Ztv2rSPH1f9q+7eGNtqfKtt+NFD/6eqPb9mDZtnt/1E9ttH3xymyxB0cFAAAAAAAAAAAAAAAAAACAJ01/KuJPI8V/X1++Vcuf1//v73laeeebEWm9b9v3uVmt8z9Urf9/p8f3s/5/dV+BpW17AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAYytFEW9HirkLa2lloHzeUT/fnrlxc3xkdPtug6nq2Ve1L3/qJ06eOv2ll4bPdPOj+++2T8cbY5fONV6dvT43P7WwMDXZGJ9pX5mdnLrnd9hp/62OVjugcf3NG5NXry40Tr54atPLN4c+HHjq8NDZ4eePPddtOz4yOjrW06bWf9+ffpt0h+0Hooi/jBQvfO+n6YcDEUXsfF/c5buz1warSRytJjE+MlpNZLrdmlksX7zY3RFFRKOnU7O7jx7AsdiRZsRSOfxywEfL6Y3NteZbl6enGhdb84vtxfbszMXUGW05n0YUcSZFLEfE6sDtb9cfRbwZKb5zaC3980BEX3c/fPHC2FePn7zzOIo9nOM9KMfZ6I9YLh6BY7aPDUQR/xgpfvbekfiXgYhadH7iCxGvl/mDiHeic7xT+cU4HfHBNt8jHk21KOJ/y+N/di29N1CeD7rnlfNfa3xl5upsT9vueeWRvz48SPv83FSPIn5UnfHX0r/67xoAAAAAAAAAAAAAAABgHyni1yLFy+8fSVV98K2a4vbMtcal1uXpTllft/avWzO9vr6+3kidbOacyLmUcznnSs7VnFHk/jmbZdbX1yfy86WcyzlXOjm4mp9HX+6fs5lzIudSzuWcKzlXc0Yt98/ZzDmRcynncs6VnKs5Y5/U7gEAAAAAAAAAAAAAAAAAAI+Xovonxbe/sZbWBzrrS09EJ1esB/rY+/8AAAD//3TM+MM=") socket$inet_tcp(0x2, 0x1, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x4000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x88}, 0x0) dup(0xffffffffffffffff) r2 = syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0'}, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 14.839330434s ago: executing program 0 (id=1948): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x5601, &(0x7f0000000200)={0x0, 0x80000, 0x80, 0x1, 0x357}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) 14.516324697s ago: executing program 2 (id=1952): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000001c0)='./file0\x00', 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=cp12fi,utf8=1,utf8=1,iocharset=cp869,uni_xlate=1,nonumtail=0,\x00'], 0x1, 0x16f, &(0x7f0000000240)="$eJzs271qFFEABeCzMWrUYrewEosBG6slmycwSARxQVC2UBAUkwXJSMDAghYmnYUv4eNY+ySWKYQrycT8MSkskoHs9zVz4M6Be4v5uQPz9v7HzfWt7emb6c8s9XpZeJQqe70MspB/dgMAXCV7peR3KaXc3M2tHymldD0jAOCief4DwPx5+er1s9XxeO1FVS0l9bfZZDZpjs346jQfUmcjy+nnT/ZfEA41+cnT8dpydWCQ7/XOYX9nNrl2uj9KP4P2/qjpV6f713P7ZH8l/dxt76+09m/k4YMT/WH6+fU+W6mznv3ucf/rqKoePx+f6d85OA8AAACugmF1pHX/PhyeN970/+P7wJn99WLuLXa7dgCYV9ufv2y+q+uNT4IgCEeh6zsTcNGOL/quZwIAAAAAAAAAAAAAAJznMn4n6nqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMyfvwEAAP//hLKYFQ==") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2b8, &(0x7f0000001080)="$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") r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6e0ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x409, 0x4800003e, r4, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = semget$private(0x0, 0x6, 0x0) semop(r6, 0x0, 0x0) semctl$SETALL(r6, 0x0, 0x11, 0x0) semtimedop(r6, &(0x7f0000000100)=[{0x4}], 0x1, &(0x7f0000000140)={0x0, 0x3938700}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 13.631992483s ago: executing program 0 (id=1953): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x30144d0, &(0x7f0000000300)={[{@barrier_val={'barrier', 0x3d, 0x1}}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@jqfmt_vfsv1}, {@mblk_io_submit}, {@data_ordered}, {@barrier_val}, {@grpjquota}, {}]}, 0xc5, 0x7ce, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000500)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$incfs(0xffffffffffffff9c, 0x0, 0x1a10c1, 0x9c37611dc13d0d83) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) recvmmsg(r0, &(0x7f00000010c0), 0x1cf13bc0890a0d1, 0x0, 0x0) 13.427898135s ago: executing program 3 (id=1954): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000300)={r3, r4}) sendmmsg$inet(r5, &(0x7f0000007fc0)=[{{0x0, 0x0, &(0x7f0000007b40)=[{&(0x7f0000000200)="e2", 0x100000}], 0x1}, 0x700}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=' ', 0x1}], 0x1}}], 0x2, 0x0) 12.904805906s ago: executing program 2 (id=1955): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x200801d, &(0x7f00000000c0), 0xfe, 0x4eb, &(0x7f0000000c40)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xcb65000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz0\x00', 0x1ff) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) sendto$inet6(r3, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) sendmsg$inet6(r3, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x2, @pix_mp={0x0, 0x0, 0x33424752, 0x0, 0x0, [{0x0, 0x3}]}}) mount$tmpfs(0x0, &(0x7f0000000100)='./file2\x00', &(0x7f0000000180), 0x800888, &(0x7f0000000480)=ANY=[@ANYRESDEC]) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x18, 0x2, 0xffffffb9) socket(0x80000000000000a, 0x2, 0x0) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000280)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) close(0x4) 12.703423273s ago: executing program 4 (id=1956): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 12.401452529s ago: executing program 5 (id=1957): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1, 0xf84, 0xba}, 0x1c) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000180)='c', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f000000ab40)="ecbc0b8c09043d8672b1d1a6f9d70ad9ac0b60b1fb97960e67125411ab6b86c22de720335de8773f3630f42430cfae8e7c11c97802fcb202ef4586a47aae5518914b99ad9a43db67de5023e64fe51911076a9d63e47df3d1cf2a6840dfea5414a0299df40ba95a7576b0ba1b2fb066fe29d1a84b79eb940b1b3595bed47ea5190fbd40983d944a83cc772bfd9259757fe8be77b80816c652b5cbe35959ddd527bd5df486e582131f29f706dfe4a449dda455c858de2177fee89acf0b94c35fce1299c6404da5c5658a3d381a9361eb859a9d2809d97808d9d3724189fc4ea258494bc1e00a115500c8e587df195bd614544261f57baa2386afe576a6934f25e4693d50b4c1e94a1f0e173e771a7386f2df44429c9910d9b9caf585019c2e1b5f260b956ded24f6db4ee97aa8a9b82c73e284f68d95709186358193dd7bd4cec8947812893408eac7e9087395e8c3323c7495003e228dee58ff85d3907e12fec56d0d8c64ccbaf1f01e48cd8b21050d1cfe4260baca2eef38e6c3e3c474c74e1cc6740a7affa0115ee90c2bbdd38234c2062e72573bc9ca9e2c75fba1f6be445597e849baa630aa1d306063c3538bbe12fcf146ae1d8a860b047a8cfc4713cc23d31c3af1e745ad25e84e19641c2a68c0fab7ee385c087a63cb1c4a3676296b818318aa3a91b6707f8f0b97a0d40fb8d3727cfb5e0b2cdeb6d60b4fe52744ae633da4241197de8de2dc3ad86d8d40db32387972e61e95d32e4637c0ad5e263a382c11eef17a455a310f6e4bc93efcffff120a939db57e9820fbf7144c50240f6653655b2f4be75e33e2d6646945776262522ce7cc02225b9f0daf0293aaa5911ef980220a426013600ad12ccc6888ecaad1cdbf87fb62c95902725979f6a7c83b041f75bea2426d2568dae813932355cb2e90ed0d76b2a300a470b0a66c289ac60ea0dc0d9b1630a8ee4f5b4b8610d04cc0354c2e379a027a4799a143aea8a05f3b99e5515778fffcbcbf95bbadad12f6f47b68b3dd7c50c95a7d0ceee3c1c9fdec434f2ccca78b47daf71adc906ca8533ffad1b3505808254b7264f17eaa3775316703e0e11f4c07aedcea3489702252b905fd02320edd757dac466d31ec0eeeccfebac08be4fa5d6b7f52530e49acd5d6541ac869831f2ea350f74718e231f0fdd4ea9daf0a7e61056ad72ea7273963a9b45ad6da6e750e18587cf8b86b5ccba0a2e1a9b64d426ab74c271d07309870633c1cbc1a1c19dd568fd2c8fa83de12b6673badabf13e17437c1a0331231babbffaad0a2e33c8a2a7fbb863e862ece9444019211660798c091805996a9e650f5c0fdeff9a896e2f2ec2e0da5d85d53d5a4c9918e8298a20c31524c2489a219ea29c53b07f47b0e6bf9f830a83fcc9d86afff66754eeda3ad5863bdf70188449a6f0588af59645b7bcd698119bd542403b88b478e4fb753986ae36b87d3cbc33667715216b672b51823ad932475694f56ff3f6e447e034c5c49610639799ad09a5bb3617c80647c67ab5b5c97c79ca2fed818eac7ed902ae3a3bf1cc56d1b5a46df833f6ca8ec0556d5568fe72568b7608cdc6f2b467515239949e94441289003e8a7b88a277f985444169c482522d9701744d284ba25912a1a135fa1c4905f02b4412390f57c96b2740896f101b29f8f28d67ab790c64fddb4ac53e162c0d1c447200873b0bacb03ffbbd5e907e19205fadea78005a8e48634a30a70a19d3957bb2828d931d8e1b6a10f7c8be175af6ebe5e9c489f2ed6d19c0a8b3172ed8c7f769580c6c19f7ee7eab862ca7070bde92e983fdf4a0263f340618211f216b21027688b6ec12e675bdd227f1e4601d9c", 0x520}], 0x1}}], 0x2, 0x40c0) 12.019739141s ago: executing program 5 (id=1958): clock_adjtime(0x11, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x343}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600), 0x4) recvmsg(r3, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104) 11.304501072s ago: executing program 2 (id=1959): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000001c0)='./file0\x00', 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=cp12fi,utf8=1,utf8=1,iocharset=cp869,uni_xlate=1,nonumtail=0,\x00'], 0x1, 0x16f, &(0x7f0000000240)="$eJzs271qFFEABeCzMWrUYrewEosBG6slmycwSARxQVC2UBAUkwXJSMDAghYmnYUv4eNY+ySWKYQrycT8MSkskoHs9zVz4M6Be4v5uQPz9v7HzfWt7emb6c8s9XpZeJQqe70MspB/dgMAXCV7peR3KaXc3M2tHymldD0jAOCief4DwPx5+er1s9XxeO1FVS0l9bfZZDZpjs346jQfUmcjy+nnT/ZfEA41+cnT8dpydWCQ7/XOYX9nNrl2uj9KP4P2/qjpV6f713P7ZH8l/dxt76+09m/k4YMT/WH6+fU+W6mznv3ucf/rqKoePx+f6d85OA8AAACugmF1pHX/PhyeN970/+P7wJn99WLuLXa7dgCYV9ufv2y+q+uNT4IgCEeh6zsTcNGOL/quZwIAAAAAAAAAAAAAAJznMn4n6nqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMyfvwEAAP//hLKYFQ==") unlinkat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2b8, &(0x7f0000001080)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6e0ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = semget$private(0x0, 0x6, 0x0) semtimedop(r3, &(0x7f0000000100)=[{0x4}], 0x1, &(0x7f0000000140)={0x0, 0x3938700}) 10.945456044s ago: executing program 5 (id=1960): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x200002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r5, r4, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendto$inet6(r3, &(0x7f0000000040)="0b118f2b4190be586d04d99304c7975dfca451f6a36e5e11c583738f22bfc241adfd70c9456ea4fe6a5e0716c24ab3", 0xfffffffffffffea5, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c) 10.851470497s ago: executing program 4 (id=1961): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000000340)=""/187, &(0x7f0000000000)=0xbb) read(0xffffffffffffffff, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 9.580207078s ago: executing program 3 (id=1962): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="8d", 0x1}], 0x1}], 0x1, 0x0) r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r1 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000500)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000300)={r2, &(0x7f0000000340), &(0x7f0000000480)}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, 0x0) 9.561239009s ago: executing program 5 (id=1963): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000300), 0x6) recvmmsg(r2, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) 9.360064761s ago: executing program 3 (id=1964): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x200801d, &(0x7f00000000c0), 0xfe, 0x4eb, &(0x7f0000000c40)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz0\x00', 0x1ff) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) sendmsg$inet6(r3, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) close(0x4) 8.687478084s ago: executing program 4 (id=1965): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x5601, &(0x7f0000000200)={0x0, 0x80000, 0x80, 0x1, 0x357}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) 7.489180002s ago: executing program 0 (id=1967): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000001c0)='./file0\x00', 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=cp12fi,utf8=1,utf8=1,iocharset=cp869,uni_xlate=1,nonumtail=0,\x00'], 0x1, 0x16f, &(0x7f0000000240)="$eJzs271qFFEABeCzMWrUYrewEosBG6slmycwSARxQVC2UBAUkwXJSMDAghYmnYUv4eNY+ySWKYQrycT8MSkskoHs9zVz4M6Be4v5uQPz9v7HzfWt7emb6c8s9XpZeJQqe70MspB/dgMAXCV7peR3KaXc3M2tHymldD0jAOCief4DwPx5+er1s9XxeO1FVS0l9bfZZDZpjs346jQfUmcjy+nnT/ZfEA41+cnT8dpydWCQ7/XOYX9nNrl2uj9KP4P2/qjpV6f713P7ZH8l/dxt76+09m/k4YMT/WH6+fU+W6mznv3ucf/rqKoePx+f6d85OA8AAACugmF1pHX/PhyeN970/+P7wJn99WLuLXa7dgCYV9ufv2y+q+uNT4IgCEeh6zsTcNGOL/quZwIAAAAAAAAAAAAAAJznMn4n6nqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMyfvwEAAP//hLKYFQ==") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2b8, &(0x7f0000001080)="$eJzs3T2LY1UYAOD3JpkkuxZJYSWCF7SwWna2tckgWVhMpaRQCx3cXZAkCLsw4CgGK1sbS3+BINj5J2wEf4DgD7BzioEjN7mXZGbyMUEz48fzFJl37jnvPe85OcwHwz3z4cuT0eM8nn75+a/RbmdR60UvzrLoRi0qKaUUC72vAwD4NztLKX5Pc9dM6RUvWUS091saALAnO3///2HvJQEAe/bOu++9dTQY9N/O83Y8nHx1Mix+sy8+ztuPnsbHMY4ncT86cT7/W0D100Lx+jClNG3khW68NpmeDIvMyQc/lfc/qgY6jE50Z9HF/EeD/mE+t5Q/Leq4W47fK8Z/EJ14ccX4jwb9ByvyY9iM119dqv9edOLnj+KTGMfjWRGL/C8O8/zN9M0fn71flFfkZ9OTYWvWbyHVb+5dAQAAAAAAAAAAAAAAAAAAAADgv+5eeXZOK2bn9xSXyvN36ufFJweRV7oXz+eZ52fVjS6dDzRN8W1KrUbEoH8/z/NUdlzkN+KlRjRuZ9YAAAAAAAAAAAAAAAAAAADwz/L809PR8Xj85NmK4Je7EWua1gTVaQDVY/1bsurrmnpLV16J09Fxa/0Nl5pqZbhh0KhXfbKIjdMpJrHL3P9CcGddzd99v+sN29v7HGxan78nqHbX6DhbvYatqK60q/f0x+U+zbjmWM11TWn79lsKmiubOjvPvfnCLJhu6BPZpsLe+G2+cuWV7PIsmrNVXZl+UAZL6Zf2xk77+erXisxpHQAAAAAAAAAAAAAAAAAAsFeLh36vNN3ZklpLrb2VBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3avH//3cIpmXyNTo349nzW54iAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/wN/BgAA//+kKlw+") r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6e0ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x409, 0x4800003e, r4, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = semget$private(0x0, 0x6, 0x0) semop(r6, 0x0, 0x0) semctl$SETALL(r6, 0x0, 0x11, 0x0) semtimedop(r6, &(0x7f0000000100)=[{0x4}], 0x1, &(0x7f0000000140)={0x0, 0x3938700}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 7.488544408s ago: executing program 1 (id=1968): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, r3, 0x3, 0x0, @void}, 0x62) r4 = socket$inet(0x2, 0x4000000000000001, 0x6) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x5452, &(0x7f0000000a00)={'veth0_to_bridge\x00', @dev}) recvmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40026}, 0x0) close(r0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f63defa3d04"], 0x7) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x5fb, &(0x7f00000004c0)="$eJzs3c9vFGUfAPDvTH/Svu/bQt6oeJAmxkCitLSAIcZEuBOCP26eKi0EKZTQGi2SWBK8mBgvHkw8eRD/CyXx6sGrBy+eDAkxhoMYImtmO1Om293SX7tbup9PMnSeme48z5R++5199nlmAuhYI9k/acT+iLiaRAyV9nVHvnNk6fvu/3njXLYkUam8/UcSNz5JFsvHSvKvg/mL/xmK5Oc0Yl/X6nrnFq5fmpyZmb6Wl8fmL18dm1u4fvji5ckL0xemr0y8OnHi+LHjJ8aPbOn8ylWfvvX+h0OfnXn3268fJuPf/XomiZPxKP+G7LxqX9u3pZqzn9lIVJY8KG/Pfq4ntnjsneKvoeL35LGkdgM7Vpr/Pv4vIp6Noegq/W8OxadvtrVxQFNVkihyFNBxkk3Ff//2NwRoseI6oHhvX+998Gppk69KgFa4d2qpA2Ap9nsiooj/7qW+weiPbOvA/WRFP08SEVvrmVuS1fHTj2duZUs06IcDmmPxZtHLXZv/k2psDkd/tTRwP10R/2lpyba/tcn6R2rK4h9aZ/FmRDyX5//e2FD8j5Ti/71N1i/+AQAAAAAAYPvcORURr9Qb/5cuj//prTP+ZzAiTm5D/U/+/C+9m68k21AdUHLvVMTrdcf/Lo/xHe7KS/+tjgfoSc5fnJk+ks8ZPBQ9fVl5vOa45RHChz/f91Wj+svj/7Ilq78YC5gf6W53zUTcqcn5ya2eNxBx72bE89XxvwfyLSvH/2T5P6mT/7P4vrrOOva9dPtso31Pjn+gWSrfRBysm/8fX24na9+fY6x6PTBWXBWs9sLHX3zfqH7xD+2T5f+BteO/Lynfr2duY8fvjYijC92VRvs3e/3fm7zTVRw/89Hk/Py18Yje5PTq7RMbazPsVkU8FPGSxf+hF9fu/1u+/i/F4Z6IWFxnnc88Gvyt0T75H9oni/+ptfP/8Mr8v/GVidvDPzSq/+y68v+xak4/lG/R/wdlq+/Hsd4AbUtzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOApl0bEfyJJR5fX03R0NGIwIv4fA+nM7Nz8y+dnP7gyle2rPv8/LZ70O7RUTorn/w+XyhM15aMRsTcivuzaUy2PnpudmWr3yQMAAAAAAAAAAAAAAAAAAMAOMVid81/pq53/n/m9q92tA5quO/8q3qHzdG/6lZW+bW0I0HKbj3/gabf++O9pajuA1msc/w8eVqpa2hyghVz/Q+faZPz7uAB2AfkfOtU6+/T6m90OoB3kfwAAAAAA2FX2HrjzSxIRi6/tqS6Z3nyfwf6wu6XtbgDQNsbwQufqnm13C4B28R4fSJbX/q472b/x6P+kOQ0CAAAAAAAAAAAAAFY5uN/8f+hUa8//N7YfdrM15v/XC363C4BdpPGjP+R+2O28xweelO3N/wcAAAAAAAAAAACAHaD/+qXJmZnpa3MLT9/KGzujGRtbWZzcEc3Y1pVHzTlyT0TsjBNs9UpxC442NqPNf5cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBl/wYAAP//SlcnIw==") r5 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e22, 0xffff8000, @mcast2, 0x9}}, 0x6e51, 0xffff}, 0x90) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x5, 0x4}, 0x3ff, 0x0, 0x0, 0x401, 0xc5c}}}]}, 0x78}}, 0x0) 7.279556774s ago: executing program 4 (id=1969): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3590bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d080000000000000014f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bdd277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabaf18647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15283217e03d02a4054f34af3a65ef6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a62bc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b391b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815501681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add38a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889581c750c34586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7004757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11c39d6fdcf5926d6ad5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a038813f2bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa500a0000000000006a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xfffffffffffffe43}}, 0x1006) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000001280)=ANY=[], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="b0000000000000008d15c9370f0795e9ec0400339b8fd15e58a85d3d0642"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 7.012401796s ago: executing program 3 (id=1970): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0\x00', 0x1a00801, &(0x7f0000001680)=ANY=[], 0x1, 0xc56, &(0x7f0000000f80)="$eJzs3U9sHNd9B/DfGy7FpdxWTOwqThoHm7ZIZcVy9S+mYhXuqqbZBpBlIRRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBAhQIWMzsW3FJUZYskhIlfT429d2dfW/3vZn1jCzoNy8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIjfe+3c8RNpmxf6HsJgAIAH4sLYV4+f3O76DwA8ti7d6f//AQAAAAAAAAAAAACA/SJFEU9HirkLa2miet5RP9/uv3FzfGR0+26DqerZV7Uvf+onTp46/aWXhs9083x75iP677bPxBtjl841Xp29Pjc/tbAwNdkYn2lfmZ2cuud32Gn/rY5WO6Bx/c0bk1evLjROvnhq08s3hz4ceOrw0Nnh54891207PjI6OrbRpN7bvnbfA+m4U4XHgSjiWKR44Xs/Ta2IKGLn+6L+YI/9VoPVJI5WkxgfGa0mMt1uzSyWL17s7ogiotHTqdndR9sfi6j1P9A53FkzYqkcfjngo+X0xuZa863L01ONi635xfZie3bmYuqMtpxPI4o4kyKWI2J14Pa3648iapHiO4fW0uV8149qP3yxKgy+8ziKPZzjPSjH2eiPWC46xyzt52O2jw1EEa9Hip+9dySu5PNMda75QsTrZf4g4p0yX4lI5RfjdMQH23yPeDTVoog/L4//2bU0WZ0PuueV819rfGXm6mxP2+555WNeH247Uzyk68Pglnww9vn1pB5FtKoz/lq6/9/sAAAAAAAAAAAAAAAAALDbBqOIT0eK1/7tj6q64qjq0g+dHf79oV/urRl/9i7vU7Z9MSKWio2a3I+qezuQCwMvpospPeRa4idZPYr441z/962HPRgAAAAAAAAAAAAAAAAAAIAnWhE/iRQvv38kLUfvmuLtmWuNS63L051VYbtr/3bXTF9fX19vpE42c07kXMq5nHMl52rOKHL/nM2cEzmXci7nXMm5mjP6cv+czZwTOZdyLudcybmaM2q5f85mzomcSzmXc67kXM0Z+2TtXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAx0kRRfwiUnz7G2spUkQ0IyaikysDD3t0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBpIBXx/UjR+IPmrW21iEjVvx1Hyl9OR/NAmZ+M5nCZr0TzXM5WlbXmtx7C+NmZ/lTEjyPFQP3dWwc8H//+zrNbX4N455sbzz5T62Rf98WhDweeOnzo7PDo55690+O03QCOnm/P3LjZGB8ZHR3r2VzLn/7Jnm1D+XOL3Zk6EbHw1ttvtqanp+bv/0H5FdhB90foQao9KTP1oHoQtX0xjIcz903qD+sExZ4qr/8fRIrffv/fuxf8zvW/Hr/UeXbrCh8//5ON6//LW9/oHq//ta398vW/vKZvd/1/umfby/l3I/21iPri9bn+wxH1hbfePta+3ro2dW1q5vTx418eHv7yqeP9ByLqV9vTUz2PdmV3AQAAAAAAAAAAAAAAADw4qYjfjRStH6+lRkTcrOq1hs4OP3/sub7oq+qtNtVtvzF26Vzj1dnrc/NTCwtTk43xmfaV2cmpe/24elXuNT4yuieTuavBPR7/YP3V2bm35tvX/nBx29cP1s9dXlicb13Z/uUYjCKi2bvlaDXg8ZHRatDT7dZM1fXitsX0H19/KuI/IsWV0430+bwt1/9vrfDfVP+/tPWNdrH+/3MHN+r/PtHTtPzMlIr4eaT4rb94Nj5fjfNg3LbPcru/iRRHz3w2t4sDZbvuGDr3FehUBpZt/ydS/MMvNrft1kM+vdH2xMfauY+A8vgfihTf/7Pvxq/nbZvv/7D98T+49Y3u+fhvqSS+y/0fnunZdnDT/Qp2ZfpPvPL4H4sUrzz9bvxGteX/PvL+H917bxzpNN64P8ce3f/jV3u2DeXP/c3dmjwAAAAAAAAAAMAjrD8V8beR4oejtfRS3nYvf/9vcusb7dHf//pUz7bJ3Vmv6K4PdrxTAQAAAGCf6E9F/CRSXFt891YN9eb67576z9/ZqP8cSVterf6c71eq+wbs5p//9RrKnzux82kDAAAAAAAAAAAAAAAAAADAvpJSES/l9dQnqnr+yTuup74SKV77rxdyu3S4bNddB36o+rV+YXbm2Lnp6dl6LLYuT081xuZaV6bKvs9EirW//mzuW1Trq3fXm++s8b6xFvt8pBj9u27bzlrs3bXJn9loe6Js+4lI8Z9/v7ltXpo6rx1dtT1Ztv2rSPH1f9q+7eGNtqfKtt+NFD/6eqPb9mDZtnt/1E9ttH3xymyxB0cFAAAAAAAAAAAAAAAAAACAJ01/KuJPI8V/X1++Vcuf1//v73laeeebEWm9b9v3uVmt8z9Urf9/p8f3s/5/dV+BpW17AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAYytFEW9HirkLa2lloHzeUT/fnrlxc3xkdPtug6nq2Ve1L3/qJ06eOv2ll4bPdPOj+++2T8cbY5fONV6dvT43P7WwMDXZGJ9pX5mdnLrnd9hp/62OVjugcf3NG5NXry40Tr54atPLN4c+HHjq8NDZ4eePPddtOz4yOjrW06bWf9+ffpt0h+0Hooi/jBQvfO+n6YcDEUXsfF/c5buz1warSRytJjE+MlpNZLrdmlksX7zY3RFFRKOnU7O7jx7AsdiRZsRSOfxywEfL6Y3NteZbl6enGhdb84vtxfbszMXUGW05n0YUcSZFLEfE6sDtb9cfRbwZKb5zaC3980BEX3c/fPHC2FePn7zzOIo9nOM9KMfZ6I9YLh6BY7aPDUQR/xgpfvbekfiXgYhadH7iCxGvl/mDiHeic7xT+cU4HfHBNt8jHk21KOJ/y+N/di29N1CeD7rnlfNfa3xl5upsT9vueeWRvz48SPv83FSPIn5UnfHX0r/67xoAAAAAAAAAAAAAAABgHyni1yLFy+8fSVV98K2a4vbMtcal1uXpTllft/avWzO9vr6+3kidbOacyLmUcznnSs7VnFHk/jmbZdbX1yfy86WcyzlXOjm4mp9HX+6fs5lzIudSzuWcKzlXc0Yt98/ZzDmRcynncs6VnKs5Y5/U7gEAAAAAAAAAAAAAAAAAAI+Xovonxbe/sZbWBzrrS09EJ1esB/rY+/8AAAD//3TM+MM=") socket$inet_tcp(0x2, 0x1, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x4000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x88}, 0x0) dup(0xffffffffffffffff) r2 = syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0'}, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 6.827190919s ago: executing program 4 (id=1971): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) userfaultfd(0x801) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x100, 0x9f7b}, 0x8) 5.740037268s ago: executing program 0 (id=1972): clock_adjtime(0x11, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x343}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600), 0x4) recvmsg(r3, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104) 5.738953209s ago: executing program 2 (id=1973): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x200801d, &(0x7f00000000c0), 0xfe, 0x4eb, &(0x7f0000000c40)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xcb65000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz0\x00', 0x1ff) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) sendto$inet6(r4, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) sendmsg$inet6(r4, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000180)={0x2, @pix_mp={0x0, 0x0, 0x33424752, 0x0, 0x0, [{0x0, 0x3}]}}) mount$tmpfs(0x0, &(0x7f0000000100)='./file2\x00', &(0x7f0000000180), 0x800888, &(0x7f0000000480)=ANY=[@ANYRESDEC]) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket(0x18, 0x2, 0xffffffb9) socket(0x80000000000000a, 0x2, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f0000000280)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) close(0x4) 4.647361476s ago: executing program 4 (id=1974): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000300)={r3, r4}) sendmmsg$inet(r5, &(0x7f0000007fc0)=[{{0x0, 0x0, &(0x7f0000007b40)=[{&(0x7f0000000200)="e2", 0x100000}], 0x1}, 0x700}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=' ', 0x1}], 0x1}}], 0x2, 0x0) 4.192152751s ago: executing program 0 (id=1975): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 3.744849887s ago: executing program 1 (id=1976): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, 0x0, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x12}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4666}]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x8044) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000740)=ANY=[], 0x118) write$6lowpan_control(r1, &(0x7f0000000080)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r3, 0x10c, 0x1, &(0x7f0000002100)=0x80008, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0xf000000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_register(r4, &(0x7f0000006600)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x1, 0x3a, '.]-', 0x3a, ']o', 0x3a, './file0', 0x3a, [0x50, 0x50, 0x4f, 0x4f]}, 0x30) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB='\b', @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x10008001}, 0x40) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = openat$cgroup_ro(r4, 0x0, 0x275a, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000300), 0xffffffffffffffff, 0xb}}, 0x18) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000414010026bd7000ffdbdf250800010000000000080003"], 0x20}, 0x1, 0x0, 0x0, 0x20048001}, 0x20000000) syz_open_dev$audion(&(0x7f0000000040), 0xc, 0x30040) 3.118338916s ago: executing program 2 (id=1977): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000000340)=""/187, &(0x7f0000000000)=0xbb) read(0xffffffffffffffff, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 3.086591762s ago: executing program 5 (id=1978): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2b8, &(0x7f0000001080)="$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") r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6e0ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_mark(0xffffffffffffffff, 0x409, 0x4800003e, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) semop(0x0, &(0x7f0000000040)=[{0x0, 0xffe0}], 0x1) semop(0x0, 0x0, 0x0) 2.889983066s ago: executing program 1 (id=1979): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) accept4(r3, 0x0, 0x0, 0x0) 1.98340792s ago: executing program 2 (id=1980): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x30144d0, &(0x7f0000000300)={[{@barrier_val={'barrier', 0x3d, 0x1}}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@jqfmt_vfsv1}, {@mblk_io_submit}, {@data_ordered}, {@barrier_val}, {@grpjquota}, {}]}, 0xc5, 0x7ce, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000500)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$incfs(0xffffffffffffff9c, 0x0, 0x1a10c1, 0x9c37611dc13d0d83) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) recvmmsg(r0, &(0x7f00000010c0), 0x1cf13bc0890a0d1, 0x0, 0x0) 1.982556251s ago: executing program 3 (id=1981): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x5601, &(0x7f0000000200)={0x0, 0x80000, 0x80, 0x1, 0x357}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) 1.812650801s ago: executing program 1 (id=1982): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)={0x44, 0x10, 0x509, 0x0, 0x0, "", [@typed={0x31, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691"}]}, 0x44}], 0x1, 0x0, 0x0, 0x50}, 0x0) 1.627137571s ago: executing program 3 (id=1983): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x200801d, &(0x7f00000000c0), 0xfe, 0x4eb, &(0x7f0000000c40)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz0\x00', 0x1ff) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) sendmsg$inet6(r3, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) close(0x4) 1.546215819s ago: executing program 1 (id=1984): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000001c0)='./file0\x00', 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=cp12fi,utf8=1,utf8=1,iocharset=cp869,uni_xlate=1,nonumtail=0,\x00'], 0x1, 0x16f, &(0x7f0000000240)="$eJzs271qFFEABeCzMWrUYrewEosBG6slmycwSARxQVC2UBAUkwXJSMDAghYmnYUv4eNY+ySWKYQrycT8MSkskoHs9zVz4M6Be4v5uQPz9v7HzfWt7emb6c8s9XpZeJQqe70MspB/dgMAXCV7peR3KaXc3M2tHymldD0jAOCief4DwPx5+er1s9XxeO1FVS0l9bfZZDZpjs346jQfUmcjy+nnT/ZfEA41+cnT8dpydWCQ7/XOYX9nNrl2uj9KP4P2/qjpV6f713P7ZH8l/dxt76+09m/k4YMT/WH6+fU+W6mznv3ucf/rqKoePx+f6d85OA8AAACugmF1pHX/PhyeN970/+P7wJn99WLuLXa7dgCYV9ufv2y+q+uNT4IgCEeh6zsTcNGOL/quZwIAAAAAAAAAAAAAAJznMn4n6nqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMyfvwEAAP//hLKYFQ==") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2b8, &(0x7f0000001080)="$eJzs3T2LY1UYAOD3JpkkuxZJYSWCF7SwWna2tckgWVhMpaRQCx3cXZAkCLsw4CgGK1sbS3+BINj5J2wEf4DgD7BzioEjN7mXZGbyMUEz48fzFJl37jnvPe85OcwHwz3z4cuT0eM8nn75+a/RbmdR60UvzrLoRi0qKaUUC72vAwD4NztLKX5Pc9dM6RUvWUS091saALAnO3///2HvJQEAe/bOu++9dTQY9N/O83Y8nHx1Mix+sy8+ztuPnsbHMY4ncT86cT7/W0D100Lx+jClNG3khW68NpmeDIvMyQc/lfc/qgY6jE50Z9HF/EeD/mE+t5Q/Leq4W47fK8Z/EJ14ccX4jwb9ByvyY9iM119dqv9edOLnj+KTGMfjWRGL/C8O8/zN9M0fn71flFfkZ9OTYWvWbyHVb+5dAQAAAAAAAAAAAAAAAAAAAADgv+5eeXZOK2bn9xSXyvN36ufFJweRV7oXz+eZ52fVjS6dDzRN8W1KrUbEoH8/z/NUdlzkN+KlRjRuZ9YAAAAAAAAAAAAAAAAAAADwz/L809PR8Xj85NmK4Je7EWua1gTVaQDVY/1bsurrmnpLV16J09Fxa/0Nl5pqZbhh0KhXfbKIjdMpJrHL3P9CcGddzd99v+sN29v7HGxan78nqHbX6DhbvYatqK60q/f0x+U+zbjmWM11TWn79lsKmiubOjvPvfnCLJhu6BPZpsLe+G2+cuWV7PIsmrNVXZl+UAZL6Zf2xk77+erXisxpHQAAAAAAAAAAAAAAAAAAsFeLh36vNN3ZklpLrb2VBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3avH//3cIpmXyNTo349nzW54iAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/wN/BgAA//+kKlw+") r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6e0ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x409, 0x4800003e, r4, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = semget$private(0x0, 0x6, 0x0) semop(r6, 0x0, 0x0) semctl$SETALL(r6, 0x0, 0x11, 0x0) semtimedop(r6, &(0x7f0000000100)=[{0x4}], 0x1, &(0x7f0000000140)={0x0, 0x3938700}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 743.352326ms ago: executing program 0 (id=1985): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000001c0)='./file0\x00', 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=cp12fi,utf8=1,utf8=1,iocharset=cp869,uni_xlate=1,nonumtail=0,\x00'], 0x1, 0x16f, &(0x7f0000000240)="$eJzs271qFFEABeCzMWrUYrewEosBG6slmycwSARxQVC2UBAUkwXJSMDAghYmnYUv4eNY+ySWKYQrycT8MSkskoHs9zVz4M6Be4v5uQPz9v7HzfWt7emb6c8s9XpZeJQqe70MspB/dgMAXCV7peR3KaXc3M2tHymldD0jAOCief4DwPx5+er1s9XxeO1FVS0l9bfZZDZpjs346jQfUmcjy+nnT/ZfEA41+cnT8dpydWCQ7/XOYX9nNrl2uj9KP4P2/qjpV6f713P7ZH8l/dxt76+09m/k4YMT/WH6+fU+W6mznv3ucf/rqKoePx+f6d85OA8AAACugmF1pHX/PhyeN970/+P7wJn99WLuLXa7dgCYV9ufv2y+q+uNT4IgCEeh6zsTcNGOL/quZwIAAAAAAAAAAAAAAJznMn4n6nqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMyfvwEAAP//hLKYFQ==") unlinkat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2b8, &(0x7f0000001080)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6e0ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = semget$private(0x0, 0x6, 0x0) semtimedop(r3, &(0x7f0000000100)=[{0x4}], 0x1, &(0x7f0000000140)={0x0, 0x3938700}) 0s ago: executing program 1 (id=1986): socket$netlink(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14}}, 0x3c}, 0x1, 0x1200}, 0x0) kernel console output (not intermixed with test programs): ead-only mode [ 298.285064][ T8793] loop1: detected capacity change from 0 to 8 [ 298.306839][ T8789] EXT4-fs (loop3): orphan cleanup on readonly fs [ 298.350867][ T8794] loop2: detected capacity change from 0 to 128 [ 298.360261][ T8789] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 298.390471][ T8789] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 298.438329][ T8789] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 298.507614][ T8789] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #16: comm syz.3.909: iget: immutable or append flags not allowed on symlinks [ 299.796655][ T8789] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.909: couldn't read orphan inode 16 (err -117) [ 300.204456][ T8789] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 301.028361][ T8814] EXT4-fs error (device loop3): ext4_lookup:1813: inode #16: comm syz.3.909: iget: immutable or append flags not allowed on symlinks [ 301.506792][ T5855] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.830025][ T8832] loop2: detected capacity change from 0 to 64 [ 302.273863][ T8840] loop1: detected capacity change from 0 to 16 [ 302.609078][ T8842] loop4: detected capacity change from 0 to 64 [ 302.945696][ T8840] erofs (device loop1): mounted with root inode @ nid 36. [ 303.155352][ T8840] syz.1.928: attempt to access beyond end of device [ 303.155352][ T8840] loop1: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 303.415434][ T8846] loop2: detected capacity change from 0 to 128 [ 303.473184][ T8831] loop3: detected capacity change from 0 to 40427 [ 303.508016][ T8831] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 303.515199][ T8831] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 303.535374][ T8831] F2FS-fs (loop3): invalid crc value [ 303.548114][ T8831] F2FS-fs (loop3): Found nat_bits in checkpoint [ 303.721859][ T8847] loop4: detected capacity change from 0 to 32768 [ 303.980253][ T8831] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 304.002137][ T8831] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 305.018218][ T8847] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 305.051037][ T8847] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 305.233557][ T8847] XFS (loop4): Ending clean mount [ 305.252372][ T8847] XFS (loop4): Quotacheck needed: Please wait. [ 305.298753][ T8875] loop1: detected capacity change from 0 to 512 [ 305.353970][ T8847] XFS (loop4): Quotacheck: Done. [ 305.470965][ T8875] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 305.570504][ T8875] EXT4-fs (loop1): orphan cleanup on readonly fs [ 305.687351][ T8875] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 305.703530][ T8875] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 305.779322][ T8875] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 305.805874][ T8875] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #16: comm syz.1.935: iget: immutable or append flags not allowed on symlinks [ 305.849516][ T8875] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.935: couldn't read orphan inode 16 (err -117) [ 305.858386][ T8882] XFS (loop4): syz.4.931 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 305.893575][ T8875] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 306.644909][ T8890] EXT4-fs error (device loop1): ext4_lookup:1813: inode #16: comm syz.1.935: iget: immutable or append flags not allowed on symlinks [ 306.684870][ T8889] loop5: detected capacity change from 0 to 2048 [ 306.928740][ T8889] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.092051][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.221215][ T8900] loop2: detected capacity change from 0 to 16 [ 307.391695][ T8899] 9pnet_fd: Insufficient options for proto=fd [ 307.402793][ T8900] erofs (device loop2): mounted with root inode @ nid 36. [ 307.421459][ T5855] syz-executor: attempt to access beyond end of device [ 307.421459][ T5855] loop3: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 307.437775][ T8900] syz.2.941: attempt to access beyond end of device [ 307.437775][ T8900] loop2: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 307.462679][ T5855] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 307.500108][ T5855] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 307.507727][ T5855] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 307.515597][ T5855] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 307.619887][ T5848] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.803197][ T8915] overlayfs: statfs failed on './file0' [ 309.036740][ T8917] loop0: detected capacity change from 0 to 128 [ 310.633736][ T5156] Bluetooth: hci4: unexpected event for opcode 0x043d [ 310.656973][ T5862] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 311.143319][ T8943] loop3: detected capacity change from 0 to 128 [ 311.225040][ T8936] loop0: detected capacity change from 0 to 1024 [ 311.247986][ T8936] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 311.289333][ T8922] loop2: detected capacity change from 0 to 32768 [ 311.337677][ T8936] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 311.354804][ T8936] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 311.356551][ T8922] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.950 (8922) [ 311.411293][ T8936] EXT4-fs (loop0): invalid journal inode [ 311.442397][ T8936] EXT4-fs (loop0): can't get journal size [ 311.504117][ T8936] EXT4-fs error (device loop0): ext4_protect_reserved_inode:182: inode #3: comm syz.0.953: blocks 2-2 from inode overlap system zone [ 311.567862][ T8936] EXT4-fs (loop0): failed to initialize system zone (-117) [ 311.576585][ T8922] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 311.609861][ T8936] EXT4-fs (loop0): mount failed [ 311.624192][ T8922] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 311.644853][ T8922] BTRFS info (device loop2): using free-space-tree [ 312.145391][ T8976] loop3: detected capacity change from 0 to 16 [ 312.259354][ T8976] erofs (device loop3): mounted with root inode @ nid 36. [ 312.274863][ T8922] BTRFS warning (device loop2): can't clear the compat:33 feature bit while mounted [ 312.584092][ T5851] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 312.591233][ T8976] syz.3.959: attempt to access beyond end of device [ 312.591233][ T8976] loop3: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 312.630486][ T8985] loop1: detected capacity change from 0 to 16 [ 312.650790][ T8985] erofs (device loop1): mounted with root inode @ nid 36. [ 313.090907][ T8991] loop2: detected capacity change from 0 to 8 [ 313.340367][ T8993] syz.1.963: attempt to access beyond end of device [ 313.340367][ T8993] loop1: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 313.357397][ T8993] syz.1.963: attempt to access beyond end of device [ 313.357397][ T8993] loop1: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 313.374184][ T8993] syz.1.963: attempt to access beyond end of device [ 313.374184][ T8993] loop1: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 314.380169][ T9010] loop4: detected capacity change from 0 to 512 [ 314.392141][ T9010] EXT4-fs: Ignoring removed mblk_io_submit option [ 314.502470][ T9010] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 314.512934][ T9010] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 314.640023][ T9010] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 314.649908][ T9010] EXT4-fs (loop4): orphan cleanup on readonly fs [ 314.675550][ T9010] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.968: Invalid block bitmap block 0 in block_group 0 [ 314.737031][ T9010] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.968: Invalid block bitmap block 0 in block_group 0 [ 314.756283][ T9010] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.968: Invalid block bitmap block 0 in block_group 0 [ 314.778409][ T9010] Quota error (device loop4): write_blk: dquota write failed [ 314.786566][ T9010] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 314.796933][ T9010] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.968: Failed to acquire dquot type 1 [ 314.832959][ T9010] EXT4-fs (loop4): 1 orphan inode deleted [ 314.917721][ T8999] loop5: detected capacity change from 0 to 2048 [ 314.951702][ T1355] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5 [ 314.961648][ T1355] EXT4-fs error (device loop4): ext4_release_dquot:6961: comm kworker/u8:5: Failed to release dquot type 1 [ 314.985476][ T9014] loop2: detected capacity change from 0 to 128 [ 314.999171][ T8999] EXT4-fs: Ignoring removed mblk_io_submit option [ 315.003047][ T9009] 9pnet_fd: Insufficient options for proto=fd [ 315.022791][ T8999] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 315.334940][ T9010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 315.971403][ T5862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.814635][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.821112][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.334865][ T9045] netlink: 'syz.2.979': attribute type 10 has an invalid length. [ 317.553109][ T9053] loop2: detected capacity change from 0 to 8 [ 318.812466][ T9063] 9pnet_fd: Insufficient options for proto=fd [ 319.274766][ T9072] loop1: detected capacity change from 0 to 2048 [ 319.308533][ T9072] EXT4-fs: Ignoring removed mblk_io_submit option [ 319.390245][ T9072] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 319.403010][ T9075] loop3: detected capacity change from 0 to 128 [ 319.457045][ T9078] loop0: detected capacity change from 0 to 512 [ 319.517611][ T9080] loop4: detected capacity change from 0 to 512 [ 319.553294][ T9078] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 319.562152][ T9078] EXT4-fs (loop0): orphan cleanup on readonly fs [ 319.645587][ T9078] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 319.657380][ T9080] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 319.725802][ T9078] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 319.726641][ T9080] EXT4-fs (loop4): orphan cleanup on readonly fs [ 319.770959][ T9078] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 319.780212][ T9080] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 319.800829][ T9078] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #16: comm syz.0.992: iget: immutable or append flags not allowed on symlinks [ 319.817295][ T9080] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 319.841752][ T9080] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 319.849099][ T9080] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #16: comm syz.4.993: iget: immutable or append flags not allowed on symlinks [ 319.883468][ T9080] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.993: couldn't read orphan inode 16 (err -117) [ 319.902056][ T9078] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.992: couldn't read orphan inode 16 (err -117) [ 319.925451][ T9078] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 319.962991][ T9080] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 320.724596][ T9092] EXT4-fs error (device loop0): ext4_lookup:1813: inode #16: comm syz.0.992: iget: immutable or append flags not allowed on symlinks [ 321.590386][ T5858] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.095329][ T9103] EXT4-fs error (device loop4): ext4_lookup:1813: inode #16: comm syz.4.993: iget: immutable or append flags not allowed on symlinks [ 322.461374][ T9098] netlink: 'syz.1.995': attribute type 10 has an invalid length. [ 322.560832][ T5862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.750022][ T9107] loop0: detected capacity change from 0 to 8 [ 322.785821][ T9109] loop1: detected capacity change from 0 to 128 [ 324.568781][ T9132] 9pnet_fd: Insufficient options for proto=fd [ 325.017827][ T9141] loop0: detected capacity change from 0 to 2048 [ 325.026251][ T9141] EXT4-fs: Ignoring removed mblk_io_submit option [ 325.056868][ T9141] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 325.734928][ T9154] loop2: detected capacity change from 0 to 512 [ 325.779843][ T9154] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 325.791592][ T9159] loop3: detected capacity change from 0 to 8 [ 325.850032][ T9154] EXT4-fs (loop2): orphan cleanup on readonly fs [ 325.902432][ T9154] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 326.163251][ T9154] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 326.210265][ T9154] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 326.228816][ T9154] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #16: comm syz.2.1012: iget: immutable or append flags not allowed on symlinks [ 326.268501][ T9164] loop5: detected capacity change from 0 to 128 [ 326.517125][ T9154] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1012: couldn't read orphan inode 16 (err -117) [ 326.730697][ T9154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 327.563002][ T9171] loop1: detected capacity change from 0 to 128 [ 327.898163][ T9174] loop3: detected capacity change from 0 to 8 [ 328.326205][ T9178] loop0: detected capacity change from 0 to 128 [ 328.773911][ T9180] EXT4-fs error (device loop2): ext4_lookup:1813: inode #16: comm syz.2.1012: iget: immutable or append flags not allowed on symlinks [ 329.300938][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.517228][ T9192] 9pnet_fd: Insufficient options for proto=fd [ 330.700867][ T9196] loop3: detected capacity change from 0 to 512 [ 330.780215][ T9196] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 330.829683][ T9196] EXT4-fs (loop3): orphan cleanup on readonly fs [ 330.859082][ T9196] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 330.897427][ T9196] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 331.612690][ T9196] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 331.667840][ T9196] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #16: comm syz.3.1022: iget: immutable or append flags not allowed on symlinks [ 331.862281][ T9217] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 331.873246][ T9196] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.1022: couldn't read orphan inode 16 (err -117) [ 331.906159][ T9196] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 332.193326][ T9215] loop5: detected capacity change from 0 to 2048 [ 332.201286][ T9215] EXT4-fs: Ignoring removed mblk_io_submit option [ 333.414200][ T9221] EXT4-fs error (device loop3): ext4_lookup:1813: inode #16: comm syz.3.1022: iget: immutable or append flags not allowed on symlinks [ 333.530501][ T9215] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 334.180840][ T9233] loop0: detected capacity change from 0 to 8 [ 334.785992][ T5855] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.034524][ T9244] loop5: detected capacity change from 0 to 128 [ 335.103211][ T9249] 9pnet_fd: Insufficient options for proto=fd [ 335.167605][ T9251] loop4: detected capacity change from 0 to 128 [ 335.275998][ T9253] loop0: detected capacity change from 0 to 128 [ 337.165664][ T9272] loop3: detected capacity change from 0 to 512 [ 337.555472][ T9272] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 337.581060][ T9272] EXT4-fs (loop3): orphan cleanup on readonly fs [ 337.623697][ T9272] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 337.700588][ T9272] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 337.821196][ T9272] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 337.840728][ T9272] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #16: comm syz.3.1043: iget: immutable or append flags not allowed on symlinks [ 337.887650][ T9272] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.1043: couldn't read orphan inode 16 (err -117) [ 337.909116][ T9280] loop4: detected capacity change from 0 to 2048 [ 337.916055][ T9272] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 337.930705][ T9280] EXT4-fs: Ignoring removed mblk_io_submit option [ 337.984638][ T9280] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 339.221619][ T5855] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.042527][ T9297] loop2: detected capacity change from 0 to 8 [ 340.136177][ T9299] loop4: detected capacity change from 0 to 2048 [ 340.278065][ T9301] 9pnet_fd: Insufficient options for proto=fd [ 340.370751][ T9305] loop5: detected capacity change from 0 to 128 [ 340.424866][ T9299] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 342.108986][ T9311] loop3: detected capacity change from 0 to 16 [ 342.264401][ T9311] erofs (device loop3): mounted with root inode @ nid 36. [ 342.367948][ T9313] loop2: detected capacity change from 0 to 128 [ 342.572911][ T9315] loop1: detected capacity change from 0 to 512 [ 342.655273][ T9303] loop0: detected capacity change from 0 to 32768 [ 342.881624][ T9320] syz.3.1054: attempt to access beyond end of device [ 342.881624][ T9320] loop3: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 343.511628][ T9303] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1049 (9303) [ 343.532263][ T9315] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 343.549261][ T9315] EXT4-fs (loop1): orphan cleanup on readonly fs [ 343.618698][ T9315] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 343.636151][ T9315] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 343.815707][ T9315] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 343.823738][ T9315] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #16: comm syz.1.1056: iget: immutable or append flags not allowed on symlinks [ 343.839251][ T9315] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1056: couldn't read orphan inode 16 (err -117) [ 343.914959][ T9319] loop5: detected capacity change from 0 to 2048 [ 343.972017][ T9315] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 343.986055][ T9319] EXT4-fs: Ignoring removed mblk_io_submit option [ 344.014667][ T9319] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 345.216136][ T9338] EXT4-fs error (device loop1): ext4_lookup:1813: inode #16: comm syz.1.1056: iget: immutable or append flags not allowed on symlinks [ 346.045568][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.900155][ T9356] loop5: detected capacity change from 0 to 8 [ 346.995582][ T9357] overlayfs: failed to resolve './file1': -2 [ 347.026889][ T9359] 9pnet_fd: Insufficient options for proto=fd [ 347.200793][ T9362] loop0: detected capacity change from 0 to 1024 [ 347.278381][ T9362] EXT4-fs: Ignoring removed mblk_io_submit option [ 347.453857][ T9362] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.513854][ T9377] loop5: detected capacity change from 0 to 16 [ 347.534266][ T9377] erofs (device loop5): mounted with root inode @ nid 36. [ 347.551307][ T9374] syzkaller1: entered promiscuous mode [ 347.560204][ T9374] syzkaller1: entered allmulticast mode [ 347.911116][ T9380] syz.5.1071: attempt to access beyond end of device [ 347.911116][ T9380] loop5: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 349.099353][ T9392] loop2: detected capacity change from 0 to 2048 [ 349.107868][ T9398] loop1: detected capacity change from 0 to 128 [ 349.209036][ T9392] EXT4-fs: Ignoring removed mblk_io_submit option [ 349.406299][ T9392] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 350.177400][ T9414] 9pnet_fd: Insufficient options for proto=fd [ 351.255410][ T5858] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.866683][ T9429] loop4: detected capacity change from 0 to 16 [ 351.891380][ T9429] erofs (device loop4): mounted with root inode @ nid 36. [ 352.212147][ T9429] syz.4.1089: attempt to access beyond end of device [ 352.212147][ T9429] loop4: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 353.652391][ T29] audit: type=1326 audit(1732623213.690:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9454 comm="syz.2.1098" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f221e77e819 code=0x0 [ 354.146296][ T9459] sctp: failed to load transform for md5: -2 [ 354.527634][ T9475] loop5: detected capacity change from 0 to 128 [ 354.722316][ T5156] Bluetooth: hci2: unexpected event for opcode 0x043d [ 356.049021][ T9488] loop4: detected capacity change from 0 to 16 [ 356.140419][ T9488] erofs (device loop4): mounted with root inode @ nid 36. [ 356.594089][ T9488] syz.4.1106: attempt to access beyond end of device [ 356.594089][ T9488] loop4: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 356.752932][ T9477] loop2: detected capacity change from 0 to 1024 [ 356.849311][ T9477] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 356.880209][ T9477] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 356.889970][ T9477] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 356.950214][ T9477] EXT4-fs (loop2): invalid journal inode [ 356.966391][ T9477] EXT4-fs (loop2): can't get journal size [ 357.069450][ T9477] EXT4-fs error (device loop2): ext4_protect_reserved_inode:182: inode #3: comm syz.2.1099: blocks 2-2 from inode overlap system zone [ 357.404798][ T9477] EXT4-fs (loop2): failed to initialize system zone (-117) [ 357.736797][ T9477] EXT4-fs (loop2): mount failed [ 358.379994][ T9508] loop1: detected capacity change from 0 to 512 [ 358.435467][ T9510] loop2: detected capacity change from 0 to 2048 [ 358.910345][ T29] audit: type=1326 audit(1732623218.910:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9504 comm="syz.5.1112" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f967797e819 code=0x0 [ 359.399886][ T9514] sctp: failed to load transform for md5: -2 [ 359.479754][ T9508] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 359.569225][ T9508] EXT4-fs (loop1): orphan cleanup on readonly fs [ 359.584454][ T9508] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 359.595076][ T9508] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 359.660570][ T9510] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0102] [ 359.668787][ T9510] System zones: 0-7 [ 359.705016][ T9510] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.720288][ T9508] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 360.621199][ T9528] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 360.740559][ T9510] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 360.941422][ T9508] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #16: comm syz.1.1111: iget: immutable or append flags not allowed on symlinks [ 360.967623][ T9508] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1111: couldn't read orphan inode 16 (err -117) [ 361.750186][ T9510] EXT4-fs (loop2): This should not happen!! Data will be lost [ 361.750186][ T9510] [ 361.771896][ T9508] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 361.901410][ T9510] EXT4-fs (loop2): Total free blocks count 0 [ 361.935165][ T9510] EXT4-fs (loop2): Free/Dirty block details [ 361.973579][ T9510] EXT4-fs (loop2): free_blocks=2415919104 [ 362.020243][ T9510] EXT4-fs (loop2): dirty_blocks=16 [ 362.058048][ T9510] EXT4-fs (loop2): Block reservation details [ 362.102811][ T9510] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 362.163976][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.270473][ T9539] loop0: detected capacity change from 0 to 8 [ 362.348496][ T6037] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 363.401837][ T9545] loop1: detected capacity change from 0 to 8 [ 365.520012][ T9559] loop4: detected capacity change from 0 to 64 [ 365.713418][ T9557] loop0: detected capacity change from 0 to 16 [ 365.740860][ T9559] hfs: node 4:3 still has 1 user(s)! [ 366.864523][ T9557] erofs (device loop0): mounted with root inode @ nid 36. [ 367.335704][ T9586] syz.0.1122: attempt to access beyond end of device [ 367.335704][ T9586] loop0: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 367.405895][ T9585] loop4: detected capacity change from 0 to 512 [ 367.580375][ T9585] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 367.588634][ T9585] EXT4-fs (loop4): orphan cleanup on readonly fs [ 367.611884][ T9585] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 367.622853][ T9585] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 367.667775][ T9590] loop5: detected capacity change from 0 to 2048 [ 367.681540][ T9585] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 367.688849][ T9585] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #16: comm syz.4.1131: iget: immutable or append flags not allowed on symlinks [ 367.709090][ T9585] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.1131: couldn't read orphan inode 16 (err -117) [ 367.741625][ T9592] loop0: detected capacity change from 0 to 2048 [ 367.786628][ T9585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 368.185760][ T9590] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0102] [ 368.449960][ T9595] EXT4-fs error (device loop4): ext4_lookup:1813: inode #16: comm syz.4.1131: iget: immutable or append flags not allowed on symlinks [ 368.699291][ T9590] System zones: 0-7 [ 368.775694][ T9590] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.790861][ T9607] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 368.874842][ T9590] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 369.062423][ T5862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.106649][ T9590] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 369.372896][ T9615] loop2: detected capacity change from 0 to 8 [ 369.471061][ T9590] EXT4-fs (loop5): This should not happen!! Data will be lost [ 369.471061][ T9590] [ 369.516095][ T9590] EXT4-fs (loop5): Total free blocks count 0 [ 369.573797][ T9590] EXT4-fs (loop5): Free/Dirty block details [ 369.600149][ T9590] EXT4-fs (loop5): free_blocks=2415919104 [ 369.655190][ T9590] EXT4-fs (loop5): dirty_blocks=16 [ 369.690289][ T9590] EXT4-fs (loop5): Block reservation details [ 369.734051][ T9590] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 369.898476][ T1355] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 370.752305][ T9627] sctp: failed to load transform for md5: -2 [ 371.195021][ T9642] loop1: detected capacity change from 0 to 64 [ 371.422984][ T9642] hfs: node 4:3 still has 1 user(s)! [ 372.109654][ T9649] loop3: detected capacity change from 0 to 2048 [ 372.171136][ T9649] udf: Unknown parameter 'L_*?"ŕӍ-oTvs7>Ӵ̔yx6>_`ܶrG|6e:Tm'R/6C>ڹƯm?o$vp [ 372.171136][ T9649] veO{o4޸?W{ݚ<' [ 372.279878][ T9652] loop4: detected capacity change from 0 to 16 [ 372.287268][ T9652] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 373.110418][ T9643] loop2: detected capacity change from 0 to 32768 [ 373.465636][ T9643] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 373.517143][ T9665] loop5: detected capacity change from 0 to 512 [ 373.821975][ T9665] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 373.832500][ T9676] loop3: detected capacity change from 0 to 8 [ 373.884752][ T9665] EXT4-fs (loop5): orphan cleanup on readonly fs [ 373.966739][ T9665] Quota error (device loop5): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 374.020227][ T9643] XFS (loop2): Ending clean mount [ 374.057897][ T9665] EXT4-fs warning (device loop5): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 374.153750][ T9665] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 374.193882][ T9665] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #16: comm syz.5.1150: iget: immutable or append flags not allowed on symlinks [ 374.289165][ T9665] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.1150: couldn't read orphan inode 16 (err -117) [ 374.290548][ T9643] syz.2.1143 (9643) used greatest stack depth: 17488 bytes left [ 374.382540][ T5851] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 374.435067][ T9680] loop4: detected capacity change from 0 to 2048 [ 374.555923][ T9680] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0102] [ 374.572909][ T9665] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 374.597015][ T9680] System zones: 0-7 [ 374.616991][ T9680] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.744385][ T9683] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 375.949930][ T29] audit: type=1804 audit(1732623235.630:34): pid=9687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1154" name="/newroot/202/file0/file1" dev="loop4" ino=15 res=1 errno=0 [ 376.324609][ T9693] EXT4-fs error (device loop5): ext4_lookup:1813: inode #16: comm syz.5.1150: iget: immutable or append flags not allowed on symlinks [ 376.357487][ T9668] loop1: detected capacity change from 0 to 32768 [ 376.602208][ T9668] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1151 (9668) [ 376.641667][ T9680] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 376.654381][ T9680] EXT4-fs (loop4): This should not happen!! Data will be lost [ 376.654381][ T9680] [ 376.665917][ T9680] EXT4-fs (loop4): Total free blocks count 0 [ 376.674189][ T9680] EXT4-fs (loop4): Free/Dirty block details [ 376.680356][ T9680] EXT4-fs (loop4): free_blocks=2415919104 [ 376.686123][ T9680] EXT4-fs (loop4): dirty_blocks=16 [ 376.691393][ T9680] EXT4-fs (loop4): Block reservation details [ 376.697407][ T9680] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 376.847880][ T5848] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.862107][ T9697] loop3: detected capacity change from 0 to 512 [ 376.908584][ T6037] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 377.022683][ T9697] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 377.071165][ T9697] EXT4-fs (loop3): orphan cleanup on readonly fs [ 377.121486][ T9697] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 377.203860][ T9697] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 377.666979][ T9695] sctp: failed to load transform for md5: -2 [ 377.981058][ T9697] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 378.090751][ T9697] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #16: comm syz.3.1157: iget: immutable or append flags not allowed on symlinks [ 378.190598][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.197126][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.270223][ T9697] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.1157: couldn't read orphan inode 16 (err -117) [ 378.344061][ T9697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 379.407472][ T9728] EXT4-fs error (device loop3): ext4_lookup:1813: inode #16: comm syz.3.1157: iget: immutable or append flags not allowed on symlinks [ 379.882696][ T5855] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.450638][ T9749] loop3: detected capacity change from 0 to 8 [ 381.631913][ T9760] loop3: detected capacity change from 0 to 2048 [ 382.198613][ T9760] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0102] [ 382.237850][ T9760] System zones: 0-7 [ 382.293784][ T9760] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.410537][ T9760] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 382.430624][ T9760] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 382.462907][ T9760] EXT4-fs (loop3): This should not happen!! Data will be lost [ 382.462907][ T9760] [ 382.472886][ T9760] EXT4-fs (loop3): Total free blocks count 0 [ 382.478971][ T9760] EXT4-fs (loop3): Free/Dirty block details [ 382.485081][ T9760] EXT4-fs (loop3): free_blocks=2415919104 [ 382.491065][ T9760] EXT4-fs (loop3): dirty_blocks=16 [ 382.496487][ T9760] EXT4-fs (loop3): Block reservation details [ 382.502689][ T9760] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 382.510450][ T29] audit: type=1804 audit(1732623242.510:35): pid=9772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1170" name="/newroot/204/file0/file1" dev="loop3" ino=15 res=1 errno=0 [ 382.538872][ T9741] loop0: detected capacity change from 0 to 32768 [ 382.827378][ T9741] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 383.524356][ T9741] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop0": -EINTR [ 383.526844][ T9741] XFS (loop0): log mount failed [ 383.651454][ T3529] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 383.978987][ T9793] loop1: detected capacity change from 0 to 512 [ 384.091105][ T9793] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 384.140635][ T9793] EXT4-fs (loop1): orphan cleanup on readonly fs [ 384.166744][ T9793] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 384.365323][ T9793] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 384.821116][ T9793] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 384.891480][ T9793] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #16: comm syz.1.1179: iget: immutable or append flags not allowed on symlinks [ 385.078547][ T9801] loop5: detected capacity change from 0 to 8 [ 385.095912][ T9804] loop2: detected capacity change from 0 to 256 [ 385.149390][ T9808] netlink: 892 bytes leftover after parsing attributes in process `syz.0.1183'. [ 385.182602][ T9793] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1179: couldn't read orphan inode 16 (err -117) [ 385.204208][ T9804] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 385.280290][ T9793] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 386.930256][ T9813] EXT4-fs error (device loop1): ext4_lookup:1813: inode #16: comm syz.1.1179: iget: immutable or append flags not allowed on symlinks [ 387.621967][ T9819] loop0: detected capacity change from 0 to 2048 [ 387.639045][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.641495][ T9821] loop3: detected capacity change from 0 to 16 [ 387.759423][ T9825] loop2: detected capacity change from 0 to 2048 [ 387.867859][ T9829] loop1: detected capacity change from 0 to 2048 [ 387.875369][ T9829] EXT4-fs: Ignoring removed mblk_io_submit option [ 387.955303][ T9821] erofs (device loop3): mounted with root inode @ nid 36. [ 387.970938][ T9819] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.996787][ T9829] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 388.165483][ T9821] syz.3.1189: attempt to access beyond end of device [ 388.165483][ T9821] loop3: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 388.197329][ T9825] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0102] [ 388.216583][ T9825] System zones: 0-7 [ 388.224060][ T5858] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.245279][ T9825] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.518152][ T9825] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 388.820394][ T9825] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 388.927512][ T9825] EXT4-fs (loop2): This should not happen!! Data will be lost [ 388.927512][ T9825] [ 388.970389][ T29] audit: type=1804 audit(1732623248.970:36): pid=9839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1188" name="/newroot/188/file0/file1" dev="loop2" ino=15 res=1 errno=0 [ 389.014892][ T9825] EXT4-fs (loop2): Total free blocks count 0 [ 389.050621][ T9825] EXT4-fs (loop2): Free/Dirty block details [ 389.056723][ T9825] EXT4-fs (loop2): free_blocks=2415919104 [ 389.062595][ T9825] EXT4-fs (loop2): dirty_blocks=16 [ 389.067735][ T9825] EXT4-fs (loop2): Block reservation details [ 389.074063][ T9825] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 389.236296][ T3529] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 389.757397][ T9854] loop5: detected capacity change from 0 to 512 [ 389.991411][ T9854] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 390.006519][ T9854] EXT4-fs (loop5): orphan cleanup on readonly fs [ 390.045721][ T9854] Quota error (device loop5): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 390.109444][ T9854] EXT4-fs warning (device loop5): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 390.194172][ T9854] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 390.273321][ T9854] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #16: comm syz.5.1198: iget: immutable or append flags not allowed on symlinks [ 390.375218][ T9867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.471237][ T9862] loop4: detected capacity change from 0 to 8 [ 390.499209][ T9854] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.1198: couldn't read orphan inode 16 (err -117) [ 390.605585][ T9854] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 392.365670][ T9874] EXT4-fs error (device loop5): ext4_lookup:1813: inode #16: comm syz.5.1198: iget: immutable or append flags not allowed on symlinks [ 393.224316][ T5848] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.955394][ T9882] loop0: detected capacity change from 0 to 2048 [ 393.997755][ T9882] EXT4-fs: Ignoring removed mblk_io_submit option [ 394.189687][ T9888] loop5: detected capacity change from 0 to 2048 [ 394.197253][ T9888] udf: Unknown parameter 'L_*?"ŕӍ-oTvs7>Ӵ̔yx6>_`ܶrG|6e:Tm'R/6C>ڹƯm?o$vp [ 394.197253][ T9888] veO{o4޸?W{ݚ<' [ 394.251465][ T9882] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 394.359168][ T9890] loop4: detected capacity change from 0 to 64 [ 396.600230][ T9890] hfs: node 4:3 still has 1 user(s)! [ 397.184280][ T9912] loop4: detected capacity change from 0 to 8 [ 397.698330][ T9921] loop2: detected capacity change from 0 to 512 [ 397.841186][ T9921] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 397.890402][ T9921] EXT4-fs (loop2): orphan cleanup on readonly fs [ 397.938292][ T9921] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 397.990904][ T9921] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 398.152920][ T9921] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 398.263986][ T9921] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #16: comm syz.2.1220: iget: immutable or append flags not allowed on symlinks [ 398.584939][ T9921] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1220: couldn't read orphan inode 16 (err -117) [ 398.722627][ T9921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 399.518150][ T9932] EXT4-fs error (device loop2): ext4_lookup:1813: inode #16: comm syz.2.1220: iget: immutable or append flags not allowed on symlinks [ 399.784580][ T9931] loop1: detected capacity change from 0 to 2048 [ 399.856489][ T9931] EXT4-fs: Ignoring removed mblk_io_submit option [ 399.985443][ T9931] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 400.023599][ T9938] loop4: detected capacity change from 0 to 16 [ 400.052341][ T9938] erofs (device loop4): mounted with root inode @ nid 36. [ 400.064608][ T9938] syz.4.1224: attempt to access beyond end of device [ 400.064608][ T9938] loop4: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 400.113940][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.252779][ T9954] loop0: detected capacity change from 0 to 512 [ 402.299294][ T9954] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 402.371328][ T9954] UDF-fs: Scanning with blocksize 512 failed [ 402.420323][ T9954] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 402.430679][ T9954] UDF-fs: Scanning with blocksize 1024 failed [ 402.498686][ T9954] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 402.560311][ T9954] UDF-fs: Scanning with blocksize 2048 failed [ 402.600366][ T9954] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 402.667969][ T9954] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 402.711408][ T9960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1230'. [ 403.223869][ T9976] loop5: detected capacity change from 0 to 16 [ 403.347241][ T9976] erofs (device loop5): mounted with root inode @ nid 36. [ 403.430147][ T9976] syz.5.1238: attempt to access beyond end of device [ 403.430147][ T9976] loop5: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 404.225044][T10004] loop5: detected capacity change from 0 to 512 [ 404.269854][T10004] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 404.300240][T10004] UDF-fs: Scanning with blocksize 512 failed [ 404.324809][T10004] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 404.347206][T10004] UDF-fs: Scanning with blocksize 1024 failed [ 404.376121][T10004] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 404.403659][T10004] UDF-fs: Scanning with blocksize 2048 failed [ 404.427025][T10004] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 404.467312][T10001] loop2: detected capacity change from 0 to 1024 [ 404.542478][T10004] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 404.553135][T10001] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 404.677363][T10001] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 404.732677][T10001] EXT4-fs (loop2): orphan cleanup on readonly fs [ 404.794827][T10001] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 404.929595][T10001] EXT4-fs (loop2): Remounting filesystem read-only [ 404.960699][T10001] Quota error (device loop2): write_blk: dquota write failed [ 404.968168][T10001] Quota error (device loop2): write_blk: dquota write failed [ 405.080374][T10001] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 405.122862][T10010] loop5: detected capacity change from 0 to 16 [ 405.129969][T10010] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 405.180963][T10001] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 405.189908][T10001] EXT4-fs (loop2): 1 orphan inode deleted [ 405.273298][T10001] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 405.755998][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.338616][T10018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1253'. [ 406.442399][T10031] loop3: detected capacity change from 0 to 8 [ 406.510702][T10031] overlayfs: missing 'lowerdir' [ 406.624522][T10034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1261'. [ 406.766420][T10038] loop2: detected capacity change from 0 to 512 [ 406.790252][T10040] 9pnet_fd: Insufficient options for proto=fd [ 406.967661][T10038] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 406.999411][T10038] UDF-fs: Scanning with blocksize 512 failed [ 407.012646][T10038] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 407.028676][T10038] UDF-fs: Scanning with blocksize 1024 failed [ 407.064854][T10038] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 407.095432][T10038] UDF-fs: Scanning with blocksize 2048 failed [ 407.109270][T10038] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 407.128503][T10038] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 407.363139][T10056] loop2: detected capacity change from 0 to 16 [ 407.374560][T10056] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 407.432198][T10059] loop0: detected capacity change from 0 to 64 [ 407.952190][T10068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1273'. [ 408.501064][T10078] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1277'. [ 408.761255][T10083] 9pnet_fd: Insufficient options for proto=fd [ 410.343910][T10100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1287'. [ 413.198934][T10117] 9pnet_fd: Insufficient options for proto=fd [ 413.247549][T10119] loop0: detected capacity change from 0 to 16 [ 413.305640][T10119] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 413.464541][T10124] loop5: detected capacity change from 0 to 2048 [ 413.472892][T10124] EXT4-fs: Ignoring removed mblk_io_submit option [ 413.756509][T10124] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 418.066259][T10153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1305'. [ 418.496011][T10160] loop5: detected capacity change from 0 to 16 [ 418.543392][T10161] loop2: detected capacity change from 0 to 512 [ 418.566542][T10160] erofs (device loop5): mounted with root inode @ nid 36. [ 418.643983][T10157] loop3: detected capacity change from 0 to 4096 [ 418.651406][T10160] syz.5.1307: attempt to access beyond end of device [ 418.651406][T10160] loop5: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 418.665342][T10161] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 418.673613][T10161] EXT4-fs (loop2): orphan cleanup on readonly fs [ 418.673677][T10157] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 418.691462][T10161] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 418.701960][T10161] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 418.722353][T10161] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 418.729942][T10161] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #16: comm syz.2.1306: iget: immutable or append flags not allowed on symlinks [ 418.745634][T10165] 9pnet_fd: Insufficient options for proto=fd [ 418.780383][T10161] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1306: couldn't read orphan inode 16 (err -117) [ 418.854412][T10161] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 418.954323][T10157] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 421.219949][T10177] EXT4-fs error (device loop2): ext4_lookup:1813: inode #16: comm syz.2.1306: iget: immutable or append flags not allowed on symlinks [ 421.865126][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.910784][T10189] loop4: detected capacity change from 0 to 256 [ 421.938102][T10189] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 422.036310][T10189] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 422.095285][T10195] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 422.479344][T10204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1320'. [ 422.851643][T10210] 9pnet_fd: Insufficient options for proto=fd [ 422.868967][T10208] loop4: detected capacity change from 0 to 16 [ 422.926564][T10208] erofs (device loop4): mounted with root inode @ nid 36. [ 423.349227][T10216] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1328'. [ 423.433027][T10218] loop0: detected capacity change from 0 to 512 [ 423.499145][T10218] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 423.520589][T10218] EXT4-fs (loop0): orphan cleanup on readonly fs [ 423.530372][T10218] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 423.849890][T10218] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 424.214196][T10218] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 424.254413][T10218] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #16: comm syz.0.1327: iget: immutable or append flags not allowed on symlinks [ 424.361085][T10218] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1327: couldn't read orphan inode 16 (err -117) [ 424.399506][T10233] loop2: detected capacity change from 0 to 128 [ 424.560547][T10218] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 425.242089][T10241] EXT4-fs error (device loop0): ext4_lookup:1813: inode #16: comm syz.0.1327: iget: immutable or append flags not allowed on symlinks [ 425.763619][ T5858] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.204137][T10256] 9pnet_fd: Insufficient options for proto=fd [ 426.258884][T10252] loop1: detected capacity change from 0 to 16 [ 426.281164][T10252] erofs (device loop1): mounted with root inode @ nid 36. [ 428.647810][ T29] audit: type=1326 audit(1732623288.550:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10263 comm="syz.0.1341" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f496a97e819 code=0x0 [ 428.720600][T10278] sctp: failed to load transform for md5: -2 [ 429.711192][T10301] loop1: detected capacity change from 0 to 512 [ 430.090813][T10301] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 430.099125][T10301] EXT4-fs (loop1): orphan cleanup on readonly fs [ 430.150301][T10301] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 430.176461][T10301] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 430.230446][T10301] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 430.237678][T10301] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #16: comm syz.1.1350: iget: immutable or append flags not allowed on symlinks [ 430.261989][T10301] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1350: couldn't read orphan inode 16 (err -117) [ 430.273169][T10311] 9pnet_fd: Insufficient options for proto=fd [ 430.287284][T10301] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 430.857902][T10314] EXT4-fs error (device loop1): ext4_lookup:1813: inode #16: comm syz.1.1350: iget: immutable or append flags not allowed on symlinks [ 431.135063][T10318] loop3: detected capacity change from 0 to 16 [ 431.206629][T10318] erofs (device loop3): mounted with root inode @ nid 36. [ 431.392627][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.467113][T10323] loop4: detected capacity change from 0 to 128 [ 431.994029][T10335] loop1: detected capacity change from 0 to 2048 [ 432.001135][T10335] EXT4-fs: Ignoring removed mblk_io_submit option [ 432.190686][T10335] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 433.676872][T10351] loop2: detected capacity change from 0 to 512 [ 433.878975][T10360] loop1: detected capacity change from 0 to 512 [ 433.910308][T10351] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 433.954683][T10356] 9pnet_fd: Insufficient options for proto=fd [ 433.995103][T10351] EXT4-fs (loop2): orphan cleanup on readonly fs [ 434.031098][T10360] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 434.044272][T10351] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 434.063671][T10360] EXT4-fs (loop1): orphan cleanup on readonly fs [ 434.080235][T10351] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 434.091643][T10360] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 434.111609][T10360] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 434.145053][T10351] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 434.164816][T10351] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #16: comm syz.2.1366: iget: immutable or append flags not allowed on symlinks [ 434.244227][T10360] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 434.303050][T10351] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1366: couldn't read orphan inode 16 (err -117) [ 434.367320][T10360] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #16: comm syz.1.1370: iget: immutable or append flags not allowed on symlinks [ 434.395110][T10360] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1370: couldn't read orphan inode 16 (err -117) [ 434.397965][T10351] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 434.431606][T10360] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 435.891591][T10376] EXT4-fs error (device loop1): ext4_lookup:1813: inode #16: comm syz.1.1370: iget: immutable or append flags not allowed on symlinks [ 436.990831][T10375] EXT4-fs error (device loop2): ext4_lookup:1813: inode #16: comm syz.2.1366: iget: immutable or append flags not allowed on symlinks [ 438.105974][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.212670][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.906823][T10399] loop0: detected capacity change from 0 to 128 [ 439.695582][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.703106][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.013276][ T29] audit: type=1326 audit(1732623300.060:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10403 comm="syz.2.1377" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f221e77e819 code=0x0 [ 440.318979][T10407] sctp: failed to load transform for md5: -2 [ 440.663264][T10420] 9pnet_fd: Insufficient options for proto=fd [ 440.871629][T10427] loop4: detected capacity change from 0 to 8 [ 441.186754][T10431] loop3: detected capacity change from 0 to 512 [ 441.583908][T10431] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 441.710249][T10431] EXT4-fs (loop3): orphan cleanup on readonly fs [ 441.840310][T10431] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 441.910554][T10431] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 442.019884][T10431] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 442.081262][T10431] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #16: comm syz.3.1388: iget: immutable or append flags not allowed on symlinks [ 442.163718][T10450] loop4: detected capacity change from 0 to 2048 [ 442.182370][T10450] udf: Unknown parameter 'L_*?"ŕӍ-oTvs7>Ӵ̔yx6>_`ܶrG|6e:Tm'R/6C>ڹƯm?o$vp [ 442.182370][T10450] veO{o4޸?W{ݚ<' [ 442.330756][T10431] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.1388: couldn't read orphan inode 16 (err -117) [ 442.401886][T10431] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 444.238105][T10460] sctp: failed to load transform for md5: -2 [ 444.471696][ T29] audit: type=1326 audit(1732623304.070:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10456 comm="syz.0.1396" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f496a97e819 code=0x0 [ 445.174456][T10431] EXT4-fs error (device loop3): ext4_lookup:1813: inode #16: comm syz.3.1388: iget: immutable or append flags not allowed on symlinks [ 445.822604][T10477] 9pnet_fd: Insufficient options for proto=fd [ 446.022393][ T5855] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.968683][T10496] netlink: 'syz.4.1403': attribute type 12 has an invalid length. [ 447.873040][T10498] loop1: detected capacity change from 0 to 2048 [ 447.893286][T10498] EXT4-fs: Ignoring removed mblk_io_submit option [ 448.010418][T10498] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 448.361811][T10513] loop4: detected capacity change from 0 to 128 [ 448.700454][ T29] audit: type=1326 audit(1732623308.690:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10505 comm="syz.0.1409" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f496a97e819 code=0x0 [ 448.965770][T10515] sctp: failed to load transform for md5: -2 [ 449.582951][T10528] loop0: detected capacity change from 0 to 40427 [ 449.894391][T10528] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 450.290399][T10528] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 451.275311][T10528] F2FS-fs (loop0): invalid crc value [ 451.382099][T10539] 9pnet_fd: Insufficient options for proto=fd [ 451.426663][T10528] F2FS-fs (loop0): Found nat_bits in checkpoint [ 451.925178][T10528] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 451.972343][T10528] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 452.112703][T10556] loop1: detected capacity change from 0 to 64 [ 452.289685][T10562] loop3: detected capacity change from 0 to 128 [ 452.555878][ T5844] hfs: node 4:3 still has 1 user(s)! [ 452.767874][T10578] 9pnet_fd: Insufficient options for proto=fd [ 452.855847][T10574] loop2: detected capacity change from 0 to 2048 [ 452.876154][T10574] EXT4-fs: Ignoring removed mblk_io_submit option [ 452.964251][T10574] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 455.741091][T10605] loop2: detected capacity change from 0 to 128 [ 455.794005][T10608] loop5: detected capacity change from 0 to 512 [ 455.940876][T10608] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 455.990697][T10608] EXT4-fs (loop5): orphan cleanup on readonly fs [ 456.077930][T10608] Quota error (device loop5): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 456.088621][T10608] EXT4-fs warning (device loop5): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 456.143912][T10614] loop1: detected capacity change from 0 to 64 [ 456.201976][T10608] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 456.274838][T10616] loop4: detected capacity change from 0 to 1024 [ 456.287864][T10608] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #16: comm syz.5.1440: iget: immutable or append flags not allowed on symlinks [ 456.310007][T10608] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.1440: couldn't read orphan inode 16 (err -117) [ 456.332455][T10608] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 456.564609][T10616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.879513][T10624] EXT4-fs error (device loop5): ext4_lookup:1813: inode #16: comm syz.5.1440: iget: immutable or append flags not allowed on symlinks [ 458.305055][ T5862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.470023][ T5844] hfs: node 4:3 still has 1 user(s)! [ 458.544643][T10633] 9pnet_fd: Insufficient options for proto=fd [ 458.600255][ T5848] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.754225][T10640] input: syz0 as /devices/virtual/input/input5 [ 458.879683][T10641] loop1: detected capacity change from 0 to 2048 [ 458.994513][T10641] EXT4-fs: Ignoring removed mblk_io_submit option [ 459.111361][T10641] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 459.421232][ T5858] syz-executor: attempt to access beyond end of device [ 459.421232][ T5858] loop0: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 459.464904][ T5858] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 459.505363][ T5858] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 459.529897][ T5858] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 459.565514][ T5858] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 459.868643][T10658] loop3: detected capacity change from 0 to 64 [ 460.974677][T10663] sctp: failed to load transform for md5: -2 [ 461.112379][ T29] audit: type=1326 audit(1732623320.710:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10660 comm="syz.4.1457" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc4ad77e819 code=0x0 [ 461.253123][ T5855] hfs: node 4:3 still has 1 user(s)! [ 461.655951][T10677] loop3: detected capacity change from 0 to 8 [ 461.739102][T10682] loop1: detected capacity change from 0 to 512 [ 462.045407][T10682] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 462.331421][T10682] EXT4-fs (loop1): orphan cleanup on readonly fs [ 462.339350][T10686] overlayfs: missing 'lowerdir' [ 462.346050][T10680] 9pnet_fd: Insufficient options for proto=fd [ 462.371232][T10682] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 462.470490][T10682] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 462.536514][T10682] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 462.544891][T10682] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #16: comm syz.1.1460: iget: immutable or append flags not allowed on symlinks [ 462.742726][T10682] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1460: couldn't read orphan inode 16 (err -117) [ 462.814555][T10682] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 463.992023][T10706] EXT4-fs error (device loop1): ext4_lookup:1813: inode #16: comm syz.1.1460: iget: immutable or append flags not allowed on symlinks [ 464.870893][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.628794][T10723] loop0: detected capacity change from 0 to 2048 [ 465.650991][T10723] EXT4-fs: Ignoring removed mblk_io_submit option [ 466.121378][T10728] loop5: detected capacity change from 0 to 128 [ 466.194397][ T29] audit: type=1326 audit(1732623326.230:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10719 comm="syz.3.1471" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9ebf7e819 code=0x0 [ 466.500227][T10729] sctp: failed to load transform for md5: -2 [ 466.524189][T10723] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 467.071278][T10742] 9pnet_fd: Insufficient options for proto=fd [ 467.154206][T10713] loop4: detected capacity change from 0 to 32768 [ 467.380564][T10713] jfs_mkdir: dtInsert returned -EIO [ 467.410237][T10713] ERROR: (device loop4): jfs_mkdir: [ 467.410237][T10713] [ 467.461776][T10713] ERROR: (device loop4): remounting filesystem as read-only [ 470.253006][T10779] 9pnet_fd: Insufficient options for proto=fd [ 470.647128][ T29] audit: type=1326 audit(1732623330.660:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.2.1486" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f221e77e819 code=0x0 [ 470.927153][T10782] sctp: failed to load transform for md5: -2 [ 471.353299][T10796] loop5: detected capacity change from 0 to 2048 [ 471.370686][T10796] EXT4-fs: Ignoring removed mblk_io_submit option [ 471.830773][T10796] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 473.112579][T10809] loop3: detected capacity change from 0 to 16 [ 473.131018][T10809] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 473.628775][T10816] loop1: detected capacity change from 0 to 128 [ 475.958896][T10835] sctp: failed to load transform for md5: -2 [ 476.054072][T10842] 9pnet_fd: Insufficient options for proto=fd [ 477.876447][T10861] loop0: detected capacity change from 0 to 2048 [ 477.906520][T10861] EXT4-fs: Ignoring removed mblk_io_submit option [ 477.999625][T10873] loop3: detected capacity change from 0 to 8 [ 478.046674][T10875] loop5: detected capacity change from 0 to 64 [ 478.054487][T10861] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 478.298123][T10873] overlayfs: missing 'lowerdir' [ 479.136440][T10882] loop2: detected capacity change from 0 to 2048 [ 479.151821][T10875] hfs: node 4:3 still has 1 user(s)! [ 479.156668][T10882] udf: Unknown parameter 'L_*?"ŕӍ-oTvs7>Ӵ̔yx6>_`ܶrG|6e:Tm'R/6C>ڹƯm?o$vp [ 479.156668][T10882] veO{o4޸?W{ݚ<' [ 479.617185][T10884] sctp: failed to load transform for md5: -2 [ 479.848471][T10893] loop4: detected capacity change from 0 to 1024 [ 480.071003][T10893] hfsplus: request for non-existent node 3 in B*Tree [ 480.100277][T10893] hfsplus: request for non-existent node 3 in B*Tree [ 481.015624][ T3529] hfsplus: b-tree write err: -5, ino 3 [ 481.047436][T10906] loop3: detected capacity change from 0 to 16 [ 481.107625][T10906] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 482.837509][T10922] loop0: detected capacity change from 0 to 128 [ 482.888803][T10895] loop5: detected capacity change from 0 to 32768 [ 482.935037][T10895] bcachefs: bch2_parse_one_mount_opt() Invalid mount option str_hash: required value [ 484.950286][ T29] audit: type=1326 audit(1732623344.340:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10925 comm="syz.2.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221e77e819 code=0x7fc00000 [ 485.360615][T10940] loop5: detected capacity change from 0 to 8 [ 486.651342][T10940] overlayfs: missing 'lowerdir' [ 488.096508][T10960] loop1: detected capacity change from 0 to 2048 [ 488.111496][T10960] EXT4-fs: Ignoring removed mblk_io_submit option [ 488.199778][T10955] loop2: detected capacity change from 0 to 32768 [ 488.834525][T10960] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 489.195780][T10955] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 489.646029][T10992] syzkaller1: entered promiscuous mode [ 489.705537][T10992] syzkaller1: entered allmulticast mode [ 489.741830][T10955] XFS (loop2): Ending clean mount [ 490.700931][ T5851] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 491.668492][T11005] loop1: detected capacity change from 0 to 128 [ 492.457821][T11017] 9pnet_fd: Insufficient options for proto=fd [ 492.586763][T11020] loop0: detected capacity change from 0 to 512 [ 492.843943][T11020] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 492.903613][T11020] EXT4-fs (loop0): orphan cleanup on readonly fs [ 492.960479][T11020] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 493.060521][T11020] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 493.261870][T11020] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 493.684521][T11020] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #16: comm syz.0.1558: iget: immutable or append flags not allowed on symlinks [ 494.857763][T11020] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1558: couldn't read orphan inode 16 (err -117) [ 495.024967][T11020] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 495.137171][T11041] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 495.158568][T11041] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 495.320164][T11047] loop3: detected capacity change from 0 to 2048 [ 495.327451][T11047] EXT4-fs: Ignoring removed mblk_io_submit option [ 495.380525][T11041] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 495.386676][T11041] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 495.478122][T11041] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 496.116261][T11054] EXT4-fs error (device loop0): ext4_lookup:1813: inode #16: comm syz.0.1558: iget: immutable or append flags not allowed on symlinks [ 496.446620][T11047] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 496.461487][T11041] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 496.503242][T11041] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 496.630879][T11041] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 496.636901][T11041] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 496.831443][ T5858] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.140523][ T5847] Bluetooth: hci5: command 0x0406 tx timeout [ 497.210345][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 497.244425][T11061] loop2: detected capacity change from 0 to 2048 [ 497.253249][T11061] udf: Unknown parameter 'L_*?"ŕӍ-oTvs7>Ӵ̔yx6>_`ܶrG|6e:Tm'R/6C>ڹƯm?o$vp [ 497.253249][T11061] veO{o4޸?W{ݚ<' [ 497.284842][T11041] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 497.291796][T11041] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 497.501290][T11041] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 497.519478][T11041] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 498.340348][ T5156] Bluetooth: hci1: command 0x0406 tx timeout [ 498.458796][T11078] loop2: detected capacity change from 0 to 512 [ 498.487663][T11078] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 498.497544][ T5156] Bluetooth: hci2: command 0x0406 tx timeout [ 498.504053][T11078] EXT4-fs (loop2): orphan cleanup on readonly fs [ 498.526964][T11078] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 498.543242][T11078] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 498.635287][T11078] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 498.650344][ T5156] Bluetooth: hci3: command 0x0406 tx timeout [ 498.673880][T11078] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #16: comm syz.2.1573: iget: immutable or append flags not allowed on symlinks [ 498.961022][T11078] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1573: couldn't read orphan inode 16 (err -117) [ 499.024594][T11078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 499.356785][ T5156] Bluetooth: hci4: command 0x0406 tx timeout [ 499.363123][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 499.761611][T11103] EXT4-fs error (device loop2): ext4_lookup:1813: inode #16: comm syz.2.1573: iget: immutable or append flags not allowed on symlinks [ 500.136917][ T5156] Bluetooth: hci5: command 0x0406 tx timeout [ 500.444756][ T5156] Bluetooth: hci1: command 0x0406 tx timeout [ 500.477478][T11109] loop1: detected capacity change from 0 to 512 [ 500.570172][ T5156] Bluetooth: hci2: command 0x0406 tx timeout [ 500.648026][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.745879][T11109] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 500.760132][ T5156] Bluetooth: hci3: command 0x0406 tx timeout [ 501.439580][T11109] EXT4-fs (loop1): orphan cleanup on readonly fs [ 501.487694][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.520650][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.550868][ T5156] Bluetooth: hci4: command 0x0406 tx timeout [ 501.726652][T11117] loop2: detected capacity change from 0 to 128 [ 501.736207][T11109] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 501.805014][T11109] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 501.847775][T11109] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 502.789668][ T5156] Bluetooth: hci5: command 0x0406 tx timeout [ 502.795823][ T5156] Bluetooth: hci1: command 0x0406 tx timeout [ 502.892989][T11109] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #16: comm syz.1.1579: iget: immutable or append flags not allowed on symlinks [ 503.080220][T11109] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1579: couldn't read orphan inode 16 (err -117) [ 503.219650][T11109] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 504.598869][T11130] syzkaller1: entered promiscuous mode [ 504.610140][T11130] syzkaller1: entered allmulticast mode [ 505.207433][T11131] EXT4-fs error (device loop1): ext4_lookup:1813: inode #16: comm syz.1.1579: iget: immutable or append flags not allowed on symlinks [ 505.721930][T11139] loop5: detected capacity change from 0 to 2048 [ 505.729082][T11139] udf: Unknown parameter 'L_*?"ŕӍ-oTvs7>Ӵ̔yx6>_`ܶrG|6e:Tm'R/6C>ڹƯm?o$vp [ 505.729082][T11139] veO{o4޸?W{ݚ<' [ 505.772608][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.314147][T11180] loop2: detected capacity change from 0 to 8 [ 510.340836][T11182] netlink: 828 bytes leftover after parsing attributes in process `syz.5.1600'. [ 510.444060][T11180] overlayfs: missing 'lowerdir' [ 511.052659][T11195] loop4: detected capacity change from 0 to 128 [ 513.428941][T11200] loop3: detected capacity change from 0 to 2048 [ 513.471813][T11200] udf: Unknown parameter 'L_*?"ŕӍ-oTvs7>Ӵ̔yx6>_`ܶrG|6e:Tm'R/6C>ڹƯm?o$vp [ 513.471813][T11200] veO{o4޸?W{ݚ<' [ 514.023364][T11214] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1611'. [ 514.925669][T11215] loop5: detected capacity change from 0 to 512 [ 515.257822][T11215] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 515.602183][T11215] UDF-fs: Scanning with blocksize 512 failed [ 515.649266][T11215] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 515.699019][T11215] UDF-fs: Scanning with blocksize 1024 failed [ 515.790484][T11215] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 515.797961][T11215] UDF-fs: Scanning with blocksize 2048 failed [ 515.874701][T11231] netlink: 828 bytes leftover after parsing attributes in process `syz.1.1616'. [ 515.901142][T11215] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 516.208116][T11215] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 517.529997][T11248] loop3: detected capacity change from 0 to 128 [ 518.498872][T11253] 9pnet: Could not find request transport: fd00000000000000000009 [ 519.911370][T11270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1630'. [ 520.276900][T11277] netlink: 'syz.1.1633': attribute type 72 has an invalid length. [ 520.351437][T11277] netlink: 'syz.1.1633': attribute type 8 has an invalid length. [ 521.400717][T11288] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1638'. [ 523.843755][T11282] loop3: detected capacity change from 0 to 32768 [ 523.950946][T11301] loop2: detected capacity change from 0 to 512 [ 524.003117][T11301] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 524.006194][T11282] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 524.019008][T11301] UDF-fs: Scanning with blocksize 512 failed [ 524.042711][T11301] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 524.053579][T11301] UDF-fs: Scanning with blocksize 1024 failed [ 524.067704][T11308] loop4: detected capacity change from 0 to 512 [ 524.124030][T11301] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 524.140190][T11301] UDF-fs: Scanning with blocksize 2048 failed [ 524.153198][T11308] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 524.177120][T11301] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 524.187560][T11308] EXT4-fs (loop4): orphan cleanup on readonly fs [ 524.234705][T11308] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 524.317753][T11301] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 524.320492][T11308] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 524.424477][T11308] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 524.464026][T11308] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #16: comm syz.4.1641: iget: immutable or append flags not allowed on symlinks [ 524.529184][T11308] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.1641: couldn't read orphan inode 16 (err -117) [ 524.586939][T11282] XFS (loop3): Ending clean mount [ 524.671294][T11308] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 524.835862][T11321] loop0: detected capacity change from 0 to 128 [ 524.971142][T11282] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 525.969033][ T5862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.481073][T11325] loop1: detected capacity change from 0 to 32768 [ 527.488112][T11346] loop2: detected capacity change from 0 to 128 [ 527.587902][T11351] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1655'. [ 527.672262][T11325] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1647 (11325) [ 528.435564][T11359] loop3: detected capacity change from 0 to 512 [ 528.567164][T11359] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 528.769483][T11359] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.1658: Unimplemented hash flags: 0x0001 [ 528.833265][T11365] loop0: detected capacity change from 0 to 512 [ 528.846150][T11359] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1658: Corrupt directory, running e2fsck is recommended [ 528.920414][T11359] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.1658: Unimplemented hash flags: 0x0001 [ 529.024846][T11359] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1658: Corrupt directory, running e2fsck is recommended [ 529.029453][T11365] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 529.070231][T11365] UDF-fs: Scanning with blocksize 512 failed [ 529.158670][T11367] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.1658: Unimplemented hash flags: 0x0001 [ 529.177060][T11367] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1658: Corrupt directory, running e2fsck is recommended [ 529.179593][T11365] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 529.179618][T11365] UDF-fs: Scanning with blocksize 1024 failed [ 529.276936][T11366] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.1658: Unimplemented hash flags: 0x0001 [ 529.276983][T11366] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1658: Corrupt directory, running e2fsck is recommended [ 529.406595][T11373] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.1658: Unimplemented hash flags: 0x0001 [ 529.406643][T11373] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1658: Corrupt directory, running e2fsck is recommended [ 529.407104][T11365] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 529.407128][T11365] UDF-fs: Scanning with blocksize 2048 failed [ 529.407909][T11365] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 529.428355][T11365] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 529.437993][T11359] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 3: comm syz.3.1658: path /282/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 529.808107][T11380] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1663'. [ 529.863106][ T5855] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.777121][T11405] loop5: detected capacity change from 0 to 128 [ 531.813297][T11406] loop2: detected capacity change from 0 to 128 [ 535.148283][T11434] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1680'. [ 535.318653][T11440] loop0: detected capacity change from 0 to 512 [ 535.381820][T11440] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 535.418812][T11440] EXT4-fs (loop0): orphan cleanup on readonly fs [ 535.495312][T11440] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 535.516253][T11440] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 535.549787][T11440] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 535.564257][T11440] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #16: comm syz.0.1684: iget: immutable or append flags not allowed on symlinks [ 535.586637][T11440] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1684: couldn't read orphan inode 16 (err -117) [ 535.611300][T11440] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 535.725425][T11424] loop5: detected capacity change from 0 to 40427 [ 535.796207][T11448] loop4: detected capacity change from 0 to 128 [ 535.804320][T11424] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 535.811587][T11424] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 536.644406][T11456] loop3: detected capacity change from 0 to 128 [ 536.707747][T11424] F2FS-fs (loop5): invalid crc value [ 536.742630][T11424] F2FS-fs (loop5): Failed to start F2FS issue_checkpoint_thread (-4) [ 536.842493][ T5858] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.097731][ T5156] Bluetooth: hci3: unexpected event for opcode 0x043d [ 539.525018][T11486] loop4: detected capacity change from 0 to 64 [ 539.611327][ T5859] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 539.702857][T11491] loop5: detected capacity change from 0 to 512 [ 540.273723][T11491] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 540.440419][ T5156] Bluetooth: hci5: command 0x0406 tx timeout [ 540.482284][T11491] UDF-fs: Scanning with blocksize 512 failed [ 540.513410][T11491] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 540.590177][T11491] UDF-fs: Scanning with blocksize 1024 failed [ 540.679695][T11491] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 540.727765][T11491] UDF-fs: Scanning with blocksize 2048 failed [ 540.817536][ T5859] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 540.839455][ T5859] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.872095][T11477] loop3: detected capacity change from 0 to 1024 [ 540.879148][ T5859] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.910331][ T5859] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 540.939461][ T5859] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 540.949090][ T5859] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 540.960131][ T5859] usb 3-1: Manufacturer: syz [ 540.992590][ T5859] usb 3-1: config 0 descriptor?? [ 541.010171][T11477] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 541.028863][T11491] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 541.038746][T11477] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 541.088983][T11491] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 541.117742][T11477] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 541.165263][T11477] EXT4-fs (loop3): invalid journal inode [ 541.171139][T11477] EXT4-fs (loop3): can't get journal size [ 541.240170][T11477] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #3: comm syz.3.1692: blocks 2-2 from inode overlap system zone [ 541.471087][T11477] EXT4-fs (loop3): failed to initialize system zone (-117) [ 541.507993][T11477] EXT4-fs (loop3): mount failed [ 542.185581][ T5859] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 542.195074][ T5859] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 542.221259][ T5859] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 542.328074][T11497] loop0: detected capacity change from 0 to 32768 [ 542.352774][T11497] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1700 (11497) [ 542.396034][ T51] usb 3-1: USB disconnect, device number 2 [ 542.405416][T11510] loop5: detected capacity change from 0 to 128 [ 542.417106][T11497] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 542.447849][T11511] loop4: detected capacity change from 0 to 128 [ 542.462104][T11497] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 542.497739][T11497] BTRFS info (device loop0): using free-space-tree [ 543.600885][T11497] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 543.601247][T11497] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 543.867584][T11497] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 543.913921][T11497] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 544.260638][T11497] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 544.322855][T11497] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 544.390588][T11497] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 544.480563][T11497] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 544.545964][T11497] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 544.565102][T11497] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 544.615665][T11534] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1709'. [ 544.647178][T11497] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 544.799879][T11497] BTRFS error (device loop0): open_ctree failed [ 545.180336][T11541] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 545.202618][T11541] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 545.223138][T11541] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 545.261868][T11541] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 545.287129][T11541] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 545.307803][T11541] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 545.508716][T11530] loop5: detected capacity change from 0 to 40427 [ 545.570180][T11530] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 545.577365][T11530] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 545.586593][T11545] 9pnet_fd: Insufficient options for proto=fd [ 545.625524][T11549] loop1: detected capacity change from 0 to 2048 [ 545.632147][T11530] F2FS-fs (loop5): invalid crc value [ 545.638299][T11549] udf: Unknown parameter 'L_*?"ŕӍ-oTvs7>Ӵ̔yx6>_`ܶrG|6e:Tm'R/6C>ڹƯm?o$vp [ 545.638299][T11549] veO{o4޸?W{ݚ<' [ 546.081698][T11530] F2FS-fs (loop5): Found nat_bits in checkpoint [ 546.212172][T11564] loop3: detected capacity change from 0 to 256 [ 546.280560][T11564] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 546.308056][T11564] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 546.345707][T11530] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 547.012480][T11566] loop2: detected capacity change from 0 to 512 [ 547.020387][T11530] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 547.056291][T11566] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 547.340481][T11566] UDF-fs: Scanning with blocksize 512 failed [ 547.353214][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 547.359532][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 547.365743][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 547.487281][T11566] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 547.555307][ T5854] Bluetooth: hci5: command 0x0406 tx timeout [ 547.561768][ T5854] Bluetooth: hci4: command 0x0406 tx timeout [ 547.568646][ T5854] Bluetooth: hci3: command 0x0406 tx timeout [ 547.591040][T11566] UDF-fs: Scanning with blocksize 1024 failed [ 547.653367][T11566] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 547.666061][T11566] UDF-fs: Scanning with blocksize 2048 failed [ 547.924174][T11566] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 547.960290][ T5847] Bluetooth: hci4: unexpected event for opcode 0x043d [ 547.969730][T11573] loop1: detected capacity change from 0 to 128 [ 548.041533][T11566] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 550.259867][T11576] loop0: detected capacity change from 0 to 1024 [ 550.286050][T11589] loop4: detected capacity change from 0 to 8 [ 550.311471][T11576] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 550.330547][T11576] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 550.341013][T11576] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 550.360964][T11589] SQUASHFS error: Failed to read block 0x62: -5 [ 550.373739][T11576] EXT4-fs (loop0): invalid journal inode [ 550.379628][T11576] EXT4-fs (loop0): can't get journal size [ 550.408349][T11589] squashfs image failed sanity check [ 550.532203][T11593] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 550.540871][T11593] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 550.548548][T11593] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 550.573666][T11596] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1725'. [ 550.592835][T11576] EXT4-fs error (device loop0): ext4_protect_reserved_inode:182: inode #3: comm syz.0.1720: blocks 2-2 from inode overlap system zone [ 550.598721][T11593] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 550.620415][T11593] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 550.626757][T11593] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 550.640670][T11576] EXT4-fs (loop0): failed to initialize system zone (-117) [ 550.648225][T11576] EXT4-fs (loop0): mount failed [ 550.698509][T11598] loop5: detected capacity change from 0 to 256 [ 550.766819][T11598] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 550.902907][T11590] loop2: detected capacity change from 0 to 32768 [ 550.947856][T11590] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1726 (11590) [ 551.671703][T11590] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 551.682362][T11590] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 551.747466][T11590] BTRFS info (device loop2): using free-space-tree [ 551.985084][T11627] loop5: detected capacity change from 0 to 2048 [ 552.030990][T11627] udf: Unknown parameter 'L_*?"ŕӍ-oTvs7>Ӵ̔yx6>_`ܶrG|6e:Tm'R/6C>ڹƯm?o$vp [ 552.030990][T11627] veO{o4޸?W{ݚ<' [ 552.049831][T11630] loop0: detected capacity change from 0 to 256 [ 552.222031][T11630] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 552.283916][T11630] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 552.741093][ T5847] Bluetooth: hci4: command 0x0406 tx timeout [ 552.747268][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 553.080129][ T5854] Bluetooth: hci5: command 0x0406 tx timeout [ 553.086214][ T5854] Bluetooth: hci2: command 0x0406 tx timeout [ 553.092560][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 553.098592][ T5854] Bluetooth: hci0: command 0x0406 tx timeout [ 554.461525][T11647] netlink: 'syz.4.1733': attribute type 10 has an invalid length. [ 554.514277][ T5851] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 554.559422][T11647] team0: Port device netdevsim0 added [ 554.593742][ T5959] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 555.044130][T11646] loop3: detected capacity change from 0 to 40427 [ 555.390628][T11646] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 555.533835][T11646] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 555.850580][T11646] F2FS-fs (loop3): invalid crc value [ 555.921677][T11653] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 555.927834][T11653] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 555.934813][T11646] F2FS-fs (loop3): Found nat_bits in checkpoint [ 555.997328][T11653] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 556.050400][T11653] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 556.105527][T11653] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 556.113155][T11653] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 556.577668][T11646] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 556.602417][T11646] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 558.030299][T11640] Bluetooth: hci2: command 0x0406 tx timeout [ 558.036407][T11640] Bluetooth: hci1: command 0x0406 tx timeout [ 558.044158][T11640] Bluetooth: hci0: command 0x0406 tx timeout [ 558.090348][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 558.168293][T11690] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1740'. [ 558.179527][ T5847] Bluetooth: hci5: command 0x0406 tx timeout [ 558.186052][T11640] Bluetooth: hci4: command 0x0406 tx timeout [ 558.508033][T11698] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1758'. [ 558.663950][T11704] loop2: detected capacity change from 0 to 256 [ 558.672613][T11704] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 558.902914][T11704] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 559.259823][T11713] loop3: detected capacity change from 0 to 256 [ 559.300388][T11713] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 559.674262][T11710] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 559.925648][T11694] loop1: detected capacity change from 0 to 32768 [ 559.945561][T11710] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 559.951840][T11710] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 559.958203][T11710] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 559.964281][T11710] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 560.037204][T11713] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 560.039659][T11694] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1753 (11694) [ 560.307455][T11722] loop0: detected capacity change from 0 to 128 [ 561.608197][T11710] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 561.846323][ T5156] Bluetooth: hci0: command 0x0406 tx timeout [ 561.957142][T11694] BTRFS error (device loop1): open_ctree failed [ 562.039910][ T5156] Bluetooth: hci4: command 0x0406 tx timeout [ 562.046088][ T5156] Bluetooth: hci3: command 0x0406 tx timeout [ 562.052422][ T5156] Bluetooth: hci2: command 0x0406 tx timeout [ 562.058546][ T5156] Bluetooth: hci1: command 0x0406 tx timeout [ 562.495417][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.510610][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.110680][ T5156] Bluetooth: hci5: command 0x0406 tx timeout [ 565.673042][T11765] loop4: detected capacity change from 0 to 1024 [ 565.684865][T11763] loop2: detected capacity change from 0 to 256 [ 565.702128][T11763] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 565.734451][T11763] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 565.855367][T11767] loop0: detected capacity change from 0 to 2048 [ 565.864816][T11767] udf: Unknown parameter 'L_*?"ŕӍ-oTvs7>Ӵ̔yx6>_`ܶrG|6e:Tm'R/6C>ڹƯm?o$vp [ 565.864816][T11767] veO{o4޸?W{ݚ<' [ 566.727439][T11773] loop4: detected capacity change from 0 to 2048 [ 566.762651][T11773] EXT4-fs: Ignoring removed mblk_io_submit option [ 567.004838][T11773] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 570.627820][T11788] loop4: detected capacity change from 0 to 32768 [ 570.713120][T11788] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1782 (11788) [ 570.824347][T11811] loop1: detected capacity change from 0 to 128 [ 570.926983][T11788] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 570.937593][T11788] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 570.992865][T11788] BTRFS info (device loop4): using free-space-tree [ 571.374192][T11825] loop5: detected capacity change from 0 to 2048 [ 571.948916][T11825] EXT4-fs: Ignoring removed mblk_io_submit option [ 572.013104][T11788] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 572.013393][T11788] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 572.040912][T11788] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 572.051193][T11788] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 572.195864][T11788] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 572.221918][T11788] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 572.242874][T11788] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 572.330596][T11788] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 572.423426][T11788] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 572.492472][T11825] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 573.685089][T11788] BTRFS error (device loop4): open_ctree failed [ 575.361099][T11869] loop1: detected capacity change from 0 to 64 [ 575.423905][T11872] loop3: detected capacity change from 0 to 256 [ 575.438336][T11874] loop4: detected capacity change from 0 to 512 [ 575.446150][T11872] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 575.477409][T11874] ext2: Unknown parameter 'measure' [ 575.697073][T11872] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 576.248312][T11881] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1804'. [ 577.404688][T11887] loop4: detected capacity change from 0 to 2048 [ 578.290329][T11887] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 578.420302][T11887] ext4 filesystem being mounted at /326/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 578.460341][T11898] loop5: detected capacity change from 0 to 2048 [ 578.468607][T11887] fs-verity: sha512 using implementation "sha512-avx2" [ 578.477863][T11898] udf: Unknown parameter 'L_*?"ŕӍ-oTvs7>Ӵ̔yx6>_`ܶrG|6e:Tm'R/6C>ڹƯm?o$vp [ 578.477863][T11898] veO{o4޸?W{ݚ<' [ 579.068533][ T5862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.069467][T11905] loop5: detected capacity change from 0 to 128 [ 580.178373][T11914] loop4: detected capacity change from 0 to 128 [ 580.612930][T11894] loop2: detected capacity change from 0 to 40427 [ 580.672758][T11894] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 580.729070][T11894] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 580.912665][T11894] F2FS-fs (loop2): Found nat_bits in checkpoint [ 581.179455][T11927] loop3: detected capacity change from 0 to 8 [ 583.659280][T11947] loop3: detected capacity change from 0 to 2048 [ 583.666703][T11947] udf: Unknown parameter 'L_*?"ŕӍ-oTvs7>Ӵ̔yx6>_`ܶrG|6e:Tm'R/6C>ڹƯm?o$vp [ 583.666703][T11947] veO{o4޸?W{ݚ<' [ 584.331303][T11960] loop2: detected capacity change from 0 to 64 [ 585.745566][T11972] loop1: detected capacity change from 0 to 512 [ 585.824609][T11972] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 585.910602][T11972] EXT4-fs (loop1): orphan cleanup on readonly fs [ 585.921066][T11972] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 585.931830][T11972] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 585.958933][T11972] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 586.028918][T11972] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #16: comm syz.1.1831: iget: immutable or append flags not allowed on symlinks [ 586.287104][T11972] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1831: couldn't read orphan inode 16 (err -117) [ 586.325752][T11972] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 587.105447][T11982] EXT4-fs error (device loop1): ext4_lookup:1813: inode #16: comm syz.1.1831: iget: immutable or append flags not allowed on symlinks [ 587.685686][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.998585][T12031] loop5: detected capacity change from 0 to 128 [ 593.348301][T12034] loop1: detected capacity change from 0 to 32768 [ 593.530203][T12034] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1849 (12034) [ 594.149130][T12034] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 594.477664][T12034] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 594.769910][T12034] BTRFS info (device loop1): using free-space-tree [ 595.046767][T12062] loop4: detected capacity change from 0 to 512 [ 595.224407][T12062] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 595.250652][T12062] EXT4-fs (loop4): orphan cleanup on readonly fs [ 595.300218][T12062] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 595.354448][T12062] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 595.382147][T12062] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 596.622001][T12062] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #16: comm syz.4.1854: iget: immutable or append flags not allowed on symlinks [ 596.991471][T12062] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.1854: couldn't read orphan inode 16 (err -117) [ 597.078365][T12062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 597.260918][ T5844] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 598.070450][T12088] EXT4-fs error (device loop4): ext4_lookup:1813: inode #16: comm syz.4.1854: iget: immutable or append flags not allowed on symlinks [ 598.755134][ T5862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.071988][T12100] loop4: detected capacity change from 0 to 16 [ 599.151093][T12100] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 603.677900][T12137] loop0: detected capacity change from 0 to 2048 [ 603.728656][T12137] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 603.796876][T12137] overlayfs: missing 'workdir' [ 604.847096][T12133] loop2: detected capacity change from 0 to 40427 [ 605.028595][T12153] loop1: detected capacity change from 0 to 512 [ 605.107264][T12155] loop3: detected capacity change from 0 to 256 [ 605.115202][T12155] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 605.212646][ T5858] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.234172][T12133] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 605.291609][T12133] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 605.828335][T12155] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 605.851343][T12133] F2FS-fs (loop2): invalid crc value [ 605.914950][T12153] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 605.927503][T12153] EXT4-fs (loop1): orphan cleanup on readonly fs [ 605.963049][T12133] F2FS-fs (loop2): Found nat_bits in checkpoint [ 606.006923][T12153] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 606.059577][T12153] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 606.118630][T12153] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 606.126675][T12163] loop5: detected capacity change from 0 to 128 [ 606.143970][T12135] loop4: detected capacity change from 0 to 32768 [ 606.163768][T12153] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #16: comm syz.1.1881: iget: immutable or append flags not allowed on symlinks [ 606.171607][T12135] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1873 (12135) [ 606.220878][T12133] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 606.241025][T12153] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1881: couldn't read orphan inode 16 (err -117) [ 606.253515][T12133] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 606.255564][T12135] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 606.301469][T12153] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 606.335409][T12135] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 606.375037][T12135] BTRFS info (device loop4): using free-space-tree [ 606.417162][T12135] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 606.417483][T12135] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 606.455711][T12135] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 606.507067][T12135] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 606.600832][T12135] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 606.636613][T12135] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 606.787051][T12135] BTRFS error (device loop4): open_ctree failed [ 606.844815][T12175] EXT4-fs error (device loop1): ext4_lookup:1813: inode #16: comm syz.1.1881: iget: immutable or append flags not allowed on symlinks [ 607.514628][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.017416][T12195] loop4: detected capacity change from 0 to 512 [ 609.051137][T12195] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 609.059541][T12195] EXT4-fs (loop4): orphan cleanup on readonly fs [ 609.172080][T12195] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 609.268193][T12195] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 609.370882][T12195] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 609.410620][T12195] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #16: comm syz.4.1886: iget: immutable or append flags not allowed on symlinks [ 609.460211][T12195] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.1886: couldn't read orphan inode 16 (err -117) [ 609.481702][T12195] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 610.022302][T12213] loop3: detected capacity change from 0 to 2048 [ 610.120826][T12211] EXT4-fs error (device loop4): ext4_lookup:1813: inode #16: comm syz.4.1886: iget: immutable or append flags not allowed on symlinks [ 610.211488][T12213] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 610.299366][T12213] overlayfs: missing 'workdir' [ 610.479726][ T5862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.560302][ T5855] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.169877][ T5156] Bluetooth: hci5: unexpected event for opcode 0x043d [ 613.325077][T12242] loop1: detected capacity change from 0 to 2048 [ 613.383552][T12242] udf: Unknown parameter 'L_*?"ŕӍ-oTvs7>Ӵ̔yx6>_`ܶrG|6e:Tm'R/6C>ڹƯm?o$vp [ 613.383552][T12242] veO{o4޸?W{ݚ<' [ 614.558760][T12252] loop1: detected capacity change from 0 to 256 [ 614.621210][T12252] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 614.852355][T12252] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 615.136057][T12241] loop4: detected capacity change from 0 to 1024 [ 615.165910][T12259] loop2: detected capacity change from 0 to 128 [ 615.196410][T12241] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 615.251483][T12241] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 615.290244][T12241] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 615.384315][T12241] EXT4-fs (loop4): invalid journal inode [ 615.422393][T12241] EXT4-fs (loop4): can't get journal size [ 615.468329][T12241] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #3: comm syz.4.1898: blocks 2-2 from inode overlap system zone [ 615.498509][T12266] loop3: detected capacity change from 0 to 512 [ 615.615287][T12266] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 615.652544][T12266] EXT4-fs (loop3): orphan cleanup on readonly fs [ 615.750301][T12266] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 615.761130][T12266] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 615.787864][T12266] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 615.808701][T12266] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #16: comm syz.3.1908: iget: immutable or append flags not allowed on symlinks [ 615.825945][T12241] EXT4-fs (loop4): failed to initialize system zone (-117) [ 615.833346][T12241] EXT4-fs (loop4): mount failed [ 615.875437][T12266] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.1908: couldn't read orphan inode 16 (err -117) [ 615.947727][T12266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 616.572211][T12273] EXT4-fs error (device loop3): ext4_lookup:1813: inode #16: comm syz.3.1908: iget: immutable or append flags not allowed on symlinks [ 616.888640][ T5855] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.022562][T12299] loop1: detected capacity change from 0 to 2048 [ 620.036673][T12299] udf: Unknown parameter 'L_*?"ŕӍ-oTvs7>Ӵ̔yx6>_`ܶrG|6e:Tm'R/6C>ڹƯm?o$vp [ 620.036673][T12299] veO{o4޸?W{ݚ<' [ 622.953830][T12327] loop4: detected capacity change from 0 to 16 [ 622.961620][T12327] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 623.856375][T12334] loop2: detected capacity change from 0 to 256 [ 623.937024][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.946387][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.975957][T12334] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 624.158507][T12334] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 625.942660][T12361] loop5: detected capacity change from 0 to 512 [ 627.358085][T12373] loop3: detected capacity change from 0 to 2048 [ 627.365627][T12373] EXT4-fs: Ignoring removed mblk_io_submit option [ 627.870827][T12373] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 627.899488][T12361] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 627.914841][T12361] EXT4-fs (loop5): orphan cleanup on readonly fs [ 628.001743][T12361] Quota error (device loop5): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 628.022213][T12361] EXT4-fs warning (device loop5): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 628.062353][T12361] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 628.316475][T12361] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #16: comm syz.5.1932: iget: immutable or append flags not allowed on symlinks [ 629.540243][T12361] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.1932: couldn't read orphan inode 16 (err -117) [ 629.631808][T12361] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 629.917713][ T5848] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.498576][T12401] loop5: detected capacity change from 0 to 2048 [ 630.505881][T12401] udf: Unknown parameter 'L_*?"ŕӍ-oTvs7>Ӵ̔yx6>_`ܶrG|6e:Tm'R/6C>ڹƯm?o$vp [ 630.505881][T12401] veO{o4޸?W{ݚ<' [ 632.850228][ T5156] Bluetooth: hci5: unexpected event for opcode 0x043d [ 633.225419][T12420] loop1: detected capacity change from 0 to 256 [ 633.273365][T12420] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 633.444081][T12426] loop2: detected capacity change from 0 to 128 [ 633.480768][T12420] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 635.038669][T12437] loop0: detected capacity change from 0 to 2048 [ 635.061211][T12437] EXT4-fs: Ignoring removed mblk_io_submit option [ 635.158657][T12438] loop2: detected capacity change from 0 to 512 [ 635.246875][T12438] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 635.286277][T12438] EXT4-fs (loop2): orphan cleanup on readonly fs [ 635.322993][T12438] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 635.349840][T12437] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 635.390376][T12438] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 635.457324][T12438] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 635.517119][T12438] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #16: comm syz.2.1955: iget: immutable or append flags not allowed on symlinks [ 635.583928][T12438] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1955: couldn't read orphan inode 16 (err -117) [ 635.638141][T12438] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 636.176612][T12450] EXT4-fs error (device loop2): ext4_lookup:1813: inode #16: comm syz.2.1955: iget: immutable or append flags not allowed on symlinks [ 636.519200][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.938386][T12460] loop2: detected capacity change from 0 to 128 [ 638.861953][T12477] loop3: detected capacity change from 0 to 512 [ 639.090418][T12477] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 639.124768][T12477] EXT4-fs (loop3): orphan cleanup on readonly fs [ 639.166123][T12477] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 639.257294][T12477] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 639.276899][T12477] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 639.285457][T12477] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #16: comm syz.3.1964: iget: immutable or append flags not allowed on symlinks [ 639.314826][T12477] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.1964: couldn't read orphan inode 16 (err -117) [ 639.389401][T12477] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 640.524679][T12488] loop0: detected capacity change from 0 to 128 [ 640.687572][ T5156] Bluetooth: hci0: unexpected event for opcode 0x043d [ 640.816101][ T5855] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.177224][T12501] loop2: detected capacity change from 0 to 512 [ 642.743205][T12501] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 642.760441][T12501] EXT4-fs (loop2): orphan cleanup on readonly fs [ 643.177317][T12501] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 643.279340][T12501] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 643.377979][T12499] loop3: detected capacity change from 0 to 2048 [ 643.409318][T12499] udf: Unknown parameter 'L_*?"ŕӍ-oTvs7>Ӵ̔yx6>_`ܶrG|6e:Tm'R/6C>ڹƯm?o$vp [ 643.409318][T12499] veO{o4޸?W{ݚ<' [ 643.485514][T12501] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 643.525768][T12501] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #16: comm syz.2.1973: iget: immutable or append flags not allowed on symlinks [ 643.688566][T12501] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1973: couldn't read orphan inode 16 (err -117) [ 643.781270][T12501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 644.438095][T12513] EXT4-fs error (device loop2): ext4_lookup:1813: inode #16: comm syz.2.1973: iget: immutable or append flags not allowed on symlinks [ 644.702345][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.959559][T12526] loop5: detected capacity change from 0 to 256 [ 645.031294][T12526] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 645.160921][T12526] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 646.157998][T12539] loop2: detected capacity change from 0 to 2048 [ 646.185534][T12539] EXT4-fs: Ignoring removed mblk_io_submit option [ 646.283146][T12539] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 646.365979][T12546] loop1: detected capacity change from 0 to 128 [ 646.456632][T12547] loop3: detected capacity change from 0 to 512 [ 646.670274][T12547] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 646.678773][T12547] EXT4-fs (loop3): orphan cleanup on readonly fs [ 647.051169][T12547] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 647.260389][T12547] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 647.370248][T12547] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 647.400741][T12547] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #16: comm syz.3.1983: iget: immutable or append flags not allowed on symlinks [ 647.440806][T12554] loop0: detected capacity change from 0 to 128 [ 647.528016][T12547] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.1983: couldn't read orphan inode 16 (err -117) [ 647.861110][T12547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 648.185143][T12543] ------------[ cut here ]------------ [ 648.190686][T12543] DEBUG_LOCKS_WARN_ON(1) [ 648.190775][T12543] WARNING: CPU: 0 PID: 12543 at kernel/locking/lockdep.c:232 __lock_acquire+0x564/0x2100 [ 648.204805][T12543] Modules linked in: [ 648.208735][T12543] CPU: 0 UID: 0 PID: 12543 Comm: syz.3.1983 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 648.219137][T12543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 648.229206][T12543] RIP: 0010:__lock_acquire+0x564/0x2100 [ 648.234745][T12543] Code: 00 00 83 3d 81 48 ad 0e 00 75 23 90 48 c7 c7 40 d7 0a 8c 48 c7 c6 40 da 0a 8c e8 77 63 e5 ff 48 ba 00 00 00 00 00 fc ff df 90 <0f> 0b 90 90 90 31 db 48 81 c3 c4 00 00 00 48 89 d8 48 c1 e8 03 0f [ 648.254347][T12543] RSP: 0018:ffffc900041af830 EFLAGS: 00010046 [ 648.260407][T12543] RAX: bfde22125fef3400 RBX: 0000000000001cd8 RCX: ffff88801f398000 [ 648.268387][T12543] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 648.276345][T12543] RBP: 00000000000c1cd8 R08: ffffffff815688b2 R09: 1ffff110170c519a [ 648.284305][T12543] R10: dffffc0000000000 R11: ffffed10170c519b R12: ffff88801f398ac4 [ 648.292264][T12543] R13: 000000000000000f R14: 1ffff11003e7316f R15: ffff88801f398b78 [ 648.300246][T12543] FS: 0000555580b2b500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 648.309168][T12543] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 648.315738][T12543] CR2: 0000001b3111cffc CR3: 000000007c2b2000 CR4: 0000000000350ef0 [ 648.323699][T12543] Call Trace: [ 648.326966][T12543] [ 648.329886][T12543] ? __warn+0x168/0x4e0 [ 648.334037][T12543] ? __lock_acquire+0x564/0x2100 [ 648.338981][T12543] ? report_bug+0x2b3/0x500 [ 648.343491][T12543] ? __lock_acquire+0x564/0x2100 [ 648.348419][T12543] ? handle_bug+0x60/0x90 [ 648.352745][T12543] ? exc_invalid_op+0x1a/0x50 [ 648.357765][T12543] ? asm_exc_invalid_op+0x1a/0x20 [ 648.362810][T12543] ? __warn_printk+0x292/0x360 [ 648.367568][T12543] ? __lock_acquire+0x564/0x2100 [ 648.372504][T12543] lock_acquire+0x1ed/0x550 [ 648.377000][T12543] ? raw_spin_rq_lock_nested+0x2a/0x140 [ 648.382548][T12543] ? __pfx_lock_acquire+0x10/0x10 [ 648.387560][T12543] ? do_raw_spin_lock+0x272/0x370 [ 648.392583][T12543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.398209][T12543] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 648.403577][T12543] ? find_lock_lowest_rq+0x1d6/0x670 [ 648.408928][T12543] ? plist_check_list+0x470/0x4d0 [ 648.413945][T12543] ? __pfx_lock_release+0x10/0x10 [ 648.418994][T12543] _raw_spin_lock_nested+0x31/0x40 [ 648.424132][T12543] ? raw_spin_rq_lock_nested+0x2a/0x140 [ 648.429691][T12543] raw_spin_rq_lock_nested+0x2a/0x140 [ 648.435065][T12543] find_lock_lowest_rq+0x1e1/0x670 [ 648.440174][T12543] push_rt_task+0x144/0x790 [ 648.444679][T12543] task_woken_rt+0x14c/0x220 [ 648.449258][T12543] ttwu_do_activate+0x30c/0x760 [ 648.454103][T12543] try_to_wake_up+0x89b/0x1470 [ 648.458858][T12543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.464484][T12543] ? __pfx_try_to_wake_up+0x10/0x10 [ 648.469700][T12543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.475326][T12543] ? do_raw_spin_lock+0x14f/0x370 [ 648.480349][T12543] ? __pfx___might_resched+0x10/0x10 [ 648.485637][T12543] signal_wake_up_state+0xb4/0x120 [ 648.490743][T12543] zap_other_threads+0x2fd/0x3e0 [ 648.495674][T12543] ? __pfx_zap_other_threads+0x10/0x10 [ 648.501123][T12543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.506744][T12543] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 648.512719][T12543] do_group_exit+0x18a/0x2c0 [ 648.517318][T12543] __x64_sys_exit_group+0x3f/0x40 [ 648.522333][T12543] x64_sys_call+0x26a8/0x26b0 [ 648.527008][T12543] do_syscall_64+0xf3/0x230 [ 648.531529][T12543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.537439][T12543] RIP: 0033:0x7fd9ebf7e819 [ 648.541842][T12543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.561439][T12543] RSP: 002b:00007ffca5b615f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 648.569849][T12543] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd9ebf7e819 [ 648.577821][T12543] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 648.585780][T12543] RBP: 00007ffca5b6164c R08: 00007ffca5b616df R09: 000000000009db9e [ 648.593743][T12543] R10: 0000000000002ffc R11: 0000000000000246 R12: 0000000000000032 [ 648.601709][T12543] R13: 000000000009db9e R14: 000000000009dac1 R15: 00007ffca5b616a0 [ 648.609682][T12543] [ 648.612709][T12543] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 648.620166][T12543] CPU: 0 UID: 0 PID: 12543 Comm: syz.3.1983 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 648.630826][T12543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 648.640870][T12543] Call Trace: [ 648.644225][T12543] [ 648.647146][T12543] dump_stack_lvl+0x241/0x360 [ 648.652263][T12543] ? __pfx_dump_stack_lvl+0x10/0x10 [ 648.657476][T12543] ? __pfx__printk+0x10/0x10 [ 648.662071][T12543] ? _printk+0xd5/0x120 [ 648.666311][T12543] ? __init_begin+0x41000/0x41000 [ 648.671337][T12543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.676973][T12543] ? vscnprintf+0x5d/0x90 [ 648.681476][T12543] panic+0x349/0x880 [ 648.685374][T12543] ? __warn+0x177/0x4e0 [ 648.689523][T12543] ? __pfx_panic+0x10/0x10 [ 648.693932][T12543] ? show_trace_log_lvl+0x3b2/0x410 [ 648.699306][T12543] __warn+0x34b/0x4e0 [ 648.703284][T12543] ? __lock_acquire+0x564/0x2100 [ 648.708233][T12543] report_bug+0x2b3/0x500 [ 648.712580][T12543] ? __lock_acquire+0x564/0x2100 [ 648.717515][T12543] handle_bug+0x60/0x90 [ 648.721673][T12543] exc_invalid_op+0x1a/0x50 [ 648.726180][T12543] asm_exc_invalid_op+0x1a/0x20 [ 648.731033][T12543] RIP: 0010:__lock_acquire+0x564/0x2100 [ 648.736601][T12543] Code: 00 00 83 3d 81 48 ad 0e 00 75 23 90 48 c7 c7 40 d7 0a 8c 48 c7 c6 40 da 0a 8c e8 77 63 e5 ff 48 ba 00 00 00 00 00 fc ff df 90 <0f> 0b 90 90 90 31 db 48 81 c3 c4 00 00 00 48 89 d8 48 c1 e8 03 0f [ 648.756377][T12543] RSP: 0018:ffffc900041af830 EFLAGS: 00010046 [ 648.762439][T12543] RAX: bfde22125fef3400 RBX: 0000000000001cd8 RCX: ffff88801f398000 [ 648.770487][T12543] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 648.778535][T12543] RBP: 00000000000c1cd8 R08: ffffffff815688b2 R09: 1ffff110170c519a [ 648.786499][T12543] R10: dffffc0000000000 R11: ffffed10170c519b R12: ffff88801f398ac4 [ 648.794461][T12543] R13: 000000000000000f R14: 1ffff11003e7316f R15: ffff88801f398b78 [ 648.802426][T12543] ? __warn_printk+0x292/0x360 [ 648.807201][T12543] lock_acquire+0x1ed/0x550 [ 648.811696][T12543] ? raw_spin_rq_lock_nested+0x2a/0x140 [ 648.817246][T12543] ? __pfx_lock_acquire+0x10/0x10 [ 648.822264][T12543] ? do_raw_spin_lock+0x272/0x370 [ 648.827286][T12543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.832916][T12543] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 648.838289][T12543] ? find_lock_lowest_rq+0x1d6/0x670 [ 648.843564][T12543] ? plist_check_list+0x470/0x4d0 [ 648.848580][T12543] ? __pfx_lock_release+0x10/0x10 [ 648.853599][T12543] _raw_spin_lock_nested+0x31/0x40 [ 648.858712][T12543] ? raw_spin_rq_lock_nested+0x2a/0x140 [ 648.864259][T12543] raw_spin_rq_lock_nested+0x2a/0x140 [ 648.869633][T12543] find_lock_lowest_rq+0x1e1/0x670 [ 648.874753][T12543] push_rt_task+0x144/0x790 [ 648.879279][T12543] task_woken_rt+0x14c/0x220 [ 648.883950][T12543] ttwu_do_activate+0x30c/0x760 [ 648.888884][T12543] try_to_wake_up+0x89b/0x1470 [ 648.893731][T12543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.899379][T12543] ? __pfx_try_to_wake_up+0x10/0x10 [ 648.904572][T12543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.910370][T12543] ? do_raw_spin_lock+0x14f/0x370 [ 648.915394][T12543] ? __pfx___might_resched+0x10/0x10 [ 648.920686][T12543] signal_wake_up_state+0xb4/0x120 [ 648.925796][T12543] zap_other_threads+0x2fd/0x3e0 [ 648.930740][T12543] ? __pfx_zap_other_threads+0x10/0x10 [ 648.936197][T12543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.941843][T12543] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 648.947840][T12543] do_group_exit+0x18a/0x2c0 [ 648.952450][T12543] __x64_sys_exit_group+0x3f/0x40 [ 648.957468][T12543] x64_sys_call+0x26a8/0x26b0 [ 648.962145][T12543] do_syscall_64+0xf3/0x230 [ 648.966651][T12543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.972548][T12543] RIP: 0033:0x7fd9ebf7e819 [ 648.977127][T12543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.996747][T12543] RSP: 002b:00007ffca5b615f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 649.005152][T12543] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd9ebf7e819 [ 649.013114][T12543] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 649.021092][T12543] RBP: 00007ffca5b6164c R08: 00007ffca5b616df R09: 000000000009db9e [ 649.029060][T12543] R10: 0000000000002ffc R11: 0000000000000246 R12: 0000000000000032 [ 649.037054][T12543] R13: 000000000009db9e R14: 000000000009dac1 R15: 00007ffca5b616a0 [ 649.045207][T12543] [ 650.182029][T12543] Shutting down cpus with NMI [ 650.187024][T12543] Kernel Offset: disabled [ 650.191365][T12543] Rebooting in 86400 seconds..