last executing test programs: 24.564821391s ago: executing program 4 (id=2280): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000160000005600000025000000190019000400050007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) move_mount(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) 23.041932825s ago: executing program 4 (id=2283): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="050000000400000004000000"], 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000140)='mm_page_free_batched\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 22.772903238s ago: executing program 4 (id=2284): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r1) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2808802, &(0x7f0000000080), 0x1, 0x541, &(0x7f0000000fc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/14, @ANYBLOB='\x00\x00\x00', @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_open_dev$usbfs(0x0, 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, 0x0) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x13ff, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000140)) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "d685e37189abeb89", "5718bdd3c6333e1e49ddcd779813f3a2", ',4j\a', "5f92ac351672e815"}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r7 = landlock_create_ruleset(&(0x7f0000000140)={0x6000}, 0x10, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x305882, 0x82) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000500541b48013d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff0700670200001f000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000000340)={0x2000, r8}, 0x0) landlock_restrict_self(r7, 0x0) 21.540698095s ago: executing program 4 (id=2288): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x2, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000440)=0x20000008) fstatfs(0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000280)='./bus\x00') rename(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='./file0\x00') 18.748585354s ago: executing program 4 (id=2293): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="050000000400000004000000"], 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000140)='mm_page_free_batched\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 15.100355673s ago: executing program 4 (id=2307): getresgid(&(0x7f0000000c40), &(0x7f0000000140), 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f0000000700)=ANY=[@ANYBLOB='umask=00000000000000000000000,flush,nodots,dots,gid=', @ANYRESHEX, @ANYBLOB="00006b746769643d0092", @ANYRESDEC, @ANYBLOB="1500bba7d41fabba4332de3ca642acf6f8de847e3f21783608008708a887d30aaf0a14b0691d48445fe3b4d1ddde1b81337b2c3b5f88535d7f6fa931b84783704494cebe49ca9f6269b05edde0246c360d0566b4056f0f02ccab035d3d0a5cde0b31bd424949fe23c0a0a25691738006c5c6acdf101fecdb4f79abdfb95c6afaea03dd5903b5240565f31504c207a9a2aa6c8108fb973081e90412a3c6cfa3b2513693727fad9acd8108acb8b90fab033c9dac0dc3e5a61c513e7b5edc5d76320f0e54045ea2b7b8fb1f78d3d346e26ee5ed6926cea1ffe0a1"], 0x1, 0x1fa, &(0x7f0000000500)="$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") openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000840), 0x3, 0x51e, &(0x7f0000000100)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000f9000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001", @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000680)='sched_switch\x00', r4}, 0x18) ioprio_get$uid(0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', 0x0, 0x1000, &(0x7f0000001f40)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@debug={'debug', 0x3d, 0x100000001}}, {@cache_fscache}, {@version_L}, {@msize={'msize', 0x3d, 0x8}}], [{@measure}, {@seclabel}, {@subj_type={'subj_type', 0x3d, 'ext4\x00'}}]}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) rename(&(0x7f0000000400)='./file0\x00', &(0x7f0000000c80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 13.338455425s ago: executing program 3 (id=2311): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x3c, r2, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8, 0x36}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000054}, 0x44040) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x0, 0x5a, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, [0x0]}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) 10.519239184s ago: executing program 3 (id=2315): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902240001", @ANYRES16], 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r3, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 9.262873538s ago: executing program 0 (id=2320): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_ima(r1, &(0x7f0000000180), &(0x7f0000000200)=@v2={0x3, 0x3, 0x11, 0xffff, 0xad, "0a16f1780a6b58ee50646c914b786f45c40ff7070650798cac8a6089b18844b79fd28765ecc0175082a72811e29d8a1b7e70c9fd14b5e7c53d4bfcedd9f69dc8cba8fcab11c147e968009daa717575e6af5f0fd9d529648ed3ba4caff4c977f8bfeaeec90143776c7e17550ec27b38c2b409f7b3d39f7c7d873065234a082c4e9ddb0c7d4818b2c13922b2148b187fbf91fd5387cc5a67b4ce82482a2004f8ff9917bb6cfe51f0792d12975c7f"}, 0xb6, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x12, 0x60a, 0x0, 0x202, 0x388, 0x2e8, 0x2e8, 0x388, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x0, 0x4}}, @common=@ipv6header={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'vxcan1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:dpkg_var_lib_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="4bcf52d32e0400000000d40e7a0c1f7bff000000af000000", 0x18) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) dup2(r3, r3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x2c, 0x2, 0x1, 0x409, 0x0, 0x0, {0x2, 0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x15}}}}]}]}, 0x2c}}, 0x0) syz_emit_ethernet(0x52, &(0x7f00000007c0)={@local, @random="89ab9b4c72ca", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0x8}], {{0x0, 0x400, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x380cc52, &(0x7f0000000480)={[{@hide}, {@session={'session', 0x3d, 0x13}}, {@nocompress}, {@mode={'mode', 0x3d, 0x4}}, {@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@cruft}, {@unhide}, {@nocompress}, {@sbsector={'sbsector', 0x3d, 0x939f}}, {@map_off}, {@map_normal}], [{@uid_eq}], 0x2c}, 0x3, 0x9bf, &(0x7f0000001640)="$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") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x6) 8.68530158s ago: executing program 2 (id=2321): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a0000020000000000000000000000764d2a8944cc4dbbc622556820c241e88e713fe1319651450862713e92e94ca6dc3b3d6d31fbe34fb734f2caf2ad09120400f6472db5984f3e00060f5720183e2aa955e02f7a2e92c892a3bc3489d8c3dc6000"/110], 0x10}}, 0x0) 7.640290528s ago: executing program 3 (id=2322): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000007c0), 0x90, 0x0, &(0x7f00000008c0)="fbf70e95dc450a811eb90eef3178c094f8610c6ae788cc5e6455668e92a86141f553d1e59478f4e964dd10452a2fe99f605c97931164f3af3f71a1706dc2a63f02886ffb783b0349513fa3e45f0cda0ad74f925bcb38f421593811d561b6558e59785b3a0c9608840f7f3f3170d0af978ce232cfb5b88d692191559035407d378ebe550503222ef65c53dbc7a9582ef7"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/meminfo\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000000)=""/221, 0xdd}], 0x1, 0x1c0, 0x0) socket$key(0xf, 0x3, 0x2) 7.629183494s ago: executing program 2 (id=2323): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0xc906, &(0x7f0000000400)={[{@auto_da_alloc}, {@acl}, {@journal_path={'journal_path', 0x3d, './file0/file0'}}, {@bsdgroups}, {@nobarrier}, {@nodiscard}, {@nobarrier}]}, 0x1e, 0x4e1, &(0x7f0000000a40)="$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") 6.92041474s ago: executing program 2 (id=2325): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 6.762808189s ago: executing program 2 (id=2326): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)={0x40, r1, 0x1, 0x0, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4001c}, 0x0) 6.495700756s ago: executing program 0 (id=2327): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xaa}}, 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2, &(0x7f0000000440)=ANY=[], 0xff, 0x1509, &(0x7f0000000640)="$eJzs3Am4TmX3MPC17vveHDI8Sea97rV5kuEmSUJJMiRJEpI5IUmSJEkcMiUhCRlPkjlkTicd8zxkTjp5JUkSkinc33VUn7f3fft6p//n/b9n/a5rX+deZ++1nrXPup7z7L2v65xvuwyt1rB65XrMDP8M/esCf/6SCAAJADAAALIDQAAAZXKUyZG2P5PGxH/qRcT/kPrTr3YH4mqS+advMv/0Teafvsn80zeZf/om80/fZP7pm8xfiHRtZt5rZUu/mzz//19O/SvJ8vmfLuDv7ZD5/7fR/9DRMv/0Teafvsn80zeZf/pz5RYsuKp9iKtP3v/pm8xfiHTt3/5Mef3Zq/1MW7Z/YBNCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIf4/OOuvMADw6/pq9yWEEEIIIYQQQoh/H//+1e5ACCGEEEIIIYQQ//MQFGgwEEAGyAgJkAkywzWQBbJCNsgOMbgWcsB1kBOuh1yQG/JAXsgH+aEAhEBggSGCglAI4nADFIYboQgUhWJQHByUgJJwE5SCm6E03AJl4FYoC7dBOSh/+TXT3AmV4C6oDHdDFagK1aA63AM14F6oCfdBLbgfasMDUAcehLrwENSD+tAAHoaG8Ag0gsbQBJpCM2gOLf4gPyn738p/EbrDS9ADekIi9ILe8DL0gb7QD/rDAHgFBsKrMAheg8EwBIbC6zAM3oDh8CaMgJEwCt6C0TAGxsI4GA8TIAnehonwDkyCdx/JClNgKkyD6TADZsJ7MAtmwxx4H+bCPJgPSZkWwiJYDB/AEvgQkuEjWAofQwosg+WwAlbCKlgNa2AtrIP1sAE2wibYDFtgK3wC22A77ICdsAt2wx74FPbCZ7APPodU/OIfzD/z23zoioCAChUaNJgBM2ACJmBmzIxZMAtmw2wYwxjmwByYE3NiLsyFeTAPJmI+LIAFkJCQkbEgFsQ4xrEwFsYiWASLYTF06LAklsRSeNF7XxrLYBksi2WxHJbH8ng73o4VsSJWwkpYGStjFayC1bAa3oP34L1YE2tiLayFtbE21sE6WBfrYj2shw2wATbEhtgIG2ETbILNsBm2wBbYEltiK2yFbbANtsW22A7bYXtsjx2wA3bEjtgJO2Fn7IxdsAt2xRfwBXwRX8SX8CXsiVVUL+yNvbEP9sF+2B/74ys4EF/FV/E1HIxDcCi+jq/jGzgcT+MIHImjcBRWVGNwLI5DVhMwCZMwI0zESTgJJ+MUnILTcDrOwJk4E2fhbJyN7+NcnIfzcAEuwEW4GBfjEvwQkzEZl+IZTMFluBxX4EpchStxDa7FNbgeN+B63ISbcAtuwU/wE9yO23En7sTduBs/xU/xM/wMB2MqpuJ+3I8H8AAexIN4CA/hYTyMR/AIHsWjeAyP4XE8gSfxBJ7CU3gaz+BZADiP5/ECXsBLeCntza/SGGVUBpVBJagElVllVllUFpVNZVMxFVM5VA6VU+VUuVQulUflUflUPlVAFVCkSLGKVEFVUMVVXBVWhVURVUQVU8WUU06VVCVVKVVKlValVRl1qyqrblPlVHnV2t2ublcVVRtXSd2lKqvKqoqqqqqp6qq6qqFqqJqqpqqlaqnaqraqox5UdVUv7If1VdpkGqoh2EgNxSaqqWqmmqs38FHVUg3HVqq1aqMeVyNxBLZTLV179ZTqoMZiR/WMGofPqs5qAnZRz6uu6gXVTb2ouqtWrofqqSZjL9VbTcM+qq/qp/qrWVhVpU2smnpNvZhxiBqqXleL8A01XL2pRqiRapR6S41WY9RYNU6NVxNUknpbTVTvqEnqXTVZTVFT1TQ1Xc1QM9V7apaareao99VcNU+DWqAWqkVqsfpALVEfqmT1kVqqPlYpaplarlaolWqVWq3WqLVqnVqvNqiNapParLaoreoTtU1tVzvUTrVL7VZ71Kdqr/pM7VOfq1T1hdqv/qQOqC/VQfWVOqS+VofVN+qI+lYdVd+pY+p7dVydUCfVD+qU+lGdVmfUWXVOnVc/qQvqorqkvAKNWmmtjQ50Bp1RJ+hMOrO+RmfRWXU2nV3H9LU6h75O59TX61w6t85j8up8Or8uoENN2mrWkS6oC+m4vkEX1jfqIrqoLqaLa6dL6JL6Jl1K36xL61t0GX2rLqtv0+V0eV3Bg75DV9R36kr6Ll1Z362r6Kq6mq6u79E19L26pr5P19L369r6AV1HP6jr6od0PV1fN9AP64b6Ed1IN9ZNdFPdTDfXLfSjuqV+TLfSrXUb/bhuq5/Q7fSTur1+SnfQT+uO+hndST+rO+vndBf9vO6qX9Dd9EV9SXvdQ/fUibqX7q1f1n10X91P99cD9Ct6oH5VD9Kv6cF6iB6qX9fD9Bt6uH5Tj9Aj9Sj9lh6tx+ixepweryfoJP22nqjf0ZP0u3qynqKn6ml6up6h+/1Sac7fkf/O38gfdPnVt+it+hO9TW/XO/ROvUvv1nv0Hr1X79X79D6dqlP1fr1fH9AH9EF9UB/Sh/RhfVgf0Uf0UX1UH9PH9HF9Qp/TP+hT+kd9Wp/RZ/Q5fV6f1xd++RmAQaOMNsYEJoPJaBJMJpPZXGOymKwmm8luYuZak8NcZ3Ka600uk9vkMXlNPpPfFDChIWMNm8gUNIVM3NxgCpsbTRFT1BQzxY0zJUxJc9O/nP9H/bUwLUxL09K0Mq1MG9PGtDVtTTvTzrQ37U0H08F0NB1NJ9PJdDadTRfTxXQ1XU030810N91ND9PDJJpE09u8bPqYvqaf6W8GmFfMQDPQDDKDzGAz2Aw1Q80wM8wMN8PNCDPCjDKjzGgz2ow1Y814M94k+exmoploJplJZrKZbKYOyG6mm+lmpplpZplZZo6ZY+aauWa+mW8WmoVmsVlslpglJtkkm6VmqUkxy8wys8KsMKvMKrPGrDHrzDqzwWwwm8wmk2K2mq1mm9lmdpgdZpfZZfaYPWav2Wv2mX0m1aSa/Wa/OWAOmIPmoDlkDpnD5rA5Yo6Yo+aoOWaOmePmuDlpTppT5pQ5bU6bs+asOW/OmwvmgrlkLqVd9gUqUIEJTJAhyBAkBAlB5iBzkCXIEmQLsgWxIBbkCHIEOYPrg1xB7iBPkDfIF+QPCgRhQIENOIiCgkGhIB7cEBQObgyKBEWDYkHxwAUlgpLBTUGp4OagdHBLUCa4NSgb3BaUC8oHFYLbgzuCisGdQaXgrqBycHdQJagaVAuqB/cENYJ7g5rBfUGt4P6gdvBAUCd4MKgbPBTUC+oHDYKHg4bBI0GjoHHQJGgaNAuaBy3+rfW9P537Mdcj7Bkmhr3C3uHLYZ+wb9gv7B8OCF8JB4avhoPC18LB4ZBwaPh6OCx8IxwevhmOCEeGo8K3wtHhmHBsOC4cH04Ik8K3w4nhO+Gk8N1wcjglnBpMC6eHM8KZ4XvhrHB2OCd8P5wbzgvnhwvCheGiEH++JIbk8KNwafhxmBIuC5eHK8KV4apwdbgmXBuuC9eHG8KN4aYyA38+NNwWbg93hDvDXeHucE/4abg3/CzcF34epoZfhPvDP4UHwi/Dg+FX4aHw6/Bw+E14JPw2PBp+Fx4Lvw+PhyfCk+EP4anwx/B0eCY8G54Lz4c/hRfCi+Gl0Kdd3Kd9vJMhQxkoAyVQAmWmzJSFslA2ykYxilEOykE5KSflolyUh/JQPspHBagApWFiKkgFKU5xKkyFqQgVoWJUjBw5KkklqRSVotJUmspQGSpLZakclaMKVIHuoDvoTrqT7qK76G66m6pSVapO1akG1aCaVJNqUS2qTbWpDtWhulSX6lE9akANqCE1pEbUiJpQE2pGzagFtaCW1JJaUStqQ22oLbWldtSO2lN76kAdqCN1pE7UiTpTZ+pCXagrdaVu1I26U3fqQT0okRKpN/WmPtSH+lE/GkADaCANpEE0iAbTYBpKQ2kYDaPhNJxG0EgaRW/RaBpDY2kcjacJlERJNJEm0iSaRJNpMk2lqTSdptNMmkmzaBbNoTk0l+bSfJpPC2khLabFtISWUDIl01JaSimUQstpOa2klbSaVtNaWkvraT1tpI20mTbTVtpK22gb7aAdtIt20R7aQ3tpL+2jfZRKqbSf9tMBOkAH6SAdokN0mA7TETpCR+koHaNjdJyO00k6SafoFJ2m03SWztJ5+oku0EW6RJ4SbCab2V5js9isNpvNbv8yzmPz2nw2vy1gQ5vL5v5NTNbaIraoLWaLW2dL2JL2pr+Ky9nytoK93d5hK9o7bSVbzmaCP49r2HttTXufrWXvt9XtPb+Ja9sHbB37iK1rG9t6tqltYJvbhvYR28g2tk1sU9vMNrdt7RO2nX3StrdPJXSwT/95bNPiJfZDu9aus+vtBrvXfmbP2nP2iP3Wnrc/2R62px1gX7ED7at2kH3NDrZDfhsD2FH2LTvajrFj7Tg73k74q3iqnWan2xl2pn3PzrKz/ypebD+wc22ynW8X2IV20eU4radk+5Fdaj+2KXaZXW5X2JV2lV1t1/zfXlfYTXaz3WL32E/tNrvd7rA77S67+3Kcdh777Oc21X5hD9tv7AH7pT1oj9pD9uvLcdr5HbXf2WP2e3vcnrAn7Q/2lP3RnrZnLp9/2rn/YC/aS9ZbYGTFmg0HnIEzcgJn4sx8DWfhrJyNs3OMr+UcfB3n5Os5F+fmPJyX83F+LsAhE1tmjrggF+I438CF+UYuwkW5GBdnxyW4JN/EpfhmLs23cBm+lcvybVyOy3MFvp3v4Ip8J1fiu7gy381VuCpX4+p8D9fge7km38e1+H6uzQ9wHX6Q6/JDXI/rcwN+mBvyI9yIG3MTbsrNuDm34Ee5JT/Grbg1t+HHuS0/we34SW7PT3EHfpo78jPciZ/lzvwcd+HnuSu/wN34Re7OL3EP7smJ3It788vch/tyP+7PA/gVHsiv8iB+jQfzEB7Kr/MwfoOH85s8gkfyKH6LR/MYHsvjeDxP4CR+myfyOzyJ3+XJPIWn8jSezjN4Jr/Hs3g2z+H3eS7P4/m8gBfyIl7MH/AS/pCT+SNeyh9zCi/j5byCV/IqXs1reC2v4/W8gTfyJt7MW3grf8LbeDvv4J28i3fzHv6U9/JnvI8/51T+gvfzn/gAf8kH+Ss+xF/zYf6Gj/C3fJS/42P8PR/nE3ySf+BT/COf5jN8ls/xef6JL/BFvsSeIcJIRToyURBliDJGCVGmKHN0TZQlyhpli7JHsejaKEd0XZQzuj7KFeWO8kR5o3xR/qhAFEYU2YijKCoYFYri0Q1R4ejGqEhUNCoWFY9cVCIqGd0UlYpujkpHt0RlolujstFtUbmofFQhuj26I6oY3RlViu6KKkd3R1WiqlG1qHp0T1QjujeqGd0X1Yruj0pHD0R1ogejutFDUb2oftQgejhqGD0SNYoaR02iplGzqHnUIno0ahk9FrWKWkdtosejttETUbvoyah99FTUIXr6yv6iwc+fpn+xPzHqFelfnpDdpxfGF8UXxz+IL4l/GE+OfxRfGv84nhJfFl8eXxFfGV8VXx1fE18bXxdfH98Q3xjfFN8c3xL3vnpGcJh2IwzGBS6Dy+gSXCaX2V3jsrisLpvL7mLuWpfDXedyuutdLpfb5XF5XT6X3xVwoSNnHbvIFXSFXNzd4Aq7G10RV9QVc8WdcyVcSdfctXAtXEv3mGvlWrs27nH3uHvCPeGeTPilcdfRPeM6uWddZ/ece84977q6F1w396Lr7l5yPVxPl+gSXW/X2/VxfVw/188NcAPcQDfQDXKD3GA32A11Q90wN8wNd8PdCDfCjXKj3Gg32o11Y914N94luSQ30U10k9wkN9lNdlPdVDfdTXcz3Uw3y81yc9wcN9fNdfPdfLfQLXSL3WK3xC1xyS7ZLXVLXYpLccvdcrfSrXSr3Wq31q116916t9FtdJvdZrfVbXXb3Da3w+1wu9wut8ftcXvdXrfP7XOpLtXtd/vdAXfAHXRfuUPua3fYfeOOuG/dUfedO+a+d8fdCXfSeX3K/ehOuzPurDvnzruf3AV30V1y3iXF3o5NjL0TmxR7NzY5NiU2NTYtNj02IzYz9l5sVmx2bE7s/djc2LzY/NiC2MLYotji2AexJbEPY8mxj2JLYx/HUmLLYstjK2IrY6ti3uffFvmCvpCP+xt8YX+jL+KL+mK+uHe+hC/pb/Kl/M2+tL/Fl/G3+rL+Nl/Ol/cVfGPfxDf1zXxz38I/6lv6x3wr39q38Y/7tv4J384/6dv7p3wH/7Tv6J/xnfyzvrN/znfxz8/7Zcq+u3/J9/A9faLv5Xv7l30f39f38/39AP+KH+hf9YP8a36wH+KH+tf9MP+GH+7f9CP8SD/Kv+VH+zF+rB/nx/sJPsm/7Sf6d/wk/66f7Kf4qX6an+5n+Jn+PT/Lz/Zz/Pt+rp/n5/sFfqFf5Bf7D/wS/6FP9h/5pf5jn+KX+eV+hV/pV/nVfo1f69f59X6D3+g3+c1+i9/qP/Hb/Ha/w+/0u/xuv8d/6vf6z/w+/7lP9V/4/f5P/oD/0h/0X/lD/mt/2H/jj/hv/VH/nT/mv/fH/Ql/0v/gT/kf/Wl/xp/15/x5/5O/4C/6S/I3a0IIIYQQfxf9B/t7/Y3vqV+2NL0BIOv2vIf+subGXD+v+6q9HWIA8FTPLvV/3erXT0xM/OXYFA1BoQUAELuSnwGuxMugDTwB7aE1lPqb/fVVFS5f9/2/6sdvBcgMkOnXnLTbo1/jK/Vv/p36jT/g362/7Of6CwCKFLqSk1b41/hK/dK/U39329+vf7n/TF8mAbT6s5wscCW+Ur8kPAZPQ/vfHCmEEEIIIYQQQvysrzrf9Q/uPy/fn+czv837Nf6j+/M/UOlf7V8IIYQQQgghhBB/7NkXuj35aPv2rTv9Ny8y/me08R+wQAD4D2hDFv/5i6v9m0kIIYQQQgjx73blov9qdyKEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQqRf//x/CFN/98FX+xyFEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEKIq+3/BAAA//+0FVXr") openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) 5.825879031s ago: executing program 3 (id=2328): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000200), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000240)={0x5}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x51) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}, {@discard}, {@dmask={'dmask', 0x3d, 0x7}}, {}, {@dmask={'dmask', 0x3d, 0x6}}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@gid}, {@errors_remount}, {@discard}]}, 0x81, 0x14f4, &(0x7f0000001580)="$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") 3.981627314s ago: executing program 3 (id=2331): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r3, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000200)='./bus/file0\x00', 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000000300)=""/104, 0x68) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./bus\x00') getdents(r5, 0x0, 0x0) 2.892571285s ago: executing program 1 (id=2332): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x300, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_cgroup={{0xb}, {0x20c, 0x2, [@TCA_CGROUP_EMATCHES={0x208, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x190, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x9, 0x3, 0x5}, {0x1ff, 0x81, 0x1ff, 0x5}}}, @TCF_EM_META={0x70, 0x3, 0x0, 0x0, {{0x0, 0x4, 0x3}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x69, 0x1}, {0x9, 0x9}}}, @TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_VAR="166dd093aa", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="010059", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="f3ba", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_LVALUE={0x1d, 0x2, [@TCF_META_TYPE_VAR="2210c2244f264701c2", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="43fefa1ddadc69f4", @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0xc, 0x1}, {0x3, 0x1, 0x1}}}]}}, @TCF_EM_IPT={0x58, 0x2, 0x0, 0x0, {{0xfc01, 0x9, 0x6}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}, @TCF_EM_META={0xa8, 0x2, 0x0, 0x0, {{0x2, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x10}, {0x85, 0x7, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x2}, {0xe597, 0x6, 0x1}}}, @TCA_EM_META_LVALUE={0x25, 0x2, [@TCF_META_TYPE_VAR="4d81eae8e9", @TCF_META_TYPE_VAR="902307e190de4360", @TCF_META_TYPE_VAR="a433a0dbfb6b8ad5", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x4}, {0x7, 0x81}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0xfa, 0x2}, {0x5, 0x80}}}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="15", @TCF_META_TYPE_VAR="8e90fa0429b3", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="9df72972fcb5"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x7, 0x1}, {0xc, 0xa3, 0x1}}}, @TCA_EM_META_RVALUE={0x13, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="9beab4e19b5a0d", @TCF_META_TYPE_INT=0xa]}]}}]}, @TCA_EMATCH_TREE_LIST={0x5c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x22, 0x3, 0x1}, {0x0, 0x8, 0x9, 0x1000}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9, 0x7, 0x3}, {{0x2, 0x1, 0x0, 0x1}, {0x4}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x401}, {0x4, 0x581, 0xa, 0x1, 0x5, 0x0, 0x2}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x101, 0x8, 0x9}, {0x4, 0x3, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1b4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x44}}]}]}}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0xa8, 0x2, [@TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_ACT={0x9c, 0x6, [@m_ct={0x98, 0x15, 0x0, 0x0, {{0x7}, {0x4}, {0x6f, 0x6, "a47fc725fc783dff2e9860d9a3b94fd56977646f3fa8e23bafa1818bfe43043b99c26ad1124fad3c9bd773e3f3dbf3811f45f66613935ab950f1a8b3ef648b7c3b429f2dc6721cd123fd92a933c499b3f8e347a9a754575a723f2935807251f1fffbcf0597521acd57d443"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x300}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.679671861s ago: executing program 3 (id=2333): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) ioctl$sock_bt_hci(r2, 0x400448c8, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, 0x0) pselect6(0x40, &(0x7f00000045c0), 0x0, &(0x7f0000004640)={0xf8}, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x8c53, &(0x7f00000000c0)={[{@noload}, {@init_itable_val={'init_itable', 0x3d, 0x1000}}, {@sysvgroups}, {@usrjquota}]}, 0x0, 0x51b, &(0x7f00000014c0)="$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") ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0xfdef) 1.97957555s ago: executing program 1 (id=2334): unshare(0x22020400) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_ENABLE_PPS(r0, 0xc0403d08, 0x0) 1.902862517s ago: executing program 2 (id=2335): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.841938346s ago: executing program 2 (id=2336): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_ima(r1, &(0x7f0000000180), &(0x7f0000000200)=@v2={0x3, 0x3, 0x11, 0xffff, 0xad, "0a16f1780a6b58ee50646c914b786f45c40ff7070650798cac8a6089b18844b79fd28765ecc0175082a72811e29d8a1b7e70c9fd14b5e7c53d4bfcedd9f69dc8cba8fcab11c147e968009daa717575e6af5f0fd9d529648ed3ba4caff4c977f8bfeaeec90143776c7e17550ec27b38c2b409f7b3d39f7c7d873065234a082c4e9ddb0c7d4818b2c13922b2148b187fbf91fd5387cc5a67b4ce82482a2004f8ff9917bb6cfe51f0792d12975c7f"}, 0xb6, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x12, 0x60a, 0x0, 0x202, 0x388, 0x2e8, 0x2e8, 0x388, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x0, 0x4}}, @common=@ipv6header={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'vxcan1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:dpkg_var_lib_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="4bcf52d32e0400000000d40e7a0c1f7bff000000af000000", 0x18) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) dup2(r3, r3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x2c, 0x2, 0x1, 0x409, 0x0, 0x0, {0x2, 0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x15}}}}]}]}, 0x2c}}, 0x0) syz_emit_ethernet(0x52, &(0x7f00000007c0)={@local, @random="89ab9b4c72ca", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0x8}], {{0x0, 0x400, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x380cc52, &(0x7f0000000480)={[{@hide}, {@session={'session', 0x3d, 0x13}}, {@nocompress}, {@mode={'mode', 0x3d, 0x4}}, {@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@cruft}, {@unhide}, {@nocompress}, {@sbsector={'sbsector', 0x3d, 0x939f}}, {@map_off}, {@map_normal}], [{@uid_eq}], 0x2c}, 0x3, 0x9bf, &(0x7f0000001640)="$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") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x6) 1.77214176s ago: executing program 1 (id=2337): creat(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000004780)='./file0\x00', &(0x7f00000047c0)='./file0\x00', 0x0, 0x100d, 0x0) mount$9p_virtio(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x105021, 0x0) 1.612502423s ago: executing program 0 (id=2338): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000090a000000000000000000000000000008000a40000000000900020073797a320000000014"], 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x31, 0x4, 0x0, 0x2, 0xc4, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0xfffffffe}, {@remote}, {@dev, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x3}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) r3 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000001000)="2e989cc9f58ec796be4720e6160291a2fb7c6445e84b8e9e349ead029fe38d5810bf992b5d51f406a51cc339021268aed6f767582af4", 0x36, r3) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f00000002c0)='./file1\x00', 0x200000, &(0x7f0000000080)={[], [{@func={'func', 0x3d, 'CREDS_CHECK'}}, {@seclabel}, {@dont_hash}]}, 0xfe, 0x58a, &(0x7f0000000c00)="$eJzs3U9rVFcbAPDnTjLRGN/XCCJtFyXgohZxYpL+sdCFXZZWKrR7OyRjkEwcyUzEpEJ1UTfdFCmUUqH0A3TfVZFC1/0UllaQIqFd2EXKndzRSTKTTGJixszvB1fvuffMPefknufk3JwZJoCeNZL+k4t4OSK+SiKONJ3rj+zkyEq+pUc3JtMtieXlj/9KIsmONfIn2f9DWeKliPjli4hTufXlVhcWZ4rlcmkuS4/WZq+OVhcWT1+eLU6XpktXxicmzr45Mf7O22/tWFtfv/DPtx/de//slyeWvvnxwdE7SZyLw9m55nZsrH+jkzebEyMxkv1M8nFuTcaxrVT8BZDsdQXYlr6sR+cjHQOORN/G/RvYRz6PiOWte7yN1wBdJ9lO/AP7QGMe0Hi27/w5eH94+N7KA9D69icrfxuJg/Vno0NLyaono/R5d3gHyk/L+OnPu3fSLbb0dwiAZ3PzVkSc6e9vP/6t8e9yx9c+00GetWUY/+D5uZfOf34ejFgX/7kn859oMf8ZahG727F5/OcerCxCNRnYgYIz6fzv3Zbz3ydFDvdlqf/V53z55NLlcikd2/4fEScjfyBNr1vPaarx2aX7bQfN5vlfuqXlN+aC2YUe9B9Y/ZqpYq34rO1ueHgr4pVN5r9Ji/ufNu9Ch2UcL919td25zdu/u5Z/iHit5f1/uqKVbLw+OVrvD6ONXrHe37eP/9au/L1uf3r/D23c/uGkeb22uvUyvj/4uNTu3EiSLZpusf8PJJ/UR6bGUHC9WKvNjUUMJB/W06uOjz99bSPdyJ+2/+SJ1vG/Uf8fjIhPO2z/7WO322bthvs/1en9bxxZ6QhPesRmO/c/+Oy7duV3Nv69Ud87mR3pZPzrtILb/LEBAAAAAABAV8oNRByOJFfI1vQPRy5XKKy8v+NYHMqVK9XaqUuV+StTUf+s7HDkc42V7qGm90OMZe+HbaTH16QnIuJoRHzdN1hPFyYr5am9bjwAAAAAAAAAAAAAAAAAAAB0iaFo/fn/1B99e107YNf5ym/oXavi/0CLDDvxTU9AV/L7H3qX+IfeJf6hd4l/6F3iH3qX+IfeJf6hN+W2GP+/7mJdAAAAAAAAAAAAAAAAAAAAAAAAAAAAYJ+4cP58ui0vPboxGREH49rC/Ezl2umpUnWmMDs/WZiszF0tTFcq0+VSYbIyu9n1ypXK1bHxmL8+WitVa6PVhcWLs5X5K7WLl2eL06WLpfzzaRYAAAAAAAAAAAAAAAAAAAC8UKoLizPFcrk01507+R2+4O9d0q59tNPfHdWwM1cdjB284F6PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw1H8BAAD//0JPM34=") 1.496823069s ago: executing program 1 (id=2339): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) gettid() bind$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)='c!', 0x2}], 0x1}}], 0x1, 0x20000001) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21085e, &(0x7f00000001c0)={[{@grpquota}, {@nouid32}, {@minixdf}]}, 0x1, 0x504, &(0x7f0000001480)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000180)=""/233, 0xe9, 0x2, 0x0, 0x0) 1.172057424s ago: executing program 0 (id=2340): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = io_uring_setup(0x354a, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0x0, {0x3, @dev, 'syz_tun\x00'}}, 0x1e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, {0x0, 0x1a, 0x0, 0x1, 0x4}}, 0x48) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x2, 0xfffffffd}}, 0x2e) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/234) ioctl$PPPIOCGFLAGS1(r7, 0x40047435, &(0x7f0000000280)) close_range(r3, 0xffffffffffffffff, 0x0) r8 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x60030000, {0x0, 0xff000000}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3, 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, [], [], 'team_slave_0\x00', 'batadv0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x240}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) 1.014024244s ago: executing program 1 (id=2341): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1000a, &(0x7f00000003c0)=ANY=[], 0x21, 0x1507, &(0x7f0000001b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x100010e, &(0x7f00000005c0)={[{@nodelalloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xffff}}, {@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@journal_dev={'journal_dev', 0x3d, 0x7ffffffe}}, {@auto_da_alloc}]}, 0x2, 0x44f, &(0x7f0000000c00)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) ptrace$setopts(0x4200, r3, 0x6, 0x21) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x3, 0x9, 0x7, 0x4}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) pwritev2(r0, &(0x7f0000000100)=[{0x0}], 0x1, 0x5405, 0x0, 0x0) 260.856327ms ago: executing program 0 (id=2342): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000002600181100", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x38, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 185.992899ms ago: executing program 0 (id=2343): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x300, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_cgroup={{0xb}, {0x20c, 0x2, [@TCA_CGROUP_EMATCHES={0x208, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x190, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x9, 0x3, 0x5}, {0x1ff, 0x81, 0x1ff, 0x5}}}, @TCF_EM_META={0x70, 0x3, 0x0, 0x0, {{0x0, 0x4, 0x3}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x69, 0x1}, {0x9, 0x9}}}, @TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_VAR="166dd093aa", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="010059", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="f3ba", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_LVALUE={0x1d, 0x2, [@TCF_META_TYPE_VAR="2210c2244f264701c2", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="43fefa1ddadc69f4", @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0xc, 0x1}, {0x3, 0x1, 0x1}}}]}}, @TCF_EM_IPT={0x58, 0x2, 0x0, 0x0, {{0xfc01, 0x9, 0x6}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}, @TCF_EM_META={0xa8, 0x2, 0x0, 0x0, {{0x2, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x10}, {0x85, 0x7, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x2}, {0xe597, 0x6, 0x1}}}, @TCA_EM_META_LVALUE={0x25, 0x2, [@TCF_META_TYPE_VAR="4d81eae8e9", @TCF_META_TYPE_VAR="902307e190de4360", @TCF_META_TYPE_VAR="a433a0dbfb6b8ad5", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x4}, {0x7, 0x81}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0xfa, 0x2}, {0x5, 0x80}}}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="15", @TCF_META_TYPE_VAR="8e90fa0429b3", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="9df72972fcb5"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x7, 0x1}, {0xc, 0xa3, 0x1}}}, @TCA_EM_META_RVALUE={0x13, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="9beab4e19b5a0d", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0xa]}]}}]}, @TCA_EMATCH_TREE_LIST={0x5c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x22, 0x3, 0x1}, {0x0, 0x8, 0x9, 0x1000}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9, 0x7, 0x3}, {{0x2, 0x1, 0x0, 0x1}, {0x4}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x401}, {0x4, 0x581, 0xa, 0x1, 0x5, 0x0, 0x2}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x101, 0x8, 0x9}, {0x4, 0x3, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1b4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x44}}]}]}}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0xa8, 0x2, [@TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_ACT={0x9c, 0x6, [@m_ct={0x98, 0x15, 0x0, 0x0, {{0x7}, {0x4}, {0x6f, 0x6, "a47fc725fc783dff2e9860d9a3b94fd56977646f3fa8e23bafa1818bfe43043b99c26ad1124fad3c9bd773e3f3dbf3811f45f66613935ab950f1a8b3ef648b7c3b429f2dc6721cd123fd92a933c499b3f8e347a9a754575a723f2935807251f1fffbcf0597521acd57d443"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x300}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 0s ago: executing program 1 (id=2344): socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): s [ 937.773837][T13467] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 937.879717][T13456] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #2: comm syz.0.1743: mark_inode_dirty error [ 937.880979][T13467] syz.1.1742: attempt to access beyond end of device [ 937.880979][T13467] loop1: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 937.950915][T13467] syz.1.1742: attempt to access beyond end of device [ 937.950915][T13467] loop1: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 937.970420][T13456] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #2: comm syz.0.1743: corrupted inode contents [ 938.025204][T13456] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.1743: mark_inode_dirty error [ 938.046908][T13467] syz.1.1742: attempt to access beyond end of device [ 938.046908][T13467] loop1: rw=0, sector=34359738488, nr_sectors = 1 limit=256 [ 938.067215][T13467] Buffer I/O error on dev loop1, logical block 34359738488, async page read [ 938.226119][T13467] syz.1.1742: attempt to access beyond end of device [ 938.226119][T13467] loop1: rw=0, sector=34359738489, nr_sectors = 1 limit=256 [ 938.260389][T12754] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 938.317652][T13467] Buffer I/O error on dev loop1, logical block 34359738489, async page read [ 938.327040][T13467] syz.1.1742: attempt to access beyond end of device [ 938.327040][T13467] loop1: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 938.340952][T13467] Buffer I/O error on dev loop1, logical block 34359738490, async page read [ 938.349775][T13467] syz.1.1742: attempt to access beyond end of device [ 938.349775][T13467] loop1: rw=0, sector=34359738488, nr_sectors = 1 limit=256 [ 938.383569][T13467] Buffer I/O error on dev loop1, logical block 34359738488, async page read [ 938.764828][T13467] syz.1.1742: attempt to access beyond end of device [ 938.764828][T13467] loop1: rw=0, sector=34359738489, nr_sectors = 1 limit=256 [ 938.987353][T13487] loop3: detected capacity change from 0 to 512 [ 939.024217][T13467] Buffer I/O error on dev loop1, logical block 34359738489, async page read [ 939.095222][T13467] syz.1.1742: attempt to access beyond end of device [ 939.095222][T13467] loop1: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 939.095524][T13487] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 939.144494][T13467] Buffer I/O error on dev loop1, logical block 34359738490, async page read [ 939.172548][ T29] audit: type=1800 audit(1728611566.572:360): pid=13467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1742" name="file0" dev="loop1" ino=1048848 res=0 errno=0 [ 939.241438][T13487] EXT4-fs (loop3): blocks per group (35) and clusters per group (32768) inconsistent [ 941.236320][T13515] loop0: detected capacity change from 0 to 512 [ 941.268104][T13513] loop4: detected capacity change from 0 to 512 [ 941.682655][T13513] EXT4-fs (loop4): blocks per group (71) and clusters per group (20800) inconsistent [ 944.129219][T13546] loop1: detected capacity change from 0 to 2048 [ 944.138255][T13546] ext4: Unknown parameter 'nouser_xattr' [ 944.162885][ T5287] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 944.347246][ T5287] usb 1-1: unable to get BOS descriptor or descriptor too short [ 944.477660][ T5287] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 944.612641][ T5287] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 944.779277][ T5287] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 944.842334][ T5287] usb 1-1: config 129 has no interface number 0 [ 944.848637][ T5287] usb 1-1: config 129 has no interface number 1 [ 944.942272][ T5287] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 944.981712][ T5287] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 945.003301][T13557] loop1: detected capacity change from 0 to 1024 [ 945.003840][ T5287] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 945.043937][ T5287] usb 1-1: config 129 interface 135 has no altsetting 0 [ 945.051015][ T5287] usb 1-1: config 129 interface 5 has no altsetting 0 [ 945.323855][T13559] loop4: detected capacity change from 0 to 512 [ 945.325507][T13559] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 945.325532][T13559] EXT4-fs (loop4): blocks per group (35) and clusters per group (32768) inconsistent [ 945.339793][ T5287] usb 1-1: language id specifier not provided by device, defaulting to English [ 946.142051][ T5287] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 946.151135][ T5287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.159707][ T5287] usb 1-1: SerialNumber: syz [ 946.244169][T13567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1778'. [ 946.417125][ T5287] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 946.578110][ T5287] usb 1-1: MIDIStreaming interface descriptor not found [ 947.244822][ T5287] usb 1-1: USB disconnect, device number 7 [ 947.351102][T13583] loop4: detected capacity change from 0 to 256 [ 947.463683][T13580] loop1: detected capacity change from 0 to 8192 [ 947.480585][T13583] loop4: detected capacity change from 256 to 11 [ 947.949271][T13595] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1788'. [ 948.750046][T12410] FAT-fs (loop4): Directory bread(block 3) failed [ 949.291197][T13600] loop2: detected capacity change from 0 to 512 [ 949.326108][ T5968] FAT-fs (loop4): unable to read inode block for updating (i_pos 202) [ 949.380883][T13603] loop1: detected capacity change from 0 to 512 [ 949.387808][T13603] ext4: Unknown parameter 'fowner<00000000000000000000' [ 949.394587][T13606] loop0: detected capacity change from 0 to 512 [ 949.599312][T13606] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 949.599758][T13600] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 949.624595][T13606] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 949.641260][T13606] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 949.677770][T13600] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 949.742619][T13615] loop1: detected capacity change from 0 to 512 [ 949.751878][T13615] EXT4-fs: quotafile must be on filesystem root [ 949.813903][T13615] loop1: detected capacity change from 0 to 512 [ 950.172162][T13615] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 950.181423][T13615] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 950.710673][T12754] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 950.891798][ T5968] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.102593][T13623] loop3: detected capacity change from 0 to 256 [ 951.135181][ T5968] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.139957][T13623] exfat: Unknown parameter '0xffffffffffffffff' [ 951.301250][T11612] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 952.139782][ T5968] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.269988][ T5251] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 952.308633][ T5251] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 952.386043][ T5251] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 952.394021][ T5251] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 952.402744][ T5251] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 952.410083][ T5251] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 952.522564][ T5968] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.543250][T13642] loop2: detected capacity change from 0 to 512 [ 952.589996][T13642] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.1804: Invalid inode bitmap blk 4 in block_group 0 [ 952.671914][T13647] loop1: detected capacity change from 0 to 256 [ 952.759260][T13642] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 953.006258][T13647] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 953.045664][T13657] loop0: detected capacity change from 0 to 512 [ 953.071095][T13647] syz.1.1801: attempt to access beyond end of device [ 953.071095][T13647] loop1: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 953.170679][T13647] syz.1.1801: attempt to access beyond end of device [ 953.170679][T13647] loop1: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 953.862716][T13659] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 954.016120][T13647] syz.1.1801: attempt to access beyond end of device [ 954.016120][T13647] loop1: rw=0, sector=34359738488, nr_sectors = 1 limit=256 [ 954.330906][T13647] Buffer I/O error on dev loop1, logical block 34359738488, async page read [ 954.352182][T13647] syz.1.1801: attempt to access beyond end of device [ 954.352182][T13647] loop1: rw=0, sector=34359738489, nr_sectors = 1 limit=256 [ 954.385967][T13647] Buffer I/O error on dev loop1, logical block 34359738489, async page read [ 954.398001][ T5968] bridge_slave_1: left allmulticast mode [ 954.404690][ T5968] bridge_slave_1: left promiscuous mode [ 954.410578][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.411497][T13663] loop3: detected capacity change from 0 to 512 [ 954.418079][T13647] syz.1.1801: attempt to access beyond end of device [ 954.418079][T13647] loop1: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 954.424550][T13663] ext4: Unknown parameter 'fowner<00000000000000000000' [ 954.472019][T13647] Buffer I/O error on dev loop1, logical block 34359738490, async page read [ 954.501501][T13647] syz.1.1801: attempt to access beyond end of device [ 954.501501][T13647] loop1: rw=0, sector=34359738488, nr_sectors = 1 limit=256 [ 954.537374][T13647] Buffer I/O error on dev loop1, logical block 34359738488, async page read [ 954.546238][T13647] syz.1.1801: attempt to access beyond end of device [ 954.546238][T13647] loop1: rw=0, sector=34359738489, nr_sectors = 1 limit=256 [ 954.577412][T13647] Buffer I/O error on dev loop1, logical block 34359738489, async page read [ 954.586292][T13647] syz.1.1801: attempt to access beyond end of device [ 954.586292][T13647] loop1: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 954.627333][T13647] Buffer I/O error on dev loop1, logical block 34359738490, async page read [ 954.658313][ T5251] Bluetooth: hci2: command tx timeout [ 954.669551][ T5968] bridge_slave_0: left allmulticast mode [ 954.674682][ T29] audit: type=1800 audit(1728611582.060:361): pid=13647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1801" name="file0" dev="loop1" ino=1048851 res=0 errno=0 [ 954.675705][ T5968] bridge_slave_0: left promiscuous mode [ 954.717913][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.791517][T13667] loop3: detected capacity change from 0 to 512 [ 954.800556][T13667] EXT4-fs: quotafile must be on filesystem root [ 954.861217][T13667] loop3: detected capacity change from 0 to 512 [ 954.898265][T13667] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 954.907699][T13667] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 954.932643][T11612] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 955.324594][T13657] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 955.419758][T13657] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 955.424003][T13664] loop3: detected capacity change from 0 to 512 [ 955.436831][T13664] EXT4-fs: Ignoring removed oldalloc option [ 955.442903][T13664] EXT4-fs: Ignoring removed nobh option [ 955.448588][T13664] ext2: Unknown parameter 'auto' [ 955.529266][T13655] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 955.578078][T13671] loop2: detected capacity change from 0 to 512 [ 955.590812][T13671] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 955.642533][T13671] EXT4-fs (loop2): 1 truncate cleaned up [ 955.649474][T13671] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 955.871364][T12754] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 956.766375][ T5251] Bluetooth: hci2: command tx timeout [ 957.792892][T13708] loop3: detected capacity change from 0 to 512 [ 957.827564][T13708] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.1817: Invalid inode bitmap blk 4 in block_group 0 [ 957.873278][T13708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 958.588032][T13712] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 958.843258][ T5251] Bluetooth: hci2: command tx timeout [ 958.921156][T13714] loop0: detected capacity change from 0 to 512 [ 959.013598][ T5968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 959.058074][ T5968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 959.120077][ T5968] bond0 (unregistering): Released all slaves [ 959.129712][T13714] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 959.150467][T10890] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.159627][T13714] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 959.235802][T13714] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 959.284146][T13633] chnl_net:caif_netlink_parms(): no params data found [ 959.331932][T12754] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.456355][T12302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.570680][T13722] loop0: detected capacity change from 0 to 512 [ 959.593220][T13722] ext4: Unknown parameter 'fowner<00000000000000000000' [ 960.645562][T13729] loop0: detected capacity change from 0 to 512 [ 960.657031][T13729] EXT4-fs: quotafile must be on filesystem root [ 960.905896][ T5251] Bluetooth: hci2: command tx timeout [ 961.390772][T13727] loop0: detected capacity change from 0 to 512 [ 961.402234][T13727] EXT4-fs: Ignoring removed oldalloc option [ 961.408999][T13727] EXT4-fs: Ignoring removed nobh option [ 961.416661][T13727] ext2: Unknown parameter 'auto' [ 962.877762][T13756] loop1: detected capacity change from 0 to 1024 [ 964.640983][ T5968] hsr_slave_0: left promiscuous mode [ 964.647581][ T5968] hsr_slave_1: left promiscuous mode [ 964.657120][ T5968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 964.689860][ T5968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 964.703529][ T4627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 964.716242][ T4627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 964.724013][T13764] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1830'. [ 964.725937][ T4627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 964.755797][ T5968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 964.774971][ T5968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 964.840332][ T5968] veth1_macvtap: left promiscuous mode [ 964.846361][ T5968] veth0_macvtap: left promiscuous mode [ 964.853757][ T4627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 964.874521][ T4627] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 964.881161][ T5968] veth1_vlan: left promiscuous mode [ 964.892965][ T4627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 964.900286][ T5968] veth0_vlan: left promiscuous mode [ 964.941068][T13774] loop3: detected capacity change from 0 to 1024 [ 965.000196][T13774] hfsplus: xattr searching failed [ 965.082454][T13775] hfsplus: catalog searching failed [ 965.443679][ T5968] team0 (unregistering): Port device team_slave_1 removed [ 965.495032][ T5968] team0 (unregistering): Port device team_slave_0 removed [ 965.741335][ T12] hfsplus: b-tree write err: -5, ino 3 [ 965.773282][T10890] hfsplus: node 4:3 still has 1 user(s)! [ 966.146243][T13779] loop1: detected capacity change from 0 to 512 [ 966.927072][T13633] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.939027][T13633] bridge0: port 1(bridge_slave_0) entered disabled state [ 966.946744][T13633] bridge_slave_0: entered allmulticast mode [ 966.960675][T13633] bridge_slave_0: entered promiscuous mode [ 966.969005][T13633] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.982057][ T5251] Bluetooth: hci1: command tx timeout [ 967.011313][T13633] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.029752][T13633] bridge_slave_1: entered allmulticast mode [ 967.057237][T13633] bridge_slave_1: entered promiscuous mode [ 968.037732][T13797] loop3: detected capacity change from 0 to 256 [ 968.045393][T13797] msdos: Bad value for 'gid' [ 968.050156][T13797] msdos: Bad value for 'gid' [ 968.076945][T13797] loop3: detected capacity change from 0 to 512 [ 968.253160][T13633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 968.472801][T13797] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 968.512986][T13633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 968.575581][T13797] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 968.708460][T13797] System zones: 0-1, 15-15, 18-18, 34-34 [ 968.825335][T13797] EXT4-fs (loop3): orphan cleanup on readonly fs [ 968.870495][T13797] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 968.879974][T13797] EXT4-fs warning (device loop3): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 968.940304][T13797] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 968.947412][T13797] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.1840: bad orphan inode 16 [ 968.968934][T13797] ext4_test_bit(bit=15, block=18) = 1 [ 968.988758][T13797] is_bad_inode(inode)=0 [ 968.993418][T13797] NEXT_ORPHAN(inode)=0 [ 968.997505][T13797] max_ino=32 [ 969.006804][T13797] i_nlink=2 [ 969.011294][T13797] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 969.047764][T13633] team0: Port device team_slave_0 added [ 969.068266][ T4627] Bluetooth: hci1: command tx timeout [ 969.441337][T13810] loop1: detected capacity change from 0 to 256 [ 969.660617][T10890] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 969.704383][T13810] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 969.765386][T13810] syz.1.1841: attempt to access beyond end of device [ 969.765386][T13810] loop1: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 969.780913][T13810] syz.1.1841: attempt to access beyond end of device [ 969.780913][T13810] loop1: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 969.795162][T13810] syz.1.1841: attempt to access beyond end of device [ 969.795162][T13810] loop1: rw=0, sector=34359738488, nr_sectors = 1 limit=256 [ 969.809112][T13810] Buffer I/O error on dev loop1, logical block 34359738488, async page read [ 969.818295][T13810] syz.1.1841: attempt to access beyond end of device [ 969.818295][T13810] loop1: rw=0, sector=34359738489, nr_sectors = 1 limit=256 [ 969.832285][T13810] Buffer I/O error on dev loop1, logical block 34359738489, async page read [ 969.841382][T13810] syz.1.1841: attempt to access beyond end of device [ 969.841382][T13810] loop1: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 969.855343][T13810] Buffer I/O error on dev loop1, logical block 34359738490, async page read [ 969.864658][T13810] syz.1.1841: attempt to access beyond end of device [ 969.864658][T13810] loop1: rw=0, sector=34359738488, nr_sectors = 1 limit=256 [ 969.878758][T13810] Buffer I/O error on dev loop1, logical block 34359738488, async page read [ 969.888258][T13810] syz.1.1841: attempt to access beyond end of device [ 969.888258][T13810] loop1: rw=0, sector=34359738489, nr_sectors = 1 limit=256 [ 969.902454][T13810] Buffer I/O error on dev loop1, logical block 34359738489, async page read [ 969.911333][T13810] syz.1.1841: attempt to access beyond end of device [ 969.911333][T13810] loop1: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 969.925214][T13810] Buffer I/O error on dev loop1, logical block 34359738490, async page read [ 969.935731][ T29] audit: type=1800 audit(1728611597.357:362): pid=13810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1841" name="file0" dev="loop1" ino=1048853 res=0 errno=0 [ 969.982419][T13633] team0: Port device team_slave_1 added [ 970.453135][T13633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 970.773539][T13827] loop0: detected capacity change from 0 to 16 [ 970.937413][T13633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 971.309998][T13633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 971.362462][T13827] erofs: (device loop0): mounted with root inode @ nid 36. [ 971.381489][T13827] erofs: (device loop0): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 971.394903][T13827] erofs: (device loop0): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 971.404923][T13827] erofs: (device loop0): z_erofs_readahead: readahead error at folio 13 @ nid 36 [ 971.414921][T13827] erofs: (device loop0): z_erofs_readahead: readahead error at folio 8 @ nid 36 [ 971.424917][T13827] syz.0.1845: attempt to access beyond end of device [ 971.424917][T13827] loop0: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 971.441098][T13827] syz.0.1845: attempt to access beyond end of device [ 971.441098][T13827] loop0: rw=524288, sector=13478624032, nr_sectors = 24 limit=16 [ 971.470871][ T4627] Bluetooth: hci1: command tx timeout [ 971.504053][T13766] chnl_net:caif_netlink_parms(): no params data found [ 971.647129][T13633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 971.654106][T13633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 971.767952][T13633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 972.006372][T13766] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.013502][T13766] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.063952][T13766] bridge_slave_0: entered allmulticast mode [ 972.070582][T13766] bridge_slave_0: entered promiscuous mode [ 972.076983][T13846] loop3: detected capacity change from 0 to 256 [ 972.204199][T13846] FAT-fs (loop3): Directory bread(block 64) failed [ 972.228635][T13846] FAT-fs (loop3): Directory bread(block 65) failed [ 972.236933][ T5968] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.260907][T13846] FAT-fs (loop3): Directory bread(block 66) failed [ 972.267537][T13846] FAT-fs (loop3): Directory bread(block 67) failed [ 972.279570][T13846] FAT-fs (loop3): Directory bread(block 68) failed [ 972.286139][T13846] FAT-fs (loop3): Directory bread(block 69) failed [ 972.293158][T13846] FAT-fs (loop3): Directory bread(block 70) failed [ 972.300260][T13846] FAT-fs (loop3): Directory bread(block 71) failed [ 972.307276][T13846] FAT-fs (loop3): Directory bread(block 72) failed [ 972.313824][T13846] FAT-fs (loop3): Directory bread(block 73) failed [ 972.332594][T13766] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.347101][T13856] loop1: detected capacity change from 0 to 256 [ 972.362003][T13766] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.365755][T13856] msdos: Bad value for 'gid' [ 972.391527][T13766] bridge_slave_1: entered allmulticast mode [ 972.412687][T13766] bridge_slave_1: entered promiscuous mode [ 972.430908][T13856] msdos: Bad value for 'gid' [ 972.461303][T13856] loop1: detected capacity change from 0 to 512 [ 972.486975][T13856] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 972.514171][T13856] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 972.519226][ T5968] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.559605][T13856] System zones: 0-1, 15-15, 18-18, 34-34 [ 972.565681][T13856] EXT4-fs (loop1): orphan cleanup on readonly fs [ 972.594308][T13856] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 972.611993][T13856] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 972.613544][T13766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 972.644862][T13856] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 972.666243][T13856] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.1852: bad orphan inode 16 [ 972.689494][T13856] ext4_test_bit(bit=15, block=18) = 1 [ 972.699685][T13856] is_bad_inode(inode)=0 [ 972.703866][T13856] NEXT_ORPHAN(inode)=0 [ 972.710498][T13856] max_ino=32 [ 972.713713][T13856] i_nlink=2 [ 972.747315][ T5968] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.758926][T13856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 972.788267][T13633] hsr_slave_0: entered promiscuous mode [ 972.822120][T13633] hsr_slave_1: entered promiscuous mode [ 972.837379][T13633] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 972.847007][T13633] Cannot create hsr debugfs directory [ 972.905660][T13766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 973.012440][ T5968] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.079849][T12281] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 973.267113][T13766] team0: Port device team_slave_0 added [ 973.343199][T13766] team0: Port device team_slave_1 added [ 973.363593][T13870] loop3: detected capacity change from 0 to 512 [ 973.387079][T13870] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 973.412762][T13870] EXT4-fs (loop3): blocks per group (35) and clusters per group (32768) inconsistent [ 973.490133][ T4627] Bluetooth: hci1: command tx timeout [ 974.232200][T13766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 974.240079][T13766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 974.297057][T13766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 974.357953][T13766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 974.380358][T13766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 974.454622][T13766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 974.484499][T13890] pim6reg1: entered promiscuous mode [ 974.490063][T13890] pim6reg1: entered allmulticast mode [ 975.424241][T13907] Bluetooth: MGMT ver 1.23 [ 975.430434][T13905] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 975.441958][T13907] loop3: detected capacity change from 0 to 256 [ 975.452103][T13907] exfat: Unknown parameter '000000000000000000000000x0000000000000000' [ 975.930714][ T5968] bridge_slave_1: left allmulticast mode [ 975.946597][ T5968] bridge_slave_1: left promiscuous mode [ 975.957180][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.982719][ T5968] bridge_slave_0: left allmulticast mode [ 975.995053][ T5968] bridge_slave_0: left promiscuous mode [ 976.003854][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.188974][T13920] loop0: detected capacity change from 0 to 1024 [ 976.202898][T13920] ext3: Unknown parameter 'func' [ 976.296302][T13930] loop3: detected capacity change from 0 to 512 [ 976.316355][T13930] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 976.331168][T13930] EXT4-fs (loop3): blocks per group (35) and clusters per group (32768) inconsistent [ 976.709419][ T5968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 976.720801][ T5968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 976.737277][ T5968] bond0 (unregistering): Released all slaves [ 976.879447][T13766] hsr_slave_0: entered promiscuous mode [ 976.887975][T13766] hsr_slave_1: entered promiscuous mode [ 976.895457][T13766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 976.906598][T13766] Cannot create hsr debugfs directory [ 977.462502][ T4627] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 978.564364][ T5968] hsr_slave_0: left promiscuous mode [ 978.580190][ T5968] hsr_slave_1: left promiscuous mode [ 978.609808][ T5968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 978.623674][ T5968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 978.632276][ T5968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 978.640541][ T5968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 978.663936][ T5968] veth1_macvtap: left promiscuous mode [ 978.669490][ T5968] veth0_macvtap: left promiscuous mode [ 978.675364][ T5968] veth1_vlan: left promiscuous mode [ 978.681143][ T5968] veth0_vlan: left promiscuous mode [ 980.150272][ T5968] team0 (unregistering): Port device team_slave_1 removed [ 980.198955][ T5968] team0 (unregistering): Port device team_slave_0 removed [ 980.904692][T13994] loop0: detected capacity change from 0 to 512 [ 981.032084][T13994] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 981.122832][T13994] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 981.157097][T14005] input: syz0 as /devices/virtual/input/input8 [ 981.329100][T12754] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 981.435947][T14014] loop3: detected capacity change from 0 to 256 [ 981.470724][T13766] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 981.529994][T13766] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 981.600543][T14014] FAT-fs (loop3): Directory bread(block 64) failed [ 981.608142][T13766] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 981.608620][T14014] FAT-fs (loop3): Directory bread(block 65) failed [ 981.631652][T14014] FAT-fs (loop3): Directory bread(block 66) failed [ 981.638225][T14014] FAT-fs (loop3): Directory bread(block 67) failed [ 981.652674][T13766] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 981.674200][T14014] FAT-fs (loop3): Directory bread(block 68) failed [ 981.719438][T14014] FAT-fs (loop3): Directory bread(block 69) failed [ 981.746200][T14014] FAT-fs (loop3): Directory bread(block 70) failed [ 981.756331][T13633] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 981.764767][T14014] FAT-fs (loop3): Directory bread(block 71) failed [ 981.774451][T13633] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 981.782473][T14014] FAT-fs (loop3): Directory bread(block 72) failed [ 981.789785][T14014] FAT-fs (loop3): Directory bread(block 73) failed [ 981.845388][T13633] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 981.879992][T13633] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 982.120551][T13766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 982.178341][T13633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 982.193789][T13633] 8021q: adding VLAN 0 to HW filter on device team0 [ 982.227234][T13633] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 982.237720][T13633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 982.263065][T13766] 8021q: adding VLAN 0 to HW filter on device team0 [ 982.305326][ T2567] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.312554][ T2567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 982.335704][ T2567] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.342901][ T2567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 982.440466][T14044] loop1: detected capacity change from 0 to 1024 [ 982.520287][ T2567] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.527445][ T2567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 982.732188][ T2567] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.739364][ T2567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 983.452182][T11957] bio_check_eod: 1 callbacks suppressed [ 983.452200][T11957] kworker/u8:3: attempt to access beyond end of device [ 983.452200][T11957] loop3: rw=1, sector=1224, nr_sectors = 544 limit=256 [ 983.471175][T14066] loop0: detected capacity change from 0 to 1024 [ 983.487823][T11957] kworker/u8:3: attempt to access beyond end of device [ 983.487823][T11957] loop3: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 983.498477][T13633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 983.514415][ T4627] Bluetooth: hci3: command 0x0406 tx timeout [ 983.517217][T11957] kworker/u8:3: attempt to access beyond end of device [ 983.517217][T11957] loop3: rw=1, sector=1960, nr_sectors = 280 limit=256 [ 983.629529][T13766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 983.662412][T13766] veth0_vlan: entered promiscuous mode [ 983.673883][T13766] veth1_vlan: entered promiscuous mode [ 983.694758][T13766] veth0_macvtap: entered promiscuous mode [ 983.703615][T13766] veth1_macvtap: entered promiscuous mode [ 983.717809][T13766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.728558][T13766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.746125][T13766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.756946][T13766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.767208][T13766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.777954][T13766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.791538][T13766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 983.843104][T13766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 983.854802][T14066] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 983.857767][T13766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.876856][T13766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 983.887466][T13766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.897386][T13766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 983.907927][T13766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.918554][T13766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 983.928781][T13766] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.937617][T13766] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.946324][T13766] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.955198][T13766] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.967087][T14066] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 984.102630][T12754] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 984.225105][ T2567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 984.242499][ T2567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 984.280478][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 984.294194][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 984.446348][T13633] veth0_vlan: entered promiscuous mode [ 984.503826][T13633] veth1_vlan: entered promiscuous mode [ 984.529132][ T7979] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 984.642142][T13633] veth0_macvtap: entered promiscuous mode [ 984.675722][T13633] veth1_macvtap: entered promiscuous mode [ 984.707062][ T7979] usb 4-1: Using ep0 maxpacket: 16 [ 984.714688][T13633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 984.719028][ T7979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 984.762252][ T7979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 984.775503][ T7979] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 984.789737][ T7979] usb 4-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 984.799882][T13633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.810446][ T7979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.854826][T13633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 984.879465][T13633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.889509][T13633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 984.900624][T13633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.910535][T13633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 984.921057][T13633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.927465][T14113] loop0: detected capacity change from 0 to 256 [ 984.932151][T13633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 984.949318][ T7979] usb 4-1: config 0 descriptor?? [ 984.999191][T13633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 985.009963][T13633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.019909][T13633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 985.030375][T13633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.040539][T13633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 985.051290][T13633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.061171][T13633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 985.072138][T13633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.079367][T14113] vfat: Unknown parameter 'non€' [ 985.083085][T13633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 985.098076][T13633] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.107020][T13633] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.115775][T13633] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.124518][T13633] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.219842][ T47] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 985.316196][ T2567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.344794][ T2567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.377771][ T47] usb 2-1: Using ep0 maxpacket: 8 [ 985.386091][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 985.402322][ T7979] wacom 0003:056A:0022.0007: ignoring exceeding usage max [ 985.414517][ T47] usb 2-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 985.427811][ T7979] wacom 0003:056A:0022.0007: Unknown device_type for 'HID 056a:0022'. Assuming pen. [ 985.447337][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.463343][ T47] usb 2-1: config 0 descriptor?? [ 985.477396][ T7979] wacom 0003:056A:0022.0007: hidraw0: USB HID v0.00 Device [HID 056a:0022] on usb-dummy_hcd.3-1/input0 [ 985.490725][ T2567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.518111][ T7979] input: Wacom Intuos 9x12 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0022.0007/input/input9 [ 985.522016][ T2567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.569235][T14114] loop2: detected capacity change from 0 to 16384 [ 985.577287][T14124] netlink: 'syz.0.1916': attribute type 1 has an invalid length. [ 985.604650][T14124] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1916'. [ 985.650292][T14114] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 985.651939][ T7979] usb 4-1: USB disconnect, device number 8 [ 985.692506][T14114] UDF-fs: Scanning with blocksize 512 failed [ 985.754330][T14114] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 985.795523][T14114] UDF-fs: Scanning with blocksize 1024 failed [ 985.828875][T14114] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 985.857176][T14114] UDF-fs: Scanning with blocksize 2048 failed [ 985.932508][T14114] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 986.087342][ T47] apple 0003:05AC:0264.0008: unknown main item tag 0x0 [ 986.094348][ T47] apple 0003:05AC:0264.0008: unknown main item tag 0x0 [ 986.101389][ T47] apple 0003:05AC:0264.0008: unknown main item tag 0x0 [ 986.108280][ T47] apple 0003:05AC:0264.0008: unknown main item tag 0x0 [ 986.115250][ T47] apple 0003:05AC:0264.0008: unknown main item tag 0x0 [ 986.123429][ T47] apple 0003:05AC:0264.0008: unknown main item tag 0x0 [ 986.130588][ T47] apple 0003:05AC:0264.0008: unknown main item tag 0x0 [ 986.139804][ T47] apple 0003:05AC:0264.0008: hidraw0: USB HID v0.00 Device [HID 05ac:0264] on usb-dummy_hcd.1-1/input0 [ 986.165440][ T47] usb 2-1: USB disconnect, device number 11 [ 986.361402][T14140] loop3: detected capacity change from 0 to 512 [ 986.386556][T14140] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.1918: bad orphan inode 17 [ 986.397572][T14140] ext4_test_bit(bit=16, block=4) = 1 [ 986.405286][T14140] is_bad_inode(inode)=0 [ 986.411283][T14143] loop0: detected capacity change from 0 to 256 [ 986.417431][T14140] NEXT_ORPHAN(inode)=0 [ 986.421822][T14140] max_ino=32 [ 986.425190][T14140] i_nlink=1 [ 986.435490][T14140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 986.508159][T14143] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 987.660429][T10890] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 988.208229][T14182] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1929'. [ 988.776766][T14176] loop0: detected capacity change from 0 to 128 [ 988.928014][T14176] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 989.097405][T14176] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 989.191477][T14197] loop1: detected capacity change from 0 to 256 [ 989.377160][T14176] syz.0.1926 (pid 14176) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 989.875027][T14206] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1933'. [ 989.972507][T14197] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 990.043017][T14210] loop3: detected capacity change from 0 to 512 [ 990.122881][T14197] syz.1.1927: attempt to access beyond end of device [ 990.122881][T14197] loop1: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 990.138775][T14197] syz.1.1927: attempt to access beyond end of device [ 990.138775][T14197] loop1: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 990.152826][T14197] syz.1.1927: attempt to access beyond end of device [ 990.152826][T14197] loop1: rw=0, sector=34359738488, nr_sectors = 1 limit=256 [ 990.166901][T14197] Buffer I/O error on dev loop1, logical block 34359738488, async page read [ 990.195944][T14197] syz.1.1927: attempt to access beyond end of device [ 990.195944][T14197] loop1: rw=0, sector=34359738489, nr_sectors = 1 limit=256 [ 990.252743][T12754] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 990.265030][T14210] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.1934: bad orphan inode 17 [ 990.329060][T14197] Buffer I/O error on dev loop1, logical block 34359738489, async page read [ 990.368399][T14197] syz.1.1927: attempt to access beyond end of device [ 990.368399][T14197] loop1: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 990.432888][T14210] ext4_test_bit(bit=16, block=4) = 1 [ 990.438519][T14210] is_bad_inode(inode)=0 [ 990.453482][T14210] NEXT_ORPHAN(inode)=0 [ 990.477306][T14197] Buffer I/O error on dev loop1, logical block 34359738490, async page read [ 990.494360][T14197] syz.1.1927: attempt to access beyond end of device [ 990.494360][T14197] loop1: rw=0, sector=34359738488, nr_sectors = 1 limit=256 [ 990.497689][T14210] max_ino=32 [ 990.601060][T14210] i_nlink=1 [ 990.612537][T14210] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 990.734675][T14197] Buffer I/O error on dev loop1, logical block 34359738488, async page read [ 991.254513][T14197] syz.1.1927: attempt to access beyond end of device [ 991.254513][T14197] loop1: rw=0, sector=34359738489, nr_sectors = 1 limit=256 [ 991.303048][T14197] Buffer I/O error on dev loop1, logical block 34359738489, async page read [ 991.349799][T14239] loop4: detected capacity change from 0 to 512 [ 991.409112][T14197] syz.1.1927: attempt to access beyond end of device [ 991.409112][T14197] loop1: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 991.457928][T14239] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 991.483519][T14239] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 991.484025][T14197] Buffer I/O error on dev loop1, logical block 34359738490, async page read [ 991.511372][T10890] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 991.530561][ T29] audit: type=1800 audit(1728611619.304:363): pid=14197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1927" name="file0" dev="loop1" ino=1048866 res=0 errno=0 [ 991.566011][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 991.598933][T14239] EXT4-fs (loop4): shut down requested (0) [ 991.732404][T14252] loop2: detected capacity change from 0 to 1024 [ 991.750579][T13633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 992.862337][T14266] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1947'. [ 993.014706][T14275] netlink: 'syz.4.1949': attribute type 1 has an invalid length. [ 993.039307][T14275] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1949'. [ 994.979650][T14292] loop0: detected capacity change from 0 to 2048 [ 995.003791][T14292] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 995.066167][T14303] loop2: detected capacity change from 0 to 512 [ 995.170126][T14306] loop1: detected capacity change from 0 to 1024 [ 995.177390][T14306] EXT4-fs: Ignoring removed orlov option [ 995.183516][T14306] EXT4-fs: Ignoring removed nomblk_io_submit option [ 995.185853][T14303] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 995.294494][T14303] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 995.334848][T12754] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 995.351176][T14306] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 995.807425][T14322] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 996.253357][T13766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 996.269633][T14332] loop0: detected capacity change from 0 to 1024 [ 997.211290][ T5287] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 997.487177][ T29] audit: type=1326 audit(1728611625.327:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14360 comm="syz.2.1970" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f178837dff9 code=0x0 [ 997.565789][ T5287] usb 2-1: Using ep0 maxpacket: 8 [ 997.578025][ T5287] usb 2-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d0.ab [ 997.587880][ T5287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.596090][ T5287] usb 2-1: Product: syz [ 997.606134][ T5287] usb 2-1: Manufacturer: syz [ 997.622679][ T5287] usb 2-1: SerialNumber: syz [ 997.683951][T14367] netlink: 'syz.0.1965': attribute type 4 has an invalid length. [ 998.235583][ T5287] usb 2-1: config 0 descriptor?? [ 998.390649][ T5287] usb 2-1: can't set config #0, error -71 [ 998.438620][ T5287] usb 2-1: USB disconnect, device number 12 [ 999.003400][T12281] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 999.374315][T14391] loop2: detected capacity change from 0 to 1024 [ 1000.761154][T11132] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1000.834096][ T29] audit: type=1326 audit(1728611628.696:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14411 comm="syz.3.1986" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b21f7dff9 code=0x0 [ 1000.910180][T14417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1986'. [ 1000.919352][T11132] usb 3-1: device descriptor read/64, error -71 [ 1001.159707][T11132] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1001.382081][T11132] usb 3-1: device descriptor read/64, error -71 [ 1001.472605][ T5251] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 1001.519428][T11132] usb usb3-port1: attempt power cycle [ 1001.907648][T11132] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1002.046471][T11132] usb 3-1: device descriptor read/8, error -71 [ 1002.284438][T11132] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1002.502368][T14444] loop4: detected capacity change from 0 to 256 [ 1002.532073][T14446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1997'. [ 1002.587742][T11132] usb 3-1: device not accepting address 12, error -71 [ 1002.595365][T11132] usb usb3-port1: unable to enumerate USB device [ 1002.624971][T14444] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 1003.250974][T14444] syz.4.1990: attempt to access beyond end of device [ 1003.250974][T14444] loop4: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 1003.552838][T14444] syz.4.1990: attempt to access beyond end of device [ 1003.552838][T14444] loop4: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 1003.598678][T14444] syz.4.1990: attempt to access beyond end of device [ 1003.598678][T14444] loop4: rw=0, sector=34359738488, nr_sectors = 1 limit=256 [ 1003.633063][T14444] Buffer I/O error on dev loop4, logical block 34359738488, async page read [ 1004.244180][ T5251] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 1004.265903][T14444] syz.4.1990: attempt to access beyond end of device [ 1004.265903][T14444] loop4: rw=0, sector=34359738489, nr_sectors = 1 limit=256 [ 1004.280332][T14444] Buffer I/O error on dev loop4, logical block 34359738489, async page read [ 1004.409617][T14444] syz.4.1990: attempt to access beyond end of device [ 1004.409617][T14444] loop4: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 1004.459124][T14444] Buffer I/O error on dev loop4, logical block 34359738490, async page read [ 1004.468448][T14444] syz.4.1990: attempt to access beyond end of device [ 1004.468448][T14444] loop4: rw=0, sector=34359738488, nr_sectors = 1 limit=256 [ 1004.483620][ T29] audit: type=1326 audit(1728611632.332:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14462 comm="syz.2.2002" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f178837dff9 code=0x0 [ 1004.519148][T14461] loop1: detected capacity change from 0 to 1024 [ 1004.529022][T14444] Buffer I/O error on dev loop4, logical block 34359738488, async page read [ 1004.539298][T14461] EXT4-fs: Ignoring removed orlov option [ 1004.556999][T14444] syz.4.1990: attempt to access beyond end of device [ 1004.556999][T14444] loop4: rw=0, sector=34359738489, nr_sectors = 1 limit=256 [ 1004.604549][T14461] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1004.611798][T14461] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 1004.640069][T14465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2002'. [ 1004.690236][T14444] Buffer I/O error on dev loop4, logical block 34359738489, async page read [ 1004.700015][T14444] syz.4.1990: attempt to access beyond end of device [ 1004.700015][T14444] loop4: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 1004.742262][T14461] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1004.773884][T14444] Buffer I/O error on dev loop4, logical block 34359738490, async page read [ 1004.936824][ T29] audit: type=1800 audit(1728611632.653:367): pid=14444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1990" name="file0" dev="loop4" ino=1048868 res=0 errno=0 [ 1005.589876][T12281] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1005.716746][T14480] loop3: detected capacity change from 0 to 2048 [ 1005.760429][T14482] loop2: detected capacity change from 0 to 1024 [ 1005.786215][T14483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2008'. [ 1005.909186][T14480] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1005.928471][T14489] loop0: detected capacity change from 0 to 256 [ 1005.943391][T14489] msdos: Bad value for 'gid' [ 1005.948022][T14489] msdos: Bad value for 'gid' [ 1006.065385][T14489] loop0: detected capacity change from 0 to 512 [ 1006.177687][T14492] loop4: detected capacity change from 0 to 512 [ 1006.187745][ T5287] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1006.223210][T14492] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1006.514070][T14489] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1006.523974][T14492] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1006.714508][T14492] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e800e118, mo2=0003] [ 1006.726306][T14489] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1006.759500][T14492] System zones: 0-1, 15-15, 18-18, 34-34 [ 1006.765399][T14489] System zones: 0-1, 15-15, 18-18, 34-34 [ 1006.784942][T14492] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1006.800170][T14489] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1006.820004][T14492] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 1006.832170][T14489] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 1006.856145][ T5251] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 1006.868204][T14501] loop1: detected capacity change from 0 to 512 [ 1006.884257][T14492] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1006.901474][T14489] EXT4-fs warning (device loop0): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1006.916731][T14492] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1006.923580][T14489] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 1006.937294][T14492] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2012: bg 0: block 40: padding at end of block bitmap is not set [ 1006.953948][ T5287] usb 3-1: device descriptor read/64, error -71 [ 1006.975793][T10890] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1006.991292][T14489] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.2010: bad orphan inode 16 [ 1007.012255][T14492] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1007.022794][T14489] ext4_test_bit(bit=15, block=18) = 1 [ 1007.028296][T14489] is_bad_inode(inode)=0 [ 1007.032624][T14489] NEXT_ORPHAN(inode)=0 [ 1007.039265][T14489] max_ino=32 [ 1007.042480][T14489] i_nlink=2 [ 1007.047020][T14489] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1007.288991][T14501] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.2013: Invalid inode bitmap blk 4 in block_group 0 [ 1007.305915][T14501] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1007.329646][T14492] EXT4-fs (loop4): 1 truncate cleaned up [ 1007.338555][T14492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1007.505818][ T5287] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1007.542692][T12754] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1008.142225][T13633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1008.146057][T14506] loop3: detected capacity change from 0 to 512 [ 1008.158560][T14506] ext4: Unknown parameter 'noacl' [ 1008.186393][T14506] loop3: detected capacity change from 0 to 1024 [ 1008.202363][T14468] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 1008.219897][T14501] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 1008.295655][T14506] hfsplus: Bad value for 'session' [ 1009.059366][ T5287] usb 3-1: device descriptor read/64, error -71 [ 1009.073908][T12281] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1009.283078][ T5287] usb usb3-port1: attempt power cycle [ 1010.355112][ T5287] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1011.346835][ T5287] usb 3-1: device descriptor read/8, error -71 [ 1011.665470][T14544] loop1: detected capacity change from 0 to 256 [ 1011.696127][T14540] loop0: detected capacity change from 0 to 256 [ 1011.703945][T14540] msdos: Bad value for 'gid' [ 1011.708575][T14540] msdos: Bad value for 'gid' [ 1011.711584][T14546] loop2: detected capacity change from 0 to 512 [ 1011.766698][T14550] loop4: detected capacity change from 0 to 256 [ 1011.773532][T14540] loop0: detected capacity change from 0 to 512 [ 1011.783554][T14546] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.2027: Invalid inode bitmap blk 4 in block_group 0 [ 1011.869662][T14546] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1011.892952][T14544] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1012.777030][T14540] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1012.796469][T14546] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 1012.812921][T14540] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1012.846314][T14540] System zones: 0-1, 15-15, 18-18, 34-34 [ 1012.857973][T14550] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 1012.874242][T14540] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1012.891364][T14540] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 1012.927933][T14540] EXT4-fs warning (device loop0): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1012.957336][T14550] syz.4.2022: attempt to access beyond end of device [ 1012.957336][T14550] loop4: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 1012.978901][T14540] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 1012.996351][T14540] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.2025: bad orphan inode 16 [ 1013.017811][T14550] syz.4.2022: attempt to access beyond end of device [ 1013.017811][T14550] loop4: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 1013.043736][T14540] ext4_test_bit(bit=15, block=18) = 1 [ 1013.049347][T14540] is_bad_inode(inode)=0 [ 1013.053554][T14540] NEXT_ORPHAN(inode)=0 [ 1013.066982][T14540] max_ino=32 [ 1013.071073][T14540] i_nlink=2 [ 1013.075195][T14540] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1013.094427][T14550] syz.4.2022: attempt to access beyond end of device [ 1013.094427][T14550] loop4: rw=0, sector=34359738488, nr_sectors = 1 limit=256 [ 1013.120365][T13766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1013.143042][T14550] Buffer I/O error on dev loop4, logical block 34359738488, async page read [ 1013.197420][T14550] syz.4.2022: attempt to access beyond end of device [ 1013.197420][T14550] loop4: rw=0, sector=34359738489, nr_sectors = 1 limit=256 [ 1013.347122][T14550] Buffer I/O error on dev loop4, logical block 34359738489, async page read [ 1013.356236][T14550] syz.4.2022: attempt to access beyond end of device [ 1013.356236][T14550] loop4: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 1013.370318][T14550] Buffer I/O error on dev loop4, logical block 34359738490, async page read [ 1013.379265][T14550] syz.4.2022: attempt to access beyond end of device [ 1013.379265][T14550] loop4: rw=0, sector=34359738488, nr_sectors = 1 limit=256 [ 1013.396021][T14550] Buffer I/O error on dev loop4, logical block 34359738488, async page read [ 1013.463554][T14550] syz.4.2022: attempt to access beyond end of device [ 1013.463554][T14550] loop4: rw=0, sector=34359738489, nr_sectors = 1 limit=256 [ 1013.485450][T14550] Buffer I/O error on dev loop4, logical block 34359738489, async page read [ 1013.494324][T14550] syz.4.2022: attempt to access beyond end of device [ 1013.494324][T14550] loop4: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 1013.858781][T12754] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1014.124863][T14550] Buffer I/O error on dev loop4, logical block 34359738490, async page read [ 1014.175672][ T29] audit: type=1800 audit(1728611642.032:368): pid=14550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2022" name="file0" dev="loop4" ino=1048870 res=0 errno=0 [ 1015.158635][T14581] loop2: detected capacity change from 0 to 512 [ 1015.175984][T14581] EXT4-fs: Ignoring removed i_version option [ 1015.194353][T14581] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1015.251009][T14581] EXT4-fs (loop2): 1 truncate cleaned up [ 1015.257733][T14581] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1015.482205][T14581] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 1015.496238][T14592] loop0: detected capacity change from 0 to 1024 [ 1015.603330][T13766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1015.714149][T14600] loop2: detected capacity change from 0 to 512 [ 1015.806737][ T5316] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1015.901223][T14600] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.2042: Invalid inode bitmap blk 4 in block_group 0 [ 1015.944636][ T5316] usb 1-1: device descriptor read/64, error -71 [ 1015.965568][T14600] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1016.439177][ T5316] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1016.966324][T14616] loop1: detected capacity change from 0 to 256 [ 1016.985160][T13766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1017.024207][T14616] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 1017.263331][ T5316] usb 1-1: device descriptor read/64, error -71 [ 1017.751949][ T5316] usb usb1-port1: attempt power cycle [ 1017.771219][T14626] loop2: detected capacity change from 0 to 128 [ 1017.853006][T14624] loop3: detected capacity change from 0 to 16 [ 1018.107639][ T5316] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1018.134159][T14624] erofs: (device loop3): mounted with root inode @ nid 36. [ 1018.485843][ T29] audit: type=1326 audit(1728611646.184:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14625 comm="syz.2.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178837dff9 code=0x7ffc0000 [ 1018.989734][ T29] audit: type=1326 audit(1728611646.184:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14625 comm="syz.2.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178837dff9 code=0x7ffc0000 [ 1019.018864][ T5316] usb 1-1: device descriptor read/8, error -71 [ 1019.075750][T14638] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1019.171475][T14640] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2053'. [ 1019.184300][ T29] audit: type=1326 audit(1728611646.184:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14625 comm="syz.2.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f178837c897 code=0x7ffc0000 [ 1019.274831][ T29] audit: type=1326 audit(1728611646.195:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14625 comm="syz.2.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178837dff9 code=0x7ffc0000 [ 1019.298016][ T29] audit: type=1326 audit(1728611646.195:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14625 comm="syz.2.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178837dff9 code=0x7ffc0000 [ 1019.320998][ T29] audit: type=1326 audit(1728611646.195:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14625 comm="syz.2.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f178837dff9 code=0x7ffc0000 [ 1019.343834][ T29] audit: type=1326 audit(1728611646.195:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14625 comm="syz.2.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178837dff9 code=0x7ffc0000 [ 1019.366419][ T29] audit: type=1326 audit(1728611646.195:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14625 comm="syz.2.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178837dff9 code=0x7ffc0000 [ 1019.388867][ T29] audit: type=1326 audit(1728611646.195:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14625 comm="syz.2.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f178837dff9 code=0x7ffc0000 [ 1019.415716][ T29] audit: type=1326 audit(1728611646.195:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14625 comm="syz.2.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178837dff9 code=0x7ffc0000 [ 1019.693152][T14651] netlink: 'syz.4.2057': attribute type 4 has an invalid length. [ 1020.368066][T14653] cgroup: Unknown subsys name 'cpuset' [ 1020.419920][T14655] loop1: detected capacity change from 0 to 512 [ 1020.663542][T14655] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.2059: Invalid inode bitmap blk 4 in block_group 0 [ 1021.002136][T14660] loop2: detected capacity change from 0 to 256 [ 1021.024128][T14655] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1021.351695][T14660] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 1022.230477][T14665] loop0: detected capacity change from 0 to 512 [ 1022.275881][T14665] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1022.323711][T14665] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1022.381571][T12281] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1022.467162][T14665] EXT4-fs (loop0): shut down requested (0) [ 1023.544330][T12754] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1023.965689][T14699] ip6t_rpfilter: unknown options [ 1024.726225][ T5288] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 1024.752606][T14703] cgroup: Unknown subsys name 'cpuset' [ 1026.982829][T14713] loop2: detected capacity change from 0 to 512 [ 1027.294090][T14713] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.2075: Invalid inode bitmap blk 4 in block_group 0 [ 1027.580170][T14713] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1027.874987][ T5288] usb 2-1: device descriptor read/all, error -71 [ 1028.427281][T14736] loop0: detected capacity change from 0 to 16 [ 1028.459455][T14736] erofs: (device loop0): mounted with root inode @ nid 36. [ 1028.490819][T13766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1028.515991][T14736] erofs: (device loop0): erofs_map_blocks_flatmode: inline data across blocks @ nid 36 [ 1028.595733][T14736] syz.0.2082: attempt to access beyond end of device [ 1028.595733][T14736] loop0: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 1028.942433][T14747] loop3: detected capacity change from 0 to 256 [ 1029.221086][T14747] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 1029.242988][T14743] syz.3.2085: attempt to access beyond end of device [ 1029.242988][T14743] loop3: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 1029.258997][T14743] syz.3.2085: attempt to access beyond end of device [ 1029.258997][T14743] loop3: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 1029.273169][T14743] syz.3.2085: attempt to access beyond end of device [ 1029.273169][T14743] loop3: rw=0, sector=34359738488, nr_sectors = 1 limit=256 [ 1029.287323][T14743] Buffer I/O error on dev loop3, logical block 34359738488, async page read [ 1029.292884][T14746] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.296522][T14743] syz.3.2085: attempt to access beyond end of device [ 1029.296522][T14743] loop3: rw=0, sector=34359738489, nr_sectors = 1 limit=256 [ 1029.303598][T14746] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.317122][T14743] Buffer I/O error on dev loop3, logical block 34359738489, async page read [ 1029.333743][T14743] syz.3.2085: attempt to access beyond end of device [ 1029.333743][T14743] loop3: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 1029.347924][T14743] Buffer I/O error on dev loop3, logical block 34359738490, async page read [ 1029.357006][T14743] syz.3.2085: attempt to access beyond end of device [ 1029.357006][T14743] loop3: rw=0, sector=34359738488, nr_sectors = 1 limit=256 [ 1029.371209][T14743] Buffer I/O error on dev loop3, logical block 34359738488, async page read [ 1029.380264][T14743] syz.3.2085: attempt to access beyond end of device [ 1029.380264][T14743] loop3: rw=0, sector=34359738489, nr_sectors = 1 limit=256 [ 1029.394486][T14743] Buffer I/O error on dev loop3, logical block 34359738489, async page read [ 1029.403609][T14743] syz.3.2085: attempt to access beyond end of device [ 1029.403609][T14743] loop3: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 1029.417663][T14743] Buffer I/O error on dev loop3, logical block 34359738490, async page read [ 1029.459829][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 1029.459847][ T29] audit: type=1800 audit(1728611657.617:415): pid=14743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2085" name="file0" dev="loop3" ino=1048874 res=0 errno=0 [ 1031.859672][T14764] loop4: detected capacity change from 0 to 512 [ 1031.866428][T14764] ext4: Unknown parameter 'noacl' [ 1034.213508][T14790] pim6reg1: entered promiscuous mode [ 1034.219106][T14790] pim6reg1: entered allmulticast mode [ 1034.414889][T14795] loop0: detected capacity change from 0 to 1764 [ 1034.423285][T14795] isofs_fill_super: bread failed, dev=loop0, iso_blknum=37807, block=75614 [ 1034.430587][T14774] loop3: detected capacity change from 0 to 1024 [ 1034.687652][T14804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2102'. [ 1036.489256][T14833] cgroup: Unknown subsys name 'cpuset' [ 1036.955837][T14836] loop1: detected capacity change from 0 to 16 [ 1036.966257][T14836] erofs: (device loop1): erofs_read_inode: negative i_size @ nid 36 [ 1038.226627][T14844] loop3: detected capacity change from 0 to 8 [ 1038.895635][T14844] loop3: detected capacity change from 0 to 1024 [ 1038.947193][T14844] hfsplus: Filesystem is marked locked, mounting read-only. [ 1038.989972][T14844] hfsplus: failed to load extents file [ 1039.069389][ T29] audit: type=1326 audit(1728611667.364:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14849 comm="syz.1.2114" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa9b357dff9 code=0x0 [ 1041.169355][T14874] loop4: detected capacity change from 0 to 512 [ 1041.252274][T14874] EXT4-fs (loop4): blocks per group (71) and clusters per group (20800) inconsistent [ 1041.292389][T14876] loop3: detected capacity change from 0 to 256 [ 1041.294146][T14878] loop2: detected capacity change from 0 to 128 [ 1041.308871][T14878] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1043.797163][T14918] loop3: detected capacity change from 0 to 256 [ 1044.601284][T14918] FAT-fs (loop3): Directory bread(block 64) failed [ 1044.608047][T14918] FAT-fs (loop3): Directory bread(block 65) failed [ 1044.614636][T14918] FAT-fs (loop3): Directory bread(block 66) failed [ 1044.621218][T14918] FAT-fs (loop3): Directory bread(block 67) failed [ 1044.627851][T14918] FAT-fs (loop3): Directory bread(block 68) failed [ 1044.634380][T14918] FAT-fs (loop3): Directory bread(block 69) failed [ 1044.641293][T14918] FAT-fs (loop3): Directory bread(block 70) failed [ 1044.647869][T14918] FAT-fs (loop3): Directory bread(block 71) failed [ 1044.654489][T14918] FAT-fs (loop3): Directory bread(block 72) failed [ 1044.661048][T14918] FAT-fs (loop3): Directory bread(block 73) failed [ 1044.937934][ T5251] Bluetooth: hci1: command tx timeout [ 1045.036148][T14921] loop0: detected capacity change from 0 to 256 [ 1045.324828][T14927] loop1: detected capacity change from 0 to 512 [ 1045.877335][T14927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1046.083429][T14927] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1046.127409][T14927] EXT4-fs (loop1): resizing filesystem from 128 to 1 blocks [ 1046.134747][T14927] EXT4-fs warning (device loop1): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 1046.138342][ T29] audit: type=1800 audit(1728611674.460:417): pid=14927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2140" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 1046.164789][ C1] vkms_vblank_simulate: vblank timer overrun [ 1046.240667][T14939] loop0: detected capacity change from 0 to 512 [ 1046.566608][T12281] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1046.576742][T14939] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1046.614205][T14939] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1046.652618][T14955] loop3: detected capacity change from 0 to 256 [ 1046.834029][T12754] EXT4-fs error (device loop0): ext4_empty_dir:3090: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 1047.088951][T14955] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1047.103856][T12754] EXT4-fs error (device loop0): ext4_empty_dir:3090: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 1047.275183][T12754] EXT4-fs error (device loop0): ext4_empty_dir:3090: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 1047.637406][T12754] EXT4-fs error (device loop0): ext4_empty_dir:3090: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 1047.791278][T14955] exFAT-fs (loop3): error, broken FAT chain. [ 1047.810784][T12754] EXT4-fs error (device loop0): ext4_empty_dir:3090: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 1047.840001][T14955] exFAT-fs (loop3): Filesystem has been set read-only [ 1047.876317][T12754] EXT4-fs error (device loop0): ext4_empty_dir:3090: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 1047.898619][T14955] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805f20db78 iblock : 8, err : -5) [ 1047.944443][T14955] exFAT-fs (loop3): error, broken FAT chain. [ 1047.945278][T12754] EXT4-fs error (device loop0): ext4_empty_dir:3090: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 1047.962235][T14955] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805f20db78 iblock : 8, err : -5) [ 1048.029221][T12754] EXT4-fs error (device loop0): ext4_empty_dir:3090: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 1048.057380][T12754] EXT4-fs error (device loop0): ext4_empty_dir:3090: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 1048.088087][T12754] EXT4-fs error (device loop0): ext4_empty_dir:3090: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 1048.360600][T14982] loop2: detected capacity change from 0 to 1024 [ 1049.757035][T14982] hfsplus: bad catalog entry type [ 1049.769987][T14982] hfsplus: bad catalog entry type [ 1049.815445][ T5978] hfsplus: bad catalog file entry [ 1049.825097][ T5978] hfsplus: b-tree write err: -5, ino 3 [ 1049.969338][ T5251] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 1050.640371][T12754] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1050.726392][T15011] loop2: detected capacity change from 0 to 512 [ 1050.836147][T11506] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.915748][T15011] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #15: comm syz.2.2169: casefold flag without casefold feature [ 1050.997562][T15011] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.2169: couldn't read orphan inode 15 (err -117) [ 1051.068560][T15011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1051.177884][T11506] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.348093][T13766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1051.464029][T15029] loop4: detected capacity change from 0 to 1024 [ 1051.531492][T15029] EXT4-fs: Ignoring removed orlov option [ 1051.549051][T15029] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1051.556375][T15029] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 1051.557507][T15033] loop3: detected capacity change from 0 to 512 [ 1051.644996][T15029] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1051.717306][T11506] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.729426][T15033] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1051.779340][T15033] EXT4-fs (loop3): blocks per group (35) and clusters per group (32768) inconsistent [ 1052.443819][ T4627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1052.449252][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1052.459261][ T4627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1052.473308][ T4627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1052.568079][ T4627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1052.592428][ T4627] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1052.600629][ T4627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1052.628590][T13633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1052.659473][T15049] loop1: detected capacity change from 0 to 512 [ 1052.740847][T15049] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.2183: Invalid inode bitmap blk 4 in block_group 0 [ 1052.770945][T15049] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1052.852428][T15049] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 1052.911218][T12281] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1053.179957][T15056] loop1: detected capacity change from 0 to 256 [ 1053.957808][T15059] loop1: detected capacity change from 0 to 256 [ 1054.094548][T15059] FAT-fs (loop1): Directory bread(block 64) failed [ 1054.110959][T15059] FAT-fs (loop1): Directory bread(block 65) failed [ 1054.118846][T15059] FAT-fs (loop1): Directory bread(block 66) failed [ 1054.133279][T15059] FAT-fs (loop1): Directory bread(block 67) failed [ 1054.140189][T15059] FAT-fs (loop1): Directory bread(block 68) failed [ 1054.154669][T15059] FAT-fs (loop1): Directory bread(block 69) failed [ 1054.161343][T15059] FAT-fs (loop1): Directory bread(block 70) failed [ 1054.174415][T15059] FAT-fs (loop1): Directory bread(block 71) failed [ 1054.181485][T15059] FAT-fs (loop1): Directory bread(block 72) failed [ 1054.188253][T15059] FAT-fs (loop1): Directory bread(block 73) failed [ 1054.742934][ T5251] Bluetooth: hci0: command tx timeout [ 1056.820735][ T5251] Bluetooth: hci0: command tx timeout [ 1057.188387][T15044] netlink: 'syz.2.2182': attribute type 4 has an invalid length. [ 1057.199913][T15047] netlink: 'syz.2.2182': attribute type 4 has an invalid length. [ 1057.309594][T11506] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.544183][T15082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2193'. [ 1058.063424][T15087] loop4: detected capacity change from 0 to 2048 [ 1058.357020][T11506] bridge_slave_1: left allmulticast mode [ 1058.363184][T11506] bridge_slave_1: left promiscuous mode [ 1058.368916][T11506] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.465397][T15087] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1058.486199][T11506] bridge_slave_0: left allmulticast mode [ 1058.492029][T11506] bridge_slave_0: left promiscuous mode [ 1058.497783][T11506] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.522634][T15083] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1058.609213][T15083] EXT4-fs (loop4): Remounting filesystem read-only [ 1058.622966][T15083] EXT4-fs (loop4): error restoring inline_data for inode -- potential data loss! (inode 18, error -5) [ 1058.773094][T15098] loop2: detected capacity change from 0 to 1024 [ 1058.784766][T13633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1058.809901][T15098] ext3: Unknown parameter 'func' [ 1058.891694][ T5251] Bluetooth: hci0: command tx timeout [ 1059.075680][T15114] loop3: detected capacity change from 0 to 512 [ 1059.173800][T15114] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1059.993070][T15114] EXT4-fs (loop3): blocks per group (35) and clusters per group (32768) inconsistent [ 1060.137391][T15122] loop4: detected capacity change from 0 to 2048 [ 1060.162141][T15122] EXT4-fs: Ignoring removed mblk_io_submit option [ 1060.244267][T15122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1060.506569][T11506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1060.518281][T11506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1060.530173][T11506] bond0 (unregistering): Released all slaves [ 1060.746541][T15045] chnl_net:caif_netlink_parms(): no params data found [ 1060.963188][ T5251] Bluetooth: hci0: command tx timeout [ 1061.048083][T15122] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2205: bg 0: block 234: padding at end of block bitmap is not set [ 1061.143740][T15122] EXT4-fs (loop4): Remounting filesystem read-only [ 1062.331966][T13633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1062.636481][T15168] loop2: detected capacity change from 0 to 256 [ 1062.656763][T15168] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 1062.674577][T15168] syz.2.2210: attempt to access beyond end of device [ 1062.674577][T15168] loop2: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 1062.688699][T15168] syz.2.2210: attempt to access beyond end of device [ 1062.688699][T15168] loop2: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 1062.703583][T15168] syz.2.2210: attempt to access beyond end of device [ 1062.703583][T15168] loop2: rw=0, sector=34359738488, nr_sectors = 1 limit=256 [ 1062.717591][T15168] Buffer I/O error on dev loop2, logical block 34359738488, async page read [ 1062.726394][T15168] syz.2.2210: attempt to access beyond end of device [ 1062.726394][T15168] loop2: rw=0, sector=34359738489, nr_sectors = 1 limit=256 [ 1062.740324][T15168] Buffer I/O error on dev loop2, logical block 34359738489, async page read [ 1062.749460][T15168] syz.2.2210: attempt to access beyond end of device [ 1062.749460][T15168] loop2: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 1062.763577][T15168] Buffer I/O error on dev loop2, logical block 34359738490, async page read [ 1062.772518][T15168] syz.2.2210: attempt to access beyond end of device [ 1062.772518][T15168] loop2: rw=0, sector=34359738488, nr_sectors = 1 limit=256 [ 1062.786476][T15168] Buffer I/O error on dev loop2, logical block 34359738488, async page read [ 1062.795310][T15168] syz.2.2210: attempt to access beyond end of device [ 1062.795310][T15168] loop2: rw=0, sector=34359738489, nr_sectors = 1 limit=256 [ 1062.809506][T15168] Buffer I/O error on dev loop2, logical block 34359738489, async page read [ 1062.818261][T15168] syz.2.2210: attempt to access beyond end of device [ 1062.818261][T15168] loop2: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 1062.833083][T15168] Buffer I/O error on dev loop2, logical block 34359738490, async page read [ 1062.842060][ T29] audit: type=1800 audit(1728611691.248:418): pid=15168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2210" name="file0" dev="loop2" ino=1048882 res=0 errno=0 [ 1065.570549][T15186] loop2: detected capacity change from 0 to 512 [ 1065.618236][T15186] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1065.635769][T15186] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1065.659511][T15186] EXT4-fs (loop2): shut down requested (0) [ 1065.709810][T15186] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 1065.758074][T13766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1066.373193][T15214] loop3: detected capacity change from 0 to 256 [ 1066.465923][T15214] FAT-fs (loop3): Directory bread(block 64) failed [ 1066.477534][T15214] FAT-fs (loop3): Directory bread(block 65) failed [ 1066.504680][T15214] FAT-fs (loop3): Directory bread(block 66) failed [ 1066.511199][T15214] FAT-fs (loop3): Directory bread(block 67) failed [ 1066.518292][T15214] FAT-fs (loop3): Directory bread(block 68) failed [ 1066.527593][T15214] FAT-fs (loop3): Directory bread(block 69) failed [ 1066.536716][T15214] FAT-fs (loop3): Directory bread(block 70) failed [ 1066.545421][T15214] FAT-fs (loop3): Directory bread(block 71) failed [ 1066.782488][T15221] loop2: detected capacity change from 0 to 2048 [ 1066.921727][T15214] FAT-fs (loop3): Directory bread(block 72) failed [ 1066.928456][T15214] FAT-fs (loop3): Directory bread(block 73) failed [ 1067.283578][T15221] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0102] [ 1067.292045][T15221] System zones: 0-7 [ 1067.296992][T15221] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1067.442929][T11506] hsr_slave_0: left promiscuous mode [ 1067.469158][T11506] hsr_slave_1: left promiscuous mode [ 1067.546497][T11506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1067.584232][T15228] loop1: detected capacity change from 0 to 16 [ 1067.591129][T11506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1067.832516][T15228] erofs: (device loop1): mounted with root inode @ nid 36. [ 1067.898433][T11506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1067.938960][T11506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1068.375404][T11506] veth1_macvtap: left promiscuous mode [ 1068.381718][T15241] erofs: (device loop1): erofs_map_blocks_flatmode: inline data across blocks @ nid 36 [ 1068.420780][T11506] veth0_macvtap: left promiscuous mode [ 1068.439230][T15241] syz.1.2227: attempt to access beyond end of device [ 1068.439230][T15241] loop1: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 1068.463054][T11506] veth1_vlan: left promiscuous mode [ 1068.478508][T11506] veth0_vlan: left promiscuous mode [ 1069.381573][T11506] team0 (unregistering): Port device team_slave_1 removed [ 1069.450773][T11506] team0 (unregistering): Port device team_slave_0 removed [ 1069.557192][T13766] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1069.899871][T13766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1070.490373][T15261] loop2: detected capacity change from 0 to 512 [ 1070.498588][T15261] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1070.507557][T15261] EXT4-fs (loop2): blocks per group (35) and clusters per group (32768) inconsistent [ 1071.022730][T15045] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.047881][T15045] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.055427][T15045] bridge_slave_0: entered allmulticast mode [ 1071.062886][T15045] bridge_slave_0: entered promiscuous mode [ 1071.071460][T15045] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.079018][T15045] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.087944][T15045] bridge_slave_1: entered allmulticast mode [ 1071.258096][T15045] bridge_slave_1: entered promiscuous mode [ 1072.339315][T15287] loop4: detected capacity change from 0 to 16 [ 1072.354135][T15287] erofs: (device loop4): erofs_read_inode: negative i_size @ nid 36 [ 1075.193420][ T5251] Bluetooth: hci2: command 0x0406 tx timeout [ 1076.289368][T15045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1076.345165][T15045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1076.390199][T15324] loop2: detected capacity change from 0 to 512 [ 1076.404125][T15327] loop3: detected capacity change from 0 to 1024 [ 1076.537123][T15324] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1076.558178][T15324] EXT4-fs (loop2): 1 truncate cleaned up [ 1076.570412][T15324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1076.637361][T15327] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1076.649703][T15327] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1076.670456][T15045] team0: Port device team_slave_0 added [ 1076.826857][T15045] team0: Port device team_slave_1 added [ 1077.751903][T10890] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1077.765951][T13766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1078.010756][T15045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1078.032683][T15045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1081.308013][T15045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1081.350317][T15045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1081.386704][T15045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1081.435996][T15371] loop2: detected capacity change from 0 to 512 [ 1081.457706][T15371] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1081.466762][T15371] EXT4-fs (loop2): blocks per group (35) and clusters per group (32768) inconsistent [ 1081.479159][T15045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1082.589203][T15045] hsr_slave_0: entered promiscuous mode [ 1082.621079][T15045] hsr_slave_1: entered promiscuous mode [ 1084.664992][T15410] loop4: detected capacity change from 0 to 512 [ 1085.016972][T15410] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.2265: bad orphan inode 17 [ 1085.273001][T15410] ext4_test_bit(bit=16, block=4) = 1 [ 1085.388272][T15410] is_bad_inode(inode)=0 [ 1085.423246][T15410] NEXT_ORPHAN(inode)=0 [ 1085.432001][T15410] max_ino=32 [ 1085.435352][T15410] i_nlink=1 [ 1085.441356][T15410] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1085.509974][T15426] loop2: detected capacity change from 0 to 256 [ 1085.530290][T15426] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1086.004843][T15437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2269'. [ 1086.159921][T13633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1086.618380][T15045] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1086.661726][T15045] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1086.731740][T15434] loop3: detected capacity change from 0 to 32768 [ 1086.874710][T15045] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1087.627179][T15045] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1087.683945][T15462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2276'. [ 1087.746644][T15464] loop4: detected capacity change from 0 to 2048 [ 1087.816507][T15045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1087.831928][T15045] 8021q: adding VLAN 0 to HW filter on device team0 [ 1087.852808][T15045] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1087.863368][T15045] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1087.883572][T11957] bridge0: port 1(bridge_slave_0) entered blocking state [ 1087.890696][T11957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1087.898997][T11957] bridge0: port 2(bridge_slave_1) entered blocking state [ 1087.906080][T11957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1088.056295][T15434] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1088.099078][T15464] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1088.119093][T15473] loop2: detected capacity change from 0 to 256 [ 1088.125969][T15473] msdos: Bad value for 'gid' [ 1088.130588][T15473] msdos: Bad value for 'gid' [ 1088.141705][T15473] loop2: detected capacity change from 0 to 512 [ 1088.178565][T15473] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1088.186678][T15473] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1088.315842][T15473] System zones: 0-1, 15-15, 18-18, 34-34 [ 1088.321729][T15473] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1088.625756][ T29] audit: type=1804 audit(1728611716.861:419): pid=15481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2278" name="/newroot/78/file1/bus" dev="loop4" ino=1367 res=1 errno=0 [ 1088.665499][T15473] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 1088.856525][T15473] EXT4-fs warning (device loop2): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1088.875209][T15473] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 1088.882438][T15473] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.2279: bad orphan inode 16 [ 1088.892989][T15473] ext4_test_bit(bit=15, block=18) = 1 [ 1088.898459][T15473] is_bad_inode(inode)=0 [ 1088.905337][T15473] NEXT_ORPHAN(inode)=0 [ 1088.909425][T15473] max_ino=32 [ 1088.912633][T15473] i_nlink=2 [ 1088.918085][T15473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1089.346852][T15045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1089.376021][T15045] veth0_vlan: entered promiscuous mode [ 1089.386582][T15045] veth1_vlan: entered promiscuous mode [ 1089.408338][T15045] veth0_macvtap: entered promiscuous mode [ 1089.417105][T15045] veth1_macvtap: entered promiscuous mode [ 1089.431562][T15045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1089.458572][T15045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.485106][T15045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1089.496962][T15045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.104343][T15045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1090.133426][T15045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.163839][T10890] ocfs2: Unmounting device (7,3) on (node local) [ 1090.176011][T15045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1090.250526][T15045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.315611][T13766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1090.327499][T15045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1090.363687][T15045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1090.477772][T15045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.533860][T15045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1090.565414][T15504] loop2: detected capacity change from 0 to 512 [ 1090.603899][T15045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.635839][T15045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1090.686051][T15504] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.2282: bad orphan inode 17 [ 1090.738561][T15504] ext4_test_bit(bit=16, block=4) = 1 [ 1090.748718][T15045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.749676][T15514] loop4: detected capacity change from 0 to 512 [ 1090.784486][T15504] is_bad_inode(inode)=0 [ 1090.788681][T15504] NEXT_ORPHAN(inode)=0 [ 1090.792910][T15045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1090.824547][T15504] max_ino=32 [ 1090.827790][T15504] i_nlink=1 [ 1090.831803][T15504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1090.873602][T15045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.899276][T15514] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1090.914809][T15045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1090.967733][T15514] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1090.981236][T15045] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.990354][T15045] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.999526][T15045] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.008712][T15045] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.052963][T15514] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1091.092021][T11957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1091.102809][T15523] loop1: detected capacity change from 0 to 164 [ 1091.126268][T11957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1091.204696][T15525] input: syz0 as /devices/virtual/input/input12 [ 1091.245378][T15523] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1091.255300][T15523] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1091.264342][T15523] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1091.273437][T15523] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1091.591085][T15527] kAFS: unable to lookup cell 'onstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 1091.591085][T15527] vmx flags ' [ 1091.650429][T15523] vxlan0: entered promiscuous mode [ 1091.710639][T15523] vxlan0: entered allmulticast mode [ 1091.728617][T11506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1091.737469][T11506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1092.037821][T13766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1092.904317][T15544] loop4: detected capacity change from 0 to 1024 [ 1092.920297][T15544] EXT4-fs: Ignoring removed oldalloc option [ 1092.968895][T15544] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1093.131602][T15558] loop0: detected capacity change from 0 to 256 [ 1093.143601][T15558] msdos: Bad value for 'gid' [ 1093.168259][T15558] msdos: Bad value for 'gid' [ 1093.208108][T15544] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1093.239181][T15558] loop0: detected capacity change from 0 to 512 [ 1093.359421][T15558] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1093.395100][T15553] loop2: detected capacity change from 0 to 32768 [ 1093.404053][T15553] workqueue: name exceeds WQ_NAME_LEN. Truncating to: gfs2-glock/__Š°"_½z#²˱1Ä [ 1093.407789][T15558] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1093.425177][T15544] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1093.454809][T15553] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Trying to join cluster "lock_nolock", "__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9" [ 1093.469148][T15553] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Now mounting FS (format 0)... [ 1093.537232][T15553] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: journal 0 mapped with 16 extents in 0ms [ 1093.552890][ T5286] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0, already locked for use [ 1093.571023][T15558] System zones: 0-1, 15-15, 18-18, 34-34 [ 1093.582050][T15558] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1093.600194][ T5286] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0: Looking at journal... [ 1093.611576][T11132] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1093.653245][T15558] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 1093.693575][T15558] EXT4-fs warning (device loop0): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1094.478496][T15558] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 1094.486872][T15558] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.2291: bad orphan inode 16 [ 1094.516510][ T5286] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0: Journal head lookup took 916ms [ 1094.527222][T15558] ext4_test_bit(bit=15, block=18) = 1 [ 1094.527245][T15558] is_bad_inode(inode)=0 [ 1094.527254][T15558] NEXT_ORPHAN(inode)=0 [ 1094.527264][T15558] max_ino=32 [ 1094.527274][T15558] i_nlink=2 [ 1094.528182][T15558] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1094.534807][ T5286] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0: Done [ 1094.601327][T15553] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: first mount done, others may mount [ 1094.677504][T13633] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /82/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1094.727943][T11132] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1094.760111][T11132] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1094.841034][T11132] usb 2-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 1095.252060][T13633] EXT4-fs error (device loop4): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1095.379082][T11132] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.380025][T13633] EXT4-fs warning (device loop4): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 1095.399842][T11132] usb 2-1: config 0 descriptor?? [ 1095.400063][T13633] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /82/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1095.462311][T15583] loop3: detected capacity change from 0 to 512 [ 1095.509274][T15045] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1095.521152][T13633] EXT4-fs error (device loop4): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1095.546369][T13633] EXT4-fs warning (device loop4): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 1095.673272][T13633] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /82/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1095.743442][T13633] EXT4-fs error (device loop4): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1095.835002][T15583] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.2296: bad orphan inode 17 [ 1095.847096][T13633] EXT4-fs warning (device loop4): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 1095.847332][T15583] ext4_test_bit(bit=16, block=4) = 1 [ 1095.859047][T13633] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /82/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1095.877705][T15583] is_bad_inode(inode)=0 [ 1095.894922][T13633] EXT4-fs error (device loop4): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1095.959297][T15583] NEXT_ORPHAN(inode)=0 [ 1095.982630][T13633] EXT4-fs warning (device loop4): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 1095.997122][T13633] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /82/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1096.025702][T13633] EXT4-fs error (device loop4): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1096.053800][T13633] EXT4-fs warning (device loop4): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 1096.076818][T13633] EXT4-fs warning (device loop4): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 1096.084892][T15583] max_ino=32 [ 1096.107683][T15603] loop0: detected capacity change from 0 to 512 [ 1096.127637][T13633] EXT4-fs warning (device loop4): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 1096.147193][T15603] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1096.178838][T15603] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1096.197169][T15583] i_nlink=1 [ 1096.205648][T15583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1096.235085][T11132] glorious 0003:22D4:1503.0009: hidraw0: USB HID v0.00 Device [Glorious Model I] on usb-dummy_hcd.1-1/input0 [ 1096.235138][T13633] EXT4-fs warning (device loop4): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 1096.338376][T15603] EXT4-fs (loop0): shut down requested (0) [ 1096.459139][T15045] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1096.462058][T15549] loop1: detected capacity change from 0 to 512 [ 1096.578967][T15618] loop0: detected capacity change from 0 to 1024 [ 1096.605976][T13633] EXT4-fs warning (device loop4): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 1096.626303][T13633] EXT4-fs warning (device loop4): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 1096.657703][T15549] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1096.685182][T15618] hfsplus: xattr searching failed [ 1096.725017][T15549] EXT4-fs (loop1): 1 truncate cleaned up [ 1096.746387][T15549] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1096.874541][T10890] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1096.973619][ T5287] usb 2-1: USB disconnect, device number 15 [ 1097.291620][T15637] loop3: detected capacity change from 0 to 1024 [ 1097.520323][T15637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1097.919051][T15644] loop2: detected capacity change from 0 to 32768 [ 1098.036071][T15644] JBD2: Ignoring recovery information on journal [ 1098.137037][T12281] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1098.183501][T15651] loop0: detected capacity change from 0 to 256 [ 1098.248151][T15644] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1098.295412][T14523] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1098.590495][T15651] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 1098.617316][T15651] syz.0.2304: attempt to access beyond end of device [ 1098.617316][T15651] loop0: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 1099.467966][T15651] syz.0.2304: attempt to access beyond end of device [ 1099.467966][T15651] loop0: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 1099.676979][T15651] syz.0.2304: attempt to access beyond end of device [ 1099.676979][T15651] loop0: rw=0, sector=34359738488, nr_sectors = 1 limit=256 [ 1099.844643][T13766] ocfs2: Unmounting device (7,2) on (node local) [ 1099.934446][T15651] Buffer I/O error on dev loop0, logical block 34359738488, async page read [ 1100.027479][T15651] syz.0.2304: attempt to access beyond end of device [ 1100.027479][T15651] loop0: rw=0, sector=34359738489, nr_sectors = 1 limit=256 [ 1100.069343][ T5978] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.109610][T10890] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1100.124081][T15651] Buffer I/O error on dev loop0, logical block 34359738489, async page read [ 1100.203079][T15651] syz.0.2304: attempt to access beyond end of device [ 1100.203079][T15651] loop0: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 1100.447116][T15651] Buffer I/O error on dev loop0, logical block 34359738490, async page read [ 1101.262854][T15651] syz.0.2304: attempt to access beyond end of device [ 1101.262854][T15651] loop0: rw=0, sector=34359738488, nr_sectors = 1 limit=256 [ 1101.306554][T15651] Buffer I/O error on dev loop0, logical block 34359738488, async page read [ 1101.353837][T15651] syz.0.2304: attempt to access beyond end of device [ 1101.353837][T15651] loop0: rw=0, sector=34359738489, nr_sectors = 1 limit=256 [ 1101.369118][T15651] Buffer I/O error on dev loop0, logical block 34359738489, async page read [ 1101.378291][T15651] syz.0.2304: attempt to access beyond end of device [ 1101.378291][T15651] loop0: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 1101.392708][T15651] Buffer I/O error on dev loop0, logical block 34359738490, async page read [ 1101.438167][T15688] loop1: detected capacity change from 0 to 40427 [ 1101.498423][ T29] audit: type=1800 audit(1728611729.851:420): pid=15651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2304" name="file0" dev="loop0" ino=1048891 res=0 errno=0 [ 1101.528590][T15688] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1101.537818][T15688] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1101.607252][T15688] F2FS-fs (loop1): invalid crc value [ 1101.627836][ T5251] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1102.366176][ T5251] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1102.425665][T15688] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1102.476558][T15688] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1102.483642][T15688] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1102.525194][ T5251] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1102.548951][ T5978] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.576579][ T5251] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1102.596265][ T5251] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1102.625745][ T5251] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1103.003144][ T5978] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.153075][T15711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2316'. [ 1103.370517][ T5287] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1103.420200][ T5978] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.051543][T15727] loop1: detected capacity change from 0 to 1764 [ 1104.173764][T15687] chnl_net:caif_netlink_parms(): no params data found [ 1104.260498][T15727] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1104.714054][ T5287] usb 4-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.725605][ T5287] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 1104.734945][ T5287] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1104.744390][ T5287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.782163][ T5251] Bluetooth: hci2: command tx timeout [ 1105.371713][T15740] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1105.427469][T15687] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.509066][T15746] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1105.534792][T15687] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.629297][ T5287] usb 4-1: string descriptor 0 read error: -71 [ 1105.637435][ T5287] usb 4-1: USB disconnect, device number 9 [ 1105.639998][T15687] bridge_slave_0: entered allmulticast mode [ 1105.664702][T15745] loop0: detected capacity change from 0 to 1764 [ 1105.672166][T15745] isofs_fill_super: bread failed, dev=loop0, iso_blknum=37807, block=75614 [ 1105.687812][T15687] bridge_slave_0: entered promiscuous mode [ 1105.698277][T15750] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1106.046477][T15736] pim6reg1: entered promiscuous mode [ 1106.102828][T15736] pim6reg1: entered allmulticast mode [ 1106.348281][T15753] loop2: detected capacity change from 0 to 512 [ 1106.356842][T15753] journal_path: Lookup failure for './file0/file0' [ 1106.363961][T15753] EXT4-fs: error: could not find journal device path [ 1106.524882][T15687] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.565279][T15687] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.573215][T15687] bridge_slave_1: entered allmulticast mode [ 1106.580190][T15687] bridge_slave_1: entered promiscuous mode [ 1106.780149][ T5978] bridge_slave_1: left allmulticast mode [ 1106.800336][ T5978] bridge_slave_1: left promiscuous mode [ 1106.809325][ T5978] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.835511][ T5978] bridge_slave_0: left allmulticast mode [ 1106.838704][ T5251] Bluetooth: hci2: command tx timeout [ 1106.842157][ T5978] bridge_slave_0: left promiscuous mode [ 1106.853343][T15761] netlink: 'syz.2.2326': attribute type 36 has an invalid length. [ 1106.853655][ T5978] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.953593][T15763] loop1: detected capacity change from 0 to 16 [ 1106.965282][T15763] erofs: (device loop1): mounted with root inode @ nid 36. [ 1106.981520][T15763] erofs: (device loop1): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 1106.991603][T15763] erofs: (device loop1): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 1107.002516][T15763] erofs: (device loop1): z_erofs_readahead: readahead error at folio 13 @ nid 36 [ 1107.012676][T15763] erofs: (device loop1): z_erofs_readahead: readahead error at folio 8 @ nid 36 [ 1107.022736][T15763] syz.1.2324: attempt to access beyond end of device [ 1107.022736][T15763] loop1: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 1107.037420][T15763] syz.1.2324: attempt to access beyond end of device [ 1107.037420][T15763] loop1: rw=524288, sector=13478624032, nr_sectors = 24 limit=16 [ 1108.001038][T15772] loop3: detected capacity change from 0 to 256 [ 1108.932589][ T5251] Bluetooth: hci2: command tx timeout [ 1108.945069][T15772] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe9e488b, utbl_chksum : 0xe619d30d) [ 1108.964830][T15772] exFAT-fs (loop3): error, invalid access to FAT bad cluster (entry 0x00000005) [ 1108.974020][T15772] exFAT-fs (loop3): Filesystem has been set read-only [ 1108.980937][T15772] exFAT-fs (loop3): failed to initialize root inode [ 1110.712859][T15787] loop0: detected capacity change from 0 to 256 [ 1110.818595][T15787] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 1110.863771][T15787] syz.0.2327: attempt to access beyond end of device [ 1110.863771][T15787] loop0: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 1110.894311][T15787] syz.0.2327: attempt to access beyond end of device [ 1110.894311][T15787] loop0: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 1110.909400][T15787] syz.0.2327: attempt to access beyond end of device [ 1110.909400][T15787] loop0: rw=0, sector=34359738488, nr_sectors = 1 limit=256 [ 1110.931663][T15790] loop3: detected capacity change from 0 to 512 [ 1110.953052][T15787] Buffer I/O error on dev loop0, logical block 34359738488, async page read [ 1110.965590][T15790] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1110.980197][T15790] EXT4-fs (loop3): blocks per group (35) and clusters per group (32768) inconsistent [ 1111.001706][T15787] syz.0.2327: attempt to access beyond end of device [ 1111.001706][T15787] loop0: rw=0, sector=34359738489, nr_sectors = 1 limit=256 [ 1111.056736][ T5251] Bluetooth: hci2: command tx timeout [ 1111.060580][T15787] Buffer I/O error on dev loop0, logical block 34359738489, async page read [ 1111.092046][T15787] syz.0.2327: attempt to access beyond end of device [ 1111.092046][T15787] loop0: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 1111.137331][T15787] Buffer I/O error on dev loop0, logical block 34359738490, async page read [ 1111.206743][T15787] syz.0.2327: attempt to access beyond end of device [ 1111.206743][T15787] loop0: rw=0, sector=34359738488, nr_sectors = 1 limit=256 [ 1111.245396][T15787] Buffer I/O error on dev loop0, logical block 34359738488, async page read [ 1111.257330][T15787] syz.0.2327: attempt to access beyond end of device [ 1111.257330][T15787] loop0: rw=0, sector=34359738489, nr_sectors = 1 limit=256 [ 1111.257610][ T5978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1111.271314][T15787] Buffer I/O error on dev loop0, logical block 34359738489, async page read [ 1111.292267][T15787] syz.0.2327: attempt to access beyond end of device [ 1111.292267][T15787] loop0: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 1111.309588][T15787] Buffer I/O error on dev loop0, logical block 34359738490, async page read [ 1111.318742][ T5978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1111.330736][ T5978] bond0 (unregistering): Released all slaves [ 1111.337892][ T29] audit: type=1800 audit(1728611739.894:421): pid=15787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2327" name="file0" dev="loop0" ino=1048893 res=0 errno=0 [ 1111.533299][T15687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1111.579818][T15687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1111.985493][T15814] loop1: detected capacity change from 0 to 512 [ 1112.006940][T15811] loop2: detected capacity change from 0 to 1764 [ 1112.054339][T15811] isofs_fill_super: bread failed, dev=loop2, iso_blknum=37807, block=75614 [ 1112.092022][T15810] loop0: detected capacity change from 0 to 1024 [ 1112.114463][T15810] ext3: Unknown parameter 'func' [ 1112.124552][T15814] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1112.141090][T15814] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1112.169783][T15814] EXT4-fs (loop1): shut down requested (0) [ 1112.294687][T15819] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 1112.515524][T12281] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1113.056784][T15825] loop1: detected capacity change from 0 to 256 [ 1113.636018][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1113.730825][ T5288] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1113.883027][ T5288] usb 2-1: Using ep0 maxpacket: 32 [ 1113.897230][ T5288] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1113.909910][ T5288] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1113.919661][ T5288] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1113.928045][ T5288] usb 2-1: Product: syz [ 1113.932376][ T5288] usb 2-1: Manufacturer: syz [ 1113.936994][ T5288] usb 2-1: SerialNumber: syz [ 1113.944035][ T5288] usb 2-1: config 0 descriptor?? [ 1113.957681][T15833] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1114.182228][T15832] [ 1114.184583][T15832] ============================================ [ 1114.190711][T15832] WARNING: possible recursive locking detected [ 1114.196860][T15832] 6.12.0-rc2-next-20241010-syzkaller #0 Not tainted [ 1114.203437][T15832] -------------------------------------------- [ 1114.209567][T15832] syz.1.2344/15832 is trying to acquire lock: [ 1114.215615][T15832] ffffffff8f69c3a8 (chaoskey_list_lock){+.+.}-{3:3}, at: chaoskey_release+0x169/0x2f0 [ 1114.225207][T15832] [ 1114.225207][T15832] but task is already holding lock: [ 1114.232557][T15832] ffffffff8f69c3a8 (chaoskey_list_lock){+.+.}-{3:3}, at: chaoskey_release+0x79/0x2f0 [ 1114.242044][T15832] [ 1114.242044][T15832] other info that might help us debug this: [ 1114.250086][T15832] Possible unsafe locking scenario: [ 1114.250086][T15832] [ 1114.257521][T15832] CPU0 [ 1114.260788][T15832] ---- [ 1114.264052][T15832] lock(chaoskey_list_lock); [ 1114.268718][T15832] lock(chaoskey_list_lock); [ 1114.273379][T15832] [ 1114.273379][T15832] *** DEADLOCK *** [ 1114.273379][T15832] [ 1114.281507][T15832] May be due to missing lock nesting notation [ 1114.281507][T15832] [ 1114.289810][T15832] 1 lock held by syz.1.2344/15832: [ 1114.294907][T15832] #0: ffffffff8f69c3a8 (chaoskey_list_lock){+.+.}-{3:3}, at: chaoskey_release+0x79/0x2f0 [ 1114.304826][T15832] [ 1114.304826][T15832] stack backtrace: [ 1114.310711][T15832] CPU: 1 UID: 0 PID: 15832 Comm: syz.1.2344 Not tainted 6.12.0-rc2-next-20241010-syzkaller #0 [ 1114.320940][T15832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1114.330981][T15832] Call Trace: [ 1114.334246][T15832] [ 1114.337165][T15832] dump_stack_lvl+0x241/0x360 [ 1114.341840][T15832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1114.347029][T15832] ? __pfx__printk+0x10/0x10 [ 1114.351606][T15832] ? lockdep_unlock+0x16a/0x300 [ 1114.356452][T15832] print_deadlock_bug+0x483/0x620 [ 1114.361470][T15832] validate_chain+0x15e2/0x5920 [ 1114.366323][T15832] ? __pfx_validate_chain+0x10/0x10 [ 1114.371508][T15832] ? __pfx_lock_release+0x10/0x10 [ 1114.376519][T15832] ? unwind_next_frame+0x18e6/0x22d0 [ 1114.381788][T15832] ? validate_chain+0x11e/0x5920 [ 1114.386711][T15832] ? preempt_count_add+0x93/0x190 [ 1114.391735][T15832] ? __kernel_text_address+0xd/0x40 [ 1114.396928][T15832] ? unwind_get_return_address+0x4d/0x90 [ 1114.402547][T15832] ? mark_lock+0x9a/0x360 [ 1114.406864][T15832] __lock_acquire+0x1384/0x2050 [ 1114.411707][T15832] lock_acquire+0x1ed/0x550 [ 1114.416196][T15832] ? chaoskey_release+0x169/0x2f0 [ 1114.421211][T15832] ? __pfx_lock_acquire+0x10/0x10 [ 1114.426223][T15832] ? __pfx___might_resched+0x10/0x10 [ 1114.431499][T15832] ? chaoskey_release+0x15b/0x2f0 [ 1114.436511][T15832] ? __pfx_lock_release+0x10/0x10 [ 1114.441531][T15832] __mutex_lock+0x136/0xd70 [ 1114.446028][T15832] ? chaoskey_release+0x169/0x2f0 [ 1114.451040][T15832] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1114.456660][T15832] ? chaoskey_release+0x169/0x2f0 [ 1114.461673][T15832] ? __pfx___mutex_lock+0x10/0x10 [ 1114.466685][T15832] ? __pfx___fsnotify_parent+0x10/0x10 [ 1114.472135][T15832] chaoskey_release+0x169/0x2f0 [ 1114.476997][T15832] ? __pfx_chaoskey_release+0x10/0x10 [ 1114.482371][T15832] __fput+0x23c/0xa50 [ 1114.486346][T15832] task_work_run+0x24f/0x310 [ 1114.490934][T15832] ? _raw_spin_unlock+0x28/0x50 [ 1114.495782][T15832] ? __pfx_task_work_run+0x10/0x10 [ 1114.500887][T15832] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1114.506613][T15832] syscall_exit_to_user_mode+0x168/0x370 [ 1114.512239][T15832] do_syscall_64+0x100/0x230 [ 1114.516822][T15832] ? clear_bhb_loop+0x35/0x90 [ 1114.521496][T15832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.527391][T15832] RIP: 0033:0x7fa9b357dff9 [ 1114.531799][T15832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1114.551400][T15832] RSP: 002b:00007ffeedcf7728 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1114.559805][T15832] RAX: 0000000000000000 RBX: 0000000000110695 RCX: 00007fa9b357dff9 [ 1114.567762][T15832] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1114.575809][T15832] RBP: 00007fa9b3737a80 R08: 0000000000000001 R09: 00007ffeedcf7a1f SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1114.583767][T15832] R10: 00007fa9b3400000 R11: 0000000000000246 R12: 000000000011098b [ 1114.591725][T15832] R13: 00007ffeedcf7830 R14: 0000000000000032 R15: ffffffffffffffff [ 1114.599693][T15832] [ 1115.792898][T15687] team0: Port device team_slave_0 added [ 1115.999909][ T5978] hsr_slave_0: left promiscuous mode [ 1116.037663][ T5978] hsr_slave_1: left promiscuous mode [ 1116.081485][ T5978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1116.096314][ T5978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1116.104482][ T5978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1116.121168][ T5978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1116.149694][ T5978] veth1_macvtap: left promiscuous mode [ 1116.155217][ T5978] veth0_macvtap: left promiscuous mode [ 1116.163248][ T5978] veth1_vlan: left promiscuous mode [ 1116.169583][ T5978] veth0_vlan: left promiscuous mode [ 1116.349075][ T5978] team0 (unregistering): Port device team_slave_1 removed [ 1116.371752][ T5978] team0 (unregistering): Port device team_slave_0 removed [ 1116.903568][ T5978] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.966552][ T5978] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.023770][ T5978] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.074819][ T5978] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.147781][ T5978] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.220057][ T5978] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.263456][ T5978] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.300586][ T5978] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.381136][ T5978] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.418424][ T5978] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.465903][ T5978] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.508171][ T5978] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.588139][ T5978] bridge_slave_1: left allmulticast mode [ 1117.593917][ T5978] bridge_slave_1: left promiscuous mode [ 1117.599575][ T5978] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.608369][ T5978] bridge_slave_0: left allmulticast mode [ 1117.615580][ T5978] bridge_slave_0: left promiscuous mode [ 1117.621379][ T5978] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.629501][ T5978] bridge_slave_1: left allmulticast mode [ 1117.637136][ T5978] bridge_slave_1: left promiscuous mode [ 1117.643392][ T5978] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.651608][ T5978] bridge_slave_0: left allmulticast mode [ 1117.657236][ T5978] bridge_slave_0: left promiscuous mode [ 1117.663066][ T5978] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.672302][ T5978] bridge_slave_1: left allmulticast mode [ 1117.677930][ T5978] bridge_slave_1: left promiscuous mode [ 1117.683744][ T5978] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.692562][ T5978] bridge_slave_0: left allmulticast mode [ 1117.698185][ T5978] bridge_slave_0: left promiscuous mode [ 1117.703978][ T5978] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.714780][ T5978] bridge_slave_1: left allmulticast mode [ 1117.720926][ T5978] bridge_slave_1: left promiscuous mode [ 1117.726541][ T5978] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.734628][ T5978] bridge_slave_0: left allmulticast mode [ 1117.740446][ T5978] bridge_slave_0: left promiscuous mode [ 1117.746048][ T5978] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.147288][ T5978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1118.156988][ T5978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1118.166553][ T5978] bond0 (unregistering): Released all slaves [ 1118.177710][ T5978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1118.188366][ T5978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1118.199037][ T5978] bond0 (unregistering): Released all slaves [ 1118.212946][ T5978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1118.222944][ T5978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1118.232402][ T5978] bond0 (unregistering): Released all slaves [ 1118.242750][ T5978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1118.253607][ T5978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1118.263044][ T5978] bond0 (unregistering): Released all slaves [ 1118.739800][ T5978] hsr_slave_0: left promiscuous mode [ 1118.747409][ T5978] hsr_slave_1: left promiscuous mode [ 1118.754869][ T5978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1118.764099][ T5978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1118.773341][ T5978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1118.780774][ T5978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1118.790788][ T5978] hsr_slave_0: left promiscuous mode [ 1118.798333][ T5978] hsr_slave_1: left promiscuous mode [ 1118.804431][ T5978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1118.816030][ T5978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1118.825474][ T5978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1118.834004][ T5978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1118.845679][ T5978] hsr_slave_0: left promiscuous mode [ 1118.851826][ T5978] hsr_slave_1: left promiscuous mode [ 1118.857620][ T5978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1118.867111][ T5978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1118.875472][ T5978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1118.884876][ T5978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1118.902866][ T5978] veth1_macvtap: left promiscuous mode [ 1118.908543][ T5978] veth0_macvtap: left promiscuous mode [ 1118.914175][ T5978] veth1_vlan: left promiscuous mode [ 1118.919591][ T5978] veth0_vlan: left promiscuous mode [ 1118.925362][ T5978] veth1_macvtap: left promiscuous mode [ 1118.930899][ T5978] veth0_macvtap: left promiscuous mode [ 1118.936403][ T5978] veth1_vlan: left promiscuous mode [ 1118.941872][ T5978] veth0_vlan: left promiscuous mode [ 1118.947647][ T5978] veth1_macvtap: left promiscuous mode [ 1118.954611][ T5978] veth0_macvtap: left promiscuous mode [ 1118.960141][ T5978] veth1_vlan: left promiscuous mode [ 1118.965352][ T5978] veth0_vlan: left promiscuous mode [ 1119.151918][ T5978] team0 (unregistering): Port device team_slave_1 removed [ 1119.176169][ T5978] team0 (unregistering): Port device team_slave_0 removed [ 1119.308318][ T5978] team0 (unregistering): Port device team_slave_1 removed [ 1119.332231][ T5978] team0 (unregistering): Port device team_slave_0 removed [ 1119.529705][ T5978] team0 (unregistering): Port device team_slave_1 removed [ 1119.554918][ T5978] team0 (unregistering): Port device team_slave_0 removed [ 1119.626182][ T5978] team0 (unregistering): Port device team_slave_0 removed [ 1120.430971][ T5978] IPVS: stop unused estimator thread 0...