last executing test programs: 34m31.317347425s ago: executing program 32 (id=12): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 33m15.372829889s ago: executing program 33 (id=128): unshare(0x42000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001800dd8d00000000ffdbdf3502200004ff"], 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x100000}, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="38000000200001002bbd7000fddbdf2502"], 0x38}}, 0x0) 29m46.886870755s ago: executing program 34 (id=566): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000800)=[{{&(0x7f0000000400)=@can, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)="efa1", 0x2}], 0x1}}], 0x1, 0x4004041) 28m4.961789422s ago: executing program 35 (id=851): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000044, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nodioread_nolock}, {@bh}, {@minixdf}, {@data_err_ignore}, {@nouid32}, {@quota}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x563, &(0x7f0000000a00)="$eJzs3d9rW+UbAPDnpM1+f7/rYAwVkcIunIyla+uPCV5sl6LDgd7P0J6V0XQZTTrWOnC7cDfeyBBEHIj3eu+VDP8B/4qBDoaMohfeVE560nZL02Rd1nTm84GzvW/OSd7z5Jzn7fvmnJAABtZo9k8h4uWI+CqJOBwRSb5uOPKVo6vbLT+6MZUtSaysfPxn0tguqzdfq/m8g3nlpYj49YuIk4XWdmuLS7PlSiWdz+tj9bmrY7XFpVOX58oz6Ux6ZWJy8sxbkxPvvvN2z2J948Lf33507/0zXx5f/uanB0fuJHE2DuXrNsbxDG5urIzGaP6eFOPsExuOr/7XizZ3haTfO8C2DOV5XoysDzgcQ3nWA/99n0fECjCgkg75vyfvKXZqf4Cd0hwHNOf2PZoHvzAenludALXGP7z62Ujsa8yNDiwnj82MsvnuSA/az9r4+Y+7d7Ilevc5BEBHN29FxOnh4db+L8n7v+073cU2T7ah/4Odc+/c6qimNf8La+Of2GT8c3CT3N2OzvlfeNCDZtrKxn/vtYk/NzKU1/7XGPMVk0uXK2nWt/0/Ik5EcW9WH9+ijTPL91fards4/suWrP3mWDDfjwfDex9/znS5Xn6WmDd6eCvilU3Hv8na8U82Of7Z+3GhyzaOpXdfa7euc/zP18oPEa9vevzXr2glW1+fHGucD2PNs6LVX7eP/dau/X7Hnx3/A1vHP5JsvF5be/o2vt/3T9pu3WPxR/fn/57kk0a5+enU9XK9Pj8esSf5sPXxifXnNuvN7bP4Txzfuv9bP/9/WXud/RHxaZfx3z7646v7uom/T8d/+qmO/9MX7n/w2Xft2u+u/3uzUTqRP9JN/9dhv4qx7bMZAAAAAAAAdq9CRByKpFBaKxcKpdLq/R1H40ChUq3VT16qLlyZjsZ3ZUeiWGhe6T684X6I8fx+2GZ94on6ZEQciYivh/Y36qWpamW638EDAAAAAAAAAAAAAAAAAADALnGwzff/M78P9XvvgOfOT37D4OqY/734pSdgV/L3HwaX/IfBJf9hcMl/GFzyHwaX/IfBJf9hcMl/AAAAAAAAAAAAAAAAAAAAAAAAAAAA6KkL589ny8ryoxtTWX362uLCbPXaqem0NluaW5gqTVXnr5ZmqtWZSlqaqs51er1KtXp1fCIWro/V01p9rLa4dHGuunClfvHyXHkmvZgWdyQqAAAAAAAAAAAAAAAAAAAAeLHUFpdmy5VKOq+gsK3C8O7YDYUeF/rdMwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAun8DAAD//0DeL9I=") syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES64=0x0], 0x1, 0x296, &(0x7f0000000740)="$eJzs3U9qU0EcB/Bf0rSJ3SSgK+nigRs3hqY3CFJBDAiRLOoqwbYgTSikENCF7c67uPIO3sBjeAGzKETSF03SxuK/+jT5fCDMD+Z9YSaLzCxm8tpbvaP945PDvdufolRKohBx9v48IiIfa5F68CFt1yMiFxsx6ywAgP9Ns9mpZz0Gbla/X++M927FKz2td5kMCAAAAAAAAAAAgN/W3ipeOf8fw4jKzPn/3KTNO/8PAEvB+f/l1+/XO5uT/ds85/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7AxHo/Lomk/W4wMA/jzrPwCsHus/AKye4dxanwvrPwAsv2d7z5/UG43dZpKUInpvB61BK23T/vphvIxuHMR2lOM8xvuDibR+9Lixu51cqES7dzrJnw5aa/P5WpSjsjhfS/PJfH49NmfzO1GOO4vzOwvzG3H/XkT+60SrUY6PL+I4urEf4+w0/6aWJA+fNi7lixfPAQAAAAAAAAAAAAAAAAAAwN9QTb5ZeH+/Wv1ef5r/if8HuHS/vhB3C9nOHQAAAAAAAAAAAAAAAAAAAP4VJ69eH3W63YP+wuLz5C7/dc8opsWtH/pWf60oRETmE1SsTJHxDxMAAAAAAAAAAAAAAAAAAKyg6aXfrEcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANmZvv//5oqs5wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACshi8BAAD//2dk6nI=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) 27m57.052275577s ago: executing program 36 (id=886): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8}, 0x86) 26m16.78088723s ago: executing program 37 (id=1006): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_devices(r0, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000400)={'b', ' *:* ', 'w\x00'}, 0x8) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e000000000000109022400"], 0x0) 26m16.374546885s ago: executing program 38 (id=1023): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r0, &(0x7f00000003c0)={@void, @val={0x3, 0x0, 0x1, 0x6ed, 0x19, 0xc}, @ipv4=@tcp={{0x7, 0x4, 0x1, 0x1, 0x30, 0x67, 0x0, 0x4a, 0x6, 0x0, @empty, @multicast1, {[@end, @lsrr={0x83, 0x7, 0x13, [@private=0xa010102]}]}}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x8}}}}, 0x3a) 26m16.118452988s ago: executing program 39 (id=1020): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)=0x3) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x14b000) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) listen(0xffffffffffffffff, 0x0) 26m15.837099431s ago: executing program 40 (id=1022): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r0, 0x10ada85e65c25349, 0x0, 0x0, {{0x67}, {@void, @val={0xc, 0x99, {0x2b, 0x21}}}}, [@NL80211_ATTR_TID_CONFIG={0x4, 0x142}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) 25m52.745657886s ago: executing program 41 (id=1035): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000380)={[{@mblk_io_submit}, {@quota}, {@resuid}, {@oldalloc}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@nodioread_nolock}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="ff", 0x1}], 0x1, 0x5412, 0x5, 0x5) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000140)={0x17c04, r0, 0x3052, 0x973f, 0x81, 0x1}) 23m50.533540618s ago: executing program 42 (id=1137): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8000000000000008, 0xfffffffffffffffa}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) write$sndseq(r4, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000140)={0x1e6, @tick=0x9}) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001ec0), 0x800, 0x0) read$msr(r5, 0x0, 0x0) 23m20.374002919s ago: executing program 43 (id=1217): openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1000) 22m56.837981854s ago: executing program 3 (id=1254): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='devices.list\x00', 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x1000001, 0xffffffffcbe14156, 0x8, 0x7fff, 0x0, 0x69c8, 0x0, 0x0, 0x8, 0x3}}, 0x50) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, {{0x5, 0x6, 0x0, r1}}}, 0x28) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r5, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x38) sendmmsg(0xffffffffffffffff, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 22m55.49605811s ago: executing program 3 (id=1255): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x50) socket(0x2, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r3}, 0x38) 22m51.670606997s ago: executing program 3 (id=1260): syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e05f40f20"], 0x8) 22m51.087616596s ago: executing program 44 (id=1259): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x70, 0xe0, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x270) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 22m48.633682457s ago: executing program 3 (id=1266): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e21, 0x4000002, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 22m47.676049994s ago: executing program 3 (id=1267): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x90000014}) mount(0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r3, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) wait4(r1, 0x0, 0x8, 0x0) 22m43.495882999s ago: executing program 3 (id=1271): unshare(0x4a000200) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="01010200000000002000128008000100677265001400028006000e0002"], 0x40}, 0x1, 0xba01, 0x0, 0x40080}, 0x810) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfff, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @private}}) syz_io_uring_setup(0x788, 0x0, 0x0, 0x0, &(0x7f0000000000)) write(r0, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) 22m26.735473662s ago: executing program 45 (id=1271): unshare(0x4a000200) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="01010200000000002000128008000100677265001400028006000e0002"], 0x40}, 0x1, 0xba01, 0x0, 0x40080}, 0x810) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfff, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @private}}) syz_io_uring_setup(0x788, 0x0, 0x0, 0x0, &(0x7f0000000000)) write(r0, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) 20m45.885264282s ago: executing program 8 (id=1452): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000009000000850000003500000095"], &(0x7f0000002000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 20m41.228863531s ago: executing program 8 (id=1459): openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019c80)=""/102400, 0x19000) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_tables_matches\x00') read$alg(r4, &(0x7f0000000e80)=""/4096, 0x1000) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r5, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/148, 0x94}, 0x6}], 0x1, 0x12160, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/157, 0x9d}], 0x1, 0xfffffff9, 0xffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 20m40.134944465s ago: executing program 8 (id=1460): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 20m35.672795224s ago: executing program 8 (id=1466): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000ac0), 0x1, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) io_uring_setup(0x1fca, &(0x7f0000000100)={0x0, 0xfac7, 0x0, 0x1, 0x32c}) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file4\x00', 0x1, 0x20) close(0x3) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) socket$inet(0x2, 0x5, 0x100) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000080)={@id={0x2, 0x0, @auto="f70d91f95e697cb7f9d200f718e72bf2"}}) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 20m31.561978536s ago: executing program 8 (id=1472): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x433b, 0x4) sendto$inet(r0, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/208, 0xd0, 0x0, &(0x7f0000000140)=""/36, 0x24}, &(0x7f00000000c0)=0x40) 20m30.732622247s ago: executing program 8 (id=1477): openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019c80)=""/102400, 0x19000) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_tables_matches\x00') read$alg(r4, &(0x7f0000000e80)=""/4096, 0x1000) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r5, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/148, 0x94}, 0x6}], 0x1, 0x12160, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/157, 0x9d}], 0x1, 0xfffffff9, 0xffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 20m29.349476354s ago: executing program 46 (id=1477): openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019c80)=""/102400, 0x19000) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_tables_matches\x00') read$alg(r4, &(0x7f0000000e80)=""/4096, 0x1000) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r5, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/148, 0x94}, 0x6}], 0x1, 0x12160, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/157, 0x9d}], 0x1, 0xfffffff9, 0xffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 19m4.7045346s ago: executing program 6 (id=1686): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fanotify_init(0x4, 0x1) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000000240)=""/168) 18m59.896311706s ago: executing program 6 (id=1692): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x840000, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) rt_sigqueueinfo(r1, 0x1c, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r6 = fcntl$dupfd(r4, 0x406, r4) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/155, 0x9b}, {0x0}, {0x0}], 0x3) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x2004, 0x0, 0x8}, 0x18, 0x0) 18m58.552120922s ago: executing program 6 (id=1694): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000240)={0x0, 0xfffffffffffff001, 0x0, [0x8, 0x3, 0xe, 0x200, 0x2], [0x7fffffff, 0x80000004, 0xf, 0x7, 0x5, 0x8, 0xffffffffffffffff, 0xb, 0xa51c, 0xbcd, 0x5, 0x5, 0x24c, 0xa33, 0x1, 0x6, 0x10000, 0x2, 0x10, 0x5, 0x3, 0x8, 0x7c21804a, 0x8, 0x7fff, 0xa, 0x1, 0x1, 0x9, 0xe, 0x2, 0xde1d, 0x7, 0x2, 0x3, 0xffffffffffff8000, 0x6, 0x12, 0x0, 0x0, 0x7f, 0x2, 0x5ba9, 0x8, 0x2, 0x7, 0x8, 0xfffffffffffffb61, 0x400000000, 0x100000000, 0x8001, 0x1, 0x3, 0x5, 0xffff, 0x3, 0x101, 0x0, 0x67c, 0x8000000000000000, 0x1, 0x9, 0x4, 0x0, 0x8000000000000000, 0x0, 0x1, 0x5, 0x5, 0x100, 0x2da74e41, 0x1, 0x14, 0x80000000080, 0x75, 0x1, 0x2, 0x2, 0x8, 0xc76, 0x8000, 0x3, 0x7, 0x7ff, 0x3, 0xf4, 0x1ff, 0x7, 0xe648, 0x2, 0x6, 0xdfb3, 0x3, 0x2, 0xfffffffffffffffd, 0x8, 0x7, 0x13, 0x8000000000000000, 0x5, 0x8001, 0x0, 0x0, 0x80, 0x7f, 0x40003, 0xb4000000, 0x0, 0x6, 0x80, 0x5, 0x662, 0x7, 0x9, 0xca, 0x8, 0x2, 0xe7, 0x2, 0xfffffffffffff36f, 0x4]}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x92, @time={0x65757100, 0x1000000}}) 18m54.640866074s ago: executing program 6 (id=1699): sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="4f6023a7d7a0553c280b", 0xa, 0x20000800, &(0x7f0000000200)={0x2, 0x4e22, @empty}, 0x10) syz_mount_image$hfsplus(&(0x7f0000000340), &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804880, &(0x7f0000000180)=ANY=[], 0xfd, 0x6b6, &(0x7f00000055c0)="$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") r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = fsopen(&(0x7f0000000380)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) lseek(0xffffffffffffffff, 0x4, 0x4) socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) request_key(&(0x7f0000001000)='trusted\x00', &(0x7f0000001040)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) timerfd_create(0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {0x20, 0x0, 0x0, 0x40000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x42800, 0x0) getdents64(r6, &(0x7f0000000f80)=""/4096, 0xfffffffffffffeb7) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004003d000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) 18m52.406650484s ago: executing program 6 (id=1701): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8000000000000008, 0xfffffffffffffffa}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) write$sndseq(r4, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000140)={0x1e6, @tick=0x9}) accept(r3, 0x0, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001ec0), 0x800, 0x0) poll(&(0x7f0000001f80)=[{r5, 0x18100}], 0x1, 0x7fffffff) read$msr(r5, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000140)={[{}, {@noblock_validity}, {@abort}, {@barrier_val}, {@nogrpid}, {@resgid}, {@noinit_itable}, {@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0x7}, 0x32}]}, 0x1, 0x4ef, &(0x7f0000000a40)="$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") 18m50.324752866s ago: executing program 6 (id=1703): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x2c, r2, 0x905, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xde}]}, 0x2c}}, 0x8040) 18m49.82825946s ago: executing program 47 (id=1703): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x2c, r2, 0x905, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xde}]}, 0x2c}}, 0x8040) 17m12.282410562s ago: executing program 5 (id=1884): r0 = getpid() ptrace$setopts(0x4206, r0, 0x101, 0x10001d) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) getitimer(0x1, &(0x7f0000000040)) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, 0x0) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00') socket$nl_route(0x10, 0x3, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x4, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x342056}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 17m10.466775111s ago: executing program 5 (id=1887): r0 = socket$nl_route(0x10, 0x3, 0x0) fgetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', 0x0, 0x0) 17m10.199941584s ago: executing program 5 (id=1888): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xf5, 0xbd, 0x3b, 0x20, 0x93c, 0x701, 0xf6f7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0x0, 0xb0, 0x6}}]}}, 0x0) 17m7.740897284s ago: executing program 5 (id=1890): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{}]}, 0x1, 0x453, &(0x7f0000001040)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x2000000) write$cgroup_int(r0, &(0x7f0000000380)=0x5, 0x12) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) close(r0) 17m5.483807275s ago: executing program 5 (id=1894): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) 17m3.134399711s ago: executing program 5 (id=1901): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000140)=ANY=[], 0x11, 0x69d, &(0x7f0000000840)="$eJzs3c1vHGcdB/DvrNcvm0iO26ZpQJUwjVQQEYkdK4VwSUAIBalCVThwthqnseKkwXFR2gNxAYkrB/6AcAgXOIEQEhJSpHKGW8XN4lQJiUtPaQ8dNLOz67XrtZ1X2/D5RLPP88wz88xvfvOyL5E1Af5vXTyZ9v10cvHk67er9tq9uaW1e3PXe/Uk40laSbtbpLiRFB8kF9Kd8oVqZjNcMWw7v148d+nDj9c+6rbaWR+veukMD7C9m71YbaZMJxlpysewYbw3H2288fVq0c9MlbATvcTBXhtNUm7w42PrPVspRwYaQ6934OAouu+bA7rX/1RyKMlE7w1ttdvZevYR7uih7kWrufv0IgEAAIB94siDO8ntTO51HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCQNM//L5qp1atPp+g9/39s4Bn7Y3sc7nDbRzbRq9xvPYtgAAAAAAAAAODp+tKD/O5SWU722mVR/5//K3XjaP16OO/kVhaynFO5nfmsZCXLmU0yNTDQ2O35lZXl2d6an5ZlOWTNM1uueWaXAXeexF4DAAAAAAAAwP+M8035s1zM5B7HAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGxTJSLeop6O9+lRa7SQTScaq5VaTf/TqB9n9vQ4AAAAAnoEjD/IgtzPZa5dF/Z3/WP29fyLv5EZWspiVLGUhl+vfArrf+ltr9+aW1u7NXa+mz4/77f+s1/84uWMY9Yjp/vaw9ZaP10t0ciWL9ZxTeTNvZymX06rXrBzvxbN1XO9XMRXnu8pydwm63JTVnv+qKfeHqTojo/2MzDSxVdl4bvtMDB6dR9jSbFr9X36OPkTOz2+7leKz3jE51JuTHP7+zjkffaideSybM3Fm4Ow7tn0mkq/86fc/urp049rVYvXk/jmNHsL4v9avms2ZmBvIxEu7zsSVWwczE5u18mK/fjHfyw9zMtN5I8tZzE8yn5UsZDrfrWvzzflcvU5tn6kLG1pv7BTFWHNcRjbF9OUj3XK7mF6p153MYn6Qt3M5C3mt/ncms/lGzuZszg0c4Rd3cdW36kv+8IaOPw8P/sRXm0onyS+bcn+o8vpcP6+flV3de+5U3Td4F26lHO+u9/wTuzf2tb/YVKoj8fOm3B/6mZhI/12iF90LvQyMbpmJ39S3lVtLN64tX52/uWncYnXr7b2ajbu/f24k1fnyfHWw6tbGs6Pqe2HLvtm672i/r7W577edft9OV+pY8xnu8yOdqfte2rJvru47PtC3/nnr07Isu5+3ANj3Dn3t0Fjn352/d+52ftG52nl94jvj3xx/eSyjfxv9Vntm5NXWy8Ufcjc/zc7f0AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgB3deve9a/NLSwvLmyplWd4Z0vVUKmknG+b89S8DyySpHwa0+wGrpS+0knpOO03l4QK782i78/6jJuGfzTF5Jgl/IpWJoefP5sonZVnuj5h3Uyl7j/raJ/HsRWVPb0vAM3B65frN07fefe/ri9fn31p4a+HGubNnz82cO/va3Okri0sLM93XvY4SeBoGPoEDAAAAAAAAAAAAB8Tu/jineLy/7QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4DBdPpn0/RWZnTs1U7bV7c0vV1K0PLvlJklaSYjopPkgupDtlamChYth2VpNLH3689lG31W6mevnWduvtzmozZTrJSFNuYWKrmeWdYeMV9Tg3h4+3S0V/D6uEneglDvbafwMAAP//rg0hKw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) write$uinput_user_dev(r0, &(0x7f0000000180)={'syz1\x00', {0x3, 0x9, 0x0, 0xfff7}, 0x38, [0xffff, 0x5, 0x7, 0x40000e9, 0x4, 0x6, 0x5, 0x10, 0x7, 0x950c, 0x1294, 0x8, 0x2, 0x5506fd78, 0x8000, 0xffffffa2, 0x7, 0x1, 0x8, 0x401, 0xb, 0x9, 0x3, 0x222, 0x1, 0xde, 0x10000, 0x3, 0x5, 0xbf7, 0x490, 0x8, 0x6, 0x2, 0x3b66, 0x7, 0x100, 0x9, 0x3, 0x1, 0x8, 0x5, 0x9, 0x6, 0x4, 0x4, 0xa, 0x0, 0x635dfebb, 0x0, 0xffff0001, 0xd, 0x3, 0x0, 0x7, 0x163, 0x0, 0xae, 0x4, 0xfffffff7, 0xd60, 0xffff16fc, 0x2, 0xfffffff9], [0x7, 0x7, 0x7, 0xb, 0xdd6, 0x106, 0x400, 0x7fff, 0x7, 0x52263b86, 0x0, 0x3, 0x5ce3, 0xfffffff7, 0x9, 0x3, 0x4, 0x200, 0xfffffff8, 0xb0, 0x6, 0x8, 0x20000, 0x45, 0x2, 0x80000000, 0x2, 0x3, 0x3, 0x9, 0x6, 0x9, 0x3, 0xc, 0x385a, 0x3ff8, 0x9, 0x1, 0x7, 0x5, 0x8, 0x4, 0x1, 0x8, 0x3, 0xfffff305, 0x6a2e, 0x2, 0xf4f4, 0x8, 0x2, 0x36, 0xb6, 0x92, 0x0, 0x1, 0x2, 0xcd32, 0x7, 0x1cd4, 0x5a26, 0x17, 0x80000001, 0x49], [0x4, 0x8000, 0x0, 0x23, 0x0, 0x2, 0x200, 0x0, 0x4, 0x80080000, 0x1, 0x6, 0x51d, 0x9, 0x5, 0xa4, 0x6, 0x0, 0x4, 0x1, 0x2, 0x7, 0x0, 0xe000000, 0xacd, 0x44, 0x7, 0x9, 0x40, 0xc, 0x7, 0x9, 0xa, 0x2, 0x7, 0xb7, 0x2, 0xa4, 0x3, 0x0, 0x4, 0x81, 0xffff, 0x7, 0xfff, 0xdb91, 0x0, 0xd, 0x58cb, 0x1, 0x519eb04a, 0xf, 0xdd7, 0x4, 0xffff, 0x6, 0x6661, 0x4, 0x401, 0x7eedff85, 0x0, 0x1, 0x9, 0xc7fc], [0x7, 0x1, 0xc, 0x5, 0x200, 0x101, 0x101, 0x4, 0x99, 0x4, 0x8001, 0x5, 0xe02c, 0x816b, 0xe, 0x9, 0x101, 0x5, 0x44, 0x200, 0x1, 0x5365, 0x5, 0xb, 0x7, 0x4, 0x5, 0xfffffffb, 0x10, 0x3, 0x1, 0xd6, 0x5, 0x8, 0xfcf, 0x8, 0x8, 0x2, 0x6, 0x10001, 0x3919, 0x1d8, 0x1000, 0x1, 0x8, 0x80000000, 0xb, 0xc33, 0x4, 0x3, 0x3, 0xc2e, 0x8, 0x2, 0x8001, 0x1, 0x4, 0x0, 0x2e, 0x7fffdfff, 0xff, 0x1ff, 0x6, 0x5]}, 0x45c) 17m2.522426421s ago: executing program 48 (id=1901): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000140)=ANY=[], 0x11, 0x69d, &(0x7f0000000840)="$eJzs3c1vHGcdB/DvrNcvm0iO26ZpQJUwjVQQEYkdK4VwSUAIBalCVThwthqnseKkwXFR2gNxAYkrB/6AcAgXOIEQEhJSpHKGW8XN4lQJiUtPaQ8dNLOz67XrtZ1X2/D5RLPP88wz88xvfvOyL5E1Af5vXTyZ9v10cvHk67er9tq9uaW1e3PXe/Uk40laSbtbpLiRFB8kF9Kd8oVqZjNcMWw7v148d+nDj9c+6rbaWR+veukMD7C9m71YbaZMJxlpysewYbw3H2288fVq0c9MlbATvcTBXhtNUm7w42PrPVspRwYaQ6934OAouu+bA7rX/1RyKMlE7w1ttdvZevYR7uih7kWrufv0IgEAAIB94siDO8ntTO51HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCQNM//L5qp1atPp+g9/39s4Bn7Y3sc7nDbRzbRq9xvPYtgAAAAAAAAAODp+tKD/O5SWU722mVR/5//K3XjaP16OO/kVhaynFO5nfmsZCXLmU0yNTDQ2O35lZXl2d6an5ZlOWTNM1uueWaXAXeexF4DAAAAAAAAwP+M8035s1zM5B7HAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGxTJSLeop6O9+lRa7SQTScaq5VaTf/TqB9n9vQ4AAAAAnoEjD/IgtzPZa5dF/Z3/WP29fyLv5EZWspiVLGUhl+vfArrf+ltr9+aW1u7NXa+mz4/77f+s1/84uWMY9Yjp/vaw9ZaP10t0ciWL9ZxTeTNvZymX06rXrBzvxbN1XO9XMRXnu8pydwm63JTVnv+qKfeHqTojo/2MzDSxVdl4bvtMDB6dR9jSbFr9X36OPkTOz2+7leKz3jE51JuTHP7+zjkffaideSybM3Fm4Ow7tn0mkq/86fc/urp049rVYvXk/jmNHsL4v9avms2ZmBvIxEu7zsSVWwczE5u18mK/fjHfyw9zMtN5I8tZzE8yn5UsZDrfrWvzzflcvU5tn6kLG1pv7BTFWHNcRjbF9OUj3XK7mF6p153MYn6Qt3M5C3mt/ncms/lGzuZszg0c4Rd3cdW36kv+8IaOPw8P/sRXm0onyS+bcn+o8vpcP6+flV3de+5U3Td4F26lHO+u9/wTuzf2tb/YVKoj8fOm3B/6mZhI/12iF90LvQyMbpmJ39S3lVtLN64tX52/uWncYnXr7b2ajbu/f24k1fnyfHWw6tbGs6Pqe2HLvtm672i/r7W577edft9OV+pY8xnu8yOdqfte2rJvru47PtC3/nnr07Isu5+3ANj3Dn3t0Fjn352/d+52ftG52nl94jvj3xx/eSyjfxv9Vntm5NXWy8Ufcjc/zc7f0AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgB3deve9a/NLSwvLmyplWd4Z0vVUKmknG+b89S8DyySpHwa0+wGrpS+0knpOO03l4QK782i78/6jJuGfzTF5Jgl/IpWJoefP5sonZVnuj5h3Uyl7j/raJ/HsRWVPb0vAM3B65frN07fefe/ri9fn31p4a+HGubNnz82cO/va3Okri0sLM93XvY4SeBoGPoEDAAAAAAAAAAAAB8Tu/jineLy/7QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4DBdPpn0/RWZnTs1U7bV7c0vV1K0PLvlJklaSYjopPkgupDtlamChYth2VpNLH3689lG31W6mevnWduvtzmozZTrJSFNuYWKrmeWdYeMV9Tg3h4+3S0V/D6uEneglDvbafwMAAP//rg0hKw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) write$uinput_user_dev(r0, &(0x7f0000000180)={'syz1\x00', {0x3, 0x9, 0x0, 0xfff7}, 0x38, [0xffff, 0x5, 0x7, 0x40000e9, 0x4, 0x6, 0x5, 0x10, 0x7, 0x950c, 0x1294, 0x8, 0x2, 0x5506fd78, 0x8000, 0xffffffa2, 0x7, 0x1, 0x8, 0x401, 0xb, 0x9, 0x3, 0x222, 0x1, 0xde, 0x10000, 0x3, 0x5, 0xbf7, 0x490, 0x8, 0x6, 0x2, 0x3b66, 0x7, 0x100, 0x9, 0x3, 0x1, 0x8, 0x5, 0x9, 0x6, 0x4, 0x4, 0xa, 0x0, 0x635dfebb, 0x0, 0xffff0001, 0xd, 0x3, 0x0, 0x7, 0x163, 0x0, 0xae, 0x4, 0xfffffff7, 0xd60, 0xffff16fc, 0x2, 0xfffffff9], [0x7, 0x7, 0x7, 0xb, 0xdd6, 0x106, 0x400, 0x7fff, 0x7, 0x52263b86, 0x0, 0x3, 0x5ce3, 0xfffffff7, 0x9, 0x3, 0x4, 0x200, 0xfffffff8, 0xb0, 0x6, 0x8, 0x20000, 0x45, 0x2, 0x80000000, 0x2, 0x3, 0x3, 0x9, 0x6, 0x9, 0x3, 0xc, 0x385a, 0x3ff8, 0x9, 0x1, 0x7, 0x5, 0x8, 0x4, 0x1, 0x8, 0x3, 0xfffff305, 0x6a2e, 0x2, 0xf4f4, 0x8, 0x2, 0x36, 0xb6, 0x92, 0x0, 0x1, 0x2, 0xcd32, 0x7, 0x1cd4, 0x5a26, 0x17, 0x80000001, 0x49], [0x4, 0x8000, 0x0, 0x23, 0x0, 0x2, 0x200, 0x0, 0x4, 0x80080000, 0x1, 0x6, 0x51d, 0x9, 0x5, 0xa4, 0x6, 0x0, 0x4, 0x1, 0x2, 0x7, 0x0, 0xe000000, 0xacd, 0x44, 0x7, 0x9, 0x40, 0xc, 0x7, 0x9, 0xa, 0x2, 0x7, 0xb7, 0x2, 0xa4, 0x3, 0x0, 0x4, 0x81, 0xffff, 0x7, 0xfff, 0xdb91, 0x0, 0xd, 0x58cb, 0x1, 0x519eb04a, 0xf, 0xdd7, 0x4, 0xffff, 0x6, 0x6661, 0x4, 0x401, 0x7eedff85, 0x0, 0x1, 0x9, 0xc7fc], [0x7, 0x1, 0xc, 0x5, 0x200, 0x101, 0x101, 0x4, 0x99, 0x4, 0x8001, 0x5, 0xe02c, 0x816b, 0xe, 0x9, 0x101, 0x5, 0x44, 0x200, 0x1, 0x5365, 0x5, 0xb, 0x7, 0x4, 0x5, 0xfffffffb, 0x10, 0x3, 0x1, 0xd6, 0x5, 0x8, 0xfcf, 0x8, 0x8, 0x2, 0x6, 0x10001, 0x3919, 0x1d8, 0x1000, 0x1, 0x8, 0x80000000, 0xb, 0xc33, 0x4, 0x3, 0x3, 0xc2e, 0x8, 0x2, 0x8001, 0x1, 0x4, 0x0, 0x2e, 0x7fffdfff, 0xff, 0x1ff, 0x6, 0x5]}, 0x45c) 11m28.530095976s ago: executing program 1 (id=2572): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xe7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r3) 11m26.0288594s ago: executing program 1 (id=2581): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='devices.list\x00', 0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x1000001, 0xffffffffcbe14156, 0x8, 0x7fff, 0x0, 0x69c8, 0x0, 0x0, 0x8, 0x3}}, 0x50) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x38) sendmmsg(0xffffffffffffffff, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) unshare(0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e23, @loopback}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x27}}, {0x2, 0x4e24, @broadcast}, 0x3b8, 0x0, 0x0, 0x0, 0xe36, &(0x7f00000000c0)='wg1\x00', 0x1, 0x1, 0x5e4d}) preadv2(r1, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0) 11m24.766470661s ago: executing program 1 (id=2582): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 11m18.216941223s ago: executing program 1 (id=2593): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 11m17.812155203s ago: executing program 1 (id=2594): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000007, 0x20011, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x108, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r3, 0x1, &(0x7f00000001c0)=[&(0x7f0000000d80)={0xf, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000c40)="0d3281", 0x3}]) 11m12.680901855s ago: executing program 1 (id=2602): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4, &(0x7f00000022c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRES32], 0x2, 0xc36, &(0x7f0000002540)="$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") 11m11.256045164s ago: executing program 49 (id=2602): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4, &(0x7f00000022c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRES32], 0x2, 0xc36, &(0x7f0000002540)="$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") 5m34.508344962s ago: executing program 0 (id=3171): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 5m30.957564292s ago: executing program 0 (id=3174): socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x87) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d0001000000000904"], 0x0) 5m28.625021298s ago: executing program 0 (id=3180): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000240)="77298ea765b7711c729a060b0c9f66d9aa4f19992d888e0e17f04c3d7a062f5eb5420000ef02c84abac424000000000000ab32a9413fae78554036651897eae1d22f4e66c48772caf745cd11ef87535ec532c5c7e296f6e99ce2e14588ab3836452aad", 0x63}], 0x1, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) 5m26.6578661s ago: executing program 0 (id=3185): fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000400)='./file0\x00', &(0x7f0000000480), 0x0, 0x0, 0x1) 5m21.545151397s ago: executing program 0 (id=3193): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) pipe(0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) 5m18.964836507s ago: executing program 0 (id=3196): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000000}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x95}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x100b, &(0x7f0000001e40)=""/4107, 0x40f00}, 0x94) 5m2.729772539s ago: executing program 50 (id=3196): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000000}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x95}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x100b, &(0x7f0000001e40)=""/4107, 0x40f00}, 0x94) 23.473485346s ago: executing program 7 (id=3713): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x2080d6, &(0x7f0000000140), 0x1, 0x4c0, &(0x7f0000000580)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x840000, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) rt_sigqueueinfo(r1, 0x1c, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KDGKBSENT(r4, 0x4b48, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000400)='./file0\x00', &(0x7f0000000480), 0x0, 0x0, 0x1) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000000)={0x2128, r4}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r6 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xb}, @in6=@mcast2, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x40000000000000}, {0x101, 0x1000000000, 0x8, 0x20}, 0xfffffff7, 0x1, 0x1}, {{@in=@remote, 0x1, 0x32}, 0x2, @in=@private=0xa010100, 0x1502, 0x4, 0x2, 0x0, 0xc36, 0xfffffffd}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 19.761410518s ago: executing program 2 (id=3719): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4028, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) 18.243358495s ago: executing program 7 (id=3720): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pidfd_send_signal(0xffffffffffffffff, 0x8, 0x0, 0xf8) 15.874692091s ago: executing program 9 (id=3725): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x2080d6, &(0x7f0000000140), 0x1, 0x4c0, &(0x7f0000000580)="$eJzs3E1sFFUcAPD/bFuqCLQifoCoVTQSP1ooKBxM/EhIPKgx0QMeaykEWaihNbGkkWoIXkyUxHg1Gi9GE28ePHkyysnEiwdNPBoSYuoB5LRmdmeX7XZ3u7Rbth+/X7Ld93Zn9r3/m3k7b+Z1J4B1ayD9k0Rsiog/IqIvInK1CwyUnq7OTo/+Nzs9mkSh8No/SbpaXJmdHi0vmmTPt5Uy3elT7lwSz9Upd2LqzImRfH7sdJYfmjz59tDE1Jknj58cOTZ2bOzU8MGD+/ftPfD08FNtifP2tK473hvfuf3FNy68PHr4wpu/fJtUVbo6jpoWWKSemKlqk1qPtKGElWRzVTrpbrpoOxqXNumNKHbUnmL/74uuc1sq7/XFoQ86WjlgWRUKTd+eKQBrWDqaB9aj8oH+yuxno+k58Nzz4LXv8vOlE6A07qvZo3TS0105Ue2pOb9tp+mIODxz7fP0EfOuQwAAtN+P6fjnidK4ozL+K83cxF1Vy23J5ob6s7mUrRFxR0Rsi4g7I4rL3h0R99xg+QM1+fnjn9ylRYbWknT890w2t1V+ZOWWF+nvynKbi/H3JEeP58f2ZG2yO3p60/zeup+eRHESKH77uFH5A1Xjv/SRll8eC2b1uNTdO3edIyOTI0sOPHP5/Ygd3fXizybwsjms7RGxY5FlHH/s651zX+mqpBaOv4nm80wtKXwR8Whp+89ETfxlSfP5yaFbIj+2Z6i8V8x38dfzrzYqf0nxt0G6/TfW3f8r8fcn1fO1E/M+YsNCZZz/88OG5zQDEc/GIvb/Dcnrcwp/d2Ry8lohYkPy0rzXTw9fX7ecLz7vLcW/e1f9/r81rrfEvRGR7sT3RcT9EfFAtu0ejIiHImJXk/h/fuHht5rEX7P9F2zO9vqm9A3VYPt/9+/FQ9e3f3k7lHaEyh7RPJGu9NMPjYpv7ftvfzG1O3ulle+/Viu4hJYDAACAVSMXEZsiyQ1W0rnc4GDpf/i3xcZcfnxi8vGj4++cOlL6jUB/9OTKV7r6snxk1z/7yx/6V35suDhrHnE2u166L7tu/GnXrcX84Oh4/kgnAweK/bxe/0/93dXp2gHLrg3zaMAq1az/f3ngJlYEuOkWf/w3coDVboFe7IYNsIY5isP6Va//n+1APYCbr/Hxf8zQANa4Sif/pIWFq36fVPvjTWD1cZCH9Wvh/v/Kct3/CuicVn/Fv3ISSTLnlfgqovlaSefrvIjERyujGo0TkWv0Vu+N3SBiTqK4U+aTWP4oRlZAG7aQKHfUqTMnulu+q8VU4exIPv/790spvZPfSgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO3zfwAAAP//vqzaew==") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x840000, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) rt_sigqueueinfo(0x0, 0x1c, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KDGKBSENT(r3, 0x4b48, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000400)='./file0\x00', &(0x7f0000000480), 0x0, 0x0, 0x1) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000000)={0x2128, r3}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r5 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xb}, @in6=@mcast2, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x40000000000000}, {0x101, 0x1000000000, 0x8, 0x20}, 0xfffffff7, 0x1, 0x1}, {{@in=@remote, 0x1, 0x32}, 0x2, @in=@private=0xa010100, 0x1502, 0x4, 0x2, 0x0, 0xc36, 0xfffffffd}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 15.771251583s ago: executing program 2 (id=3726): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0xc}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4f24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000003c0)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20004810}, 0x4008020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x3e57}, {0x20, 0x4, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 14.774074484s ago: executing program 9 (id=3727): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r0, 0xe0ffff, 0x19, 0x3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f00000006c0)=""/229, 0xe5, 0x40010142, 0x0, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x8) 14.284918229s ago: executing program 4 (id=3728): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x18, 0x55, 0x1, 0x70bd2b, 0x2}, 0x18}, 0x1, 0x0, 0x0, 0x2000000}, 0x40080c0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0xd, 0x0, 0x0, @time={0x3, 0x83}, {0x0, 0x2}, {0x20}, @raw32={[0x0, 0xb2d1]}}], 0xfe52) fstatfs(r0, &(0x7f0000000100)=""/60) poll(&(0x7f0000000240)=[{r0, 0x20}], 0x1, 0xfbe) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x2, @tick=0x401, 0x7, {0x3, 0xbb}, 0x41, 0x2, 0x9}) r1 = io_uring_setup(0x2c49, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x3}) socket(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x18, &(0x7f0000000000), 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) geteuid() ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000400)={0x4, 0xf, "f900", 0x0, 0x40}) 13.469853938s ago: executing program 7 (id=3729): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xa1db, 0xffffffff, 0xae58}) r1 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x2000, 0x100000000}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000dc0)='/proc/tty/drivers\x00', 0x0, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r8 = fanotify_init(0xf00, 0x1000) fanotify_mark(r8, 0x105, 0x5000003a, r7, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x42, 0x0) readv(r8, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xa0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xa0}}, 0x0) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000000)=""/221, 0xdd}], 0x1, 0x1c0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000140)={0x9, 0x4, 0xc1}) splice(r0, &(0x7f0000000040)=0x7, r1, &(0x7f0000000100)=0x80000001, 0x2, 0x1) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x221008b, &(0x7f00000001c0)={[{@resgid}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@grpquota}, {@jqfmt_vfsv1}]}, 0xfe, 0x45e, &(0x7f0000002dc0)="$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") 13.151425312s ago: executing program 4 (id=3730): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee3, 0x8031, 0xffffffffffffffff, 0xe84df000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) r5 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000140)={r5, 0x1, 0x0, 0x4000}) ppoll(&(0x7f00000001c0)=[{r6, 0x1420}], 0x1, 0x0, 0x0, 0x0) 12.482523679s ago: executing program 9 (id=3731): listen(0xffffffffffffffff, 0x0) r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) syz_emit_ethernet(0x62, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) socket$inet6(0xa, 0x80002, 0x88) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20048805) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000540)={@empty, @broadcast}, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)=@o_path={0x0, 0x0, 0x8, r0}, 0x18) syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x3, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x7}, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000400)={0x5, 0x20, 0x7}, 0x48) 11.194147594s ago: executing program 4 (id=3732): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000000d00)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x81009, &(0x7f00000004c0)={[{@i_version}, {@delalloc}, {@auto_da_alloc}, {@nolazytime}, {@errors_continue}, {@lazytime}, {@init_itable}]}, 0x2, 0x78b, &(0x7f0000000a00)="$eJzs3c1rHGUYAPBntvmoabURBK0XA4IGSjemxlbBQ8WDCBYKerYNm22o2WRLdlOaENAighdBxYOgl56t1ptXP676B3j3IC1V02KkB4nMZjfdJrvp5mOzlf39YJL3nZnN8z7zzsebnWE3gK41lP7IRByOiI+TiEPV+UlE9FZKPREnV9dbXlrMpVMSKytv/plU1rm9tJiLutekDlQrT0TEjx9EHMlsjFuaX5gaLxTys9X6SHn6wkhpfuHo+enxyfxkfub46NjYsRMvnDi+e7n+/cvCwRufvPbsNyfvvP/4tY9+SuJkHKwuq89jtwzFUHWb9Kab8B6vxru7Ha6jkk43gG1JD819q0d5HE7Sck+nmwQAtFk6Cl0BALpM4voPAF2m9j7A7aXFXG3q7DsSe+vmKxGxfzX/2v3N1SU91Xt2+yv3QQduJ/fcGUkiYnAX4g9FxJffvX01naJN9yEBGnnvckScHRzaeP5PNjyzsFXPtbDO0Lr6Wvxfe3cYHbif79Pxz4uNxn+ZtfFPNBj/9Dc4drej6fG/JnN9F8I0lY7/Xq57tm25Lv+qwX3V2sOVMV9vcu58IZ+e2x6JiOHo7U/ro5vEGL71761my+rHf399+s5Xafz09901Mtd7+u99zcR4eXwnOde7eTniyZ5G+Sdr/Z80Gf+ebjHG6y99+EWzZWn+ab61aWP+7bVyJeKZhv1/94m2ZNPnE0cqu8NIbado4NvfPh9oFr++/9NpeWlxJYm42rTBT+0k243S/h/YPP/BpP55zdLWY/x85dAPzZY1yD9X+19oVeP9vy95q1Luq867NF4uz45G9CVvbJx/7O5ra/Xa+mn+w083Pv432//T0cnZFvPvufHH19vPv73S/Ce21P9bL1xbntrXLH5r/T9WKQ1X57Ry/mu1gTvZdgAAAAAAAAAAAAAAAAAAAAAAAADQqkxEHIwkk10rZzLZ7Op3eD8WA5lCsVQ+cq44NzMRle/KHozeTO2jLg/VfR7qaPXz8Gv1Y+vqz0fEoxHxWf9DlXo2VyxMdDp5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg60OT7/1O/93e6dQBA2+zvdAMAgD3n+g8A3cf1HwC6j+s/AHQf138A6D6u/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALTZ6VOn0mnln6XFXFqfuDg/N1W8eHQiX5rKTs/lsrni7IXsZLE4Wchnc8Xp+/29QrF4YSxm5i6NlPOl8khpfuHMdHFupnzm/PT4ZP5MvndPsgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACArSnNL0yNFwr52XWFOyvr5yh0vtBT7bUHpT3bKmRqSexV0L52ZfEAbMz2FTp4UgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4H/kvAAD//7gYIqQ=") ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661962239c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e6fff4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be3cdda66fb977aef7c9cb92428ef25d9bf665bd60"], 0x0}, 0x94) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0xa00000, &(0x7f0000000100)=ANY=[@ANYBLOB="616e63686f723d30003030303030303030303030303030303030312c00a34b6e7457abbe100ff67a1734e5930151fb9c16d3de25a91e3cacc2fa65c0d634c9b03a233ffeea022ec9cb653caf1e05f06cc688edcf747e2c8c7e12718ec541b88ca9", @ANYRESHEX, @ANYRES16, @ANYBLOB="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", @ANYRES16], 0x1, 0xcaa, &(0x7f0000001f80)="$eJzs3V1sXuddAPD/c2zHrzNGvLWEbqzbW0Aj9ZqSr9VZg9o31DVMStNojnc3yW9iJ7yqY1u2A2k1wOOGCy6QEOJiV5YgIA0xVQxNXIDkQZG2m0qgXXFlgVpNiAuDJhUhIaNz3ueNX3+k8erEcdrfr43/5zznec55Pl6f077Kc54AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACJ+9eXzJ06mHQ70bE9a2o8KAQAP3MWxr5w4tdPzHwD40Lp8t///BwAAAAAAAAAAAAAADooURTwWKeYurqWJar+tdqHVd/PW+MjozsUGUlWyp8pf/qmdPHX6zBefGz7biRdaM+9T/n77dLw6dvl8/aXZG3PzUwsLU5P18ZnW1dnJqV2fYa/ltxqqOqB+47Wbk9euLdRPPXt60+Fbg+/2f+zo4Lnhp48/2ck7PjI6OraRpdadv/cDV6RtpxkevxsRh6KI45HimW//KDUjooi990Vtf8d+q4GqEUNVI8ZHRquGTLeaM4vlwUudjigi6l2FGp0+2nksordvX9uwVXFnq9F+DUdRVniobN7YXHO+eWV6qn6pOb/YWmzNzlxK7dqW7alHEWdTxHJErPZvP3FfFNEbKb55ZC1dyW/9qPrhC9XE4N3U6KEo61nvi1guDuyYPRL6o4hXIsWP3zoWV/N9prrXfD7ilTJ+N+J2GV+ISOUH40zEOzt8jng09UYRf1CO/999PE1W94POfeXCV+tfnrk225W3c1/5CZ8P2+4UD/j58Ll4b71tc/rAlrg/Dvi9qRZFNKs7/lq61wPerz0AAAAAAAAAAAAAAADA/hmIIj4VKV7+l99sL+9fzUs/cm741wY/3j1n/Il7nKfM+2xELBW7m5N7KE8MvJQupfSQ5xJ/lNWiiN/O8/++8bArAwAAAAAAAAAAAAAAAAAA8JFWxA8jxfNvH0vL0b2meGvmev1y88p0e1XYztq/nTXT19fX1+upHRs5TuS4lONyjis5ruYYRS6fYyPHiRyXclzOcSXH1RyjJ5fPsZHjRI5LOS7nuJLjao7Rm8vn2MhxorMycN5fznElx9Uc44Cs3QsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GFSRBF9nZ0UEY3oX89W+h9u3QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAtv5UxHciRf3XG3fSeiMiVf+2HSt/nInGoTJ+MhrDZXwhGudzbFaxt/GNh1B/9qYvFfGDSNFfe/POgOfx72vv3fkYxO2vb+x9urcdezoHB9/t/9jRI+eGRz/7xN22004VGLrQmrl5qz4+MhpjXcm9+eqf7EobzNct7k/TiYiF1994rTk9PTX/wTfKj8D2Q0Xs/cwHbSP17tTS3W3cxw7/KG/U9vWi0bvrzOs9H/yzcSA3Nt8nag/h3sSDVz7/34kUv/z2v3Ye+O3nfy1+qr135wkf7/3OxvP/+a0nutfz/8Wonv+9W8vl53/5TN/p+f9YV9rz+b9G+nojaos35vqORtQWXn/jeOtG8/rU9amZMydOfGl4+EunT/Qdiqhda01PdW3dl+4CAAAAAAAAAAAAAAAA2D+piBcjRfMHa6keEbeq+VqD54afPv5kT/RU8602zdt+dezy+fpLszfm5qcWFqYm6+Mzrauzk1O7vVytmu41PjL6QBpzL08M3K3+S7s8wz3qP1B7aXbu9fnW9d9Y3PH44dr5KwuL882r7cMD28pHEdHoThmqKjw+MlpVerrVnKmKXqoGZe8z4ftSEf8WKa6eqaenclqe/791hv+m+f/b+mtv8/97x0dGRzvz/z57eGP+3ye6spbXTKmI9yLFL/3RE/FUVc/Dsa3Pcr4/ixRDZz+T88WhMl+nDu33CrRnBpZ5/ytS/PX/bc7bmQ/52Ebekz9R5z4CyvE/Eim+8/vfip/PaZvf/7Dz+B/eeqK9v/9hdKf5n493pR3eNH1+z00nj//xSPHCY2/GL1Qp//u+7//o3HGOtTNvvJ9jxzEv9jz+P9OVNpiv+4v3q/EAAAAAAAAAAACPsL5UxF9Eiu+N9qbnctpu/v7f5NYTPaC//9fflTa5T8vn7LlTAQAAAOCA6EtF/DBSXF98884c6s3zvzvf2hVx+1diqNr8n/X19bT5aPt7vp+u3htw7+//Nr5TvNf3f90GI2IkRUzcv+YDAAAAAAAAAAAAAAAAAADAgZBSEc/l9dQnqvn8k3ddT30lUrz8H8/kfOloma+zDvxg9bN2cXbm+Pnp6dlaLDavTE/Vx+aaV6fKso9HirU//UwuW1Trqz8V9a4rbKzFPh8pRv+yk7e9FntnbfLHN/KeLPN+IlL8+19tzpuXps5rR1d5T5V5/yRSfO1vd857dCPv6TLvtyLF979W7+Q9XObtvB/1ZzfyPnt1du9r8AMAAAAAAAAAAAAAAAAAAEBfKuL3IsV/3li+M5c/r//f17Vbuf31rvX+t7hVrfM/WK3/f7ftHcveY/3/6r0CS3e7KgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfDilKOKNSDF3cS2t9Jf7bbULrZmbt8ZHRiOiZ3uxgVSV7Knyl39qJ0+dPvPF54bPdmJX+X3wqXh17PL5+kuzN+bmpxYWpibr4zOtq7OTU7s+w17LbzVUdUD9xms3J69dW6ifevb0pp68Nfhu/8eODp4bfvr4k5284yOjo2Ndp+jt+8BX3ybdJf1QFPHHkeKZb/8ofa8/ooi990Vtf8d+q4GqEUNVI8ZHRquGTLeaM4tl71/qdEQRUe8q1Gj3UT76YMdiTxoRS2X1ywoPlc0bm2vON69MT9UvNecXW4ut2ZlLqV3bsjH1KOJsiliOiNX+7afriyJeixTfPLKW/qG//QmtOuELF8e+cuLU3etRPMA27kJZz3pfxHKx8bt2YMfsAOuPIv4mUvz4rWPxj/0xUKb1lj8+H/FKGb8bcTva453KD8aZiHd2+BzxaOqNIv67HP9za+mt/vJ+0LmvXPhq/csz12a78nbuK+/3fDi0i2s+9OfDfuq6N32uK7nsyT9/cV9rsqNaFPH96o6/lv7J7zUAAAAAAAAAAAAAAADAAVLEz0WK598+lqr5wXfmFLdmrtcvN69Mt6d9d+b+deZMr6+vr9dTOzZynMhxKcflHFdyXM0xilw+x0YZa+vrE3l/KcflHFdyXM0xenL5HBs98c9/X14/7y/luJzjSo6rOUZvLp9jI8eJHJdyXM5xJcfVHMO8YgAAAAAAAAAAAAAAAAAA4AEoqn9S/OFvraX1/vb60hPRjivWA/3Q+/8AAAD//7WPAAI=") r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r4, 0x11, 0x66, &(0x7f0000000300), 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11.045922496s ago: executing program 7 (id=3733): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x2080d6, &(0x7f0000000140), 0x1, 0x4c0, &(0x7f0000000580)="$eJzs3E1sFFUcAPD/bFuqCLQifoCoVTQSP1ooKBxM/EhIPKgx0QMeaykEWaihNbGkkWoIXkyUxHg1Gi9GE28ePHkyysnEiwdNPBoSYuoB5LRmdmeX7XZ3u7Rbth+/X7Ld93Zn9r3/m3k7b+Z1J4B1ayD9k0Rsiog/IqIvInK1CwyUnq7OTo/+Nzs9mkSh8No/SbpaXJmdHi0vmmTPt5Uy3elT7lwSz9Upd2LqzImRfH7sdJYfmjz59tDE1Jknj58cOTZ2bOzU8MGD+/ftPfD08FNtifP2tK473hvfuf3FNy68PHr4wpu/fJtUVbo6jpoWWKSemKlqk1qPtKGElWRzVTrpbrpoOxqXNumNKHbUnmL/74uuc1sq7/XFoQ86WjlgWRUKTd+eKQBrWDqaB9aj8oH+yuxno+k58Nzz4LXv8vOlE6A07qvZo3TS0105Ue2pOb9tp+mIODxz7fP0EfOuQwAAtN+P6fjnidK4ozL+K83cxF1Vy23J5ob6s7mUrRFxR0Rsi4g7I4rL3h0R99xg+QM1+fnjn9ylRYbWknT890w2t1V+ZOWWF+nvynKbi/H3JEeP58f2ZG2yO3p60/zeup+eRHESKH77uFH5A1Xjv/SRll8eC2b1uNTdO3edIyOTI0sOPHP5/Ygd3fXizybwsjms7RGxY5FlHH/s651zX+mqpBaOv4nm80wtKXwR8Whp+89ETfxlSfP5yaFbIj+2Z6i8V8x38dfzrzYqf0nxt0G6/TfW3f8r8fcn1fO1E/M+YsNCZZz/88OG5zQDEc/GIvb/Dcnrcwp/d2Ry8lohYkPy0rzXTw9fX7ecLz7vLcW/e1f9/r81rrfEvRGR7sT3RcT9EfFAtu0ejIiHImJXk/h/fuHht5rEX7P9F2zO9vqm9A3VYPt/9+/FQ9e3f3k7lHaEyh7RPJGu9NMPjYpv7ftvfzG1O3ulle+/Viu4hJYDAACAVSMXEZsiyQ1W0rnc4GDpf/i3xcZcfnxi8vGj4++cOlL6jUB/9OTKV7r6snxk1z/7yx/6V35suDhrHnE2u166L7tu/GnXrcX84Oh4/kgnAweK/bxe/0/93dXp2gHLrg3zaMAq1az/f3ngJlYEuOkWf/w3coDVboFe7IYNsIY5isP6Va//n+1APYCbr/Hxf8zQANa4Sif/pIWFq36fVPvjTWD1cZCH9Wvh/v/Kct3/CuicVn/Fv3ISSTLnlfgqovlaSefrvIjERyujGo0TkWv0Vu+N3SBiTqK4U+aTWP4oRlZAG7aQKHfUqTMnulu+q8VU4exIPv/790spvZPfSgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO3zfwAAAP//vqzaew==") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x840000, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) rt_sigqueueinfo(r1, 0x1c, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KDGKBSENT(r4, 0x4b48, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000400)='./file0\x00', &(0x7f0000000480), 0x0, 0x0, 0x1) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000000)={0x2128, r4}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r6 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xb}, @in6=@mcast2, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x40000000000000}, {0x101, 0x1000000000, 0x8, 0x20}, 0xfffffff7, 0x1, 0x1}, {{@in=@remote, 0x1, 0x32}, 0x2, @in=@private=0xa010100, 0x1502, 0x4, 0x2, 0x0, 0xc36, 0xfffffffd}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 10.161880786s ago: executing program 9 (id=3734): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x2080d6, &(0x7f0000000140), 0x1, 0x4c0, &(0x7f0000000580)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x840000, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) 9.77190169s ago: executing program 2 (id=3735): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x2080d6, &(0x7f0000000140), 0x1, 0x4c0, &(0x7f0000000580)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x840000, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) rt_sigqueueinfo(0x0, 0x1c, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KDGKBSENT(r3, 0x4b48, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000400)='./file0\x00', &(0x7f0000000480), 0x0, 0x0, 0x1) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000000)={0x2128, r3}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r5 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xb}, @in6=@mcast2, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x40000000000000}, {0x101, 0x1000000000, 0x8, 0x20}, 0xfffffff7, 0x1, 0x1}, {{@in=@remote, 0x1, 0x32}, 0x2, @in=@private=0xa010100, 0x1502, 0x4, 0x2, 0x0, 0xc36, 0xfffffffd}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 8.927010249s ago: executing program 7 (id=3736): mount_setattr(0xffffffffffffffff, 0x0, 0xb100, &(0x7f0000000040)={0x1, 0x77, 0x1e0000}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004600)=""/102400, 0x19000) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000009c0)=""/4096) bpf$MAP_CREATE(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) creat(0x0, 0x152) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/49, 0x31) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) mmap(&(0x7f00003d0000/0x1000)=nil, 0x1000, 0x0, 0xb5972, 0xffffffffffffffff, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 7.757611163s ago: executing program 2 (id=3737): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x5) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000880)={0xffffff75, 0xaeb, 0x10e57, 0x6, 0xf6, "3ce69208000000f6000200", 0x4, 0x1ff}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x8) 5.963901733s ago: executing program 9 (id=3738): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x18, 0x55, 0x1, 0x70bd2b, 0x2}, 0x18}, 0x1, 0x0, 0x0, 0x2000000}, 0x40080c0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0xffffffff, 0x0, 0x1, 'queue1\x00'}) write$sndseq(r0, 0x0, 0x0) fstatfs(r0, &(0x7f0000000100)=""/60) poll(&(0x7f0000000240)=[{r0, 0x20}], 0x1, 0xfbe) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x2, @tick=0x401, 0x7, {0x3, 0xbb}, 0x41, 0x2, 0x9}) r1 = io_uring_setup(0x2c49, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x3}) socket(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x18, &(0x7f0000000000), 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) geteuid() ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000400)={0x4, 0xf, "f900", 0x0, 0x40}) 4.44522351s ago: executing program 7 (id=3739): r0 = epoll_create(0x7) epoll_create1(0x0) r1 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) unshare(0x22020400) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x1008}) 3.52448432s ago: executing program 4 (id=3740): syz_clone3(&(0x7f000000dd80)={0x800400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f00000023c0)) 3.117421425s ago: executing program 2 (id=3741): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$fuse(0x0, 0x0, 0x81880a, 0x0, 0x8, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001800010a00000000000000000400000008001700", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x200080c1}, 0x0) 2.939719467s ago: executing program 4 (id=3742): listen(0xffffffffffffffff, 0x0) r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) syz_emit_ethernet(0x62, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) socket$inet6(0xa, 0x80002, 0x88) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20048805) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000540)={@empty, @broadcast}, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)=@o_path={0x0, 0x0, 0x8, r0}, 0x18) write$binfmt_elf64(r0, 0x0, 0x40000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x3, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x7}, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000400)={0x5, 0x20, 0x7}, 0x48) 2.864779007s ago: executing program 2 (id=3743): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0xc}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4f24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000003c0)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20004810}, 0x4008020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x3e57}, {0x20, 0x4, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 1.568760932s ago: executing program 4 (id=3744): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x2080d6, &(0x7f0000000140), 0x1, 0x4c0, &(0x7f0000000580)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x840000, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) rt_sigqueueinfo(r1, 0x1c, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KDGKBSENT(r4, 0x4b48, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000400)='./file0\x00', &(0x7f0000000480), 0x0, 0x0, 0x1) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000000)={0x2128, r4}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r6 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xb}, @in6=@mcast2, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x40000000000000}, {0x101, 0x1000000000, 0x8, 0x20}, 0xfffffff7, 0x1, 0x1}, {{@in=@remote, 0x1, 0x32}, 0x2, @in=@private=0xa010100, 0x1502, 0x4, 0x2, 0x0, 0xc36, 0xfffffffd}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 0s ago: executing program 9 (id=3745): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x2080d6, &(0x7f0000000140), 0x1, 0x4c0, &(0x7f0000000580)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x840000, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) rt_sigqueueinfo(0x0, 0x1c, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KDGKBSENT(r3, 0x4b48, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000400)='./file0\x00', &(0x7f0000000480), 0x0, 0x0, 0x1) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000000)={0x2128, r3}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r5 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xb}, @in6=@mcast2, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x40000000000000}, {0x101, 0x1000000000, 0x8, 0x20}, 0xfffffff7, 0x1, 0x1}, {{@in=@remote, 0x1, 0x32}, 0x2, @in=@private=0xa010100, 0x1502, 0x4, 0x2, 0x0, 0xc36, 0xfffffffd}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) kernel console output (not intermixed with test programs): ber=3 [ 1426.135361][ T9361] usb 5-1: Product: syz [ 1426.169461][ T9361] usb 5-1: Manufacturer: syz [ 1426.189428][ T9361] usb 5-1: SerialNumber: syz [ 1426.203664][ T9361] usb 5-1: config 0 descriptor?? [ 1427.109549][ T9361] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1427.173849][ T9361] asix 5-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1427.228238][ T9361] asix: probe of 5-1:0.251 failed with error -71 [ 1427.276433][ T9361] usb 5-1: USB disconnect, device number 16 [ 1428.449670][T17746] loop2: detected capacity change from 0 to 512 [ 1429.111555][T17746] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1429.156378][T17746] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1429.167119][T17746] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4059: comm syz.2.2483: Allocating blocks 41-42 which overlap fs metadata [ 1429.185123][T17746] Quota error (device loop2): write_blk: dquota write failed [ 1429.192594][T17746] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1429.202550][T17746] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.2483: Failed to acquire dquot type 0 [ 1429.228043][T17746] EXT4-fs error (device loop2): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1429.242605][T17746] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #12: comm syz.2.2483: corrupted inode contents [ 1429.255916][T17746] EXT4-fs error (device loop2): ext4_dirty_inode:6143: inode #12: comm syz.2.2483: mark_inode_dirty error [ 1429.267569][T17746] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #12: comm syz.2.2483: corrupted inode contents [ 1429.279704][T17746] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.2483: mark_inode_dirty error [ 1429.293365][T17746] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #12: comm syz.2.2483: corrupted inode contents [ 1429.308175][T17746] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 1429.368390][T17746] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #12: comm syz.2.2483: corrupted inode contents [ 1429.388551][T17746] EXT4-fs error (device loop2): ext4_truncate:4301: inode #12: comm syz.2.2483: mark_inode_dirty error [ 1429.401231][T17746] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 1429.411850][T17746] EXT4-fs (loop2): 1 truncate cleaned up [ 1429.440030][T17746] EXT4-fs (loop2): pa ffff88805c1641d0: logic 1, phys. 41, len 23 [ 1429.447904][T17746] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5393: group 0, free 22, pa_free 23 [ 1429.458985][T17746] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1430.976555][T13832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1433.246698][T17788] loop7: detected capacity change from 0 to 7 [ 1433.271708][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1433.280896][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1433.300408][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1433.309623][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1433.337015][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1433.346188][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1433.367089][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1433.376266][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1433.390482][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1433.399677][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1433.433429][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1433.442644][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1433.570440][T17790] support for cryptoloop has been removed. Use dm-crypt instead. [ 1433.645270][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1433.654524][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1433.662520][T17788] ldm_validate_partition_table(): Disk read failed. [ 1433.710763][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1433.719961][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1433.729820][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1433.738998][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1433.768827][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1433.778039][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1433.851269][T17788] Dev loop7: unable to read RDB block 0 [ 1433.872686][T17788] loop7: unable to read partition table [ 1433.916796][T17788] loop7: partition table beyond EOD, truncated [ 1433.971580][T17788] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 1434.614249][T17799] loop1: detected capacity change from 0 to 512 [ 1434.800317][T17799] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2492: invalid indirect mapped block 10 (level 1) [ 1434.896455][T17799] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2492: invalid indirect mapped block 8 (level 1) [ 1435.074584][T17799] EXT4-fs (loop1): 1 truncate cleaned up [ 1435.110550][T17799] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1435.768250][T17808] loop2: detected capacity change from 0 to 512 [ 1435.857876][T17808] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1435.914668][T17808] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1435.934838][T17808] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4059: comm syz.2.2495: Allocating blocks 41-42 which overlap fs metadata [ 1435.949577][T17808] Quota error (device loop2): write_blk: dquota write failed [ 1435.957037][T17808] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1435.967390][T17808] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.2495: Failed to acquire dquot type 0 [ 1435.984683][T17808] EXT4-fs error (device loop2): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1435.999276][T17808] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #12: comm syz.2.2495: corrupted inode contents [ 1436.014580][T17808] EXT4-fs error (device loop2): ext4_dirty_inode:6143: inode #12: comm syz.2.2495: mark_inode_dirty error [ 1436.028702][T17808] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #12: comm syz.2.2495: corrupted inode contents [ 1436.072105][T17808] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.2495: mark_inode_dirty error [ 1436.116528][T17808] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #12: comm syz.2.2495: corrupted inode contents [ 1436.143591][T14778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1436.158811][T17808] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 1436.168202][T17808] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #12: comm syz.2.2495: corrupted inode contents [ 1436.190833][T17808] EXT4-fs error (device loop2): ext4_truncate:4301: inode #12: comm syz.2.2495: mark_inode_dirty error [ 1436.213236][T17808] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 1436.233259][T17808] EXT4-fs (loop2): 1 truncate cleaned up [ 1436.260420][T17808] EXT4-fs (loop2): pa ffff88805c164000: logic 1, phys. 41, len 23 [ 1436.268287][T17808] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5393: group 0, free 22, pa_free 23 [ 1436.279247][T17808] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1436.660777][T13832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1437.039478][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1437.045894][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1437.064759][T17823] loop4: detected capacity change from 0 to 2048 [ 1437.266411][T17823] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1439.490521][T17841] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2505'. [ 1440.129414][T17847] loop4: detected capacity change from 0 to 512 [ 1440.354870][T17847] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1440.461596][T17847] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1441.631578][T17867] loop1: detected capacity change from 0 to 512 [ 1442.224823][T12733] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1442.244165][T17867] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1442.258238][T17867] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1442.267921][T17867] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4059: comm syz.1.2507: Allocating blocks 41-42 which overlap fs metadata [ 1442.282121][T17867] Quota error (device loop1): write_blk: dquota write failed [ 1442.289572][T17867] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1442.299504][T17867] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.2507: Failed to acquire dquot type 0 [ 1442.311536][T17867] EXT4-fs error (device loop1): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1442.326389][T17867] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #12: comm syz.1.2507: corrupted inode contents [ 1442.338798][T17867] EXT4-fs error (device loop1): ext4_dirty_inode:6143: inode #12: comm syz.1.2507: mark_inode_dirty error [ 1442.350374][T17867] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #12: comm syz.1.2507: corrupted inode contents [ 1442.383864][T17867] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.2507: mark_inode_dirty error [ 1442.398954][T17867] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #12: comm syz.1.2507: corrupted inode contents [ 1442.411119][T17867] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 1442.419899][T17867] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #12: comm syz.1.2507: corrupted inode contents [ 1442.432933][T17867] EXT4-fs error (device loop1): ext4_truncate:4301: inode #12: comm syz.1.2507: mark_inode_dirty error [ 1442.444257][T17867] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 1442.454861][T17867] EXT4-fs (loop1): 1 truncate cleaned up [ 1442.468677][T17867] EXT4-fs (loop1): pa ffff88805c164910: logic 1, phys. 41, len 23 [ 1442.476502][T17867] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5393: group 0, free 22, pa_free 23 [ 1442.487396][T17867] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1442.611935][T14778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1443.848535][T17878] loop4: detected capacity change from 0 to 2048 [ 1443.943207][T17878] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1446.987194][T17908] loop4: detected capacity change from 0 to 512 [ 1447.602531][T17908] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1447.624679][T17908] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1447.632336][T17908] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4059: comm syz.4.2522: Allocating blocks 41-42 which overlap fs metadata [ 1447.647545][T17908] Quota error (device loop4): write_blk: dquota write failed [ 1447.654997][T17908] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1447.664945][T17908] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.2522: Failed to acquire dquot type 0 [ 1447.678108][T17908] EXT4-fs error (device loop4): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1447.692972][T17908] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #12: comm syz.4.2522: corrupted inode contents [ 1447.714724][T17908] EXT4-fs error (device loop4): ext4_dirty_inode:6143: inode #12: comm syz.4.2522: mark_inode_dirty error [ 1447.730790][T17908] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #12: comm syz.4.2522: corrupted inode contents [ 1447.743224][T17908] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.2522: mark_inode_dirty error [ 1447.754812][T17908] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #12: comm syz.4.2522: corrupted inode contents [ 1447.766962][T17908] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 1447.775755][T17908] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #12: comm syz.4.2522: corrupted inode contents [ 1447.787875][T17908] EXT4-fs error (device loop4): ext4_truncate:4301: inode #12: comm syz.4.2522: mark_inode_dirty error [ 1447.800086][T17908] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 1447.809447][T17908] EXT4-fs (loop4): 1 truncate cleaned up [ 1447.832014][T17908] EXT4-fs (loop4): pa ffff88805c1641d0: logic 1, phys. 41, len 23 [ 1447.839900][T17908] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5393: group 0, free 22, pa_free 23 [ 1447.850792][T17908] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1448.031022][T12733] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1448.137744][T17913] loop1: detected capacity change from 0 to 512 [ 1448.145011][T17913] EXT4-fs: Ignoring removed orlov option [ 1448.222796][T17913] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1448.266796][T17913] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 1448.301160][T17913] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #15: comm syz.1.2523: corrupted in-inode xattr: e_value size too large [ 1448.329906][T17913] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.2523: couldn't read orphan inode 15 (err -117) [ 1448.352172][T17913] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1448.721350][T14778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1449.029275][T17944] loop1: detected capacity change from 0 to 2048 [ 1449.075729][T17944] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1449.155381][T17948] loop2: detected capacity change from 0 to 2048 [ 1449.188157][T17948] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1450.599391][T17975] loop2: detected capacity change from 0 to 512 [ 1451.141343][T17975] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1451.151964][T17975] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1451.159707][T17975] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4059: comm syz.2.2532: Allocating blocks 41-42 which overlap fs metadata [ 1451.173771][T17975] Quota error (device loop2): write_blk: dquota write failed [ 1451.181227][T17975] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1451.191534][T17975] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.2532: Failed to acquire dquot type 0 [ 1451.203402][T17975] EXT4-fs error (device loop2): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1451.217882][T17975] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #12: comm syz.2.2532: corrupted inode contents [ 1451.232917][T17975] EXT4-fs error (device loop2): ext4_dirty_inode:6143: inode #12: comm syz.2.2532: mark_inode_dirty error [ 1451.244522][T17975] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #12: comm syz.2.2532: corrupted inode contents [ 1451.256667][T17975] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.2532: mark_inode_dirty error [ 1451.268154][T17975] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #12: comm syz.2.2532: corrupted inode contents [ 1451.334966][T17975] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 1451.343792][T17975] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #12: comm syz.2.2532: corrupted inode contents [ 1451.358052][T17975] EXT4-fs error (device loop2): ext4_truncate:4301: inode #12: comm syz.2.2532: mark_inode_dirty error [ 1451.380215][T17975] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 1451.400757][T17975] EXT4-fs (loop2): 1 truncate cleaned up [ 1451.406840][T17975] EXT4-fs (loop2): pa ffff88805c164000: logic 1, phys. 41, len 23 [ 1451.415441][T17975] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5393: group 0, free 22, pa_free 23 [ 1451.426363][T17975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1451.550241][T13832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1453.487438][T18008] loop2: detected capacity change from 0 to 1024 [ 1453.598166][T18010] loop4: detected capacity change from 0 to 2048 [ 1453.709470][T18010] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1455.617846][T18038] loop1: detected capacity change from 0 to 2048 [ 1457.034611][T18038] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1463.464701][T18121] loop4: detected capacity change from 0 to 2048 [ 1463.548019][T18121] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1467.519470][T18166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2566'. [ 1467.564609][T18166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2566'. [ 1467.678908][T18169] loop2: detected capacity change from 0 to 2048 [ 1467.730057][T18169] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1467.890609][ T23] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1468.102945][ T23] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 1468.149184][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1468.196948][ T23] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1468.233573][ T23] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1468.242949][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.293157][ T23] usb 5-1: config 0 descriptor?? [ 1468.326793][ T23] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1468.409514][ T23] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 1468.612364][ T23] usb 5-1: USB disconnect, device number 17 [ 1468.903328][T18197] loop2: detected capacity change from 0 to 512 [ 1469.526354][T18200] loop1: detected capacity change from 0 to 512 [ 1470.075731][T18200] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1470.117388][T18200] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1470.125059][T18200] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4059: comm syz.1.2570: Allocating blocks 41-42 which overlap fs metadata [ 1470.143246][T18200] Quota error (device loop1): write_blk: dquota write failed [ 1470.150728][T18200] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1470.160710][T18200] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.2570: Failed to acquire dquot type 0 [ 1470.172757][T18200] EXT4-fs error (device loop1): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1470.188360][T18200] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #12: comm syz.1.2570: corrupted inode contents [ 1470.204292][T18200] EXT4-fs error (device loop1): ext4_dirty_inode:6143: inode #12: comm syz.1.2570: mark_inode_dirty error [ 1470.217171][T18200] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #12: comm syz.1.2570: corrupted inode contents [ 1470.230920][T18200] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.2570: mark_inode_dirty error [ 1470.248160][T18200] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #12: comm syz.1.2570: corrupted inode contents [ 1470.260399][T18200] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 1470.269386][T18200] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #12: comm syz.1.2570: corrupted inode contents [ 1470.294715][T18200] EXT4-fs error (device loop1): ext4_truncate:4301: inode #12: comm syz.1.2570: mark_inode_dirty error [ 1470.306766][T18200] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 1470.341840][T18200] EXT4-fs (loop1): 1 truncate cleaned up [ 1470.347620][T18200] EXT4-fs (loop1): pa ffff88805c164910: logic 1, phys. 41, len 23 [ 1470.355908][T18200] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5393: group 0, free 22, pa_free 23 [ 1470.366818][T18200] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1470.448863][T18197] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1470.463557][T14778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1470.532861][T18197] ext4 filesystem being mounted at /208/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1470.607550][ T27] audit: type=1800 audit(1777916123.158:292): pid=18197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2569" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1470.683554][ T27] audit: type=1800 audit(1777916123.214:293): pid=18197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2569" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 1471.670304][T13832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1471.691917][T18211] loop4: detected capacity change from 0 to 8192 [ 1471.785288][T18211] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1472.241280][T18230] loop2: detected capacity change from 0 to 2048 [ 1472.354456][T18230] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1472.893306][ T4500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1472.926189][ T4500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1474.852072][T18252] loop2: detected capacity change from 0 to 512 [ 1475.388515][T18252] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1475.415147][T18252] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1475.423371][T18252] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4059: comm syz.2.2580: Allocating blocks 41-42 which overlap fs metadata [ 1475.437360][T18252] Quota error (device loop2): write_blk: dquota write failed [ 1475.446337][T18252] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1475.456540][T18252] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.2580: Failed to acquire dquot type 0 [ 1475.470776][T18252] EXT4-fs error (device loop2): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1475.485373][T18252] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #12: comm syz.2.2580: corrupted inode contents [ 1475.497478][T18252] EXT4-fs error (device loop2): ext4_dirty_inode:6143: inode #12: comm syz.2.2580: mark_inode_dirty error [ 1475.509616][T18252] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #12: comm syz.2.2580: corrupted inode contents [ 1475.521840][T18252] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.2580: mark_inode_dirty error [ 1475.533425][T18252] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #12: comm syz.2.2580: corrupted inode contents [ 1475.546544][T18252] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 1475.555332][T18252] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #12: comm syz.2.2580: corrupted inode contents [ 1475.567626][T18252] EXT4-fs error (device loop2): ext4_truncate:4301: inode #12: comm syz.2.2580: mark_inode_dirty error [ 1475.578959][T18252] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 1475.588320][T18252] EXT4-fs (loop2): 1 truncate cleaned up [ 1475.598144][T18252] EXT4-fs (loop2): pa ffff88805c164cb0: logic 1, phys. 41, len 23 [ 1475.606019][T18252] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5393: group 0, free 22, pa_free 23 [ 1475.617837][T18252] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1475.691421][T13832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1476.264209][T18276] loop4: detected capacity change from 0 to 128 [ 1476.470375][T18281] syz.4.2585: attempt to access beyond end of device [ 1476.470375][T18281] loop4: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 1476.509308][T18276] syz.4.2585: attempt to access beyond end of device [ 1476.509308][T18276] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 1476.545027][T18281] syz.4.2585: attempt to access beyond end of device [ 1476.545027][T18281] loop4: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 1476.575886][T18276] syz.4.2585: attempt to access beyond end of device [ 1476.575886][T18276] loop4: rw=2049, sector=169, nr_sectors = 41 limit=128 [ 1476.619894][T18281] buffer_io_error: 10 callbacks suppressed [ 1476.619909][T18281] Buffer I/O error on dev loop4, logical block 161, lost async page write [ 1477.637442][ T4500] kworker/u4:8: attempt to access beyond end of device [ 1477.637442][ T4500] loop4: rw=1, sector=161, nr_sectors = 1 limit=128 [ 1477.703650][ T4500] Buffer I/O error on dev loop4, logical block 161, lost async page write [ 1479.239814][T18299] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 1480.871462][T18310] loop1: detected capacity change from 0 to 2048 [ 1480.962217][T18310] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1481.180209][T14778] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /163/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 1481.251142][T14778] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 1481.323801][T14778] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /163/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 1481.378262][T14778] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 1481.444944][T14778] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /163/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 1481.492030][T14778] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 1481.569181][T14778] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /163/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 1481.595207][T18324] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1482.319604][T18329] loop4: detected capacity change from 0 to 512 [ 1482.771000][T18329] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1482.790088][T18329] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1482.797617][T18329] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4059: comm syz.4.2591: Allocating blocks 41-42 which overlap fs metadata [ 1482.811678][T18329] Quota error (device loop4): write_blk: dquota write failed [ 1482.819110][T18329] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1482.829049][T18329] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.2591: Failed to acquire dquot type 0 [ 1482.840925][T18329] EXT4-fs error (device loop4): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1482.855411][T18329] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #12: comm syz.4.2591: corrupted inode contents [ 1482.875443][T14778] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 1482.904087][T18329] EXT4-fs error (device loop4): ext4_dirty_inode:6143: inode #12: comm syz.4.2591: mark_inode_dirty error [ 1482.915712][T18329] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #12: comm syz.4.2591: corrupted inode contents [ 1482.927987][T18329] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.2591: mark_inode_dirty error [ 1482.939548][T18329] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #12: comm syz.4.2591: corrupted inode contents [ 1482.954477][T18329] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 1482.964880][T18329] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #12: comm syz.4.2591: corrupted inode contents [ 1482.977104][T18329] EXT4-fs error (device loop4): ext4_truncate:4301: inode #12: comm syz.4.2591: mark_inode_dirty error [ 1482.988422][T18329] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 1482.998473][T18329] EXT4-fs (loop4): 1 truncate cleaned up [ 1483.004285][T18329] EXT4-fs (loop4): pa ffff88805c1640e8: logic 1, phys. 41, len 23 [ 1483.012085][T18329] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5393: group 0, free 22, pa_free 23 [ 1483.023032][T18329] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1483.204785][T14778] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /163/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 1483.229425][T12733] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1483.255073][T14778] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 1484.621693][T18350] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 1486.124219][T14778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1486.198991][ T6879] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1487.296811][ T6879] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1487.564312][ T6879] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1487.760350][ T6879] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1488.152616][T18387] loop4: detected capacity change from 0 to 1024 [ 1488.339393][T18387] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1489.274681][T18392] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1489.335312][ T1142] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 131587 with max blocks 1 with error 28 [ 1489.352294][T18404] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1489.375589][T18404] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1489.385836][T18404] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1489.394239][T18404] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1489.405205][T18404] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1489.413706][T18404] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1489.424350][ T1142] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1489.424350][ T1142] [ 1489.499991][ T1142] EXT4-fs (loop4): Total free blocks count 0 [ 1489.506131][ T1142] EXT4-fs (loop4): Free/Dirty block details [ 1489.512466][ T1142] EXT4-fs (loop4): free_blocks=68451041280 [ 1489.519353][ T1142] EXT4-fs (loop4): dirty_blocks=16 [ 1489.524512][ T1142] EXT4-fs (loop4): Block reservation details [ 1489.530693][ T1142] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 1489.556581][T12733] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1489.577172][T18408] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 1491.623916][T18404] Bluetooth: hci3: command tx timeout [ 1492.259853][T18402] chnl_net:caif_netlink_parms(): no params data found [ 1492.575668][T18432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2611'. [ 1492.801185][T18432] netlink: 'syz.0.2611': attribute type 1 has an invalid length. [ 1493.862797][T18404] Bluetooth: hci3: command tx timeout [ 1494.523559][T18402] bridge0: port 1(bridge_slave_0) entered blocking state [ 1494.548094][T18402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1494.562558][T18402] bridge_slave_0: entered allmulticast mode [ 1494.581294][T18402] bridge_slave_0: entered promiscuous mode [ 1494.689955][T18402] bridge0: port 2(bridge_slave_1) entered blocking state [ 1494.722542][T18402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1494.745718][T18402] bridge_slave_1: entered allmulticast mode [ 1494.759618][T18402] bridge_slave_1: entered promiscuous mode [ 1494.885660][T18402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1495.570437][T18460] loop4: detected capacity change from 0 to 512 [ 1496.073714][T18460] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1496.083262][T18404] Bluetooth: hci3: command tx timeout [ 1496.099484][T18402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1496.109367][T18460] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1496.117955][T18460] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4059: comm syz.4.2618: Allocating blocks 41-42 which overlap fs metadata [ 1496.132897][T18460] Quota error (device loop4): write_blk: dquota write failed [ 1496.140479][T18460] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1496.150461][T18460] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.2618: Failed to acquire dquot type 0 [ 1496.166543][T18460] EXT4-fs error (device loop4): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1496.181021][T18460] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #12: comm syz.4.2618: corrupted inode contents [ 1496.207150][T18460] EXT4-fs error (device loop4): ext4_dirty_inode:6143: inode #12: comm syz.4.2618: mark_inode_dirty error [ 1496.218883][T18460] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #12: comm syz.4.2618: corrupted inode contents [ 1496.231173][T18460] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.2618: mark_inode_dirty error [ 1496.242739][T18460] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #12: comm syz.4.2618: corrupted inode contents [ 1496.254873][T18460] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 1496.263562][T18460] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #12: comm syz.4.2618: corrupted inode contents [ 1496.340352][T18460] EXT4-fs error (device loop4): ext4_truncate:4301: inode #12: comm syz.4.2618: mark_inode_dirty error [ 1496.353594][T18460] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 1496.373069][T18460] EXT4-fs (loop4): 1 truncate cleaned up [ 1496.378787][T18460] EXT4-fs (loop4): pa ffff88805c1642b8: logic 1, phys. 41, len 23 [ 1496.386646][T18460] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5393: group 0, free 22, pa_free 23 [ 1496.397615][T18460] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1496.432397][ T6879] hsr_slave_0: left promiscuous mode [ 1496.452600][ T6879] hsr_slave_1: left promiscuous mode [ 1496.461841][ T6879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1496.469455][ T6879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1496.477288][ T6879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1496.484817][ T6879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1496.497883][T18464] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 1496.509965][ T6879] bridge_slave_1: left allmulticast mode [ 1497.382855][ T6879] bridge_slave_1: left promiscuous mode [ 1497.388772][ T6879] bridge0: port 2(bridge_slave_1) entered disabled state [ 1497.397989][ T6879] bridge_slave_0: left allmulticast mode [ 1497.404565][ T6879] bridge_slave_0: left promiscuous mode [ 1497.410412][ T6879] bridge0: port 1(bridge_slave_0) entered disabled state [ 1497.476023][T12733] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1497.601895][ T6879] veth1_macvtap: left promiscuous mode [ 1497.649322][ T6879] veth0_macvtap: left promiscuous mode [ 1497.654995][ T6879] veth1_vlan: left promiscuous mode [ 1497.688799][ T6879] veth0_vlan: left promiscuous mode [ 1498.316880][T18404] Bluetooth: hci3: command tx timeout [ 1501.032452][T18496] loop2: detected capacity change from 0 to 512 [ 1501.765955][T18496] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1501.778575][T18496] ext4 filesystem being mounted at /223/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1502.085611][T13832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1502.193545][T18501] loop4: detected capacity change from 0 to 128 [ 1503.309435][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1503.315819][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1503.592548][T18512] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 1506.918340][ T6879] team0 (unregistering): Port device team_slave_1 removed [ 1507.178782][ T6879] team0 (unregistering): Port device team_slave_0 removed [ 1507.267848][ T6879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1507.489054][ T6879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1508.571288][T18540] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 1511.330558][ T6879] bond0 (unregistering): Released all slaves [ 1511.599261][T18552] loop4: detected capacity change from 0 to 1024 [ 1511.612376][T18552] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1511.674199][T18402] team0: Port device team_slave_0 added [ 1511.721531][T18555] loop2: detected capacity change from 0 to 2048 [ 1511.733807][T18552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1511.776399][T18402] team0: Port device team_slave_1 added [ 1511.793866][T18555] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1511.911097][T18402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1511.966633][T18402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1512.017777][T18402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1512.031781][T12733] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1512.053867][T18402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1512.060841][T18402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1512.158310][T18402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1512.409956][T18402] hsr_slave_0: entered promiscuous mode [ 1512.520581][T18402] hsr_slave_1: entered promiscuous mode [ 1513.826893][T18402] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1513.837541][T18402] Cannot create hsr debugfs directory [ 1516.925766][T18599] loop4: detected capacity change from 0 to 512 [ 1517.415007][T18599] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1517.428439][T18599] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1517.437501][T18599] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4059: comm syz.4.2646: Allocating blocks 41-42 which overlap fs metadata [ 1517.452355][T18599] Quota error (device loop4): write_blk: dquota write failed [ 1517.459847][T18599] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1517.469833][T18599] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.2646: Failed to acquire dquot type 0 [ 1517.482762][T18599] EXT4-fs error (device loop4): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1517.497363][T18599] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #12: comm syz.4.2646: corrupted inode contents [ 1517.513461][T18599] EXT4-fs error (device loop4): ext4_dirty_inode:6143: inode #12: comm syz.4.2646: mark_inode_dirty error [ 1517.525232][T18599] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #12: comm syz.4.2646: corrupted inode contents [ 1517.537405][T18599] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.2646: mark_inode_dirty error [ 1517.548977][T18599] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #12: comm syz.4.2646: corrupted inode contents [ 1517.561171][T18599] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 1517.569842][T18599] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #12: comm syz.4.2646: corrupted inode contents [ 1517.582364][T18599] EXT4-fs error (device loop4): ext4_truncate:4301: inode #12: comm syz.4.2646: mark_inode_dirty error [ 1517.599336][T18599] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 1517.609991][T18599] EXT4-fs (loop4): 1 truncate cleaned up [ 1517.615741][T18599] EXT4-fs (loop4): pa ffff88805c1643a0: logic 1, phys. 41, len 23 [ 1517.623750][T18599] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5393: group 0, free 22, pa_free 23 [ 1517.634713][T18599] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1517.864496][T12733] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1519.212239][T18402] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1519.283308][T18402] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1519.333144][T18402] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1519.361273][T18402] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1519.613990][T18630] loop2: detected capacity change from 0 to 128 [ 1519.624733][T18402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1519.655828][T18630] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1519.690709][T18402] 8021q: adding VLAN 0 to HW filter on device team0 [ 1519.715108][T18630] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1519.733365][T13400] bridge0: port 1(bridge_slave_0) entered blocking state [ 1519.740550][T13400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1519.795524][T13400] bridge0: port 2(bridge_slave_1) entered blocking state [ 1519.802713][T13400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1519.830691][T18630] ext2 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1520.083300][T13832] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1521.084432][T18646] loop2: detected capacity change from 0 to 512 [ 1521.264220][T18646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1521.283304][T18646] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1521.434058][T18402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1521.479018][T13832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1523.187209][T18682] 9pnet_fd: Insufficient options for proto=fd [ 1523.328229][T18402] veth0_vlan: entered promiscuous mode [ 1523.380541][T18402] veth1_vlan: entered promiscuous mode [ 1524.268415][T18402] veth0_macvtap: entered promiscuous mode [ 1524.365840][T18402] veth1_macvtap: entered promiscuous mode [ 1524.422781][T18402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1524.455331][T18402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.479451][T18402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1524.500820][T18402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.510697][T18402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1524.554111][T18402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.581202][T18402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1524.607498][T18402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.620260][T18402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1524.660334][T18402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1524.704459][T18402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.714334][T18402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1524.746928][T18402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.756796][T18402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1524.811168][T18402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.830257][T18402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1524.885830][T18402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.921680][T18402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1524.958636][T18402] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.003382][T18402] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.012138][T18402] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.056711][T18402] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.376531][T18696] loop2: detected capacity change from 0 to 2048 [ 1525.408413][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1525.447406][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1525.482006][T18696] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1525.512393][T13400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1525.557883][T13400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1526.370630][T18710] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2603'. [ 1526.395078][T18710] netlink: 43 bytes leftover after parsing attributes in process `syz.9.2603'. [ 1526.405612][T18710] netlink: 'syz.9.2603': attribute type 6 has an invalid length. [ 1526.413857][T18710] netlink: 'syz.9.2603': attribute type 5 has an invalid length. [ 1526.422889][T18710] netlink: 43 bytes leftover after parsing attributes in process `syz.9.2603'. [ 1528.183734][T18729] loop9: detected capacity change from 0 to 512 [ 1528.223993][T18729] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 1528.281074][T18729] EXT4-fs (loop9): 1 truncate cleaned up [ 1528.301189][T18729] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1529.425051][T18402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1531.366994][T14903] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1531.570269][T14903] usb 10-1: Using ep0 maxpacket: 32 [ 1531.590577][T14903] usb 10-1: config 0 has an invalid interface number: 2 but max is 0 [ 1531.605722][T14903] usb 10-1: config 0 has no interface number 0 [ 1531.612112][T14903] usb 10-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 49455, setting to 1024 [ 1531.635079][T14903] usb 10-1: config 0 interface 2 has no altsetting 0 [ 1531.647170][T14903] usb 10-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1531.656818][T14903] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1531.664913][T14903] usb 10-1: Product: syz [ 1531.680204][T14903] usb 10-1: Manufacturer: syz [ 1531.685917][T14903] usb 10-1: SerialNumber: syz [ 1531.710215][T14903] usb 10-1: config 0 descriptor?? [ 1531.946394][T14903] usb 10-1: Quirk or no altest; falling back to MIDI 1.0 [ 1532.077215][T14903] usb 10-1: USB disconnect, device number 2 [ 1532.239781][T18808] udevd[18808]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1532.515800][T18819] loop2: detected capacity change from 0 to 128 [ 1532.836465][T18830] loop2: detected capacity change from 0 to 256 [ 1532.932136][T18830] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x8277d129, utbl_chksum : 0xe619d30d) [ 1533.791377][ T27] audit: type=1800 audit(1777916182.231:294): pid=18830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2694" name="file1" dev="loop2" ino=1048698 res=0 errno=0 [ 1534.288009][ T27] audit: type=1800 audit(1777916182.567:295): pid=18842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2694" name="file1" dev="loop2" ino=1048698 res=0 errno=0 [ 1534.503778][T18845] loop9: detected capacity change from 0 to 8 [ 1534.562604][T18849] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2699'. [ 1534.575761][T18845] unable to read xattr id index table [ 1534.604983][T18840] snd_dummy snd_dummy.0: control 1:9:195:ÿÿ :53367 is already present [ 1534.880059][T18857] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2702'. [ 1536.127838][T18893] loop4: detected capacity change from 0 to 512 [ 1536.671883][T18893] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1536.686204][T18893] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1536.694460][T18893] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4059: comm syz.4.2710: Allocating blocks 41-42 which overlap fs metadata [ 1536.708540][T18893] Quota error (device loop4): write_blk: dquota write failed [ 1536.716097][T18893] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1536.726258][T18893] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.2710: Failed to acquire dquot type 0 [ 1536.738216][T18893] EXT4-fs error (device loop4): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1536.752768][T18893] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #12: comm syz.4.2710: corrupted inode contents [ 1536.768178][T18893] EXT4-fs error (device loop4): ext4_dirty_inode:6143: inode #12: comm syz.4.2710: mark_inode_dirty error [ 1536.787264][T18893] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #12: comm syz.4.2710: corrupted inode contents [ 1536.799864][T18893] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.2710: mark_inode_dirty error [ 1536.811501][T18893] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #12: comm syz.4.2710: corrupted inode contents [ 1536.844543][T18893] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 1536.860503][T18893] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #12: comm syz.4.2710: corrupted inode contents [ 1536.872636][T18893] EXT4-fs error (device loop4): ext4_truncate:4301: inode #12: comm syz.4.2710: mark_inode_dirty error [ 1536.884137][T18893] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 1536.895029][T18893] EXT4-fs (loop4): 1 truncate cleaned up [ 1536.900785][T18893] EXT4-fs (loop4): pa ffff88805c164ae0: logic 1, phys. 41, len 23 [ 1536.908657][T18893] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5393: group 0, free 22, pa_free 23 [ 1536.919509][T18893] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1538.246905][T18404] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1538.257324][T18404] Bluetooth: hci3: Injecting HCI hardware error event [ 1538.266691][ T5777] Bluetooth: hci3: hardware error 0x00 [ 1538.324137][T12733] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1538.474343][T18903] loop9: detected capacity change from 0 to 256 [ 1538.505187][T18903] FAT-fs (loop9): Directory bread(block 1285) failed [ 1538.521992][T18903] FAT-fs (loop9): Directory bread(block 1286) failed [ 1538.528744][T18903] FAT-fs (loop9): Directory bread(block 1287) failed [ 1538.546215][T18903] FAT-fs (loop9): Directory bread(block 1288) failed [ 1538.586743][T18903] FAT-fs (loop9): Directory bread(block 1285) failed [ 1538.593504][T18903] FAT-fs (loop9): Directory bread(block 1286) failed [ 1538.631776][T18903] FAT-fs (loop9): Directory bread(block 1287) failed [ 1538.638545][T18903] FAT-fs (loop9): Directory bread(block 1288) failed [ 1538.669018][T18903] FAT-fs (loop9): Directory bread(block 1285) failed [ 1538.713494][T18903] FAT-fs (loop9): Directory bread(block 1286) failed [ 1538.984719][T18910] loop9: detected capacity change from 0 to 512 [ 1539.064025][T18910] EXT4-fs: Ignoring removed mblk_io_submit option [ 1539.103364][T18910] EXT4-fs: Ignoring removed bh option [ 1539.130506][T18910] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1539.152991][T18910] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1539.193773][T18910] EXT4-fs (loop9): 1 truncate cleaned up [ 1539.208068][T18910] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1540.374818][T18402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1540.650648][ T5777] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1545.748643][T18988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2720'. [ 1548.086572][T19020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2740'. [ 1553.709448][T19093] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 1559.731607][T19147] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 1568.511087][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1568.518482][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1572.594431][T19235] loop4: detected capacity change from 0 to 2048 [ 1573.530006][T19235] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1574.501103][T19255] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 1576.345120][T19263] loop4: detected capacity change from 0 to 8 [ 1576.383005][T19263] SQUASHFS error: Unable to read inode 0x11f [ 1577.976756][T18693] blk_print_req_error: 10 callbacks suppressed [ 1577.976775][T18693] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1579.620461][T19274] loop2: detected capacity change from 0 to 2048 [ 1580.592123][T19274] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1580.628923][T19274] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1580.639341][T19274] UDF-fs: Scanning with blocksize 512 failed [ 1580.798437][T19274] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1582.074037][T19317] loop2: detected capacity change from 0 to 2048 [ 1582.199006][T19317] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1584.553431][T19345] loop4: detected capacity change from 0 to 256 [ 1584.614280][T19345] exFAT-fs (loop4): error, The cluster chain has a loop [ 1584.658630][T19345] exFAT-fs (loop4): Filesystem has been set read-only [ 1584.681913][T19345] exFAT-fs (loop4): failed to count the number of clusters in root [ 1584.721745][T19345] exFAT-fs (loop4): failed to recognize exfat type [ 1585.967400][T19345] usb usb8: usbfs: process 19345 (syz.4.2803) did not claim interface 0 before use [ 1587.196322][ T787] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1587.438777][ T787] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1588.286691][ T787] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1588.322168][ T787] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1588.340098][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1588.349187][ T787] usb 3-1: SerialNumber: syz [ 1588.634448][ T787] usb 3-1: 0:2 : does not exist [ 1588.729407][ T787] usb 3-1: USB disconnect, device number 8 [ 1588.788224][T18800] udevd[18800]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1591.012163][T19394] netlink: 'syz.2.2810': attribute type 12 has an invalid length. [ 1591.903303][T19398] loop4: detected capacity change from 0 to 2048 [ 1591.953078][T19398] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1600.687830][T19457] loop2: detected capacity change from 0 to 2048 [ 1601.541297][T19457] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1607.680017][T19518] loop2: detected capacity change from 0 to 512 [ 1607.774623][T18800] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1609.287551][T19528] loop9: detected capacity change from 0 to 1024 [ 1612.126547][T19563] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 1613.931707][T19569] netlink: 'syz.4.2848': attribute type 12 has an invalid length. [ 1614.980517][T19574] loop2: detected capacity change from 0 to 2048 [ 1615.083993][T19574] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1617.260102][T19606] loop2: detected capacity change from 0 to 8 [ 1617.692204][T19606] unable to read xattr id index table [ 1619.802168][T19622] netlink: 'syz.9.2856': attribute type 8 has an invalid length. [ 1619.963173][ T27] audit: type=1326 audit(1777916262.809:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19619 comm="syz.2.2857" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdcab39cdd9 code=0x0 [ 1627.457240][T19690] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1633.723347][T19726] loop2: detected capacity change from 0 to 128 [ 1633.764808][T19726] FAT-fs (loop2): FAT read failed (blocknr 187) [ 1634.142583][T19730] loop2: detected capacity change from 0 to 8 [ 1634.175870][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1634.182665][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1634.249873][T19730] SQUASHFS error: Failed to read block 0x4de: -5 [ 1634.310149][T19730] SQUASHFS error: Failed to read block 0x4de: -5 [ 1634.328361][ T27] audit: type=1800 audit(1777916276.226:297): pid=19730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2882" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 1638.192241][T19745] syz.4.2886: attempt to access beyond end of device [ 1638.192241][T19745] loop9: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1638.205444][T19745] SQUASHFS error: Failed to read block 0x0: -5 [ 1638.831179][T19756] loop2: detected capacity change from 0 to 1024 [ 1638.875618][T19759] netlink: 'syz.9.2881': attribute type 4 has an invalid length. [ 1642.682692][T19795] loop9: detected capacity change from 0 to 2048 [ 1642.726781][T19795] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1645.382908][T19836] loop4: detected capacity change from 0 to 1024 [ 1647.076794][T19849] loop2: detected capacity change from 0 to 2048 [ 1647.159109][T19849] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1649.760243][T19867] loop2: detected capacity change from 0 to 2048 [ 1649.818489][T19867] loop2: p1 < > p4 [ 1649.845654][T19867] loop2: p4 size 8388608 extends beyond EOD, truncated [ 1649.909499][ T5138] loop2: p1 < > p4 [ 1649.936273][ T5138] loop2: p4 size 8388608 extends beyond EOD, truncated [ 1650.365634][T18693] udevd[18693]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 1650.408422][T18800] udevd[18800]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1650.482529][T18800] udevd[18800]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1650.508233][T18693] udevd[18693]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 1651.921550][T19881] loop2: detected capacity change from 0 to 1024 [ 1652.469953][T19888] syz.9.2910: attempt to access beyond end of device [ 1652.469953][T19888] loop19: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1652.483367][T19888] SQUASHFS error: Failed to read block 0x0: -5 [ 1653.195559][T19895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2916'. [ 1654.721909][T19909] loop2: detected capacity change from 0 to 2048 [ 1654.803601][T19909] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1654.924531][ T27] audit: type=1804 audit(1777916295.497:298): pid=19909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2921" name="/newroot/298/bus/file1" dev="loop2" ino=1346 res=1 errno=0 [ 1660.505361][T19947] loop2: detected capacity change from 0 to 1024 [ 1663.319585][T19977] loop4: detected capacity change from 0 to 512 [ 1665.356254][ T9362] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 1666.437220][ T9362] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1666.453858][ T9362] usb 3-1: not running at top speed; connect to a high speed hub [ 1666.486944][ T9362] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1666.501827][ T9362] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1666.545735][ T9362] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1666.564724][ T9362] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1666.572752][ T9362] usb 3-1: Product: syz [ 1666.600995][ T9362] usb 3-1: Manufacturer: syz [ 1666.605655][ T9362] usb 3-1: SerialNumber: syz [ 1666.808857][T20005] loop4: detected capacity change from 0 to 1024 [ 1666.883559][ T9362] usb 3-1: 0:2 : does not exist [ 1666.969308][ T9362] usb 3-1: USB disconnect, device number 9 [ 1667.034927][T18800] udevd[18800]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1668.515182][T20031] loop9: detected capacity change from 0 to 512 [ 1671.071876][T20044] loop2: detected capacity change from 0 to 128 [ 1671.350639][T20049] loop2: detected capacity change from 0 to 512 [ 1671.379767][T20049] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 1676.203734][T20090] loop9: detected capacity change from 0 to 512 [ 1676.358169][T18800] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1680.241596][T20113] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2959'. [ 1683.513064][ T8] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1683.719940][ T8] usb 10-1: Using ep0 maxpacket: 8 [ 1683.733428][ T8] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1683.757264][ T8] usb 10-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1683.775455][ T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1683.787401][ T8] usb 10-1: config 0 descriptor?? [ 1684.021585][ T8] usb 10-1: USB disconnect, device number 3 [ 1685.905087][T20163] loop2: detected capacity change from 0 to 512 [ 1686.019482][T20163] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1686.057219][T20163] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1686.091449][T20163] EXT4-fs (loop2): 1 truncate cleaned up [ 1686.109739][T20163] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1686.252523][T20163] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2967'. [ 1686.360035][T13832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1686.923996][T20179] loop2: detected capacity change from 0 to 2048 [ 1687.019890][T20179] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1692.415166][ T787] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1692.960852][ T787] usb 10-1: Using ep0 maxpacket: 8 [ 1692.994197][ T787] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1693.034712][ T787] usb 10-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1693.065253][ T787] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1693.108665][ T787] usb 10-1: config 0 descriptor?? [ 1693.355895][ T787] usb 10-1: USB disconnect, device number 4 [ 1694.120278][T20247] loop2: detected capacity change from 0 to 1024 [ 1699.902222][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1699.909865][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1701.433596][T20335] loop4: detected capacity change from 0 to 2048 [ 1701.565842][T20335] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1702.473348][T20348] loop9: detected capacity change from 0 to 1764 [ 1703.407852][T20359] loop4: detected capacity change from 0 to 512 [ 1703.881320][T20359] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1703.976640][T20359] ext4 filesystem being mounted at /358/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1704.030454][T20359] EXT4-fs error (device loop4): ext4_group_add:1745: inode #7: comm syz.4.2999: iget: checksum invalid [ 1704.096566][T20359] EXT4-fs warning (device loop4): ext4_group_add:1747: Error opening resize inode [ 1704.294595][T12733] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1719.599898][T20486] syz.9.3020: attempt to access beyond end of device [ 1719.599898][T20486] loop19: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1719.613707][T20486] SQUASHFS error: Failed to read block 0x0: -5 [ 1722.204952][T20503] usb usb5: usbfs: process 20503 (syz.2.3024) did not claim interface 0 before use [ 1722.861075][T20500] loop4: detected capacity change from 0 to 2048 [ 1723.063123][T20500] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1724.201428][T20516] loop4: detected capacity change from 0 to 512 [ 1724.459660][T18800] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1730.641303][T20566] loop4: detected capacity change from 0 to 2048 [ 1730.668182][T20566] UDF-fs: bad mount option "umask=00000000000000040003W§ÿóV„X"Žµ™2000" or missing value [ 1736.277644][T20612] loop9: detected capacity change from 0 to 128 [ 1736.365181][T20557] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1736.404352][ T23] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1736.581432][T20621] loop9: detected capacity change from 0 to 512 [ 1736.629270][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 1736.641208][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1736.661377][ T23] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1736.683229][T20621] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1736.697424][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1737.485359][T20627] syz.0.3042: attempt to access beyond end of device [ 1737.485359][T20627] loop1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1737.498452][T20627] SQUASHFS error: Failed to read block 0x0: -5 [ 1737.571499][ T23] usb 3-1: config 0 descriptor?? [ 1737.624950][T18402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1737.708284][ T27] audit: type=1326 audit(1777916372.877:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20631 comm="syz.4.3047" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4604f9cdd9 code=0x7ffc0000 [ 1737.805444][ T27] audit: type=1326 audit(1777916372.896:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20631 comm="syz.4.3047" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4604f9cdd9 code=0x7ffc0000 [ 1737.845959][ T787] usb 3-1: USB disconnect, device number 10 [ 1738.768115][ T27] audit: type=1326 audit(1777916372.943:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20631 comm="syz.4.3047" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4604f9cdd9 code=0x7ffc0000 [ 1738.835721][ T27] audit: type=1326 audit(1777916372.943:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20631 comm="syz.4.3047" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4604f9cdd9 code=0x7ffc0000 [ 1738.960419][ T27] audit: type=1326 audit(1777916372.943:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20631 comm="syz.4.3047" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f4604f9cdd9 code=0x7ffc0000 [ 1739.060833][ T27] audit: type=1326 audit(1777916372.943:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20631 comm="syz.4.3047" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4604f9cdd9 code=0x7ffc0000 [ 1739.152921][ T27] audit: type=1326 audit(1777916372.943:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20631 comm="syz.4.3047" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4604f9cdd9 code=0x7ffc0000 [ 1739.239085][ T27] audit: type=1326 audit(1777916372.943:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20631 comm="syz.4.3047" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4604f9cdd9 code=0x7ffc0000 [ 1739.334686][ T27] audit: type=1326 audit(1777916372.943:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20631 comm="syz.4.3047" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4604f9cdd9 code=0x7ffc0000 [ 1739.420831][ T27] audit: type=1326 audit(1777916372.943:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20631 comm="syz.4.3047" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f4604f9cdd9 code=0x7ffc0000 [ 1744.854650][T14692] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1745.838903][T14692] usb 3-1: config 0 has an invalid interface number: 199 but max is 1 [ 1745.863798][T14692] usb 3-1: config 0 has no interface number 1 [ 1745.877113][T14692] usb 3-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1745.891460][T14692] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1745.903928][T14692] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 1745.914023][T14692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1745.922416][T14692] usb 3-1: SerialNumber: syz [ 1745.930410][T14692] usb 3-1: config 0 descriptor?? [ 1745.992560][T14692] usb 3-1: Found UVC 0.00 device (0002:0000) [ 1746.030021][T14692] usb 3-1: No valid video chain found. [ 1746.227892][T14692] usb 3-1: USB disconnect, device number 11 [ 1746.535021][T20732] loop9: detected capacity change from 0 to 512 [ 1747.199201][T20732] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1747.270891][T20732] EXT4-fs error (device loop9): ext4_orphan_get:1404: inode #15: comm syz.9.3068: casefold flag without casefold feature [ 1747.284092][T20732] EXT4-fs error (device loop9): ext4_orphan_get:1409: comm syz.9.3068: couldn't read orphan inode 15 (err -117) [ 1747.298198][T20732] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1747.428017][T18402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1748.721930][ T5777] Bluetooth: hci0: unexpected event for opcode 0x2043 [ 1749.200026][T20756] loop2: detected capacity change from 0 to 2048 [ 1749.228632][T20756] UDF-fs: bad mount option "umask=00000000000000040003W§ÿóV„X"Žµ™2000" or missing value [ 1750.752053][T20767] loop4: detected capacity change from 0 to 1024 [ 1753.925655][T20797] batadv_slave_0: entered promiscuous mode [ 1753.946043][T20796] batadv_slave_0: left promiscuous mode [ 1756.056276][T20809] loop4: detected capacity change from 0 to 2048 [ 1756.072337][T20809] UDF-fs: bad mount option "umask=00000000000000040003W§ÿóV„X"Žµ™2000" or missing value [ 1760.313407][T20839] loop9: detected capacity change from 0 to 512 [ 1762.185047][T20853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3092'. [ 1762.226757][T20852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1764.670048][ T5777] Bluetooth: hci2: unexpected event for opcode 0x2043 [ 1765.558525][T20878] loop9: detected capacity change from 0 to 512 [ 1765.609957][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1765.625373][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1765.710282][T20878] EXT4-fs error (device loop9): ext4_validate_block_bitmap:430: comm syz.9.3094: bg 0: block 5: invalid block bitmap [ 1766.994352][T20878] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1767.111600][T20878] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.3094: invalid indirect mapped block 3 (level 2) [ 1767.207277][T20878] EXT4-fs (loop9): 1 orphan inode deleted [ 1767.236334][T20878] EXT4-fs (loop9): 1 truncate cleaned up [ 1767.282459][T20878] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1767.360247][T20878] EXT4-fs error (device loop9): ext4_check_dx_root:2266: inode #2: comm syz.9.3094: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 1767.543635][T18402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1770.576759][T20929] loop2: detected capacity change from 0 to 512 [ 1770.665756][T20557] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1777.576363][T20975] loop9: detected capacity change from 0 to 512 [ 1777.894631][T20975] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1778.041415][T20975] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1779.554106][T20989] EXT4-fs warning (device loop9): ext4_empty_dir:3156: inode #12: comm syz.9.3113: directory missing '..' [ 1779.929779][T18402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1786.431111][T21048] loop2: detected capacity change from 0 to 2048 [ 1786.581439][T21048] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1789.382209][T21074] loop2: detected capacity change from 0 to 256 [ 1789.420524][T21074] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1789.463046][T21074] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 1789.618545][T21074] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1804.517137][T21201] loop2: detected capacity change from 0 to 512 [ 1804.654972][T21201] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1804.682405][T21201] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1804.821814][T21201] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 1804.885782][T21201] System zones: 1-12 [ 1804.939696][T21201] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1805.059812][T21201] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.3144: invalid indirect mapped block 2 (level 2) [ 1805.669780][T21201] EXT4-fs (loop2): Remounting filesystem read-only [ 1805.852643][T21201] EXT4-fs (loop2): 1 truncate cleaned up [ 1805.903646][T21201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 1806.126621][T21216] bridge: RTM_NEWNEIGH with invalid ether address [ 1806.597493][T21201] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.3144: error -117 reading directory block [ 1806.739032][T21226] loop9: detected capacity change from 0 to 2048 [ 1806.804426][T21226] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1806.845953][T13832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1807.489038][T21239] loop2: detected capacity change from 0 to 256 [ 1807.603138][T21239] exfat: Deprecated parameter 'utf8' [ 1807.715227][T21239] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1809.058526][T21256] loop2: detected capacity change from 0 to 512 [ 1816.631927][T21307] loop4: detected capacity change from 0 to 512 [ 1828.901517][T21414] input: syz1 as /devices/virtual/input/input16 [ 1830.407224][T21429] loop2: detected capacity change from 0 to 2048 [ 1830.435173][T21429] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1831.343666][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1831.366722][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1837.278285][T10739] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1837.527154][T10739] usb 10-1: Using ep0 maxpacket: 8 [ 1838.475845][T10739] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1838.532502][T10739] usb 10-1: can't read configurations, error -71 [ 1841.030513][T21509] loop2: detected capacity change from 0 to 512 [ 1841.112652][T21509] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1841.256142][T21509] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.3192: bad orphan inode 131083 [ 1841.325952][T21509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1841.694776][T13832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1843.277979][T21534] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1846.992434][T10739] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1847.270482][T10739] usb 3-1: Using ep0 maxpacket: 8 [ 1847.287594][T10739] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1847.341872][T10739] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1847.409508][T10739] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1847.448773][T10739] usb 3-1: config 0 descriptor?? [ 1847.722352][T10739] usb 3-1: USB disconnect, device number 12 [ 1848.998081][T21598] binder: 21597:21598 ioctl c00c620f 0 returned -14 [ 1852.957988][T14692] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1852.998978][T14692] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1854.623575][T21648] loop9: detected capacity change from 0 to 512 [ 1854.829976][T21477] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1857.673328][T21389] syz.0.3171 (21389) used greatest stack depth: 18632 bytes left [ 1858.504660][T21667] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1858.514117][T21667] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1858.523780][T21667] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1858.531932][T21667] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1858.547291][T21667] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1858.618307][T21667] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1860.708987][T21666] chnl_net:caif_netlink_parms(): no params data found [ 1860.821624][ T5777] Bluetooth: hci4: command tx timeout [ 1861.073743][ T6879] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1863.046024][ T5777] Bluetooth: hci4: command tx timeout [ 1863.068783][ T6879] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1863.217689][T21666] bridge0: port 1(bridge_slave_0) entered blocking state [ 1863.224898][T21666] bridge0: port 1(bridge_slave_0) entered disabled state [ 1863.268158][T21666] bridge_slave_0: entered allmulticast mode [ 1863.301905][T21666] bridge_slave_0: entered promiscuous mode [ 1863.358757][T21666] bridge0: port 2(bridge_slave_1) entered blocking state [ 1863.365924][T21666] bridge0: port 2(bridge_slave_1) entered disabled state [ 1863.431137][T21666] bridge_slave_1: entered allmulticast mode [ 1863.443451][T21666] bridge_slave_1: entered promiscuous mode [ 1863.458615][T21709] loop4: detected capacity change from 0 to 2048 [ 1863.541710][T21709] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1863.627091][ T6879] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1864.346263][ T6879] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1864.453219][T21666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1864.516586][T21666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1865.673133][ T5777] Bluetooth: hci4: command tx timeout [ 1865.790037][T21666] team0: Port device team_slave_0 added [ 1865.838841][T21666] team0: Port device team_slave_1 added [ 1867.163028][T14692] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1867.178927][T21666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1867.207039][T21666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1867.259881][T21666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1867.308467][T21666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1867.335107][T21666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1867.372942][T14692] usb 3-1: Using ep0 maxpacket: 8 [ 1867.386287][T14692] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1867.397451][T21666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1867.419583][T14692] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1867.439772][T14692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1867.477899][T14692] usb 3-1: config 0 descriptor?? [ 1867.494443][T21740] loop9: detected capacity change from 0 to 4096 [ 1867.524627][T21740] EXT4-fs (loop9): unsupported descriptor size 1088 [ 1867.705572][T14692] usb 3-1: USB disconnect, device number 13 [ 1867.838990][ T5777] Bluetooth: hci4: command tx timeout [ 1867.850559][T21666] hsr_slave_0: entered promiscuous mode [ 1867.857290][T21666] hsr_slave_1: entered promiscuous mode [ 1867.880499][T21666] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1867.888105][T21666] Cannot create hsr debugfs directory [ 1870.963918][T21773] loop4: detected capacity change from 0 to 512 [ 1871.024758][T21477] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1875.210564][T21799] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[21800] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[21799] [ 1876.262013][ T6879] hsr_slave_0: left promiscuous mode [ 1876.287937][ T6879] hsr_slave_1: left promiscuous mode [ 1876.306650][ T6879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1876.433637][ T6879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1876.486908][ T6879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1876.542705][ T6879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1876.642093][ T6879] bridge_slave_1: left allmulticast mode [ 1876.650306][ T6879] bridge_slave_1: left promiscuous mode [ 1876.657010][ T6879] bridge0: port 2(bridge_slave_1) entered disabled state [ 1876.704491][ T6879] bridge_slave_0: left allmulticast mode [ 1876.710564][ T6879] bridge_slave_0: left promiscuous mode [ 1876.761495][ T6879] bridge0: port 1(bridge_slave_0) entered disabled state [ 1877.363606][ T6879] veth1_macvtap: left promiscuous mode [ 1877.375449][ T6879] veth0_macvtap: left promiscuous mode [ 1877.401989][T21816] loop9: detected capacity change from 0 to 2048 [ 1877.404890][ T6879] veth1_vlan: left promiscuous mode [ 1877.412959][T21818] loop2: detected capacity change from 0 to 1024 [ 1877.420191][ T6879] veth0_vlan: left promiscuous mode [ 1877.551950][T21816] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1877.623681][T21816] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1877.803397][T18402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1877.934328][T21818] hfsplus: inconsistency in B*Tree (1,0,1,0,2) [ 1877.940542][T21818] hfsplus: xattr search failed [ 1880.289816][T21836] loop9: detected capacity change from 0 to 512 [ 1880.353002][T21477] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1882.424835][ T6879] team0 (unregistering): Port device team_slave_1 removed [ 1882.622029][ T6879] team0 (unregistering): Port device team_slave_0 removed [ 1882.798342][ T6879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1882.978534][ T6879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1883.625306][ T6879] bond0 (unregistering): Released all slaves [ 1885.072219][T21860] loop2: detected capacity change from 0 to 512 [ 1885.094347][T21666] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1885.131263][T21666] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1885.145561][T21477] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1886.382018][ T5777] Bluetooth: hci4: command 0x0405 tx timeout [ 1886.459816][T21666] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1886.493221][T21666] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1886.808724][T21666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1886.855325][T21666] 8021q: adding VLAN 0 to HW filter on device team0 [ 1886.901142][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 1886.908341][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1886.941000][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 1886.948176][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1887.567534][T21666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1887.605383][T21873] loop4: detected capacity change from 0 to 256 [ 1887.656543][T21873] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1888.416091][T21666] veth0_vlan: entered promiscuous mode [ 1888.442779][T21666] veth1_vlan: entered promiscuous mode [ 1888.543987][T21666] veth0_macvtap: entered promiscuous mode [ 1888.579079][T21666] veth1_macvtap: entered promiscuous mode [ 1888.652507][T21666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1888.680263][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 1888.680278][ T27] audit: type=1800 audit(1777916514.053:312): pid=21873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3251" name="file1" dev="loop4" ino=1048728 res=0 errno=0 [ 1888.686500][T21666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1888.686521][T21666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1888.686535][T21666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1888.686559][T21666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1888.686571][T21666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1888.686586][T21666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1888.801498][ T27] audit: type=1800 audit(1777916514.146:313): pid=21878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3251" name="file1" dev="loop4" ino=1048728 res=0 errno=0 [ 1888.882920][T21666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1888.895756][T21666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1889.726809][T21666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1889.737501][T21666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1889.761963][T21666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1889.795207][T21666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1889.837355][T21666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1889.847848][T21666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1889.885042][T21666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1889.896708][T21666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1889.924405][T21666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1889.981457][T21666] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1890.061670][T21666] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1890.087972][T21666] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1890.105282][T21666] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1890.408109][T13416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1890.453055][T13416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1890.503955][T13416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1890.520326][T13416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1894.735799][ T9368] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1896.147483][ T9368] usb 3-1: Using ep0 maxpacket: 8 [ 1896.158876][ T9368] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1896.190541][ T9368] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1896.198564][T21969] loop7: detected capacity change from 0 to 256 [ 1896.199598][ T9368] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1896.235740][ T9368] usb 3-1: config 0 descriptor?? [ 1896.348148][T21969] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1896.478044][ T9368] usb 3-1: USB disconnect, device number 14 [ 1897.976237][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1897.982619][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1898.405851][T21995] bridge0: port 1(bridge_slave_0) entered disabled state [ 1900.077624][T22009] loop9: detected capacity change from 0 to 512 [ 1900.184844][T22009] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1900.224079][T22009] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1900.484439][T18402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1905.390267][T22061] loop9: detected capacity change from 0 to 2048 [ 1905.432720][T22061] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1907.422501][T22078] loop4: detected capacity change from 0 to 2048 [ 1908.703878][T22078] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1917.537154][T22183] loop9: detected capacity change from 0 to 2048 [ 1917.599729][T22183] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1921.399475][T22222] loop4: detected capacity change from 0 to 2048 [ 1921.463721][T22222] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1927.068794][T22258] netlink: 'syz.7.3329': attribute type 17 has an invalid length. [ 1927.092648][T22258] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3329'. [ 1927.150275][T22258] bridge0: port 2(bridge_slave_1) entered disabled state [ 1927.158034][T22258] bridge0: port 1(bridge_slave_0) entered disabled state [ 1927.665463][T22270] loop2: detected capacity change from 0 to 16 [ 1927.709717][T22270] erofs: (device loop2): mounted with root inode @ nid 36. [ 1928.772894][T22277] 9pnet_fd: Insufficient options for proto=fd [ 1929.165063][T22283] loop2: detected capacity change from 0 to 1024 [ 1929.265711][T22283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1929.307091][T22293] loop4: detected capacity change from 0 to 512 [ 1929.329323][T22292] loop9: detected capacity change from 0 to 2048 [ 1929.394238][T13832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1929.422902][T21478] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1929.427514][T22292] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1937.253183][T22370] loop4: detected capacity change from 0 to 512 [ 1937.362057][T22370] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1937.394717][T22370] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1937.407375][T22370] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1937.415834][T22370] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 1937.486549][T22370] EXT4-fs (loop4): 1 truncate cleaned up [ 1937.504562][T22370] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1937.884946][T12733] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1946.307170][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1947.249070][T14692] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1948.562628][ T23] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1948.587685][T14692] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1948.597056][T14692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1948.612579][T14692] usb 3-1: config 0 descriptor?? [ 1948.674889][T14692] cp210x 3-1:0.0: cp210x converter detected [ 1948.789152][ T23] usb 10-1: Using ep0 maxpacket: 8 [ 1948.796416][ T23] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 1948.825748][ T23] usb 10-1: config 179 has no interface number 0 [ 1948.848774][ T23] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1948.861708][ T23] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1948.899815][ T23] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1948.941529][ T23] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1949.056558][ T23] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1949.092470][ T23] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1949.128356][T14692] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1949.131779][ T23] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1949.176047][T14692] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1949.188067][T22452] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1949.364660][T14692] usb 3-1: USB disconnect, device number 15 [ 1949.393011][T14692] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1949.436778][T14692] cp210x 3-1:0.0: device disconnected [ 1949.512109][ T23] input: Generic X-Box pad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:179.65/input/input17 [ 1949.728969][T22452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1949.766439][T22452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1950.116633][ T23] usb 10-1: USB disconnect, device number 7 [ 1950.116698][ C1] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1950.116745][ C1] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1952.534558][T22510] binder: 22508:22510 ioctl c0306201 2000000003c0 returned -14 [ 1955.118584][ T27] audit: type=1326 audit(1777916576.174:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22535 comm="syz.7.3381" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75efb9cdd9 code=0x7ffc0000 [ 1955.163493][ T27] audit: type=1326 audit(1777916576.202:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22535 comm="syz.7.3381" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75efb9cdd9 code=0x7ffc0000 [ 1955.233447][ T27] audit: type=1326 audit(1777916576.202:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22535 comm="syz.7.3381" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75efb9cdd9 code=0x7ffc0000 [ 1955.288958][ T27] audit: type=1326 audit(1777916576.202:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22535 comm="syz.7.3381" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75efb9cdd9 code=0x7ffc0000 [ 1955.395415][ T27] audit: type=1326 audit(1777916576.202:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22535 comm="syz.7.3381" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75efb9cdd9 code=0x7ffc0000 [ 1955.796514][ T27] audit: type=1326 audit(1777916576.202:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22535 comm="syz.7.3381" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75efb9cdd9 code=0x7ffc0000 [ 1955.869515][ T27] audit: type=1326 audit(1777916576.202:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22535 comm="syz.7.3381" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75efb9cdd9 code=0x7ffc0000 [ 1956.016410][ T27] audit: type=1326 audit(1777916576.202:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22535 comm="syz.7.3381" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75efb9cdd9 code=0x7ffc0000 [ 1956.196514][T22553] loop2: detected capacity change from 0 to 2048 [ 1956.273685][T22553] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1963.314319][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1963.321851][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1964.893976][T22623] loop2: detected capacity change from 0 to 512 [ 1964.940730][T22623] EXT4-fs: Ignoring removed orlov option [ 1964.957522][T22623] ext4: Bad value for 'mb_optimize_scan' [ 1965.033422][T21477] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1965.060556][T22626] loop7: detected capacity change from 0 to 512 [ 1965.175355][T22626] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1965.205691][T22631] loop2: detected capacity change from 0 to 4096 [ 1965.293389][T22631] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1965.385222][T22631] EXT4-fs (loop2): shut down requested (1) [ 1965.425550][T21666] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1966.797532][T13832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1970.009269][T22648] loop7: detected capacity change from 0 to 512 [ 1970.043790][T22648] EXT4-fs: Ignoring removed bh option [ 1970.099223][T22648] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 1970.213122][T22648] EXT4-fs error (device loop7): ext4_iget_extra_inode:4739: inode #15: comm syz.7.3402: corrupted in-inode xattr: e_value size too large [ 1970.812708][T22648] EXT4-fs error (device loop7): ext4_orphan_get:1409: comm syz.7.3402: couldn't read orphan inode 15 (err -117) [ 1970.886619][T22648] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1973.647592][T21666] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1997.579763][T22757] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1997.641846][T22756] loop2: detected capacity change from 0 to 1024 [ 1997.699750][T22756] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1997.755553][T22756] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 1997.781908][T22756] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1997.809405][T22762] loop4: detected capacity change from 0 to 512 [ 1997.810989][T22756] EXT4-fs error (device loop2): ext4_get_journal_inode:5820: comm syz.2.3435: inode #1: comm syz.2.3435: iget: illegal inode # [ 1997.842761][T22762] EXT4-fs: Ignoring removed nobh option [ 1997.873396][T22756] EXT4-fs (loop2): no journal found [ 1997.888682][T22762] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1997.901781][T22756] EXT4-fs (loop2): can't get journal size [ 1997.915327][T22756] EXT4-fs (loop2): failed to initialize system zone (-22) [ 1997.922590][T22756] EXT4-fs (loop2): mount failed [ 1997.944377][T22762] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1998.061986][T22762] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1998.492500][T22762] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1998.628804][T22762] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c041e01c, mo2=0180] [ 1998.673271][T22762] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1998.718080][T22762] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.3433: bg 0: block 34: padding at end of block bitmap is not set [ 1998.797618][T22762] Quota error (device loop4): write_blk: dquota write failed [ 1998.821349][T22762] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 1998.831254][T22762] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.3433: Failed to acquire dquot type 1 [ 1998.918001][T22762] EXT4-fs (loop4): 1 truncate cleaned up [ 1998.925638][T22762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1999.222332][T12733] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2010.887096][T22814] loop4: detected capacity change from 0 to 1024 [ 2010.927529][T22814] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 2011.000681][T22814] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 2: comm syz.4.3450: lblock 2 mapped to illegal pblock 2 (length 1) [ 2011.016775][T22815] loop7: detected capacity change from 0 to 512 [ 2011.077628][T22814] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 2011.096979][T22814] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 48: comm syz.4.3450: lblock 0 mapped to illegal pblock 48 (length 1) [ 2011.133894][T22820] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2011.179253][T22814] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 2011.219282][T22814] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.3450: Failed to acquire dquot type 0 [ 2011.668031][T22814] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 2011.790005][T22814] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.3450: mark_inode_dirty error [ 2011.911494][T22814] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 2011.941712][T22814] EXT4-fs (loop4): 1 orphan inode deleted [ 2011.955174][T13395] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 2013.144256][T22814] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2013.189045][T13395] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 2013.228568][T13395] EXT4-fs error (device loop4): ext4_release_dquot:6989: comm kworker/u4:3: Failed to release dquot type 0 [ 2013.464852][T12733] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2013.570139][T13395] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 2013.617740][T13395] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 2013.634359][T13395] EXT4-fs error (device loop4): ext4_release_dquot:6989: comm kworker/u4:3: Failed to release dquot type 0 [ 2013.682491][T12733] EXT4-fs error (device loop4): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 2013.773107][T12733] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 2013.794509][T12733] EXT4-fs error (device loop4): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 2022.497967][T22866] futex_wake_op: syz.9.3467 tries to shift op by -1; fix this program [ 2025.697502][T22875] loop7: detected capacity change from 0 to 2048 [ 2026.019225][T22875] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 2026.256885][T22875] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2027.797989][T22886] loop7: detected capacity change from 0 to 512 [ 2028.191683][T22886] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2028.317983][T22886] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2028.466256][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2028.473327][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2028.617258][T21666] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2029.337521][T22898] loop7: detected capacity change from 0 to 512 [ 2029.536912][T22811] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2035.659374][T22931] loop2: detected capacity change from 0 to 512 [ 2040.153433][T22953] loop2: detected capacity change from 0 to 512 [ 2040.271166][T22811] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2041.992668][T22958] loop7: detected capacity change from 0 to 256 [ 2042.732157][T22958] FAT-fs (loop7): Directory bread(block 64) failed [ 2042.778469][T22958] FAT-fs (loop7): Directory bread(block 65) failed [ 2042.785159][T22958] FAT-fs (loop7): Directory bread(block 66) failed [ 2042.831996][T22958] FAT-fs (loop7): Directory bread(block 67) failed [ 2042.838737][T22958] FAT-fs (loop7): Directory bread(block 68) failed [ 2042.948988][T22964] loop4: detected capacity change from 0 to 1024 [ 2042.949825][T22958] FAT-fs (loop7): Directory bread(block 69) failed [ 2042.981941][T22958] FAT-fs (loop7): Directory bread(block 70) failed [ 2042.991218][T22958] FAT-fs (loop7): Directory bread(block 71) failed [ 2043.028256][T22958] FAT-fs (loop7): Directory bread(block 72) failed [ 2043.057551][T22964] EXT4-fs: Ignoring removed orlov option [ 2043.067354][T22958] FAT-fs (loop7): Directory bread(block 73) failed [ 2043.159769][T22964] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2043.257920][T22958] syz.7.3501: attempt to access beyond end of device [ 2043.257920][T22958] loop7: rw=524288, sector=1768, nr_sectors = 4 limit=256 [ 2043.327925][T22958] syz.7.3501: attempt to access beyond end of device [ 2043.327925][T22958] loop7: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 2043.397009][ T27] audit: type=1800 audit(1777916658.716:322): pid=22958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3501" name="file1" dev="loop7" ino=1048735 res=0 errno=0 [ 2043.434312][T22958] syz.7.3501: attempt to access beyond end of device [ 2043.434312][T22958] loop7: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 2043.475336][T12733] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2043.496053][ T27] audit: type=1800 audit(1777916658.819:323): pid=22958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3501" name="file1" dev="loop7" ino=1048735 res=0 errno=0 [ 2049.047994][T23000] loop2: detected capacity change from 0 to 512 [ 2050.438983][T23000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2050.509685][T23000] ext4 filesystem being mounted at /468/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2050.926059][T13832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2052.977997][T23018] loop2: detected capacity change from 0 to 2048 [ 2053.091895][T23018] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2057.050014][T23046] loop7: detected capacity change from 0 to 512 [ 2057.127842][T23046] EXT4-fs error (device loop7): ext4_orphan_get:1404: inode #15: comm syz.7.3524: iget: bad i_size value: 38620345925642 [ 2057.237991][T23046] EXT4-fs error (device loop7): ext4_orphan_get:1409: comm syz.7.3524: couldn't read orphan inode 15 (err -117) [ 2057.304567][T23046] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2057.406047][T23052] loop2: detected capacity change from 0 to 256 [ 2057.519557][T21666] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2057.549882][T23052] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 2059.218535][T23068] mmap: syz.2.3533 (23068) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 2061.460173][T23087] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3543'. [ 2061.556721][T23087] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2062.717433][T23102] IPv6: NLM_F_CREATE should be specified when creating new route [ 2062.992368][ T9368] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 2063.275329][ T9368] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2063.334608][ T9368] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2063.344402][ T9368] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2063.478772][ T9368] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2063.666215][ T9368] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2063.692626][ T9368] usb 3-1: config 0 descriptor?? [ 2064.546994][ T9368] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 2064.647728][ T9368] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2064.926786][ T9363] usb 3-1: USB disconnect, device number 16 [ 2064.997975][T23119] fido_id[23119]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 2066.714069][T23141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3566'. [ 2067.258877][T23149] loop7: detected capacity change from 0 to 512 [ 2067.308488][T23147] loop4: detected capacity change from 0 to 1024 [ 2067.420925][T22811] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2071.059002][T23196] loop7: detected capacity change from 0 to 512 [ 2071.104317][T23194] loop2: detected capacity change from 0 to 1024 [ 2071.215113][T22811] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2071.454024][T23194] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2072.991262][T13832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2073.674393][T23215] loop2: detected capacity change from 0 to 128 [ 2076.161136][T23222] loop4: detected capacity change from 0 to 512 [ 2076.331977][T22811] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2077.885869][T23226] loop7: detected capacity change from 0 to 512 [ 2078.051198][T22811] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2078.995727][T23235] loop7: detected capacity change from 0 to 164 [ 2079.161321][T22811] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2080.036557][T23251] loop4: detected capacity change from 0 to 512 [ 2080.752774][T22811] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2084.034336][T23271] netlink: 'syz.9.3617': attribute type 1 has an invalid length. [ 2084.196098][T23273] loop2: detected capacity change from 0 to 512 [ 2084.317448][T23278] loop7: detected capacity change from 0 to 512 [ 2084.890774][T22811] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2088.249924][T23306] loop4: detected capacity change from 0 to 512 [ 2088.379670][T22811] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2093.955426][T10739] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 2094.163127][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2094.179700][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2094.409772][T23337] loop7: detected capacity change from 0 to 256 [ 2094.478336][T10739] usb 3-1: Using ep0 maxpacket: 8 [ 2094.503304][T10739] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2094.538500][T23337] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 2094.596668][T10739] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2094.605784][T10739] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2094.612958][T23337] exFAT-fs (loop7): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 2094.736715][T10739] usb 3-1: config 0 descriptor?? [ 2094.922079][T23337] syz.7.3639: attempt to access beyond end of device [ 2094.922079][T23337] loop7: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 2094.960267][ T9364] usb 3-1: USB disconnect, device number 17 [ 2095.100806][T23337] syz.7.3639: attempt to access beyond end of device [ 2095.100806][T23337] loop7: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 2095.249425][T23337] syz.7.3639: attempt to access beyond end of device [ 2095.249425][T23337] loop7: rw=0, sector=280, nr_sectors = 8 limit=256 [ 2096.016220][ T27] audit: type=1800 audit(1777916707.907:324): pid=23337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3639" name="file1" dev="loop7" ino=1048738 res=0 errno=0 [ 2096.634962][T23344] loop7: detected capacity change from 0 to 512 [ 2096.891595][T22811] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2099.910019][T23362] netlink: 'syz.4.3650': attribute type 1 has an invalid length. [ 2104.189130][T23386] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2105.029962][T23395] loop7: detected capacity change from 0 to 512 [ 2106.468461][T22811] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2111.261481][ T27] audit: type=1326 audit(1777916722.175:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23432 comm="syz.7.3672" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75efb9cdd9 code=0x7ffc0000 [ 2111.372687][ T27] audit: type=1326 audit(1777916722.203:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23432 comm="syz.7.3672" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75efb9cdd9 code=0x7ffc0000 [ 2111.470218][ T27] audit: type=1326 audit(1777916722.203:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23432 comm="syz.7.3672" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75efb9cdd9 code=0x7ffc0000 [ 2111.580632][ T27] audit: type=1326 audit(1777916722.231:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23432 comm="syz.7.3672" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75efb9cdd9 code=0x7ffc0000 [ 2111.602855][T23437] loop7: detected capacity change from 0 to 512 [ 2111.676829][ T27] audit: type=1326 audit(1777916722.231:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23432 comm="syz.7.3672" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f75efb9cdd9 code=0x7ffc0000 [ 2111.722806][T22811] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2111.789396][ T27] audit: type=1326 audit(1777916722.231:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23432 comm="syz.7.3672" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75efb9cdd9 code=0x7ffc0000 [ 2112.671480][ T27] audit: type=1326 audit(1777916722.231:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23432 comm="syz.7.3672" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75efb9cdd9 code=0x7ffc0000 [ 2112.789400][ T27] audit: type=1326 audit(1777916722.231:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23432 comm="syz.7.3672" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75efb9cdd9 code=0x7ffc0000 [ 2112.847973][ T27] audit: type=1326 audit(1777916722.231:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23432 comm="syz.7.3672" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f75efb9cdd9 code=0x7ffc0000 [ 2112.942350][ T27] audit: type=1326 audit(1777916722.231:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23432 comm="syz.7.3672" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75efb9cdd9 code=0x7ffc0000 [ 2114.885165][T23456] loop4: detected capacity change from 0 to 512 [ 2114.907702][T23457] loop7: detected capacity change from 0 to 512 [ 2115.026139][T23457] EXT4-fs: Ignoring removed nobh option [ 2115.832319][T23457] fscrypt (loop7, inode 2): Error -61 getting encryption context [ 2116.080192][T23463] trusted_key: encrypted_key: insufficient parameters specified [ 2116.789187][T23457] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -61 [ 2116.895394][T23457] EXT4-fs error (device loop7): ext4_orphan_get:1404: inode #13: comm syz.7.3679: inode has both inline data and extents flags [ 2117.013754][T23457] EXT4-fs error (device loop7): ext4_orphan_get:1409: comm syz.7.3679: couldn't read orphan inode 13 (err -117) [ 2117.096843][T23457] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2118.273704][T21666] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2121.446152][T23488] veth2: entered promiscuous mode [ 2121.451214][T23488] veth2: entered allmulticast mode [ 2121.644761][T10739] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 2122.593840][T23497] loop4: detected capacity change from 0 to 512 [ 2122.600722][T10739] usb 3-1: Using ep0 maxpacket: 8 [ 2122.614475][T10739] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2122.651489][T10739] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2122.682090][T10739] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2122.699130][T10739] usb 3-1: config 0 descriptor?? [ 2122.708681][T22811] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2124.010235][T10739] usb 3-1: can't set config #0, error -71 [ 2124.017482][T10739] usb 3-1: USB disconnect, device number 18 [ 2126.261954][T23513] netlink: 'syz.4.3694': attribute type 17 has an invalid length. [ 2126.394410][T23515] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3694'. [ 2126.423874][T23515] bridge0: port 2(bridge_slave_1) entered disabled state [ 2126.431232][T23515] bridge0: port 1(bridge_slave_0) entered disabled state [ 2129.480782][T23532] loop7: detected capacity change from 0 to 512 [ 2129.551448][T22811] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2131.512601][T23536] loop2: detected capacity change from 0 to 2048 [ 2131.566060][T23536] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2137.356152][T10739] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 2137.569896][T10739] usb 3-1: Using ep0 maxpacket: 8 [ 2137.612659][T10739] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2137.634190][T10739] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2137.643285][T10739] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2137.686227][T10739] usb 3-1: config 0 descriptor?? [ 2137.926333][T10739] usb 3-1: USB disconnect, device number 19 [ 2139.061150][T23574] loop7: detected capacity change from 0 to 512 [ 2139.081604][T23575] loop4: detected capacity change from 0 to 256 [ 2139.218318][T22811] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2139.220903][T23575] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 2145.908954][T23608] loop7: detected capacity change from 0 to 512 [ 2146.124939][T23608] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 2146.247980][T23608] EXT4-fs (loop7): orphan cleanup on readonly fs [ 2146.255810][T23608] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 2146.263937][T23608] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 2146.283629][T23608] EXT4-fs (loop7): 1 truncate cleaned up [ 2146.295219][T23608] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 2147.882901][T21666] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2148.771003][T23621] loop7: detected capacity change from 0 to 512 [ 2149.285195][T23623] loop2: detected capacity change from 0 to 512 [ 2150.019572][T22811] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2151.952614][T23629] loop4: detected capacity change from 0 to 2048 [ 2152.048838][T23629] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2155.789664][T23644] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 2158.030112][ T5777] Bluetooth: hci0: command tx timeout [ 2159.133818][T23667] loop4: detected capacity change from 0 to 512 [ 2272.190019][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2272.197063][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4500/1:b..l [ 2272.205466][ C1] rcu: (detected by 1, t=10502 jiffies, g=137541, q=96 ncpus=2) [ 2272.213180][ C1] task:kworker/u4:8 state:R running task stack:20968 pid:4500 ppid:2 flags:0x00004000 [ 2272.225054][ C1] Workqueue: bat_events batadv_nc_worker [ 2272.230761][ C1] Call Trace: [ 2272.234031][ C1] [ 2272.236976][ C1] __schedule+0x1553/0x45a0 [ 2272.241522][ C1] ? register_lock_class+0xc4/0x8a0 [ 2272.246711][ C1] ? mark_lock+0x71/0x320 [ 2272.251136][ C1] ? asan.module_dtor+0x20/0x20 [ 2272.255994][ C1] ? mark_lock+0x94/0x320 [ 2272.260331][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2272.266318][ C1] ? preempt_schedule_irq+0xb4/0x150 [ 2272.271603][ C1] preempt_schedule_irq+0xbf/0x150 [ 2272.276711][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 2272.282426][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 2272.288231][ C1] irqentry_exit+0x67/0x70 [ 2272.292639][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2272.298609][ C1] RIP: 0010:lock_acquire+0x208/0x420 [ 2272.303884][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 2272.323479][ C1] RSP: 0018:ffffc9000f407a40 EFLAGS: 00000206 [ 2272.329537][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 8f1519acd0834700 [ 2272.337492][ C1] RDX: 0000000000000000 RSI: ffffffff8acadb60 RDI: ffffffff8b1c8fa0 [ 2272.345447][ C1] RBP: ffffc9000f407b48 R08: dffffc0000000000 R09: 1ffffffff2238ca0 [ 2272.353405][ C1] R10: dffffc0000000000 R11: fffffbfff2238ca1 R12: 1ffff92001e80f54 [ 2272.361366][ C1] R13: ffffffff8d1320e0 R14: 0000000000000246 R15: dffffc0000000000 [ 2272.369373][ C1] ? batadv_nc_worker+0xd2/0x610 [ 2272.374301][ C1] ? read_lock_is_recursive+0x20/0x20 [ 2272.379700][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2272.385666][ C1] ? batadv_nc_worker+0xd2/0x610 [ 2272.390590][ C1] batadv_nc_worker+0xef/0x610 [ 2272.395340][ C1] ? batadv_nc_worker+0xd2/0x610 [ 2272.400266][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 2272.405978][ C1] process_scheduled_works+0xa5d/0x15d0 [ 2272.411536][ C1] ? worker_attach_to_pool+0x380/0x380 [ 2272.416997][ C1] ? assign_work+0x3d2/0x5d0 [ 2272.421604][ C1] worker_thread+0xa55/0xfc0 [ 2272.426196][ C1] kthread+0x2fa/0x390 [ 2272.430249][ C1] ? pr_cont_work+0x560/0x560 [ 2272.434911][ C1] ? kthread_blkcg+0xd0/0xd0 [ 2272.439495][ C1] ret_from_fork+0x48/0x80 [ 2272.443900][ C1] ? kthread_blkcg+0xd0/0xd0 [ 2272.448474][ C1] ret_from_fork_asm+0x11/0x20 [ 2272.453230][ C1] [ 2272.456237][ C1] rcu: rcu_preempt kthread starved for 10231 jiffies! g137541 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 2272.467506][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2272.477471][ C1] rcu: RCU grace-period kthread stack dump: [ 2272.483342][ C1] task:rcu_preempt state:R running task stack:27312 pid:17 ppid:2 flags:0x00004000 [ 2272.494098][ C1] Call Trace: [ 2272.497361][ C1] [ 2272.500304][ C1] __schedule+0x1553/0x45a0 [ 2272.504814][ C1] ? asan.module_dtor+0x20/0x20 [ 2272.509679][ C1] ? enqueue_timer+0x23d/0x550 [ 2272.514448][ C1] ? __mod_timer+0x984/0xdb0 [ 2272.519064][ C1] schedule+0xbd/0x170 [ 2272.523133][ C1] schedule_timeout+0x188/0x2d0 [ 2272.527971][ C1] ? console_conditional_schedule+0x40/0x40 [ 2272.533850][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 2272.539728][ C1] ? update_process_times+0x1b0/0x1b0 [ 2272.545091][ C1] ? prepare_to_swait_event+0x339/0x360 [ 2272.550627][ C1] rcu_gp_fqs_loop+0x313/0x1590 [ 2272.555463][ C1] ? rcu_gp_init+0x1162/0x1560 [ 2272.560211][ C1] ? rcu_gp_kthread+0x3b0/0x3b0 [ 2272.565059][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 2272.571195][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 2272.576387][ C1] ? rcu_gp_init+0x1560/0x1560 [ 2272.581147][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2272.587030][ C1] ? finish_swait+0xc7/0x1d0 [ 2272.591606][ C1] rcu_gp_kthread+0x9d/0x3b0 [ 2272.596221][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 2272.601317][ C1] ? __kthread_parkme+0x7a/0x1c0 [ 2272.606237][ C1] ? __kthread_parkme+0x162/0x1c0 [ 2272.611244][ C1] kthread+0x2fa/0x390 [ 2272.615295][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 2272.620391][ C1] ? kthread_blkcg+0xd0/0xd0 [ 2272.624964][ C1] ret_from_fork+0x48/0x80 [ 2272.629372][ C1] ? kthread_blkcg+0xd0/0xd0 [ 2272.633948][ C1] ret_from_fork_asm+0x11/0x20 [ 2272.638708][ C1] [ 2272.641718][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 2272.648043][ C1] Sending NMI from CPU 1 to CPUs 0: [ 2272.653246][ C0] NMI backtrace for cpu 0 [ 2272.653257][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 2272.653271][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2272.653280][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 2272.653303][ C0] Code: 19 21 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d e3 d3 41 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 2272.653317][ C0] RSP: 0018:ffffffff8ce07d80 EFLAGS: 000002c6 [ 2272.653331][ C0] RAX: 081d2fb1bd90e700 RBX: ffffffff8162a8f1 RCX: 081d2fb1bd90e700 [ 2272.653342][ C0] RDX: 0000000000000001 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8fa0 [ 2272.653353][ C0] RBP: ffffffff8ce07eb8 R08: ffff8880b8e36b2b R09: 1ffff110171c6d65 [ 2272.653365][ C0] R10: dffffc0000000000 R11: ffffed10171c6d66 R12: 1ffffffff19c0fbc [ 2272.653376][ C0] R13: dffffc0000000000 R14: 1ffffffff19d2688 R15: 0000000000000000 [ 2272.653387][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2272.653400][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2272.653411][ C0] CR2: 00007f46c233ea38 CR3: 000000002bcff000 CR4: 00000000003506f0 [ 2272.653425][ C0] Call Trace: [ 2272.653432][ C0] [ 2272.653437][ C0] default_idle+0x13/0x20 [ 2272.653455][ C0] default_idle_call+0x6c/0xa0 [ 2272.653473][ C0] do_idle+0x221/0x590 [ 2272.653494][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 2272.653517][ C0] ? do_idle+0x5/0x590 [ 2272.653534][ C0] cpu_startup_entry+0x43/0x60 [ 2272.653551][ C0] rest_init+0x2e2/0x300 [ 2272.653569][ C0] ? time_init+0x40/0x40 [ 2272.653586][ C0] arch_call_rest_init+0xe/0x10 [ 2272.653605][ C0] start_kernel+0x459/0x4e0 [ 2272.653624][ C0] x86_64_start_reservations+0x2a/0x30 [ 2272.653641][ C0] x86_64_start_kernel+0x60/0x60 [ 2272.653657][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 2272.653684][ C0]